diff --git a/internal/services/cdn/cdn_frontdoor_origin_resource.go b/internal/services/cdn/cdn_frontdoor_origin_resource.go
index 430ccfd7d531..0c9c863c80df 100644
--- a/internal/services/cdn/cdn_frontdoor_origin_resource.go
+++ b/internal/services/cdn/cdn_frontdoor_origin_resource.go
@@ -130,6 +130,7 @@ func resourceCdnFrontDoorOrigin() *pluginsdk.Resource {
 							ValidateFunc: validation.StringInSlice([]string{
 								"blob",
 								"blob_secondary",
+								"managedEnvironments",
 								"sites",
 								"web",
 							}, false),
diff --git a/website/docs/r/cdn_frontdoor_origin.html.markdown b/website/docs/r/cdn_frontdoor_origin.html.markdown
index e1c8ef61c436..c43d01f24935 100644
--- a/website/docs/r/cdn_frontdoor_origin.html.markdown
+++ b/website/docs/r/cdn_frontdoor_origin.html.markdown
@@ -251,7 +251,7 @@ A `private_link` block supports the following:
 
 * `request_message` - (Optional) Specifies the request message that will be submitted to the `private_link_target_id` when requesting the private link endpoint connection. Values must be between `1` and `140` characters in length. Defaults to `Access request for CDN FrontDoor Private Link Origin`.
 
-* `target_type` - (Optional) Specifies the type of target for this Private Link Endpoint. Possible values are `blob`, `blob_secondary`, `web` and `sites`.
+* `target_type` - (Optional) Specifies the type of target for this Private Link Endpoint. Possible values are `blob`, `blob_secondary`, `managedEnvironments`, `sites` and `web`.
 
 -> **NOTE:** `target_type` cannot be specified when using a Load Balancer as an Origin.