@pulumi/confluentcloud 1.16.0-alpha.1683783653 → 1.16.0

package/types/input.d.ts

@@ -84,9 +84,6 @@ export interface BusinessMetadataCredentials {
      * The Schema Registry API Key.
      */
     key: pulumi.Input<string>;
-    /**
-     * The Schema Registry API Secret.
-     */
     secret: pulumi.Input<string>;
 }
 export interface BusinessMetadataSchemaRegistryCluster {
@@ -192,6 +189,8 @@ export interface GetBusinessMetadataBindingCredentials {
     key: string;
     /**
      * The Schema Registry API Secret.
+     *
+     * > **Note:** A Schema Registry API key consists of a key and a secret. Schema Registry API keys are required to interact with Schema Registry clusters in Confluent Cloud. Each Schema Registry API key is valid for one specific Schema Registry cluster.
      */
     secret: string;
 }
@@ -202,6 +201,8 @@ export interface GetBusinessMetadataBindingCredentialsArgs {
     key: pulumi.Input<string>;
     /**
      * The Schema Registry API Secret.
+     *
+     * > **Note:** A Schema Registry API key consists of a key and a secret. Schema Registry API keys are required to interact with Schema Registry clusters in Confluent Cloud. Each Schema Registry API key is valid for one specific Schema Registry cluster.
      */
     secret: pulumi.Input<string>;
 }
@@ -252,12 +253,16 @@ export interface GetBusinessMetadataSchemaRegistryClusterArgs {
 export interface GetIdentityPoolIdentityProvider {
     /**
      * The ID of the Identity Provider associated with the Identity Pool, for example, `op-abc123`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
 export interface GetIdentityPoolIdentityProviderArgs {
     /**
      * The ID of the Identity Provider associated with the Identity Pool, for example, `op-abc123`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: pulumi.Input<string>;
 }
@@ -296,12 +301,16 @@ export interface GetKafkaClusterDedicatedArgs {
 export interface GetKafkaClusterEnvironment {
     /**
      * The ID of the Environment that the Kafka cluster belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
 export interface GetKafkaClusterEnvironmentArgs {
     /**
      * The ID of the Environment that the Kafka cluster belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: pulumi.Input<string>;
 }
@@ -314,9 +323,6 @@ export interface GetKafkaTopicCredentials {
      * The Kafka API Key.
      */
     key: string;
-    /**
-     * The Kafka API Secret.
-     */
     secret: string;
 }
 export interface GetKafkaTopicCredentialsArgs {
@@ -324,9 +330,6 @@ export interface GetKafkaTopicCredentialsArgs {
      * The Kafka API Key.
      */
     key: pulumi.Input<string>;
-    /**
-     * The Kafka API Secret.
-     */
     secret: pulumi.Input<string>;
 }
 export interface GetKafkaTopicKafkaCluster {
@@ -344,12 +347,16 @@ export interface GetKafkaTopicKafkaClusterArgs {
 export interface GetKsqlClusterEnvironment {
     /**
      * The ID of the Environment that the ksqlDB cluster belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
 export interface GetKsqlClusterEnvironmentArgs {
     /**
      * The ID of the Environment that the ksqlDB cluster belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: pulumi.Input<string>;
 }
@@ -416,12 +423,16 @@ export interface GetNetworkDnsConfigArgs {
 export interface GetNetworkEnvironment {
     /**
      * The ID of the Environment that the Network belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
 export interface GetNetworkEnvironmentArgs {
     /**
      * The ID of the Environment that the Network belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: pulumi.Input<string>;
 }
@@ -504,24 +515,32 @@ export interface GetNetworkLinkServiceEnvironmentArgs {
 export interface GetPeeringEnvironment {
     /**
      * The ID of the Environment that the Peering belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
 export interface GetPeeringEnvironmentArgs {
     /**
      * The ID of the Environment that the Peering belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: pulumi.Input<string>;
 }
 export interface GetPrivateLinkAccessEnvironment {
     /**
      * The ID of the Environment that the Private Link Access belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
 export interface GetPrivateLinkAccessEnvironmentArgs {
     /**
      * The ID of the Environment that the Private Link Access belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: pulumi.Input<string>;
 }
@@ -580,12 +599,16 @@ export interface GetSchemaRegistryClusterConfigSchemaRegistryClusterArgs {
 export interface GetSchemaRegistryClusterEnvironment {
     /**
      * The ID of the Environment that the Schema Registry cluster belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
 export interface GetSchemaRegistryClusterEnvironmentArgs {
     /**
      * The ID of the Environment that the Schema Registry cluster belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: pulumi.Input<string>;
 }
@@ -596,6 +619,8 @@ export interface GetSchemaRegistryClusterModeCredentials {
     key: string;
     /**
      * The Schema Registry API Secret.
