diff --git a/google-cloud-bigqueryconnection/src/main/java/com/google/cloud/bigquery/connection/v1beta1/ConnectionServiceClient.java b/google-cloud-bigqueryconnection/src/main/java/com/google/cloud/bigquery/connection/v1beta1/ConnectionServiceClient.java
index a10a03f7..1313c9a5 100644
--- a/google-cloud-bigqueryconnection/src/main/java/com/google/cloud/bigquery/connection/v1beta1/ConnectionServiceClient.java
+++ b/google-cloud-bigqueryconnection/src/main/java/com/google/cloud/bigquery/connection/v1beta1/ConnectionServiceClient.java
@@ -961,7 +961,7 @@ public final UnaryCallable<GetIamPolicyRequest, Policy> getIamPolicyCallable() {
   /**
    * Sets the access control policy on the specified resource. Replaces any existing policy.
    *
-   * <p>Can return Public Errors: NOT_FOUND, INVALID_ARGUMENT and PERMISSION_DENIED
+   * <p>Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.
    *
    * <p>Sample code:
    *
@@ -995,7 +995,7 @@ public final Policy setIamPolicy(ResourceName resource, Policy policy) {
   /**
    * Sets the access control policy on the specified resource. Replaces any existing policy.
    *
-   * <p>Can return Public Errors: NOT_FOUND, INVALID_ARGUMENT and PERMISSION_DENIED
+   * <p>Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.
    *
    * <p>Sample code:
    *
@@ -1026,7 +1026,7 @@ public final Policy setIamPolicy(String resource, Policy policy) {
   /**
    * Sets the access control policy on the specified resource. Replaces any existing policy.
    *
-   * <p>Can return Public Errors: NOT_FOUND, INVALID_ARGUMENT and PERMISSION_DENIED
+   * <p>Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.
    *
    * <p>Sample code:
    *
@@ -1055,7 +1055,7 @@ public final Policy setIamPolicy(SetIamPolicyRequest request) {
   /**
    * Sets the access control policy on the specified resource. Replaces any existing policy.
    *
-   * <p>Can return Public Errors: NOT_FOUND, INVALID_ARGUMENT and PERMISSION_DENIED
+   * <p>Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.
    *
    * <p>Sample code:
    *
@@ -1082,7 +1082,7 @@ public final UnaryCallable<SetIamPolicyRequest, Policy> setIamPolicyCallable() {
   // AUTO-GENERATED DOCUMENTATION AND METHOD.
   /**
    * Returns permissions that a caller has on the specified resource. If the resource does not
-   * exist, this will return an empty set of permissions, not a NOT_FOUND error.
+   * exist, this will return an empty set of permissions, not a `NOT_FOUND` error.
    *
    * <p>Note: This operation is designed to be used for building permission-aware UIs and
    * command-line tools, not for authorization checking. This operation may "fail open" without
@@ -1121,7 +1121,7 @@ public final TestIamPermissionsResponse testIamPermissions(
   // AUTO-GENERATED DOCUMENTATION AND METHOD.
   /**
    * Returns permissions that a caller has on the specified resource. If the resource does not
-   * exist, this will return an empty set of permissions, not a NOT_FOUND error.
+   * exist, this will return an empty set of permissions, not a `NOT_FOUND` error.
    *
    * <p>Note: This operation is designed to be used for building permission-aware UIs and
    * command-line tools, not for authorization checking. This operation may "fail open" without
@@ -1160,7 +1160,7 @@ public final TestIamPermissionsResponse testIamPermissions(
   // AUTO-GENERATED DOCUMENTATION AND METHOD.
   /**
    * Returns permissions that a caller has on the specified resource. If the resource does not
-   * exist, this will return an empty set of permissions, not a NOT_FOUND error.
+   * exist, this will return an empty set of permissions, not a `NOT_FOUND` error.
    *
    * <p>Note: This operation is designed to be used for building permission-aware UIs and
    * command-line tools, not for authorization checking. This operation may "fail open" without
@@ -1191,7 +1191,7 @@ public final TestIamPermissionsResponse testIamPermissions(TestIamPermissionsReq
   // AUTO-GENERATED DOCUMENTATION AND METHOD.
   /**
    * Returns permissions that a caller has on the specified resource. If the resource does not
-   * exist, this will return an empty set of permissions, not a NOT_FOUND error.
+   * exist, this will return an empty set of permissions, not a `NOT_FOUND` error.
    *
    * <p>Note: This operation is designed to be used for building permission-aware UIs and
    * command-line tools, not for authorization checking. This operation may "fail open" without
diff --git a/grpc-google-cloud-bigqueryconnection-v1beta1/src/main/java/com/google/cloud/bigquery/connection/v1beta1/ConnectionServiceGrpc.java b/grpc-google-cloud-bigqueryconnection-v1beta1/src/main/java/com/google/cloud/bigquery/connection/v1beta1/ConnectionServiceGrpc.java
index fed7c438..29002cfd 100644
--- a/grpc-google-cloud-bigqueryconnection-v1beta1/src/main/java/com/google/cloud/bigquery/connection/v1beta1/ConnectionServiceGrpc.java
+++ b/grpc-google-cloud-bigqueryconnection-v1beta1/src/main/java/com/google/cloud/bigquery/connection/v1beta1/ConnectionServiceGrpc.java
@@ -637,7 +637,7 @@ public void getIamPolicy(
      * <pre>
      * Sets the access control policy on the specified resource. Replaces any
      * existing policy.
-     * Can return Public Errors: NOT_FOUND, INVALID_ARGUMENT and PERMISSION_DENIED
+     * Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.
      * </pre>
      */
     public void setIamPolicy(
@@ -653,7 +653,7 @@ public void setIamPolicy(
      * <pre>
      * Returns permissions that a caller has on the specified resource.
      * If the resource does not exist, this will return an empty set of
-     * permissions, not a NOT_FOUND error.
+     * permissions, not a `NOT_FOUND` error.
      * Note: This operation is designed to be used for building permission-aware
      * UIs and command-line tools, not for authorization checking. This operation
      * may "fail open" without warning.
@@ -893,7 +893,7 @@ public void getIamPolicy(
      * <pre>
      * Sets the access control policy on the specified resource. Replaces any
      * existing policy.
-     * Can return Public Errors: NOT_FOUND, INVALID_ARGUMENT and PERMISSION_DENIED
+     * Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.
      * </pre>
      */
     public void setIamPolicy(
@@ -911,7 +911,7 @@ public void setIamPolicy(
      * <pre>
      * Returns permissions that a caller has on the specified resource.
      * If the resource does not exist, this will return an empty set of
-     * permissions, not a NOT_FOUND error.
+     * permissions, not a `NOT_FOUND` error.
      * Note: This operation is designed to be used for building permission-aware
      * UIs and command-line tools, not for authorization checking. This operation
      * may "fail open" without warning.
@@ -1054,7 +1054,7 @@ public com.google.iam.v1.Policy getIamPolicy(com.google.iam.v1.GetIamPolicyReque
      * <pre>
      * Sets the access control policy on the specified resource. Replaces any
      * existing policy.
-     * Can return Public Errors: NOT_FOUND, INVALID_ARGUMENT and PERMISSION_DENIED
+     * Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.
      * </pre>
      */
     public com.google.iam.v1.Policy setIamPolicy(com.google.iam.v1.SetIamPolicyRequest request) {
@@ -1068,7 +1068,7 @@ public com.google.iam.v1.Policy setIamPolicy(com.google.iam.v1.SetIamPolicyReque
      * <pre>
      * Returns permissions that a caller has on the specified resource.
      * If the resource does not exist, this will return an empty set of
-     * permissions, not a NOT_FOUND error.
+     * permissions, not a `NOT_FOUND` error.
      * Note: This operation is designed to be used for building permission-aware
      * UIs and command-line tools, not for authorization checking. This operation
      * may "fail open" without warning.
@@ -1217,7 +1217,7 @@ protected ConnectionServiceFutureStub build(
      * <pre>
      * Sets the access control policy on the specified resource. Replaces any
      * existing policy.
-     * Can return Public Errors: NOT_FOUND, INVALID_ARGUMENT and PERMISSION_DENIED
+     * Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.
      * </pre>
      */
     public com.google.common.util.concurrent.ListenableFuture<com.google.iam.v1.Policy>
@@ -1232,7 +1232,7 @@ protected ConnectionServiceFutureStub build(
      * <pre>
      * Returns permissions that a caller has on the specified resource.
      * If the resource does not exist, this will return an empty set of
-     * permissions, not a NOT_FOUND error.
+     * permissions, not a `NOT_FOUND` error.
      * Note: This operation is designed to be used for building permission-aware
      * UIs and command-line tools, not for authorization checking. This operation
      * may "fail open" without warning.
diff --git a/proto-google-cloud-bigqueryconnection-v1/src/main/java/com/google/cloud/bigquery/connection/v1/CloudSqlProperties.java b/proto-google-cloud-bigqueryconnection-v1/src/main/java/com/google/cloud/bigquery/connection/v1/CloudSqlProperties.java
index bf090cba..8ce85a42 100644
--- a/proto-google-cloud-bigqueryconnection-v1/src/main/java/com/google/cloud/bigquery/connection/v1/CloudSqlProperties.java
+++ b/proto-google-cloud-bigqueryconnection-v1/src/main/java/com/google/cloud/bigquery/connection/v1/CloudSqlProperties.java
@@ -41,6 +41,7 @@ private CloudSqlProperties() {
     instanceId_ = "";
     database_ = "";
     type_ = 0;
+    serviceAccountId_ = "";
   }
 
