@pulumi/gcp 9.25.0 → 9.26.0

package/iam/folderAccessPolicy.d.ts

@@ -0,0 +1,333 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "../types/input";
+import * as outputs from "../types/output";
+/**
+ * Represents an IAM v3 Access Policy parented by a Folder. This policy defines rules
+ * that allow or deny access to resources within the specified folder based on principals and conditions.
+ * See the Cloud IAM documentation for more details on Access Policies.
+ *
+ * > **Warning:** This resource is in beta, and should be used with the terraform-provider-google-beta provider.
+ * See Provider Versions for more details on beta resources.
+ *
+ * To get more information about FolderAccessPolicy, see:
+ *
+ * * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3beta/folders.locations.accessPolicies)
+ *
+ * ## Example Usage
+ *
+ * ### Access Policy Folder Minimal
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as gcp from "@pulumi/gcp";
+ * import * as time from "@pulumiverse/time";
+ *
+ * const folder = new gcp.organizations.Folder("folder", {
+ *     displayName: "ap-folder-",
+ *     parent: "organizations/123456789",
+ *     deletionProtection: false,
+ * });
+ * const project = new gcp.organizations.Project("project", {
+ *     projectId: "ap-project-",
+ *     name: "ap-project-",
+ *     folderId: folder.folderId,
+ *     billingAccount: "000000-0000000-0000000-000000",
+ *     deletionPolicy: "DELETE",
+ * }, {
+ *     dependsOn: [folder],
+ * });
+ * const iamApi = new gcp.projects.Service("iam_api", {
+ *     project: project.projectId,
+ *     service: "iam.googleapis.com",
+ *     disableOnDestroy: false,
+ * }, {
+ *     dependsOn: [project],
+ * });
+ * const waitForPropagation = new time.Sleep("wait_for_propagation", {createDuration: "30s"}, {
+ *     dependsOn: [
+ *         folder,
+ *         iamApi,
+ *     ],
+ * });
+ * const testSa = new gcp.serviceaccount.Account("test_sa", {
+ *     accountId: "svc-acc-",
+ *     displayName: "Test Service Account for Access Policy",
+ *     project: project.projectId,
+ * }, {
+ *     dependsOn: [waitForPropagation],
+ * });
+ * const example = new gcp.iam.FolderAccessPolicy("example", {
+ *     folder: folder.folderId,
+ *     location: "global",
+ *     accessPolicyId: "my-folder-policy-",
+ *     details: {
+ *         rules: [{
+ *             effect: "ALLOW",
+ *             principals: [pulumi.interpolate`principal://iam.googleapis.com/projects/-/serviceAccounts/${testSa.email}`],
+ *             operation: {
+ *                 permissions: ["eventarc.googleapis.com/messageBuses.publish"],
+ *             },
+ *         }],
+ *     },
+ * }, {
+ *     dependsOn: [
+ *         waitForPropagation,
+ *         testSa,
+ *     ],
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * FolderAccessPolicy can be imported using any of these accepted formats:
+ *
+ * * `folders/{{folder}}/locations/{{location}}/accessPolicies/{{access_policy_id}}`
+ * * `{{folder}}/{{location}}/{{access_policy_id}}`
+ *
+ * When using the `pulumi import` command, FolderAccessPolicy can be imported using one of the formats above. For example:
+ *
+ * ```sh
+ * $ pulumi import gcp:iam/folderAccessPolicy:FolderAccessPolicy default folders/{{folder}}/locations/{{location}}/accessPolicies/{{access_policy_id}}
+ * $ pulumi import gcp:iam/folderAccessPolicy:FolderAccessPolicy default {{folder}}/{{location}}/{{access_policy_id}}
+ * ```
+ */
+export declare class FolderAccessPolicy extends pulumi.CustomResource {
+    /**
+     * Get an existing FolderAccessPolicy resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: FolderAccessPolicyState, opts?: pulumi.CustomResourceOptions): FolderAccessPolicy;
+    /**
+     * Returns true if the given object is an instance of FolderAccessPolicy.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is FolderAccessPolicy;
+    /**
+     * The ID to use for the access policy, which
+     * will become the final component of the access policy's
+     * resource name.
+     * This value must start with a lowercase letter followed by up to 62
+     * lowercase letters, numbers, hyphens, or dots. Pattern,
+     * /a-z{2,62}/.
+     * This value must be unique among all access policies with the same parent.
+     */
+    readonly accessPolicyId: pulumi.Output<string>;
+    /**
+     * User defined annotations. See https://google.aip.dev/148#annotations for
+     * more details such as format and size limitations
+     * **Note**: This field is non-authoritative, and will only manage the annotations present in your configuration.
+     * Please refer to the field `effectiveAnnotations` for all of the annotations present on the resource.
+     */
+    readonly annotations: pulumi.Output<{
+        [key: string]: string;
+    } | undefined>;
+    /**
+     * The time when the access policy was created.
+     */
+    readonly createTime: pulumi.Output<string>;
+    /**
+     * Whether Terraform will be prevented from destroying the resource. Defaults to DELETE.
+     * When a 'terraform destroy' or 'pulumi up' would delete the resource,
+     * the command will fail if this field is set to "PREVENT" in Terraform state.
+     * When set to "ABANDON", the command will remove the resource from Terraform
+     * management without updating or deleting the resource in the API.
+     * When set to "DELETE", deleting the resource is allowed.
+     */
+    readonly deletionPolicy: pulumi.Output<string>;
+    /**
+     * Access policy details.
+     * Structure is documented below.
