diff --git a/.changelog/13262.txt b/.changelog/13262.txt
new file mode 100644
index 00000000000..82e29255a85
--- /dev/null
+++ b/.changelog/13262.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+networksecurity: added `description` field to `google_network_security_intercept_deployment`, `google_network_security_intercept_deployment_group`, `google_network_security_intercept_endpoint_group` resources
+```
\ No newline at end of file
diff --git a/website/docs/r/network_security_intercept_deployment.html.markdown b/website/docs/r/network_security_intercept_deployment.html.markdown
index 9c66fe46a68..40669f299e6 100644
--- a/website/docs/r/network_security_intercept_deployment.html.markdown
+++ b/website/docs/r/network_security_intercept_deployment.html.markdown
@@ -97,6 +97,7 @@ resource "google_network_security_intercept_deployment" "default" {
   location                   = "us-central1-a"
   forwarding_rule            = google_compute_forwarding_rule.forwarding_rule.id
   intercept_deployment_group = google_network_security_intercept_deployment_group.deployment_group.id
+  description                = "some description"
   labels = {
     foo = "bar"
   }
@@ -139,6 +140,11 @@ The following arguments are supported:
   **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
   Please refer to the field `effective_labels` for all of the labels present on the resource.
 
+* `description` -
+  (Optional)
+  User-provided description of the deployment.
+  Used as additional context for the deployment.
+
 * `project` - (Optional) The ID of the project in which the resource belongs.
     If it is not provided, the provider project is used.
 
diff --git a/website/docs/r/network_security_intercept_deployment_group.html.markdown b/website/docs/r/network_security_intercept_deployment_group.html.markdown
index c2798778e29..8bbeb970b73 100644
--- a/website/docs/r/network_security_intercept_deployment_group.html.markdown
+++ b/website/docs/r/network_security_intercept_deployment_group.html.markdown
@@ -50,6 +50,7 @@ resource "google_network_security_intercept_deployment_group" "default" {
   intercept_deployment_group_id = "example-dg"
   location                      = "global"
   network                       = google_compute_network.network.id
+  description                   = "some description"
   labels = {
     foo = "bar"
   }
@@ -86,6 +87,11 @@ The following arguments are supported:
   **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
   Please refer to the field `effective_labels` for all of the labels present on the resource.
 
+* `description` -
+  (Optional)
+  User-provided description of the deployment group.
+  Used as additional context for the deployment group.
+
 * `project` - (Optional) The ID of the project in which the resource belongs.
     If it is not provided, the provider project is used.
 
diff --git a/website/docs/r/network_security_intercept_endpoint_group.html.markdown b/website/docs/r/network_security_intercept_endpoint_group.html.markdown
index b1222dc45a6..5d56be443ab 100644
--- a/website/docs/r/network_security_intercept_endpoint_group.html.markdown
+++ b/website/docs/r/network_security_intercept_endpoint_group.html.markdown
@@ -58,6 +58,7 @@ resource "google_network_security_intercept_endpoint_group" "default" {
   intercept_endpoint_group_id   = "example-eg"
   location                      = "global"
   intercept_deployment_group    = google_network_security_intercept_deployment_group.deployment_group.id
+  description                   = "some description"
   labels = {
     foo = "bar"
   }
@@ -94,6 +95,11 @@ The following arguments are supported:
   **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
   Please refer to the field `effective_labels` for all of the labels present on the resource.
 
+* `description` -
+  (Optional)
+  User-provided description of the endpoint group.
+  Used as additional context for the endpoint group.
+
 * `project` - (Optional) The ID of the project in which the resource belongs.
     If it is not provided, the provider project is used.