   @java.lang.Override
@@ -108,6 +109,13 @@ private CloudSqlProperties(
                 credential_ = subBuilder.buildPartial();
               }
 
+              break;
+            }
+          case 42:
+            {
+              java.lang.String s = input.readStringRequireUtf8();
+
+              serviceAccountId_ = s;
               break;
             }
           default:
@@ -496,6 +504,61 @@ public com.google.cloud.bigquery.connection.v1.CloudSqlCredential getCredential(
     return getCredential();
   }
 
+  public static final int SERVICE_ACCOUNT_ID_FIELD_NUMBER = 5;
+  private volatile java.lang.Object serviceAccountId_;
+  /**
+   *
+   *
+   * <pre>
+   * Output only. The account ID of the service used for the purpose of this connection.
+   * When the connection is used in the context of an operation in
+   * BigQuery, this service account will serve as identity being used for
+   * connecting to the CloudSQL instance specified in this connection.
+   * </pre>
+   *
+   * <code>string service_account_id = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
+   *
+   * @return The serviceAccountId.
+   */
+  @java.lang.Override
+  public java.lang.String getServiceAccountId() {
+    java.lang.Object ref = serviceAccountId_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      serviceAccountId_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Output only. The account ID of the service used for the purpose of this connection.
+   * When the connection is used in the context of an operation in
+   * BigQuery, this service account will serve as identity being used for
+   * connecting to the CloudSQL instance specified in this connection.
+   * </pre>
+   *
+   * <code>string service_account_id = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
+   *
+   * @return The bytes for serviceAccountId.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getServiceAccountIdBytes() {
+    java.lang.Object ref = serviceAccountId_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      serviceAccountId_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
   private byte memoizedIsInitialized = -1;
 
   @java.lang.Override
@@ -525,6 +588,9 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
     if (credential_ != null) {
       output.writeMessage(4, getCredential());
     }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(serviceAccountId_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 5, serviceAccountId_);
+    }
     unknownFields.writeTo(output);
   }
 
@@ -549,6 +615,9 @@ public int getSerializedSize() {
     if (credential_ != null) {
       size += com.google.protobuf.CodedOutputStream.computeMessageSize(4, getCredential());
     }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(serviceAccountId_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(5, serviceAccountId_);
+    }
     size += unknownFields.getSerializedSize();
     memoizedSize = size;
     return size;
@@ -572,6 +641,7 @@ public boolean equals(final java.lang.Object obj) {
     if (hasCredential()) {
       if (!getCredential().equals(other.getCredential())) return false;
     }
+    if (!getServiceAccountId().equals(other.getServiceAccountId())) return false;
     if (!unknownFields.equals(other.unknownFields)) return false;
     return true;
   }
@@ -593,6 +663,8 @@ public int hashCode() {
       hash = (37 * hash) + CREDENTIAL_FIELD_NUMBER;
       hash = (53 * hash) + getCredential().hashCode();
     }
+    hash = (37 * hash) + SERVICE_ACCOUNT_ID_FIELD_NUMBER;
+    hash = (53 * hash) + getServiceAccountId().hashCode();
     hash = (29 * hash) + unknownFields.hashCode();
     memoizedHashCode = hash;
     return hash;
@@ -751,6 +823,8 @@ public Builder clear() {
         credential_ = null;
         credentialBuilder_ = null;
       }
+      serviceAccountId_ = "";
+
       return this;
     }
 
@@ -786,6 +860,7 @@ public com.google.cloud.bigquery.connection.v1.CloudSqlProperties buildPartial()
       } else {
         result.credential_ = credentialBuilder_.build();
       }
+      result.serviceAccountId_ = serviceAccountId_;
       onBuilt();
       return result;
     }
@@ -850,6 +925,10 @@ public Builder mergeFrom(com.google.cloud.bigquery.connection.v1.CloudSqlPropert
       if (other.hasCredential()) {
         mergeCredential(other.getCredential());
       }
+      if (!other.getServiceAccountId().isEmpty()) {
+        serviceAccountId_ = other.serviceAccountId_;
+        onChanged();
+      }
       this.mergeUnknownFields(other.unknownFields);
       onChanged();
       return this;
@@ -1393,6 +1472,127 @@ public Builder clearCredential() {
       return credentialBuilder_;
     }
 