+     */
+    readonly details: pulumi.Output<outputs.iam.FolderAccessPolicyDetails | undefined>;
+    /**
+     * The description of the access policy. Must be less than
+     * or equal to 63 characters.
+     */
+    readonly displayName: pulumi.Output<string | undefined>;
+    /**
+     * All of annotations (key/value pairs) present on the resource in GCP, including the annotations configured through Terraform, other clients and services.
+     */
+    readonly effectiveAnnotations: pulumi.Output<{
+        [key: string]: string;
+    }>;
+    /**
+     * The etag for the access policy.
+     * If this is provided on update, it must match the server's etag.
+     */
+    readonly etag: pulumi.Output<string>;
+    /**
+     * Resource ID segment making up resource `name`. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
+     */
+    readonly folder: pulumi.Output<string>;
+    /**
+     * Resource ID segment making up resource `name`. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
+     */
+    readonly location: pulumi.Output<string>;
+    /**
+     * Identifier. The resource name of the access policy.
+     * The following formats are supported:
+     * * `projects/{project_id}/locations/{location}/accessPolicies/{policy_id}`
+     * * `projects/{project_number}/locations/{location}/accessPolicies/{policy_id}`
+     * * `folders/{folder_id}/locations/{location}/accessPolicies/{policy_id}`
+     * * `organizations/{organization_id}/locations/{location}/accessPolicies/{policy_id}`
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * The globally unique ID of the access policy.
+     */
+    readonly uid: pulumi.Output<string>;
+    /**
+     * The time when the access policy was most recently
+     * updated.
+     */
+    readonly updateTime: pulumi.Output<string>;
+    /**
+     * Create a FolderAccessPolicy resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: FolderAccessPolicyArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering FolderAccessPolicy resources.
+ */
+export interface FolderAccessPolicyState {
+    /**
+     * The ID to use for the access policy, which
+     * will become the final component of the access policy's
+     * resource name.
+     * This value must start with a lowercase letter followed by up to 62
+     * lowercase letters, numbers, hyphens, or dots. Pattern,
+     * /a-z{2,62}/.
+     * This value must be unique among all access policies with the same parent.
+     */
+    accessPolicyId?: pulumi.Input<string | undefined>;
+    /**
+     * User defined annotations. See https://google.aip.dev/148#annotations for
+     * more details such as format and size limitations
+     * **Note**: This field is non-authoritative, and will only manage the annotations present in your configuration.
+     * Please refer to the field `effectiveAnnotations` for all of the annotations present on the resource.
+     */
+    annotations?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    } | undefined>;
+    /**
+     * The time when the access policy was created.
+     */
+    createTime?: pulumi.Input<string | undefined>;
+    /**
+     * Whether Terraform will be prevented from destroying the resource. Defaults to DELETE.
+     * When a 'terraform destroy' or 'pulumi up' would delete the resource,
+     * the command will fail if this field is set to "PREVENT" in Terraform state.
+     * When set to "ABANDON", the command will remove the resource from Terraform
+     * management without updating or deleting the resource in the API.
+     * When set to "DELETE", deleting the resource is allowed.
+     */
+    deletionPolicy?: pulumi.Input<string | undefined>;
+    /**
+     * Access policy details.
+     * Structure is documented below.
+     */
+    details?: pulumi.Input<inputs.iam.FolderAccessPolicyDetails | undefined>;
+    /**
+     * The description of the access policy. Must be less than
+     * or equal to 63 characters.
+     */
+    displayName?: pulumi.Input<string | undefined>;
+    /**
+     * All of annotations (key/value pairs) present on the resource in GCP, including the annotations configured through Terraform, other clients and services.
+     */
+    effectiveAnnotations?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    } | undefined>;
+    /**
+     * The etag for the access policy.
+     * If this is provided on update, it must match the server's etag.
+     */
+    etag?: pulumi.Input<string | undefined>;
+    /**
+     * Resource ID segment making up resource `name`. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
+     */
+    folder?: pulumi.Input<string | undefined>;
+    /**
+     * Resource ID segment making up resource `name`. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
+     */
+    location?: pulumi.Input<string | undefined>;
+    /**
+     * Identifier. The resource name of the access policy.
+     * The following formats are supported:
+     * * `projects/{project_id}/locations/{location}/accessPolicies/{policy_id}`
+     * * `projects/{project_number}/locations/{location}/accessPolicies/{policy_id}`
+     * * `folders/{folder_id}/locations/{location}/accessPolicies/{policy_id}`
+     * * `organizations/{organization_id}/locations/{location}/accessPolicies/{policy_id}`
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * The globally unique ID of the access policy.
+     */
+    uid?: pulumi.Input<string | undefined>;
+    /**
+     * The time when the access policy was most recently
+     * updated.
+     */
+    updateTime?: pulumi.Input<string | undefined>;
+}
+/**
+ * The set of arguments for constructing a FolderAccessPolicy resource.
+ */
+export interface FolderAccessPolicyArgs {
+    /**
+     * The ID to use for the access policy, which
+     * will become the final component of the access policy's
+     * resource name.
+     * This value must start with a lowercase letter followed by up to 62
+     * lowercase letters, numbers, hyphens, or dots. Pattern,
+     * /a-z{2,62}/.
+     * This value must be unique among all access policies with the same parent.
+     */
+    accessPolicyId: pulumi.Input<string>;
+    /**
+     * User defined annotations. See https://google.aip.dev/148#annotations for
+     * more details such as format and size limitations
+     * **Note**: This field is non-authoritative, and will only manage the annotations present in your configuration.
