diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 934f89f6..0b89cae9 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -48,10 +48,10 @@ jobs:
         env:
           DISABLE_TFLINT: 1
           ENABLE_PARALLEL: 0
-          EXCLUDE_LINT_DIRS: \./5-app-infra/6-machine-learning|\./5-app-infra/projects/machine-learning
+          EXCLUDE_LINT_DIRS: \./5-app-infra/6-machine-learning|\./5-app-infra/projects/machine-learning|\./docs/assets/terraform
 
       - run: docker run --rm -e DISABLE_TFLINT -e ENABLE_PARALLEL -e EXCLUDE_LINT_DIRS -v ${{ github.workspace }}:/workspace ${{ steps.variables.outputs.dev-tools }} /usr/local/bin/test_lint.sh
         env:
           DISABLE_TFLINT: 1
           ENABLE_PARALLEL: 0
-          EXCLUDE_LINT_DIRS: \./5-app-infra/6-machine-learning|\./5-app-infra/projects/machine-learning
+          EXCLUDE_LINT_DIRS: \./5-app-infra/6-machine-learning|\./5-app-infra/projects/machine-learning|\./docs/assets/terraform
diff --git a/0-bootstrap/README-GitHub.md b/0-bootstrap/README-GitHub.md
index 27737b9b..f7e635e4 100644
--- a/0-bootstrap/README-GitHub.md
+++ b/0-bootstrap/README-GitHub.md
@@ -61,13 +61,13 @@ for each one of the repositories.
 
 ### Deploying step 0-bootstrap
 
-1. Clone [terraform-example-foundation](https://github.com/terraform-google-modules/terraform-example-foundation) into your local environment.
+1. Clone [terraform-google-enterprise-genai](https://github.com/terraform-google-modules/terraform-google-enterprise-genai) into your local environment.
 
    ```bash
-   git clone https://github.com/terraform-google-modules/terraform-example-foundation.git
+   git clone https://github.com/terraform-google-modules/terraform-google-enterprise-genai.git
    ```
 
-1. Clone the private repository you created to host the `0-bootstrap` terraform configuration at the same level of the `terraform-example-foundation` folder.
+1. Clone the private repository you created to host the `0-bootstrap` terraform configuration at the same level of the `terraform-google-enterprise-genai` folder.
 You must be [authenticated to GitHub](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/about-authentication-to-github).
 
    ```bash
@@ -78,7 +78,7 @@ You must be [authenticated to GitHub](https://docs.github.com/en/authentication/
 
    ```bash
    gcp-bootstrap/
-   terraform-example-foundation/
+   terraform-google-enterprise-genai/
    ```
 
 1. Navigate into the repo. All subsequent
@@ -110,11 +110,11 @@ You must be [authenticated to GitHub](https://docs.github.com/en/authentication/
    ```bash
    mkdir -p envs/shared
 
-   cp -RT ../terraform-example-foundation/0-bootstrap/ ./envs/shared
-   cp -RT ../terraform-example-foundation/policy-library/ ./policy-library
+   cp -RT ../terraform-google-enterprise-genai/0-bootstrap/ ./envs/shared
+   cp -RT ../terraform-google-enterprise-genai/policy-library/ ./policy-library
    mkdir -p .github/workflows
-   cp ../terraform-example-foundation/build/github-tf-* ./.github/workflows/
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp ../terraform-google-enterprise-genai/build/github-tf-* ./.github/workflows/
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    cd ./envs/shared
    ```
@@ -153,7 +153,7 @@ export the GitHub fine grained access token as an environment variable:
 1. Use the helper script [validate-requirements.sh](../scripts/validate-requirements.sh) to validate your environment:
 
    ```bash
-   ../../../terraform-example-foundation/scripts/validate-requirements.sh  -o <ORGANIZATION_ID> -b <BILLING_ACCOUNT_ID> -u <END_USER_EMAIL> -e
+   ../../../terraform-google-enterprise-genai/scripts/validate-requirements.sh  -o <ORGANIZATION_ID> -b <BILLING_ACCOUNT_ID> -u <END_USER_EMAIL> -e
    ```
 
    **Note:** The script is not able to validate if the user is in a Cloud Identity or Google Workspace group with the required roles.
@@ -249,7 +249,7 @@ we recommend that you request 50 additional projects for the **projects step ser
 
 ## Deploying step 1-org
 
-1. Clone the repository you created to host the `1-org` terraform configuration at the same level of the `terraform-example-foundation` folder.
+1. Clone the repository you created to host the `1-org` terraform configuration at the same level of the `terraform-google-enterprise-genai` folder.
 
    ```bash
    git clone git@github.com:<GITHUB-OWNER>/<GITHUB-ORGANIZATION-REPO>.git gcp-org
@@ -281,11 +281,11 @@ we recommend that you request 50 additional projects for the **projects step ser
 1. Copy contents of foundation to new repo.
 
    ```bash
-   cp -RT ../terraform-example-foundation/1-org/ .
-   cp -RT ../terraform-example-foundation/policy-library/ ./policy-library
+   cp -RT ../terraform-google-enterprise-genai/1-org/ .
+   cp -RT ../terraform-google-enterprise-genai/policy-library/ ./policy-library
    mkdir -p .github/workflows
-   cp ../terraform-example-foundation/build/github-tf-* ./.github/workflows/
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp ../terraform-google-enterprise-genai/build/github-tf-* ./.github/workflows/
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
@@ -365,7 +365,7 @@ See the shared folder [README.md](../1-org/envs/shared/README.md#inputs) for add
 
 ## Deploying step 2-environments
 
-1. Clone the repository you created to host the `2-environments` terraform configuration at the same level of the `terraform-example-foundation` folder.
+1. Clone the repository you created to host the `2-environments` terraform configuration at the same level of the `terraform-google-enterprise-genai` folder.
 
    ```bash
    git clone git@github.com:<GITHUB-OWNER>/<GITHUB-ENVIRONMENTS-REPO>.git gcp-environments
@@ -404,11 +404,11 @@ See the shared folder [README.md](../1-org/envs/shared/README.md#inputs) for add
 1. Copy contents of foundation to new repo.
 
    ```bash
-   cp -RT ../terraform-example-foundation/2-environments/ .
-   cp -RT ../terraform-example-foundation/policy-library/ ./policy-library
+   cp -RT ../terraform-google-enterprise-genai/2-environments/ .
+   cp -RT ../terraform-google-enterprise-genai/policy-library/ ./policy-library
    mkdir -p .github/workflows
-   cp ../terraform-example-foundation/build/github-tf-* ./.github/workflows/
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp ../terraform-google-enterprise-genai/build/github-tf-* ./.github/workflows/
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
@@ -472,7 +472,7 @@ or go to [Deploying step 3-networks-hub-and-spoke](#deploying-step-3-networks-hu
 
 ## Deploying step 3-networks-dual-svpc
 
-1. Clone the repository you created to host the `3-networks-dual-svpc` terraform configuration at the same level of the `terraform-example-foundation` folder.
+1. Clone the repository you created to host the `3-networks-dual-svpc` terraform configuration at the same level of the `terraform-google-enterprise-genai` folder.
 
    ```bash
    git clone git@github.com:<GITHUB-OWNER>/<GITHUB-NETWORKS-REPO>.git gcp-networks
@@ -510,11 +510,11 @@ or go to [Deploying step 3-networks-hub-and-spoke](#deploying-step-3-networks-hu
 1. Copy contents of foundation to new repo.
 
    ```bash
-   cp -RT ../terraform-example-foundation/3-networks-dual-svpc/ .
-   cp -RT ../terraform-example-foundation/policy-library/ ./policy-library
+   cp -RT ../terraform-google-enterprise-genai/3-networks-dual-svpc/ .
+   cp -RT ../terraform-google-enterprise-genai/policy-library/ ./policy-library
    mkdir -p .github/workflows
-   cp ../terraform-example-foundation/build/github-tf-* ./.github/workflows/
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp ../terraform-google-enterprise-genai/build/github-tf-* ./.github/workflows/
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
@@ -635,7 +635,7 @@ An environment variable `GOOGLE_IMPERSONATE_SERVICE_ACCOUNT` will be set with th
 
 ## Deploying step 3-networks-hub-and-spoke
 
-1. Clone the repository you created to host the `3-networks-hub-and-spoke` terraform configuration at the same level of the `terraform-example-foundation` folder.
+1. Clone the repository you created to host the `3-networks-hub-and-spoke` terraform configuration at the same level of the `terraform-google-enterprise-genai` folder.
 
    ```bash
    git clone git@github.com:<GITHUB-OWNER>/<GITHUB-NETWORKS-REPO>.git gcp-networks
@@ -673,11 +673,11 @@ An environment variable `GOOGLE_IMPERSONATE_SERVICE_ACCOUNT` will be set with th
 1. Copy contents of foundation to new repo.
 
    ```bash
-   cp -RT ../terraform-example-foundation/3-networks-hub-and-spoke/ .
-   cp -RT ../terraform-example-foundation/policy-library/ ./policy-library
+   cp -RT ../terraform-google-enterprise-genai/3-networks-hub-and-spoke/ .
+   cp -RT ../terraform-google-enterprise-genai/policy-library/ ./policy-library
    mkdir -p .github/workflows
-   cp ../terraform-example-foundation/build/github-tf-* ./.github/workflows/
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp ../terraform-google-enterprise-genai/build/github-tf-* ./.github/workflows/
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
@@ -786,7 +786,7 @@ An environment variable `GOOGLE_IMPERSONATE_SERVICE_ACCOUNT` will be set with th
 
 ## Deploying step 4-projects
 
-1. Clone the repository you created to host the `4-projects` terraform configuration at the same level of the `terraform-example-foundation` folder.
+1. Clone the repository you created to host the `4-projects` terraform configuration at the same level of the `terraform-google-enterprise-genai` folder.
 
    ```bash
    git clone git@github.com:<GITHUB-OWNER>/<GITHUB-PROJECTS-REPO>.git gcp-projects
@@ -825,11 +825,11 @@ An environment variable `GOOGLE_IMPERSONATE_SERVICE_ACCOUNT` will be set with th
 1. Copy contents of foundation to new repo.
 
    ```bash
-   cp -RT ../terraform-example-foundation/4-projects/ .
-   cp -RT ../terraform-example-foundation/policy-library/ ./policy-library
+   cp -RT ../terraform-google-enterprise-genai/4-projects/ .
+   cp -RT ../terraform-google-enterprise-genai/policy-library/ ./policy-library
    mkdir -p .github/workflows
-   cp ../terraform-example-foundation/build/github-tf-* ./.github/workflows/
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp ../terraform-google-enterprise-genai/build/github-tf-* ./.github/workflows/
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
diff --git a/0-bootstrap/README-Jenkins.md b/0-bootstrap/README-Jenkins.md
index 497e7137..77e081ef 100644
--- a/0-bootstrap/README-Jenkins.md
+++ b/0-bootstrap/README-Jenkins.md
@@ -51,7 +51,7 @@ You arrived to these instructions because you are using the `jenkins_bootstrap`
   - Access to the Jenkins Controller Web UI
   - [SSH Agent Jenkins plugin](https://plugins.jenkins.io/ssh-agent) installed in your Jenkins Controller
   - Private IP address for the Jenkins Agent: usually assigned by your network administrator. You will use this IP for the GCE instance that will be created in the `prj-b-cicd` GCP Project in step [II. Create the SEED and CI/CD projects using Terraform](#ii-create-the-seed-and-cicd-projects-using-terraform).
-  - Access to create five Git repositories, one for each directory in this [monorepo](https://github.com/terraform-google-modules/terraform-example-foundation) (`0-bootstrap, 1-org, 2-environments, 3-networks, 4-projects`). These are usually private repositories that might be on-prem.
+  - Access to create five Git repositories, one for each directory in this [monorepo](https://github.com/terraform-google-modules/terraform-google-enterprise-genai) (`0-bootstrap, 1-org, 2-environments, 3-networks, 4-projects`). These are usually private repositories that might be on-prem.
 
 1. Generate a SSH key pair. In the Jenkins Controller host, use the `ssh-keygen` command to generate a SSH key pair.
    - You will need this key pair to enable authentication between the Controller and Agent. Although the key pair can be generated in any linux machine, it is recommended not to copy the secret private key from one host to another, so you probably want to do this in the Jenkins Controller host command line.
@@ -78,7 +78,7 @@ You arrived to these instructions because you are using the `jenkins_bootstrap`
    - Jenkins Agent’s private IP address (usually assigned by your Network Administrator. In the provided examples this IP is "172.16.1.6"). This private IP will be reachable through the VPN connection that you will create later.
 
 1. Create five individual Git repositories in your Git server (This might be a task delegated to your infrastructure team)
-   - Note that although this infrastructure code is distributed to you as a [monorepo](https://github.com/terraform-google-modules/terraform-example-foundation), you will store the code in five different repositories, one for each directory:
+   - Note that although this infrastructure code is distributed to you as a [monorepo](https://github.com/terraform-google-modules/terraform-google-enterprise-genai), you will store the code in five different repositories, one for each directory:
 
    ```text
    ./0-bootstrap
@@ -113,7 +113,7 @@ You arrived to these instructions because you are using the `jenkins_bootstrap`
 1. Clone this mono-repository with:
 
    ```bash
-   git clone https://github.com/terraform-google-modules/terraform-example-foundation
+   git clone https://github.com/terraform-google-modules/terraform-google-enterprise-genai
    ```
 
 1. Clone the repository you created to host the `0-bootstrap` directory with:
@@ -132,7 +132,7 @@ You arrived to these instructions because you are using the `jenkins_bootstrap`
 1. Copy contents of foundation to new repo (modify accordingly based on your current directory).
 
    ```bash
-   cp -RT ../terraform-example-foundation/0-bootstrap/ .
+   cp -RT ../terraform-google-enterprise-genai/0-bootstrap/ .
    ```
 
 1. Activate the Jenkins module and disable the Cloud Build module. This implies manually editing the following files:
@@ -313,10 +313,10 @@ Here you will configure a VPN Network tunnel to enable connectivity between the
 1. Copy contents of foundation to new repo.
 
    ```bash
-   cp -RT ../terraform-example-foundation/1-org/ .
-   cp -RT ../terraform-example-foundation/policy-library/ ./policy-library
-   cp ../terraform-example-foundation/build/Jenkinsfile .
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp -RT ../terraform-google-enterprise-genai/1-org/ .
+   cp -RT ../terraform-google-enterprise-genai/policy-library/ ./policy-library
+   cp ../terraform-google-enterprise-genai/build/Jenkinsfile .
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
@@ -419,10 +419,10 @@ Here you will configure a VPN Network tunnel to enable connectivity between the
 1. Copy contents of foundation to new repo.
 
    ```bash
-   cp -RT ../terraform-example-foundation/2-environments/ .
-   cp -RT ../terraform-example-foundation/policy-library/ ./policy-library
-   cp ../terraform-example-foundation/build/Jenkinsfile .
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp -RT ../terraform-google-enterprise-genai/2-environments/ .
+   cp -RT ../terraform-google-enterprise-genai/policy-library/ ./policy-library
+   cp ../terraform-google-enterprise-genai/build/Jenkinsfile .
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
@@ -525,10 +525,10 @@ Here you will configure a VPN Network tunnel to enable connectivity between the
 1. Copy contents of foundation to new repo.
 
    ```bash
-   cp -RT ../terraform-example-foundation/3-networks-dual-svpc/ .
-   cp -RT ../terraform-example-foundation/policy-library/ ./policy-library
-   cp ../terraform-example-foundation/build/Jenkinsfile .
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp -RT ../terraform-google-enterprise-genai/3-networks-dual-svpc/ .
+   cp -RT ../terraform-google-enterprise-genai/policy-library/ ./policy-library
+   cp ../terraform-google-enterprise-genai/build/Jenkinsfile .
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
@@ -678,10 +678,10 @@ Here you will configure a VPN Network tunnel to enable connectivity between the
 1. Copy contents of foundation to new repo.
 
    ```bash
-   cp -RT ../terraform-example-foundation/3-networks-hub-and-spoke/ .
-   cp -RT ../terraform-example-foundation/policy-library/ ./policy-library
-   cp ../terraform-example-foundation/build/Jenkinsfile .
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp -RT ../terraform-google-enterprise-genai/3-networks-hub-and-spoke/ .
+   cp -RT ../terraform-google-enterprise-genai/policy-library/ ./policy-library
+   cp ../terraform-google-enterprise-genai/build/Jenkinsfile .
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
@@ -831,10 +831,10 @@ Here you will configure a VPN Network tunnel to enable connectivity between the
 1. Copy contents of foundation to new repo.
 
    ```bash
-   cp -RT ../terraform-example-foundation/4-projects/ .
-   cp -RT ../terraform-example-foundation/policy-library/ ./policy-library
-   cp ../terraform-example-foundation/build/Jenkinsfile .
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp -RT ../terraform-google-enterprise-genai/4-projects/ .
+   cp -RT ../terraform-google-enterprise-genai/policy-library/ ./policy-library
+   cp ../terraform-google-enterprise-genai/build/Jenkinsfile .
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
diff --git a/0-bootstrap/README-Terraform-Cloud.md b/0-bootstrap/README-Terraform-Cloud.md
index ce5794ec..935f3e78 100644
--- a/0-bootstrap/README-Terraform-Cloud.md
+++ b/0-bootstrap/README-Terraform-Cloud.md
@@ -59,13 +59,13 @@ that are created, see the organization bootstrap module
 
 ### Instructions
 
-1. Clone [terraform-example-foundation](https://github.com/terraform-google-modules/terraform-example-foundation) into your local environment.
+1. Clone [terraform-google-enterprise-genai](https://github.com/terraform-google-modules/terraform-google-enterprise-genai) into your local environment.
 
    ```bash
-   git clone https://github.com/terraform-google-modules/terraform-example-foundation.git
+   git clone https://github.com/terraform-google-modules/terraform-google-enterprise-genai.git
    ```
 
-1. Clone all the private repositories (or projects) you created at the same level of the `terraform-example-foundation` folder.
+1. Clone all the private repositories (or projects) you created at the same level of the `terraform-google-enterprise-genai` folder.
 You must be authenticated to the VCS provider. See [GitHub authentication](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/about-authentication-to-github) or [GitLab authentication](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/about-authentication-to-github) for more details.
 
    ```bash
@@ -92,7 +92,7 @@ You must be authenticated to the VCS provider. See [GitHub authentication](https
    gcp-environments/
    gcp-networks/
    gcp-projects/
-   terraform-example-foundation/
+   terraform-google-enterprise-genai/
    ```
 
 1. In your VCS repositories (or projects) it is expected to have the following branches created. Also, these branches shouldn't be empty, you need at least a single file. Run `scripts/git_create_branches_helper.sh` script to create these branches with a seed file for each repository automatically.
@@ -104,8 +104,8 @@ You must be authenticated to the VCS provider. See [GitHub authentication](https
    - Note: `scripts/git_create_branches_helper.sh` script and the following commands assume you are running it from the directory that has all the repos cloned (layout described in the previous step). If you run from another directory, adjust the `BASE_PATH` variable at the `scripts/git_create_branches_helper.sh` and adjust in the following commands.
 
    ```bash
-   chmod 755 ./terraform-example-foundation/0-bootstrap/scripts/git_create_branches_helper.sh
-   ./terraform-example-foundation/0-bootstrap/scripts/git_create_branches_helper.sh
+   chmod 755 ./terraform-google-enterprise-genai/0-bootstrap/scripts/git_create_branches_helper.sh
+   ./terraform-google-enterprise-genai/0-bootstrap/scripts/git_create_branches_helper.sh
    ```
 
    You will see some GIT logs related to the branches creation in the console and the message  `"Branch creation and push completed for all repositories"` at the end of the script execution.
@@ -130,7 +130,7 @@ You must be authenticated to the VCS provider. See [GitHub authentication](https
 
    ```bash
    mkdir -p envs/shared
-   cp -RT ../terraform-example-foundation/0-bootstrap/ ./envs/shared
+   cp -RT ../terraform-google-enterprise-genai/0-bootstrap/ ./envs/shared
    cd ./envs/shared
    ```
 
@@ -187,7 +187,7 @@ export the OAuth Token ID as an environment variable:
 1. Use the helper script [validate-requirements.sh](../scripts/validate-requirements.sh) to validate your environment:
 
    ```bash
-   ../../../terraform-example-foundation/scripts/validate-requirements.sh  -o <ORGANIZATION_ID> -b <BILLING_ACCOUNT_ID> -u <END_USER_EMAIL> -e
+   ../../../terraform-google-enterprise-genai/scripts/validate-requirements.sh  -o <ORGANIZATION_ID> -b <BILLING_ACCOUNT_ID> -u <END_USER_EMAIL> -e
    ```
 
    **Note:** The script is not able to validate if the user is in a Cloud Identity or Google Workspace group with the required roles.
@@ -244,8 +244,8 @@ export the OAuth Token ID as an environment variable:
    ```bash
    mv backend.tf.cloud.example backend.tf
    cd ../../../
-   chmod 775 ./terraform-example-foundation/scripts/set-tfc-backend-and-remote.sh
-   ./terraform-example-foundation/scripts/set-tfc-backend-and-remote.sh
+   chmod 775 ./terraform-google-enterprise-genai/scripts/set-tfc-backend-and-remote.sh
+   ./terraform-google-enterprise-genai/scripts/set-tfc-backend-and-remote.sh
    cd ./gcp-bootstrap/envs/shared
    ```
 
@@ -293,7 +293,7 @@ we recommend that you request 50 additional projects for the **projects step ser
 1. Copy contents of foundation to new repo.
 
    ```bash
-   cp -RT ../terraform-example-foundation/1-org/ .
+   cp -RT ../terraform-google-enterprise-genai/1-org/ .
    ```
 
 1. Rename `./envs/shared/terraform.example.tfvars` to `./envs/shared/terraform.tfvars`
@@ -379,7 +379,7 @@ See the shared folder [README.md](../1-org/envs/shared/README.md#inputs) for add
 1. Copy contents of foundation to new repo.
 
    ```bash
-   cp -RT ../terraform-example-foundation/2-environments/ .
+   cp -RT ../terraform-google-enterprise-genai/2-environments/ .
    ```
 
 1. Rename `terraform.example.tfvars` to `terraform.tfvars`.
@@ -452,9 +452,9 @@ or go to [Deploying step 3-networks-hub-and-spoke](#deploying-step-3-networks-hu
 1. Copy contents of foundation to new repo.
 
    ```bash
-   cp -RT ../terraform-example-foundation/3-networks-dual-svpc/ .
-   cp -RT ../terraform-example-foundation/policy-library/ ./policy-library
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp -RT ../terraform-google-enterprise-genai/3-networks-dual-svpc/ .
+   cp -RT ../terraform-google-enterprise-genai/policy-library/ ./policy-library
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
@@ -609,9 +609,9 @@ An environment variable `GOOGLE_IMPERSONATE_SERVICE_ACCOUNT` will be set with th
 1. Copy contents of foundation to new repo.
 
    ```bash
-   cp -RT ../terraform-example-foundation/3-networks-hub-and-spoke/ .
-   cp -RT ../terraform-example-foundation/policy-library/ ./policy-library
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp -RT ../terraform-google-enterprise-genai/3-networks-hub-and-spoke/ .
+   cp -RT ../terraform-google-enterprise-genai/policy-library/ ./policy-library
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
@@ -755,9 +755,9 @@ An environment variable `GOOGLE_IMPERSONATE_SERVICE_ACCOUNT` will be set with th
 1. Copy contents of foundation to new repo.
 
    ```bash
-   cp -RT ../terraform-example-foundation/4-projects/ .
-   cp -RT ../terraform-example-foundation/policy-library/ ./policy-library
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp -RT ../terraform-google-enterprise-genai/4-projects/ .
+   cp -RT ../terraform-google-enterprise-genai/policy-library/ ./policy-library
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
diff --git a/0-bootstrap/README.md b/0-bootstrap/README.md
index 721c2998..7048283f 100644
--- a/0-bootstrap/README.md
+++ b/0-bootstrap/README.md
@@ -51,7 +51,7 @@ Hub and Spoke network model. It also sets up the global DNS hub.</td>
 </table>
 
 For an overview of the architecture and the parts, see the
-[terraform-example-foundation README](https://github.com/terraform-google-modules/terraform-example-foundation)
+[terraform-google-enterprise-genai README](https://github.com/terraform-google-modules/terraform-google-enterprise-genai)
 file.
 
 ## Purpose
@@ -119,7 +119,7 @@ See [troubleshooting](../docs/TROUBLESHOOTING.md) if you run into issues during
 ## Deploying with Jenkins
 
 If you are using the `jenkins_bootstrap` sub-module, see
-[README-Jenkins](https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/0-bootstrap/README-Jenkins.md)
+[README-Jenkins](https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/0-bootstrap/README-Jenkins.md)
 for requirements and instructions on how to run the 0-bootstrap step. Using
 Jenkins requires a few manual steps, including configuring connectivity with
 your current Jenkins manager (controller) environment.
@@ -132,12 +132,12 @@ Using GitHub Actions requires manual creation of the GitHub repositories used in
 
 ## Deploying with Cloud Build
 
-1. Clone [terraform-example-foundation](https://github.com/terraform-google-modules/terraform-example-foundation) into your local environment and navigate to the `0-bootstrap` folder.
+1. Clone [terraform-google-enterprise-genai](https://github.com/terraform-google-modules/terraform-google-enterprise-genai) into your local environment and navigate to the `0-bootstrap` folder.
 
    ```bash
-   git clone https://github.com/terraform-google-modules/terraform-example-foundation.git
+   git clone https://github.com/terraform-google-modules/terraform-google-enterprise-genai.git
 
-   cd terraform-example-foundation/0-bootstrap
+   cd terraform-google-enterprise-genai/0-bootstrap
    ```
 
 1. Rename `terraform.example.tfvars` to `terraform.tfvars` and update the file with values from your environment:
@@ -223,7 +223,7 @@ Using GitHub Actions requires manual creation of the GitHub repositories used in
    ```
 
 1. (Optional) Run `terraform plan` to verify that state is configured correctly. You should see no changes from the previous state.
-1. Clone the policy repo and copy contents of policy-library to new repo. Clone the repo at the same level of the `terraform-example-foundation` folder.
+1. Clone the policy repo and copy contents of policy-library to new repo. Clone the repo at the same level of the `terraform-google-enterprise-genai` folder.
 
    ```bash
    cd ../..
@@ -232,7 +232,7 @@ Using GitHub Actions requires manual creation of the GitHub repositories used in
 
    cd gcp-policies
    git checkout -b main
-   cp -RT ../terraform-example-foundation/policy-library/ .
+   cp -RT ../terraform-google-enterprise-genai/policy-library/ .
    ```
 
 1. Commit changes and push your main branch to the policy repo.
@@ -258,9 +258,9 @@ Using GitHub Actions requires manual creation of the GitHub repositories used in
    git checkout -b plan
    mkdir -p envs/shared
 
-   cp -RT ../terraform-example-foundation/0-bootstrap/ ./envs/shared
-   cp ../terraform-example-foundation/build/cloudbuild-tf-* .
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp -RT ../terraform-google-enterprise-genai/0-bootstrap/ ./envs/shared
+   cp ../terraform-google-enterprise-genai/build/cloudbuild-tf-* .
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
 
    git add .
diff --git a/1-org/README.md b/1-org/README.md
index d5e28640..d528b9db 100644
--- a/1-org/README.md
+++ b/1-org/README.md
@@ -51,7 +51,7 @@ hub-and-spoke network model. It also sets up the global DNS hub.</td>
 </table>
 
 For an overview of the architecture and the parts, see the
-[terraform-example-foundation README](https://github.com/terraform-google-modules/terraform-example-foundation).
+[terraform-google-enterprise-genai README](https://github.com/terraform-google-modules/terraform-google-enterprise-genai).
 
 ## Purpose
 
@@ -113,11 +113,11 @@ This module creates and applies [tags](https://cloud.google.com/resource-manager
 ### Deploying with Cloud Build
 
 1. Clone the `gcp-org` repo based on the Terraform output from the `0-bootstrap` step.
-Clone the repo at the same level of the `terraform-example-foundation` folder.
+Clone the repo at the same level of the `terraform-google-enterprise-genai` folder.
 If required, run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get the Cloud Build Project ID.
 
    ```bash
-   export CLOUD_BUILD_PROJECT_ID=$(terraform -chdir="terraform-example-foundation/0-bootstrap/" output -raw cloudbuild_project_id)
+   export CLOUD_BUILD_PROJECT_ID=$(terraform -chdir="terraform-google-enterprise-genai/0-bootstrap/" output -raw cloudbuild_project_id)
    echo ${CLOUD_BUILD_PROJECT_ID}
 
    gcloud source repos clone gcp-org --project=${CLOUD_BUILD_PROJECT_ID}
@@ -134,9 +134,9 @@ If required, run `terraform output cloudbuild_project_id` in the `0-bootstrap` f
    cd gcp-org
    git checkout -b plan
 
-   cp -RT ../terraform-example-foundation/1-org/ .
-   cp ../terraform-example-foundation/build/cloudbuild-tf-* .
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp -RT ../terraform-google-enterprise-genai/1-org/ .
+   cp ../terraform-google-enterprise-genai/build/cloudbuild-tf-* .
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
@@ -149,7 +149,7 @@ If required, run `terraform output cloudbuild_project_id` in the `0-bootstrap` f
 1. Check if a Security Command Center notification with the default name, **scc-notify**, already exists. If it exists, choose a different value for the `scc_notification_name` variable in the `./envs/shared/terraform.tfvars` file.
 
    ```bash
-   export ORGANIZATION_ID=$(terraform -chdir="../terraform-example-foundation/0-bootstrap/" output -json common_config | jq '.org_id' --raw-output)
+   export ORGANIZATION_ID=$(terraform -chdir="../terraform-google-enterprise-genai/0-bootstrap/" output -json common_config | jq '.org_id' --raw-output)
    gcloud scc notifications describe "scc-notify" --organization=${ORGANIZATION_ID}
    ```
 
@@ -163,7 +163,7 @@ If required, run `terraform output cloudbuild_project_id` in the `0-bootstrap` f
 1. Update the `envs/shared/terraform.tfvars` file with values from your environment and 0-bootstrap step. If the previous step showed a numeric value, un-comment the variable `create_access_context_manager_access_policy = false`. See the shared folder [README.md](./envs/shared/README.md) for additional information on the values in the `terraform.tfvars` file.
 
    ```bash
-   export backend_bucket=$(terraform -chdir="../terraform-example-foundation/0-bootstrap/" output -raw gcs_bucket_tfstate)
+   export backend_bucket=$(terraform -chdir="../terraform-google-enterprise-genai/0-bootstrap/" output -raw gcs_bucket_tfstate)
    echo "remote_state_bucket = ${backend_bucket}"
 
    sed -i "s/REMOTE_STATE_BUCKET/${backend_bucket}/" ./envs/shared/terraform.tfvars
@@ -200,7 +200,7 @@ If required, run `terraform output cloudbuild_project_id` in the `0-bootstrap` f
 If you received a `PERMISSION_DENIED` error while running the `gcloud access-context-manager` or the `gcloud scc notifications` commands, you can append the following to run the command as the Terraform service account:
 
 ```bash
---impersonate-service-account=$(terraform -chdir="../terraform-example-foundation/0-bootstrap/" output -raw organization_step_terraform_service_account_email)
+--impersonate-service-account=$(terraform -chdir="../terraform-google-enterprise-genai/0-bootstrap/" output -raw organization_step_terraform_service_account_email)
 ```
 
 ### Deploying with Jenkins
@@ -213,11 +213,11 @@ See `0-bootstrap` [README-GitHub.md](../0-bootstrap/README-GitHub.md#deploying-s
 
 ### Running Terraform locally
 
-1. The next instructions assume that you are at the same level of the `terraform-example-foundation` folder.
+1. The next instructions assume that you are at the same level of the `terraform-google-enterprise-genai` folder.
 Change into the `1-org` folder, copy the Terraform wrapper script, and ensure it can be executed.
 
    ```bash
-   cd terraform-example-foundation/1-org
+   cd terraform-google-enterprise-genai/1-org
    cp ../build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
diff --git a/1-org/modules/cai-monitoring/README.md b/1-org/modules/cai-monitoring/README.md
index 98e53a95..1e1f0344 100644
--- a/1-org/modules/cai-monitoring/README.md
+++ b/1-org/modules/cai-monitoring/README.md
@@ -5,7 +5,7 @@ Uses Google Cloud Asset Inventory to create a feed of IAM Policy change events,
 
 ```hcl
 module "secure_cai_notification" {
-  source = "terraform-google-modules/terraform-example-foundation/google//1-org/modules/cai-monitoring"
+  source = "terraform-google-modules/terraform-google-enterprise-genai/google//1-org/modules/cai-monitoring"
 
   org_id               = <ORG ID>
   billing_account      = <BILLING ACCOUNT ID>
diff --git a/1-org/modules/centralized-logging/README.md b/1-org/modules/centralized-logging/README.md
index e6fab9bc..d49cf9bb 100644
--- a/1-org/modules/centralized-logging/README.md
+++ b/1-org/modules/centralized-logging/README.md
@@ -10,7 +10,7 @@ The following example exports audit logs from two folders to the same storage de
 