+    private java.lang.Object serviceAccountId_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * Output only. The account ID of the service used for the purpose of this connection.
+     * When the connection is used in the context of an operation in
+     * BigQuery, this service account will serve as identity being used for
+     * connecting to the CloudSQL instance specified in this connection.
+     * </pre>
+     *
+     * <code>string service_account_id = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
+     *
+     * @return The serviceAccountId.
+     */
+    public java.lang.String getServiceAccountId() {
+      java.lang.Object ref = serviceAccountId_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        serviceAccountId_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Output only. The account ID of the service used for the purpose of this connection.
+     * When the connection is used in the context of an operation in
+     * BigQuery, this service account will serve as identity being used for
+     * connecting to the CloudSQL instance specified in this connection.
+     * </pre>
+     *
+     * <code>string service_account_id = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
+     *
+     * @return The bytes for serviceAccountId.
+     */
+    public com.google.protobuf.ByteString getServiceAccountIdBytes() {
+      java.lang.Object ref = serviceAccountId_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        serviceAccountId_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Output only. The account ID of the service used for the purpose of this connection.
+     * When the connection is used in the context of an operation in
+     * BigQuery, this service account will serve as identity being used for
+     * connecting to the CloudSQL instance specified in this connection.
+     * </pre>
+     *
+     * <code>string service_account_id = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
+     *
+     * @param value The serviceAccountId to set.
+     * @return This builder for chaining.
+     */
+    public Builder setServiceAccountId(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+
+      serviceAccountId_ = value;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Output only. The account ID of the service used for the purpose of this connection.
+     * When the connection is used in the context of an operation in
+     * BigQuery, this service account will serve as identity being used for
+     * connecting to the CloudSQL instance specified in this connection.
+     * </pre>
+     *
+     * <code>string service_account_id = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearServiceAccountId() {
+
+      serviceAccountId_ = getDefaultInstance().getServiceAccountId();
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Output only. The account ID of the service used for the purpose of this connection.
+     * When the connection is used in the context of an operation in
+     * BigQuery, this service account will serve as identity being used for
+     * connecting to the CloudSQL instance specified in this connection.
+     * </pre>
+     *
+     * <code>string service_account_id = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
+     *
+     * @param value The bytes for serviceAccountId to set.
+     * @return This builder for chaining.
+     */
+    public Builder setServiceAccountIdBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+
+      serviceAccountId_ = value;
+      onChanged();
+      return this;
+    }
+
     @java.lang.Override
     public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
       return super.setUnknownFields(unknownFields);
diff --git a/proto-google-cloud-bigqueryconnection-v1/src/main/java/com/google/cloud/bigquery/connection/v1/CloudSqlPropertiesOrBuilder.java b/proto-google-cloud-bigqueryconnection-v1/src/main/java/com/google/cloud/bigquery/connection/v1/CloudSqlPropertiesOrBuilder.java
index 8c82ed6a..dabd73ee 100644
--- a/proto-google-cloud-bigqueryconnection-v1/src/main/java/com/google/cloud/bigquery/connection/v1/CloudSqlPropertiesOrBuilder.java
+++ b/proto-google-cloud-bigqueryconnection-v1/src/main/java/com/google/cloud/bigquery/connection/v1/CloudSqlPropertiesOrBuilder.java
@@ -138,4 +138,35 @@ public interface CloudSqlPropertiesOrBuilder
    * </code>
    */
   com.google.cloud.bigquery.connection.v1.CloudSqlCredentialOrBuilder getCredentialOrBuilder();
+
+  /**
+   *
+   *
+   * <pre>
+   * Output only. The account ID of the service used for the purpose of this connection.
+   * When the connection is used in the context of an operation in
+   * BigQuery, this service account will serve as identity being used for
+   * connecting to the CloudSQL instance specified in this connection.
+   * </pre>
+   *
+   * <code>string service_account_id = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
+   *
+   * @return The serviceAccountId.
+   */
+  java.lang.String getServiceAccountId();
+  /**
+   *
+   *
+   * <pre>
+   * Output only. The account ID of the service used for the purpose of this connection.
+   * When the connection is used in the context of an operation in
+   * BigQuery, this service account will serve as identity being used for
+   * connecting to the CloudSQL instance specified in this connection.
+   * </pre>
+   *
+   * <code>string service_account_id = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
+   *
+   * @return The bytes for serviceAccountId.
+   */
+  com.google.protobuf.ByteString getServiceAccountIdBytes();
 }
diff --git a/proto-google-cloud-bigqueryconnection-v1/src/main/java/com/google/cloud/bigquery/connection/v1/ConnectionOuterClass.java b/proto-google-cloud-bigqueryconnection-v1/src/main/java/com/google/cloud/bigquery/connection/v1/ConnectionOuterClass.java
index 36b9795a..879a3cbc 100644
--- a/proto-google-cloud-bigqueryconnection-v1/src/main/java/com/google/cloud/bigquery/connection/v1/ConnectionOuterClass.java
+++ b/proto-google-cloud-bigqueryconnection-v1/src/main/java/com/google/cloud/bigquery/connection/v1/ConnectionOuterClass.java
@@ -136,77 +136,78 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "_credential\030\007 \001(\010B\003\340A\003:s\352Ap\n,bigquerycon"
           + "nection.googleapis.com/Connection\022@proje"
           + "cts/{project}/locations/{location}/conne"
-          + "ctions/{connection}B\014\n\nproperties\"\251\002\n\022Cl"
+          + "ctions/{connection}B\014\n\nproperties\"\312\002\n\022Cl"
           + "oudSqlProperties\022\023\n\013instance_id\030\001 \001(\t\022\020\n"
           + "\010database\030\002 \001(\t\022R\n\004type\030\003 \001(\0162D.google.c"
           + "loud.bigquery.connection.v1.CloudSqlProp"
           + "erties.DatabaseType\022P\n\ncredential\030\004 \001(\0132"
           + "7.google.cloud.bigquery.connection.v1.Cl"
-          + "oudSqlCredentialB\003\340A\004\"F\n\014DatabaseType\022\035\n"
-          + "\031DATABASE_TYPE_UNSPECIFIED\020\000\022\014\n\010POSTGRES"
-          + "\020\001\022\t\n\005MYSQL\020\002\"8\n\022CloudSqlCredential\022\020\n\010u"
-          + "sername\030\001 \001(\t\022\020\n\010password\030\002 \001(\t\"C\n\026Cloud"
-          + "SpannerProperties\022\020\n\010database\030\001 \001(\t\022\027\n\017u"
-          + "se_parallelism\030\002 \001(\010\"\313\001\n\rAwsProperties\022V"
-          + "\n\022cross_account_role\030\002 \001(\01328.google.clou"
-          + "d.bigquery.connection.v1.AwsCrossAccount"
-          + "RoleH\000\022I\n\013access_role\030\003 \001(\01322.google.clo"
-          + "ud.bigquery.connection.v1.AwsAccessRoleH"
-          + "\000B\027\n\025authentication_method\"^\n\023AwsCrossAc"
-          + "countRole\022\023\n\013iam_role_id\030\001 \001(\t\022\030\n\013iam_us"
-          + "er_id\030\002 \001(\tB\003\340A\003\022\030\n\013external_id\030\003 \001(\tB\003\340"
-          + "A\003\"6\n\rAwsAccessRole\022\023\n\013iam_role_id\030\001 \001(\t"
-          + "\022\020\n\010identity\030\002 \001(\t\":\n\027CloudResourcePrope"
-          + "rties\022\037\n\022service_account_id\030\001 \001(\tB\003\340A\0032\314"
-          + "\r\n\021ConnectionService\022\350\001\n\020CreateConnectio"
-          + "n\022<.google.cloud.bigquery.connection.v1."
-          + "CreateConnectionRequest\032/.google.cloud.b"
-          + "igquery.connection.v1.Connection\"e\202\323\344\223\002="
-          + "\"//v1/{parent=projects/*/locations/*}/co"