+     * Please refer to the field `effectiveAnnotations` for all of the annotations present on the resource.
+     */
+    annotations?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    } | undefined>;
+    /**
+     * Whether Terraform will be prevented from destroying the resource. Defaults to DELETE.
+     * When a 'terraform destroy' or 'pulumi up' would delete the resource,
+     * the command will fail if this field is set to "PREVENT" in Terraform state.
+     * When set to "ABANDON", the command will remove the resource from Terraform
+     * management without updating or deleting the resource in the API.
+     * When set to "DELETE", deleting the resource is allowed.
+     */
+    deletionPolicy?: pulumi.Input<string | undefined>;
+    /**
+     * Access policy details.
+     * Structure is documented below.
+     */
+    details?: pulumi.Input<inputs.iam.FolderAccessPolicyDetails | undefined>;
+    /**
+     * The description of the access policy. Must be less than
+     * or equal to 63 characters.
+     */
+    displayName?: pulumi.Input<string | undefined>;
+    /**
+     * Resource ID segment making up resource `name`. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
+     */
+    folder: pulumi.Input<string>;
+    /**
+     * Resource ID segment making up resource `name`. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
+     */
+    location: pulumi.Input<string>;
+}
+//# sourceMappingURL=folderAccessPolicy.d.ts.map

package/iam/folderAccessPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"folderAccessPolicy.d.ts","sourceRoot":"","sources":["../../iam/folderAccessPolicy.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAG3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyFG;AACH,qBAAa,kBAAmB,SAAQ,MAAM,CAAC,cAAc;IACzD;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,uBAAuB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,kBAAkB;IAOtJ;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,kBAAkB;IAO7D;;;;;;;;OAQG;IACH,SAAwB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9D;;;;;OAKG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAC,GAAG,SAAS,CAAC,CAAC;IACxF;;OAEG;IACH,SAAgC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClE;;;;;;;OAOG;IACH,SAAwB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9D;;;OAGG;IACH,SAAwB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAC;IAClG;;;OAGG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvE;;OAEG;IACH,SAAgC,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAC,CAAC,CAAC;IAC7F;;;OAGG;IACH,SAAgC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD;;OAEG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxD;;;;;;;OAOG;IACH,SAAgC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D;;OAEG;IACH,SAAgC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D;;;OAGG;IACH,SAAgC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAElE;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CA+C9F;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACpC;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAC,GAAG,SAAS,CAAC,CAAC;IAC9E;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAC;IACzE;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAC,GAAG,SAAS,CAAC,CAAC;IACvF;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C;;;;;;;OAOG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CACjD;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC;;;;;;;;OAQG;IACH,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAC,GAAG,SAAS,CAAC,CAAC;IAC9E;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAC;IACzE;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAClC"}

package/iam/folderAccessPolicy.js

@@ -0,0 +1,195 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FolderAccessPolicy = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const utilities = __importStar(require("../utilities"));
+/**
+ * Represents an IAM v3 Access Policy parented by a Folder. This policy defines rules
+ * that allow or deny access to resources within the specified folder based on principals and conditions.