 ```hcl
 module "logs_export" {
-  source = "terraform-google-modules/terraform-example-foundation/google//1-org/modules/centralized-logging"
+  source = "terraform-google-modules/terraform-google-enterprise-genai/google//1-org/modules/centralized-logging"
 
   resources = {
     fldr1 = "<folder1_id>"
@@ -35,7 +35,7 @@ The following example exports all logs from three projects - including the loggi
 
 ```hcl
 module "logging_logbucket" {
-  source = "terraform-google-modules/terraform-example-foundation/google//1-org/modules/centralized-logging"
+  source = "terraform-google-modules/terraform-google-enterprise-genai/google//1-org/modules/centralized-logging"
 
   resources = {
     prj1 = "<log_destination_project_id>"
diff --git a/2-environments/README.md b/2-environments/README.md
index 352088c5..ccabb5fd 100644
--- a/2-environments/README.md
+++ b/2-environments/README.md
@@ -51,7 +51,7 @@ Hub and Spoke network model. It also sets up the global DNS hub</td>
 </table>
 
 For an overview of the architecture and the parts, see the
-[terraform-example-foundation README](https://github.com/terraform-google-modules/terraform-example-foundation).
+[terraform-google-enterprise-genai README](https://github.com/terraform-google-modules/terraform-google-enterprise-genai).
 
 ## Purpose
 
@@ -90,11 +90,11 @@ commands. The `-T` flag is needed for Linux, but causes problems for MacOS.
 ### Deploying with Cloud Build
 
 1. Clone the `gcp-environments` repo based on the Terraform output from the `0-bootstrap` step.
-Clone the repo at the same level of the `terraform-example-foundation` folder, the following instructions assume this layout.
+Clone the repo at the same level of the `terraform-google-enterprise-genai` folder, the following instructions assume this layout.
 Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get the Cloud Build Project ID.
 
    ```bash
-   export CLOUD_BUILD_PROJECT_ID=$(terraform -chdir="terraform-example-foundation/0-bootstrap/" output -raw cloudbuild_project_id)
+   export CLOUD_BUILD_PROJECT_ID=$(terraform -chdir="terraform-google-enterprise-genai/0-bootstrap/" output -raw cloudbuild_project_id)
    echo ${CLOUD_BUILD_PROJECT_ID}
 
    gcloud source repos clone gcp-environments --project=${CLOUD_BUILD_PROJECT_ID}
@@ -108,9 +108,9 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
    cd gcp-environments
    git checkout -b plan
 
-   cp -RT ../terraform-example-foundation/2-environments/ .
-   cp ../terraform-example-foundation/build/cloudbuild-tf-* .
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp -RT ../terraform-google-enterprise-genai/2-environments/ .
+   cp ../terraform-google-enterprise-genai/build/cloudbuild-tf-* .
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
@@ -123,7 +123,7 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
 1. Update the file with values from your environment and bootstrap (you can re-run `terraform output` in the 0-bootstrap directory to find these values). See any of the envs folder [README.md](./envs/production/README.md#inputs) files for additional information on the values in the `terraform.tfvars` file.
 
    ```bash
-   export backend_bucket=$(terraform -chdir="../terraform-example-foundation/0-bootstrap/" output -raw gcs_bucket_tfstate)
+   export backend_bucket=$(terraform -chdir="../terraform-google-enterprise-genai/0-bootstrap/" output -raw gcs_bucket_tfstate)
    echo "remote_state_bucket = ${backend_bucket}"
 
    sed -i "s/REMOTE_STATE_BUCKET/${backend_bucket}/" terraform.tfvars
@@ -212,10 +212,10 @@ See `0-bootstrap` [README-GitHub.md](../0-bootstrap/README-GitHub.md#deploying-s
 
 ### Run Terraform locally
 
-1. The next instructions assume that you are at the same level of the `terraform-example-foundation` folder. Change into `2-environments` folder, copy the Terraform wrapper script and ensure it can be executed.
+1. The next instructions assume that you are at the same level of the `terraform-google-enterprise-genai` folder. Change into `2-environments` folder, copy the Terraform wrapper script and ensure it can be executed.
 
    ```bash
-   cd terraform-example-foundation/2-environments
+   cd terraform-google-enterprise-genai/2-environments
    cp ../build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
diff --git a/3-networks-dual-svpc/README.md b/3-networks-dual-svpc/README.md
index 3adb5836..cb47dcf7 100644
--- a/3-networks-dual-svpc/README.md
+++ b/3-networks-dual-svpc/README.md
@@ -51,7 +51,7 @@ Hub and Spoke network model. It also sets up the global DNS hub</td>
 </table>
 
 For an overview of the architecture and the parts, see the
-[terraform-example-foundation README](https://github.com/terraform-google-modules/terraform-example-foundation).
+[terraform-google-enterprise-genai README](https://github.com/terraform-google-modules/terraform-google-enterprise-genai).
 
 ## Purpose
 
@@ -65,10 +65,10 @@ The purpose of this step is to:
 1. 0-bootstrap executed successfully.
 1. 1-org executed successfully.
 1. 2-environments executed successfully.
-1. Obtain the value for the access_context_manager_policy_id variable. It can be obtained by running the following commands. We assume you are at the same level as directory `terraform-example-foundation`, If you run them from another directory, adjust your paths accordingly.
+1. Obtain the value for the access_context_manager_policy_id variable. It can be obtained by running the following commands. We assume you are at the same level as directory `terraform-google-enterprise-genai`, If you run them from another directory, adjust your paths accordingly.
 
    ```bash
-   export ORGANIZATION_ID=$(terraform -chdir="terraform-example-foundation/0-bootstrap/" output -json common_config | jq '.org_id' --raw-output)
+   export ORGANIZATION_ID=$(terraform -chdir="terraform-google-enterprise-genai/0-bootstrap/" output -json common_config | jq '.org_id' --raw-output)
    export ACCESS_CONTEXT_MANAGER_ID=$(gcloud access-context-manager policies list --organization ${ORGANIZATION_ID} --format="value(name)")
    echo "access_context_manager_policy_id = ${ACCESS_CONTEXT_MANAGER_ID}"
    ```
@@ -142,11 +142,11 @@ If you are not able to use Dedicated or Partner Interconnect, you can also use a
 ### Deploying with Cloud Build
 
 1. Clone the `gcp-networks` repo based on the Terraform output from the `0-bootstrap` step.
-Clone the repo at the same level of the `terraform-example-foundation` folder, the following instructions assume this layout.
+Clone the repo at the same level of the `terraform-google-enterprise-genai` folder, the following instructions assume this layout.
 Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get the Cloud Build Project ID.
 
    ```bash
-   export CLOUD_BUILD_PROJECT_ID=$(terraform -chdir="terraform-example-foundation/0-bootstrap/" output -raw cloudbuild_project_id)
+   export CLOUD_BUILD_PROJECT_ID=$(terraform -chdir="terraform-google-enterprise-genai/0-bootstrap/" output -raw cloudbuild_project_id)
    echo ${CLOUD_BUILD_PROJECT_ID}
 
    gcloud source repos clone gcp-networks --project=${CLOUD_BUILD_PROJECT_ID}
@@ -158,9 +158,9 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
    cd gcp-networks/
    git checkout -b plan
 
-   cp -RT ../terraform-example-foundation/3-networks-dual-svpc/ .
-   cp ../terraform-example-foundation/build/cloudbuild-tf-* .
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp -RT ../terraform-google-enterprise-genai/3-networks-dual-svpc/ .
+   cp ../terraform-google-enterprise-genai/build/cloudbuild-tf-* .
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
@@ -178,13 +178,13 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
    Use `terraform output` to get the backend bucket value from 0-bootstrap output.
 
    ```bash
-   export ORGANIZATION_ID=$(terraform -chdir="../terraform-example-foundation/0-bootstrap/" output -json common_config | jq '.org_id' --raw-output)
+   export ORGANIZATION_ID=$(terraform -chdir="../terraform-google-enterprise-genai/0-bootstrap/" output -json common_config | jq '.org_id' --raw-output)
    export ACCESS_CONTEXT_MANAGER_ID=$(gcloud access-context-manager policies list --organization ${ORGANIZATION_ID} --format="value(name)")
    echo "access_context_manager_policy_id = ${ACCESS_CONTEXT_MANAGER_ID}"
 
    sed -i "s/ACCESS_CONTEXT_MANAGER_ID/${ACCESS_CONTEXT_MANAGER_ID}/" ./access_context.auto.tfvars
 
-   export backend_bucket=$(terraform -chdir="../terraform-example-foundation/0-bootstrap/" output -raw gcs_bucket_tfstate)
+   export backend_bucket=$(terraform -chdir="../terraform-google-enterprise-genai/0-bootstrap/" output -raw gcs_bucket_tfstate)
    echo "remote_state_bucket = ${backend_bucket}"
 
    sed -i "s/REMOTE_STATE_BUCKET/${backend_bucket}/" ./common.auto.tfvars
@@ -203,10 +203,10 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
 1. Use `terraform output` to get the Cloud Build project ID and the networks step Terraform Service Account from 0-bootstrap output. An environment variable `GOOGLE_IMPERSONATE_SERVICE_ACCOUNT` will be set using the Terraform Service Account to enable impersonation.
 
    ```bash
-   export CLOUD_BUILD_PROJECT_ID=$(terraform -chdir="../terraform-example-foundation/0-bootstrap/" output -raw cloudbuild_project_id)
+   export CLOUD_BUILD_PROJECT_ID=$(terraform -chdir="../terraform-google-enterprise-genai/0-bootstrap/" output -raw cloudbuild_project_id)
    echo ${CLOUD_BUILD_PROJECT_ID}
 
-   export GOOGLE_IMPERSONATE_SERVICE_ACCOUNT=$(terraform -chdir="../terraform-example-foundation/0-bootstrap/" output -raw networks_step_terraform_service_account_email)
+   export GOOGLE_IMPERSONATE_SERVICE_ACCOUNT=$(terraform -chdir="../terraform-google-enterprise-genai/0-bootstrap/" output -raw networks_step_terraform_service_account_email)
    echo ${GOOGLE_IMPERSONATE_SERVICE_ACCOUNT}
    ```
 
@@ -286,10 +286,10 @@ See `0-bootstrap` [README-GitHub.md](../0-bootstrap/README-GitHub.md#deploying-s
 
 ### Run Terraform locally
 
-1. The next instructions assume that you are at the same level of the `terraform-example-foundation` folder. Change into `3-networks-dual-svpc` folder, copy the Terraform wrapper script and ensure it can be executed.
+1. The next instructions assume that you are at the same level of the `terraform-google-enterprise-genai` folder. Change into `3-networks-dual-svpc` folder, copy the Terraform wrapper script and ensure it can be executed.
 
    ```bash
-   cd terraform-example-foundation/3-networks-dual-svpc
+   cd terraform-google-enterprise-genai/3-networks-dual-svpc
    cp ../build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
diff --git a/4-projects/README.md b/4-projects/README.md
index 2af08403..f5ff9c88 100644
--- a/4-projects/README.md
+++ b/4-projects/README.md
@@ -51,7 +51,7 @@ Hub and Spoke network model. It also sets up the global DNS hub</td>
 </table>
 
 For an overview of the architecture and the parts, see the
-[terraform-example-foundation README](https://github.com/terraform-google-modules/terraform-example-foundation).
+[terraform-google-enterprise-genai README](https://github.com/terraform-google-modules/terraform-google-enterprise-genai).
 
 ## Purpose
 
@@ -59,8 +59,8 @@ The purpose of this step is to set up the folder structure, projects, and infras
 
 For each business unit, a shared `infra-pipeline` project is created along with Cloud Build triggers, CSRs for application infrastructure code and Google Cloud Storage buckets for state storage.
 
-This step follows the same [conventions](https://github.com/terraform-google-modules/terraform-example-foundation#branching-strategy) as the Foundation pipeline deployed in [0-bootstrap](https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/0-bootstrap/README.md).
-A custom [workspace](https://github.com/terraform-google-modules/terraform-google-bootstrap/blob/master/modules/tf_cloudbuild_workspace/README.md) (`bu1-example-app`) is created by this pipeline and necessary roles are granted to the Terraform Service Account of this workspace by enabling variable `sa_roles` as shown in this [example](https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/4-projects/modules/base_env/example_base_shared_vpc_project.tf).
+This step follows the same [conventions](https://github.com/terraform-google-modules/terraform-google-enterprise-genai#branching-strategy) as the Foundation pipeline deployed in [0-bootstrap](https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/0-bootstrap/README.md).
+A custom [workspace](https://github.com/terraform-google-modules/terraform-google-bootstrap/blob/master/modules/tf_cloudbuild_workspace/README.md) (`bu1-example-app`) is created by this pipeline and necessary roles are granted to the Terraform Service Account of this workspace by enabling variable `sa_roles` as shown in this [example](https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/4-projects/modules/base_env/example_base_shared_vpc_project.tf).
 
 This pipeline is utilized to deploy resources in projects across development/non-production/production in step [5-app-infra](../5-app-infra/README.md).
 Other Workspaces can also be created to isolate deployments if needed.
@@ -90,11 +90,11 @@ commands. The `-T` flag is needed for Linux, but causes problems for MacOS.
 ### Deploying with Cloud Build
 
 1. Clone the `gcp-projects` repo based on the Terraform output from the `0-bootstrap` step.
-Clone the repo at the same level of the `terraform-example-foundation` folder, the following instructions assume this layout.
+Clone the repo at the same level of the `terraform-google-enterprise-genai` folder, the following instructions assume this layout.
 Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get the Cloud Build Project ID.
 
    ```bash
-   export CLOUD_BUILD_PROJECT_ID=$(terraform -chdir="terraform-example-foundation/0-bootstrap/" output -raw cloudbuild_project_id)
+   export CLOUD_BUILD_PROJECT_ID=$(terraform -chdir="terraform-google-enterprise-genai/0-bootstrap/" output -raw cloudbuild_project_id)
    echo ${CLOUD_BUILD_PROJECT_ID}
 
    gcloud source repos clone gcp-projects --project=${CLOUD_BUILD_PROJECT_ID}
@@ -106,9 +106,9 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
    cd gcp-projects
    git checkout -b plan
 
-   cp -RT ../terraform-example-foundation/4-projects/ .
-   cp ../terraform-example-foundation/build/cloudbuild-tf-* .
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp -RT ../terraform-google-enterprise-genai/4-projects/ .
+   cp ../terraform-google-enterprise-genai/build/cloudbuild-tf-* .
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
@@ -128,7 +128,7 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
 1. Use `terraform output` to get the backend bucket value from 0-bootstrap output.
 
    ```bash
-   export remote_state_bucket=$(terraform -chdir="../terraform-example-foundation/0-bootstrap/" output -raw gcs_bucket_tfstate)
+   export remote_state_bucket=$(terraform -chdir="../terraform-google-enterprise-genai/0-bootstrap/" output -raw gcs_bucket_tfstate)
    echo "remote_state_bucket = ${remote_state_bucket}"
 
    sed -i "s/REMOTE_STATE_BUCKET/${remote_state_bucket}/" ./common.auto.tfvars
@@ -146,10 +146,10 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
 1. Use `terraform output` to get the Cloud Build project ID and the projects step Terraform Service Account from 0-bootstrap output. An environment variable `GOOGLE_IMPERSONATE_SERVICE_ACCOUNT` will be set using the Terraform Service Account to enable impersonation.
 
    ```bash
-   export CLOUD_BUILD_PROJECT_ID=$(terraform -chdir="../terraform-example-foundation/0-bootstrap/" output -raw cloudbuild_project_id)
+   export CLOUD_BUILD_PROJECT_ID=$(terraform -chdir="../terraform-google-enterprise-genai/0-bootstrap/" output -raw cloudbuild_project_id)
    echo ${CLOUD_BUILD_PROJECT_ID}
 
-   export GOOGLE_IMPERSONATE_SERVICE_ACCOUNT=$(terraform -chdir="../terraform-example-foundation/0-bootstrap/" output -raw projects_step_terraform_service_account_email)
+   export GOOGLE_IMPERSONATE_SERVICE_ACCOUNT=$(terraform -chdir="../terraform-google-enterprise-genai/0-bootstrap/" output -raw projects_step_terraform_service_account_email)
    echo ${GOOGLE_IMPERSONATE_SERVICE_ACCOUNT}
    ```
 
@@ -235,10 +235,10 @@ See `0-bootstrap` [README-GitHub.md](../0-bootstrap/README-GitHub.md#deploying-s
 
 ### Run Terraform locally
 
-1. The next instructions assume that you are at the same level of the `terraform-example-foundation` folder. Change into `4-projects` folder, copy the Terraform wrapper script and ensure it can be executed.
+1. The next instructions assume that you are at the same level of the `terraform-google-enterprise-genai` folder. Change into `4-projects` folder, copy the Terraform wrapper script and ensure it can be executed.
 
    ```bash
-   cd terraform-example-foundation/4-projects
+   cd terraform-google-enterprise-genai/4-projects
    cp ../build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
diff --git a/4-projects/business_unit_3/shared/ml_infra_projects.tf b/4-projects/business_unit_3/shared/ml_infra_projects.tf
index acc9abea..431b0c2a 100644
--- a/4-projects/business_unit_3/shared/ml_infra_projects.tf
+++ b/4-projects/business_unit_3/shared/ml_infra_projects.tf
@@ -14,7 +14,7 @@
  * limitations under the License.
  */
 
-module "ml_infra_project" {
+module "ml_infra_projects" {
   source = "../../modules/ml_infra_projects"
 
   org_id                                 = local.org_id
diff --git a/4-projects/business_unit_3/shared/outputs.tf b/4-projects/business_unit_3/shared/outputs.tf
index 2d0e696d..88c5d34c 100644
--- a/4-projects/business_unit_3/shared/outputs.tf
+++ b/4-projects/business_unit_3/shared/outputs.tf
@@ -65,30 +65,30 @@ output "enable_cloudbuild_deploy" {
 
 output "service_catalog_project_id" {
   description = "Service Catalog Project ID."
-  value       = module.ml_infra_project.service_catalog_project_id
+  value       = module.ml_infra_projects.service_catalog_project_id
 }
 
 output "common_artifacts_project_id" {
   description = "App Infra Artifacts Project ID"
-  value       = module.ml_infra_project.common_artifacts_project_id
+  value       = module.ml_infra_projects.common_artifacts_project_id
 }
 
 output "service_catalog_repo_name" {
   description = "The name of the Service Catalog repository"
-  value       = module.ml_infra_project.service_catalog_repo_name
+  value       = module.ml_infra_projects.service_catalog_repo_name
 }
 
 output "service_catalog_repo_id" {
   description = "ID of the Service Catalog repository"
-  value       = module.ml_infra_project.service_catalog_repo_id
+  value       = module.ml_infra_projects.service_catalog_repo_id
 }
 
 output "artifacts_repo_name" {
   description = "The name of the Artifacts repository"
-  value       = module.ml_infra_project.artifacts_repo_name
+  value       = module.ml_infra_projects.artifacts_repo_name
 }
 
 output "artifacts_repo_id" {
   description = "ID of the Artifacts repository"
-  value       = module.ml_infra_project.artifacts_repo_id
+  value       = module.ml_infra_projects.artifacts_repo_id
 }
diff --git a/5-app-infra/0-gcp-policies/README.md b/5-app-infra/0-gcp-policies/README.md
index 3995e7c9..8e75a01e 100644
--- a/5-app-infra/0-gcp-policies/README.md
+++ b/5-app-infra/0-gcp-policies/README.md
@@ -50,7 +50,7 @@ Hub and Spoke network model. It also sets up the global DNS hub</td>
 </table>
 
 For an overview of the architecture and the parts, see the
-[terraform-example-foundation README](https://github.com/terraform-google-modules/terraform-example-foundation)
+[terraform-google-enterprise-genai README](https://github.com/terraform-google-modules/terraform-google-enterprise-genai)
 file.
 
 ## Purpose
@@ -62,7 +62,7 @@ When using Cloud Build for deployment, Policy Verification must be checked.  Thi
 1. Ensure you are in a neutral directory outside any other git related repositories.
 
 1. Clone the `gcp-policies` repo based on the Terraform output from the `0-bootstrap` step.
-Clone the repo at the same level of the `terraform-example-foundation` folder, the following instructions assume this layout.
+Clone the repo at the same level of the `terraform-google-enterprise-genai` folder, the following instructions assume this layout.
 Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get the Cloud Build Project ID.
 
    ```bash
diff --git a/5-app-infra/1-artifact-publish/README.md b/5-app-infra/1-artifact-publish/README.md
index 6d592a31..51f0be86 100644
--- a/5-app-infra/1-artifact-publish/README.md
+++ b/5-app-infra/1-artifact-publish/README.md
@@ -50,7 +50,7 @@ Hub and Spoke network model. It also sets up the global DNS hub</td>
 </table>
 
 For an overview of the architecture and the parts, see the
-[terraform-example-foundation README](https://github.com/terraform-google-modules/terraform-example-foundation)
+[terraform-google-enterprise-genai README](https://github.com/terraform-google-modules/terraform-google-enterprise-genai)
 file.
 
 ## Purpose
@@ -76,7 +76,7 @@ each folder under `images` has the full name and tag of the image that must be b
 Once pushed, the pipeline can be accessed by navigating to the project name created in step-4:
 
 ```bash
-terraform -chdir="../terraform-example-foundation/4-projects/business_unit_3/shared/" output -raw common_artifacts_project_id
+terraform -chdir="../terraform-google-enterprise-genai/4-projects/business_unit_3/shared/" output -raw common_artifacts_project_id
 ```
 
 ## Prerequisites
@@ -112,9 +112,9 @@ commands. The `-T` flag is needed for Linux, but causes problems for MacOS.
    cd bu3-artifact-publish
    git checkout -b plan
 
-   cp -RT ../terraform-example-foundation/5-app-infra/1-artifact-publish/ .
-   cp ../terraform-example-foundation/build/cloudbuild-tf-* .
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp -RT ../terraform-google-enterprise-genai/5-app-infra/1-artifact-publish/ .
+   cp ../terraform-google-enterprise-genai/build/cloudbuild-tf-* .
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
@@ -127,7 +127,7 @@ commands. The `-T` flag is needed for Linux, but causes problems for MacOS.
 1. Update the file with values from your environment and 0-bootstrap. See any of the business unit 1 envs folders [README.md](./business_unit_1/production/README.md) files for additional information on the values in the `common.auto.tfvars` file.
 
    ```bash
-   export remote_state_bucket=$(terraform -chdir="../terraform-example-foundation/0-bootstrap/" output -raw projects_gcs_bucket_tfstate)
+   export remote_state_bucket=$(terraform -chdir="../terraform-google-enterprise-genai/0-bootstrap/" output -raw projects_gcs_bucket_tfstate)
    echo "remote_state_bucket = ${remote_state_bucket}"
    sed -i "s/REMOTE_STATE_BUCKET/${remote_state_bucket}/" ./common.auto.tfvars
    ```
@@ -169,10 +169,10 @@ commands. The `-T` flag is needed for Linux, but causes problems for MacOS.
 
 ### Run Terraform locally
 
-1. The next instructions assume that you are at the same level of the `terraform-example-foundation` folder. Change into `5-app-infra` folder, copy the Terraform wrapper script and ensure it can be executed.
+1. The next instructions assume that you are at the same level of the `terraform-google-enterprise-genai` folder. Change into `5-app-infra` folder, copy the Terraform wrapper script and ensure it can be executed.
 
    ```bash
-   cd terraform-example-foundation/5-app-infra/projects/artifact-publish
+   cd terraform-google-enterprise-genai/5-app-infra/projects/artifact-publish
    cp ../../../build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
diff --git a/5-app-infra/2-artifact-publish-repo/README.md b/5-app-infra/2-artifact-publish-repo/README.md
index c08fc84f..9cdaea98 100644
--- a/5-app-infra/2-artifact-publish-repo/README.md
+++ b/5-app-infra/2-artifact-publish-repo/README.md
@@ -50,7 +50,7 @@ Hub and Spoke network model. It also sets up the global DNS hub</td>
 </table>
 
 For an overview of the architecture and the parts, see the
-[terraform-example-foundation README](https://github.com/terraform-google-modules/terraform-example-foundation)
+[terraform-google-enterprise-genai README](https://github.com/terraform-google-modules/terraform-google-enterprise-genai)
 file.
 
 ## Usage
diff --git a/5-app-infra/3-service-catalog/README.md b/5-app-infra/3-service-catalog/README.md
index 8333b28a..f52174d2 100644
--- a/5-app-infra/3-service-catalog/README.md
+++ b/5-app-infra/3-service-catalog/README.md
@@ -50,7 +50,7 @@ Hub and Spoke network model. It also sets up the global DNS hub</td>
 </table>
 
 For an overview of the architecture and the parts, see the
-[terraform-example-foundation README](https://github.com/terraform-google-modules/terraform-example-foundation)
+[terraform-google-enterprise-genai README](https://github.com/terraform-google-modules/terraform-google-enterprise-genai)
 file.
 
 ## Purpose(s)
@@ -111,7 +111,7 @@ The pipeline also listens for changes made to `plan`, `development`, `non-produc
 The pipeline can be accessed by navigating to the project name created in step-4:
 
 ```bash
-terraform -chdir="../terraform-example-foundation/4-projects/business_unit_3/shared/" output -raw service_catalog_project_id
+terraform -chdir="../terraform-google-enterprise-genai/4-projects/business_unit_3/shared/" output -raw service_catalog_project_id
 ```
 ## Prerequisites
 
@@ -146,9 +146,9 @@ commands. The `-T` flag is needed for Linux, but causes problems for MacOS.
    cd bu3-service-catalog
    git checkout -b plan
 
-   cp -RT ../terraform-example-foundation/5-app-infra/3-service-catalog/ .
-   cp ../terraform-example-foundation/build/cloudbuild-tf-* .
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp -RT ../terraform-google-enterprise-genai/5-app-infra/3-service-catalog/ .
+   cp ../terraform-google-enterprise-genai/build/cloudbuild-tf-* .
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
@@ -161,7 +161,7 @@ commands. The `-T` flag is needed for Linux, but causes problems for MacOS.
 1. Update the file with values from your environment and 0-bootstrap. See any of the business unit 1 envs folders [README.md](./business_unit_1/production/README.md) files for additional information on the values in the `common.auto.tfvars` file.
 
    ```bash
-   export remote_state_bucket=$(terraform -chdir="../terraform-example-foundation/0-bootstrap/" output -raw projects_gcs_bucket_tfstate)
+   export remote_state_bucket=$(terraform -chdir="../terraform-google-enterprise-genai/0-bootstrap/" output -raw projects_gcs_bucket_tfstate)
    echo "remote_state_bucket = ${remote_state_bucket}"
    sed -i "s/REMOTE_STATE_BUCKET/${remote_state_bucket}/" ./common.auto.tfvars
    ```
@@ -205,10 +205,10 @@ commands. The `-T` flag is needed for Linux, but causes problems for MacOS.
 
 ### Run Terraform locally
 
-1. The next instructions assume that you are at the same level of the `terraform-example-foundation` folder. Change into `5-app-infra` folder, copy the Terraform wrapper script and ensure it can be executed.
+1. The next instructions assume that you are at the same level of the `terraform-google-enterprise-genai` folder. Change into `5-app-infra` folder, copy the Terraform wrapper script and ensure it can be executed.
 
    ```bash
-   cd terraform-example-foundation/5-app-infra/projects/service-catalog
+   cd terraform-google-enterprise-genai/5-app-infra/projects/service-catalog
    cp ../../../build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
diff --git a/5-app-infra/4-service-catalog-repo/README.md b/5-app-infra/4-service-catalog-repo/README.md
index ebdacf3d..a7e93409 100644
--- a/5-app-infra/4-service-catalog-repo/README.md
+++ b/5-app-infra/4-service-catalog-repo/README.md
@@ -60,7 +60,7 @@ This repo provides a number of the [Google Service Catalog](https://cloud.google
 1. Enter the repo folder and copy over the service catalogs files from `5-app-infra/4-service-catalog-repo` folder.
    ```shell
    cd service-catalog
-   cp -RT ../terraform-example-foundation/5-app-infra/4-service-catalog-repo/ .
+   cp -RT ../terraform-google-enterprise-genai/5-app-infra/4-service-catalog-repo/ .
    ```
 
 1. Commit changes and push main branch to the new repo.
diff --git a/5-app-infra/5-vpc-sc/README.md b/5-app-infra/5-vpc-sc/README.md
index bb13c634..88fd2d0d 100644
--- a/5-app-infra/5-vpc-sc/README.md
+++ b/5-app-infra/5-vpc-sc/README.md
@@ -50,7 +50,7 @@ Hub and Spoke network model. It also sets up the global DNS hub</td>
 </table>
 
 For an overview of the architecture and the parts, see the
-[terraform-example-foundation README](https://github.com/terraform-google-modules/terraform-example-foundation)
+[terraform-google-enterprise-genai README](https://github.com/terraform-google-modules/terraform-google-enterprise-genai)
 file.
 
 ## VPC-SC
diff --git a/5-app-infra/6-machine-learning/README.md b/5-app-infra/6-machine-learning/README.md
index ce5c33ff..e10dd1e9 100644
--- a/5-app-infra/6-machine-learning/README.md
+++ b/5-app-infra/6-machine-learning/README.md
@@ -50,7 +50,7 @@ Hub and Spoke network model. It also sets up the global DNS hub</td>
 </table>
 
 For an overview of the architecture and the parts, see the
-[terraform-example-foundation README](https://github.com/terraform-google-modules/terraform-example-foundation)
+[terraform-google-enterprise-genai README](https://github.com/terraform-google-modules/terraform-google-enterprise-genai)
 file.
 
 ## Purpose
@@ -95,7 +95,7 @@ Step 12 in "Deploying with Cloud Build" highlights the necessary steps needed to
 ### Deploying with Cloud Build
 
 1. Clone the `gcp-policies` repo based on the Terraform output from the `0-bootstrap` step.
-Clone the repo at the same level of the `terraform-example-foundation` folder, the following instructions assume this layout.
+Clone the repo at the same level of the `terraform-google-enterprise-genai` folder, the following instructions assume this layout.
 Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get the Cloud Build Project ID.
 
    ```bash
@@ -115,7 +115,7 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
    cd gcp-policies-app-infra
    git checkout -b main
 
-   cp -RT ../terraform-example-foundation/policy-library/ .
+   cp -RT ../terraform-google-enterprise-genai/policy-library/ .
    ```
 
 1. Commit changes and push your main branch to the new repo.
@@ -147,9 +147,9 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
    cd bu3-machine-learning
    git checkout -b plan
 
-   cp -RT ../terraform-example-foundation/5-app-infra/6-machine-learning/ .
-   cp ../terraform-example-foundation/build/cloudbuild-tf-* .
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp -RT ../terraform-google-enterprise-genai/5-app-infra/6-machine-learning/ .
+   cp ../terraform-google-enterprise-genai/build/cloudbuild-tf-* .
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
@@ -171,7 +171,7 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
 1. Use `terraform output` to get the project backend bucket value from 0-bootstrap.
 
    ```bash
-   export remote_state_bucket=$(terraform -chdir="../terraform-example-foundation/0-bootstrap/" output -raw projects_gcs_bucket_tfstate)
+   export remote_state_bucket=$(terraform -chdir="../terraform-google-enterprise-genai/0-bootstrap/" output -raw projects_gcs_bucket_tfstate)
    echo "remote_state_bucket = ${remote_state_bucket}"
    sed -i "s/REMOTE_STATE_BUCKET/${remote_state_bucket}/" ./common.auto.tfvars
    ```
@@ -268,10 +268,10 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
    ```
 ## Running Terraform locally
 
-1. The next instructions assume that you are at the same level of the `terraform-example-foundation` folder. Change into `5-app-infra` folder, copy the Terraform wrapper script and ensure it can be executed.
+1. The next instructions assume that you are at the same level of the `terraform-google-enterprise-genai` folder. Change into `5-app-infra` folder, copy the Terraform wrapper script and ensure it can be executed.
 
    ```bash
-   cd terraform-example-foundation/5-app-infra/projects/machine-learning
+   cd terraform-google-enterprise-genai/5-app-infra/projects/machine-learning
    cp ../../../build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
diff --git a/5-app-infra/README.md b/5-app-infra/README.md
index 4fdc1e94..b41e5da6 100644
--- a/5-app-infra/README.md
+++ b/5-app-infra/README.md
@@ -50,7 +50,7 @@ Hub and Spoke network model. It also sets up the global DNS hub</td>
 </table>
 
 For an overview of the architecture and the parts, see the
-[terraform-example-foundation README](https://github.com/terraform-google-modules/terraform-example-foundation)
+[terraform-google-enterprise-genai README](https://github.com/terraform-google-modules/terraform-google-enterprise-genai)
 file.
 
 ## Purpose
diff --git a/5-app-infra/projects/artifact-publish/README.md b/5-app-infra/projects/artifact-publish/README.md
index 7e44405d..eb6ed8bc 100644
--- a/5-app-infra/projects/artifact-publish/README.md
+++ b/5-app-infra/projects/artifact-publish/README.md
@@ -50,7 +50,7 @@ Hub and Spoke network model. It also sets up the global DNS hub</td>
 </table>
 
 For an overview of the architecture and the parts, see the
-[terraform-example-foundation README](https://github.com/terraform-google-modules/terraform-example-foundation)
+[terraform-google-enterprise-genai README](https://github.com/terraform-google-modules/terraform-google-enterprise-genai)
 file.
 
 ## Purpose
@@ -76,7 +76,7 @@ each folder under `images` has the full name and tag of the image that must be b
 Once pushed, the pipeline can be accessed by navigating to the project name created in step-4:
 
 ```bash
-terraform -chdir="../terraform-example-foundation/4-projects/business_unit_3/shared/" output -raw common_artifacts_project_id
+terraform -chdir="../terraform-google-enterprise-genai/4-projects/business_unit_3/shared/" output -raw common_artifacts_project_id
 ```
 
 ## Prerequisites
@@ -99,7 +99,7 @@ commands. The `-T` flag is needed for Linux, but causes problems for MacOS.
 ### Deploying with Cloud Build
 
 1. Clone the `gcp-policies` repo based on the Terraform output from the `0-bootstrap` step.
-Clone the repo at the same level of the `terraform-example-foundation` folder, the following instructions assume this layout.
+Clone the repo at the same level of the `terraform-google-enterprise-genai` folder, the following instructions assume this layout.
 Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get the Cloud Build Project ID.
 
    ```bash
@@ -119,7 +119,7 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
    cd gcp-policies-app-infra
    git checkout -b main
 
-   cp -RT ../terraform-example-foundation/policy-library/ .
+   cp -RT ../terraform-google-enterprise-genai/policy-library/ .
    ```
 
 1. Commit changes and push your main branch to the new repo.
@@ -151,9 +151,9 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
    cd bu3-artifact-publish
    git checkout -b plan
 
-   cp -RT ../terraform-example-foundation/5-app-infra/projects/artifact-publish/ .
-   cp ../terraform-example-foundation/build/cloudbuild-tf-* .
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp -RT ../terraform-google-enterprise-genai/5-app-infra/projects/artifact-publish/ .
+   cp ../terraform-google-enterprise-genai/build/cloudbuild-tf-* .
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
@@ -166,7 +166,7 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
 1. Update the file with values from your environment and 0-bootstrap. See any of the business unit 1 envs folders [README.md](./business_unit_1/production/README.md) files for additional information on the values in the `common.auto.tfvars` file.
 
    ```bash
-   export remote_state_bucket=$(terraform -chdir="../terraform-example-foundation/0-bootstrap/" output -raw projects_gcs_bucket_tfstate)
+   export remote_state_bucket=$(terraform -chdir="../terraform-google-enterprise-genai/0-bootstrap/" output -raw projects_gcs_bucket_tfstate)
    echo "remote_state_bucket = ${remote_state_bucket}"
    sed -i "s/REMOTE_STATE_BUCKET/${remote_state_bucket}/" ./common.auto.tfvars
    ```
@@ -233,10 +233,10 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
 
 ### Run Terraform locally
 
-1. The next instructions assume that you are at the same level of the `terraform-example-foundation` folder. Change into `5-app-infra` folder, copy the Terraform wrapper script and ensure it can be executed.
+1. The next instructions assume that you are at the same level of the `terraform-google-enterprise-genai` folder. Change into `5-app-infra` folder, copy the Terraform wrapper script and ensure it can be executed.
 
    ```bash
-   cd terraform-example-foundation/5-app-infra/projects/artifact-publish
+   cd terraform-google-enterprise-genai/5-app-infra/projects/artifact-publish
    cp ../../../build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
diff --git a/5-app-infra/projects/machine-learning/README.md b/5-app-infra/projects/machine-learning/README.md
index 6475afac..91bb1602 100644
--- a/5-app-infra/projects/machine-learning/README.md
+++ b/5-app-infra/projects/machine-learning/README.md
@@ -50,7 +50,7 @@ Hub and Spoke network model. It also sets up the global DNS hub</td>
 </table>
 
 For an overview of the architecture and the parts, see the
-[terraform-example-foundation README](https://github.com/terraform-google-modules/terraform-example-foundation)
+[terraform-google-enterprise-genai README](https://github.com/terraform-google-modules/terraform-google-enterprise-genai)
 file.
 
 ## Purpose
@@ -96,7 +96,7 @@ Step 12 in "Deploying with Cloud Build" highlights the necessary steps needed to
 ### Deploying with Cloud Build
 
 1. Clone the `gcp-policies` repo based on the Terraform output from the `0-bootstrap` step.
-Clone the repo at the same level of the `terraform-example-foundation` folder, the following instructions assume this layout.
+Clone the repo at the same level of the `terraform-google-enterprise-genai` folder, the following instructions assume this layout.
 Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get the Cloud Build Project ID.
 
    ```bash
@@ -116,7 +116,7 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
    cd gcp-policies-app-infra
    git checkout -b main
 
-   cp -RT ../terraform-example-foundation/policy-library/ .
+   cp -RT ../terraform-google-enterprise-genai/policy-library/ .
    ```
 
 1. Commit changes and push your main branch to the new repo.
@@ -148,9 +148,9 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
    cd bu3-machine-learning
    git checkout -b plan
 
-   cp -RT ../terraform-example-foundation/5-app-infra/projects/machine-learning/ .
-   cp ../terraform-example-foundation/build/cloudbuild-tf-* .
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp -RT ../terraform-google-enterprise-genai/5-app-infra/projects/machine-learning/ .
+   cp ../terraform-google-enterprise-genai/build/cloudbuild-tf-* .
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
@@ -165,7 +165,7 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
 1. Use `terraform output` to get the project backend bucket value from 0-bootstrap.
 
    ```bash
-   export remote_state_bucket=$(terraform -chdir="../terraform-example-foundation/0-bootstrap/" output -raw projects_gcs_bucket_tfstate)
+   export remote_state_bucket=$(terraform -chdir="../terraform-google-enterprise-genai/0-bootstrap/" output -raw projects_gcs_bucket_tfstate)
    echo "remote_state_bucket = ${remote_state_bucket}"
    sed -i "s/REMOTE_STATE_BUCKET/${remote_state_bucket}/" ./common.auto.tfvars
    ```
@@ -315,10 +315,10 @@ we want the `unknown-project-number` here.  Add this into your `egress_policies`
 
 ## Running Terraform locally
 
-1. The next instructions assume that you are at the same level of the `terraform-example-foundation` folder. Change into `5-app-infra` folder, copy the Terraform wrapper script and ensure it can be executed.
+1. The next instructions assume that you are at the same level of the `terraform-google-enterprise-genai` folder. Change into `5-app-infra` folder, copy the Terraform wrapper script and ensure it can be executed.
 
    ```bash
-   cd terraform-example-foundation/5-app-infra/projects/machine-learning
+   cd terraform-google-enterprise-genai/5-app-infra/projects/machine-learning
    cp ../../../build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
diff --git a/5-app-infra/projects/service-catalog/README.md b/5-app-infra/projects/service-catalog/README.md
index a309c3f0..4a70e7df 100644
--- a/5-app-infra/projects/service-catalog/README.md
+++ b/5-app-infra/projects/service-catalog/README.md
@@ -50,7 +50,7 @@ Hub and Spoke network model. It also sets up the global DNS hub</td>
 </table>
 
 For an overview of the architecture and the parts, see the
-[terraform-example-foundation README](https://github.com/terraform-google-modules/terraform-example-foundation)
+[terraform-google-enterprise-genai README](https://github.com/terraform-google-modules/terraform-google-enterprise-genai)
 file.
 
 ## Purpose(s)
@@ -111,7 +111,7 @@ The pipeline also listens for changes made to `plan`, `development`, `non-produc
 The pipeline can be accessed by navigating to the project name created in step-4:
 