+     *
+     * > **Note:** A Schema Registry API key consists of a key and a secret. Schema Registry API keys are required to interact with Schema Registry clusters in Confluent Cloud. Each Schema Registry API key is valid for one specific Schema Registry cluster.
      */
     secret: string;
 }
@@ -606,6 +631,8 @@ export interface GetSchemaRegistryClusterModeCredentialsArgs {
     key: pulumi.Input<string>;
     /**
      * The Schema Registry API Secret.
+     *
+     * > **Note:** A Schema Registry API key consists of a key and a secret. Schema Registry API keys are required to interact with Schema Registry clusters in Confluent Cloud. Each Schema Registry API key is valid for one specific Schema Registry cluster.
      */
     secret: pulumi.Input<string>;
 }
@@ -824,12 +851,16 @@ export interface GetTagSchemaRegistryClusterArgs {
 export interface GetTransitGatewayAttachmentEnvironment {
     /**
      * The ID of the Environment that the Transit Gateway Attachment belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
 export interface GetTransitGatewayAttachmentEnvironmentArgs {
     /**
      * The ID of the Environment that the Transit Gateway Attachment belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: pulumi.Input<string>;
 }
@@ -870,12 +901,20 @@ export interface KafkaAclKafkaCluster {
 export interface KafkaClientQuotaEnvironment {
     /**
      * The ID of the Environment that the corresponding Kafka Cluster belongs to, for example, `env-abc123`.
+     *
+     * > **Note:** Each principal assigned to a quota receives the full amount of the quota, meaning the quota is not shared by the principals it is assigned. For example, if a 10 MBps ingress quota is applied to Principals 1 and 2, Principal 1 can produce at most 10 MBps, independently of Principal 2.
+     *
+     * > **Note:** Define a throughput maximum, but do not guarantee a throughput floor. Applications are rate-limited through the use of the Kafka throttling mechanism. Kafka asks the client to wait before sending more data and mutes the channel, which appears as latency to the client application.
      */
     id: pulumi.Input<string>;
 }
 export interface KafkaClientQuotaKafkaCluster {
     /**
      * The ID of the Environment that the corresponding Kafka Cluster belongs to, for example, `env-abc123`.
+     *
+     * > **Note:** Each principal assigned to a quota receives the full amount of the quota, meaning the quota is not shared by the principals it is assigned. For example, if a 10 MBps ingress quota is applied to Principals 1 and 2, Principal 1 can produce at most 10 MBps, independently of Principal 2.
+     *
+     * > **Note:** Define a throughput maximum, but do not guarantee a throughput floor. Applications are rate-limited through the use of the Kafka throttling mechanism. Kafka asks the client to wait before sending more data and mutes the channel, which appears as latency to the client application.
      */
     id: pulumi.Input<string>;
 }
@@ -904,6 +943,10 @@ export interface KafkaClusterConfigCredentials {
     key: pulumi.Input<string>;
     /**
      * The Kafka API Secret.
+     *
+     * > **Note:** A Kafka API key consists of a key and a secret. Kafka API keys are required to interact with Kafka clusters in Confluent Cloud. Each Kafka API key is valid for one specific Kafka cluster.
+     *
+     * > **Note:** Use Option #2 to simplify the key rotation process. When using Option #1, to rotate a Kafka API key, create a new Kafka API key, update the `credentials` block in all configuration files to use the new Kafka API key, run `pulumi up -target="confluent_kafka_cluster_config.orders"`, and remove the old Kafka API key. Alternatively, in case the old Kafka API Key was deleted already, you might need to run `pulumi preview -refresh=false -target="confluent_kafka_cluster_config.orders" -out=rotate-kafka-api-key` and `pulumi up rotate-kafka-api-key` instead.