+ * See the Cloud IAM documentation for more details on Access Policies.
+ *
+ * > **Warning:** This resource is in beta, and should be used with the terraform-provider-google-beta provider.
+ * See Provider Versions for more details on beta resources.
+ *
+ * To get more information about FolderAccessPolicy, see:
+ *
+ * * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3beta/folders.locations.accessPolicies)
+ *
+ * ## Example Usage
+ *
+ * ### Access Policy Folder Minimal
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as gcp from "@pulumi/gcp";
+ * import * as time from "@pulumiverse/time";
+ *
+ * const folder = new gcp.organizations.Folder("folder", {
+ *     displayName: "ap-folder-",
+ *     parent: "organizations/123456789",
+ *     deletionProtection: false,
+ * });
+ * const project = new gcp.organizations.Project("project", {
+ *     projectId: "ap-project-",
+ *     name: "ap-project-",
+ *     folderId: folder.folderId,
+ *     billingAccount: "000000-0000000-0000000-000000",
+ *     deletionPolicy: "DELETE",
+ * }, {
+ *     dependsOn: [folder],
+ * });
+ * const iamApi = new gcp.projects.Service("iam_api", {
+ *     project: project.projectId,
+ *     service: "iam.googleapis.com",
+ *     disableOnDestroy: false,
+ * }, {
+ *     dependsOn: [project],
+ * });
+ * const waitForPropagation = new time.Sleep("wait_for_propagation", {createDuration: "30s"}, {
+ *     dependsOn: [
+ *         folder,
+ *         iamApi,
+ *     ],
+ * });
+ * const testSa = new gcp.serviceaccount.Account("test_sa", {
+ *     accountId: "svc-acc-",
+ *     displayName: "Test Service Account for Access Policy",
+ *     project: project.projectId,
+ * }, {
+ *     dependsOn: [waitForPropagation],
+ * });
+ * const example = new gcp.iam.FolderAccessPolicy("example", {
+ *     folder: folder.folderId,
+ *     location: "global",
+ *     accessPolicyId: "my-folder-policy-",
+ *     details: {
+ *         rules: [{
+ *             effect: "ALLOW",
+ *             principals: [pulumi.interpolate`principal://iam.googleapis.com/projects/-/serviceAccounts/${testSa.email}`],
+ *             operation: {
+ *                 permissions: ["eventarc.googleapis.com/messageBuses.publish"],
+ *             },
+ *         }],
+ *     },
+ * }, {
+ *     dependsOn: [
+ *         waitForPropagation,
+ *         testSa,
+ *     ],
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * FolderAccessPolicy can be imported using any of these accepted formats:
+ *
+ * * `folders/{{folder}}/locations/{{location}}/accessPolicies/{{access_policy_id}}`
+ * * `{{folder}}/{{location}}/{{access_policy_id}}`
+ *
+ * When using the `pulumi import` command, FolderAccessPolicy can be imported using one of the formats above. For example:
+ *
+ * ```sh
+ * $ pulumi import gcp:iam/folderAccessPolicy:FolderAccessPolicy default folders/{{folder}}/locations/{{location}}/accessPolicies/{{access_policy_id}}
+ * $ pulumi import gcp:iam/folderAccessPolicy:FolderAccessPolicy default {{folder}}/{{location}}/{{access_policy_id}}
+ * ```
+ */
+class FolderAccessPolicy extends pulumi.CustomResource {
+    /**
+     * Get an existing FolderAccessPolicy resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new FolderAccessPolicy(name, state, { ...opts, id: id });
+    }
+    /** @internal */
+    static __pulumiType = 'gcp:iam/folderAccessPolicy:FolderAccessPolicy';
+    /**
+     * Returns true if the given object is an instance of FolderAccessPolicy.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === FolderAccessPolicy.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["accessPolicyId"] = state?.accessPolicyId;
+            resourceInputs["annotations"] = state?.annotations;
+            resourceInputs["createTime"] = state?.createTime;
+            resourceInputs["deletionPolicy"] = state?.deletionPolicy;
+            resourceInputs["details"] = state?.details;
+            resourceInputs["displayName"] = state?.displayName;
+            resourceInputs["effectiveAnnotations"] = state?.effectiveAnnotations;