 ```bash
-terraform -chdir="../terraform-example-foundation/4-projects/business_unit_3/shared/" output -raw service_catalog_project_id
+terraform -chdir="../terraform-google-enterprise-genai/4-projects/business_unit_3/shared/" output -raw service_catalog_project_id
 ```
 ## Prerequisites
 
@@ -133,7 +133,7 @@ commands. The `-T` flag is needed for Linux, but causes problems for MacOS.
 ### Deploying with Cloud Build
 
 1. Clone the `gcp-policies` repo based on the Terraform output from the `0-bootstrap` step.
-Clone the repo at the same level of the `terraform-example-foundation` folder, the following instructions assume this layout.
+Clone the repo at the same level of the `terraform-google-enterprise-genai` folder, the following instructions assume this layout.
 Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get the Cloud Build Project ID.
 
    ```bash
@@ -153,7 +153,7 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
    cd gcp-policies-app-infra
    git checkout -b main
 
-   cp -RT ../terraform-example-foundation/policy-library/ .
+   cp -RT ../terraform-google-enterprise-genai/policy-library/ .
    ```
 
 1. Commit changes and push your main branch to the new repo.
@@ -185,9 +185,9 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
    cd bu3-service-catalog
    git checkout -b plan
 
-   cp -RT ../terraform-example-foundation/5-app-infra/projects/service-catalog/ .
-   cp ../terraform-example-foundation/build/cloudbuild-tf-* .
-   cp ../terraform-example-foundation/build/tf-wrapper.sh .
+   cp -RT ../terraform-google-enterprise-genai/5-app-infra/projects/service-catalog/ .
+   cp ../terraform-google-enterprise-genai/build/cloudbuild-tf-* .
+   cp ../terraform-google-enterprise-genai/build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
 
@@ -200,7 +200,7 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
 1. Update the file with values from your environment and 0-bootstrap. See any of the business unit 1 envs folders [README.md](./business_unit_1/production/README.md) files for additional information on the values in the `common.auto.tfvars` file.
 
    ```bash
-   export remote_state_bucket=$(terraform -chdir="../terraform-example-foundation/0-bootstrap/" output -raw projects_gcs_bucket_tfstate)
+   export remote_state_bucket=$(terraform -chdir="../terraform-google-enterprise-genai/0-bootstrap/" output -raw projects_gcs_bucket_tfstate)
    echo "remote_state_bucket = ${remote_state_bucket}"
    sed -i "s/REMOTE_STATE_BUCKET/${remote_state_bucket}/" ./common.auto.tfvars
    ```
@@ -253,7 +253,7 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
 1. Enter the repo folder and copy over the service catalogs files from `5-app-infra/source_repos` folder.
    ```shell
    cd service-catalog
-   cp -RT ../terraform-example-foundation/5-app-infra/source_repos/service-catalog/ .
+   cp -RT ../terraform-google-enterprise-genai/5-app-infra/source_repos/service-catalog/ .
    ```
 
 1. Commit changes and push main branch to the new repo.
@@ -268,10 +268,10 @@ Run `terraform output cloudbuild_project_id` in the `0-bootstrap` folder to get
 
 ### Run Terraform locally
 
-1. The next instructions assume that you are at the same level of the `terraform-example-foundation` folder. Change into `5-app-infra` folder, copy the Terraform wrapper script and ensure it can be executed.
+1. The next instructions assume that you are at the same level of the `terraform-google-enterprise-genai` folder. Change into `5-app-infra` folder, copy the Terraform wrapper script and ensure it can be executed.
 
    ```bash
-   cd terraform-example-foundation/5-app-infra/projects/service-catalog
+   cd terraform-google-enterprise-genai/5-app-infra/projects/service-catalog
    cp ../../../build/tf-wrapper.sh .
    chmod 755 ./tf-wrapper.sh
    ```
diff --git a/ERRATA.md b/ERRATA.md
index 1f44ea25..a00986a7 100644
--- a/ERRATA.md
+++ b/ERRATA.md
@@ -35,7 +35,7 @@ This will be addressed in the next version of the blueprint guide.
 - Cloud Asset Inventory will be integrated in a future release.
 - The unallocated IP address space in the Shared VPC networks, described in Section 7.3, is currently being used by Private Service Networking in this release.
 
-## [1.x](https://github.com/terraform-google-modules/terraform-example-foundation/releases/tag/v1.0.0)
+## [1.x](https://github.com/terraform-google-modules/terraform-google-enterprise-genai/releases/tag/v1.0.0)
 ### Code Discrepancies
 
 #### Labeling
diff --git a/Makefile b/Makefile
index f315bc4f..6ca20792 100644
--- a/Makefile
+++ b/Makefile
@@ -28,7 +28,7 @@ docker_test_lint:
 	docker run --rm -it \
 		-e ENABLE_PARALLEL=0 \
 		-e DISABLE_TFLINT=1 \
-		-e EXCLUDE_LINT_DIRS="\./5-app-infra/6-machine-learning|\./5-app-infra/projects/machine-learning" \
+		-e EXCLUDE_LINT_DIRS="\./5-app-infra/6-machine-learning|\./5-app-infra/projects/machine-learning|\./docs/assets/terraform" \
 		-v $(CURDIR):/workspace \
 		$(REGISTRY_URL)/${DOCKER_IMAGE_DEVELOPER_TOOLS}:${DOCKER_TAG_VERSION_DEVELOPER_TOOLS} \
 		/usr/local/bin/test_lint.sh
diff --git a/README.md b/README.md
index f7ff9a68..de72bcb6 100644
--- a/README.md
+++ b/README.md
@@ -2,9 +2,11 @@
 
 ## Overview
 
-This repository serves as a example for configuring an environment for the development and deployment of Machine Learning applications using the Vertex AI platform on Google Cloud. It seamlessly integrates the Cloud Foundation Toolkit (CFT) and implements robust security measures, drawing heavily from the [terraform-example-foundation](https://github.com/terraform-google-modules/terraform-example-foundation/tree/v4.0.0) codebase.
+This repository serves as a example for configuring an environment for the development and deployment of Machine Learning applications using the Vertex AI platform on Google Cloud. It seamlessly integrates the Cloud Foundation Toolkit (CFT) and implements robust security measures, drawing heavily from the [terraform-google-enterprise-genai](https://github.com/terraform-google-modules/terraform-google-enterprise-genai/tree/v4.0.0) codebase.
 
-The repo is separated in distinct Terraform projects, each within their own directory that must be applied separately, but in sequence, for more information about each step, please refer to [terraform-example-foundation](https://github.com/terraform-google-modules/terraform-example-foundation/tree/v4.0.0). Comparing to the foundation repository, the key differences from the steps in foundation to steps in these repository are:
+The repo is separated in distinct Terraform projects, each within their own directory that must be applied separately, but in sequence, for more information about each step, please refer to [terraform-google-enterprise-genai](https://github.com/terraform-google-modules/terraform-google-enterprise-genai/tree/v4.0.0). Comparing to the foundation repository, the key differences from the steps in foundation to steps in these repository are:
+
+Alternatively, the user can follow steps on [`docs/deploy_on_foundation_v4.0.0.md`](./docs/deploy_on_foundation_v4.0.0.md), to deploy the codebase on top of an existing foundation instance.
 
 * [1. org](./1-org/)
     * Specific to this repository, it will also configure Machine Learning Organization Policies.
diff --git a/docs/FAQ.md b/docs/FAQ.md
index 82ab2d93..319c8d64 100644
--- a/docs/FAQ.md
+++ b/docs/FAQ.md
@@ -13,7 +13,7 @@ If you see other quota errors, see the [Quota documentation](https://cloud.googl
 
 ## What is a "named" branch?
 
-Certain branches in the terraform-example-foundation are considered to be
+Certain branches in the terraform-google-enterprise-genai are considered to be
 _named branches_. Pushing to a named branch causes the _apply_ command to be
 run. Pushing to branches other than the named branches does not run _apply_.
 
diff --git a/docs/TROUBLESHOOTING.md b/docs/TROUBLESHOOTING.md
index 7c3c025d..8f4637a4 100644
--- a/docs/TROUBLESHOOTING.md
+++ b/docs/TROUBLESHOOTING.md
@@ -191,7 +191,7 @@ At this time the alternatives are:
 1. To use a [workaround](https://stackoverflow.com/a/62827358) to force Google API calls in Cloud Shell to use an IP from the `private.googleapis.com` range (199.36.153.8/30 ) or
 1. To deploy the foundation code from a local machine that supports IPv6.
 
-If you use the workaround, the API list should include the ones that are [allowed](../policy-library/policies/constraints/serviceusage_allow_basic_apis.yaml) in the terraform-example-foundation policy library.
+If you use the workaround, the API list should include the ones that are [allowed](../policy-library/policies/constraints/serviceusage_allow_basic_apis.yaml) in the terraform-google-enterprise-genai policy library.
 
 ### Error: Unsupported attribute
 
@@ -473,4 +473,4 @@ You can get this information from step `0-bootstrap` by running the following co
 
 **Terraform State lock possible causes:**
 
-- If you realize that the Terraform State lock was due to a build timeout increase the build timeout on [build configuration](https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/build/cloudbuild-tf-apply.yaml#L15).
+- If you realize that the Terraform State lock was due to a build timeout increase the build timeout on [build configuration](https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/build/cloudbuild-tf-apply.yaml#L15).
diff --git a/docs/assets/terraform/1-org/README.md b/docs/assets/terraform/1-org/README.md
new file mode 100644
index 00000000..092ada1b
--- /dev/null
+++ b/docs/assets/terraform/1-org/README.md
@@ -0,0 +1 @@
+# Terraform code in this directory is used on docs as reference/assets.
diff --git a/docs/assets/terraform/1-org/ml_key_rings.tf b/docs/assets/terraform/1-org/ml_key_rings.tf
new file mode 100644
index 00000000..9e3f6304
--- /dev/null
+++ b/docs/assets/terraform/1-org/ml_key_rings.tf
@@ -0,0 +1,10 @@
+module "kms_keyring" {
+  source = "../../modules/ml_kms_keyring"
+
+  keyring_admins = [
+    "serviceAccount:${local.projects_step_terraform_service_account_email}"
+  ]
+  project_id      = module.org_kms.project_id
+  keyring_regions = var.keyring_regions
+  keyring_name    = var.keyring_name
+}
diff --git a/docs/assets/terraform/1-org/ml_ops_org_policy.tf b/docs/assets/terraform/1-org/ml_ops_org_policy.tf
new file mode 100644
index 00000000..4fa82aa7
--- /dev/null
+++ b/docs/assets/terraform/1-org/ml_ops_org_policy.tf
@@ -0,0 +1,67 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module "ml_organization_policies" {
+  source = "../../modules/ml-org-policies"
+
+  org_id    = local.organization_id
+  folder_id = local.folder_id
+
+  allowed_locations = [
+    "in:us-locations"
+  ]
+
+  allowed_vertex_vpc_networks = {
+    parent_type = "project"
+    ids         = [for instance in module.base_restricted_environment_network : instance.restricted_shared_vpc_project_id],
+  }
+
+  allowed_vertex_images = [
+    "ainotebooks-vm/deeplearning-platform-release/image-family/pytorch-1-13-cu113-notebooks",
+    "ainotebooks-vm/deeplearning-platform-release/image-family/pytorch-1-13-cu113-notebooks",
+    "ainotebooks-vm/deeplearning-platform-release/image-family/common-cu113-notebooks",
+    "ainotebooks-vm/deeplearning-platform-release/image-family/common-cpu-notebooks",
+    "ainotebooks-container/us-docker.pkg.dev/deeplearning-platform-release/gcr.io/base-cu113.py310",
+    "ainotebooks-container/us-docker.pkg.dev/deeplearning-platform-release/gcr.io/base-cu113.py37",
+    "ainotebooks-container/us-docker.pkg.dev/deeplearning-platform-release/gcr.io/base-cu110.py310",
+    "ainotebooks-container/us-docker.pkg.dev/deeplearning-platform-release/gcr.io/tf2-cpu.2-12.py310",
+    "ainotebooks-container/us-docker.pkg.dev/deeplearning-platform-release/gcr.io/tf2-gpu.2-12.py310"
+  ]
+
+  restricted_services = [
+    "alloydb.googleapis.com"
+  ]
+
+  allowed_integrations = [
+    "github.com",
+    "source.developers.google.com"
+  ]
+
+  restricted_tls_versions = [
+    "TLS_VERSION_1",
+    "TLS_VERSION_1_1"
+  ]
+
+  restricted_non_cmek_services = [
+    "bigquery.googleapis.com",
+    "aiplatform.googleapis.com"
+  ]
+
+  allowed_vertex_access_modes = [
+    "single-user",
+    "service-account"
+  ]
+}
diff --git a/docs/assets/terraform/2-environments/README.md b/docs/assets/terraform/2-environments/README.md
new file mode 100644
index 00000000..092ada1b
--- /dev/null
+++ b/docs/assets/terraform/2-environments/README.md
@@ -0,0 +1 @@
+# Terraform code in this directory is used on docs as reference/assets.
diff --git a/docs/assets/terraform/2-environments/ml_key_rings.tf b/docs/assets/terraform/2-environments/ml_key_rings.tf
new file mode 100644
index 00000000..05abada3
--- /dev/null
+++ b/docs/assets/terraform/2-environments/ml_key_rings.tf
@@ -0,0 +1,33 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+locals {
+  logging_key_name = module.env_logs.project_id
+}
+
+// Creates a keyring with logging key for each region (us-central1, us-east4)
+module "kms_keyring" {
+  source = "../ml_kms_keyring"
+
+  keyring_admins = [
+    "serviceAccount:${local.projects_step_terraform_service_account_email}"
+  ]
+  project_id          = module.env_kms.project_id
+  keyring_regions     = var.keyring_regions
+  keyring_name        = var.keyring_name
+  keys                = [local.logging_key_name]
+  kms_prevent_destroy = var.kms_prevent_destroy
+}
diff --git a/docs/assets/terraform/2-environments/ml_logging.tf b/docs/assets/terraform/2-environments/ml_logging.tf
new file mode 100644
index 00000000..61a4e0e5
--- /dev/null
+++ b/docs/assets/terraform/2-environments/ml_logging.tf
@@ -0,0 +1,87 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+data "google_storage_project_service_account" "gcs_logging_account" {
+  project = module.env_logs.project_id
+}
+
+/******************************************
+  Project for Environment Logging
+*****************************************/
+
+module "env_logs" {
+  source  = "terraform-google-modules/project-factory/google"
+  version = "~> 14.0"
+
+  random_project_id        = true
+  random_project_id_length = 4
+  default_service_account  = "deprivilege"
+  name                     = "${local.project_prefix}-${var.environment_code}-logging"
+  org_id                   = local.org_id
+  billing_account          = local.billing_account
+  folder_id                = google_folder.env.id
+  activate_apis            = ["logging.googleapis.com", "billingbudgets.googleapis.com", "storage.googleapis.com"]
+
+  labels = {
+    environment       = var.env
+    application_name  = "env-logging"
+    billing_code      = "1234"
+    primary_contact   = "example1"
+    secondary_contact = "example2"
+    business_code     = "abcd"
+    env_code          = var.environment_code
+  }
+  budget_alert_pubsub_topic   = var.project_budget.logging_alert_pubsub_topic
+  budget_alert_spent_percents = var.project_budget.logging_alert_spent_percents
+  budget_amount               = var.project_budget.logging_budget_amount
+  budget_alert_spend_basis    = var.project_budget.logging_budget_alert_spend_basis
+
+}
+
+// Create Bucket for this project
+resource "google_storage_bucket" "log_bucket" {
+  name                        = "${var.gcs_bucket_prefix}-${module.env_logs.project_id}"
+  location                    = var.gcs_logging_bucket_location
+  project                     = module.env_logs.project_id
+  uniform_bucket_level_access = true
+
+  dynamic "retention_policy" {
+    for_each = var.gcs_logging_retention_period != null ? [var.gcs_logging_retention_period] : []
+    content {
+      is_locked        = var.gcs_logging_retention_period.is_locked
+      retention_period = var.gcs_logging_retention_period.retention_period_days * 24 * 60 * 60
+    }
+  }
+
+  encryption {
+    default_kms_key_name = google_kms_crypto_key_iam_member.gcs_logging_key.crypto_key_id #module.kms_keyring.keys_by_region[var.gcs_logging_bucket_location][local.logging_key_name]
+  }
+}
+
+/******************************************
+  Logging Bucket - IAM
+*****************************************/
+# resource "google_storage_bucket_iam_member" "bucket_logging" {
+#   bucket = google_storage_bucket.log_bucket.name
+#   role   = "roles/storage.objectCreator"
+#   member = "group:cloud-storage-analytics@google.com"
+# }
+
+resource "google_kms_crypto_key_iam_member" "gcs_logging_key" {
+  crypto_key_id = module.kms_keyring.keys_by_region[var.gcs_logging_bucket_location][local.logging_key_name]
+  role          = "roles/cloudkms.cryptoKeyEncrypterDecrypter"
+  member        = "serviceAccount:${data.google_storage_project_service_account.gcs_logging_account.email_address}"
+}
diff --git a/docs/assets/terraform/3-networks-dual-svpc/ml_dns_notebooks.tf b/docs/assets/terraform/3-networks-dual-svpc/ml_dns_notebooks.tf
new file mode 100644
index 00000000..fdae1d35
--- /dev/null
+++ b/docs/assets/terraform/3-networks-dual-svpc/ml_dns_notebooks.tf
@@ -0,0 +1,29 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+
+module "ml_dns_vertex_ai" {
+  source = "../ml_dns_notebooks"
+
+  project_id                         = local.restricted_project_id
+  private_service_connect_ip         = var.restricted_private_service_connect_ip
+  private_visibility_config_networks = [module.restricted_shared_vpc.network_self_link]
+  zone_names = {
+    kernels_googleusercontent_zone   = "dz-${var.environment_code}-shared-restricted-kernels-googleusercontent"
+    notebooks_googleusercontent_zone = "dz-${var.environment_code}-shared-restricted-notebooks-googleusercontent"
+    notebooks_cloudgoogle_zone       = "dz-${var.environment_code}-shared-restricted-notebooks"
+  }
+}
\ No newline at end of file
diff --git a/docs/assets/terraform/4-projects/common.auto.example.tfvars b/docs/assets/terraform/4-projects/common.auto.example.tfvars
new file mode 100644
index 00000000..49cf2d8a
--- /dev/null
+++ b/docs/assets/terraform/4-projects/common.auto.example.tfvars
@@ -0,0 +1,17 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+remote_state_bucket = "REMOTE_STATE_BUCKET"
diff --git a/docs/assets/terraform/4-projects/development.auto.example.tfvars b/docs/assets/terraform/4-projects/development.auto.example.tfvars
new file mode 100644
index 00000000..b8e661cb
--- /dev/null
+++ b/docs/assets/terraform/4-projects/development.auto.example.tfvars
@@ -0,0 +1,19 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+location_kms = "us"
+location_gcs = "US"
+env          = "development"
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/development/README.md b/docs/assets/terraform/4-projects/ml_business_unit/development/README.md
new file mode 100644
index 00000000..fd36be6e
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/development/README.md
@@ -0,0 +1,25 @@
+<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+## Inputs
+
+| Name | Description | Type | Default | Required |
+|------|-------------|------|---------|:--------:|
+| default\_region | Default region to create resources where applicable. | `string` | `"us-central1"` | no |
+| env | The environment this deployment belongs to (ie. development) | `string` | n/a | yes |
+| key\_rotation\_period | Rotation period in seconds to be used for KMS Key | `string` | `"7776000s"` | no |
+| location\_gcs | Case-Sensitive Location for GCS Bucket (Should be same region as the KMS Keyring) | `string` | `"US"` | no |
+| location\_kms | Case-Sensitive Location for KMS Keyring (Should be same region as the GCS Bucket) | `string` | `"us"` | no |
+| peering\_module\_depends\_on | List of modules or resources peering module depends on. | `list(any)` | `[]` | no |
+| project\_budget | Budget configuration.<br>  budget\_amount: The amount to use as the budget.<br>  alert\_spent\_percents: A list of percentages of the budget to alert on when threshold is exceeded.<br>  alert\_pubsub\_topic: The name of the Cloud Pub/Sub topic where budget related messages will be published, in the form of `projects/{project_id}/topics/{topic_id}`.<br>  alert\_spend\_basis: The type of basis used to determine if spend has passed the threshold. Possible choices are `CURRENT_SPEND` or `FORECASTED_SPEND` (default). | <pre>object({<br>    budget_amount        = optional(number, 1000)<br>    alert_spent_percents = optional(list(number), [1.2])<br>    alert_pubsub_topic   = optional(string, null)<br>    alert_spend_basis    = optional(string, "FORECASTED_SPEND")<br>  })</pre> | `{}` | no |
+| remote\_state\_bucket | Backend bucket to load Terraform Remote State Data from previous steps. | `string` | n/a | yes |
+| tfc\_org\_name | Name of the TFC organization. | `string` | `""` | no |
+
+## Outputs
+
+| Name | Description |
+|------|-------------|
+| enable\_cloudbuild\_deploy | Enable infra deployment using Cloud Build. |
+| machine\_learning\_kms\_keys | Key ID for the machine learning project. |
+| machine\_learning\_project\_id | Project machine learning project. |
+| machine\_learning\_project\_number | Project number of machine learning project. |
+
+<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/development/backend.tf b/docs/assets/terraform/4-projects/ml_business_unit/development/backend.tf
new file mode 100644
index 00000000..e5ccedf9
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/development/backend.tf
@@ -0,0 +1,22 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+terraform {
+  backend "gcs" {
+    bucket = "UPDATE_PROJECTS_BACKEND"
+    prefix = "terraform/projects/ml_business_unit/development"
+  }
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/development/backend.tf.cloud.example b/docs/assets/terraform/4-projects/ml_business_unit/development/backend.tf.cloud.example
new file mode 100644
index 00000000..c09ed6d6
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/development/backend.tf.cloud.example
@@ -0,0 +1,23 @@
+/**
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+terraform {
+  cloud {
+    workspaces {
+      name = "4-ml-development"
+    }
+  }
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/development/common.auto.tfvars b/docs/assets/terraform/4-projects/ml_business_unit/development/common.auto.tfvars
new file mode 120000
index 00000000..39aaa462
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/development/common.auto.tfvars
@@ -0,0 +1 @@
+../../common.auto.tfvars
\ No newline at end of file
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/development/development.auto.tfvars b/docs/assets/terraform/4-projects/ml_business_unit/development/development.auto.tfvars
new file mode 120000
index 00000000..0351835d
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/development/development.auto.tfvars
@@ -0,0 +1 @@
+../../development.auto.tfvars
\ No newline at end of file
diff --git a/policy-library/storage_logging.yaml b/docs/assets/terraform/4-projects/ml_business_unit/development/locals.tf
similarity index 58%
rename from policy-library/storage_logging.yaml
rename to docs/assets/terraform/4-projects/ml_business_unit/development/locals.tf
index b1e003ef..b10bf71e 100644
--- a/policy-library/storage_logging.yaml
+++ b/docs/assets/terraform/4-projects/ml_business_unit/development/locals.tf
@@ -1,4 +1,4 @@
-# Copyright 2021 Google LLC
+# Copyright 2024 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -12,16 +12,8 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
-apiVersion: constraints.gatekeeper.sh/v1alpha1
-kind: GCPStorageLoggingConstraintV1
-metadata:
-  name: storage_logging
-  annotations:
-    description: Ensure storage logs are delivered to a separate bucket
-spec:
-  severity: high
-  match:
-    ancestries:
-    - "organizations/**"
-    excludedAncestries: [] # optional, default is no exclusions
-  parameters: {}
+locals {
+  repo_name     = "ml-composer"
+  business_code = "ml"
+  business_unit = "ml_business_unit"
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/development/main.tf b/docs/assets/terraform/4-projects/ml_business_unit/development/main.tf
new file mode 100644
index 00000000..bfc78518
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/development/main.tf
@@ -0,0 +1,35 @@
+/**
+ * Copyright 2022 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module "bu_folder" {
+  source              = "../../modules/env_folders"
+  business_code       = local.business_code
+  remote_state_bucket = var.remote_state_bucket
+  env                 = var.env
+}
+
+module "ml_env" {
+  source = "../../modules/ml_env"
+
+  env                  = var.env
+  business_code        = local.business_code
+  business_unit        = local.business_unit
+  remote_state_bucket  = var.remote_state_bucket
+  location_gcs         = var.location_gcs
+  tfc_org_name         = var.tfc_org_name
+  business_unit_folder = module.bu_folder.business_unit_folder
+}
+
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/development/outputs.tf b/docs/assets/terraform/4-projects/ml_business_unit/development/outputs.tf
new file mode 100644
index 00000000..947cd723
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/development/outputs.tf
@@ -0,0 +1,35 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+output "machine_learning_project_id" {
+  description = "Project machine learning project."
+  value       = module.ml_env.machine_learning_project_id
+}
+
+output "machine_learning_project_number" {
+  description = "Project number of machine learning project."
+  value       = module.ml_env.machine_learning_project_number
+}
+
+output "machine_learning_kms_keys" {
+  description = "Key ID for the machine learning project."
+  value       = module.ml_env.machine_learning_kms_keys
+}
+
+output "enable_cloudbuild_deploy" {
+  description = "Enable infra deployment using Cloud Build."
+  value       = local.enable_cloudbuild_deploy
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/development/remote.tf b/docs/assets/terraform/4-projects/ml_business_unit/development/remote.tf
new file mode 100644
index 00000000..19fd1ffb
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/development/remote.tf
@@ -0,0 +1,60 @@
+/**
+ * Copyright 2022 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+locals {
+  org_id                             = data.terraform_remote_state.bootstrap.outputs.common_config.org_id
+  parent_folder                      = data.terraform_remote_state.bootstrap.outputs.common_config.parent_folder
+  parent                             = data.terraform_remote_state.bootstrap.outputs.common_config.parent_id
+  location_gcs                       = try(data.terraform_remote_state.bootstrap.outputs.common_config.default_region, var.location_gcs)
+  billing_account                    = data.terraform_remote_state.bootstrap.outputs.common_config.billing_account
+  common_folder_name                 = data.terraform_remote_state.org.outputs.common_folder_name
+  common_kms_project_id              = data.terraform_remote_state.org.outputs.org_kms_project_id
+  default_region                     = data.terraform_remote_state.bootstrap.outputs.common_config.default_region
+  project_prefix                     = data.terraform_remote_state.bootstrap.outputs.common_config.project_prefix
+  folder_prefix                      = data.terraform_remote_state.bootstrap.outputs.common_config.folder_prefix
+  projects_remote_bucket_tfstate     = data.terraform_remote_state.bootstrap.outputs.projects_gcs_bucket_tfstate
+  cloud_build_private_worker_pool_id = try(data.terraform_remote_state.bootstrap.outputs.cloud_build_private_worker_pool_id, "")
+  cloud_builder_artifact_repo        = try(data.terraform_remote_state.bootstrap.outputs.cloud_builder_artifact_repo, "")
+  enable_cloudbuild_deploy           = local.cloud_builder_artifact_repo != ""
+  environment_kms_key_ring           = data.terraform_remote_state.environments_env.outputs.key_rings
+}
+
+data "terraform_remote_state" "bootstrap" {
+  backend = "gcs"
+
+  config = {
+    bucket = var.remote_state_bucket
+    prefix = "terraform/bootstrap/state"
+  }
+}
+
+data "terraform_remote_state" "org" {
+  backend = "gcs"
+
+  config = {
+    bucket = var.remote_state_bucket
+    prefix = "terraform/org/state"
+  }
+}
+
+data "terraform_remote_state" "environments_env" {
+  backend = "gcs"
+
+  config = {
+    bucket = var.remote_state_bucket
+    prefix = "terraform/environments/${var.env}"
+  }
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/development/variables.tf b/docs/assets/terraform/4-projects/ml_business_unit/development/variables.tf
new file mode 100644
index 00000000..59a87d1f
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/development/variables.tf
@@ -0,0 +1,78 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+variable "env" {
+  description = "The environment this deployment belongs to (ie. development)"
+  type        = string
+}
+variable "default_region" {
+  description = "Default region to create resources where applicable."
+  type        = string
+  default     = "us-central1"
+}
+
+variable "remote_state_bucket" {
+  description = "Backend bucket to load Terraform Remote State Data from previous steps."
+  type        = string
+}
+
+variable "location_kms" {
+  description = "Case-Sensitive Location for KMS Keyring (Should be same region as the GCS Bucket)"
+  type        = string
+  default     = "us"
+}
+
+variable "location_gcs" {
+  description = "Case-Sensitive Location for GCS Bucket (Should be same region as the KMS Keyring)"
+  type        = string
+  default     = "US"
+}
+
+variable "peering_module_depends_on" {
+  description = "List of modules or resources peering module depends on."
+  type        = list(any)
+  default     = []
+}
+
+variable "tfc_org_name" {
+  description = "Name of the TFC organization."
+  type        = string
+  default     = ""
+}
+
+variable "project_budget" {
+  description = <<EOT
+  Budget configuration.
+  budget_amount: The amount to use as the budget.
+  alert_spent_percents: A list of percentages of the budget to alert on when threshold is exceeded.
+  alert_pubsub_topic: The name of the Cloud Pub/Sub topic where budget related messages will be published, in the form of `projects/{project_id}/topics/{topic_id}`.
+  alert_spend_basis: The type of basis used to determine if spend has passed the threshold. Possible choices are `CURRENT_SPEND` or `FORECASTED_SPEND` (default).
+  EOT
+  type = object({
+    budget_amount        = optional(number, 1000)
+    alert_spent_percents = optional(list(number), [1.2])
+    alert_pubsub_topic   = optional(string, null)
+    alert_spend_basis    = optional(string, "FORECASTED_SPEND")
+  })
+  default = {}
+}
+
+variable "key_rotation_period" {
+  description = "Rotation period in seconds to be used for KMS Key"
+  type        = string
+  default     = "7776000s"
+}
+
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/development/versions.tf b/docs/assets/terraform/4-projects/ml_business_unit/development/versions.tf
new file mode 100644
index 00000000..b48e9763
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/development/versions.tf
@@ -0,0 +1,30 @@
+# Copyright 2024 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+terraform {
+  required_version = ">= 0.13"
+
+  required_providers {
+
+    google = {
+      source  = "hashicorp/google"
+      version = ">= 3.77, < 6"
+    }
+
+    google-beta = {
+      source  = "hashicorp/google-beta"
+      version = ">= 3.77, < 6"
+    }
+  }
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/README.md b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/README.md
new file mode 100644
index 00000000..fd36be6e
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/README.md
@@ -0,0 +1,25 @@
+<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+## Inputs
+
+| Name | Description | Type | Default | Required |
+|------|-------------|------|---------|:--------:|
+| default\_region | Default region to create resources where applicable. | `string` | `"us-central1"` | no |
+| env | The environment this deployment belongs to (ie. development) | `string` | n/a | yes |
+| key\_rotation\_period | Rotation period in seconds to be used for KMS Key | `string` | `"7776000s"` | no |
+| location\_gcs | Case-Sensitive Location for GCS Bucket (Should be same region as the KMS Keyring) | `string` | `"US"` | no |
+| location\_kms | Case-Sensitive Location for KMS Keyring (Should be same region as the GCS Bucket) | `string` | `"us"` | no |
+| peering\_module\_depends\_on | List of modules or resources peering module depends on. | `list(any)` | `[]` | no |
+| project\_budget | Budget configuration.<br>  budget\_amount: The amount to use as the budget.<br>  alert\_spent\_percents: A list of percentages of the budget to alert on when threshold is exceeded.<br>  alert\_pubsub\_topic: The name of the Cloud Pub/Sub topic where budget related messages will be published, in the form of `projects/{project_id}/topics/{topic_id}`.<br>  alert\_spend\_basis: The type of basis used to determine if spend has passed the threshold. Possible choices are `CURRENT_SPEND` or `FORECASTED_SPEND` (default). | <pre>object({<br>    budget_amount        = optional(number, 1000)<br>    alert_spent_percents = optional(list(number), [1.2])<br>    alert_pubsub_topic   = optional(string, null)<br>    alert_spend_basis    = optional(string, "FORECASTED_SPEND")<br>  })</pre> | `{}` | no |
+| remote\_state\_bucket | Backend bucket to load Terraform Remote State Data from previous steps. | `string` | n/a | yes |
+| tfc\_org\_name | Name of the TFC organization. | `string` | `""` | no |
+
+## Outputs
+
+| Name | Description |
+|------|-------------|
+| enable\_cloudbuild\_deploy | Enable infra deployment using Cloud Build. |
+| machine\_learning\_kms\_keys | Key ID for the machine learning project. |
+| machine\_learning\_project\_id | Project machine learning project. |
+| machine\_learning\_project\_number | Project number of machine learning project. |
+
+<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/backend.tf b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/backend.tf
new file mode 100644
index 00000000..dda9d587
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/backend.tf
@@ -0,0 +1,22 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+terraform {
+  backend "gcs" {
+    bucket = "UPDATE_PROJECTS_BACKEND"
+    prefix = "terraform/projects/ml_business_unit/nonproduction"
+  }
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/backend.tf.cloud.example b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/backend.tf.cloud.example
new file mode 100644
index 00000000..33cd9944
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/backend.tf.cloud.example
@@ -0,0 +1,23 @@
+/**
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+terraform {
+  cloud {
+    workspaces {
+      name = "4-ml-nonproduction"
+    }
+  }
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/common.auto.tfvars b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/common.auto.tfvars
new file mode 120000
index 00000000..39aaa462
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/common.auto.tfvars
@@ -0,0 +1 @@
+../../common.auto.tfvars
\ No newline at end of file
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/locals.tf b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/locals.tf
new file mode 100644
index 00000000..b10bf71e
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/locals.tf
@@ -0,0 +1,19 @@
+# Copyright 2024 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+locals {
+  repo_name     = "ml-composer"
+  business_code = "ml"
+  business_unit = "ml_business_unit"
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/main.tf b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/main.tf
new file mode 100644
index 00000000..ec57d449
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/main.tf
@@ -0,0 +1,34 @@
+/**
+ * Copyright 2022 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module "bu_folder" {
+  source              = "../../modules/env_folders"
+  business_code       = local.business_code
+  remote_state_bucket = var.remote_state_bucket
+  env                 = var.env
+}
+
+module "ml_env" {
+  source = "../../modules/ml_env"
+
+  env                  = var.env
+  business_code        = local.business_code
+  business_unit        = local.business_unit
+  remote_state_bucket  = var.remote_state_bucket
+  location_gcs         = var.location_gcs
+  tfc_org_name         = var.tfc_org_name
+  business_unit_folder = module.bu_folder.business_unit_folder
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/non-production.auto.tfvars b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/non-production.auto.tfvars
new file mode 120000
index 00000000..e878a833
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/non-production.auto.tfvars
@@ -0,0 +1 @@
+../../non-production.auto.tfvars
\ No newline at end of file
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/outputs.tf b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/outputs.tf
new file mode 100644
index 00000000..abc30061
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/outputs.tf
@@ -0,0 +1,36 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+output "machine_learning_project_id" {
+  description = "Project machine learning project."
+  value       = module.ml_env.machine_learning_project_id
+}
+
+output "machine_learning_project_number" {
+  description = "Project number of machine learning project."
+  value       = module.ml_env.machine_learning_project_number
+}
+
+output "machine_learning_kms_keys" {
+  description = "Key ID for the machine learning project."
+  value       = module.ml_env.machine_learning_kms_keys
+}
+
+
+output "enable_cloudbuild_deploy" {
+  description = "Enable infra deployment using Cloud Build."
+  value       = local.enable_cloudbuild_deploy
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/outputs.tf.backup b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/outputs.tf.backup
new file mode 100644
index 00000000..0159f645
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/outputs.tf.backup
@@ -0,0 +1,125 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+output "base_shared_vpc_project" {
+  description = "Project sample base project."
+  value       = module.env.base_shared_vpc_project
+}
+
+output "base_shared_vpc_project_sa" {
+  description = "Project sample base project SA."
+  value       = module.env.base_shared_vpc_project_sa
+}
+
+output "base_subnets_self_links" {
+  value       = module.env.base_subnets_self_links
+  description = "The self-links of subnets from base environment."
+}
+
+output "floating_project" {
+  description = "Project sample floating project."
+  value       = module.env.floating_project
+}
+
+output "peering_project" {
+  description = "Project sample peering project id."
+  value       = module.env.peering_project
+}
+
+output "peering_network" {
+  description = "Peer network peering resource."
+  value       = module.env.peering_network
+}
+
+output "restricted_shared_vpc_project" {
+  description = "Project sample restricted project id."
+  value       = module.env.restricted_shared_vpc_project
+}
+
+output "restricted_shared_vpc_project_number" {
+  description = "Project sample restricted project."
+  value       = module.env.restricted_shared_vpc_project_number
+}
+
+output "restricted_subnets_self_links" {
+  value       = module.env.restricted_subnets_self_links
+  description = "The self-links of subnets from restricted environment."
+}
+
+output "vpc_service_control_perimeter_name" {
+  description = "VPC Service Control name."
+  value       = module.env.vpc_service_control_perimeter_name
+}
+
+output "restricted_enabled_apis" {
+  description = "Activated APIs."
+  value       = module.env.restricted_enabled_apis
+}
+
+output "access_context_manager_policy_id" {
