diff --git a/.changelog/4689.txt b/.changelog/4689.txt
new file mode 100644
index 0000000000..df143fa2c8
--- /dev/null
+++ b/.changelog/4689.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+dns: added missing record types to `google_dns_record_set` resource
+```
diff --git a/google-beta/resource_dns_resource_dns_record_set.go b/google-beta/resource_dns_resource_dns_record_set.go
index 928fcb4cb2..1202dbdff7 100644
--- a/google-beta/resource_dns_resource_dns_record_set.go
+++ b/google-beta/resource_dns_resource_dns_record_set.go
@@ -81,8 +81,8 @@ func resourceDNSResourceDnsRecordSet() *schema.Resource {
 			"type": {
 				Type:         schema.TypeString,
 				Required:     true,
-				ValidateFunc: validation.StringInSlice([]string{"A", "AAAA", "CAA", "CNAME", "MX", "NAPTR", "NS", "PTR", "SOA", "SPF", "SRV", "TLSA", "TXT"}, false),
-				Description:  `One of valid DNS resource types. Possible values: ["A", "AAAA", "CAA", "CNAME", "MX", "NAPTR", "NS", "PTR", "SOA", "SPF", "SRV", "TLSA", "TXT"]`,
+				ValidateFunc: validation.StringInSlice([]string{"A", "AAAA", "CAA", "CNAME", "DNSKEY", "DS", "IPSECVPNKEY", "MX", "NAPTR", "NS", "PTR", "SOA", "SPF", "SRV", "SSHFP", "TLSA", "TXT"}, false),
+				Description:  `One of valid DNS resource types. Possible values: ["A", "AAAA", "CAA", "CNAME", "DNSKEY", "DS", "IPSECVPNKEY", "MX", "NAPTR", "NS", "PTR", "SOA", "SPF", "SRV", "SSHFP", "TLSA", "TXT"]`,
 			},
 			"rrdatas": {
 				Type:             schema.TypeList,
diff --git a/website/docs/r/dns_resource_dns_record_set.html.markdown b/website/docs/r/dns_resource_dns_record_set.html.markdown
index bf0cbf8a73..69e971f371 100644
--- a/website/docs/r/dns_resource_dns_record_set.html.markdown
+++ b/website/docs/r/dns_resource_dns_record_set.html.markdown
@@ -64,7 +64,7 @@ The following arguments are supported:
 * `type` -
   (Required)
   One of valid DNS resource types.
-  Possible values are `A`, `AAAA`, `CAA`, `CNAME`, `MX`, `NAPTR`, `NS`, `PTR`, `SOA`, `SPF`, `SRV`, `TLSA`, and `TXT`.
+  Possible values are `A`, `AAAA`, `CAA`, `CNAME`, `DNSKEY`, `DS`, `IPSECVPNKEY`, `MX`, `NAPTR`, `NS`, `PTR`, `SOA`, `SPF`, `SRV`, `SSHFP`, `TLSA`, and `TXT`.
 
 * `managed_zone` -
   (Required)