diff --git a/modules/apigee-organization/variables.tf b/modules/apigee-organization/variables.tf
index 5e792be51..eff016c8c 100644
--- a/modules/apigee-organization/variables.tf
+++ b/modules/apigee-organization/variables.tf
@@ -15,13 +15,13 @@
  */
 
 variable "authorized_network" {
-  description = "VPC network id (requires service network peering enabled (Used in Apigee X only)."
+  description = "VPC network self link (requires service network peering enabled (Used in Apigee X only)."
   type = string
   default = null
 }
 
 variable "analytics_region" {
-  description = "Analytics Region for the Apgiee Organization (immutable). See https://cloud.google.com/apigee/docs/api-platform/get-started/install-cli."
+  description = "Analytics Region for the Apigee Organization (immutable). See https://cloud.google.com/apigee/docs/api-platform/get-started/install-cli."
   type = string
 }
 
@@ -41,7 +41,7 @@ variable "apigee_environments" {
 }
 
 variable "database_encryption_key" {
-  description = "Cloud KMS key name used for encrypting the data that is stored and replicated across runtime instances (immutable, used in Apigee X only)."
+  description = "Cloud KMS key self link (e.g. `projects/foo/locations/us/keyRings/bar/cryptoKeys/baz`) used for encrypting the data that is stored and replicated across runtime instances (immutable, used in Apigee X only)."
   type = string
   default = null
 }
diff --git a/modules/apigee-x-instance/variables.tf b/modules/apigee-x-instance/variables.tf
index 37d8a3f5a..219ee7d6a 100644
--- a/modules/apigee-x-instance/variables.tf
+++ b/modules/apigee-x-instance/variables.tf
@@ -44,7 +44,7 @@ variable "cidr_mask" {
 }
 
 variable "disk_encryption_key" {
-  description = "Customer Managed Encryption Key (CMEK) used for disk and volume encryption (required for PAID Apigee Orgs only)."
+  description = "Customer Managed Encryption Key (CMEK) self link (e.g. `projects/foo/locations/us/keyRings/bar/cryptoKeys/baz`) used for disk and volume encryption (required for PAID Apigee Orgs only)."
   type        = string
   default     = null
 }