+  description = "Access Context Manager Policy ID."
+  value       = module.env.access_context_manager_policy_id
+}
+
+output "peering_complete" {
+  description = "Output to be used as a module dependency."
+  value       = module.env.peering_complete
+}
+
+output "env_kms_project" {
+  description = "Project sample for KMS usage project ID."
+  value       = module.env.env_kms_project
+}
+
+output "keyring" {
+  description = "The name of the keyring."
+  value       = module.env.keyring
+}
+
+output "keys" {
+  description = "List of created key names."
+  value       = module.env.keys
+}
+
+output "bucket" {
+  description = "The created storage bucket."
+  value       = module.env.bucket
+}
+
+output "peering_subnetwork_self_link" {
+  description = "The subnetwork self link of the peering network."
+  value       = module.env.peering_subnetwork_self_link
+}
+
+output "iap_firewall_tags" {
+  description = "The security tags created for IAP (SSH and RDP) firewall rules and to be used on the VM created on step 5-app-infra on the peering network project."
+  value       = module.env.iap_firewall_tags
+}
+
+output "machine_learning_project_id" {
+  description = "The project ID of the machine learning project."
+  value       = module.ml_env.machine_learning_project
+}
+
+output "machine_learning_project_number" {
+  description = "The project Number of the machine learning project."
+  value       = module.ml_env.machine_learning_project_number
+}
+
+output "machine_learning_key_id" {
+  description = "The kms key ID of the machine learning project."
+  value       = module.ml_env.machine_learning_key_id
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/remote.tf b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/remote.tf
new file mode 100644
index 00000000..19fd1ffb
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/remote.tf
@@ -0,0 +1,60 @@
+/**
+ * Copyright 2022 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+locals {
+  org_id                             = data.terraform_remote_state.bootstrap.outputs.common_config.org_id
+  parent_folder                      = data.terraform_remote_state.bootstrap.outputs.common_config.parent_folder
+  parent                             = data.terraform_remote_state.bootstrap.outputs.common_config.parent_id
+  location_gcs                       = try(data.terraform_remote_state.bootstrap.outputs.common_config.default_region, var.location_gcs)
+  billing_account                    = data.terraform_remote_state.bootstrap.outputs.common_config.billing_account
+  common_folder_name                 = data.terraform_remote_state.org.outputs.common_folder_name
+  common_kms_project_id              = data.terraform_remote_state.org.outputs.org_kms_project_id
+  default_region                     = data.terraform_remote_state.bootstrap.outputs.common_config.default_region
+  project_prefix                     = data.terraform_remote_state.bootstrap.outputs.common_config.project_prefix
+  folder_prefix                      = data.terraform_remote_state.bootstrap.outputs.common_config.folder_prefix
+  projects_remote_bucket_tfstate     = data.terraform_remote_state.bootstrap.outputs.projects_gcs_bucket_tfstate
+  cloud_build_private_worker_pool_id = try(data.terraform_remote_state.bootstrap.outputs.cloud_build_private_worker_pool_id, "")
+  cloud_builder_artifact_repo        = try(data.terraform_remote_state.bootstrap.outputs.cloud_builder_artifact_repo, "")
+  enable_cloudbuild_deploy           = local.cloud_builder_artifact_repo != ""
+  environment_kms_key_ring           = data.terraform_remote_state.environments_env.outputs.key_rings
+}
+
+data "terraform_remote_state" "bootstrap" {
+  backend = "gcs"
+
+  config = {
+    bucket = var.remote_state_bucket
+    prefix = "terraform/bootstrap/state"
+  }
+}
+
+data "terraform_remote_state" "org" {
+  backend = "gcs"
+
+  config = {
+    bucket = var.remote_state_bucket
+    prefix = "terraform/org/state"
+  }
+}
+
+data "terraform_remote_state" "environments_env" {
+  backend = "gcs"
+
+  config = {
+    bucket = var.remote_state_bucket
+    prefix = "terraform/environments/${var.env}"
+  }
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/variables.tf b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/variables.tf
new file mode 100644
index 00000000..59a87d1f
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/nonproduction/variables.tf
@@ -0,0 +1,78 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+variable "env" {
+  description = "The environment this deployment belongs to (ie. development)"
+  type        = string
+}
+variable "default_region" {
+  description = "Default region to create resources where applicable."
+  type        = string
+  default     = "us-central1"
+}
+
+variable "remote_state_bucket" {
+  description = "Backend bucket to load Terraform Remote State Data from previous steps."
+  type        = string
+}
+
+variable "location_kms" {
+  description = "Case-Sensitive Location for KMS Keyring (Should be same region as the GCS Bucket)"
+  type        = string
+  default     = "us"
+}
+
+variable "location_gcs" {
+  description = "Case-Sensitive Location for GCS Bucket (Should be same region as the KMS Keyring)"
+  type        = string
+  default     = "US"
+}
+
+variable "peering_module_depends_on" {
+  description = "List of modules or resources peering module depends on."
+  type        = list(any)
+  default     = []
+}
+
+variable "tfc_org_name" {
+  description = "Name of the TFC organization."
+  type        = string
+  default     = ""
+}
+
+variable "project_budget" {
+  description = <<EOT
+  Budget configuration.
+  budget_amount: The amount to use as the budget.
+  alert_spent_percents: A list of percentages of the budget to alert on when threshold is exceeded.
+  alert_pubsub_topic: The name of the Cloud Pub/Sub topic where budget related messages will be published, in the form of `projects/{project_id}/topics/{topic_id}`.
+  alert_spend_basis: The type of basis used to determine if spend has passed the threshold. Possible choices are `CURRENT_SPEND` or `FORECASTED_SPEND` (default).
+  EOT
+  type = object({
+    budget_amount        = optional(number, 1000)
+    alert_spent_percents = optional(list(number), [1.2])
+    alert_pubsub_topic   = optional(string, null)
+    alert_spend_basis    = optional(string, "FORECASTED_SPEND")
+  })
+  default = {}
+}
+
+variable "key_rotation_period" {
+  description = "Rotation period in seconds to be used for KMS Key"
+  type        = string
+  default     = "7776000s"
+}
+
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/production/README.md b/docs/assets/terraform/4-projects/ml_business_unit/production/README.md
new file mode 100644
index 00000000..bc2b0396
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/production/README.md
@@ -0,0 +1,24 @@
+<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+## Inputs
+
+| Name | Description | Type | Default | Required |
+|------|-------------|------|---------|:--------:|
+| default\_region | Default region to create resources where applicable. | `string` | `"us-central1"` | no |
+| env | The environment this deployment belongs to (ie. development) | `string` | n/a | yes |
+| instance\_region | Region which the peered subnet will be created (Should be same region as the VM that will be created on step 5-app-infra on the peering project). | `string` | `"us-central1"` | no |
+| location\_gcs | Case-Sensitive Location for GCS Bucket (Should be same region as the KMS Keyring) | `string` | `"US"` | no |
+| location\_kms | Case-Sensitive Location for KMS Keyring (Should be same region as the GCS Bucket) | `string` | `"us"` | no |
+| peering\_module\_depends\_on | List of modules or resources peering module depends on. | `list(any)` | `[]` | no |
+| remote\_state\_bucket | Backend bucket to load Terraform Remote State Data from previous steps. | `string` | n/a | yes |
+| tfc\_org\_name | Name of the TFC organization | `string` | `""` | no |
+
+## Outputs
+
+| Name | Description |
+|------|-------------|
+| enable\_cloudbuild\_deploy | Enable infra deployment using Cloud Build. |
+| machine\_learning\_kms\_keys | Key ID for the machine learning project. |
+| machine\_learning\_project\_id | Project machine learning project. |
+| machine\_learning\_project\_number | Project number of machine learning project. |
+
+<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/production/backend.tf b/docs/assets/terraform/4-projects/ml_business_unit/production/backend.tf
new file mode 100644
index 00000000..f900eb0c
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/production/backend.tf
@@ -0,0 +1,22 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+terraform {
+  backend "gcs" {
+    bucket = "UPDATE_PROJECTS_BACKEND"
+    prefix = "terraform/projects/ml_business_unit/production"
+  }
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/production/backend.tf.cloud.example b/docs/assets/terraform/4-projects/ml_business_unit/production/backend.tf.cloud.example
new file mode 100644
index 00000000..704da6c2
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/production/backend.tf.cloud.example
@@ -0,0 +1,23 @@
+/**
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+terraform {
+  cloud {
+    workspaces {
+      name = "4-ml-production"
+    }
+  }
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/production/common.auto.tfvars b/docs/assets/terraform/4-projects/ml_business_unit/production/common.auto.tfvars
new file mode 120000
index 00000000..39aaa462
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/production/common.auto.tfvars
@@ -0,0 +1 @@
+../../common.auto.tfvars
\ No newline at end of file
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/production/locals.tf b/docs/assets/terraform/4-projects/ml_business_unit/production/locals.tf
new file mode 100644
index 00000000..b10bf71e
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/production/locals.tf
@@ -0,0 +1,19 @@
+# Copyright 2024 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+locals {
+  repo_name     = "ml-composer"
+  business_code = "ml"
+  business_unit = "ml_business_unit"
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/production/main.tf b/docs/assets/terraform/4-projects/ml_business_unit/production/main.tf
new file mode 100644
index 00000000..ec57d449
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/production/main.tf
@@ -0,0 +1,34 @@
+/**
+ * Copyright 2022 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module "bu_folder" {
+  source              = "../../modules/env_folders"
+  business_code       = local.business_code
+  remote_state_bucket = var.remote_state_bucket
+  env                 = var.env
+}
+
+module "ml_env" {
+  source = "../../modules/ml_env"
+
+  env                  = var.env
+  business_code        = local.business_code
+  business_unit        = local.business_unit
+  remote_state_bucket  = var.remote_state_bucket
+  location_gcs         = var.location_gcs
+  tfc_org_name         = var.tfc_org_name
+  business_unit_folder = module.bu_folder.business_unit_folder
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/production/outputs.tf b/docs/assets/terraform/4-projects/ml_business_unit/production/outputs.tf
new file mode 100644
index 00000000..947cd723
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/production/outputs.tf
@@ -0,0 +1,35 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+output "machine_learning_project_id" {
+  description = "Project machine learning project."
+  value       = module.ml_env.machine_learning_project_id
+}
+
+output "machine_learning_project_number" {
+  description = "Project number of machine learning project."
+  value       = module.ml_env.machine_learning_project_number
+}
+
+output "machine_learning_kms_keys" {
+  description = "Key ID for the machine learning project."
+  value       = module.ml_env.machine_learning_kms_keys
+}
+
+output "enable_cloudbuild_deploy" {
+  description = "Enable infra deployment using Cloud Build."
+  value       = local.enable_cloudbuild_deploy
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/production/outputs.tf.backup b/docs/assets/terraform/4-projects/ml_business_unit/production/outputs.tf.backup
new file mode 100644
index 00000000..0159f645
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/production/outputs.tf.backup
@@ -0,0 +1,125 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+output "base_shared_vpc_project" {
+  description = "Project sample base project."
+  value       = module.env.base_shared_vpc_project
+}
+
+output "base_shared_vpc_project_sa" {
+  description = "Project sample base project SA."
+  value       = module.env.base_shared_vpc_project_sa
+}
+
+output "base_subnets_self_links" {
+  value       = module.env.base_subnets_self_links
+  description = "The self-links of subnets from base environment."
+}
+
+output "floating_project" {
+  description = "Project sample floating project."
+  value       = module.env.floating_project
+}
+
+output "peering_project" {
+  description = "Project sample peering project id."
+  value       = module.env.peering_project
+}
+
+output "peering_network" {
+  description = "Peer network peering resource."
+  value       = module.env.peering_network
+}
+
+output "restricted_shared_vpc_project" {
+  description = "Project sample restricted project id."
+  value       = module.env.restricted_shared_vpc_project
+}
+
+output "restricted_shared_vpc_project_number" {
+  description = "Project sample restricted project."
+  value       = module.env.restricted_shared_vpc_project_number
+}
+
+output "restricted_subnets_self_links" {
+  value       = module.env.restricted_subnets_self_links
+  description = "The self-links of subnets from restricted environment."
+}
+
+output "vpc_service_control_perimeter_name" {
+  description = "VPC Service Control name."
+  value       = module.env.vpc_service_control_perimeter_name
+}
+
+output "restricted_enabled_apis" {
+  description = "Activated APIs."
+  value       = module.env.restricted_enabled_apis
+}
+
+output "access_context_manager_policy_id" {
+  description = "Access Context Manager Policy ID."
+  value       = module.env.access_context_manager_policy_id
+}
+
+output "peering_complete" {
+  description = "Output to be used as a module dependency."
+  value       = module.env.peering_complete
+}
+
+output "env_kms_project" {
+  description = "Project sample for KMS usage project ID."
+  value       = module.env.env_kms_project
+}
+
+output "keyring" {
+  description = "The name of the keyring."
+  value       = module.env.keyring
+}
+
+output "keys" {
+  description = "List of created key names."
+  value       = module.env.keys
+}
+
+output "bucket" {
+  description = "The created storage bucket."
+  value       = module.env.bucket
+}
+
+output "peering_subnetwork_self_link" {
+  description = "The subnetwork self link of the peering network."
+  value       = module.env.peering_subnetwork_self_link
+}
+
+output "iap_firewall_tags" {
+  description = "The security tags created for IAP (SSH and RDP) firewall rules and to be used on the VM created on step 5-app-infra on the peering network project."
+  value       = module.env.iap_firewall_tags
+}
+
+output "machine_learning_project_id" {
+  description = "The project ID of the machine learning project."
+  value       = module.ml_env.machine_learning_project
+}
+
+output "machine_learning_project_number" {
+  description = "The project Number of the machine learning project."
+  value       = module.ml_env.machine_learning_project_number
+}
+
+output "machine_learning_key_id" {
+  description = "The kms key ID of the machine learning project."
+  value       = module.ml_env.machine_learning_key_id
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/production/production.auto.tfvars b/docs/assets/terraform/4-projects/ml_business_unit/production/production.auto.tfvars
new file mode 120000
index 00000000..be31a2ed
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/production/production.auto.tfvars
@@ -0,0 +1 @@
+../../production.auto.tfvars
\ No newline at end of file
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/production/remote.tf b/docs/assets/terraform/4-projects/ml_business_unit/production/remote.tf
new file mode 100644
index 00000000..19fd1ffb
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/production/remote.tf
@@ -0,0 +1,60 @@
+/**
+ * Copyright 2022 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+locals {
+  org_id                             = data.terraform_remote_state.bootstrap.outputs.common_config.org_id
+  parent_folder                      = data.terraform_remote_state.bootstrap.outputs.common_config.parent_folder
+  parent                             = data.terraform_remote_state.bootstrap.outputs.common_config.parent_id
+  location_gcs                       = try(data.terraform_remote_state.bootstrap.outputs.common_config.default_region, var.location_gcs)
+  billing_account                    = data.terraform_remote_state.bootstrap.outputs.common_config.billing_account
+  common_folder_name                 = data.terraform_remote_state.org.outputs.common_folder_name
+  common_kms_project_id              = data.terraform_remote_state.org.outputs.org_kms_project_id
+  default_region                     = data.terraform_remote_state.bootstrap.outputs.common_config.default_region
+  project_prefix                     = data.terraform_remote_state.bootstrap.outputs.common_config.project_prefix
+  folder_prefix                      = data.terraform_remote_state.bootstrap.outputs.common_config.folder_prefix
+  projects_remote_bucket_tfstate     = data.terraform_remote_state.bootstrap.outputs.projects_gcs_bucket_tfstate
+  cloud_build_private_worker_pool_id = try(data.terraform_remote_state.bootstrap.outputs.cloud_build_private_worker_pool_id, "")
+  cloud_builder_artifact_repo        = try(data.terraform_remote_state.bootstrap.outputs.cloud_builder_artifact_repo, "")
+  enable_cloudbuild_deploy           = local.cloud_builder_artifact_repo != ""
+  environment_kms_key_ring           = data.terraform_remote_state.environments_env.outputs.key_rings
+}
+
+data "terraform_remote_state" "bootstrap" {
+  backend = "gcs"
+
+  config = {
+    bucket = var.remote_state_bucket
+    prefix = "terraform/bootstrap/state"
+  }
+}
+
+data "terraform_remote_state" "org" {
+  backend = "gcs"
+
+  config = {
+    bucket = var.remote_state_bucket
+    prefix = "terraform/org/state"
+  }
+}
+
+data "terraform_remote_state" "environments_env" {
+  backend = "gcs"
+
+  config = {
+    bucket = var.remote_state_bucket
+    prefix = "terraform/environments/${var.env}"
+  }
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/production/variables.tf b/docs/assets/terraform/4-projects/ml_business_unit/production/variables.tf
new file mode 100644
index 00000000..ac47f95a
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/production/variables.tf
@@ -0,0 +1,59 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+variable "env" {
+  description = "The environment this deployment belongs to (ie. development)"
+  type        = string
+}
+variable "default_region" {
+  description = "Default region to create resources where applicable."
+  type        = string
+  default     = "us-central1"
+}
+variable "remote_state_bucket" {
+  description = "Backend bucket to load Terraform Remote State Data from previous steps."
+  type        = string
+}
+
+variable "location_kms" {
+  description = "Case-Sensitive Location for KMS Keyring (Should be same region as the GCS Bucket)"
+  type        = string
+  default     = "us"
+}
+
+variable "location_gcs" {
+  description = "Case-Sensitive Location for GCS Bucket (Should be same region as the KMS Keyring)"
+  type        = string
+  default     = "US"
+}
+
+variable "peering_module_depends_on" {
+  description = "List of modules or resources peering module depends on."
+  type        = list(any)
+  default     = []
+}
+
+variable "tfc_org_name" {
+  description = "Name of the TFC organization"
+  type        = string
+  default     = ""
+}
+
+variable "instance_region" {
+  description = "Region which the peered subnet will be created (Should be same region as the VM that will be created on step 5-app-infra on the peering project)."
+  type        = string
+  default     = "us-central1"
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/shared/README.md b/docs/assets/terraform/4-projects/ml_business_unit/shared/README.md
new file mode 100644
index 00000000..b65cb8a9
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/shared/README.md
@@ -0,0 +1,40 @@
+<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+## Inputs
+
+| Name | Description | Type | Default | Required |
+|------|-------------|------|---------|:--------:|
+| cloud\_source\_artifacts\_repo\_name | Name to give the could source repository for Artifacts | `string` | n/a | yes |
+| cloud\_source\_service\_catalog\_repo\_name | Name to give the cloud source repository for Service Catalog | `string` | n/a | yes |
+| default\_region | Default region to create resources where applicable. | `string` | `"us-central1"` | no |
+| gcs\_bucket\_prefix | Name prefix to be used for GCS Bucket | `string` | `"bkt"` | no |
+| key\_rotation\_period | Rotation period in seconds to be used for KMS Key | `string` | `"7776000s"` | no |
+| keyring\_name | Name to be used for KMS Keyring | `string` | `"sample-keyring"` | no |
+| location\_gcs | Case-Sensitive Location for GCS Bucket | `string` | `"US"` | no |
+| location\_kms | Case-Sensitive Location for KMS Keyring | `string` | `"us"` | no |
+| prevent\_destroy | Prevent Project Key destruction. | `bool` | `true` | no |
+| project\_budget | Budget configuration.<br>  budget\_amount: The amount to use as the budget.<br>  alert\_spent\_percents: A list of percentages of the budget to alert on when threshold is exceeded.<br>  alert\_pubsub\_topic: The name of the Cloud Pub/Sub topic where budget related messages will be published, in the form of `projects/{project_id}/topics/{topic_id}`.<br>  alert\_spend\_basis: The type of basis used to determine if spend has passed the threshold. Possible choices are `CURRENT_SPEND` or `FORECASTED_SPEND` (default). | <pre>object({<br>    budget_amount        = optional(number, 1000)<br>    alert_spent_percents = optional(list(number), [1.2])<br>    alert_pubsub_topic   = optional(string, null)<br>    alert_spend_basis    = optional(string, "FORECASTED_SPEND")<br>  })</pre> | `{}` | no |
+| remote\_state\_bucket | Backend bucket to load Terraform Remote State Data from previous steps. | `string` | n/a | yes |
+| tfc\_org\_name | Name of the TFC organization | `string` | `""` | no |
+
+## Outputs
+
+| Name | Description |
+|------|-------------|
+| apply\_triggers\_id | CB apply triggers |
+| artifact\_buckets | GCS Buckets to store Cloud Build Artifacts |
+| artifacts\_repo\_id | ID of the Artifacts repository |
+| artifacts\_repo\_name | The name of the Artifacts repository |
+| cloudbuild\_project\_id | n/a |
+| common\_artifacts\_project\_id | App Infra Artifacts Project ID |
+| default\_region | Default region to create resources where applicable. |
+| enable\_cloudbuild\_deploy | Enable infra deployment using Cloud Build. |
+| log\_buckets | GCS Buckets to store Cloud Build logs |
+| plan\_triggers\_id | CB plan triggers |
+| repos | CSRs to store source code |
+| service\_catalog\_project\_id | Service Catalog Project ID. |
+| service\_catalog\_repo\_id | ID of the Service Catalog repository |
+| service\_catalog\_repo\_name | The name of the Service Catalog repository |
+| state\_buckets | GCS Buckets to store TF state |
+| terraform\_service\_accounts | APP Infra Pipeline Terraform Accounts. |
+
+<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/shared/backend.tf b/docs/assets/terraform/4-projects/ml_business_unit/shared/backend.tf
new file mode 100644
index 00000000..130bb23c
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/shared/backend.tf
@@ -0,0 +1,22 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+terraform {
+  backend "gcs" {
+    bucket = "UPDATE_PROJECTS_BACKEND"
+    prefix = "terraform/projects/ml_business_unit/shared"
+  }
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/shared/backend.tf.cloud.example b/docs/assets/terraform/4-projects/ml_business_unit/shared/backend.tf.cloud.example
new file mode 100644
index 00000000..5dfb05be
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/shared/backend.tf.cloud.example
@@ -0,0 +1,23 @@
+/**
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+terraform {
+  cloud {
+    workspaces {
+      name = "4-bu2-shared"
+    }
+  }
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/shared/common.auto.tfvars b/docs/assets/terraform/4-projects/ml_business_unit/shared/common.auto.tfvars
new file mode 120000
index 00000000..39aaa462
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/shared/common.auto.tfvars
@@ -0,0 +1 @@
+../../common.auto.tfvars
\ No newline at end of file
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/shared/example_infra_pipeline.tf b/docs/assets/terraform/4-projects/ml_business_unit/shared/example_infra_pipeline.tf
new file mode 100644
index 00000000..e12c51eb
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/shared/example_infra_pipeline.tf
@@ -0,0 +1,90 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+locals {
+  repo_names = [
+    "ml-artifact-publish",
+    "ml-service-catalog",
+    "ml-machine-learning",
+  ]
+}
+
+module "app_infra_cloudbuild_project" {
+  source = "../../modules/ml_single_project"
+  count  = local.enable_cloudbuild_deploy ? 1 : 0
+
+  org_id              = local.org_id
+  billing_account     = local.billing_account
+  folder_id           = local.common_folder_name
+  environment         = "common"
+  project_budget      = var.project_budget
+  project_prefix      = local.project_prefix
+  key_rings           = local.shared_kms_key_ring
+  remote_state_bucket = var.remote_state_bucket
+  activate_apis = [
+    "cloudbuild.googleapis.com",
+    "sourcerepo.googleapis.com",
+    "cloudkms.googleapis.com",
+    "iam.googleapis.com",
+    "artifactregistry.googleapis.com",
+    "cloudresourcemanager.googleapis.com",
+    "serviceusage.googleapis.com",
+    "bigquery.googleapis.com",
+  ]
+  # Metadata
+  project_suffix    = "infra-pipeline"
+  application_name  = "app-infra-pipelines"
+  billing_code      = "1234"
+  primary_contact   = "example@example.com"
+  secondary_contact = "example2@example.com"
+  business_code     = "ml"
+
+  environment_kms_project_id = ""
+  project_name               = "prj-c-ml-infra-pipeline"
+  prevent_destroy            = var.prevent_destroy
+}
+
+module "infra_pipelines" {
+  source = "../../modules/infra_pipelines"
+  count  = local.enable_cloudbuild_deploy ? 1 : 0
+
+  org_id                      = local.org_id
+  cloudbuild_project_id       = module.app_infra_cloudbuild_project[0].project_id
+  cloud_builder_artifact_repo = local.cloud_builder_artifact_repo
+  remote_tfstate_bucket       = local.projects_remote_bucket_tfstate
+  billing_account             = local.billing_account
+  default_region              = var.default_region
+  app_infra_repos             = local.repo_names
+  private_worker_pool_id      = local.cloud_build_private_worker_pool_id
+}
+
+resource "google_kms_key_ring_iam_member" "key_ring" {
+  for_each    = { for k in flatten([for kms in local.shared_kms_key_ring : [for name, email in module.infra_pipelines[0].terraform_service_accounts : { key = "${kms}--${name}", kms = kms, email = email }]]) : k.key => k }
+  key_ring_id = each.value.kms
+  role        = "roles/cloudkms.admin"
+  member      = "serviceAccount:${each.value.email}"
+}
+
+/**
+ * When Jenkins CICD is used for deployment this resource
+ * is created to terraform validation works.
+ * Without this resource, this module creates zero resources
+ * and it breaks terraform validation throwing the error below:
+ * ERROR: [Terraform plan json does not contain resource_changes key]
+ */
+resource "null_resource" "jenkins_cicd" {
+  count = !local.enable_cloudbuild_deploy ? 1 : 0
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/shared/ml_infra_projects.tf b/docs/assets/terraform/4-projects/ml_business_unit/shared/ml_infra_projects.tf
new file mode 100644
index 00000000..7640d30e
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/shared/ml_infra_projects.tf
@@ -0,0 +1,36 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module "ml_infra_projects" {
+  source = "../../modules/ml_infra_projects"
+
+  org_id                                 = local.org_id
+  folder_id                              = local.common_folder_name
+  billing_account                        = local.billing_account
+  environment                            = "common"
+  key_rings                              = local.shared_kms_key_ring
+  business_code                          = "ml"
+  billing_code                           = "1234"
+  primary_contact                        = "example@example.com"
+  secondary_contact                      = "example2@example.com"
+  cloud_source_artifacts_repo_name       = var.cloud_source_artifacts_repo_name
+  cloud_source_service_catalog_repo_name = var.cloud_source_service_catalog_repo_name
+  remote_state_bucket                    = var.remote_state_bucket
+  artifacts_infra_pipeline_sa            = module.infra_pipelines[0].terraform_service_accounts["ml-artifact-publish"]
+  service_catalog_infra_pipeline_sa      = module.infra_pipelines[0].terraform_service_accounts["ml-service-catalog"]
+  environment_kms_project_id             = ""
+  prevent_destroy                        = var.prevent_destroy
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/shared/outputs.tf b/docs/assets/terraform/4-projects/ml_business_unit/shared/outputs.tf
new file mode 100644
index 00000000..88c5d34c
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/shared/outputs.tf
@@ -0,0 +1,94 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+output "default_region" {
+  description = "Default region to create resources where applicable."
+  value       = try(module.infra_pipelines[0].default_region, "")
+}
+
+output "cloudbuild_project_id" {
+  value = try(module.app_infra_cloudbuild_project[0].project_id, "")
+}
+
+output "terraform_service_accounts" {
+  description = "APP Infra Pipeline Terraform Accounts."
+  value       = try(module.infra_pipelines[0].terraform_service_accounts, {})
+}
+
+output "repos" {
+  description = "CSRs to store source code"
+  value       = try(module.infra_pipelines[0].repos, toset([]))
+}
+
+output "artifact_buckets" {
+  description = "GCS Buckets to store Cloud Build Artifacts"
+  value       = try(module.infra_pipelines[0].artifact_buckets, {})
+}
+
+output "state_buckets" {
+  description = "GCS Buckets to store TF state"
+  value       = try(module.infra_pipelines[0].state_buckets, {})
+}
+
+output "log_buckets" {
+  description = "GCS Buckets to store Cloud Build logs"
+  value       = try(module.infra_pipelines[0].log_buckets, {})
+}
+
+output "plan_triggers_id" {
+  description = "CB plan triggers"
+  value       = try(module.infra_pipelines[0].plan_triggers_id, [])
+}
+
+output "apply_triggers_id" {
+  description = "CB apply triggers"
+  value       = try(module.infra_pipelines[0].apply_triggers_id, [])
+}
+
+output "enable_cloudbuild_deploy" {
+  description = "Enable infra deployment using Cloud Build."
+  value       = local.enable_cloudbuild_deploy
+}
+
+output "service_catalog_project_id" {
+  description = "Service Catalog Project ID."
+  value       = module.ml_infra_projects.service_catalog_project_id
+}
+
+output "common_artifacts_project_id" {
+  description = "App Infra Artifacts Project ID"
+  value       = module.ml_infra_projects.common_artifacts_project_id
+}
+
+output "service_catalog_repo_name" {
+  description = "The name of the Service Catalog repository"
+  value       = module.ml_infra_projects.service_catalog_repo_name
+}
+
+output "service_catalog_repo_id" {
+  description = "ID of the Service Catalog repository"
+  value       = module.ml_infra_projects.service_catalog_repo_id
+}
+
+output "artifacts_repo_name" {
+  description = "The name of the Artifacts repository"
+  value       = module.ml_infra_projects.artifacts_repo_name
+}
+
+output "artifacts_repo_id" {
+  description = "ID of the Artifacts repository"
+  value       = module.ml_infra_projects.artifacts_repo_id
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/shared/remote.tf b/docs/assets/terraform/4-projects/ml_business_unit/shared/remote.tf
new file mode 100644
index 00000000..74696cd0
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/shared/remote.tf
@@ -0,0 +1,51 @@
+/**
+ * Copyright 2022 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+locals {
+  org_id                             = data.terraform_remote_state.bootstrap.outputs.common_config.org_id
+  parent_folder                      = data.terraform_remote_state.bootstrap.outputs.common_config.parent_folder
+  parent                             = data.terraform_remote_state.bootstrap.outputs.common_config.parent_id
+  location_gcs                       = try(data.terraform_remote_state.bootstrap.outputs.common_config.default_region, var.location_gcs)
+  billing_account                    = data.terraform_remote_state.bootstrap.outputs.common_config.billing_account
+  common_folder_name                 = data.terraform_remote_state.org.outputs.common_folder_name
+  common_kms_project_id              = data.terraform_remote_state.org.outputs.org_kms_project_id
+  default_region                     = data.terraform_remote_state.bootstrap.outputs.common_config.default_region
+  project_prefix                     = data.terraform_remote_state.bootstrap.outputs.common_config.project_prefix
+  folder_prefix                      = data.terraform_remote_state.bootstrap.outputs.common_config.folder_prefix
+  projects_remote_bucket_tfstate     = data.terraform_remote_state.bootstrap.outputs.projects_gcs_bucket_tfstate
+  cloud_build_private_worker_pool_id = try(data.terraform_remote_state.bootstrap.outputs.cloud_build_private_worker_pool_id, "")
+  cloud_builder_artifact_repo        = try(data.terraform_remote_state.bootstrap.outputs.cloud_builder_artifact_repo, "")
+  enable_cloudbuild_deploy           = local.cloud_builder_artifact_repo != ""
+  shared_kms_key_ring                = data.terraform_remote_state.org.outputs.key_rings
+}
+
+data "terraform_remote_state" "bootstrap" {
+  backend = "gcs"
+
+  config = {
+    bucket = var.remote_state_bucket
+    prefix = "terraform/bootstrap/state"
+  }
+}
+
+data "terraform_remote_state" "org" {
+  backend = "gcs"
+
+  config = {
+    bucket = var.remote_state_bucket
+    prefix = "terraform/org/state"
+  }
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/shared/remote.tf.cloud.example b/docs/assets/terraform/4-projects/ml_business_unit/shared/remote.tf.cloud.example
new file mode 100644
index 00000000..525ba30a
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/shared/remote.tf.cloud.example
@@ -0,0 +1,40 @@
+/**
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+locals {
+  org_id                             = data.tfe_outputs.bootstrap.nonsensitive_values.common_config.org_id
+  parent_folder                      = data.tfe_outputs.bootstrap.nonsensitive_values.common_config.parent_folder
+  parent                             = data.tfe_outputs.bootstrap.nonsensitive_values.common_config.parent_id
+  billing_account                    = data.tfe_outputs.bootstrap.nonsensitive_values.common_config.billing_account
+  common_folder_name                 = data.tfe_outputs.org.nonsensitive_values.common_folder_name
+  default_region                     = data.tfe_outputs.bootstrap.nonsensitive_values.common_config.default_region
+  project_prefix                     = data.tfe_outputs.bootstrap.nonsensitive_values.common_config.project_prefix
+  folder_prefix                      = data.tfe_outputs.bootstrap.nonsensitive_values.common_config.folder_prefix
+  projects_remote_bucket_tfstate     = ""
+  cloud_build_private_worker_pool_id = try(data.tfe_outputs.bootstrap.nonsensitive_values.cloud_build_private_worker_pool_id, "")
+  cloud_builder_artifact_repo        = try(data.tfe_outputs.bootstrap.nonsensitive_values.cloud_builder_artifact_repo, "")
+  enable_cloudbuild_deploy           = local.cloud_builder_artifact_repo != ""
+}
+
+data "tfe_outputs" "bootstrap" {
+  organization = var.tfc_org_name
+  workspace    = "0-shared"
+}
+
+data "tfe_outputs" "org" {
+  organization = var.tfc_org_name
+  workspace    = "1-shared"
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/shared/shared.auto.tfvars b/docs/assets/terraform/4-projects/ml_business_unit/shared/shared.auto.tfvars
new file mode 120000
index 00000000..b7f8387a
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/shared/shared.auto.tfvars
@@ -0,0 +1 @@
+../../shared.auto.tfvars
\ No newline at end of file
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/shared/variables.tf b/docs/assets/terraform/4-projects/ml_business_unit/shared/variables.tf
new file mode 100644
index 00000000..7efc60d6
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/shared/variables.tf
@@ -0,0 +1,95 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+variable "default_region" {
+  description = "Default region to create resources where applicable."
+  type        = string
+  default     = "us-central1"
+}
+
+variable "location_gcs" {
+  description = "Case-Sensitive Location for GCS Bucket"
+  type        = string
+  default     = "US"
+}
+
+variable "location_kms" {
+  description = "Case-Sensitive Location for KMS Keyring"
+  type        = string
+  default     = "us"
+}
+
+variable "keyring_name" {
+  description = "Name to be used for KMS Keyring"
+  type        = string
+  default     = "sample-keyring"
+}
+
+variable "gcs_bucket_prefix" {
+  description = "Name prefix to be used for GCS Bucket"
+  type        = string
+  default     = "bkt"
+}
+
+variable "project_budget" {
+  description = <<EOT
+  Budget configuration.
+  budget_amount: The amount to use as the budget.
+  alert_spent_percents: A list of percentages of the budget to alert on when threshold is exceeded.
+  alert_pubsub_topic: The name of the Cloud Pub/Sub topic where budget related messages will be published, in the form of `projects/{project_id}/topics/{topic_id}`.
+  alert_spend_basis: The type of basis used to determine if spend has passed the threshold. Possible choices are `CURRENT_SPEND` or `FORECASTED_SPEND` (default).
+  EOT
+  type = object({
+    budget_amount        = optional(number, 1000)
+    alert_spent_percents = optional(list(number), [1.2])
+    alert_pubsub_topic   = optional(string, null)
+    alert_spend_basis    = optional(string, "FORECASTED_SPEND")
+  })
+  default = {}
+}
+
+variable "remote_state_bucket" {
+  description = "Backend bucket to load Terraform Remote State Data from previous steps."
+  type        = string
+}
+
+variable "tfc_org_name" {
+  description = "Name of the TFC organization"
+  type        = string
+  default     = ""
+}
+
+variable "key_rotation_period" {
+  description = "Rotation period in seconds to be used for KMS Key"
+  type        = string
+  default     = "7776000s"
+}
+
+variable "cloud_source_service_catalog_repo_name" {
+  description = "Name to give the cloud source repository for Service Catalog"
+  type        = string
+}
+
+variable "cloud_source_artifacts_repo_name" {
+  description = "Name to give the could source repository for Artifacts"
+  type        = string
+}
+
+variable "prevent_destroy" {
+  description = "Prevent Project Key destruction."