      */
     secret: pulumi.Input<string>;
 }
@@ -914,9 +957,6 @@ export interface KafkaClusterConfigKafkaCluster {
     id: pulumi.Input<string>;
 }
 export interface KafkaClusterDedicated {
-    /**
-     * The number of Confluent Kafka Units (CKUs) for Dedicated cluster types. The minimum number of CKUs for `SINGLE_ZONE` dedicated clusters is `1` whereas `MULTI_ZONE` dedicated clusters must have more than `2` CKUs.
-     */
     cku: pulumi.Input<number>;
     encryptionKey?: pulumi.Input<string>;
     /**
@@ -981,6 +1021,10 @@ export interface KafkaTopicCredentials {
     key: pulumi.Input<string>;
     /**
      * The Kafka API Secret.
+     *
+     * > **Note:** A Kafka API key consists of a key and a secret. Kafka API keys are required to interact with Kafka clusters in Confluent Cloud. Each Kafka API key is valid for one specific Kafka cluster.
+     *
+     * > **Note:** Use Option #2 to simplify the key rotation process. When using Option #1, to rotate a Kafka API key, create a new Kafka API key, update the `credentials` block in all configuration files to use the new Kafka API key, run `pulumi up -target="confluent_kafka_topic.orders"`, and remove the old Kafka API key. Alternatively, in case the old Kafka API Key was deleted already, you might need to run `pulumi preview -refresh=false -target="confluent_kafka_topic.orders" -out=rotate-kafka-api-key` and `pulumi up rotate-kafka-api-key` instead.
      */
     secret: pulumi.Input<string>;
 }
@@ -1103,6 +1147,8 @@ export interface NetworkLinkServiceNetwork {
 export interface NetworkZoneInfo {
     /**
      * The IPv4 CIDR block to be used for the network. Must be `/27`. Required for VPC peering and AWS TransitGateway.
+     *
+     * > **Note:** The `zoneInfo` configuration block and `reservedCidr` are in a [Limited Availability lifecycle stage](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy), and it's available only for AWS networks with PRIVATELINK connection type.
      */
     cidr?: pulumi.Input<string>;
     /**
@@ -1151,6 +1197,14 @@ export interface PeeringEnvironment {
 export interface PeeringGcp {
     /**
      * The Import Custom Routes option enables connectivity to a Confluent Cloud cluster in Google Cloud from customer premise or other clouds, such as AWS and Azure, through a customer VPC that is peered with Confluent Cloud in the same region. Defaults to `false`. Learn more about considerations / limitations of the Import Custom Routes option [here](https://docs.confluent.io/cloud/current/networking/peering/gcp-peering.html#import-custom-routes).
+     *
+     * > **Note:** Exactly one from the `aws`, `azure`, and `gcp` configuration blocks must be specified.
+     *
+     * > **Note:** Learn more about VPC Peering requirements on AWS [here](https://docs.confluent.io/cloud/current/networking/peering/aws-peering.html#vpc-peering-on-aws).
+     *
+     * > **Note:** Learn more about VNet Peering requirements on Azure [here](https://docs.confluent.io/cloud/current/networking/peering/azure-peering.html#vnet-peering-on-az).
+     *
+     * > **Note:** Learn more about VPC Peering requirements on Google Cloud Platform [here](https://docs.confluent.io/cloud/current/networking/peering/gcp-peering.html#vpc-peering-on-gcp).
      */
     importCustomRoutes?: pulumi.Input<boolean>;
     /**
@@ -1189,6 +1243,12 @@ export interface PrivateLinkAccessEnvironment {
 export interface PrivateLinkAccessGcp {
     /**
      * The GCP project ID to allow for Private Service Connect access. You can find your Google Cloud Project ID under **Project ID** section of your [Google Cloud Console dashboard](https://console.cloud.google.com/home/dashboard).
+     *
+     * > **Note:** Exactly one from the `aws`, `azure`, `gcp` configuration blocks must be specified.