+            resourceInputs["etag"] = state?.etag;
+            resourceInputs["folder"] = state?.folder;
+            resourceInputs["location"] = state?.location;
+            resourceInputs["name"] = state?.name;
+            resourceInputs["uid"] = state?.uid;
+            resourceInputs["updateTime"] = state?.updateTime;
+        }
+        else {
+            const args = argsOrState;
+            if (args?.accessPolicyId === undefined && !opts.urn) {
+                throw new Error("Missing required property 'accessPolicyId'");
+            }
+            if (args?.folder === undefined && !opts.urn) {
+                throw new Error("Missing required property 'folder'");
+            }
+            if (args?.location === undefined && !opts.urn) {
+                throw new Error("Missing required property 'location'");
+            }
+            resourceInputs["accessPolicyId"] = args?.accessPolicyId;
+            resourceInputs["annotations"] = args?.annotations;
+            resourceInputs["deletionPolicy"] = args?.deletionPolicy;
+            resourceInputs["details"] = args?.details;
+            resourceInputs["displayName"] = args?.displayName;
+            resourceInputs["folder"] = args?.folder;
+            resourceInputs["location"] = args?.location;
+            resourceInputs["createTime"] = undefined /*out*/;
+            resourceInputs["effectiveAnnotations"] = undefined /*out*/;
+            resourceInputs["etag"] = undefined /*out*/;
+            resourceInputs["name"] = undefined /*out*/;
+            resourceInputs["uid"] = undefined /*out*/;
+            resourceInputs["updateTime"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(FolderAccessPolicy.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.FolderAccessPolicy = FolderAccessPolicy;
+//# sourceMappingURL=folderAccessPolicy.js.map

package/iam/folderAccessPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"folderAccessPolicy.js","sourceRoot":"","sources":["../../iam/folderAccessPolicy.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AAGzC,wDAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyFG;AACH,MAAa,kBAAmB,SAAQ,MAAM,CAAC,cAAc;IACzD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA+B,EAAE,IAAmC;QAC7H,OAAO,IAAI,kBAAkB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,+CAA+C,CAAC;IAEtF;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,kBAAkB,CAAC,YAAY,CAAC;IACnE,CAAC;IAsFD,YAAY,IAAY,EAAE,WAA8D,EAAE,IAAmC;QACzH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAkD,CAAC;YACjE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC;YACnC,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;SACpD;aAAM;YACH,MAAM,IAAI,GAAG,WAAiD,CAAC;YAC/D,IAAI,IAAI,EAAE,cAAc,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;aACjE;YACD,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,sBAAsB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3D,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACpD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,kBAAkB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACvE,CAAC;;AA7JL,gDA8JC"}

package/iam/index.d.ts

@@ -4,6 +4,9 @@ export declare const AccessBoundaryPolicy: typeof import("./accessBoundaryPolicy
 export { DenyPolicyArgs, DenyPolicyState } from "./denyPolicy";
 export type DenyPolicy = import("./denyPolicy").DenyPolicy;
 export declare const DenyPolicy: typeof import("./denyPolicy").DenyPolicy;
+export { FolderAccessPolicyArgs, FolderAccessPolicyState } from "./folderAccessPolicy";
+export type FolderAccessPolicy = import("./folderAccessPolicy").FolderAccessPolicy;
+export declare const FolderAccessPolicy: typeof import("./folderAccessPolicy").FolderAccessPolicy;
 export { FoldersPolicyBindingArgs, FoldersPolicyBindingState } from "./foldersPolicyBinding";
 export type FoldersPolicyBinding = import("./foldersPolicyBinding").FoldersPolicyBinding;
 export declare const FoldersPolicyBinding: typeof import("./foldersPolicyBinding").FoldersPolicyBinding;