+  type        = bool
+  default     = true
+}
diff --git a/docs/assets/terraform/4-projects/ml_business_unit/shared/versions.tf b/docs/assets/terraform/4-projects/ml_business_unit/shared/versions.tf
new file mode 100644
index 00000000..b48e9763
--- /dev/null
+++ b/docs/assets/terraform/4-projects/ml_business_unit/shared/versions.tf
@@ -0,0 +1,30 @@
+# Copyright 2024 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+terraform {
+  required_version = ">= 0.13"
+
+  required_providers {
+
+    google = {
+      source  = "hashicorp/google"
+      version = ">= 3.77, < 6"
+    }
+
+    google-beta = {
+      source  = "hashicorp/google-beta"
+      version = ">= 3.77, < 6"
+    }
+  }
+}
diff --git a/docs/assets/terraform/4-projects/modules/env_folders/business_unit_folder.tf b/docs/assets/terraform/4-projects/modules/env_folders/business_unit_folder.tf
new file mode 100644
index 00000000..68a98ea2
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/env_folders/business_unit_folder.tf
@@ -0,0 +1,24 @@
+/**
+ * Copyright 2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+locals {
+  env_business_unit_folder_name = "${var.folder_prefix}-${var.env}-${var.business_code}"
+}
+
+resource "google_folder" "env_business_unit" {
+  display_name = local.env_business_unit_folder_name
+  parent       = local.env_folder_name
+}
diff --git a/docs/assets/terraform/4-projects/modules/env_folders/outputs.tf b/docs/assets/terraform/4-projects/modules/env_folders/outputs.tf
new file mode 100644
index 00000000..f65c0a25
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/env_folders/outputs.tf
@@ -0,0 +1,20 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+output "business_unit_folder" {
+  description = "The name of the Business Folder created."
+  value       = google_folder.env_business_unit.name
+}
diff --git a/docs/assets/terraform/4-projects/modules/env_folders/remote.tf b/docs/assets/terraform/4-projects/modules/env_folders/remote.tf
new file mode 100644
index 00000000..dcca868f
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/env_folders/remote.tf
@@ -0,0 +1,29 @@
+/**
+ * Copyright 2022 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+locals {
+  env_folder_name = data.terraform_remote_state.environments_env.outputs.env_folder
+}
+
+data "terraform_remote_state" "environments_env" {
+  backend = "gcs"
+
+  config = {
+    bucket = var.remote_state_bucket
+    prefix = "terraform/environments/${var.env}"
+  }
+}
+
diff --git a/docs/assets/terraform/4-projects/modules/env_folders/variables.tf b/docs/assets/terraform/4-projects/modules/env_folders/variables.tf
new file mode 100644
index 00000000..2297d829
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/env_folders/variables.tf
@@ -0,0 +1,36 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+variable "business_code" {
+  description = "The business code (ex. bu1)."
+  type        = string
+}
+
+variable "env" {
+  description = "The environment to prepare (ex. development)."
+  type        = string
+}
+
+variable "remote_state_bucket" {
+  description = "Backend bucket to load Terraform Remote State Data from previous steps."
+  type        = string
+}
+
+variable "folder_prefix" {
+  description = "Name prefix to use for folders created. Should be the same in all steps."
+  type        = string
+  default     = "fldr"
+}
diff --git a/docs/assets/terraform/4-projects/modules/env_folders/versions.tf b/docs/assets/terraform/4-projects/modules/env_folders/versions.tf
new file mode 100644
index 00000000..d602e6fe
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/env_folders/versions.tf
@@ -0,0 +1,29 @@
+/**
+ * Copyright 2022-2023 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+terraform {
+  required_version = ">= 1.3"
+  required_providers {
+    random = {
+      source  = "hashicorp/random"
+      version = ">= 3.3"
+    }
+  }
+
+  provider_meta "google" {
+    module_name = "blueprints/terraform/terraform-google-enterprise-genai:projects/v0.0.1"
+  }
+}
diff --git a/docs/assets/terraform/4-projects/modules/ml_env/example_vertex.tf b/docs/assets/terraform/4-projects/modules/ml_env/example_vertex.tf
new file mode 100644
index 00000000..543c14cd
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_env/example_vertex.tf
@@ -0,0 +1,240 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+locals {
+  // Project's Shared VPC
+  shared_vpc_host_project_id = local.restricted_host_project_id
+  shared_vpc_subnets         = local.restricted_subnets_self_links
+
+  shared_vpc_roles = [
+    "roles/browser",
+    "roles/compute.networkUser",
+  ]
+
+  service_identity_apis = [
+    "cloudbuild.googleapis.com",
+    "notebooks.googleapis.com"
+  ]
+
+  env_code = element(split("", var.env), 0)
+}
+
+module "machine_learning_project" {
+  source = "../ml_single_project"
+
+  org_id                             = local.org_id
+  billing_account                    = local.billing_account
+  folder_id                          = var.business_unit_folder
+  environment                        = var.env
+  vpc_type                           = "restricted"
+  default_service_account            = "keep"
+  shared_vpc_host_project_id         = local.shared_vpc_host_project_id
+  shared_vpc_subnets                 = local.shared_vpc_subnets
+  project_budget                     = var.project_budget
+  project_prefix                     = local.project_prefix
+  key_rings                          = local.environments_kms_key_ring
+  remote_state_bucket                = var.remote_state_bucket
+  vpc_service_control_attach_enabled = "true"
+  vpc_service_control_perimeter_name = "accessPolicies/${local.access_context_manager_policy_id}/servicePerimeters/${local.perimeter_name}"
+  vpc_service_control_sleep_duration = "60s"
+  // Enabling Cloud Build Deploy to use Service Accounts during the build and give permissions to the SA.
+  // The permissions will be the ones necessary for the deployment of the step 5-app-infra
+  enable_cloudbuild_deploy = local.enable_cloudbuild_deploy
+
+  // A map of Service Accounts to use on the infra pipeline (Cloud Build)
+  // Where the key is the repository name ("${var.business_code}-example-app")
+  app_infra_pipeline_service_accounts = local.app_infra_pipeline_service_accounts
+
+  // Map for the roles where the key is the repository name ("${var.business_code}-example-app")
+  // and the value is the list of roles that this SA need to deploy step 5-app-infra
+  sa_roles = {
+    "ml-machine-learning" = [
+      "roles/aiplatform.admin",
+      "roles/artifactregistry.admin",
+      "roles/bigquery.admin",
+      "roles/cloudbuild.connectionAdmin",
+      "roles/cloudbuild.builds.editor",
+      "roles/composer.admin",
+      "roles/compute.admin",
+      "roles/compute.instanceAdmin.v1",
+      "roles/compute.networkAdmin",
+      "roles/iam.roleAdmin",
+      "roles/iam.serviceAccountAdmin",
+      "roles/iam.serviceAccountUser",
+      "roles/notebooks.admin",
+      "roles/pubsub.admin",
+      "roles/resourcemanager.projectIamAdmin",
+      "roles/secretmanager.admin",
+      "roles/serviceusage.serviceUsageConsumer",
+      "roles/storage.admin",
+    ]
+  }
+
+  activate_apis = [
+    "aiplatform.googleapis.com",
+    "artifactregistry.googleapis.com",
+    "bigquery.googleapis.com",
+    "bigquerymigration.googleapis.com",
+    "bigquerystorage.googleapis.com",
+    "cloudbuild.googleapis.com",
+    "cloudkms.googleapis.com",
+    "cloudresourcemanager.googleapis.com",
+    "composer.googleapis.com",
+    "compute.googleapis.com",
+    "containerregistry.googleapis.com",
+    "dataflow.googleapis.com",
+    "dataform.googleapis.com",
+    "deploymentmanager.googleapis.com",
+    "iam.googleapis.com",
+    "logging.googleapis.com",
+    "notebooks.googleapis.com",
+    "pubsub.googleapis.com",
+    "secretmanager.googleapis.com",
+    "serviceusage.googleapis.com",
+    "storage-api.googleapis.com",
+    "storage-component.googleapis.com",
+    "storage.googleapis.com",
+  ]
+
+  # Metadata
+  project_suffix    = "machine-learning"
+  application_name  = "machine-learning"
+  billing_code      = "1234"
+  primary_contact   = "example@example.com"
+  secondary_contact = "example2@example.com"
+  business_code     = var.business_code
+
+  environment_kms_project_id = local.environment_kms_project_id
+  project_name               = "prj-${local.env_code}-${var.business_code}-machine-learning"
+  prevent_destroy            = var.prevent_destroy
+}
+
+
+// Service Agents
+resource "google_project_service_identity" "cloud_build" {
+  provider = google-beta
+
+  project = module.machine_learning_project.project_id
+  service = "cloudbuild.googleapis.com"
+}
+
+resource "google_project_service_identity" "notebooks" {
+  provider = google-beta
+
+  project = module.machine_learning_project.project_id
+  service = "notebooks.googleapis.com"
+}
+
+resource "google_project_service_identity" "secrets" {
+  provider = google-beta
+
+  project = module.machine_learning_project.project_id
+  service = "secretmanager.googleapis.com"
+}
+
+resource "google_project_service_identity" "aiplatform" {
+  provider = google-beta
+
+  project = module.machine_learning_project.project_id
+  service = "aiplatform.googleapis.com"
+}
+
+resource "time_sleep" "wait_30_seconds" {
+  create_duration = "30s"
+
+  depends_on = [
+    google_project_service_identity.cloud_build,
+    google_project_service_identity.notebooks,
+    google_project_service_identity.secrets,
+    google_project_service_identity.aiplatform,
+  ]
+}
+
+// Add cloudkms admin to sa
+resource "google_kms_crypto_key_iam_member" "kms_admin" {
+  for_each      = module.machine_learning_project.kms_keys
+  crypto_key_id = each.value.id
+  role          = "roles/cloudkms.admin"
+  member        = "serviceAccount:${local.app_infra_pipeline_service_accounts["ml-machine-learning"]}"
+}
+
+// Add crypto key viewer role to kms environment project
+resource "google_project_iam_member" "cloud_build_kms_viewer" {
+  project = local.environment_kms_project_id
+  role    = "roles/cloudkms.viewer"
+  member  = "serviceAccount:${google_project_service_identity.cloud_build.email}"
+
+  depends_on = [time_sleep.wait_30_seconds]
+}
+
+// Cloud Build's Service Agent permissions on Shared VPC
+resource "google_project_iam_member" "cloud_build_network_user" {
+  for_each = toset(local.shared_vpc_roles)
+  project  = local.shared_vpc_host_project_id
+
+  role   = each.value
+  member = "serviceAccount:${google_project_service_identity.cloud_build.email}"
+
+  depends_on = [time_sleep.wait_30_seconds]
+}
+
+// Notebooks' Aervice Agent permissions on Shared VPC
+resource "google_compute_subnetwork_iam_member" "notebook_network_user" {
+  provider = google-beta
+  for_each = { for nr in local.restricted_subnets_region : (nr.subnet) => nr }
+
+  subnetwork = each.value.subnet
+  role       = "roles/compute.networkUser"
+  region     = each.value.region
+  project    = local.shared_vpc_host_project_id
+  member     = "serviceAccount:${google_project_service_identity.notebooks.email}"
+}
+
+resource "google_kms_crypto_key_iam_member" "secrets" {
+  for_each = module.machine_learning_project.kms_keys
+
+  crypto_key_id = each.value.id
+  role          = "roles/cloudkms.cryptoKeyEncrypterDecrypter"
+  member        = "serviceAccount:${google_project_service_identity.secrets.email}"
+
+  depends_on = [time_sleep.wait_30_seconds]
+}
+
+// Allow machine-learning sa access to service catalog cloud source repository
+resource "google_sourcerepo_repository_iam_member" "read" {
+  project    = local.service_catalog_project_id
+  repository = local.service_catalog_repo_name
+  role       = "roles/viewer"
+  member     = "serviceAccount:${local.app_infra_pipeline_service_accounts["ml-machine-learning"]}"
+}
+
+// Add Browser Role to CloudBuild at Env Folder
+
+resource "google_folder_iam_member" "name" {
+  folder = local.env_folder_name
+  role   = "roles/browser"
+  member = "serviceAccount:${google_project_service_identity.cloud_build.email}"
+}
+
+// Add Artifact Registry Access to Vertex AI Agent
+
+resource "google_project_iam_member" "access_artifacts" {
+  count   = var.env == "production" ? 1 : 0
+  project = local.common_artifact_project_id
+  role    = "roles/artifactregistry.reader"
+  member  = "serviceAccount:service-${module.machine_learning_project.project_number}@gcp-sa-aiplatform.iam.gserviceaccount.com"
+
+  depends_on = [time_sleep.wait_30_seconds]
+}
diff --git a/docs/assets/terraform/4-projects/modules/ml_env/outputs.tf b/docs/assets/terraform/4-projects/modules/ml_env/outputs.tf
new file mode 100644
index 00000000..6c5085b2
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_env/outputs.tf
@@ -0,0 +1,30 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+output "machine_learning_project_id" {
+  description = "Project machine learning project."
+  value       = module.machine_learning_project.project_id
+}
+
+output "machine_learning_project_number" {
+  description = "Project number of machine learning project."
+  value       = module.machine_learning_project.project_number
+}
+
+output "machine_learning_kms_keys" {
+  description = "Key ID for the machine learning project."
+  value       = module.machine_learning_project.kms_keys
+}
diff --git a/docs/assets/terraform/4-projects/modules/ml_env/pubsub.tf b/docs/assets/terraform/4-projects/modules/ml_env/pubsub.tf
new file mode 100644
index 00000000..1a849f24
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_env/pubsub.tf
@@ -0,0 +1,34 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+locals {
+  pubsub_topic_name = "secret-rotation-notifications"
+}
+
+// Secret rotation notification
+resource "google_pubsub_topic" "secret_rotations" {
+  name    = local.pubsub_topic_name
+  project = module.machine_learning_project.project_id
+}
+
+resource "google_pubsub_topic_iam_member" "pubsub_binding" {
+  topic   = google_pubsub_topic.secret_rotations.name
+  project = module.machine_learning_project.project_id
+  role    = "roles/pubsub.publisher"
+  member  = "serviceAccount:service-${module.machine_learning_project.project_number}@gcp-sa-secretmanager.iam.gserviceaccount.com"
+
+  depends_on = [time_sleep.wait_30_seconds]
+}
diff --git a/docs/assets/terraform/4-projects/modules/ml_env/remote.tf b/docs/assets/terraform/4-projects/modules/ml_env/remote.tf
new file mode 100644
index 00000000..085940e9
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_env/remote.tf
@@ -0,0 +1,91 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+locals {
+  org_id                              = data.terraform_remote_state.bootstrap.outputs.common_config.org_id
+  billing_account                     = data.terraform_remote_state.bootstrap.outputs.common_config.billing_account
+  project_prefix                      = data.terraform_remote_state.bootstrap.outputs.common_config.project_prefix
+  projects_backend_bucket             = data.terraform_remote_state.bootstrap.outputs.projects_gcs_bucket_tfstate
+  perimeter_name                      = data.terraform_remote_state.network_env.outputs.restricted_service_perimeter_name
+  base_network_self_link              = data.terraform_remote_state.network_env.outputs.base_network_self_link
+  base_subnets_self_links             = data.terraform_remote_state.network_env.outputs.base_subnets_self_links
+  base_host_project_id                = data.terraform_remote_state.network_env.outputs.base_host_project_id
+  restricted_host_project_id          = data.terraform_remote_state.network_env.outputs.restricted_host_project_id
+  restricted_subnets_self_links       = data.terraform_remote_state.network_env.outputs.restricted_subnets_self_links
+  access_context_manager_policy_id    = data.terraform_remote_state.network_env.outputs.access_context_manager_policy_id
+  env_folder_name                     = data.terraform_remote_state.environments_env.outputs.env_folder
+  app_infra_pipeline_service_accounts = data.terraform_remote_state.business_unit_shared.outputs.terraform_service_accounts
+  enable_cloudbuild_deploy            = data.terraform_remote_state.business_unit_shared.outputs.enable_cloudbuild_deploy
+  environments_kms_key_ring           = data.terraform_remote_state.environments_env.outputs.key_rings
+  environment_kms_project_id          = data.terraform_remote_state.environments_env.outputs.env_kms_project_id
+  default_region                      = data.terraform_remote_state.business_unit_shared.outputs.default_region
+  service_catalog_project_id          = data.terraform_remote_state.business_unit_shared.outputs.service_catalog_project_id
+  service_catalog_repo_name           = data.terraform_remote_state.business_unit_shared.outputs.service_catalog_repo_name
+  common_artifact_project_id          = data.terraform_remote_state.business_unit_shared.outputs.common_artifacts_project_id
+
+  restricted_subnets_region = flatten([
+    for subnet in local.restricted_subnets_self_links :
+    {
+      subnet = element(split("/", subnet), index(split("/", subnet), "subnetworks", ) + 1, )
+      region = element(split("/", subnet), index(split("/", subnet), "regions") + 1, )
+    }
+  ])
+}
+
+data "terraform_remote_state" "bootstrap" {
+  backend = "gcs"
+
+  config = {
+    bucket = var.remote_state_bucket
+    prefix = "terraform/bootstrap/state"
+  }
+}
+
+data "terraform_remote_state" "org" {
+  backend = "gcs"
+
+  config = {
+    bucket = var.remote_state_bucket
+    prefix = "terraform/org/state"
+  }
+}
+
+data "terraform_remote_state" "network_env" {
+  backend = "gcs"
+
+  config = {
+    bucket = var.remote_state_bucket
+    prefix = "terraform/networks/${var.env}"
+  }
+}
+
+data "terraform_remote_state" "environments_env" {
+  backend = "gcs"
+
+  config = {
+    bucket = var.remote_state_bucket
+    prefix = "terraform/environments/${var.env}"
+  }
+}
+
+data "terraform_remote_state" "business_unit_shared" {
+  backend = "gcs"
+
+  config = {
+    bucket = local.projects_backend_bucket
+    prefix = "terraform/projects/${var.business_unit}/shared"
+  }
+}
diff --git a/docs/assets/terraform/4-projects/modules/ml_env/remote.tf.cloud.example b/docs/assets/terraform/4-projects/modules/ml_env/remote.tf.cloud.example
new file mode 100644
index 00000000..a89c93c5
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_env/remote.tf.cloud.example
@@ -0,0 +1,52 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+locals {
+  org_id                              = data.tfe_outputs.bootstrap.nonsensitive_values.common_config.org_id
+  billing_account                     = data.tfe_outputs.bootstrap.nonsensitive_values.common_config.billing_account
+  project_prefix                      = data.tfe_outputs.bootstrap.nonsensitive_values.common_config.project_prefix
+  projects_backend_bucket             = ""
+  perimeter_name                      = data.tfe_outputs.network_env.nonsensitive_values.restricted_service_perimeter_name
+  base_network_self_link              = data.tfe_outputs.network_env.nonsensitive_values.base_network_self_link
+  base_subnets_self_links             = data.tfe_outputs.network_env.nonsensitive_values.base_subnets_self_links
+  base_host_project_id                = data.tfe_outputs.network_env.nonsensitive_values.base_host_project_id
+  restricted_host_project_id          = data.tfe_outputs.network_env.nonsensitive_values.restricted_host_project_id
+  restricted_subnets_self_links       = data.tfe_outputs.network_env.nonsensitive_values.restricted_subnets_self_links
+  access_context_manager_policy_id    = data.tfe_outputs.network_env.nonsensitive_values.access_context_manager_policy_id
+  env_folder_name                     = data.tfe_outputs.environments_env.nonsensitive_values.env_folder
+  app_infra_pipeline_service_accounts = data.tfe_outputs.business_unit_shared.nonsensitive_values.terraform_service_accounts
+  enable_cloudbuild_deploy            = data.tfe_outputs.business_unit_shared.nonsensitive_values.enable_cloudbuild_deploy
+}
+
+data "tfe_outputs" "bootstrap" {
+  organization = var.tfc_org_name
+  workspace    = "0-shared"
+}
+
+data "tfe_outputs" "org" {
+  organization = var.tfc_org_name
+  workspace    = "1-shared"
+}
+
+data "tfe_outputs" "environments_env" {
+  organization = var.tfc_org_name
+  workspace    = "2-${var.env}"
+}
+
+data "tfe_outputs" "business_unit_shared" {
+  organization = var.tfc_org_name
+  workspace    = "4-${var.business_code}-shared"
+}
diff --git a/docs/assets/terraform/4-projects/modules/ml_env/secret.tf b/docs/assets/terraform/4-projects/modules/ml_env/secret.tf
new file mode 100644
index 00000000..10a7477e
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_env/secret.tf
@@ -0,0 +1,62 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+locals {
+  secrets = [
+    "github-api-token",
+  ]
+}
+
+resource "google_secret_manager_secret" "secret" {
+  for_each  = toset(local.secrets)
+  project   = module.machine_learning_project.project_id
+  secret_id = each.key
+
+  #Set up Automatic Rotation of Secrets
+  #Control ID: SM-CO-6.2
+  #NIST 800-53: SC-12 SC-13
+
+  rotation {
+    next_rotation_time = formatdate("YYYY-MM-DD'T'hh:mm:ss'Z'", timeadd(timestamp(), "720h"))
+    rotation_period    = "43200s"
+  }
+
+  topics {
+    name = google_pubsub_topic.secret_rotations.id
+  }
+
+  #Automatic Secret Replication
+  #Control ID: SM-CO-6.1
+  #NIST 800-53: SC-12 SC-13
+  replication {
+    user_managed {
+      replicas {
+        location = var.region
+
+        #Customer Managed Encryption Keys
+        #Control ID: COM-CO-2.3
+        #NIST 800-53: SC-12 SC-13
+        #CRI Profile: PR.DS-1.1 PR.DS-1.2 PR.DS-2.1 PR.DS-2.2 PR.DS-5.1
+        customer_managed_encryption {
+          kms_key_name = module.machine_learning_project.kms_keys[var.region].id
+        }
+      }
+    }
+  }
+
+  depends_on = [google_kms_crypto_key_iam_member.secrets, google_pubsub_topic_iam_member.pubsub_binding]
+}
+
diff --git a/docs/assets/terraform/4-projects/modules/ml_env/variables.tf b/docs/assets/terraform/4-projects/modules/ml_env/variables.tf
new file mode 100644
index 00000000..592d10fc
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_env/variables.tf
@@ -0,0 +1,101 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+variable "business_code" {
+  description = "The business code (ex. bu1)."
+  type        = string
+}
+
+variable "business_unit" {
+  description = "The business (ex. business_unit_1)."
+  type        = string
+}
+
+variable "env" {
+  description = "The environment to prepare (ex. development)."
+  type        = string
+}
+
+variable "business_unit_folder" {
+  description = "The Business Unit Folder (Created in base_env)"
+  type        = string
+}
+
+variable "project_budget" {
+  description = <<EOT
+  Budget configuration.
+  budget_amount: The amount to use as the budget.
+  alert_spent_percents: A list of percentages of the budget to alert on when threshold is exceeded.
+  alert_pubsub_topic: The name of the Cloud Pub/Sub topic where budget related messages will be published, in the form of `projects/{project_id}/topics/{topic_id}`.
+  alert_spend_basis: The type of basis used to determine if spend has passed the threshold. Possible choices are `CURRENT_SPEND` or `FORECASTED_SPEND` (default).
+  EOT
+  type = object({
+    budget_amount        = optional(number, 1000)
+    alert_spent_percents = optional(list(number), [1.2])
+    alert_pubsub_topic   = optional(string, null)
+    alert_spend_basis    = optional(string, "FORECASTED_SPEND")
+  })
+  default = {}
+}
+
+variable "location_gcs" {
+  description = "Case-Sensitive Location for GCS Bucket (Should be same region as the KMS Keyring)"
+  type        = string
+  default     = ""
+}
+
+variable "gcs_bucket_prefix" {
+  description = "Name prefix to be used for GCS Bucket"
+  type        = string
+  default     = "bkt"
+}
+
+variable "region" {
+  type        = string
+  description = "The resource region, one of [us-central1, us-east4]."
+  default     = "us-central1"
+  validation {
+    condition     = contains(["us-central1", "us-east4"], var.region)
+    error_message = "Region must be one of [us-central1, us-east4]."
+  }
+}
+variable "remote_state_bucket" {
+  description = "Backend bucket to load Terraform Remote State Data from previous steps."
+  type        = string
+}
+
+variable "tfc_org_name" {
+  description = "Name of the TFC organization"
+  type        = string
+}
+
+variable "folder_prefix" {
+  description = "Name prefix to use for folders created. Should be the same in all steps."
+  type        = string
+  default     = "fldr"
+}
+
+variable "key_rotation_period" {
+  description = "Rotation period in seconds to be used for KMS Key"
+  type        = string
+  default     = "7776000s"
+}
+
+variable "prevent_destroy" {
+  description = "Prevent Project Key destruction."
+  type        = bool
+  default     = true
+}
diff --git a/docs/assets/terraform/4-projects/modules/ml_env/versions.tf b/docs/assets/terraform/4-projects/modules/ml_env/versions.tf
new file mode 100644
index 00000000..033fc585
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_env/versions.tf
@@ -0,0 +1,33 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+terraform {
+  required_version = ">= 1.3"
+  required_providers {
+    random = {
+      source  = "hashicorp/random"
+      version = ">= 3.3"
+    }
+  }
+
+  provider_meta "google" {
+    module_name = "blueprints/terraform/terraform-google-enterprise-genai:projects/v0.0.1"
+  }
+
+  provider_meta "google-beta" {
+    module_name = "blueprints/terraform/terraform-google-enterprise-genai:projects/v0.0.1"
+  }
+}
diff --git a/docs/assets/terraform/4-projects/modules/ml_infra_projects/artifacts_project.tf b/docs/assets/terraform/4-projects/modules/ml_infra_projects/artifacts_project.tf
new file mode 100644
index 00000000..6eb6e654
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_infra_projects/artifacts_project.tf
@@ -0,0 +1,87 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+locals {
+  artifact_tf_sa_roles = [
+    "roles/artifactregistry.admin",
+    "roles/cloudbuild.builds.editor",
+    "roles/cloudbuild.connectionAdmin",
+    "roles/iam.serviceAccountAdmin",
+    "roles/secretmanager.admin",
+    "roles/source.admin",
+    "roles/storage.admin",
+  ]
+
+}
+module "app_infra_artifacts_project" {
+  source = "../ml_single_project"
+
+  org_id              = var.org_id
+  billing_account     = var.billing_account
+  folder_id           = var.folder_id
+  environment         = var.environment
+  project_budget      = var.project_budget
+  project_prefix      = var.project_prefix
+  key_rings           = var.key_rings
+  remote_state_bucket = var.remote_state_bucket
+  activate_apis = [
+    "artifactregistry.googleapis.com",
+    "logging.googleapis.com",
+    "billingbudgets.googleapis.com",
+    "serviceusage.googleapis.com",
+    "storage.googleapis.com",
+    "cloudbuild.googleapis.com",
+    "secretmanager.googleapis.com",
+    "sourcerepo.googleapis.com",
+  ]
+  # Metadata
+  project_suffix             = var.artifacts_project_suffix
+  application_name           = var.artifacts_application_name
+  billing_code               = var.billing_code
+  primary_contact            = var.primary_contact
+  secondary_contact          = var.secondary_contact
+  business_code              = var.business_code
+  environment_kms_project_id = var.environment_kms_project_id
+  project_name               = "${var.project_prefix}-${local.env_code}-${var.business_code}-${var.artifacts_project_suffix}"
+  prevent_destroy            = var.prevent_destroy
+}
+
+resource "google_kms_crypto_key_iam_member" "ml_key" {
+  for_each      = module.app_infra_artifacts_project.kms_keys
+  crypto_key_id = each.value.id
+  role          = "roles/cloudkms.admin"
+  member        = "serviceAccount:${var.artifacts_infra_pipeline_sa}"
+}
+
+resource "google_project_iam_member" "artifact_tf_sa_roles" {
+  for_each = toset(local.artifact_tf_sa_roles)
+  project  = module.app_infra_artifacts_project.project_id
+  role     = each.key
+  member   = "serviceAccount:${var.artifacts_infra_pipeline_sa}"
+}
+
+// Add Service Agent for Cloud Build
+resource "google_project_iam_member" "artifact_cloudbuild_agent" {
+  project = module.app_infra_artifacts_project.project_id
+  role    = "roles/secretmanager.secretAccessor"
+  member  = "serviceAccount:${module.app_infra_artifacts_project.project_number}@cloudbuild.gserviceaccount.com"
+}
+
+// Add Repository for Artifact repo
+resource "google_sourcerepo_repository" "artifact_repo" {
+  project = module.app_infra_artifacts_project.project_id
+  name    = var.cloud_source_artifacts_repo_name
+}
diff --git a/docs/assets/terraform/4-projects/modules/ml_infra_projects/locals.tf b/docs/assets/terraform/4-projects/modules/ml_infra_projects/locals.tf
new file mode 100644
index 00000000..32210121
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_infra_projects/locals.tf
@@ -0,0 +1,19 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+locals {
+  env_code = element(split("", var.environment), 0)
+}
diff --git a/docs/assets/terraform/4-projects/modules/ml_infra_projects/outputs.tf b/docs/assets/terraform/4-projects/modules/ml_infra_projects/outputs.tf
new file mode 100644
index 00000000..3b73df7c
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_infra_projects/outputs.tf
@@ -0,0 +1,45 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+output "service_catalog_project_id" {
+  description = "Service Catalog Project ID."
+  value       = try(module.app_service_catalog_project.project_id, "")
+}
+
+output "common_artifacts_project_id" {
+  description = "App Infra Artifacts Project ID."
+  value       = try(module.app_infra_artifacts_project.project_id, "")
+}
+
+output "service_catalog_repo_name" {
+  description = "The name of the Service Catalog repository."
+  value       = google_sourcerepo_repository.service_catalog.name
+}
+
+output "service_catalog_repo_id" {
+  description = "ID of the Service Catalog repository."
+  value       = google_sourcerepo_repository.service_catalog.id
+}
+
+output "artifacts_repo_name" {
+  description = "The name of the Artifacts repository."
+  value       = google_sourcerepo_repository.artifact_repo.name
+}
+
+output "artifacts_repo_id" {
+  description = "ID of the Artifacts repository."
+  value       = google_sourcerepo_repository.artifact_repo.id
+}
diff --git a/docs/assets/terraform/4-projects/modules/ml_infra_projects/service_catalog_project.tf b/docs/assets/terraform/4-projects/modules/ml_infra_projects/service_catalog_project.tf
new file mode 100644
index 00000000..fd6a87af
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_infra_projects/service_catalog_project.tf
@@ -0,0 +1,124 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+locals {
+  service_catalog_tf_sa_roles = [
+    "roles/cloudbuild.builds.editor",
+    "roles/iam.serviceAccountAdmin",
+    "roles/cloudbuild.connectionAdmin",
+    "roles/secretmanager.admin",
+    "roles/storage.admin",
+    "roles/source.admin",
+  ]
+}
+
+module "app_service_catalog_project" {
+  source = "../ml_single_project"
+
+  org_id              = var.org_id
+  billing_account     = var.billing_account
+  folder_id           = var.folder_id
+  environment         = var.environment
+  project_budget      = var.project_budget
+  project_prefix      = var.project_prefix
+  key_rings           = var.key_rings
+  remote_state_bucket = var.remote_state_bucket
+  activate_apis = [
+    "logging.googleapis.com",
+    "storage.googleapis.com",
+    "serviceusage.googleapis.com",
+    "secretmanager.googleapis.com",
+    "cloudbuild.googleapis.com",
+    "cloudresourcemanager.googleapis.com",
+    "sourcerepo.googleapis.com",
+  ]
+  # Metadata
+  project_suffix             = var.service_catalog_project_suffix
+  application_name           = var.service_catalog_application_name
+  billing_code               = var.billing_code
+  primary_contact            = var.primary_contact
+  secondary_contact          = var.secondary_contact
+  business_code              = var.business_code
+  environment_kms_project_id = var.environment_kms_project_id
+  project_name               = "${var.project_prefix}-${local.env_code}-${var.business_code}-${var.service_catalog_project_suffix}"
+  prevent_destroy            = var.prevent_destroy
+}
+
+resource "google_kms_crypto_key_iam_member" "sc_key" {
+  for_each      = module.app_service_catalog_project.kms_keys
+  crypto_key_id = each.value.id
+  role          = "roles/cloudkms.admin"
+  member        = "serviceAccount:${var.service_catalog_infra_pipeline_sa}"
+}
+
+// Grab Service Agent for Secret Manager
+resource "google_project_service_identity" "secretmanager_agent" {
+  provider = google-beta
+  project  = module.app_service_catalog_project.project_id
+  service  = "secretmanager.googleapis.com"
+}
+
+// Add Secret Manager Service Agent to key with encrypt/decrypt permissions
+resource "google_kms_crypto_key_iam_member" "secretmanager_agent" {
+  for_each      = module.app_service_catalog_project.kms_keys
+  crypto_key_id = each.value.id
+  role          = "roles/cloudkms.cryptoKeyEncrypterDecrypter"
+  member        = "serviceAccount:${google_project_service_identity.secretmanager_agent.email}"
+}
+
+// Grab Service Agent for Storage
+resource "google_project_service_identity" "storage" {
+  provider = google-beta
+  project  = module.app_service_catalog_project.project_id
+  service  = "storage.googleapis.com"
+}
+// Add Service Agent for Storage
+resource "google_kms_crypto_key_iam_member" "storage_agent" {
+  for_each      = module.app_service_catalog_project.kms_keys
+  crypto_key_id = each.value.id
+  role          = "roles/cloudkms.cryptoKeyEncrypterDecrypter"
+  member        = "serviceAccount:service-${module.app_service_catalog_project.project_number}@gs-project-accounts.iam.gserviceaccount.com"
+
+  depends_on = [google_project_service_identity.storage]
+}
+
+// Add infra pipeline SA encrypt/decrypt permissions
+resource "google_kms_crypto_key_iam_member" "storage-kms-key-binding" {
+  for_each      = module.app_service_catalog_project.kms_keys
+  crypto_key_id = each.value.id
+  role          = "roles/cloudkms.cryptoKeyEncrypterDecrypter"
+  member        = "serviceAccount:${var.service_catalog_infra_pipeline_sa}"
+}
+
+resource "google_project_iam_member" "service_catalog_tf_sa_roles" {
+  for_each = toset(local.service_catalog_tf_sa_roles)
+  project  = module.app_service_catalog_project.project_id
+  role     = each.key
+  member   = "serviceAccount:${var.service_catalog_infra_pipeline_sa}"
+}
+
+// Add Service Agent for Cloud Build
+resource "google_project_iam_member" "cloudbuild_agent" {
+  project = module.app_service_catalog_project.project_id
+  role    = "roles/secretmanager.secretAccessor"
+  member  = "serviceAccount:${module.app_service_catalog_project.project_number}@cloudbuild.gserviceaccount.com"
+}
+
+// Add Service Catalog Source Repository
+resource "google_sourcerepo_repository" "service_catalog" {
+  project = module.app_service_catalog_project.project_id
+  name    = var.cloud_source_service_catalog_repo_name
+}
diff --git a/docs/assets/terraform/4-projects/modules/ml_infra_projects/variables.tf b/docs/assets/terraform/4-projects/modules/ml_infra_projects/variables.tf
new file mode 100644
index 00000000..0426c93b
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_infra_projects/variables.tf
@@ -0,0 +1,203 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+variable "org_id" {
+  description = "The Organization ID."
+  type        = string
+}
+
+variable "billing_account" {
+  description = "The ID of the billing account to associated this project with."
+  type        = string
+}
+
+variable "folder_id" {
+  description = "The folder id where project will be created."
+  type        = string
+}
+
+variable "environment" {
+  description = "The environment the single project belongs to."
+  type        = string
+}
+
+variable "project_budget" {
+  description = <<EOT
+  Budget configuration.
+  budget_amount: The amount to use as the budget.
+  alert_spent_percents: A list of percentages of the budget to alert on when threshold is exceeded.
+  alert_pubsub_topic: The name of the Cloud Pub/Sub topic where budget related messages will be published, in the form of `projects/{project_id}/topics/{topic_id}`.
+  alert_spend_basis: The type of basis used to determine if spend has passed the threshold. Possible choices are `CURRENT_SPEND` or `FORECASTED_SPEND` (default).
+  EOT
+  type = object({
+    budget_amount        = optional(number, 1000)
+    alert_spent_percents = optional(list(number), [1.2])
+    alert_pubsub_topic   = optional(string, null)
+    alert_spend_basis    = optional(string, "FORECASTED_SPEND")
+  })
+  default = {}
+}
+
+variable "project_prefix" {
+  description = "Name prefix to use for projects created."
+  type        = string
+  default     = "prj"
+}
+
+variable "key_rings" {
+  description = "Keyrings to attach project key to."
+  type        = list(string)
+}
+
+variable "remote_state_bucket" {
+  description = "Backend bucket to load Terraform Remote State Data from previous steps."
+  type        = string
+}
+
+variable "business_code" {
+  description = "The code that describes which business unit owns the project."
+  type        = string
+}
+
+variable "billing_code" {
+  description = "The code that's used to provide chargeback information."
+  type        = string
+}
+
+variable "primary_contact" {
+  description = "The primary email contact for the project."
+  type        = string
+}
+
+variable "secondary_contact" {
+  description = "The secondary email contact for the project."
+  type        = string
+  default     = ""
+}
+
+variable "shared_vpc_host_project_id" {
+  description = "Shared VPC host project ID."
+  type        = string
+  default     = ""
+}
+
+variable "shared_vpc_subnets" {
+  description = "List of the shared vpc subnets self links."
+  type        = list(string)
+  default     = []
+}
+
+variable "vpc_service_control_attach_enabled" {
+  description = "Whether the project will be attached to a VPC Service Control Perimeter."
+  type        = bool
+  default     = false
+}
+
+variable "vpc_service_control_perimeter_name" {
+  description = "The name of a VPC Service Control Perimeter to add the created project to."
+  type        = string
+  default     = null
+}
+
+variable "vpc_service_control_sleep_duration" {
+  description = "The duration to sleep in seconds before adding the project to a shared VPC after the project is added to the VPC Service Control Perimeter."
+  type        = string
+  default     = "5s"
+}
+
+variable "app_infra_pipeline_service_accounts" {
+  description = "The Service Accounts from App Infra Pipeline."
+  type        = map(string)
+  default     = {}
+}
+
+variable "sa_roles" {
+  description = "A list of roles to give the Service Account from App Infra Pipeline."
+  type        = map(list(string))
+  default     = {}
+}
+
+variable "enable_cloudbuild_deploy" {
+  description = "Enable infra deployment using Cloud Build."
+  type        = bool
+  default     = false
+}
+
+variable "key_rotation_period" {
+  description = "Rotation period in seconds to be used for KMS Key."
+  type        = string
+  default     = "7776000s"
+}
+
+variable "default_service_account" {
+  description = "Project default service account setting: can be one of `delete`, `depriviledge`, `keep` or `disable`."
+  default     = "disable"
+  type        = string
+}
+
+variable "cloud_source_service_catalog_repo_name" {
+  description = "Name to give the cloud source repository for Service Catalog."
+  type        = string