+     *
+     * > **Note:** Learn more about Private Link Access limitations on AWS [here](https://docs.confluent.io/cloud/current/networking/private-links/aws-privatelink.html#limitations).
+     *
+     * > **Note:** Learn more about Private Link Access limitations on Azure [here](https://docs.confluent.io/cloud/current/networking/private-links/azure-privatelink.html#limitations).
      */
     project: pulumi.Input<string>;
 }
@@ -1203,9 +1263,6 @@ export interface SchemaCredentials {
      * The Schema Registry API Key.
      */
     key: pulumi.Input<string>;
-    /**
-     * The Schema Registry API Secret.
-     */
     secret: pulumi.Input<string>;
 }
 export interface SchemaRegistryClusterConfigCredentials {
@@ -1213,9 +1270,6 @@ export interface SchemaRegistryClusterConfigCredentials {
      * The Schema Registry API Key.
      */
     key: pulumi.Input<string>;
-    /**
-     * The Schema Registry API Secret.
-     */
     secret: pulumi.Input<string>;
 }
 export interface SchemaRegistryClusterConfigSchemaRegistryCluster {
@@ -1235,9 +1289,6 @@ export interface SchemaRegistryClusterModeCredentials {
      * The Schema Registry API Key.
      */
     key: pulumi.Input<string>;
-    /**
-     * The Schema Registry API Secret.
-     */
     secret: pulumi.Input<string>;
 }
 export interface SchemaRegistryClusterModeSchemaRegistryCluster {
@@ -1277,9 +1328,6 @@ export interface SubjectConfigCredentials {
      * The Schema Registry API Key.
      */
     key: pulumi.Input<string>;
-    /**
-     * The Schema Registry API Secret.
-     */
     secret: pulumi.Input<string>;
 }
 export interface SubjectConfigSchemaRegistryCluster {
@@ -1293,9 +1341,6 @@ export interface SubjectModeCredentials {
      * The Schema Registry API Key.
      */
     key: pulumi.Input<string>;
-    /**
-     * The Schema Registry API Secret.
-     */
     secret: pulumi.Input<string>;
 }
 export interface SubjectModeSchemaRegistryCluster {
@@ -1343,6 +1388,8 @@ export interface TransitGatewayAttachmentAws {
     ramResourceShareArn: pulumi.Input<string>;
     /**
      * List of destination routes for traffic from Confluent VPC to customer VPC via Transit Gateway.
+     *
+     * > **Note:** Learn more about Transit Gateway Attachment limitations on AWS [here](https://docs.confluent.io/cloud/current/networking/aws-transit-gateway.html#limitations).
      */
     routes: pulumi.Input<pulumi.Input<string>[]>;
     /**

package/types/output.d.ts

@@ -83,9 +83,6 @@ export interface BusinessMetadataCredentials {
      * The Schema Registry API Key.
      */
     key: string;
-    /**
-     * The Schema Registry API Secret.
-     */
     secret: string;
 }
 export interface BusinessMetadataSchemaRegistryCluster {
@@ -198,7 +195,9 @@ export interface GetBusinessMetadataAttributeDefinition {
      */
     isOptional: boolean;
     /**
-     * The name of the Business Metadata, for example, `PII`.
+     * The name of the Business Metadata, for example, `PII`. The name must not be empty and consist of a letter followed by a sequence of letter, number, space, or _ characters.
+     *
+     * > **Note:** A Schema Registry API key consists of a key and a secret. Schema Registry API keys are required to interact with Schema Registry clusters in Confluent Cloud. Each Schema Registry API key is valid for one specific Schema Registry cluster.
      */
     name: string;
     /**
@@ -219,6 +218,8 @@ export interface GetBusinessMetadataBindingCredentials {
     key: string;
     /**
      * The Schema Registry API Secret.
+     *
+     * > **Note:** A Schema Registry API key consists of a key and a secret. Schema Registry API keys are required to interact with Schema Registry clusters in Confluent Cloud. Each Schema Registry API key is valid for one specific Schema Registry cluster.