-          + "nnections:\nconnection\332A\037parent,connectio"
-          + "n,connection_id\022\273\001\n\rGetConnection\0229.goog"
-          + "le.cloud.bigquery.connection.v1.GetConne"
-          + "ctionRequest\032/.google.cloud.bigquery.con"
-          + "nection.v1.Connection\">\202\323\344\223\0021\022//v1/{name"
-          + "=projects/*/locations/*/connections/*}\332A"
-          + "\004name\022\316\001\n\017ListConnections\022;.google.cloud"
-          + ".bigquery.connection.v1.ListConnectionsR"
-          + "equest\032<.google.cloud.bigquery.connectio"
-          + "n.v1.ListConnectionsResponse\"@\202\323\344\223\0021\022//v"
-          + "1/{parent=projects/*/locations/*}/connec"
-          + "tions\332A\006parent\022\344\001\n\020UpdateConnection\022<.go"
-          + "ogle.cloud.bigquery.connection.v1.Update"
-          + "ConnectionRequest\032/.google.cloud.bigquer"
-          + "y.connection.v1.Connection\"a\202\323\344\223\002=2//v1/"
-          + "{name=projects/*/locations/*/connections"
-          + "/*}:\nconnection\332A\033name,connection,update"
-          + "_mask\022\250\001\n\020DeleteConnection\022<.google.clou"
-          + "d.bigquery.connection.v1.DeleteConnectio"
-          + "nRequest\032\026.google.protobuf.Empty\">\202\323\344\223\0021"
-          + "*//v1/{name=projects/*/locations/*/conne"
-          + "ctions/*}\332A\004name\022\251\001\n\014GetIamPolicy\022\".goog"
-          + "le.iam.v1.GetIamPolicyRequest\032\025.google.i"
-          + "am.v1.Policy\"^\202\323\344\223\002E\"@/v1/{resource=proj"
-          + "ects/*/locations/*/connections/*}:getIam"
-          + "Policy:\001*\332A\020resource,options\022\250\001\n\014SetIamP"
-          + "olicy\022\".google.iam.v1.SetIamPolicyReques"
-          + "t\032\025.google.iam.v1.Policy\"]\202\323\344\223\002E\"@/v1/{r"
-          + "esource=projects/*/locations/*/connectio"
-          + "ns/*}:setIamPolicy:\001*\332A\017resource,policy\022"
-          + "\323\001\n\022TestIamPermissions\022(.google.iam.v1.T"
-          + "estIamPermissionsRequest\032).google.iam.v1"
-          + ".TestIamPermissionsResponse\"h\202\323\344\223\002K\"F/v1"
-          + "/{resource=projects/*/locations/*/connec"
-          + "tions/*}:testIamPermissions:\001*\332A\024resourc"
-          + "e,permissions\032~\312A!bigqueryconnection.goo"
-          + "gleapis.com\322AWhttps://www.googleapis.com"
-          + "/auth/bigquery,https://www.googleapis.co"
-          + "m/auth/cloud-platformB\306\001\n\'com.google.clo"
-          + "ud.bigquery.connection.v1P\001ZMgoogle.gola"
-          + "ng.org/genproto/googleapis/cloud/bigquer"
-          + "y/connection/v1;connection\252\002#Google.Clou"
-          + "d.BigQuery.Connection.V1\312\002#Google\\Cloud\\"
-          + "BigQuery\\Connection\\V1b\006proto3"
+          + "oudSqlCredentialB\003\340A\004\022\037\n\022service_account"
+          + "_id\030\005 \001(\tB\003\340A\003\"F\n\014DatabaseType\022\035\n\031DATABA"
+          + "SE_TYPE_UNSPECIFIED\020\000\022\014\n\010POSTGRES\020\001\022\t\n\005M"
+          + "YSQL\020\002\"8\n\022CloudSqlCredential\022\020\n\010username"
+          + "\030\001 \001(\t\022\020\n\010password\030\002 \001(\t\"C\n\026CloudSpanner"
+          + "Properties\022\020\n\010database\030\001 \001(\t\022\027\n\017use_para"
+          + "llelism\030\002 \001(\010\"\313\001\n\rAwsProperties\022V\n\022cross"
+          + "_account_role\030\002 \001(\01328.google.cloud.bigqu"
+          + "ery.connection.v1.AwsCrossAccountRoleH\000\022"
+          + "I\n\013access_role\030\003 \001(\01322.google.cloud.bigq"
+          + "uery.connection.v1.AwsAccessRoleH\000B\027\n\025au"
+          + "thentication_method\"^\n\023AwsCrossAccountRo"
+          + "le\022\023\n\013iam_role_id\030\001 \001(\t\022\030\n\013iam_user_id\030\002"
+          + " \001(\tB\003\340A\003\022\030\n\013external_id\030\003 \001(\tB\003\340A\003\"6\n\rA"
+          + "wsAccessRole\022\023\n\013iam_role_id\030\001 \001(\t\022\020\n\010ide"
+          + "ntity\030\002 \001(\t\":\n\027CloudResourceProperties\022\037"
+          + "\n\022service_account_id\030\001 \001(\tB\003\340A\0032\314\r\n\021Conn"
+          + "ectionService\022\350\001\n\020CreateConnection\022<.goo"
+          + "gle.cloud.bigquery.connection.v1.CreateC"
+          + "onnectionRequest\032/.google.cloud.bigquery"
+          + ".connection.v1.Connection\"e\202\323\344\223\002=\"//v1/{"
+          + "parent=projects/*/locations/*}/connectio"
+          + "ns:\nconnection\332A\037parent,connection,conne"
+          + "ction_id\022\273\001\n\rGetConnection\0229.google.clou"
+          + "d.bigquery.connection.v1.GetConnectionRe"
+          + "quest\032/.google.cloud.bigquery.connection"
+          + ".v1.Connection\">\202\323\344\223\0021\022//v1/{name=projec"
+          + "ts/*/locations/*/connections/*}\332A\004name\022\316"
+          + "\001\n\017ListConnections\022;.google.cloud.bigque"
+          + "ry.connection.v1.ListConnectionsRequest\032"
+          + "<.google.cloud.bigquery.connection.v1.Li"
+          + "stConnectionsResponse\"@\202\323\344\223\0021\022//v1/{pare"
+          + "nt=projects/*/locations/*}/connections\332A"
+          + "\006parent\022\344\001\n\020UpdateConnection\022<.google.cl"
+          + "oud.bigquery.connection.v1.UpdateConnect"
+          + "ionRequest\032/.google.cloud.bigquery.conne"
+          + "ction.v1.Connection\"a\202\323\344\223\002=2//v1/{name=p"
+          + "rojects/*/locations/*/connections/*}:\nco"
+          + "nnection\332A\033name,connection,update_mask\022\250"
+          + "\001\n\020DeleteConnection\022<.google.cloud.bigqu"
+          + "ery.connection.v1.DeleteConnectionReques"
+          + "t\032\026.google.protobuf.Empty\">\202\323\344\223\0021*//v1/{"
+          + "name=projects/*/locations/*/connections/"
+          + "*}\332A\004name\022\251\001\n\014GetIamPolicy\022\".google.iam."
+          + "v1.GetIamPolicyRequest\032\025.google.iam.v1.P"
+          + "olicy\"^\202\323\344\223\002E\"@/v1/{resource=projects/*/"
+          + "locations/*/connections/*}:getIamPolicy:"
+          + "\001*\332A\020resource,options\022\250\001\n\014SetIamPolicy\022\""
+          + ".google.iam.v1.SetIamPolicyRequest\032\025.goo"
+          + "gle.iam.v1.Policy\"]\202\323\344\223\002E\"@/v1/{resource"
+          + "=projects/*/locations/*/connections/*}:s"
+          + "etIamPolicy:\001*\332A\017resource,policy\022\323\001\n\022Tes"
+          + "tIamPermissions\022(.google.iam.v1.TestIamP"
+          + "ermissionsRequest\032).google.iam.v1.TestIa"
+          + "mPermissionsResponse\"h\202\323\344\223\002K\"F/v1/{resou"
+          + "rce=projects/*/locations/*/connections/*"
+          + "}:testIamPermissions:\001*\332A\024resource,permi"
+          + "ssions\032~\312A!bigqueryconnection.googleapis"
+          + ".com\322AWhttps://www.googleapis.com/auth/b"
+          + "igquery,https://www.googleapis.com/auth/"
+          + "cloud-platformB\306\001\n\'com.google.cloud.bigq"
+          + "uery.connection.v1P\001ZMgoogle.golang.org/"
+          + "genproto/googleapis/cloud/bigquery/conne"
+          + "ction/v1;connection\252\002#Google.Cloud.BigQu"
+          + "ery.Connection.V1\312\002#Google\\Cloud\\BigQuer"
+          + "y\\Connection\\V1b\006proto3"
     };
     descriptor =
         com.google.protobuf.Descriptors.FileDescriptor.internalBuildGeneratedFileFrom(
@@ -293,7 +294,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_bigquery_connection_v1_CloudSqlProperties_descriptor,
             new java.lang.String[] {
-              "InstanceId", "Database", "Type", "Credential",
+              "InstanceId", "Database", "Type", "Credential", "ServiceAccountId",
             });
     internal_static_google_cloud_bigquery_connection_v1_CloudSqlCredential_descriptor =
         getDescriptor().getMessageTypes().get(8);
diff --git a/proto-google-cloud-bigqueryconnection-v1/src/main/proto/google/cloud/bigquery/connection/v1/connection.proto b/proto-google-cloud-bigqueryconnection-v1/src/main/proto/google/cloud/bigquery/connection/v1/connection.proto
index 1c316e3a..cf4b5e29 100644
--- a/proto-google-cloud-bigqueryconnection-v1/src/main/proto/google/cloud/bigquery/connection/v1/connection.proto
+++ b/proto-google-cloud-bigqueryconnection-v1/src/main/proto/google/cloud/bigquery/connection/v1/connection.proto
@@ -275,6 +275,13 @@ message CloudSqlProperties {
 