+}
+
+variable "cloud_source_artifacts_repo_name" {
+  description = "Name to give the could source repository for Artifacts."
+  type        = string
+}
+
+variable "artifacts_infra_pipeline_sa" {
+  description = "Artifacts SA to be used by the Infra Pipeline CloudBuild trigger."
+  type        = string
+}
+
+variable "service_catalog_infra_pipeline_sa" {
+  description = "Service Catalog SA to be used by the Infra Pipeline CloudBuild trigger."
+  type        = string
+}
+
+variable "environment_kms_project_id" {
+  description = "Environment level KMS Project ID."
+  type        = string
+}
+
+variable "prevent_destroy" {
+  description = "Prevent Project Key destruction."
+  type        = bool
+}
+
+variable "artifacts_project_suffix" {
+  description = "Artifacts Project Suffix."
+  type        = string
+  default     = "artifacts"
+}
+
+variable "service_catalog_project_suffix" {
+  description = "Service Catalog Project Suffix."
+  type        = string
+  default     = "svc-catalog"
+}
+
+variable "service_catalog_application_name" {
+  description = "Service Catalog application name metadata."
+  type        = string
+  default     = "app-infra-catalog"
+}
+
+variable "artifacts_application_name" {
+  description = "Artifacts application name metadata."
+  type        = string
+  default     = "app-infra-artifacts"
+}
diff --git a/docs/assets/terraform/4-projects/modules/ml_infra_projects/versions.tf b/docs/assets/terraform/4-projects/modules/ml_infra_projects/versions.tf
new file mode 100644
index 00000000..768ad3c2
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_infra_projects/versions.tf
@@ -0,0 +1,20 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+terraform {
+  required_version = ">= 1.3"
+}
+
diff --git a/docs/assets/terraform/4-projects/modules/ml_kms_key/main.tf b/docs/assets/terraform/4-projects/modules/ml_kms_key/main.tf
new file mode 100644
index 00000000..084303d8
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_kms_key/main.tf
@@ -0,0 +1,43 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+locals {
+  ephemeral_keys_for_each = var.prevent_destroy ? [] : var.key_rings
+  keys_for_each           = var.prevent_destroy ? var.key_rings : []
+  output_keys             = var.prevent_destroy ? { for k, v in google_kms_crypto_key.kms_keys : split("/", k)[3] => v } : { for k, v in google_kms_crypto_key.ephemeral_kms_keys : split("/", k)[3] => v }
+}
+
+resource "google_kms_crypto_key" "ephemeral_kms_keys" {
+  for_each = toset(local.ephemeral_keys_for_each)
+
+  name            = var.project_name
+  key_ring        = each.key
+  rotation_period = var.key_rotation_period
+  lifecycle {
+    prevent_destroy = false
+  }
+}
+
+resource "google_kms_crypto_key" "kms_keys" {
+  for_each = toset(local.keys_for_each)
+
+  name            = var.project_name
+  key_ring        = each.key
+  rotation_period = var.key_rotation_period
+  lifecycle {
+    prevent_destroy = true
+  }
+}
diff --git a/docs/assets/terraform/4-projects/modules/ml_kms_key/outputs.tf b/docs/assets/terraform/4-projects/modules/ml_kms_key/outputs.tf
new file mode 100644
index 00000000..b456923a
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_kms_key/outputs.tf
@@ -0,0 +1,20 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+output "kms_keys" {
+  description = "Keys created for the project."
+  value       = local.output_keys
+}
diff --git a/docs/assets/terraform/4-projects/modules/ml_kms_key/variables.tf b/docs/assets/terraform/4-projects/modules/ml_kms_key/variables.tf
new file mode 100644
index 00000000..c17ee08e
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_kms_key/variables.tf
@@ -0,0 +1,36 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+variable "key_rings" {
+  description = "Keyrings to attach project key to."
+  type        = list(string)
+}
+
+variable "project_name" {
+  description = "Project Name."
+  type        = string
+}
+
+variable "key_rotation_period" {
+  description = "Rotation period in seconds to be used for KMS Key."
+  type        = string
+  default     = "7776000s"
+}
+
+variable "prevent_destroy" {
+  description = "Prevent Key destruction."
+  type        = bool
+}
diff --git a/docs/assets/terraform/4-projects/modules/ml_kms_key/versions.tf b/docs/assets/terraform/4-projects/modules/ml_kms_key/versions.tf
new file mode 100644
index 00000000..2ff08fd4
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_kms_key/versions.tf
@@ -0,0 +1,19 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+terraform {
+  required_version = ">= 1.3"
+}
diff --git a/docs/assets/terraform/4-projects/modules/ml_single_project/README.md b/docs/assets/terraform/4-projects/modules/ml_single_project/README.md
new file mode 100644
index 00000000..8165effa
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_single_project/README.md
@@ -0,0 +1,52 @@
+# Machine Learning Single Project
+
+Create and manage a Google Cloud project with various configurations and roles required for application infrastructure and pipeline service accounts. It includes the setup of IAM roles, VPC networking, KMS keys, and budget alerts. The module leverages the terraform-google-modules/project-factory/google module for project creation and management.
+
+
+<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+## Inputs
+
+| Name | Description | Type | Default | Required |
+|------|-------------|------|---------|:--------:|
+| activate\_apis | The api to activate for the GCP project. | `list(string)` | `[]` | no |
+| app\_infra\_pipeline\_service\_accounts | The Service Accounts from App Infra Pipeline. | `map(string)` | `{}` | no |
+| application\_name | The name of application where GCP resources relate. | `string` | n/a | yes |
+| billing\_account | The ID of the billing account to associated this project with. | `string` | n/a | yes |
+| billing\_code | The code that's used to provide chargeback information. | `string` | n/a | yes |
+| business\_code | The code that describes which business unit owns the project. | `string` | `"abcd"` | no |
+| default\_service\_account | Project default service account setting: can be one of `delete`, `depriviledge`, `keep` or `disable`. | `string` | `"disable"` | no |
+| enable\_cloudbuild\_deploy | Enable infra deployment using Cloud Build. | `bool` | `false` | no |
+| environment | The environment the project belongs to. | `string` | n/a | yes |
+| environment\_kms\_project\_id | Environment level KMS Project ID. | `string` | n/a | yes |
+| folder\_id | The folder id where project will be created. | `string` | n/a | yes |
+| key\_rings | Keyrings to attach project key to. | `list(string)` | n/a | yes |
+| key\_rotation\_period | Rotation period in seconds to be used for KMS Key. | `string` | `"7776000s"` | no |
+| org\_id | The Organization ID. | `string` | n/a | yes |
+| prevent\_destroy | Prevent Key destruction. | `bool` | n/a | yes |
+| primary\_contact | The primary email contact for the project. | `string` | n/a | yes |
+| project\_budget | Budget configuration.<br>  budget\_amount: The amount to use as the budget.<br>  alert\_spent\_percents: A list of percentages of the budget to alert on when threshold is exceeded.<br>  alert\_pubsub\_topic: The name of the Cloud Pub/Sub topic where budget related messages will be published, in the form of `projects/{project_id}/topics/{topic_id}`.<br>  alert\_spend\_basis: The type of basis used to determine if spend has passed the threshold. Possible choices are `CURRENT_SPEND` or `FORECASTED_SPEND` (default). | <pre>object({<br>    budget_amount        = optional(number, 1000)<br>    alert_spent_percents = optional(list(number), [1.2])<br>    alert_pubsub_topic   = optional(string, null)<br>    alert_spend_basis    = optional(string, "FORECASTED_SPEND")<br>  })</pre> | `{}` | no |
+| project\_name | Project Name. | `string` | n/a | yes |
+| project\_prefix | Name prefix to use for projects created. | `string` | `"prj"` | no |
+| project\_suffix | The name of the GCP project. Max 16 characters with 3 character business unit code. | `string` | n/a | yes |
+| remote\_state\_bucket | Backend bucket to load Terraform Remote State Data from previous steps. | `string` | n/a | yes |
+| sa\_roles | A list of roles to give the Service Account from App Infra Pipeline. | `map(list(string))` | `{}` | no |
+| secondary\_contact | The secondary email contact for the project. | `string` | `""` | no |
+| shared\_vpc\_host\_project\_id | Shared VPC host project ID. | `string` | `""` | no |
+| shared\_vpc\_subnets | List of the shared vpc subnets self links. | `list(string)` | `[]` | no |
+| vpc\_service\_control\_attach\_enabled | Whether the project will be attached to a VPC Service Control Perimeter. | `bool` | `false` | no |
+| vpc\_service\_control\_perimeter\_name | The name of a VPC Service Control Perimeter to add the created project to. | `string` | `null` | no |
+| vpc\_service\_control\_sleep\_duration | The duration to sleep in seconds before adding the project to a shared VPC after the project is added to the VPC Service Control Perimeter. | `string` | `"5s"` | no |
+| vpc\_type | The type of VPC to attach the project to. Possible options are `base` or `restricted`. | `string` | `""` | no |
+
+## Outputs
+
+| Name | Description |
+|------|-------------|
+| enabled\_apis | VPC Service Control services. |
+| kms\_keys | Keys created for the project. |
+| project\_id | Project ID. |
+| project\_name | Project Name. |
+| project\_number | Project number. |
+| sa | Project SA email. |
+
+<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
diff --git a/docs/assets/terraform/4-projects/modules/ml_single_project/main.tf b/docs/assets/terraform/4-projects/modules/ml_single_project/main.tf
new file mode 100644
index 00000000..50afa4b1
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_single_project/main.tf
@@ -0,0 +1,141 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+locals {
+  enabled_apis = distinct(concat(var.activate_apis, ["billingbudgets.googleapis.com"]))
+  env_code     = element(split("", var.environment), 0)
+  source_repos = setintersection(
+    toset(keys(var.app_infra_pipeline_service_accounts)),
+    toset(keys(var.sa_roles))
+  )
+  pipeline_roles = var.enable_cloudbuild_deploy ? flatten([
+    for repo in local.source_repos : [
+      for role in var.sa_roles[repo] :
+      {
+        repo = repo
+        role = role
+        sa   = var.app_infra_pipeline_service_accounts[repo]
+      }
+    ]
+  ]) : []
+
+  pipeline_kms_sas = var.enable_cloudbuild_deploy ? flatten([
+    for repo in keys(var.sa_roles) : [
+      var.app_infra_pipeline_service_accounts[repo]
+    ]
+  ]) : []
+
+  network_user_role = var.enable_cloudbuild_deploy ? flatten([
+    for repo in local.source_repos : [
+      for subnet in var.shared_vpc_subnets :
+      {
+        repo   = repo
+        subnet = element(split("/", subnet), index(split("/", subnet), "subnetworks", ) + 1, )
+        region = element(split("/", subnet), index(split("/", subnet), "regions") + 1, )
+        sa     = var.app_infra_pipeline_service_accounts[repo]
+      }
+    ]
+  ]) : []
+}
+
+module "project" {
+  source  = "terraform-google-modules/project-factory/google"
+  version = "~> 14.1"
+
+  random_project_id        = true
+  random_project_id_length = 4
+  activate_apis            = local.enabled_apis
+  name                     = var.project_name
+  org_id                   = var.org_id
+  billing_account          = var.billing_account
+  folder_id                = var.folder_id
+  default_service_account  = var.default_service_account
+
+  svpc_host_project_id = var.shared_vpc_host_project_id
+  shared_vpc_subnets   = var.shared_vpc_subnets # Optional: To enable subnetting, replace to "module.networking_project.subnetwork_self_link"
+
+  vpc_service_control_attach_enabled = var.vpc_service_control_attach_enabled
+  vpc_service_control_perimeter_name = var.vpc_service_control_perimeter_name
+  vpc_service_control_sleep_duration = var.vpc_service_control_sleep_duration
+
+  labels = {
+    environment       = var.environment
+    application_name  = var.application_name
+    billing_code      = var.billing_code
+    primary_contact   = element(split("@", var.primary_contact), 0)
+    secondary_contact = element(split("@", var.secondary_contact), 0)
+    business_code     = var.business_code
+    env_code          = local.env_code
+    vpc_type          = var.vpc_type
+  }
+  budget_alert_pubsub_topic   = var.project_budget.alert_pubsub_topic
+  budget_alert_spent_percents = var.project_budget.alert_spent_percents
+  budget_amount               = var.project_budget.budget_amount
+  budget_alert_spend_basis    = var.project_budget.alert_spend_basis
+}
+
+# Additional roles to the App Infra Pipeline service account
+resource "google_project_iam_member" "app_infra_pipeline_sa_roles" {
+  for_each = { for pr in local.pipeline_roles : "${pr.repo}-${pr.sa}-${pr.role}" => pr }
+
+  project = module.project.project_id
+  role    = each.value.role
+  member  = "serviceAccount:${each.value.sa}"
+}
+
+resource "google_folder_iam_member" "folder_network_viewer" {
+  for_each = var.app_infra_pipeline_service_accounts
+
+  folder = var.folder_id
+  role   = "roles/compute.networkViewer"
+  member = "serviceAccount:${each.value}"
+}
+
+resource "google_project_iam_member" "shared_vpc_network_viewer" {
+  for_each = var.shared_vpc_host_project_id != "" ? toset(local.pipeline_kms_sas) : toset([])
+
+  project = var.shared_vpc_host_project_id
+  role    = "roles/compute.networkViewer"
+  member  = "serviceAccount:${each.key}"
+}
+
+resource "google_compute_subnetwork_iam_member" "account_role_to_vpc_subnets" {
+  provider = google-beta
+  for_each = { for nr in local.network_user_role : "${nr.repo}-${nr.subnet}-${nr.sa}" => nr }
+
+  subnetwork = each.value.subnet
+  role       = "roles/compute.networkUser"
+  region     = each.value.region
+  project    = var.shared_vpc_host_project_id
+  member     = "serviceAccount:${each.value.sa}"
+}
+
+// Add key for project
+module "kms_keys" {
+  source              = "../ml_kms_key"
+  key_rings           = var.key_rings
+  key_rotation_period = var.key_rotation_period
+  project_name        = module.project.project_name
+  prevent_destroy     = var.prevent_destroy
+}
+
+// Add crypto key viewer role to kms environment project
+resource "google_project_iam_member" "kms_viewer" {
+  for_each = var.environment != "common" ? toset(local.pipeline_kms_sas) : toset([])
+  project  = var.environment_kms_project_id
+  role     = "roles/cloudkms.viewer"
+  member   = "serviceAccount:${each.key}"
+}
diff --git a/docs/assets/terraform/4-projects/modules/ml_single_project/outputs.tf b/docs/assets/terraform/4-projects/modules/ml_single_project/outputs.tf
new file mode 100644
index 00000000..b4aba602
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_single_project/outputs.tf
@@ -0,0 +1,45 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+output "project_id" {
+  description = "Project ID."
+  value       = module.project.project_id
+}
+
+output "sa" {
+  description = "Project SA email."
+  value       = module.project.service_account_email
+}
+
+output "project_number" {
+  description = "Project number."
+  value       = module.project.project_number
+}
+
+output "enabled_apis" {
+  description = "VPC Service Control services."
+  value       = local.enabled_apis
+}
+
+output "project_name" {
+  description = "Project Name."
+  value       = module.project.project_name
+}
+
+output "kms_keys" {
+  description = "Keys created for the project."
+  value       = module.kms_keys.kms_keys
+}
diff --git a/docs/assets/terraform/4-projects/modules/ml_single_project/variables.tf b/docs/assets/terraform/4-projects/modules/ml_single_project/variables.tf
new file mode 100644
index 00000000..d55b3647
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_single_project/variables.tf
@@ -0,0 +1,187 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+variable "org_id" {
+  description = "The Organization ID."
+  type        = string
+}
+
+variable "folder_id" {
+  description = "The folder id where project will be created."
+  type        = string
+}
+
+variable "billing_account" {
+  description = "The ID of the billing account to associated this project with."
+  type        = string
+}
+
+variable "project_suffix" {
+  description = "The name of the GCP project. Max 16 characters with 3 character business unit code."
+  type        = string
+}
+
+variable "application_name" {
+  description = "The name of application where GCP resources relate."
+  type        = string
+}
+
+variable "billing_code" {
+  description = "The code that's used to provide chargeback information."
+  type        = string
+}
+
+variable "primary_contact" {
+  description = "The primary email contact for the project."
+  type        = string
+}
+
+variable "secondary_contact" {
+  description = "The secondary email contact for the project."
+  type        = string
+  default     = ""
+}
+
+variable "business_code" {
+  description = "The code that describes which business unit owns the project."
+  type        = string
+  default     = "abcd"
+}
+
+variable "activate_apis" {
+  description = "The api to activate for the GCP project."
+  type        = list(string)
+  default     = []
+}
+
+variable "environment" {
+  description = "The environment the project belongs to."
+  type        = string
+}
+
+variable "vpc_type" {
+  description = "The type of VPC to attach the project to. Possible options are `base` or `restricted`."
+  type        = string
+  default     = ""
+}
+
+variable "shared_vpc_host_project_id" {
+  description = "Shared VPC host project ID."
+  type        = string
+  default     = ""
+}
+
+variable "shared_vpc_subnets" {
+  description = "List of the shared vpc subnets self links."
+  type        = list(string)
+  default     = []
+}
+
+variable "vpc_service_control_attach_enabled" {
+  description = "Whether the project will be attached to a VPC Service Control Perimeter."
+  type        = bool
+  default     = false
+}
+
+variable "vpc_service_control_perimeter_name" {
+  description = "The name of a VPC Service Control Perimeter to add the created project to."
+  type        = string
+  default     = null
+}
+
+variable "vpc_service_control_sleep_duration" {
+  description = "The duration to sleep in seconds before adding the project to a shared VPC after the project is added to the VPC Service Control Perimeter."
+  type        = string
+  default     = "5s"
+}
+
+variable "project_budget" {
+  description = <<EOT
+  Budget configuration.
+  budget_amount: The amount to use as the budget.
+  alert_spent_percents: A list of percentages of the budget to alert on when threshold is exceeded.
+  alert_pubsub_topic: The name of the Cloud Pub/Sub topic where budget related messages will be published, in the form of `projects/{project_id}/topics/{topic_id}`.
+  alert_spend_basis: The type of basis used to determine if spend has passed the threshold. Possible choices are `CURRENT_SPEND` or `FORECASTED_SPEND` (default).
+  EOT
+  type = object({
+    budget_amount        = optional(number, 1000)
+    alert_spent_percents = optional(list(number), [1.2])
+    alert_pubsub_topic   = optional(string, null)
+    alert_spend_basis    = optional(string, "FORECASTED_SPEND")
+  })
+  default = {}
+}
+
+variable "project_prefix" {
+  description = "Name prefix to use for projects created."
+  type        = string
+  default     = "prj"
+}
+
+variable "app_infra_pipeline_service_accounts" {
+  description = "The Service Accounts from App Infra Pipeline."
+  type        = map(string)
+  default     = {}
+}
+
+variable "sa_roles" {
+  description = "A list of roles to give the Service Account from App Infra Pipeline."
+  type        = map(list(string))
+  default     = {}
+}
+
+variable "enable_cloudbuild_deploy" {
+  description = "Enable infra deployment using Cloud Build."
+  type        = bool
+  default     = false
+}
+
+variable "key_rotation_period" {
+  description = "Rotation period in seconds to be used for KMS Key."
+  type        = string
+  default     = "7776000s"
+}
+
+variable "key_rings" {
+  description = "Keyrings to attach project key to."
+  type        = list(string)
+}
+
+variable "remote_state_bucket" {
+  description = "Backend bucket to load Terraform Remote State Data from previous steps."
+  type        = string
+}
+
+variable "default_service_account" {
+  description = "Project default service account setting: can be one of `delete`, `depriviledge`, `keep` or `disable`."
+  type        = string
+  default     = "disable"
+}
+
+variable "environment_kms_project_id" {
+  description = "Environment level KMS Project ID."
+  type        = string
+}
+
+variable "project_name" {
+  description = "Project Name."
+  type        = string
+}
+
+variable "prevent_destroy" {
+  description = "Prevent Key destruction."
+  type        = bool
+}
diff --git a/docs/assets/terraform/4-projects/modules/ml_single_project/versions.tf b/docs/assets/terraform/4-projects/modules/ml_single_project/versions.tf
new file mode 100644
index 00000000..849027e7
--- /dev/null
+++ b/docs/assets/terraform/4-projects/modules/ml_single_project/versions.tf
@@ -0,0 +1,29 @@
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+terraform {
+  required_version = ">= 1.3"
+  required_providers {
+    google = {
+      source  = "hashicorp/google"
+      version = ">= 3.50"
+    }
+    google-beta = {
+      source  = "hashicorp/google-beta"
+      version = ">= 3.50"
+    }
+  }
+}
diff --git a/docs/assets/terraform/4-projects/non-production.auto.example.tfvars b/docs/assets/terraform/4-projects/non-production.auto.example.tfvars
new file mode 100644
index 00000000..928e9306
--- /dev/null
+++ b/docs/assets/terraform/4-projects/non-production.auto.example.tfvars
@@ -0,0 +1,19 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+location_kms = "us"
+location_gcs = "US"
+env          = "nonproduction"
diff --git a/docs/assets/terraform/4-projects/production.auto.example.tfvars b/docs/assets/terraform/4-projects/production.auto.example.tfvars
new file mode 100644
index 00000000..ffdf42ca
--- /dev/null
+++ b/docs/assets/terraform/4-projects/production.auto.example.tfvars
@@ -0,0 +1,19 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+location_kms = "us"
+location_gcs = "US"
+env          = "production"
diff --git a/docs/assets/terraform/4-projects/shared.auto.example.tfvars b/docs/assets/terraform/4-projects/shared.auto.example.tfvars
new file mode 100644
index 00000000..4ecf95cf
--- /dev/null
+++ b/docs/assets/terraform/4-projects/shared.auto.example.tfvars
@@ -0,0 +1,22 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+# We suggest you to use the same region from the 0-bootstrap step
+default_region = "us-central1"
+
+cloud_source_service_catalog_repo_name = "svc-catalog"
+
+cloud_source_artifacts_repo_name = "publish-artifacts"
diff --git a/docs/deploy_on_foundation_v4.0.0.md b/docs/deploy_on_foundation_v4.0.0.md
new file mode 100644
index 00000000..12f33379
--- /dev/null
+++ b/docs/deploy_on_foundation_v4.0.0.md
@@ -0,0 +1,2166 @@
+# Deploying on top of existing Foundation v.4.0.0
+
+## Overview
+
+To deploy a simple machine learning application, you must first have a [terraform-example-foundation v4.0.0](https://github.com/terraform-google-modules/terraform-example-foundation/tree/v4.0.0) instance set up. The following steps will guide you through the additional configurations required on top of the foundation.
+
+## Requirements
+
+### Code
+
+- [terraform-example-foundation v4.0.0](https://github.com/terraform-google-modules/terraform-example-foundation/tree/v4.0.0) deployed until at least step `4-projects`.
+- You must have role **Service Account User** (`roles/iam.serviceAccountUser`) on the [Terraform Service Accounts](https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/docs/GLOSSARY.md#terraform-service-accounts) created in the foundation [Seed Project](https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/docs/GLOSSARY.md#seed-project).
+  The Terraform Service Accounts have the permissions to deploy each step of the foundation. Service Accounts:
+  - `sa-terraform-bootstrap@<SEED_PROJECT_ID>.iam.gserviceaccount.com`.
+  - `sa-terraform-env@<SEED_PROJECT_ID>.iam.gserviceaccount.com`
+  - `sa-terraform-net@<SEED_PROJECT_ID>.iam.gserviceaccount.com`
+  - `sa-terraform-proj@<SEED_PROJECT_ID>.iam.gserviceaccount.com`
+
+### Software
+
+Install the following dependencies:
+
+- [Google Cloud SDK](https://cloud.google.com/sdk/install) version 469.0.0 or later.
+- [Terraform](https://www.terraform.io/downloads.html) version 1.7.5 or later.
+
+### Google Cloud SDK Configuration
+
+Terraform must have Application Default Credentials configured, to configure it run:
+
+```bash
+gcloud auth application-default login
+```
+
+## Directory Layout and Terraform Initialization
+
+For these instructions we assume that:
+
+- The foundation was deployed using Cloud Build.
+- Every repository, excluding the policies repositories, should be on the `production` branch and `terraform init` should be executed in each one.
+- The following layout should exists in your local environment since you will need to make changes in these steps.
+If you do not have this layout, please checkout the source repositories for the foundation steps following this layout.
+
+    ```text
+    gcp-bootstrap
+    gcp-environments
+    gcp-networks
+    gcp-org
+    gcp-policies
+    gcp-projects
+    ```
+
+- Also checkout the [terraform-google-enterprise-genai](https://github.com/GoogleCloudPlatform/terraform-google-enterprise-genai) repository at the same level.
+
+The final layout should look like this:
+
+```text
+gcp-bootstrap
+gcp-environments
+gcp-networks
+gcp-org
+gcp-policies
+gcp-projects
+terraform-google-enterprise-genai
+```
+
+## Policies
+
+### Update `gcloud terraform vet` policies
+
+the first step is to update the `gcloud terraform vet` policies constraints to allow usage of the APIs needed by the Blueprint and add more policies.
+The constraints are located in the repository:
+
+- `gcp-policies`
+
+All changes below must be made to both repositories:
+
+**IMPORTANT:** Please note that the steps below are assuming you are checked out on `terraform-google-enterprise-genai/`.
+
+- Copy `cmek_settings.yaml` from this repository to the policies repository:
+
+``` bash
+cp policy-library/policies/constraints/cmek_settings.yaml ../gcp-policies/policies/constraints/cmek_settings.yaml
+```
+
+- Copy `network_enable_firewall_logs.yaml` from this repository to the policies repository:
+
+``` bash
+cp policy-library/policies/constraints/network_enable_firewall_logs.yaml ../gcp-policies/policies/constraints/network_enable_firewall_logs.yaml
+```
+
+- Copy `require_dnssec.yaml` from this repository to the policies repository:
+
+``` bash
+cp policy-library/policies/constraints/require_dnssec.yaml ../gcp-policies/policies/constraints/require_dnssec.yaml
+```
+
+- On `gcp-policies` change `serviceusage_allow_basic_apis.yaml` and add the following apis:
+
+```yaml
+     - "aiplatform.googleapis.com"
+     - "bigquerymigration.googleapis.com"
+     - "bigquerystorage.googleapis.com"
+     - "containerregistry.googleapis.com"
+     - "dataflow.googleapis.com"
+     - "dataform.googleapis.com"
+     - "deploymentmanager.googleapis.com"
+     - "notebooks.googleapis.com"
+     - "composer.googleapis.com"
+     - "containerscanning.googleapis.com"
+```
+
+Add files to tracked on `gcp-policies` repository, commit and push the code:
+
+```bash
+cd ../gcp-policies
+
+git add policies/constraints/*.yaml
+git commit -m "Add ML policies constraints"
+git push origin $(git branch --show-current)
+```
+
+## 1-org: Create Machine Learning Organization Policies and Organization Level Keys
+
+This step corresponds to modifications made to `1-org` step on foundation.
+
+**IMPORTANT:** Please note that the steps below are assuming you are checked out on `terraform-google-enterprise-genai/` and that `gcp-org` repository is checked out on `production` branch.
+
+```bash
+cd ../terraform-google-enterprise-genai
+```
+
+- Copy Machine Learning modules from this repo to `gcp-org` repository.
+
+```bash
+cp -r 1-org/modules/ml_kms_keyring ../gcp-org/modules
+cp -r 1-org/modules/ml-org-policies ../gcp-org/modules
+```
+
+- Create `ml_ops_org_policy.tf` file on `gcp-org/envs/shared` path:
+
+```bash
+cp docs/assets/terraform/1-org/ml_ops_org_policy.tf ../gcp-org/envs/shared
+```
+
+- Create `ml_key_rings.tf` file on `gcp-org/envs/shared` path:
+
+```bash
+cp docs/assets/terraform/1-org/ml_key_rings.tf ../gcp-org/envs/shared
+```
+
+- Edit `gcp-org/envs/shared/remote.tf` and add the following value to `locals`:
+
+```terraform
+projects_step_terraform_service_account_email = data.terraform_remote_state.bootstrap.outputs.projects_step_terraform_service_account_email
+```
+
+- Edit `gcp-org/envs/shared/variables.tf` and add the following variables:
+
+```terraform
+variable "keyring_regions" {
+  description = "Regions to create keyrings in"
+  type        = list(string)
+  default = [
+    "us-central1",
+    "us-east4"
+  ]
+}
+
+variable "keyring_name" {
+  description = "Name to be used for KMS Keyring"
+  type        = string
+  default     = "ml-org-keyring"
+}
+```
+
+- Edit `gcp-org/envs/shared/outputs.tf` and add the following output:
+
+```terraform
+output "key_rings" {
+  description = "Keyring Names created"
+  value       = module.kms_keyring.key_rings
+}
+```
+
+Add files to git on `gcp-org`, commit and push code:
+
+```bash
+cd ../gcp-org
+
+git add .
+
+git commit -m "Add ML org policies and Org-level key"
+git push origin production
+```
+
+## 2-environment: Create environment level logging keys, logging project and logging bucket
+
+This step corresponds to modifications made to `2-environment` step on foundation.
+
+Please note that the steps below are assuming you are checked out on `terraform-google-enterprise-genai/`.
+
+```bash
+cd ../terraform-google-enterprise-genai
+```
+
+### `development` branch
+
+- Go to `gcp-environments` repository, and check out on `development` branch.
+
+```bash
+cd ../gcp-environments
+
+git checkout development
+```
+
+- Return to `terraform-google-enterprise-genai` repo.
+
+```bash
+cd ../terraform-google-enterprise-genai
+```
+
+- Copy Machine Learning modules from this repo to `gcp-environments` repository.
+
+```bash
+cp -r 2-environments/modules/ml_kms_keyring ../gcp-environments/modules
+```
+
+- Create `ml_key_rings.tf` file on `gcp-environments/modules/env_baseline` path:
+
+```bash
+cp docs/assets/terraform/2-environments/ml_key_rings.tf ../gcp-environments/modules/env_baseline
+```
+
+- Create `ml_logging.tf` file on `gcp-environments/modules/env_baseline` path:
+
+```bash
+cp docs/assets/terraform/2-environments/ml_logging.tf ../gcp-environments/modules/env_baseline
+```
+
+- On `gcp-environments/modules/env_baseline/variables.tf` add the following variables:
+
+```terraform
+variable "keyring_name" {
+  description = "Name to be used for KMS Keyring"
+  type        = string
+  default     = "ml-env-keyring"
+}
+
+variable "keyring_regions" {
+  description = "Regions to create keyrings in"
+  type        = list(string)
+  default = [
+    "us-central1",
+    "us-east4"
+  ]
+}
+
+variable "kms_prevent_destroy" {
+  description = "Wheter to prevent keyring and keys destruction. Must be set to false if the user wants to disable accidental terraform deletions protection."
+  type        = bool
+  default     = true
+}
+
+variable "gcs_bucket_prefix" {
+  description = "Bucket Prefix"
+  type        = string
+  default     = "bkt"
+}
+
+variable "gcs_logging_bucket_location" {
+  description = "Location of environment logging bucket"
+  type        = string
+  default     = "us-central1"
+}
+
+variable "gcs_logging_retention_period" {
+  description = "Retention configuration for environment logging bucket"
+  type = object({
+    is_locked             = bool
+    retention_period_days = number
+  })
+  default = null
+}
+
+variable "gcs_logging_key_rotation_period" {
+  description = "Rotation period in seconds to be used for KMS Key"
+  type        = string
+  default     = "7776000s"
+}
+```
+
+- On `gcp-environments/modules/env_baseline/variables.tf` add the following field to `project_budget` specification:
+
+```terraform
+logging_budget_amount                       = optional(number, 1000)
+logging_alert_spent_percents                = optional(list(number), [1.2])
+logging_alert_pubsub_topic                  = optional(string, null)
+logging_budget_alert_spend_basis            = optional(string, "FORECASTED_SPEND")
+```
+
+This will result in a variable similar to the variable specified below:
+
+```terraform
+variable "project_budget" {
+  description = <<EOT
+  Budget configuration for projects.
+  budget_amount: The amount to use as the budget.
+  alert_spent_percents: A list of percentages of the budget to alert on when threshold is exceeded.
+  alert_pubsub_topic: The name of the Cloud Pub/Sub topic where budget related messages will be published, in the form of `projects/{project_id}/topics/{topic_id}`.
+  alert_spend_basis: The type of basis used to determine if spend has passed the threshold. Possible choices are `CURRENT_SPEND` or `FORECASTED_SPEND` (default).
+  EOT
+  type = object({
+    base_network_budget_amount                  = optional(number, 1000)
+    base_network_alert_spent_percents           = optional(list(number), [1.2])
+    base_network_alert_pubsub_topic             = optional(string, null)
+    base_network_budget_alert_spend_basis       = optional(string, "FORECASTED_SPEND")
+    restricted_network_budget_amount            = optional(number, 1000)
+    restricted_network_alert_spent_percents     = optional(list(number), [1.2])
+    restricted_network_alert_pubsub_topic       = optional(string, null)
+    restricted_network_budget_alert_spend_basis = optional(string, "FORECASTED_SPEND")
+    monitoring_budget_amount                    = optional(number, 1000)
+    monitoring_alert_spent_percents             = optional(list(number), [1.2])
+    monitoring_alert_pubsub_topic               = optional(string, null)
+    monitoring_budget_alert_spend_basis         = optional(string, "FORECASTED_SPEND")
+    secret_budget_amount                        = optional(number, 1000)
+    secret_alert_spent_percents                 = optional(list(number), [1.2])
+    secret_alert_pubsub_topic                   = optional(string, null)
+    secret_budget_alert_spend_basis             = optional(string, "FORECASTED_SPEND")
+    kms_budget_amount                           = optional(number, 1000)
+    kms_alert_spent_percents                    = optional(list(number), [1.2])
+    kms_alert_pubsub_topic                      = optional(string, null)
+    kms_budget_alert_spend_basis                = optional(string, "FORECASTED_SPEND")
+    logging_budget_amount                       = optional(number, 1000)
+    logging_alert_spent_percents                = optional(list(number), [1.2])
+    logging_alert_pubsub_topic                  = optional(string, null)
+    logging_budget_alert_spend_basis            = optional(string, "FORECASTED_SPEND")
+  })
+  default = {}
+}
+```
+
+- On `gcp-environments/modules/env_baseline/remote.tf` add the following value to `locals`:
+
+```terraform
+projects_step_terraform_service_account_email = data.terraform_remote_state.bootstrap.outputs.projects_step_terraform_service_account_email
+```
+
+- On `gcp-environments/envs/development/outputs.tf` add the following outputs:
+
+```terraform
+output "env_log_project_id" {
+  description = "Project ID of the environments log project"
+  value       = module.env.env_logs_project_id
+}
+
+output "env_log_project_number" {
+  description = "Project Number of the environments log project"
+  value       = module.env.env_logs_project_number
+}
+
+output "env_log_bucket_name" {
+  description = "Name of environment log bucket"
+  value       = module.env.env_log_bucket_name
+}
+
+output "env_kms_project_number" {
+  description = "Project Number for environment Cloud Key Management Service (KMS)."
+  value       = module.env.env_kms_project_number
+}
+
+output "key_rings" {
+  description = "Keyring Names created"
+  value       = module.env.key_rings
+}
+```
+
+- On `gcp-environments/modules/env_baseline/outputs.tf` add the following outputs:
+
+```terraform
+output "key_rings" {
+  description = "Keyring Names created"
+  value       = module.kms_keyring.key_rings
+}
+
+output "env_kms_project_number" {
+  description = "Project number for environment Cloud Key Management Service (KMS)."
+  value       = module.env_kms.project_number
+}
+
+output "env_logs_project_id" {
+  description = "Project ID for environment logging."
+  value       = module.env_logs.project_id
+}
+
+output "env_logs_project_number" {
+  description = "Project number for environment logging."
+  value       = module.env_logs.project_number
+}
+
+output "env_log_bucket_name" {
+  description = "Name of environment log bucket"
+  value       = google_storage_bucket.log_bucket.name
+}
+```
+
+- Commit and push files to git repo.
+
+```bash
+cd ../gcp-environments
+
+git add .
+
+git commit -m "Create env-level keys and env-level logging"
+
+git push origin development
+```
+
+### `nonproduction` branch
+
+- Go to `gcp-environments` repository, and check out on `nonproduction` branch.
+
+```bash
+cd ../gcp-environments
+
+git checkout nonproduction
+```
+
+- Return to `terraform-google-enterprise-genai` repo.
+
+```bash
+cd ../terraform-google-enterprise-genai
+```
+
+- Copy Machine Learning modules from this repo to `gcp-environments` repository.
+
+```bash
+cp -r 2-environments/modules/ml_kms_keyring ../gcp-environments/modules
+```
+
+- Create `ml_key_rings.tf` file on `gcp-environments/modules/env_baseline` path:
+
+```bash
+cp docs/assets/terraform/2-environments/ml_key_rings.tf ../gcp-environments/modules/env_baseline
+```
+
+- Create `ml_logging.tf` file on `gcp-environments/modules/env_baseline` path:
+
+```bash
+cp docs/assets/terraform/2-environments/ml_logging.tf ../gcp-environments/modules/env_baseline
+```
+
+- On `gcp-environments/modules/env_baseline/variables.tf` add the following variables:
+
+```terraform
+variable "keyring_name" {
+  description = "Name to be used for KMS Keyring"
+  type        = string
+  default     = "ml-env-keyring"
+}
+
+variable "keyring_regions" {
+  description = "Regions to create keyrings in"
+  type        = list(string)
+  default = [
+    "us-central1",
+    "us-east4"
+  ]
+}
+
+variable "kms_prevent_destroy" {
+  description = "Wheter to prevent keyring and keys destruction. Must be set to false if the user wants to disable accidental terraform deletions protection."
+  type        = bool
+  default     = true
+}
+
+variable "gcs_bucket_prefix" {
+  description = "Bucket Prefix"
+  type        = string
+  default     = "bkt"
+}
+
+variable "gcs_logging_bucket_location" {
+  description = "Location of environment logging bucket"
+  type        = string
+  default     = "us-central1"
+}
+
+variable "gcs_logging_retention_period" {
+  description = "Retention configuration for environment logging bucket"
+  type = object({
+    is_locked             = bool
+    retention_period_days = number
+  })
+  default = null
+}
+
+variable "gcs_logging_key_rotation_period" {
+  description = "Rotation period in seconds to be used for KMS Key"
+  type        = string
+  default     = "7776000s"
+}
+```
+
+- On `gcp-environments/modules/env_baseline/variables.tf` add the following field to `project_budget` specification:
+
+```terraform
+logging_budget_amount                       = optional(number, 1000)
+logging_alert_spent_percents                = optional(list(number), [1.2])
+logging_alert_pubsub_topic                  = optional(string, null)
+logging_budget_alert_spend_basis            = optional(string, "FORECASTED_SPEND")
+```
+
+This will result in a variable similar to the variable specified below:
+
+```terraform
+variable "project_budget" {
+  description = <<EOT
+  Budget configuration for projects.
+  budget_amount: The amount to use as the budget.
+  alert_spent_percents: A list of percentages of the budget to alert on when threshold is exceeded.
+  alert_pubsub_topic: The name of the Cloud Pub/Sub topic where budget related messages will be published, in the form of `projects/{project_id}/topics/{topic_id}`.
+  alert_spend_basis: The type of basis used to determine if spend has passed the threshold. Possible choices are `CURRENT_SPEND` or `FORECASTED_SPEND` (default).
+  EOT
+  type = object({
+    base_network_budget_amount                  = optional(number, 1000)
+    base_network_alert_spent_percents           = optional(list(number), [1.2])
+    base_network_alert_pubsub_topic             = optional(string, null)
+    base_network_budget_alert_spend_basis       = optional(string, "FORECASTED_SPEND")
+    restricted_network_budget_amount            = optional(number, 1000)
+    restricted_network_alert_spent_percents     = optional(list(number), [1.2])
+    restricted_network_alert_pubsub_topic       = optional(string, null)
+    restricted_network_budget_alert_spend_basis = optional(string, "FORECASTED_SPEND")
+    monitoring_budget_amount                    = optional(number, 1000)
+    monitoring_alert_spent_percents             = optional(list(number), [1.2])
+    monitoring_alert_pubsub_topic               = optional(string, null)
+    monitoring_budget_alert_spend_basis         = optional(string, "FORECASTED_SPEND")
+    secret_budget_amount                        = optional(number, 1000)
+    secret_alert_spent_percents                 = optional(list(number), [1.2])
+    secret_alert_pubsub_topic                   = optional(string, null)
+    secret_budget_alert_spend_basis             = optional(string, "FORECASTED_SPEND")
+    kms_budget_amount                           = optional(number, 1000)
+    kms_alert_spent_percents                    = optional(list(number), [1.2])
+    kms_alert_pubsub_topic                      = optional(string, null)
+    kms_budget_alert_spend_basis                = optional(string, "FORECASTED_SPEND")
+    logging_budget_amount                       = optional(number, 1000)
+    logging_alert_spent_percents                = optional(list(number), [1.2])
+    logging_alert_pubsub_topic                  = optional(string, null)
+    logging_budget_alert_spend_basis            = optional(string, "FORECASTED_SPEND")
+  })
+  default = {}
+}
+```
+
+- On `gcp-environments/modules/env_baseline/remote.tf` add the following value to `locals`:
+
+```terraform
+projects_step_terraform_service_account_email = data.terraform_remote_state.bootstrap.outputs.projects_step_terraform_service_account_email
+```
+
+- On `gcp-environments/envs/nonproduction/outputs.tf` add the following outputs:
+
+```terraform
+output "env_log_project_id" {
+  description = "Project ID of the environments log project"
+  value       = module.env.env_logs_project_id
+}
+
+output "env_log_project_number" {
+  description = "Project Number of the environments log project"
+  value       = module.env.env_logs_project_number
+}
+
+output "env_log_bucket_name" {
+  description = "Name of environment log bucket"
+  value       = module.env.env_log_bucket_name
+}
+
+output "env_kms_project_number" {
+  description = "Project Number for environment Cloud Key Management Service (KMS)."
+  value       = module.env.env_kms_project_number
+}
+
+output "key_rings" {
+  description = "Keyring Names created"
+  value       = module.env.key_rings
+}
+```
+
+- On `gcp-environments/modules/env_baseline/outputs.tf` add the following outputs:
+
+```terraform
+output "key_rings" {
+  description = "Keyring Names created"
+  value       = module.kms_keyring.key_rings
+}
+
+output "env_kms_project_number" {
+  description = "Project number for environment Cloud Key Management Service (KMS)."
+  value       = module.env_kms.project_number
+}
+
+output "env_logs_project_id" {
+  description = "Project ID for environment logging."
+  value       = module.env_logs.project_id
+}
+
+output "env_logs_project_number" {
+  description = "Project number for environment logging."
+  value       = module.env_logs.project_number
+}
+
+output "env_log_bucket_name" {
+  description = "Name of environment log bucket"
+  value       = google_storage_bucket.log_bucket.name
+}
+```
+
+- Commit and push files to git repo.
+
+```bash
+cd ../gcp-environments
+
+git add .
+
+git commit -m "Create env-level keys and env-level logging"
+
+git push origin nonproduction
+```
+
+### `production` branch
+
+- Go to `gcp-environments` repository, and check out on `production` branch.
+
+```bash
+cd ../gcp-environments
+
+git checkout production
+```
+
+- Return to `terraform-google-enterprise-genai` repo.
+
+```bash
+cd ../terraform-google-enterprise-genai
+```
+
+- Copy Machine Learning modules from this repo to `gcp-environments` repository.
+
+```bash
+cp -r 2-environments/modules/ml_kms_keyring ../gcp-environments/modules
+```
+
+- Create `ml_key_rings.tf` file on `gcp-environments/modules/env_baseline` path:
+
+```bash
+cp docs/assets/terraform/2-environments/ml_key_rings.tf ../gcp-environments/modules/env_baseline
+```
+
+- Create `ml_logging.tf` file on `gcp-environments/modules/env_baseline` path:
+
+```bash
+cp docs/assets/terraform/2-environments/ml_logging.tf ../gcp-environments/modules/env_baseline
+```
+
+- On `gcp-environments/modules/env_baseline/variables.tf` add the following variables:
+
+```terraform
+variable "keyring_name" {
+  description = "Name to be used for KMS Keyring"
+  type        = string
+  default     = "ml-env-keyring"
+}
+
+variable "keyring_regions" {
+  description = "Regions to create keyrings in"
+  type        = list(string)
+  default = [
+    "us-central1",
+    "us-east4"
+  ]
+}
+
+variable "kms_prevent_destroy" {
+  description = "Wheter to prevent keyring and keys destruction. Must be set to false if the user wants to disable accidental terraform deletions protection."
+  type        = bool
+  default     = true
+}
+
+variable "gcs_bucket_prefix" {
+  description = "Bucket Prefix"
+  type        = string
+  default     = "bkt"
+}
+
+variable "gcs_logging_bucket_location" {
+  description = "Location of environment logging bucket"
+  type        = string
+  default     = "us-central1"
+}
+
+variable "gcs_logging_retention_period" {
+  description = "Retention configuration for environment logging bucket"
+  type = object({
+    is_locked             = bool
+    retention_period_days = number
+  })
+  default = null
+}
+
+variable "gcs_logging_key_rotation_period" {
+  description = "Rotation period in seconds to be used for KMS Key"
+  type        = string
+  default     = "7776000s"
+}
+```
+
+- On `gcp-environments/modules/env_baseline/variables.tf` add the following field to `project_budget` specification:
+
+```terraform
+logging_budget_amount                       = optional(number, 1000)
+logging_alert_spent_percents                = optional(list(number), [1.2])
+logging_alert_pubsub_topic                  = optional(string, null)
+logging_budget_alert_spend_basis            = optional(string, "FORECASTED_SPEND")
+```
+
+This will result in a variable similar to the variable specified below:
+
+```terraform
+variable "project_budget" {
+  description = <<EOT
+  Budget configuration for projects.
+  budget_amount: The amount to use as the budget.
+  alert_spent_percents: A list of percentages of the budget to alert on when threshold is exceeded.
+  alert_pubsub_topic: The name of the Cloud Pub/Sub topic where budget related messages will be published, in the form of `projects/{project_id}/topics/{topic_id}`.
+  alert_spend_basis: The type of basis used to determine if spend has passed the threshold. Possible choices are `CURRENT_SPEND` or `FORECASTED_SPEND` (default).
+  EOT
+  type = object({
+    base_network_budget_amount                  = optional(number, 1000)
+    base_network_alert_spent_percents           = optional(list(number), [1.2])
+    base_network_alert_pubsub_topic             = optional(string, null)
+    base_network_budget_alert_spend_basis       = optional(string, "FORECASTED_SPEND")
+    restricted_network_budget_amount            = optional(number, 1000)
+    restricted_network_alert_spent_percents     = optional(list(number), [1.2])
+    restricted_network_alert_pubsub_topic       = optional(string, null)
+    restricted_network_budget_alert_spend_basis = optional(string, "FORECASTED_SPEND")
+    monitoring_budget_amount                    = optional(number, 1000)
+    monitoring_alert_spent_percents             = optional(list(number), [1.2])
+    monitoring_alert_pubsub_topic               = optional(string, null)
+    monitoring_budget_alert_spend_basis         = optional(string, "FORECASTED_SPEND")
+    secret_budget_amount                        = optional(number, 1000)
+    secret_alert_spent_percents                 = optional(list(number), [1.2])
+    secret_alert_pubsub_topic                   = optional(string, null)
+    secret_budget_alert_spend_basis             = optional(string, "FORECASTED_SPEND")
+    kms_budget_amount                           = optional(number, 1000)
+    kms_alert_spent_percents                    = optional(list(number), [1.2])
+    kms_alert_pubsub_topic                      = optional(string, null)
+    kms_budget_alert_spend_basis                = optional(string, "FORECASTED_SPEND")
+    logging_budget_amount                       = optional(number, 1000)
+    logging_alert_spent_percents                = optional(list(number), [1.2])
+    logging_alert_pubsub_topic                  = optional(string, null)
+    logging_budget_alert_spend_basis            = optional(string, "FORECASTED_SPEND")
+  })
+  default = {}
+}
+```
+
+- On `gcp-environments/modules/env_baseline/remote.tf` add the following value to `locals`:
+
+```terraform
+projects_step_terraform_service_account_email = data.terraform_remote_state.bootstrap.outputs.projects_step_terraform_service_account_email
+```
+
+- On `gcp-environments/envs/production/outputs.tf` add the following outputs:
+
+```terraform
+output "env_log_project_id" {
+  description = "Project ID of the environments log project"
+  value       = module.env.env_logs_project_id
+}
+
+output "env_log_project_number" {
+  description = "Project Number of the environments log project"
+  value       = module.env.env_logs_project_number
+}
+
+output "env_log_bucket_name" {
+  description = "Name of environment log bucket"
+  value       = module.env.env_log_bucket_name
+}
+
+output "env_kms_project_number" {
+  description = "Project Number for environment Cloud Key Management Service (KMS)."
+  value       = module.env.env_kms_project_number
+}
+
+output "key_rings" {
+  description = "Keyring Names created"
+  value       = module.env.key_rings
+}
+```
+
+- On `gcp-environments/modules/env_baseline/outputs.tf` add the following outputs:
+
+```terraform
+output "key_rings" {
+  description = "Keyring Names created"
+  value       = module.kms_keyring.key_rings
+}
+
+output "env_kms_project_number" {
+  description = "Project number for environment Cloud Key Management Service (KMS)."
+  value       = module.env_kms.project_number
+}
+
+output "env_logs_project_id" {
+  description = "Project ID for environment logging."
+  value       = module.env_logs.project_id
+}
+
+output "env_logs_project_number" {
+  description = "Project number for environment logging."
+  value       = module.env_logs.project_number
+}
+
+output "env_log_bucket_name" {
+  description = "Name of environment log bucket"
+  value       = google_storage_bucket.log_bucket.name
+}
+```
+
+- Commit and push files to git repo.
+
+```bash
+cd ../gcp-environments
+
+git add .
+
+git commit -m "Create env-level keys and env-level logging"
+
+git push origin production
+```
+
+### `N.B.` Read this before continuing further
+
+A logging project will be created in every environment (`development`, `non-production`, `production`) when running this code. This project contains a storage bucket for the purposes of project logging within its respective environment.  This requires the `cloud-storage-analytics@google.com` group permissions for the storage bucket.  Since foundations has more restricted security measures, a domain restriction constraint is enforced.  This restraint will prevent the google cloud-storage-analytics group to be added to any permissions.  In order for this terraform code to execute without error, manual intervention must be made to ensure everything applies without issue.
+
+You must disable the contraint, assign the permission on the bucket and then apply the contraint again. This step-by-step presents you with two different options (`Option 1` and `Option 2`) and only one of them should be executed.
+
+The first and the recommended option is making the changes by using `gcloud` cli, as described in `Option 1`.
+
+`Option 2` is an alternative to `gcloud` cli and relies on Google Cloud Console.
+
+#### Option 1: Use `gcloud` cli to disable/enable organization policy constraint
+
+You will be doing this procedure for each environment (`development`, `non-production` & `production`)
+
+##### `development` environment configuration
+
+1. Configure the following variable below with the value of `gcp-environments` repository path.
+
+    ```bash
+    export GCP_ENVIRONMENTS_PATH=INSERT_YOUR_PATH_HERE
+    ```
+
+    Make sure your git is checked out to the development branch by running `git checkout development` on `GCP_ENVIRONMENTS_PATH`.
+
+    ```bash
+    (cd $GCP_ENVIRONMENTS_PATH && git checkout development)
+    ```
+
+2. Retrieve the bucket name and project id from terraform outputs.
+
+    ```bash
+    export ENV_LOG_BUCKET_NAME=$(terraform -chdir="$GCP_ENVIRONMENTS_PATH/envs/development" output -raw env_log_bucket_name)
+    export ENV_LOG_PROJECT_ID=$(terraform -chdir="$GCP_ENVIRONMENTS_PATH/envs/development" output -raw env_log_project_id)
+    ```
+
+3. Validate the variable values.
+
+    ```bash
+    echo env_log_project_id=$ENV_LOG_PROJECT_ID
+    echo env_log_bucket_name=$ENV_LOG_BUCKET_NAME
+    ```
+
+4. Reset your org policy for the logging project by running the following command.
+
+    ```bash
+    gcloud org-policies reset iam.allowedPolicyMemberDomains --project=$ENV_LOG_PROJECT_ID
+    ```
+
+5. Assign `roles/storage.objectCreator` role to `cloud-storage-analytics@google.com` group.
+
+    ```bash
+    gcloud storage buckets add-iam-policy-binding gs://$ENV_LOG_BUCKET_NAME --member="group:cloud-storage-analytics@google.com" --role="roles/storage.objectCreator"
+    ```
+
+    > Note: you might receive an error telling you that this is against an organization policy, this can happen because of the propagation time from the change made to the organization policy (propagation time is tipically 2 minutes, but can take 7 minutes or longer). If this happens, wait some minutes and try again
+
+6. Delete the change made on the first step to the organization policy, this will make the project inherit parent policies.
+
+    ```bash
+    gcloud org-policies delete iam.allowedPolicyMemberDomains --project=$ENV_LOG_PROJECT_ID
+    ```
+
+##### `non-production` environment configuration
+
+1. Configure the following variable below with the value of `gcp-environments` repository path.
+
+    ```bash
+    export GCP_ENVIRONMENTS_PATH=INSERT_YOUR_PATH_HERE
+    ```
+
+    Make sure your git is checked out to the `non-production` branch by running `git checkout nonproduction` on `GCP_ENVIRONMENTS_PATH`.
+
+    ```bash
+    (cd $GCP_ENVIRONMENTS_PATH && git checkout nonproduction)
+    ```
+
+2. Retrieve the bucket name and project id from terraform outputs.
+
+    ```bash
+    export ENV_LOG_BUCKET_NAME=$(terraform -chdir="$GCP_ENVIRONMENTS_PATH/envs/nonproduction" output -raw env_log_bucket_name)
+    export ENV_LOG_PROJECT_ID=$(terraform -chdir="$GCP_ENVIRONMENTS_PATH/envs/nonproduction" output -raw env_log_project_id)
+    ```
+
+3. Validate the variable values.
+
+    ```bash
+    echo env_log_project_id=$ENV_LOG_PROJECT_ID
+    echo env_log_bucket_name=$ENV_LOG_BUCKET_NAME
+    ```
+
+4. Reset your org policy for the logging project by running the following command.
+
+    ```bash
+    gcloud org-policies reset iam.allowedPolicyMemberDomains --project=$ENV_LOG_PROJECT_ID
+    ```
+
+5. Assign `roles/storage.objectCreator` role to `cloud-storage-analytics@google.com` group.
+
+    ```bash
+    gcloud storage buckets add-iam-policy-binding gs://$ENV_LOG_BUCKET_NAME --member="group:cloud-storage-analytics@google.com" --role="roles/storage.objectCreator"
+    ```
+
+    > Note: you might receive an error telling you that this is against an organization policy, this can happen because of the propagation time from the change made to the organization policy (propagation time is tipically 2 minutes, but can take 7 minutes or longer). If this happens, wait some minutes and try again
+
+6. Delete the change made on the first step to the organization policy, this will make the project inherit parent policies.
+
+    ```bash
+    gcloud org-policies delete iam.allowedPolicyMemberDomains --project=$ENV_LOG_PROJECT_ID
+    ```
+
+##### `production` environment configuration
+
+1. Configure the following variable below with the value of `gcp-environments` repository path.
+
+    ```bash
+    export GCP_ENVIRONMENTS_PATH=INSERT_YOUR_PATH_HERE
+    ```
+
+    Make sure your git is checked out to the `production` branch by running `git checkout production` on `GCP_ENVIRONMENTS_PATH`.
+
+    ```bash
+    (cd $GCP_ENVIRONMENTS_PATH && git checkout production)
+    ```
+
+2. Retrieve the bucket name and project id from terraform outputs.
+
+    ```bash
+    export ENV_LOG_BUCKET_NAME=$(terraform -chdir="$GCP_ENVIRONMENTS_PATH/envs/production" output -raw env_log_bucket_name)
+    export ENV_LOG_PROJECT_ID=$(terraform -chdir="$GCP_ENVIRONMENTS_PATH/envs/production" output -raw env_log_project_id)
+    ```
+
+3. Validate the variable values.
+
+    ```bash
+    echo env_log_project_id=$ENV_LOG_PROJECT_ID
+    echo env_log_bucket_name=$ENV_LOG_BUCKET_NAME
+    ```
+
+4. Reset your org policy for the logging project by running the following command.
+
+    ```bash
+    gcloud org-policies reset iam.allowedPolicyMemberDomains --project=$ENV_LOG_PROJECT_ID
+    ```
+
+5. Assign `roles/storage.objectCreator` role to `cloud-storage-analytics@google.com` group.
+
+    ```bash
+    gcloud storage buckets add-iam-policy-binding gs://$ENV_LOG_BUCKET_NAME --member="group:cloud-storage-analytics@google.com" --role="roles/storage.objectCreator"
+    ```
+
+    > Note: you might receive an error telling you that this is against an organization policy, this can happen because of the propagation time from the change made to the organization policy (propagation time is tipically 2 minutes, but can take 7 minutes or longer). If this happens, wait some minutes and try again
+
+6. Delete the change made on the first step to the organization policy, this will make the project inherit parent policies.
+
+    ```bash
+    gcloud org-policies delete iam.allowedPolicyMemberDomains --project=$ENV_LOG_PROJECT_ID
+    ```
+
+#### Option 2: Use Google Cloud Console to disable/enable organization policy constraint
+
+Proceed with these steps only if `Option 1` is not chosen.
+
+1. On `ml_logging.tf` locate the following lines and uncomment them:
+
+    ```terraform
+    resource "google_storage_bucket_iam_member" "bucket_logging" {
+      bucket = google_storage_bucket.log_bucket.name
+      role   = "roles/storage.objectCreator"
+      member = "group:cloud-storage-analytics@google.com"
+    }
+    ```
+
+2. Under `IAM & Admin`, select `Organization Policies`.  Search for "Domain Restricted Sharing".
+
+    ![list-policy](../2-environments/imgs/list-policy.png)
+
+3. Select 'Manage Policy'.  This directs you to the Domain Restricted Sharing Edit Policy page.  It will be set at 'Inherit parent's policy'.  Change this to 'Google-managed default'.
+
+    ![edit-policy](../2-environments/imgs/edit-policy.png)
+
+4. Follow the instructions on checking out `development`, `non-production` & `production` branches. Once environments terraform code has successfully applied, edit the policy again and select 'Inherit parent's policy' and Click `SET POLICY`.
+
+After making these modifications, you can follow the README.md procedure for `2-environment` step on foundation, make sure you **change the organization policy after running the steps on foundation**.
+
+## 3-network: Configure private DNS zone for Vertex Workbench Instances, Enable NAT and Attach projects to perimeter
+
+This step corresponds to modifications made to `3-networks-dual-svpc` step on foundation.
+
+Please note that the steps below are assuming you are checked out on `terraform-google-enterprise-genai/`.
+
+```bash
+cd ../terraform-google-enterprise-genai
+```
+
+### `development` branch on `gcp-networks`
+
+- Go to `gcp-networks` repository, and check out on `development` branch.
+
+```bash
+cd ../gcp-networks
+
+git checkout development
+```
+
+#### Private DNS zone configuration (dev)
+
+- Return to `terraform-google-enterprise-genai` repo.
+
+```bash
+cd ../terraform-google-enterprise-genai
+```
+
+- Copy DNS notebook network module from this repo to `gcp-networks` repository.
+
+```bash
+cp -r 3-networks-dual-svpc/modules/ml_dns_notebooks ../gcp-networks/modules
+```
+
+- Create a file named `ml_dns_notebooks.tf` on path `gcp-networks/modules/base_env`:
+
+```bash
+cp docs/assets/terraform/3-networks-dual-svpc/ml_dns_notebooks.tf ../gcp-networks/modules/base_env
+```
+
+Commit and push files to git repo.
+
+```bash
+cd ../gcp-networks
+
+git add .
+
+git commit -m "Create DNS notebook configuration"
+
+git push origin development
+```
+
+#### Enabling NAT, Attaching projects to Service Perimeter and Creating custom firewall rules (dev)
+
+Create `gcp-networks/modules/base_env/data.tf` file with the following content:
+
+```terraform
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+
+data "google_netblock_ip_ranges" "legacy_health_checkers" {
+  range_type = "legacy-health-checkers"
+}
+
+data "google_netblock_ip_ranges" "health_checkers" {
+  range_type = "health-checkers"
+}
+
+// Cloud IAP's TCP forwarding netblock
+data "google_netblock_ip_ranges" "iap_forwarders" {
+  range_type = "iap-forwarders"
+}
+```
+
+On `gcp-networks/modules/restricted_shared_vpc/variables.tf` add the following variables:
+
+```terraform
+variable "perimeter_projects" {
+  description = "A list of project numbers to be added to the service perimeter"
+  type        = list(number)
+  default     = []
+}
+
+variable "allow_all_egress_ranges" {
+  description = "List of network ranges to which all egress traffic will be allowed"
+  default     = null
+}
+
+variable "allow_all_ingress_ranges" {
+  description = "List of network ranges from which all ingress traffic will be allowed"
+  default     = null
+}
+```
+
+On `gcp-networks/modules/base_env/remote.tf`:
+
+1. Add the env remote state, by adding the following terraform code to the file:
+
+    ```terraform
+    data "terraform_remote_state" "env" {
+      backend = "gcs"
+
+      config = {
+        bucket = var.remote_state_bucket
+        prefix = "terraform/environments/${var.env}"
+      }
+    }
+    ```
+
+2. Edit `locals` and add the following fields:
+
+    ```terraform
+    logging_env_project_number   = data.terraform_remote_state.env.outputs.env_log_project_number
+    kms_env_project_number       = data.terraform_remote_state.env.outputs.env_kms_project_number
+    ```
+
+3. The final result will contain existing locals and the added ones, it should look similar to the code below:
+
+    ```terraform
+    locals {
+      restricted_project_id        = data.terraform_remote_state.org.outputs.shared_vpc_projects[var.env].restricted_shared_vpc_project_id
+      restricted_project_number    = data.terraform_remote_state.org.outputs.shared_vpc_projects[var.env].restricted_shared_vpc_project_number
+      base_project_id              = data.terraform_remote_state.org.outputs.shared_vpc_projects[var.env].base_shared_vpc_project_id
+      interconnect_project_number  = data.terraform_remote_state.org.outputs.interconnect_project_number
+      dns_hub_project_id           = data.terraform_remote_state.org.outputs.dns_hub_project_id
+      organization_service_account = data.terraform_remote_state.bootstrap.outputs.organization_step_terraform_service_account_email
+      networks_service_account     = data.terraform_remote_state.bootstrap.outputs.networks_step_terraform_service_account_email
+      projects_service_account     = data.terraform_remote_state.bootstrap.outputs.projects_step_terraform_service_account_email
+      logging_env_project_number   = data.terraform_remote_state.env.outputs.env_log_project_number
+      kms_env_project_number       = data.terraform_remote_state.env.outputs.env_kms_project_number
+    }
+    ```
+
+##### Adding projects to service perimeter (dev)
+
+On `gcp-networks/modules/restricted_shared_vpc/service_control.tf`, modify the terraform module called **regular_service_perimeter** and add the following module field to `resources`:
+
+```terraform
+distinct(concat([var.project_number], var.perimeter_projects))
+```
+
+This shall result in a module similar to the code below:
+
+```terraform
+module "regular_service_perimeter" {
+  source  = "terraform-google-modules/vpc-service-controls/google//modules/regular_service_perimeter"
+  version = "~> 4.0"
+
+  policy         = var.access_context_manager_policy_id
+  perimeter_name = local.perimeter_name
+  description    = "Default VPC Service Controls perimeter"
+  resources      = distinct(concat([var.project_number], var.perimeter_projects))
+  access_levels  = [module.access_level_members.name]
+
+  restricted_services     = var.restricted_services
+  vpc_accessible_services = ["RESTRICTED-SERVICES"]
+
+  ingress_policies = var.ingress_policies
+  egress_policies  = var.egress_policies
+
+  depends_on = [
+    time_sleep.wait_vpc_sc_propagation
+  ]
+}
+```
+
+##### Creating "allow all ingress ranges" and "allow all egress ranges" firewall rules (dev)
+
+On `gcp-networks/modules/restricted_shared_vpc/firewall.tf` add the following firewall rules by adding the terraform code below to the file:
+
+```terraform
+resource "google_compute_firewall" "allow_all_egress" {
+  count = var.allow_all_egress_ranges != null ? 1 : 0
+
+  name      = "fw-${var.environment_code}-shared-base-1000-e-a-all-all-all"
+  network   = module.main.network_name
+  project   = var.project_id
+  direction = "EGRESS"
+  priority  = 1000
+
+  dynamic "log_config" {
+    for_each = var.firewall_enable_logging == true ? [{
+      metadata = "INCLUDE_ALL_METADATA"
+    }] : []
+
+    content {
+      metadata = log_config.value.metadata
+    }
+  }
+
+  allow {
+    protocol = "all"
+  }
+
+  destination_ranges = var.allow_all_egress_ranges
+}
+
+resource "google_compute_firewall" "allow_all_ingress" {
+  count = var.allow_all_ingress_ranges != null ? 1 : 0
+
+  name      = "fw-${var.environment_code}-shared-base-1000-i-a-all"
+  network   = module.main.network_name
+  project   = var.project_id
+  direction = "INGRESS"
+  priority  = 1000
+
+  dynamic "log_config" {
+    for_each = var.firewall_enable_logging == true ? [{
+      metadata = "INCLUDE_ALL_METADATA"
+    }] : []
+
+    content {
+      metadata = log_config.value.metadata
+    }
+  }
+
+  allow {
+    protocol = "all"
+  }
+
+  source_ranges = var.allow_all_ingress_ranges
+}
+```
+
+##### Changes to restricted shared VPC (dev)
+
+On `gcp-networks/modules/base_env/main.tf` edit the terraform module named **restricted_shared_vpc** and add the following fields to it:
+
+```terraform
+allow_all_ingress_ranges = concat(data.google_netblock_ip_ranges.health_checkers.cidr_blocks_ipv4, data.google_netblock_ip_ranges.legacy_health_checkers.cidr_blocks_ipv4, data.google_netblock_ip_ranges.iap_forwarders.cidr_blocks_ipv4)
+allow_all_egress_ranges  = ["0.0.0.0/0"]
+
+nat_enabled               = true
+nat_num_addresses_region1 = 1
+nat_num_addresses_region2 = 1
+
+perimeter_projects = [local.logging_env_project_number, local.kms_env_project_number]
+```
+
+Commit all changes and push to the current branch.
+
+```bash
+git add .
+git commit -m "Create custom fw rules, enable nat, configure dns and service perimeter"
+
+git push origin development
+```
+
+### `nonproduction` branch on `gcp-networks`
+
+- Go to `gcp-networks` repository, and check out on `nonproduction` branch.
+
+```bash
+cd ../gcp-networks
+
+git checkout nonproduction
+```
+
+#### Private DNS zone configuration (non-production)
+
+- Return to `terraform-google-enterprise-genai` repo.
+
+```bash
+cd ../terraform-google-enterprise-genai
+```
+
+- Copy DNS notebook network module from this repo to `gcp-networks` repository.
+
+```bash
+cp -r 3-networks-dual-svpc/modules/ml_dns_notebooks ../gcp-networks/modules
+```
+
+- Create a file named `ml_dns_notebooks.tf` on path `gcp-networks/modules/base_env`:
+
+```bash
+cp docs/assets/terraform/3-networks-dual-svpc/ml_dns_notebooks.tf ../gcp-networks/modules/base_env
+```
+
+Commit and push files to git repo.
+
+```bash
+cd ../gcp-networks
+
+git add .
+
+git commit -m "Create DNS notebook configuration"
+
+git push origin nonproduction
+```
+
+#### Enabling NAT, Attaching projects to Service Perimeter and Creating custom firewall rules (non-production)
+
+Create `gcp-networks/modules/base_env/data.tf` file with the following content:
+
+```terraform
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+
+data "google_netblock_ip_ranges" "legacy_health_checkers" {
+  range_type = "legacy-health-checkers"
+}
+
+data "google_netblock_ip_ranges" "health_checkers" {
+  range_type = "health-checkers"
+}
+
+// Cloud IAP's TCP forwarding netblock
+data "google_netblock_ip_ranges" "iap_forwarders" {
+  range_type = "iap-forwarders"
+}
+```
+
+On `gcp-networks/modules/restricted_shared_vpc/variables.tf` add the following variables:
+
+```terraform
+variable "perimeter_projects" {
+  description = "A list of project numbers to be added to the service perimeter"
+  type        = list(number)
+  default     = []
+}
+
+variable "allow_all_egress_ranges" {
+  description = "List of network ranges to which all egress traffic will be allowed"
+  default     = null
+}
+
+variable "allow_all_ingress_ranges" {
+  description = "List of network ranges from which all ingress traffic will be allowed"
+  default     = null
+}
+```
+
+On `gcp-networks/modules/base_env/remote.tf`:
+
+1. Add the env remote state, by adding the following terraform code to the file:
+
+    ```terraform
+    data "terraform_remote_state" "env" {
+      backend = "gcs"
+
+      config = {
+        bucket = var.remote_state_bucket
+        prefix = "terraform/environments/${var.env}"
+      }
+    }
+    ```
+
+2. Edit `locals` and add the following fields:
+
+    ```terraform
+    logging_env_project_number   = data.terraform_remote_state.env.outputs.env_log_project_number
+    kms_env_project_number       = data.terraform_remote_state.env.outputs.env_kms_project_number
+    ```
+
+3. The final result will contain existing locals and the added ones, it should look similar to the code below:
+
+    ```terraform
+    locals {
+      restricted_project_id        = data.terraform_remote_state.org.outputs.shared_vpc_projects[var.env].restricted_shared_vpc_project_id
+      restricted_project_number    = data.terraform_remote_state.org.outputs.shared_vpc_projects[var.env].restricted_shared_vpc_project_number
+      base_project_id              = data.terraform_remote_state.org.outputs.shared_vpc_projects[var.env].base_shared_vpc_project_id
+      interconnect_project_number  = data.terraform_remote_state.org.outputs.interconnect_project_number
+      dns_hub_project_id           = data.terraform_remote_state.org.outputs.dns_hub_project_id
+      organization_service_account = data.terraform_remote_state.bootstrap.outputs.organization_step_terraform_service_account_email
+      networks_service_account     = data.terraform_remote_state.bootstrap.outputs.networks_step_terraform_service_account_email
+      projects_service_account     = data.terraform_remote_state.bootstrap.outputs.projects_step_terraform_service_account_email
+      logging_env_project_number   = data.terraform_remote_state.env.outputs.env_log_project_number
+      kms_env_project_number       = data.terraform_remote_state.env.outputs.env_kms_project_number
+    }
+    ```
+
+##### Adding projects to service perimeter (non-production)
+
+On `gcp-networks/modules/restricted_shared_vpc/service_control.tf`, modify the terraform module called **regular_service_perimeter** and add the following module field to `resources`:
+
+```terraform
+distinct(concat([var.project_number], var.perimeter_projects))
+```
+
+This shall result in a module similar to the code below:
+
+```terraform
+module "regular_service_perimeter" {
+  source  = "terraform-google-modules/vpc-service-controls/google//modules/regular_service_perimeter"
+  version = "~> 4.0"
+
+  policy         = var.access_context_manager_policy_id
+  perimeter_name = local.perimeter_name
+  description    = "Default VPC Service Controls perimeter"
+  resources      = distinct(concat([var.project_number], var.perimeter_projects))
+  access_levels  = [module.access_level_members.name]
+
+  restricted_services     = var.restricted_services
+  vpc_accessible_services = ["RESTRICTED-SERVICES"]
+
+  ingress_policies = var.ingress_policies
+  egress_policies  = var.egress_policies
+
+  depends_on = [
+    time_sleep.wait_vpc_sc_propagation
+  ]
+}
+```
+
+##### Creating "allow all ingress ranges" and "allow all egress ranges" firewall rules (non-production)
+
+On `gcp-networks/modules/restricted_shared_vpc/firewall.tf` add the following firewall rules by adding the terraform code below to the file:
+
+```terraform
+resource "google_compute_firewall" "allow_all_egress" {
+  count = var.allow_all_egress_ranges != null ? 1 : 0
+
+  name      = "fw-${var.environment_code}-shared-base-1000-e-a-all-all-all"
+  network   = module.main.network_name
+  project   = var.project_id
+  direction = "EGRESS"
+  priority  = 1000
+
+  dynamic "log_config" {
+    for_each = var.firewall_enable_logging == true ? [{
+      metadata = "INCLUDE_ALL_METADATA"
+    }] : []
+
+    content {
+      metadata = log_config.value.metadata
+    }
+  }
+
+  allow {
+    protocol = "all"
+  }
+
+  destination_ranges = var.allow_all_egress_ranges
+}
+
+resource "google_compute_firewall" "allow_all_ingress" {
+  count = var.allow_all_ingress_ranges != null ? 1 : 0
+
+  name      = "fw-${var.environment_code}-shared-base-1000-i-a-all"
+  network   = module.main.network_name
+  project   = var.project_id
+  direction = "INGRESS"
+  priority  = 1000
+
+  dynamic "log_config" {
+    for_each = var.firewall_enable_logging == true ? [{
+      metadata = "INCLUDE_ALL_METADATA"
+    }] : []
+
+    content {
+      metadata = log_config.value.metadata
+    }
+  }
+
+  allow {
+    protocol = "all"
+  }
+
+  source_ranges = var.allow_all_ingress_ranges
+}
+```
+
+##### Changes to restricted shared VPC (non-production)
+
+On `gcp-networks/modules/base_env/main.tf` edit the terraform module named **restricted_shared_vpc** and add the following fields to it:
+
+```terraform
+allow_all_ingress_ranges = concat(data.google_netblock_ip_ranges.health_checkers.cidr_blocks_ipv4, data.google_netblock_ip_ranges.legacy_health_checkers.cidr_blocks_ipv4, data.google_netblock_ip_ranges.iap_forwarders.cidr_blocks_ipv4)
+allow_all_egress_ranges  = ["0.0.0.0/0"]
+
+nat_enabled               = true
+nat_num_addresses_region1 = 1
+nat_num_addresses_region2 = 1
+
+perimeter_projects = [local.logging_env_project_number, local.kms_env_project_number]
+```
+
+Commit all changes and push to the current branch.
+
+```bash
+git add .
+git commit -m "Create custom fw rules, enable nat, configure dns and service perimeter"
+
+git push origin nonproduction
+```
+
+### `production` branch on `gcp-networks`
+
+- Go to `gcp-networks` repository, and check out on `production` branch.
+
+```bash
+cd ../gcp-networks
+
+git checkout production
+```
+
+#### Private DNS zone configuration (production)
+
+- Return to `terraform-google-enterprise-genai` repo.
+
+```bash
+cd ../terraform-google-enterprise-genai
+```
+
+- Copy DNS notebook network module from this repo to `gcp-networks` repository.
+
+```bash
+cp -r 3-networks-dual-svpc/modules/ml_dns_notebooks ../gcp-networks/modules
+```
+
+- Create a file named `ml_dns_notebooks.tf` on path `gcp-networks/modules/base_env`:
+
+```bash
+cp docs/assets/terraform/3-networks-dual-svpc/ml_dns_notebooks.tf ../gcp-networks/modules/base_env
+```
+
+Commit and push files to git repo.
+
+```bash
+cd ../gcp-networks
+
+git add .
+
+git commit -m "Create DNS notebook configuration"
+
+git push origin production
+```
+
+#### Enabling NAT, Attaching projects to Service Perimeter and Creating custom firewall rules (production)
+
+Create `gcp-networks/modules/base_env/data.tf` file with the following content:
+
+```terraform
+/**
+ * Copyright 2024 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+
+data "google_netblock_ip_ranges" "legacy_health_checkers" {
+  range_type = "legacy-health-checkers"
+}
+
+data "google_netblock_ip_ranges" "health_checkers" {
+  range_type = "health-checkers"
+}
+
+// Cloud IAP's TCP forwarding netblock
+data "google_netblock_ip_ranges" "iap_forwarders" {
+  range_type = "iap-forwarders"
+}
+```
+
+On `gcp-networks/modules/restricted_shared_vpc/variables.tf` add the following variables:
+
+```terraform
+variable "perimeter_projects" {
+  description = "A list of project numbers to be added to the service perimeter"
+  type        = list(number)
+  default     = []
+}
+
+variable "allow_all_egress_ranges" {
+  description = "List of network ranges to which all egress traffic will be allowed"
+  default     = null
+}
+
+variable "allow_all_ingress_ranges" {
+  description = "List of network ranges from which all ingress traffic will be allowed"
+  default     = null
+}
+```
+
+On `gcp-networks/modules/base_env/remote.tf`:
+
+1. Add the env remote state, by adding the following terraform code to the file:
+
+    ```terraform
+    data "terraform_remote_state" "env" {
+      backend = "gcs"
+
+      config = {
+        bucket = var.remote_state_bucket
+        prefix = "terraform/environments/${var.env}"
+      }
+    }
+    ```
+
+2. Edit `locals` and add the following fields:
+
+    ```terraform
+    logging_env_project_number   = data.terraform_remote_state.env.outputs.env_log_project_number
+    kms_env_project_number       = data.terraform_remote_state.env.outputs.env_kms_project_number
+    ```
+
+3. The final result will contain existing locals and the added ones, it should look similar to the code below:
+
+    ```terraform
+    locals {
+      restricted_project_id        = data.terraform_remote_state.org.outputs.shared_vpc_projects[var.env].restricted_shared_vpc_project_id
+      restricted_project_number    = data.terraform_remote_state.org.outputs.shared_vpc_projects[var.env].restricted_shared_vpc_project_number