      */
     secret: string;
 }
@@ -275,6 +276,8 @@ export interface GetByokKeyAzure {
 export interface GetIdentityPoolIdentityProvider {
     /**
      * The ID of the Identity Provider associated with the Identity Pool, for example, `op-abc123`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
@@ -317,6 +320,8 @@ export interface GetKafkaClusterBasic {
 export interface GetKafkaClusterByokKey {
     /**
      * The ID of the Environment that the Kafka cluster belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
@@ -337,12 +342,16 @@ export interface GetKafkaClusterDedicated {
 export interface GetKafkaClusterEnvironment {
     /**
      * The ID of the Environment that the Kafka cluster belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
 export interface GetKafkaClusterNetwork {
     /**
      * The ID of the Environment that the Kafka cluster belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
@@ -353,9 +362,6 @@ export interface GetKafkaTopicCredentials {
      * The Kafka API Key.
      */
     key: string;
-    /**
-     * The Kafka API Secret.
-     */
     secret: string;
 }
 export interface GetKafkaTopicKafkaCluster {
@@ -367,18 +373,24 @@ export interface GetKafkaTopicKafkaCluster {
 export interface GetKsqlClusterCredentialIdentity {
     /**
      * The ID of the Environment that the ksqlDB cluster belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
 export interface GetKsqlClusterEnvironment {
     /**
      * The ID of the Environment that the ksqlDB cluster belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
 export interface GetKsqlClusterKafkaCluster {
     /**
      * The ID of the Environment that the ksqlDB cluster belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
@@ -415,6 +427,8 @@ export interface GetNetworkDnsConfig {
 export interface GetNetworkEnvironment {
     /**
      * The ID of the Environment that the Network belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
@@ -519,6 +533,8 @@ export interface GetPeeringAzure {
 export interface GetPeeringEnvironment {
     /**
      * The ID of the Environment that the Peering belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
@@ -539,6 +555,8 @@ export interface GetPeeringGcp {
 export interface GetPeeringNetwork {
     /**
      * The ID of the Environment that the Peering belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
@@ -557,6 +575,8 @@ export interface GetPrivateLinkAccessAzure {
 export interface GetPrivateLinkAccessEnvironment {
     /**
      * The ID of the Environment that the Private Link Access belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
@@ -569,6 +589,8 @@ export interface GetPrivateLinkAccessGcp {
 export interface GetPrivateLinkAccessNetwork {
     /**
      * The ID of the Environment that the Private Link Access belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
@@ -601,6 +623,8 @@ export interface GetSchemaRegistryClusterConfigSchemaRegistryCluster {
 export interface GetSchemaRegistryClusterEnvironment {
     /**
      * The ID of the Environment that the Schema Registry cluster belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
@@ -611,6 +635,8 @@ export interface GetSchemaRegistryClusterModeCredentials {
     key: string;
     /**
      * The Schema Registry API Secret.
+     *
+     * > **Note:** A Schema Registry API key consists of a key and a secret. Schema Registry API keys are required to interact with Schema Registry clusters in Confluent Cloud. Each Schema Registry API key is valid for one specific Schema Registry cluster.
      */
     secret: string;
 }
@@ -623,6 +649,8 @@ export interface GetSchemaRegistryClusterModeSchemaRegistryCluster {
 export interface GetSchemaRegistryClusterRegion {
     /**
      * The ID of the Environment that the Schema Registry cluster belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
@@ -801,12 +829,16 @@ export interface GetTransitGatewayAttachmentAw {
 export interface GetTransitGatewayAttachmentEnvironment {
     /**
      * The ID of the Environment that the Transit Gateway Attachment belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
 export interface GetTransitGatewayAttachmentNetwork {
     /**
      * The ID of the Environment that the Transit Gateway Attachment belongs to, for example, `env-xyz456`.
+     *
+     * > **Note:** Exactly one from the `id` and `displayName` attributes must be specified.
      */
     id: string;
 }
@@ -847,12 +879,20 @@ export interface KafkaAclKafkaCluster {
 export interface KafkaClientQuotaEnvironment {
     /**
      * The ID of the Environment that the corresponding Kafka Cluster belongs to, for example, `env-abc123`.