   // Input only. Cloud SQL credential.
   CloudSqlCredential credential = 4 [(google.api.field_behavior) = INPUT_ONLY];
+
+  // Output only. The account ID of the service used for the purpose of this connection.
+  //
+  // When the connection is used in the context of an operation in
+  // BigQuery, this service account will serve as identity being used for
+  // connecting to the CloudSQL instance specified in this connection.
+  string service_account_id = 5 [(google.api.field_behavior) = OUTPUT_ONLY];
 }
 
 // Credential info for the Cloud SQL.
diff --git a/proto-google-cloud-bigqueryconnection-v1beta1/src/main/java/com/google/cloud/bigquery/connection/v1beta1/ConnectionProto.java b/proto-google-cloud-bigqueryconnection-v1beta1/src/main/java/com/google/cloud/bigquery/connection/v1beta1/ConnectionProto.java
index 881474a1..0e4fb50e 100644
--- a/proto-google-cloud-bigqueryconnection-v1beta1/src/main/java/com/google/cloud/bigquery/connection/v1beta1/ConnectionProto.java
+++ b/proto-google-cloud-bigqueryconnection-v1beta1/src/main/java/com/google/cloud/bigquery/connection/v1beta1/ConnectionProto.java
@@ -10804,6 +10804,37 @@ public interface CloudSqlPropertiesOrBuilder
      */
     com.google.cloud.bigquery.connection.v1beta1.ConnectionProto.CloudSqlCredentialOrBuilder
         getCredentialOrBuilder();
+
+    /**
+     *
+     *
+     * <pre>
+     * Output only. The account ID of the service used for the purpose of this connection.
+     * When the connection is used in the context of an operation in
+     * BigQuery, this service account will serve as identity being used for
+     * connecting to the CloudSQL instance specified in this connection.
+     * </pre>
+     *
+     * <code>string service_account_id = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
+     *
+     * @return The serviceAccountId.
+     */
+    java.lang.String getServiceAccountId();
+    /**
+     *
+     *
+     * <pre>
+     * Output only. The account ID of the service used for the purpose of this connection.
+     * When the connection is used in the context of an operation in
+     * BigQuery, this service account will serve as identity being used for
+     * connecting to the CloudSQL instance specified in this connection.
+     * </pre>
+     *
+     * <code>string service_account_id = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
+     *
+     * @return The bytes for serviceAccountId.
+     */
+    com.google.protobuf.ByteString getServiceAccountIdBytes();
   }
   /**
    *
@@ -10828,6 +10859,7 @@ private CloudSqlProperties() {
       instanceId_ = "";
       database_ = "";
       type_ = 0;
+      serviceAccountId_ = "";
     }
 
     @java.lang.Override
@@ -10898,6 +10930,13 @@ private CloudSqlProperties(
                   credential_ = subBuilder.buildPartial();
                 }
 
+                break;
+              }
+            case 42:
+              {
+                java.lang.String s = input.readStringRequireUtf8();
+
+                serviceAccountId_ = s;
                 break;
               }
             default:
@@ -11299,6 +11338,61 @@ public boolean hasCredential() {
       return getCredential();
     }
 
