diff --git a/README.md b/README.md
index 78079cd..38e85c2 100644
--- a/README.md
+++ b/README.md
@@ -61,7 +61,7 @@ module "localhost_function" {
 | environment\_variables | A set of key/value environment variable pairs to assign to the function. | map(string) | `<map>` | no |
 | event\_trigger | A source that fires events in response to a condition in another service. | map(string) | n/a | yes |
 | event\_trigger\_failure\_policy\_retry | A toggle to determine if the function should be retried on failure. | bool | `"false"` | no |
-| ingress\_settings | The ingress settings for the function | string | `"ALLOW_ALL"` | no |
+| ingress\_settings | The ingress settings for the function. Allowed values are ALLOW_ALL, ALLOW_INTERNAL_AND_GCLB and ALLOW_INTERNAL_ONLY. Changes to this field will recreate the cloud function. | string | `"ALLOW_ALL"` | no |
 | labels | A set of key/value label pairs to assign to the Cloud Function. | map(string) | `<map>` | no |
 | max\_instances | The maximum number of parallel executions of the function. | number | `"0"` | no |
 | name | The name to apply to any nameable resources. | string | n/a | yes |
@@ -73,6 +73,7 @@ module "localhost_function" {
 | source\_directory | The pathname of the directory which contains the function source code. | string | n/a | yes |
 | timeout\_s | The amount of time in seconds allotted for the execution of the function. | number | `"60"` | no |
 | vpc\_connector | The VPC Network Connector that this cloud function can connect to. It should be set up as fully-qualified URI. The format of this field is projects/*/locations/*/connectors/*. | string | `"null"` | no |
+| vpc\_connector\_egress\_settings | The egress settings for the connector, controlling what traffic is diverted through it. Allowed values are ALL_TRAFFIC and PRIVATE_RANGES_ONLY. If unset, this field preserves the previously set value. | string | `"null"` | no |
 
 ## Outputs
 
diff --git a/main.tf b/main.tf
index 9dfbf6b..c86a583 100644
--- a/main.tf
+++ b/main.tf
@@ -68,14 +68,15 @@ resource "google_storage_bucket_object" "main" {
 }
 
 resource "google_cloudfunctions_function" "main" {
-  name                = var.name
-  description         = var.description
-  available_memory_mb = var.available_memory_mb
-  max_instances       = var.max_instances
-  timeout             = var.timeout_s
-  entry_point         = var.entry_point
-  ingress_settings    = var.ingress_settings
-  vpc_connector       = var.vpc_connector
+  name                          = var.name
+  description                   = var.description
+  available_memory_mb           = var.available_memory_mb
+  max_instances                 = var.max_instances
+  timeout                       = var.timeout_s
+  entry_point                   = var.entry_point
+  ingress_settings              = var.ingress_settings
+  vpc_connector_egress_settings = var.vpc_connector_egress_settings
+  vpc_connector                 = var.vpc_connector
 
   event_trigger {
     event_type = var.event_trigger["event_type"]
diff --git a/variables.tf b/variables.tf
index 118b39d..5229486 100644
--- a/variables.tf
+++ b/variables.tf
@@ -133,7 +133,13 @@ variable "event_trigger_failure_policy_retry" {
 variable "ingress_settings" {
   type        = string
   default     = "ALLOW_ALL"
-  description = "The ingress settings for the function"
+  description = "The ingress settings for the function. Allowed values are ALLOW_ALL, ALLOW_INTERNAL_AND_GCLB and ALLOW_INTERNAL_ONLY. Changes to this field will recreate the cloud function."
+}
+
+variable "vpc_connector_egress_settings" {
+  type        = string
+  default     = null
+  description = "The egress settings for the connector, controlling what traffic is diverted through it. Allowed values are ALL_TRAFFIC and PRIVATE_RANGES_ONLY. If unset, this field preserves the previously set value."
 }
 
 variable "vpc_connector" {