+     *
+     * > **Note:** Each principal assigned to a quota receives the full amount of the quota, meaning the quota is not shared by the principals it is assigned. For example, if a 10 MBps ingress quota is applied to Principals 1 and 2, Principal 1 can produce at most 10 MBps, independently of Principal 2.
+     *
+     * > **Note:** Define a throughput maximum, but do not guarantee a throughput floor. Applications are rate-limited through the use of the Kafka throttling mechanism. Kafka asks the client to wait before sending more data and mutes the channel, which appears as latency to the client application.
      */
     id: string;
 }
 export interface KafkaClientQuotaKafkaCluster {
     /**
      * The ID of the Environment that the corresponding Kafka Cluster belongs to, for example, `env-abc123`.
+     *
+     * > **Note:** Each principal assigned to a quota receives the full amount of the quota, meaning the quota is not shared by the principals it is assigned. For example, if a 10 MBps ingress quota is applied to Principals 1 and 2, Principal 1 can produce at most 10 MBps, independently of Principal 2.
+     *
+     * > **Note:** Define a throughput maximum, but do not guarantee a throughput floor. Applications are rate-limited through the use of the Kafka throttling mechanism. Kafka asks the client to wait before sending more data and mutes the channel, which appears as latency to the client application.
      */
     id: string;
 }
@@ -881,6 +921,10 @@ export interface KafkaClusterConfigCredentials {
     key: string;
     /**
      * The Kafka API Secret.
+     *
+     * > **Note:** A Kafka API key consists of a key and a secret. Kafka API keys are required to interact with Kafka clusters in Confluent Cloud. Each Kafka API key is valid for one specific Kafka cluster.
+     *
+     * > **Note:** Use Option #2 to simplify the key rotation process. When using Option #1, to rotate a Kafka API key, create a new Kafka API key, update the `credentials` block in all configuration files to use the new Kafka API key, run `pulumi up -target="confluent_kafka_cluster_config.orders"`, and remove the old Kafka API key. Alternatively, in case the old Kafka API Key was deleted already, you might need to run `pulumi preview -refresh=false -target="confluent_kafka_cluster_config.orders" -out=rotate-kafka-api-key` and `pulumi up rotate-kafka-api-key` instead.
      */
     secret: string;
 }
@@ -891,9 +935,6 @@ export interface KafkaClusterConfigKafkaCluster {
     id: string;
 }
 export interface KafkaClusterDedicated {
-    /**
-     * The number of Confluent Kafka Units (CKUs) for Dedicated cluster types. The minimum number of CKUs for `SINGLE_ZONE` dedicated clusters is `1` whereas `MULTI_ZONE` dedicated clusters must have more than `2` CKUs.
-     */
     cku: number;
     encryptionKey?: string;
     /**
@@ -958,6 +999,10 @@ export interface KafkaTopicCredentials {
     key: string;
     /**
      * The Kafka API Secret.
+     *
+     * > **Note:** A Kafka API key consists of a key and a secret. Kafka API keys are required to interact with Kafka clusters in Confluent Cloud. Each Kafka API key is valid for one specific Kafka cluster.
+     *
+     * > **Note:** Use Option #2 to simplify the key rotation process. When using Option #1, to rotate a Kafka API key, create a new Kafka API key, update the `credentials` block in all configuration files to use the new Kafka API key, run `pulumi up -target="confluent_kafka_topic.orders"`, and remove the old Kafka API key. Alternatively, in case the old Kafka API Key was deleted already, you might need to run `pulumi preview -refresh=false -target="confluent_kafka_topic.orders" -out=rotate-kafka-api-key` and `pulumi up rotate-kafka-api-key` instead.
      */
     secret: string;
 }
@@ -1080,6 +1125,8 @@ export interface NetworkLinkServiceNetwork {
 export interface NetworkZoneInfo {
     /**
      * The IPv4 CIDR block to be used for the network. Must be `/27`. Required for VPC peering and AWS TransitGateway.
+     *
+     * > **Note:** The `zoneInfo` configuration block and `reservedCidr` are in a [Limited Availability lifecycle stage](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy), and it's available only for AWS networks with PRIVATELINK connection type.