+    public static final int SERVICE_ACCOUNT_ID_FIELD_NUMBER = 5;
+    private volatile java.lang.Object serviceAccountId_;
+    /**
+     *
+     *
+     * <pre>
+     * Output only. The account ID of the service used for the purpose of this connection.
+     * When the connection is used in the context of an operation in
+     * BigQuery, this service account will serve as identity being used for
+     * connecting to the CloudSQL instance specified in this connection.
+     * </pre>
+     *
+     * <code>string service_account_id = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
+     *
+     * @return The serviceAccountId.
+     */
+    @java.lang.Override
+    public java.lang.String getServiceAccountId() {
+      java.lang.Object ref = serviceAccountId_;
+      if (ref instanceof java.lang.String) {
+        return (java.lang.String) ref;
+      } else {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        serviceAccountId_ = s;
+        return s;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Output only. The account ID of the service used for the purpose of this connection.
+     * When the connection is used in the context of an operation in
+     * BigQuery, this service account will serve as identity being used for
+     * connecting to the CloudSQL instance specified in this connection.
+     * </pre>
+     *
+     * <code>string service_account_id = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
+     *
+     * @return The bytes for serviceAccountId.
+     */
+    @java.lang.Override
+    public com.google.protobuf.ByteString getServiceAccountIdBytes() {
+      java.lang.Object ref = serviceAccountId_;
+      if (ref instanceof java.lang.String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        serviceAccountId_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+
     private byte memoizedIsInitialized = -1;
 
     @java.lang.Override
@@ -11328,6 +11422,9 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
       if (credential_ != null) {
         output.writeMessage(4, getCredential());
       }
+      if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(serviceAccountId_)) {
+        com.google.protobuf.GeneratedMessageV3.writeString(output, 5, serviceAccountId_);
+      }
       unknownFields.writeTo(output);
     }
 
@@ -11352,6 +11449,9 @@ public int getSerializedSize() {
       if (credential_ != null) {
         size += com.google.protobuf.CodedOutputStream.computeMessageSize(4, getCredential());
       }
+      if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(serviceAccountId_)) {
+        size += com.google.protobuf.GeneratedMessageV3.computeStringSize(5, serviceAccountId_);
+      }
       size += unknownFields.getSerializedSize();
       memoizedSize = size;
       return size;
@@ -11377,6 +11477,7 @@ public boolean equals(final java.lang.Object obj) {
       if (hasCredential()) {
         if (!getCredential().equals(other.getCredential())) return false;
       }
+      if (!getServiceAccountId().equals(other.getServiceAccountId())) return false;
       if (!unknownFields.equals(other.unknownFields)) return false;
       return true;
     }
@@ -11398,6 +11499,8 @@ public int hashCode() {
         hash = (37 * hash) + CREDENTIAL_FIELD_NUMBER;
         hash = (53 * hash) + getCredential().hashCode();
       }
+      hash = (37 * hash) + SERVICE_ACCOUNT_ID_FIELD_NUMBER;
+      hash = (53 * hash) + getServiceAccountId().hashCode();
       hash = (29 * hash) + unknownFields.hashCode();
       memoizedHashCode = hash;
       return hash;
@@ -11567,6 +11670,8 @@ public Builder clear() {
           credential_ = null;
           credentialBuilder_ = null;
         }
+        serviceAccountId_ = "";
+
         return this;
       }
 
@@ -11608,6 +11713,7 @@ public com.google.protobuf.Descriptors.Descriptor getDescriptorForType() {
         } else {
           result.credential_ = credentialBuilder_.build();
         }
+        result.serviceAccountId_ = serviceAccountId_;
         onBuilt();
         return result;
       }
@@ -11680,6 +11786,10 @@ public Builder mergeFrom(
         if (other.hasCredential()) {
           mergeCredential(other.getCredential());
         }
+        if (!other.getServiceAccountId().isEmpty()) {
+          serviceAccountId_ = other.serviceAccountId_;
+          onChanged();
+        }
         this.mergeUnknownFields(other.unknownFields);
         onChanged();
         return this;
@@ -12251,6 +12361,127 @@ public Builder clearCredential() {
         return credentialBuilder_;
       }
 