+      base_project_id              = data.terraform_remote_state.org.outputs.shared_vpc_projects[var.env].base_shared_vpc_project_id
+      interconnect_project_number  = data.terraform_remote_state.org.outputs.interconnect_project_number
+      dns_hub_project_id           = data.terraform_remote_state.org.outputs.dns_hub_project_id
+      organization_service_account = data.terraform_remote_state.bootstrap.outputs.organization_step_terraform_service_account_email
+      networks_service_account     = data.terraform_remote_state.bootstrap.outputs.networks_step_terraform_service_account_email
+      projects_service_account     = data.terraform_remote_state.bootstrap.outputs.projects_step_terraform_service_account_email
+      logging_env_project_number   = data.terraform_remote_state.env.outputs.env_log_project_number
+      kms_env_project_number       = data.terraform_remote_state.env.outputs.env_kms_project_number
+    }
+    ```
+
+##### Adding projects to service perimeter (production)
+
+On `gcp-networks/modules/restricted_shared_vpc/service_control.tf`, modify the terraform module called **regular_service_perimeter** and add the following module field to `resources`:
+
+```terraform
+distinct(concat([var.project_number], var.perimeter_projects))
+```
+
+This shall result in a module similar to the code below:
+
+```terraform
+module "regular_service_perimeter" {
+  source  = "terraform-google-modules/vpc-service-controls/google//modules/regular_service_perimeter"
+  version = "~> 4.0"
+
+  policy         = var.access_context_manager_policy_id
+  perimeter_name = local.perimeter_name
+  description    = "Default VPC Service Controls perimeter"
+  resources      = distinct(concat([var.project_number], var.perimeter_projects))
+  access_levels  = [module.access_level_members.name]
+
+  restricted_services     = var.restricted_services
+  vpc_accessible_services = ["RESTRICTED-SERVICES"]
+
+  ingress_policies = var.ingress_policies
+  egress_policies  = var.egress_policies
+
+  depends_on = [
+    time_sleep.wait_vpc_sc_propagation
+  ]
+}
+```
+
+##### Creating "allow all ingress ranges" and "allow all egress ranges" firewall rules (production)
+
+On `gcp-networks/modules/restricted_shared_vpc/firewall.tf` add the following firewall rules by adding the terraform code below to the file:
+
+```terraform
+resource "google_compute_firewall" "allow_all_egress" {
+  count = var.allow_all_egress_ranges != null ? 1 : 0
+
+  name      = "fw-${var.environment_code}-shared-base-1000-e-a-all-all-all"
+  network   = module.main.network_name
+  project   = var.project_id
+  direction = "EGRESS"
+  priority  = 1000
+
+  dynamic "log_config" {
+    for_each = var.firewall_enable_logging == true ? [{
+      metadata = "INCLUDE_ALL_METADATA"
+    }] : []
+
+    content {
+      metadata = log_config.value.metadata
+    }
+  }
+
+  allow {
+    protocol = "all"
+  }
+
+  destination_ranges = var.allow_all_egress_ranges
+}
+
+resource "google_compute_firewall" "allow_all_ingress" {
+  count = var.allow_all_ingress_ranges != null ? 1 : 0
+
+  name      = "fw-${var.environment_code}-shared-base-1000-i-a-all"
+  network   = module.main.network_name
+  project   = var.project_id
+  direction = "INGRESS"
+  priority  = 1000
+
+  dynamic "log_config" {
+    for_each = var.firewall_enable_logging == true ? [{
+      metadata = "INCLUDE_ALL_METADATA"
+    }] : []
+
+    content {
+      metadata = log_config.value.metadata
+    }
+  }
+
+  allow {
+    protocol = "all"
+  }
+
+  source_ranges = var.allow_all_ingress_ranges
+}
+```
+
+##### Changes to restricted shared VPC (production)
+
+On `gcp-networks/modules/base_env/main.tf` edit the terraform module named **restricted_shared_vpc** and add the following fields to it:
+
+```terraform
+allow_all_ingress_ranges = concat(data.google_netblock_ip_ranges.health_checkers.cidr_blocks_ipv4, data.google_netblock_ip_ranges.legacy_health_checkers.cidr_blocks_ipv4, data.google_netblock_ip_ranges.iap_forwarders.cidr_blocks_ipv4)
+allow_all_egress_ranges  = ["0.0.0.0/0"]
+
+nat_enabled               = true
+nat_num_addresses_region1 = 1
+nat_num_addresses_region2 = 1
+
+perimeter_projects = [local.logging_env_project_number, local.kms_env_project_number]
+```
+
+Commit all changes and push to the current branch.
+
+```bash
+git add .
+git commit -m "Create custom fw rules, enable nat, configure dns and service perimeter"
+
+git push origin production
+```
+
+## 4-projects: Create Service Catalog and Artifacts Shared projects and Machine Learning Projects
+
+This step corresponds to modifications made to `4-projects` step on foundation.
+
+Please note that the steps below are assuming you are checked out on `terraform-google-enterprise-genai/`.
+
+```bash
+cd ../terraform-google-enterprise-genai
+```
+
+In this tutorial, we are using `ml_business_unit` as an example.
+
+You need to manually plan and apply only once the `ml_business_unit/shared`.
+
+### Manually applying `shared`
+
+- Go to `gcp-projects` repository and checkout to `plan` branch.
+
+```bash
+cd ../gcp-projects
+
+git checkout plan
+```
+
+- Return to GenAI repository.
+
+```bash
+cd ../terraform-google-enterprise-genai
+```
+
+- Copy `ml_business_unit` to the `gcp-projects` repository.
+
+```bash
+cp -r docs/assets/terraform/4-projects/ml_business_unit ../gcp-projects
+```
+
+- Add modules to the `gcp-projects` repository.
+
+```bash
+cp -r docs/assets/terraform/4-projects/modules/* ../gcp-projects/modules
+```
+
+- Add `tfvars` to the `gcp-projects` repository.
+
+```bash
+cp -r docs/assets/terraform/4-projects/*.example.tfvars ../gcp-projects
+```
+
+- Go to `gcp-projects` repository.
+
+```bash
+cd ../gcp-projects
+```
+
+- Update project backend by retrieving it's value from `0-bootstrap` and applying it to `backend.tf`.
+
+```bash
+export PROJECT_BACKEND=$(terraform -chdir="../gcp-bootstrap/envs/shared" output -raw projects_gcs_bucket_tfstate)
+
+for file in $(find . -name backend.tf); do sed -i "s/UPDATE_PROJECTS_BACKEND/$PROJECT_BACKEND/" $file; done
+```
+
+- Retrieve projects step service account e-mail.
+
+```bash
+export GOOGLE_IMPERSONATE_SERVICE_ACCOUNT=$(terraform -chdir="../gcp-bootstrap/envs/shared" output -raw projects_step_terraform_service_account_email)
+echo ${GOOGLE_IMPERSONATE_SERVICE_ACCOUNT}
+```
+
+- Retrieve cloud build project id.
+
+```bash
+export CLOUD_BUILD_PROJECT_ID=$(terraform -chdir="../gcp-bootstrap/envs/shared" output -raw cloudbuild_project_id)
+echo ${CLOUD_BUILD_PROJECT_ID}
+```
+
+- Rename `auto.example.tfvars` to `auto.tfvars`.
+
+```bash
+mv common.auto.example.tfvars common.auto.tfvars
+mv shared.auto.example.tfvars shared.auto.tfvars
+mv development.auto.example.tfvars development.auto.tfvars
+mv non-production.auto.example.tfvars non-production.auto.tfvars
+mv production.auto.example.tfvars production.auto.tfvars
+```
+
+- Update REMOTE_STATE_BUCKET value.
+
+```bash
+export remote_state_bucket=$(terraform -chdir="../gcp-bootstrap/envs/shared" output -raw gcs_bucket_tfstate)
+echo "remote_state_bucket = ${remote_state_bucket}"
+
+sed -i'' -e "s/REMOTE_STATE_BUCKET/${remote_state_bucket}/" ./common.auto.tfvars
+```
+
+- Commit the changes.
+
+```bash
+git add .
+
+git commit -m "Create ML Business Unit"
+```
+
+- Log into gcloud using service account impersonation and then set your configuration:
+
+```bash
+gcloud auth application-default login --impersonate-service-account=${GOOGLE_IMPERSONATE_SERVICE_ACCOUNT}
+```
+
+- Run `init` and `plan` and review output for environment shared.
+
+```bash
+./tf-wrapper.sh init shared
+./tf-wrapper.sh plan shared
+```
+
+- Run `validate` and check for violations.
+
+```bash
+./tf-wrapper.sh validate shared $(pwd)/../gcp-policies ${CLOUD_BUILD_PROJECT_ID}
+```
+
+- Run `apply` shared.
+
+```bash
+./tf-wrapper.sh apply shared
+```
+
+This will create the artifacts and service catalog projects under `common` folder and configure the Machine Learning business unit infra pipeline.
+
+Push plan branch to remote.
+
+```bash
+git push origin plan
+```
+
+### `development` branch on `gcp-projects`
+
+This will create the machine learning development environment. A Machine Learning project will be hosted under a folder.
+
+- Go to `gcp-projects` repository and checkout to `plan` branch.
+
+```bash
+cd ../gcp-projects
+
+git checkout development
+```
+
+- Return to GenAI repository.
+
+```bash
+cd ../terraform-google-enterprise-genai
+```
+
+- Copy `ml_business_unit` to the `gcp-projects` repository.
+
+```bash
+cp -r docs/assets/terraform/4-projects/ml_business_unit ../gcp-projects
+```
+
+- Add modules to the `gcp-projects` repository.
+
+```bash
+cp -r docs/assets/terraform/4-projects/modules/* ../gcp-projects/modules
+```
+
+- Add `tfvars` to the `gcp-projects` repository.
+
+```bash
+cp -r docs/assets/terraform/4-projects/*.example.tfvars ../gcp-projects
+```
+
+- Go to `gcp-projects` repository.
+
+```bash
+cd ../gcp-projects
+```
+
+- Rename `auto.example.tfvars` to `auto.tfvars`.
+
+```bash
+mv common.auto.example.tfvars common.auto.tfvars
+mv shared.auto.example.tfvars shared.auto.tfvars
+mv development.auto.example.tfvars development.auto.tfvars
+mv non-production.auto.example.tfvars non-production.auto.tfvars
+mv production.auto.example.tfvars production.auto.tfvars
+```
+
+- Update REMOTE_STATE_BUCKET value.
+
+```bash
+export remote_state_bucket=$(terraform -chdir="../gcp-bootstrap/envs/shared" output -raw gcs_bucket_tfstate)
+echo "remote_state_bucket = ${remote_state_bucket}"
+
+sed -i'' -e "s/REMOTE_STATE_BUCKET/${remote_state_bucket}/" ./common.auto.tfvars
+```
+
+- Update project backend by retrieving it's value from `0-bootstrap` and applying it to `backend.tf`.
+
+```bash
+export PROJECT_BACKEND=$(terraform -chdir="../gcp-bootstrap/envs/shared" output -raw projects_gcs_bucket_tfstate)
+
+for file in $(find . -name backend.tf); do sed -i "s/UPDATE_PROJECTS_BACKEND/$PROJECT_BACKEND/" $file; done
+```
+
+- Commit and push.
+
+```bash
+git add .
+git commit -m "Initialize ML environment"
+
+git push origin development
+```
+
+### `nonproduction` branch on `gcp-projects`
+
+This will create the machine learning nonproduction environment. A Machine Learning project will be hosted under a folder.
+
+- Go to `gcp-projects` repository and checkout to `plan` branch.
+
+```bash
+cd ../gcp-projects
+
+git checkout nonproduction
+```
+
+- Return to GenAI repository.
+
+```bash
+cd ../terraform-google-enterprise-genai
+```
+
+- Copy `ml_business_unit` to the `gcp-projects` repository.
+
+```bash
+cp -r docs/assets/terraform/4-projects/ml_business_unit ../gcp-projects
+```
+
+- Add modules to the `gcp-projects` repository.
+
+```bash
+cp -r docs/assets/terraform/4-projects/modules/* ../gcp-projects/modules
+```
+
+- Add `tfvars` to the `gcp-projects` repository.
+
+```bash
+cp -r docs/assets/terraform/4-projects/*.example.tfvars ../gcp-projects
+```
+
+- Go to `gcp-projects` repository.
+
+```bash
+cd ../gcp-projects
+```
+
+- Rename `auto.example.tfvars` to `auto.tfvars`.
+
+```bash
+mv common.auto.example.tfvars common.auto.tfvars
+mv shared.auto.example.tfvars shared.auto.tfvars
+mv development.auto.example.tfvars development.auto.tfvars
+mv non-production.auto.example.tfvars non-production.auto.tfvars
+mv production.auto.example.tfvars production.auto.tfvars
+```
+
+- Update REMOTE_STATE_BUCKET value.
+
+```bash
+export remote_state_bucket=$(terraform -chdir="../gcp-bootstrap/envs/shared" output -raw gcs_bucket_tfstate)
+echo "remote_state_bucket = ${remote_state_bucket}"
+
+sed -i'' -e "s/REMOTE_STATE_BUCKET/${remote_state_bucket}/" ./common.auto.tfvars
+```
+
+- Update project backend by retrieving it's value from `0-bootstrap` and applying it to `backend.tf`.
+
+```bash
+export PROJECT_BACKEND=$(terraform -chdir="../gcp-bootstrap/envs/shared" output -raw projects_gcs_bucket_tfstate)
+
+for file in $(find . -name backend.tf); do sed -i "s/UPDATE_PROJECTS_BACKEND/$PROJECT_BACKEND/" $file; done
+```
+
+- Commit and push.
+
+```bash
+git add .
+git commit -m "Initialize ML environment"
+
+git push origin nonproduction
+```
+
+### `production` branch on `gcp-projects`
+
+This will create the machine learning production environment. A Machine Learning project will be hosted under a folder.
+
+- Go to `gcp-projects` repository and checkout to `plan` branch.
+
+```bash
+cd ../gcp-projects
+
+git checkout production
+```
+
+- Return to GenAI repository.
+
+```bash
+cd ../terraform-google-enterprise-genai
+```
+
+- Copy `ml_business_unit` to the `gcp-projects` repository.
+
+```bash
+cp -r docs/assets/terraform/4-projects/ml_business_unit ../gcp-projects
+```
+
+- Remove shared directory on `ml_business_unit` on the `gcp-projects` repository.
+
+```bash
+rm -rf ../gcp-projects/ml_business_unit/shared
+```
+
+- Add modules to the `gcp-projects` repository.
+
+```bash
+cp -r docs/assets/terraform/4-projects/modules/* ../gcp-projects/modules
+```
+
+- Add `tfvars` to the `gcp-projects` repository.
+
+```bash
+cp -r docs/assets/terraform/4-projects/*.example.tfvars ../gcp-projects
+```
+
+- Go to `gcp-projects` repository.
+
+```bash
+cd ../gcp-projects
+```
+
+- Rename `auto.example.tfvars` to `auto.tfvars`.
+
+```bash
+mv common.auto.example.tfvars common.auto.tfvars
+mv shared.auto.example.tfvars shared.auto.tfvars
+mv development.auto.example.tfvars development.auto.tfvars
+mv non-production.auto.example.tfvars non-production.auto.tfvars
+mv production.auto.example.tfvars production.auto.tfvars
+```
+
+- Update REMOTE_STATE_BUCKET value.
+
+```bash
+export remote_state_bucket=$(terraform -chdir="../gcp-bootstrap/envs/shared" output -raw gcs_bucket_tfstate)
+echo "remote_state_bucket = ${remote_state_bucket}"
+
+sed -i'' -e "s/REMOTE_STATE_BUCKET/${remote_state_bucket}/" ./common.auto.tfvars
+```
+
+- Update project backend by retrieving it's value from `0-bootstrap` and applying it to `backend.tf`.
+
+```bash
+export PROJECT_BACKEND=$(terraform -chdir="../gcp-bootstrap/envs/shared" output -raw projects_gcs_bucket_tfstate)
+
+for file in $(find . -name backend.tf); do sed -i "s/UPDATE_PROJECTS_BACKEND/$PROJECT_BACKEND/" $file; done
+```
+
+- Commit and push.
+
+```bash
+git add .
+git commit -m "Initialize ML environment"
+
+git push origin production
+```
diff --git a/docs/upgrading_to_v2.0.md b/docs/upgrading_to_v2.0.md
index 6b92ea9e..c4db74b3 100644
--- a/docs/upgrading_to_v2.0.md
+++ b/docs/upgrading_to_v2.0.md
@@ -2,7 +2,7 @@
 
 Before moving forward with adopting components of V2, please review the list of
 breaking changes below. You can find a list of all changes in the
-[Changelog](https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/CHANGELOG.md).
+[Changelog](https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/CHANGELOG.md).
 
 **Note:** There is no in-place upgrade path from v1 to v2.
 
diff --git a/docs/upgrading_to_v3.0.md b/docs/upgrading_to_v3.0.md
index c40d4410..b5690425 100644
--- a/docs/upgrading_to_v3.0.md
+++ b/docs/upgrading_to_v3.0.md
@@ -1,5 +1,5 @@
 # Upgrade Guidance
-Before moving forward with adopting components of v3, review the list of breaking changes below. You can find a complete list of features, bug fixes and other updates in the [Changelog](https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/CHANGELOG.md).
+Before moving forward with adopting components of v3, review the list of breaking changes below. You can find a complete list of features, bug fixes and other updates in the [Changelog](https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/CHANGELOG.md).
 
 **Important:** There is no in-place upgrade path from v2 to v3.
 
@@ -17,7 +17,7 @@ There is no direct path for upgrading from v2 to v3 as this may result in resour
 
 In case you require to integrate some of the v3's features, we recommend to review the documentation regarding the feature you are interested in and use v3's code as a guidance for its implementation. We also recommend to review the output from `terraform plan` for any destructive operations before applying the updates.
 
-**Note:** You must verify that you are using the correct version for `terraform` and `gcloud`. You can check these and other additional requirements using this [validate script](https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/scripts/validate-requirements.sh).
+**Note:** You must verify that you are using the correct version for `terraform` and `gcloud`. You can check these and other additional requirements using this [validate script](https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/scripts/validate-requirements.sh).
 
 ### Move Blocks
 
diff --git a/helpers/foundation-deployer/README.md b/helpers/foundation-deployer/README.md
index e8c54146..22c06132 100644
--- a/helpers/foundation-deployer/README.md
+++ b/helpers/foundation-deployer/README.md
@@ -29,11 +29,11 @@ Helper tool to deploy the Terraform example foundation.
 ### Prepare the deploy environment
 
 - Create a directory in the file system to host the Cloud Source repositories the will be created and a copy of the terraform example foundation.
-- Clone the `terraform-example-foundation` repository on this directory.
+- Clone the `terraform-google-enterprise-genai` repository on this directory.
 
     ```text
     deploy-directory/
-    └── terraform-example-foundation
+    └── terraform-google-enterprise-genai
     ```
 
 - Copy the file [global.tfvars.example](./global.tfvars.example) as `global.tfvars` to the same directory.
@@ -41,21 +41,21 @@ Helper tool to deploy the Terraform example foundation.
     ```text
     deploy-directory/
     └── global.tfvars
-    └── terraform-example-foundation
+    └── terraform-google-enterprise-genai
     ```
 
 - Update `global.tfvars` with values from your environment.
-- The `0-bootstrap` README [prerequisites](https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/0-bootstrap/README.md#prerequisites)  section has additional prerequisites needed to run this helper.
+- The `0-bootstrap` README [prerequisites](https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/0-bootstrap/README.md#prerequisites)  section has additional prerequisites needed to run this helper.
 - Variable `code_checkout_path` is the full path to `deploy-directory` directory.
-- Variable `foundation_code_path` is the full path to `terraform-example-foundation` directory.
+- Variable `foundation_code_path` is the full path to `terraform-google-enterprise-genai` directory.
 - See the READMEs for the stages for additional information:
-  - [0-bootstrap](https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/0-bootstrap/README.md)
-  - [1-org](https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/1-org/README.md)
-  - [2-environments](https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/2-environments/README.md)
-  - [3-networks-dual-svpc](https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/3-networks-dual-svpc)
-  - [3-networks-hub-and-spoke](https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/3-networks-hub-and-spoke)
-  - [4-projects](https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/4-projects)
-  - [5-app-infra](https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/5-app-infra)
+  - [0-bootstrap](https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/0-bootstrap/README.md)
+  - [1-org](https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/1-org/README.md)
+  - [2-environments](https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/2-environments/README.md)
+  - [3-networks-dual-svpc](https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/3-networks-dual-svpc)
+  - [3-networks-hub-and-spoke](https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/3-networks-hub-and-spoke)
+  - [4-projects](https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/4-projects)
+  - [5-app-infra](https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/5-app-infra)
 
 ### Location
 
@@ -132,7 +132,7 @@ Im addition to the variables declared in the file `global.tfvars` for configurin
     └── gcp-policies-app-infra
     └── gcp-projects
     └── global.tfvars
-    └── terraform-example-foundation
+    └── terraform-google-enterprise-genai
     ```
 
 ### Supported flags
diff --git a/helpers/foundation-deployer/gcp/gcp.go b/helpers/foundation-deployer/gcp/gcp.go
index c1671683..019922c2 100644
--- a/helpers/foundation-deployer/gcp/gcp.go
+++ b/helpers/foundation-deployer/gcp/gcp.go
@@ -23,7 +23,7 @@ import (
 	"github.com/mitchellh/go-testing-interface"
 	"github.com/tidwall/gjson"
 
-	"github.com/terraform-google-modules/terraform-example-foundation/test/integration/testutils"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/test/integration/testutils"
 )
 
 const (
diff --git a/helpers/foundation-deployer/global.tfvars.example b/helpers/foundation-deployer/global.tfvars.example
index 16867765..5da7ab8b 100644
--- a/helpers/foundation-deployer/global.tfvars.example
+++ b/helpers/foundation-deployer/global.tfvars.example
@@ -29,7 +29,7 @@ validator_project_id = "EXISTING_PROJECT_ID"
 
 
 // 0-bootstrap inputs
-// https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/0-bootstrap/README.md#inputs
+// https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/0-bootstrap/README.md#inputs
 
 org_id          = "REPLACE_ME" # format "000000000000"
 billing_account = "REPLACE_ME" # format "000000-000000-000000"
@@ -55,7 +55,7 @@ folder_prefix  = "fldr"
 
 // Optional - for enabling the automatic groups creation, uncomment the groups
 // variable and update the values with the desired group names
-// https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/0-bootstrap/README.md#optional---automatic-creation-of-google-cloud-identity-groups
+// https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/0-bootstrap/README.md#optional---automatic-creation-of-google-cloud-identity-groups
 
 // After deploy, the Bootstrap service account will need to be granted "Group Admin" role in the
 // Google Workspace by a Super Admin before Cloud Build builds can be executed by the Bootstrap workspace.
@@ -85,7 +85,7 @@ folder_prefix  = "fldr"
 
 
 // 1-org inputs
-// https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/1-org/envs/shared/README.md#inputs
+// https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/1-org/envs/shared/README.md#inputs
 
 audit_data_users   = "REPLACE_ME" # "gcp-security-admins@example.com"
 billing_data_users = "REPLACE_ME" # "gcp-billing-data-users@example.com"
@@ -101,8 +101,8 @@ log_export_storage_location                 = "US"
 billing_export_dataset_location             = "US"
 
 // Choose witch network architecture to use:
-// Dual Shared VPC: https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/3-networks-dual-svpc/README.md
-// Hub And Spoke: https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/3-networks-hub-and-spoke/README.md
+// Dual Shared VPC: https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/3-networks-dual-svpc/README.md
+// Hub And Spoke: https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/3-networks-hub-and-spoke/README.md
 
 enable_hub_and_spoke = false
 
@@ -115,14 +115,14 @@ create_unique_tag_key = false
 
 
 // 2-environments inputs
-// https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/2-environments/envs/production/README.md#inputs
+// https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/2-environments/envs/production/README.md#inputs
 
 monitoring_workspace_users = "REPLACE_ME" # "gcp-monitoring-admins@example.com"
 
 
 // 3-networks inputs
-// https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/3-networks-hub-and-spoke/envs/production/README.md#inputs
-// https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/3-networks-hub-and-spoke/envs/shared/README.md#inputs
+// https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/3-networks-hub-and-spoke/envs/production/README.md#inputs
+// https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/3-networks-hub-and-spoke/envs/shared/README.md#inputs
 
 domain = "example.com." # The DNS name of peering managed zone. Must end with a period.
 
@@ -149,7 +149,7 @@ target_name_server_addresses = [
 
 
 // 4-projects inputs
-// https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/4-projects/business_unit_1/production/README.md#inputs
+// https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/4-projects/business_unit_1/production/README.md#inputs
 
 projects_gcs_location = "US"
 projects_kms_location = "us"
diff --git a/helpers/foundation-deployer/go.mod b/helpers/foundation-deployer/go.mod
index cd82def4..ff86ed66 100644
--- a/helpers/foundation-deployer/go.mod
+++ b/helpers/foundation-deployer/go.mod
@@ -1,4 +1,4 @@
-module github.com/terraform-google-modules/terraform-example-foundation/helpers/foundation-deployer
+module github.com/terraform-google-modules/terraform-google-enterprise-genai/helpers/foundation-deployer
 
 go 1.20
 
@@ -8,7 +8,7 @@ require (
 	github.com/hashicorp/hcl/v2 v2.16.1
 	github.com/mitchellh/go-testing-interface v1.14.2-0.20210821155943-2d9075ca8770
 	github.com/stretchr/testify v1.8.2
-	github.com/terraform-google-modules/terraform-example-foundation/test/integration v0.0.0-20230503230051-e9e2618ef515
+	github.com/terraform-google-modules/terraform-google-enterprise-genai/test/integration v0.0.0-20230503230051-e9e2618ef515
 	github.com/tidwall/gjson v1.14.4
 )
 
diff --git a/helpers/foundation-deployer/go.sum b/helpers/foundation-deployer/go.sum
index b8f47f5f..e454ea3b 100644
--- a/helpers/foundation-deployer/go.sum
+++ b/helpers/foundation-deployer/go.sum
@@ -447,8 +447,8 @@ github.com/stretchr/testify v1.8.2 h1:+h33VjcLVPDHtOdpUCuF+7gSuG3yGIftsP1YvFihtJ
 github.com/stretchr/testify v1.8.2 h1:+h33VjcLVPDHtOdpUCuF+7gSuG3yGIftsP1YvFihtJ8=
 github.com/stretchr/testify v1.8.2/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
 github.com/stretchr/testify v1.8.2/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
-github.com/terraform-google-modules/terraform-example-foundation/test/integration v0.0.0-20230503230051-e9e2618ef515 h1:9WpwfiGRUEX5e3qeC93M/TWxmVeSD8vz1B8c5FumdAE=
-github.com/terraform-google-modules/terraform-example-foundation/test/integration v0.0.0-20230503230051-e9e2618ef515/go.mod h1:4EkFeYb9/Cjbqc4uynVvcmV8MCK7VK5dGuR2yD4r8EU=
+github.com/terraform-google-modules/terraform-google-enterprise-genai/test/integration v0.0.0-20230503230051-e9e2618ef515 h1:9WpwfiGRUEX5e3qeC93M/TWxmVeSD8vz1B8c5FumdAE=
+github.com/terraform-google-modules/terraform-google-enterprise-genai/test/integration v0.0.0-20230503230051-e9e2618ef515/go.mod h1:4EkFeYb9/Cjbqc4uynVvcmV8MCK7VK5dGuR2yD4r8EU=
 github.com/tidwall/gjson v1.14.2/go.mod h1:/wbyibRr2FHMks5tjHJ5F8dMZh3AcwJEMf5vlfC0lxk=
 github.com/tidwall/gjson v1.14.4 h1:uo0p8EbA09J7RQaflQ1aBRffTR7xedD2bcIVSYxLnkM=
 github.com/tidwall/gjson v1.14.4/go.mod h1:/wbyibRr2FHMks5tjHJ5F8dMZh3AcwJEMf5vlfC0lxk=
diff --git a/helpers/foundation-deployer/main.go b/helpers/foundation-deployer/main.go
index ed682cfa..1475a645 100644
--- a/helpers/foundation-deployer/main.go
+++ b/helpers/foundation-deployer/main.go
@@ -25,11 +25,11 @@ import (
 
 	"github.com/mitchellh/go-testing-interface"
 
-	"github.com/terraform-google-modules/terraform-example-foundation/helpers/foundation-deployer/gcp"
-	"github.com/terraform-google-modules/terraform-example-foundation/helpers/foundation-deployer/msg"
-	"github.com/terraform-google-modules/terraform-example-foundation/helpers/foundation-deployer/stages"
-	"github.com/terraform-google-modules/terraform-example-foundation/helpers/foundation-deployer/steps"
-	"github.com/terraform-google-modules/terraform-example-foundation/helpers/foundation-deployer/utils"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/helpers/foundation-deployer/gcp"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/helpers/foundation-deployer/msg"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/helpers/foundation-deployer/stages"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/helpers/foundation-deployer/steps"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/helpers/foundation-deployer/utils"
 )
 
 var (
diff --git a/helpers/foundation-deployer/msg/msg.go b/helpers/foundation-deployer/msg/msg.go
index c2972be2..5667e140 100644
--- a/helpers/foundation-deployer/msg/msg.go
+++ b/helpers/foundation-deployer/msg/msg.go
@@ -23,11 +23,11 @@ import (
 
 const (
 	size            = 70
-	readmeURL       = "https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/%s/README.md"
+	readmeURL       = "https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/%s/README.md"
 	cloudBuildURL   = "https://console.cloud.google.com/cloud-build/builds;region=%s?project=%s"
 	buildErrorURL   = "https://console.cloud.google.com/cloud-build/builds;region=%s/%s?project=%s"
 	quotaURL        = "https://support.google.com/code/contact/billing_quota_increase"
-	troubleQuotaURL = "https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/docs/TROUBLESHOOTING.md#billing-quota-exceeded"
+	troubleQuotaURL = "https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/docs/TROUBLESHOOTING.md#billing-quota-exceeded"
 	groupAdminURL   = "https://cloud.google.com/identity/docs/how-to/setup#assigning_an_admin_role_to_the_service_account"
 )
 
diff --git a/helpers/foundation-deployer/stages/apply.go b/helpers/foundation-deployer/stages/apply.go
index 1afaf7cd..f78486e7 100644
--- a/helpers/foundation-deployer/stages/apply.go
+++ b/helpers/foundation-deployer/stages/apply.go
@@ -22,12 +22,12 @@ import (
 	"github.com/gruntwork-io/terratest/modules/terraform"
 	"github.com/mitchellh/go-testing-interface"
 
-	"github.com/terraform-google-modules/terraform-example-foundation/helpers/foundation-deployer/gcp"
-	"github.com/terraform-google-modules/terraform-example-foundation/helpers/foundation-deployer/msg"
-	"github.com/terraform-google-modules/terraform-example-foundation/helpers/foundation-deployer/steps"
-	"github.com/terraform-google-modules/terraform-example-foundation/helpers/foundation-deployer/utils"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/helpers/foundation-deployer/gcp"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/helpers/foundation-deployer/msg"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/helpers/foundation-deployer/steps"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/helpers/foundation-deployer/utils"
 
-	"github.com/terraform-google-modules/terraform-example-foundation/test/integration/testutils"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/test/integration/testutils"
 )
 
 func DeployBootstrapStage(t testing.TB, s steps.Steps, tfvars GlobalTFVars, c CommonConf) error {
diff --git a/helpers/foundation-deployer/stages/data.go b/helpers/foundation-deployer/stages/data.go
index 67d4e7be..59f90df2 100644
--- a/helpers/foundation-deployer/stages/data.go
+++ b/helpers/foundation-deployer/stages/data.go
@@ -24,7 +24,7 @@ import (
 	"github.com/gruntwork-io/terratest/modules/terraform"
 	"github.com/mitchellh/go-testing-interface"
 
-	"github.com/terraform-google-modules/terraform-example-foundation/helpers/foundation-deployer/utils"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/helpers/foundation-deployer/utils"
 )
 
 const (
diff --git a/helpers/foundation-deployer/stages/destroy.go b/helpers/foundation-deployer/stages/destroy.go
index f9de4880..250dc512 100644
--- a/helpers/foundation-deployer/stages/destroy.go
+++ b/helpers/foundation-deployer/stages/destroy.go
@@ -23,9 +23,9 @@ import (
 	"github.com/gruntwork-io/terratest/modules/terraform"
 	"github.com/mitchellh/go-testing-interface"
 
-	"github.com/terraform-google-modules/terraform-example-foundation/helpers/foundation-deployer/steps"
-	"github.com/terraform-google-modules/terraform-example-foundation/helpers/foundation-deployer/utils"
-	"github.com/terraform-google-modules/terraform-example-foundation/test/integration/testutils"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/helpers/foundation-deployer/steps"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/helpers/foundation-deployer/utils"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/test/integration/testutils"
 )
 
 const (
@@ -194,9 +194,9 @@ func destroyStage(t testing.TB, sc StageConf, s steps.Steps, c CommonConf) error
 	for _, g := range groupingUnits {
 		err := s.RunDestroyStep(fmt.Sprintf("%s.%s.apply-shared", sc.Repo, g), func() error {
 			options := &terraform.Options{
-				TerraformDir: filepath.Join(gcpPath, g, "shared"),
-				Logger:       c.Logger,
-				NoColor:      true,
+				TerraformDir:             filepath.Join(gcpPath, g, "shared"),
+				Logger:                   c.Logger,
+				NoColor:                  true,
 				RetryableTerraformErrors: testutils.RetryableTransientErrors,
 				MaxRetries:               2,
 				TimeBetweenRetries:       2 * time.Minute,
diff --git a/helpers/foundation-deployer/stages/validate.go b/helpers/foundation-deployer/stages/validate.go
index 89851b40..af292e75 100644
--- a/helpers/foundation-deployer/stages/validate.go
+++ b/helpers/foundation-deployer/stages/validate.go
@@ -21,7 +21,7 @@ import (
 
 	"github.com/mitchellh/go-testing-interface"
 
-	"github.com/terraform-google-modules/terraform-example-foundation/helpers/foundation-deployer/gcp"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/helpers/foundation-deployer/gcp"
 )
 
 const (
diff --git a/scripts/set-tfc-backend-and-remote.sh b/scripts/set-tfc-backend-and-remote.sh
index 5da9ca56..087e8344 100755
--- a/scripts/set-tfc-backend-and-remote.sh
+++ b/scripts/set-tfc-backend-and-remote.sh
@@ -15,7 +15,7 @@
 # limitations under the License.
 
 # Define the root folder where you want to start the search and renaming
-root_folder="./terraform-example-foundation"
+root_folder="./terraform-google-enterprise-genai"
 
 # Use 'find' to locate all files named 'backend.tf'
 # in the specified folder and its subfolders, excluding directories that start with ".terraform"
diff --git a/scripts/validate-requirements.sh b/scripts/validate-requirements.sh
index 1acca7de..b3d11889 100755
--- a/scripts/validate-requirements.sh
+++ b/scripts/validate-requirements.sh
@@ -21,7 +21,7 @@
 # Expected versions of the installers
 TF_VERSION="1.3.0"
 # Version 393.0.0 due to terraform-tools 0.5.0 version that fixes the issue
-# mentioned in this PR https://github.com/terraform-google-modules/terraform-example-foundation/pull/729#discussion_r919427668
+# mentioned in this PR https://github.com/terraform-google-modules/terraform-google-enterprise-genai/pull/729#discussion_r919427668
 GCLOUD_SDK_VERSION="393.0.0"
 GIT_VERSION="2.28.0"
 
@@ -126,7 +126,7 @@ function validate_git(){
 
     if ! git config init.defaultBranch | grep "main" >/dev/null ; then
         echo "  git default branch must be configured as main."
-        echo "  See the instructions at https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/docs/TROUBLESHOOTING.md#default-branch-setting ."
+        echo "  See the instructions at https://github.com/terraform-google-modules/terraform-google-enterprise-genai/blob/master/docs/TROUBLESHOOTING.md#default-branch-setting ."
         ERRORS+=$'  git default branch must be configured as main.\n'
     fi
 }
diff --git a/test/integration/bootstrap/bootstrap_test.go b/test/integration/bootstrap/bootstrap_test.go
index 3ae75956..b4e9dc3f 100644
--- a/test/integration/bootstrap/bootstrap_test.go
+++ b/test/integration/bootstrap/bootstrap_test.go
@@ -29,7 +29,7 @@ import (
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 
-	"github.com/terraform-google-modules/terraform-example-foundation/test/integration/testutils"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/test/integration/testutils"
 )
 
 // fileExists check if a give file exists
@@ -47,7 +47,7 @@ func fileExists(filePath string) (bool, error) {
 func TestBootstrap(t *testing.T) {
 
 	vars := map[string]interface{}{
-		"bucket_force_destroy": true,
+		"bucket_force_destroy":             true,
 		"bucket_tfstate_kms_force_destroy": true,
 	}
 
diff --git a/test/integration/envs/envs_test.go b/test/integration/envs/envs_test.go
index 8330cb10..251adf8f 100644
--- a/test/integration/envs/envs_test.go
+++ b/test/integration/envs/envs_test.go
@@ -24,7 +24,7 @@ import (
 	"github.com/GoogleCloudPlatform/cloud-foundation-toolkit/infra/blueprint-test/pkg/utils"
 	"github.com/stretchr/testify/assert"
 
-	"github.com/terraform-google-modules/terraform-example-foundation/test/integration/testutils"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/test/integration/testutils"
 )
 
 func TestEnvs(t *testing.T) {
diff --git a/test/integration/go.mod b/test/integration/go.mod
index 999f0aba..1c5a4552 100644
--- a/test/integration/go.mod
+++ b/test/integration/go.mod
@@ -1,4 +1,4 @@
-module github.com/terraform-google-modules/terraform-example-foundation/test/integration
+module github.com/terraform-google-modules/terraform-google-enterprise-genai/test/integration
 
 go 1.20
 
diff --git a/test/integration/networks/networks_test.go b/test/integration/networks/networks_test.go
index e4c1d5d3..784c8888 100644
--- a/test/integration/networks/networks_test.go
+++ b/test/integration/networks/networks_test.go
@@ -26,7 +26,7 @@ import (
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 
-	"github.com/terraform-google-modules/terraform-example-foundation/test/integration/testutils"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/test/integration/testutils"
 )
 
 func getNetworkMode(t *testing.T) string {
diff --git a/test/integration/org/org_test.go b/test/integration/org/org_test.go
index b0ba5665..e3717412 100644
--- a/test/integration/org/org_test.go
+++ b/test/integration/org/org_test.go
@@ -27,7 +27,7 @@ import (
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 
-	"github.com/terraform-google-modules/terraform-example-foundation/test/integration/testutils"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/test/integration/testutils"
 )
 
 func TestOrg(t *testing.T) {
diff --git a/test/integration/projects-shared/projects_shared_test.go b/test/integration/projects-shared/projects_shared_test.go
index 67454134..f25f47c1 100644
--- a/test/integration/projects-shared/projects_shared_test.go
+++ b/test/integration/projects-shared/projects_shared_test.go
@@ -25,7 +25,7 @@ import (
 	"github.com/gruntwork-io/terratest/modules/terraform"
 	"github.com/stretchr/testify/assert"
 
-	"github.com/terraform-google-modules/terraform-example-foundation/test/integration/testutils"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/test/integration/testutils"
 )
 
 func TestProjectsShared(t *testing.T) {
diff --git a/test/integration/projects/projects_test.go b/test/integration/projects/projects_test.go
index d8bc2f75..e7ecd2db 100644
--- a/test/integration/projects/projects_test.go
+++ b/test/integration/projects/projects_test.go
@@ -27,7 +27,7 @@ import (
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 
-	"github.com/terraform-google-modules/terraform-example-foundation/test/integration/testutils"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/test/integration/testutils"
 )
 
 func getNetworkMode(t *testing.T) string {
diff --git a/test/integration/shared/shared_test.go b/test/integration/shared/shared_test.go
index f865c722..e21b4e0a 100644
--- a/test/integration/shared/shared_test.go
+++ b/test/integration/shared/shared_test.go
@@ -26,7 +26,7 @@ import (
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 
-	"github.com/terraform-google-modules/terraform-example-foundation/test/integration/testutils"
+	"github.com/terraform-google-modules/terraform-google-enterprise-genai/test/integration/testutils"
 )
 
 func isHubAndSpokeMode(t *testing.T) bool {