Documentation changes for keyhandle data source (#12613) (#20758)

[upstream:c540b739b0dcc0819e19fa0cb990a904973462ab]

Signed-off-by: Modular Magician <magic-modules@google.com>

Author: modular-magician

.changelog/12613.txt

@@ -0,0 +1,3 @@
+```release-note:note
+kmskeyhandle: improved documentation for keyhandle datasource
+```

website/docs/d/kms_key_handle.html.markdown

@@ -6,12 +6,16 @@ description: |-
 
 # google_kms_key_handle
 
-Provides access to Google Cloud Platform KMS KeyHandle. For more information see
+Provides access to Google Cloud Platform KMS KeyHandle. A key handle is a Cloud KMS resource that helps you safely span the separation of duties to create new Cloud KMS keys for CMEK using Autokey.
+
+~> **Warning:** This resource is in beta, and should be used with the terraform-provider-google-beta provider.
+See [Provider Versions](https://terraform.io/docs/providers/google/guides/provider_versions.html) for more details on beta resources.
+
+For more information see
 [the official documentation](https://cloud.google.com/kms/docs/resource-hierarchy#key_handles)
 and
 [API](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyHandles).
 
-A key handle is a Cloud KMS resource that helps you safely span the separation of duties to create new Cloud KMS keys for CMEK using Autokey.
 
 ## Example Usage
 
@@ -42,4 +46,14 @@ The following arguments are supported:
 In addition to the arguments listed above, the following computed attributes are
 exported:
 
-* `id` - The identifier of the created KeyHandle. Its format is `projects/{projectId}/locations/{location}/keyHandles/{keyHandleName}`.
+* `id` - The identifier of the KeyHandle. Its format is `projects/{projectId}/locations/{location}/keyHandles/{keyHandleName}`.
+
+* `kms_key` - The identifier of the KMS Key created for the KeyHandle. Its format is `projects/{projectId}/locations/{location}/keyRings/{keyRingName}/cryptoKeys/{cryptoKeyName}`.
+
+* `location` - The location of the KMS Key and KeyHandle.
+
+* `project`  - The identifier of the project where KMS KeyHandle is created.
+
+* `resource_type_selector` - Indicates the resource type that the resulting CryptoKey is meant to protect, e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types.
+
+