+      private java.lang.Object serviceAccountId_ = "";
+      /**
+       *
+       *
+       * <pre>
+       * Output only. The account ID of the service used for the purpose of this connection.
+       * When the connection is used in the context of an operation in
+       * BigQuery, this service account will serve as identity being used for
+       * connecting to the CloudSQL instance specified in this connection.
+       * </pre>
+       *
+       * <code>string service_account_id = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
+       *
+       * @return The serviceAccountId.
+       */
+      public java.lang.String getServiceAccountId() {
+        java.lang.Object ref = serviceAccountId_;
+        if (!(ref instanceof java.lang.String)) {
+          com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+          java.lang.String s = bs.toStringUtf8();
+          serviceAccountId_ = s;
+          return s;
+        } else {
+          return (java.lang.String) ref;
+        }
+      }
+      /**
+       *
+       *
+       * <pre>
+       * Output only. The account ID of the service used for the purpose of this connection.
+       * When the connection is used in the context of an operation in
+       * BigQuery, this service account will serve as identity being used for
+       * connecting to the CloudSQL instance specified in this connection.
+       * </pre>
+       *
+       * <code>string service_account_id = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
+       *
+       * @return The bytes for serviceAccountId.
+       */
+      public com.google.protobuf.ByteString getServiceAccountIdBytes() {
+        java.lang.Object ref = serviceAccountId_;
+        if (ref instanceof String) {
+          com.google.protobuf.ByteString b =
+              com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+          serviceAccountId_ = b;
+          return b;
+        } else {
+          return (com.google.protobuf.ByteString) ref;
+        }
+      }
+      /**
+       *
+       *
+       * <pre>
+       * Output only. The account ID of the service used for the purpose of this connection.
+       * When the connection is used in the context of an operation in
+       * BigQuery, this service account will serve as identity being used for
+       * connecting to the CloudSQL instance specified in this connection.
+       * </pre>
+       *
+       * <code>string service_account_id = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
+       *
+       * @param value The serviceAccountId to set.
+       * @return This builder for chaining.
+       */
+      public Builder setServiceAccountId(java.lang.String value) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+
+        serviceAccountId_ = value;
+        onChanged();
+        return this;
+      }
+      /**
+       *
+       *
+       * <pre>
+       * Output only. The account ID of the service used for the purpose of this connection.
+       * When the connection is used in the context of an operation in
+       * BigQuery, this service account will serve as identity being used for
+       * connecting to the CloudSQL instance specified in this connection.
+       * </pre>
+       *
+       * <code>string service_account_id = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
+       *
+       * @return This builder for chaining.
+       */
+      public Builder clearServiceAccountId() {
+
+        serviceAccountId_ = getDefaultInstance().getServiceAccountId();
+        onChanged();
+        return this;
+      }
+      /**
+       *
+       *
+       * <pre>
+       * Output only. The account ID of the service used for the purpose of this connection.
+       * When the connection is used in the context of an operation in
+       * BigQuery, this service account will serve as identity being used for
+       * connecting to the CloudSQL instance specified in this connection.
+       * </pre>
+       *
+       * <code>string service_account_id = 5 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
+       *
+       * @param value The bytes for serviceAccountId to set.
+       * @return This builder for chaining.
+       */
+      public Builder setServiceAccountIdBytes(com.google.protobuf.ByteString value) {
+        if (value == null) {
+          throw new NullPointerException();
+        }
+        checkByteStringIsUtf8(value);
+
+        serviceAccountId_ = value;
+        onChanged();
+        return this;
+      }
+
       @java.lang.Override
       public final Builder setUnknownFields(
           final com.google.protobuf.UnknownFieldSet unknownFields) {
@@ -13298,75 +13529,75 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "ctions/{connection}B\014\n\nproperties\"w\n\024Con"
           + "nectionCredential\022Q\n\tcloud_sql\030\001 \001(\0132<.g"
           + "oogle.cloud.bigquery.connection.v1beta1."
-          + "CloudSqlCredentialH\000B\014\n\ncredential\"\263\002\n\022C"
+          + "CloudSqlCredentialH\000B\014\n\ncredential\"\324\002\n\022C"
           + "loudSqlProperties\022\023\n\013instance_id\030\001 \001(\t\022\020"
           + "\n\010database\030\002 \001(\t\022W\n\004type\030\003 \001(\0162I.google."
           + "cloud.bigquery.connection.v1beta1.CloudS"
           + "qlProperties.DatabaseType\022U\n\ncredential\030"
           + "\004 \001(\0132<.google.cloud.bigquery.connection"
-          + ".v1beta1.CloudSqlCredentialB\003\340A\004\"F\n\014Data"
-          + "baseType\022\035\n\031DATABASE_TYPE_UNSPECIFIED\020\000\022"
-          + "\014\n\010POSTGRES\020\001\022\t\n\005MYSQL\020\002\"8\n\022CloudSqlCred"
-          + "ential\022\020\n\010username\030\001 \001(\t\022\020\n\010password\030\002 \001"
-          + "(\t2\230\020\n\021ConnectionService\022\367\001\n\020CreateConne"
-          + "ction\022A.google.cloud.bigquery.connection"
-          + ".v1beta1.CreateConnectionRequest\0324.googl"
-          + "e.cloud.bigquery.connection.v1beta1.Conn"
-          + "ection\"j\202\323\344\223\002B\"4/v1beta1/{parent=project"
-          + "s/*/locations/*}/connections:\nconnection"
-          + "\332A\037parent,connection,connection_id\022\312\001\n\rG"
-          + "etConnection\022>.google.cloud.bigquery.con"
-          + "nection.v1beta1.GetConnectionRequest\0324.g"
+          + ".v1beta1.CloudSqlCredentialB\003\340A\004\022\037\n\022serv"
+          + "ice_account_id\030\005 \001(\tB\003\340A\003\"F\n\014DatabaseTyp"
+          + "e\022\035\n\031DATABASE_TYPE_UNSPECIFIED\020\000\022\014\n\010POST"
+          + "GRES\020\001\022\t\n\005MYSQL\020\002\"8\n\022CloudSqlCredential\022"
+          + "\020\n\010username\030\001 \001(\t\022\020\n\010password\030\002 \001(\t2\230\020\n\021"
+          + "ConnectionService\022\367\001\n\020CreateConnection\022A"
+          + ".google.cloud.bigquery.connection.v1beta"
+          + "1.CreateConnectionRequest\0324.google.cloud"
+          + ".bigquery.connection.v1beta1.Connection\""
+          + "j\202\323\344\223\002B\"4/v1beta1/{parent=projects/*/loc"
+          + "ations/*}/connections:\nconnection\332A\037pare"
+          + "nt,connection,connection_id\022\312\001\n\rGetConne"
+          + "ction\022>.google.cloud.bigquery.connection"
+          + ".v1beta1.GetConnectionRequest\0324.google.c"
+          + "loud.bigquery.connection.v1beta1.Connect"
+          + "ion\"C\202\323\344\223\0026\0224/v1beta1/{name=projects/*/l"
+          + "ocations/*/connections/*}\332A\004name\022\351\001\n\017Lis"
+          + "tConnections\022@.google.cloud.bigquery.con"
+          + "nection.v1beta1.ListConnectionsRequest\032A"
+          + ".google.cloud.bigquery.connection.v1beta"
+          + "1.ListConnectionsResponse\"Q\202\323\344\223\0026\0224/v1be"
+          + "ta1/{parent=projects/*/locations/*}/conn"
+          + "ections\332A\022parent,max_results\022\363\001\n\020UpdateC"
+          + "onnection\022A.google.cloud.bigquery.connec"
+          + "tion.v1beta1.UpdateConnectionRequest\0324.g"
           + "oogle.cloud.bigquery.connection.v1beta1."
-          + "Connection\"C\202\323\344\223\0026\0224/v1beta1/{name=proje"