      */
     cidr: string;
     /**
@@ -1128,6 +1175,14 @@ export interface PeeringEnvironment {
 export interface PeeringGcp {
     /**
      * The Import Custom Routes option enables connectivity to a Confluent Cloud cluster in Google Cloud from customer premise or other clouds, such as AWS and Azure, through a customer VPC that is peered with Confluent Cloud in the same region. Defaults to `false`. Learn more about considerations / limitations of the Import Custom Routes option [here](https://docs.confluent.io/cloud/current/networking/peering/gcp-peering.html#import-custom-routes).
+     *
+     * > **Note:** Exactly one from the `aws`, `azure`, and `gcp` configuration blocks must be specified.
+     *
+     * > **Note:** Learn more about VPC Peering requirements on AWS [here](https://docs.confluent.io/cloud/current/networking/peering/aws-peering.html#vpc-peering-on-aws).
+     *
+     * > **Note:** Learn more about VNet Peering requirements on Azure [here](https://docs.confluent.io/cloud/current/networking/peering/azure-peering.html#vnet-peering-on-az).
+     *
+     * > **Note:** Learn more about VPC Peering requirements on Google Cloud Platform [here](https://docs.confluent.io/cloud/current/networking/peering/gcp-peering.html#vpc-peering-on-gcp).
      */
     importCustomRoutes?: boolean;
     /**
@@ -1166,6 +1221,12 @@ export interface PrivateLinkAccessEnvironment {
 export interface PrivateLinkAccessGcp {
     /**
      * The GCP project ID to allow for Private Service Connect access. You can find your Google Cloud Project ID under **Project ID** section of your [Google Cloud Console dashboard](https://console.cloud.google.com/home/dashboard).
+     *
+     * > **Note:** Exactly one from the `aws`, `azure`, `gcp` configuration blocks must be specified.
+     *
+     * > **Note:** Learn more about Private Link Access limitations on AWS [here](https://docs.confluent.io/cloud/current/networking/private-links/aws-privatelink.html#limitations).
+     *
+     * > **Note:** Learn more about Private Link Access limitations on Azure [here](https://docs.confluent.io/cloud/current/networking/private-links/azure-privatelink.html#limitations).
      */
     project: string;
 }
@@ -1180,9 +1241,6 @@ export interface SchemaCredentials {
      * The Schema Registry API Key.
      */
     key: string;
-    /**
-     * The Schema Registry API Secret.
-     */
     secret: string;
 }
 export interface SchemaRegistryClusterConfigCredentials {
@@ -1190,9 +1248,6 @@ export interface SchemaRegistryClusterConfigCredentials {
      * The Schema Registry API Key.
      */
     key: string;
-    /**
-     * The Schema Registry API Secret.
-     */
     secret: string;
 }
 export interface SchemaRegistryClusterConfigSchemaRegistryCluster {
@@ -1212,9 +1267,6 @@ export interface SchemaRegistryClusterModeCredentials {
      * The Schema Registry API Key.
      */
     key: string;
-    /**
-     * The Schema Registry API Secret.
-     */
     secret: string;
 }
 export interface SchemaRegistryClusterModeSchemaRegistryCluster {
@@ -1254,9 +1306,6 @@ export interface SubjectConfigCredentials {
      * The Schema Registry API Key.
      */
     key: string;
-    /**
-     * The Schema Registry API Secret.
-     */
     secret: string;
 }
 export interface SubjectConfigSchemaRegistryCluster {
@@ -1270,9 +1319,6 @@ export interface SubjectModeCredentials {
      * The Schema Registry API Key.
      */
     key: string;
-    /**
-     * The Schema Registry API Secret.
-     */
     secret: string;
 }
 export interface SubjectModeSchemaRegistryCluster {
@@ -1320,6 +1366,8 @@ export interface TransitGatewayAttachmentAws {
     ramResourceShareArn: string;
     /**
      * List of destination routes for traffic from Confluent VPC to customer VPC via Transit Gateway.
+     *
+     * > **Note:** Learn more about Transit Gateway Attachment limitations on AWS [here](https://docs.confluent.io/cloud/current/networking/aws-transit-gateway.html#limitations).
      */
     routes: string[];
     /**