-          + "cts/*/locations/*/connections/*}\332A\004name\022"
-          + "\351\001\n\017ListConnections\022@.google.cloud.bigqu"
-          + "ery.connection.v1beta1.ListConnectionsRe"
-          + "quest\032A.google.cloud.bigquery.connection"
-          + ".v1beta1.ListConnectionsResponse\"Q\202\323\344\223\0026"
-          + "\0224/v1beta1/{parent=projects/*/locations/"
-          + "*}/connections\332A\022parent,max_results\022\363\001\n\020"
-          + "UpdateConnection\022A.google.cloud.bigquery"
-          + ".connection.v1beta1.UpdateConnectionRequ"
-          + "est\0324.google.cloud.bigquery.connection.v"
-          + "1beta1.Connection\"f\202\323\344\223\002B24/v1beta1/{nam"
-          + "e=projects/*/locations/*/connections/*}:"
-          + "\nconnection\332A\033name,connection,update_mas"
-          + "k\022\350\001\n\032UpdateConnectionCredential\022K.googl"
-          + "e.cloud.bigquery.connection.v1beta1.Upda"
-          + "teConnectionCredentialRequest\032\026.google.p"
-          + "rotobuf.Empty\"e\202\323\344\223\002M2?/v1beta1/{name=pr"
-          + "ojects/*/locations/*/connections/*/crede"
-          + "ntial}:\ncredential\332A\017name,credential\022\262\001\n"
-          + "\020DeleteConnection\022A.google.cloud.bigquer"
-          + "y.connection.v1beta1.DeleteConnectionReq"
-          + "uest\032\026.google.protobuf.Empty\"C\202\323\344\223\0026*4/v"
-          + "1beta1/{name=projects/*/locations/*/conn"
-          + "ections/*}\332A\004name\022\256\001\n\014GetIamPolicy\022\".goo"
-          + "gle.iam.v1.GetIamPolicyRequest\032\025.google."
-          + "iam.v1.Policy\"c\202\323\344\223\002J\"E/v1beta1/{resourc"
-          + "e=projects/*/locations/*/connections/*}:"
-          + "getIamPolicy:\001*\332A\020resource,options\022\255\001\n\014S"
-          + "etIamPolicy\022\".google.iam.v1.SetIamPolicy"
-          + "Request\032\025.google.iam.v1.Policy\"b\202\323\344\223\002J\"E"
-          + "/v1beta1/{resource=projects/*/locations/"
-          + "*/connections/*}:setIamPolicy:\001*\332A\017resou"
-          + "rce,policy\022\330\001\n\022TestIamPermissions\022(.goog"
-          + "le.iam.v1.TestIamPermissionsRequest\032).go"
-          + "ogle.iam.v1.TestIamPermissionsResponse\"m"
-          + "\202\323\344\223\002P\"K/v1beta1/{resource=projects/*/lo"
-          + "cations/*/connections/*}:testIamPermissi"
-          + "ons:\001*\332A\024resource,permissions\032~\312A!bigque"
-          + "ryconnection.googleapis.com\322AWhttps://ww"
-          + "w.googleapis.com/auth/bigquery,https://w"
-          + "ww.googleapis.com/auth/cloud-platformB\351\001"
-          + "\n,com.google.cloud.bigquery.connection.v"
-          + "1beta1B\017ConnectionProtoZRgoogle.golang.o"
-          + "rg/genproto/googleapis/cloud/bigquery/co"
-          + "nnection/v1beta1;connection\252\002(Google.Clo"
-          + "ud.BigQuery.Connection.V1Beta1\312\002(Google\\"
-          + "Cloud\\BigQuery\\Connection\\V1beta1b\006proto"
-          + "3"
+          + "Connection\"f\202\323\344\223\002B24/v1beta1/{name=proje"
+          + "cts/*/locations/*/connections/*}:\nconnec"
+          + "tion\332A\033name,connection,update_mask\022\350\001\n\032U"
+          + "pdateConnectionCredential\022K.google.cloud"
+          + ".bigquery.connection.v1beta1.UpdateConne"
+          + "ctionCredentialRequest\032\026.google.protobuf"
+          + ".Empty\"e\202\323\344\223\002M2?/v1beta1/{name=projects/"
+          + "*/locations/*/connections/*/credential}:"
+          + "\ncredential\332A\017name,credential\022\262\001\n\020Delete"
+          + "Connection\022A.google.cloud.bigquery.conne"
+          + "ction.v1beta1.DeleteConnectionRequest\032\026."
+          + "google.protobuf.Empty\"C\202\323\344\223\0026*4/v1beta1/"
+          + "{name=projects/*/locations/*/connections"
+          + "/*}\332A\004name\022\256\001\n\014GetIamPolicy\022\".google.iam"
+          + ".v1.GetIamPolicyRequest\032\025.google.iam.v1."
+          + "Policy\"c\202\323\344\223\002J\"E/v1beta1/{resource=proje"
+          + "cts/*/locations/*/connections/*}:getIamP"
+          + "olicy:\001*\332A\020resource,options\022\255\001\n\014SetIamPo"
+          + "licy\022\".google.iam.v1.SetIamPolicyRequest"
+          + "\032\025.google.iam.v1.Policy\"b\202\323\344\223\002J\"E/v1beta"
+          + "1/{resource=projects/*/locations/*/conne"
+          + "ctions/*}:setIamPolicy:\001*\332A\017resource,pol"
+          + "icy\022\330\001\n\022TestIamPermissions\022(.google.iam."
+          + "v1.TestIamPermissionsRequest\032).google.ia"
+          + "m.v1.TestIamPermissionsResponse\"m\202\323\344\223\002P\""
+          + "K/v1beta1/{resource=projects/*/locations"
+          + "/*/connections/*}:testIamPermissions:\001*\332"
+          + "A\024resource,permissions\032~\312A!bigqueryconne"
+          + "ction.googleapis.com\322AWhttps://www.googl"
+          + "eapis.com/auth/bigquery,https://www.goog"
+          + "leapis.com/auth/cloud-platformB\351\001\n,com.g"
+          + "oogle.cloud.bigquery.connection.v1beta1B"
+          + "\017ConnectionProtoZRgoogle.golang.org/genp"
+          + "roto/googleapis/cloud/bigquery/connectio"
+          + "n/v1beta1;connection\252\002(Google.Cloud.BigQ"
+          + "uery.Connection.V1Beta1\312\002(Google\\Cloud\\B"
+          + "igQuery\\Connection\\V1beta1b\006proto3"
     };
     descriptor =
         com.google.protobuf.Descriptors.FileDescriptor.internalBuildGeneratedFileFrom(
@@ -13467,7 +13698,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_bigquery_connection_v1beta1_CloudSqlProperties_descriptor,
             new java.lang.String[] {
-              "InstanceId", "Database", "Type", "Credential",
+              "InstanceId", "Database", "Type", "Credential", "ServiceAccountId",
             });
     internal_static_google_cloud_bigquery_connection_v1beta1_CloudSqlCredential_descriptor =
         getDescriptor().getMessageTypes().get(10);
diff --git a/proto-google-cloud-bigqueryconnection-v1beta1/src/main/proto/google/cloud/bigquery/connection/v1beta1/connection.proto b/proto-google-cloud-bigqueryconnection-v1beta1/src/main/proto/google/cloud/bigquery/connection/v1beta1/connection.proto
index e70f6f39..eda714db 100644
--- a/proto-google-cloud-bigqueryconnection-v1beta1/src/main/proto/google/cloud/bigquery/connection/v1beta1/connection.proto
+++ b/proto-google-cloud-bigqueryconnection-v1beta1/src/main/proto/google/cloud/bigquery/connection/v1beta1/connection.proto
@@ -1,4 +1,4 @@
-// Copyright 2020 Google LLC
+// Copyright 2022 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -105,7 +105,7 @@ service ConnectionService {
   // Sets the access control policy on the specified resource. Replaces any
   // existing policy.
   //
-  // Can return Public Errors: NOT_FOUND, INVALID_ARGUMENT and PERMISSION_DENIED
+  // Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.
   rpc SetIamPolicy(google.iam.v1.SetIamPolicyRequest) returns (google.iam.v1.Policy) {
     option (google.api.http) = {
       post: "/v1beta1/{resource=projects/*/locations/*/connections/*}:setIamPolicy"
@@ -116,7 +116,7 @@ service ConnectionService {
 
   // Returns permissions that a caller has on the specified resource.
   // If the resource does not exist, this will return an empty set of
-  // permissions, not a NOT_FOUND error.
+  // permissions, not a `NOT_FOUND` error.
   //
   // Note: This operation is designed to be used for building permission-aware
   // UIs and command-line tools, not for authorization checking. This operation
@@ -295,6 +295,13 @@ message CloudSqlProperties {
 
   // Input only. Cloud SQL credential.
   CloudSqlCredential credential = 4 [(google.api.field_behavior) = INPUT_ONLY];
+
+  // Output only. The account ID of the service used for the purpose of this connection.
+  //
+  // When the connection is used in the context of an operation in
+  // BigQuery, this service account will serve as identity being used for
+  // connecting to the CloudSQL instance specified in this connection.
+  string service_account_id = 5 [(google.api.field_behavior) = OUTPUT_ONLY];
 }
 
 // Credential info for the Cloud SQL.