@@ -37,6 +40,9 @@ export declare const OrganizationsPolicyBinding: typeof import("./organizationsP
 export { PrincipalAccessBoundaryPolicyArgs, PrincipalAccessBoundaryPolicyState } from "./principalAccessBoundaryPolicy";
 export type PrincipalAccessBoundaryPolicy = import("./principalAccessBoundaryPolicy").PrincipalAccessBoundaryPolicy;
 export declare const PrincipalAccessBoundaryPolicy: typeof import("./principalAccessBoundaryPolicy").PrincipalAccessBoundaryPolicy;
+export { ProjectAccessPolicyArgs, ProjectAccessPolicyState } from "./projectAccessPolicy";
+export type ProjectAccessPolicy = import("./projectAccessPolicy").ProjectAccessPolicy;
+export declare const ProjectAccessPolicy: typeof import("./projectAccessPolicy").ProjectAccessPolicy;
 export { ProjectsPolicyBindingArgs, ProjectsPolicyBindingState } from "./projectsPolicyBinding";
 export type ProjectsPolicyBinding = import("./projectsPolicyBinding").ProjectsPolicyBinding;
 export declare const ProjectsPolicyBinding: typeof import("./projectsPolicyBinding").ProjectsPolicyBinding;

package/iam/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../iam/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAC7F,MAAM,MAAM,oBAAoB,GAAG,OAAO,wBAAwB,EAAE,oBAAoB,CAAC;AACzF,eAAO,MAAM,oBAAoB,EAAE,cAAc,wBAAwB,EAAE,oBAAkC,CAAC;AAG9G,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/D,MAAM,MAAM,UAAU,GAAG,OAAO,cAAc,EAAE,UAAU,CAAC;AAC3D,eAAO,MAAM,UAAU,EAAE,cAAc,cAAc,EAAE,UAAwB,CAAC;AAGhF,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAC7F,MAAM,MAAM,oBAAoB,GAAG,OAAO,wBAAwB,EAAE,oBAAoB,CAAC;AACzF,eAAO,MAAM,oBAAoB,EAAE,cAAc,wBAAwB,EAAE,oBAAkC,CAAC;AAG9G,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC1E,eAAO,MAAM,OAAO,EAAE,cAAc,WAAW,EAAE,OAAqB,CAAC;AACvE,eAAO,MAAM,aAAa,EAAE,cAAc,WAAW,EAAE,aAA2B,CAAC;AAGnF,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AACtI,eAAO,MAAM,sBAAsB,EAAE,cAAc,0BAA0B,EAAE,sBAAoC,CAAC;AACpH,eAAO,MAAM,4BAA4B,EAAE,cAAc,0BAA0B,EAAE,4BAA0C,CAAC;AAGhI,OAAO,EAAE,6BAA6B,EAAE,+BAA+B,EAAE,mCAAmC,EAAE,MAAM,6BAA6B,CAAC;AAClJ,eAAO,MAAM,yBAAyB,EAAE,cAAc,6BAA6B,EAAE,yBAAuC,CAAC;AAC7H,eAAO,MAAM,+BAA+B,EAAE,cAAc,6BAA6B,EAAE,+BAA6C,CAAC;AAGzI,OAAO,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,iCAAiC,EAAE,MAAM,2BAA2B,CAAC;AAC1I,eAAO,MAAM,uBAAuB,EAAE,cAAc,2BAA2B,EAAE,uBAAqC,CAAC;AACvH,eAAO,MAAM,6BAA6B,EAAE,cAAc,2BAA2B,EAAE,6BAA2C,CAAC;AAGnI,OAAO,EAAE,oCAAoC,EAAE,sCAAsC,EAAE,0CAA0C,EAAE,MAAM,oCAAoC,CAAC;AAC9K,eAAO,MAAM,gCAAgC,EAAE,cAAc,oCAAoC,EAAE,gCAA8C,CAAC;AAClJ,eAAO,MAAM,sCAAsC,EAAE,cAAc,oCAAoC,EAAE,sCAAoD,CAAC;AAG9J,OAAO,EAAE,mCAAmC,EAAE,qCAAqC,EAAE,yCAAyC,EAAE,MAAM,mCAAmC,CAAC;AAC1K,eAAO,MAAM,+BAA+B,EAAE,cAAc,mCAAmC,EAAE,+BAA6C,CAAC;AAC/I,eAAO,MAAM,qCAAqC,EAAE,cAAc,mCAAmC,EAAE,qCAAmD,CAAC;AAG3J,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAClE,MAAM,MAAM,WAAW,GAAG,OAAO,eAAe,EAAE,WAAW,CAAC;AAC9D,eAAO,MAAM,WAAW,EAAE,cAAc,eAAe,EAAE,WAAyB,CAAC;AAGnF,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAChG,MAAM,MAAM,qBAAqB,GAAG,OAAO,yBAAyB,EAAE,qBAAqB,CAAC;AAC5F,eAAO,MAAM,qBAAqB,EAAE,cAAc,yBAAyB,EAAE,qBAAmC,CAAC;AAGjH,OAAO,EAAE,8BAA8B,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAC/G,MAAM,MAAM,0BAA0B,GAAG,OAAO,8BAA8B,EAAE,0BAA0B,CAAC;AAC3G,eAAO,MAAM,0BAA0B,EAAE,cAAc,8BAA8B,EAAE,0BAAwC,CAAC;AAGhI,OAAO,EAAE,iCAAiC,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AACxH,MAAM,MAAM,6BAA6B,GAAG,OAAO,iCAAiC,EAAE,6BAA6B,CAAC;AACpH,eAAO,MAAM,6BAA6B,EAAE,cAAc,iCAAiC,EAAE,6BAA2C,CAAC;AAGzI,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAChG,MAAM,MAAM,qBAAqB,GAAG,OAAO,yBAAyB,EAAE,qBAAqB,CAAC;AAC5F,eAAO,MAAM,qBAAqB,EAAE,cAAc,yBAAyB,EAAE,qBAAmC,CAAC;AAGjH,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACxE,MAAM,MAAM,aAAa,GAAG,OAAO,iBAAiB,EAAE,aAAa,CAAC;AACpE,eAAO,MAAM,aAAa,EAAE,cAAc,iBAAiB,EAAE,aAA2B,CAAC;AAGzF,OAAO,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACtG,MAAM,MAAM,uBAAuB,GAAG,OAAO,2BAA2B,EAAE,uBAAuB,CAAC;AAClG,eAAO,MAAM,uBAAuB,EAAE,cAAc,2BAA2B,EAAE,uBAAqC,CAAC;AAGvH,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACnG,MAAM,MAAM,sBAAsB,GAAG,OAAO,0BAA0B,EAAE,sBAAsB,CAAC;AAC/F,eAAO,MAAM,sBAAsB,EAAE,cAAc,0BAA0B,EAAE,sBAAoC,CAAC;AAGpH,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACnG,MAAM,MAAM,sBAAsB,GAAG,OAAO,0BAA0B,EAAE,sBAAsB,CAAC;AAC/F,eAAO,MAAM,sBAAsB,EAAE,cAAc,0BAA0B,EAAE,sBAAoC,CAAC;AAGpH,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAChG,MAAM,MAAM,qBAAqB,GAAG,OAAO,yBAAyB,EAAE,qBAAqB,CAAC;AAC5F,eAAO,MAAM,qBAAqB,EAAE,cAAc,yBAAyB,EAAE,qBAAmC,CAAC;AAGjH,OAAO,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AACzG,MAAM,MAAM,wBAAwB,GAAG,OAAO,4BAA4B,EAAE,wBAAwB,CAAC;AACrG,eAAO,MAAM,wBAAwB,EAAE,cAAc,4BAA4B,EAAE,wBAAsC,CAAC;AAG1H,OAAO,EAAE,mCAAmC,EAAE,oCAAoC,EAAE,MAAM,mCAAmC,CAAC;AAC9H,MAAM,MAAM,+BAA+B,GAAG,OAAO,mCAAmC,EAAE,+BAA+B,CAAC;AAC1H,eAAO,MAAM,+BAA+B,EAAE,cAAc,mCAAmC,EAAE,+BAA6C,CAAC;AAG/I,OAAO,EAAE,kCAAkC,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAC3H,MAAM,MAAM,8BAA8B,GAAG,OAAO,kCAAkC,EAAE,8BAA8B,CAAC;AACvH,eAAO,MAAM,8BAA8B,EAAE,cAAc,kCAAkC,EAAE,8BAA4C,CAAC;AAG5I,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAC7F,MAAM,MAAM,oBAAoB,GAAG,OAAO,wBAAwB,EAAE,oBAAoB,CAAC;AACzF,eAAO,MAAM,oBAAoB,EAAE,cAAc,wBAAwB,EAAE,oBAAkC,CAAC;AAG9G,OAAO,EAAE,kCAAkC,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAC3H,MAAM,MAAM,8BAA8B,GAAG,OAAO,kCAAkC,EAAE,8BAA8B,CAAC;AACvH,eAAO,MAAM,8BAA8B,EAAE,cAAc,kCAAkC,EAAE,8BAA4C,CAAC;AAG5I,OAAO,EAAE,iCAAiC,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AACxH,MAAM,MAAM,6BAA6B,GAAG,OAAO,iCAAiC,EAAE,6BAA6B,CAAC;AACpH,eAAO,MAAM,6BAA6B,EAAE,cAAc,iCAAiC,EAAE,6BAA2C,CAAC;AAGzI,OAAO,EAAE,iCAAiC,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AACxH,MAAM,MAAM,6BAA6B,GAAG,OAAO,iCAAiC,EAAE,6BAA6B,CAAC;AACpH,eAAO,MAAM,6BAA6B,EAAE,cAAc,iCAAiC,EAAE,6BAA2C,CAAC;AAGzI,OAAO,EAAE,uCAAuC,EAAE,wCAAwC,EAAE,MAAM,uCAAuC,CAAC;AAC1I,MAAM,MAAM,mCAAmC,GAAG,OAAO,uCAAuC,EAAE,mCAAmC,CAAC;AACtI,eAAO,MAAM,mCAAmC,EAAE,cAAc,uCAAuC,EAAE,mCAAiD,CAAC;AAG3J,OAAO,EAAE,iCAAiC,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AACxH,MAAM,MAAM,6BAA6B,GAAG,OAAO,iCAAiC,EAAE,6BAA6B,CAAC;AACpH,eAAO,MAAM,6BAA6B,EAAE,cAAc,iCAAiC,EAAE,6BAA2C,CAAC;AAGzI,OAAO,EAAE,gCAAgC,EAAE,iCAAiC,EAAE,MAAM,gCAAgC,CAAC;AACrH,MAAM,MAAM,4BAA4B,GAAG,OAAO,gCAAgC,EAAE,4BAA4B,CAAC;AACjH,eAAO,MAAM,4BAA4B,EAAE,cAAc,gCAAgC,EAAE,4BAA0C,CAAC;AAGtI,OAAO,EAAE,gCAAgC,EAAE,iCAAiC,EAAE,MAAM,gCAAgC,CAAC;AACrH,MAAM,MAAM,4BAA4B,GAAG,OAAO,gCAAgC,EAAE,4BAA4B,CAAC;AACjH,eAAO,MAAM,4BAA4B,EAAE,cAAc,gCAAgC,EAAE,4BAA0C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../iam/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAC7F,MAAM,MAAM,oBAAoB,GAAG,OAAO,wBAAwB,EAAE,oBAAoB,CAAC;AACzF,eAAO,MAAM,oBAAoB,EAAE,cAAc,wBAAwB,EAAE,oBAAkC,CAAC;AAG9G,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/D,MAAM,MAAM,UAAU,GAAG,OAAO,cAAc,EAAE,UAAU,CAAC;AAC3D,eAAO,MAAM,UAAU,EAAE,cAAc,cAAc,EAAE,UAAwB,CAAC;AAGhF,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AACvF,MAAM,MAAM,kBAAkB,GAAG,OAAO,sBAAsB,EAAE,kBAAkB,CAAC;AACnF,eAAO,MAAM,kBAAkB,EAAE,cAAc,sBAAsB,EAAE,kBAAgC,CAAC;AAGxG,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAC7F,MAAM,MAAM,oBAAoB,GAAG,OAAO,wBAAwB,EAAE,oBAAoB,CAAC;AACzF,eAAO,MAAM,oBAAoB,EAAE,cAAc,wBAAwB,EAAE,oBAAkC,CAAC;AAG9G,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC1E,eAAO,MAAM,OAAO,EAAE,cAAc,WAAW,EAAE,OAAqB,CAAC;AACvE,eAAO,MAAM,aAAa,EAAE,cAAc,WAAW,EAAE,aAA2B,CAAC;AAGnF,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AACtI,eAAO,MAAM,sBAAsB,EAAE,cAAc,0BAA0B,EAAE,sBAAoC,CAAC;AACpH,eAAO,MAAM,4BAA4B,EAAE,cAAc,0BAA0B,EAAE,4BAA0C,CAAC;AAGhI,OAAO,EAAE,6BAA6B,EAAE,+BAA+B,EAAE,mCAAmC,EAAE,MAAM,6BAA6B,CAAC;AAClJ,eAAO,MAAM,yBAAyB,EAAE,cAAc,6BAA6B,EAAE,yBAAuC,CAAC;AAC7H,eAAO,MAAM,+BAA+B,EAAE,cAAc,6BAA6B,EAAE,+BAA6C,CAAC;AAGzI,OAAO,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,iCAAiC,EAAE,MAAM,2BAA2B,CAAC;AAC1I,eAAO,MAAM,uBAAuB,EAAE,cAAc,2BAA2B,EAAE,uBAAqC,CAAC;AACvH,eAAO,MAAM,6BAA6B,EAAE,cAAc,2BAA2B,EAAE,6BAA2C,CAAC;AAGnI,OAAO,EAAE,oCAAoC,EAAE,sCAAsC,EAAE,0CAA0C,EAAE,MAAM,oCAAoC,CAAC;AAC9K,eAAO,MAAM,gCAAgC,EAAE,cAAc,oCAAoC,EAAE,gCAA8C,CAAC;AAClJ,eAAO,MAAM,sCAAsC,EAAE,cAAc,oCAAoC,EAAE,sCAAoD,CAAC;AAG9J,OAAO,EAAE,mCAAmC,EAAE,qCAAqC,EAAE,yCAAyC,EAAE,MAAM,mCAAmC,CAAC;AAC1K,eAAO,MAAM,+BAA+B,EAAE,cAAc,mCAAmC,EAAE,+BAA6C,CAAC;AAC/I,eAAO,MAAM,qCAAqC,EAAE,cAAc,mCAAmC,EAAE,qCAAmD,CAAC;AAG3J,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAClE,MAAM,MAAM,WAAW,GAAG,OAAO,eAAe,EAAE,WAAW,CAAC;AAC9D,eAAO,MAAM,WAAW,EAAE,cAAc,eAAe,EAAE,WAAyB,CAAC;AAGnF,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAChG,MAAM,MAAM,qBAAqB,GAAG,OAAO,yBAAyB,EAAE,qBAAqB,CAAC;AAC5F,eAAO,MAAM,qBAAqB,EAAE,cAAc,yBAAyB,EAAE,qBAAmC,CAAC;AAGjH,OAAO,EAAE,8BAA8B,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAC/G,MAAM,MAAM,0BAA0B,GAAG,OAAO,8BAA8B,EAAE,0BAA0B,CAAC;AAC3G,eAAO,MAAM,0BAA0B,EAAE,cAAc,8BAA8B,EAAE,0BAAwC,CAAC;AAGhI,OAAO,EAAE,iCAAiC,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AACxH,MAAM,MAAM,6BAA6B,GAAG,OAAO,iCAAiC,EAAE,6BAA6B,CAAC;AACpH,eAAO,MAAM,6BAA6B,EAAE,cAAc,iCAAiC,EAAE,6BAA2C,CAAC;AAGzI,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,MAAM,MAAM,mBAAmB,GAAG,OAAO,uBAAuB,EAAE,mBAAmB,CAAC;AACtF,eAAO,MAAM,mBAAmB,EAAE,cAAc,uBAAuB,EAAE,mBAAiC,CAAC;AAG3G,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAChG,MAAM,MAAM,qBAAqB,GAAG,OAAO,yBAAyB,EAAE,qBAAqB,CAAC;AAC5F,eAAO,MAAM,qBAAqB,EAAE,cAAc,yBAAyB,EAAE,qBAAmC,CAAC;AAGjH,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACxE,MAAM,MAAM,aAAa,GAAG,OAAO,iBAAiB,EAAE,aAAa,CAAC;AACpE,eAAO,MAAM,aAAa,EAAE,cAAc,iBAAiB,EAAE,aAA2B,CAAC;AAGzF,OAAO,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACtG,MAAM,MAAM,uBAAuB,GAAG,OAAO,2BAA2B,EAAE,uBAAuB,CAAC;AAClG,eAAO,MAAM,uBAAuB,EAAE,cAAc,2BAA2B,EAAE,uBAAqC,CAAC;AAGvH,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACnG,MAAM,MAAM,sBAAsB,GAAG,OAAO,0BAA0B,EAAE,sBAAsB,CAAC;AAC/F,eAAO,MAAM,sBAAsB,EAAE,cAAc,0BAA0B,EAAE,sBAAoC,CAAC;AAGpH,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACnG,MAAM,MAAM,sBAAsB,GAAG,OAAO,0BAA0B,EAAE,sBAAsB,CAAC;AAC/F,eAAO,MAAM,sBAAsB,EAAE,cAAc,0BAA0B,EAAE,sBAAoC,CAAC;AAGpH,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAChG,MAAM,MAAM,qBAAqB,GAAG,OAAO,yBAAyB,EAAE,qBAAqB,CAAC;AAC5F,eAAO,MAAM,qBAAqB,EAAE,cAAc,yBAAyB,EAAE,qBAAmC,CAAC;AAGjH,OAAO,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AACzG,MAAM,MAAM,wBAAwB,GAAG,OAAO,4BAA4B,EAAE,wBAAwB,CAAC;AACrG,eAAO,MAAM,wBAAwB,EAAE,cAAc,4BAA4B,EAAE,wBAAsC,CAAC;AAG1H,OAAO,EAAE,mCAAmC,EAAE,oCAAoC,EAAE,MAAM,mCAAmC,CAAC;AAC9H,MAAM,MAAM,+BAA+B,GAAG,OAAO,mCAAmC,EAAE,+BAA+B,CAAC;AAC1H,eAAO,MAAM,+BAA+B,EAAE,cAAc,mCAAmC,EAAE,+BAA6C,CAAC;AAG/I,OAAO,EAAE,kCAAkC,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAC3H,MAAM,MAAM,8BAA8B,GAAG,OAAO,kCAAkC,EAAE,8BAA8B,CAAC;AACvH,eAAO,MAAM,8BAA8B,EAAE,cAAc,kCAAkC,EAAE,8BAA4C,CAAC;AAG5I,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAC7F,MAAM,MAAM,oBAAoB,GAAG,OAAO,wBAAwB,EAAE,oBAAoB,CAAC;AACzF,eAAO,MAAM,oBAAoB,EAAE,cAAc,wBAAwB,EAAE,oBAAkC,CAAC;AAG9G,OAAO,EAAE,kCAAkC,EAAE,mCAAmC,EAAE,MAAM,kCAAkC,CAAC;AAC3H,MAAM,MAAM,8BAA8B,GAAG,OAAO,kCAAkC,EAAE,8BAA8B,CAAC;AACvH,eAAO,MAAM,8BAA8B,EAAE,cAAc,kCAAkC,EAAE,8BAA4C,CAAC;AAG5I,OAAO,EAAE,iCAAiC,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AACxH,MAAM,MAAM,6BAA6B,GAAG,OAAO,iCAAiC,EAAE,6BAA6B,CAAC;AACpH,eAAO,MAAM,6BAA6B,EAAE,cAAc,iCAAiC,EAAE,6BAA2C,CAAC;AAGzI,OAAO,EAAE,iCAAiC,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AACxH,MAAM,MAAM,6BAA6B,GAAG,OAAO,iCAAiC,EAAE,6BAA6B,CAAC;AACpH,eAAO,MAAM,6BAA6B,EAAE,cAAc,iCAAiC,EAAE,6BAA2C,CAAC;AAGzI,OAAO,EAAE,uCAAuC,EAAE,wCAAwC,EAAE,MAAM,uCAAuC,CAAC;AAC1I,MAAM,MAAM,mCAAmC,GAAG,OAAO,uCAAuC,EAAE,mCAAmC,CAAC;AACtI,eAAO,MAAM,mCAAmC,EAAE,cAAc,uCAAuC,EAAE,mCAAiD,CAAC;AAG3J,OAAO,EAAE,iCAAiC,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AACxH,MAAM,MAAM,6BAA6B,GAAG,OAAO,iCAAiC,EAAE,6BAA6B,CAAC;AACpH,eAAO,MAAM,6BAA6B,EAAE,cAAc,iCAAiC,EAAE,6BAA2C,CAAC;AAGzI,OAAO,EAAE,gCAAgC,EAAE,iCAAiC,EAAE,MAAM,gCAAgC,CAAC;AACrH,MAAM,MAAM,4BAA4B,GAAG,OAAO,gCAAgC,EAAE,4BAA4B,CAAC;AACjH,eAAO,MAAM,4BAA4B,EAAE,cAAc,gCAAgC,EAAE,4BAA0C,CAAC;AAGtI,OAAO,EAAE,gCAAgC,EAAE,iCAAiC,EAAE,MAAM,gCAAgC,CAAC;AACrH,MAAM,MAAM,4BAA4B,GAAG,OAAO,gCAAgC,EAAE,4BAA4B,CAAC;AACjH,eAAO,MAAM,4BAA4B,EAAE,cAAc,gCAAgC,EAAE,4BAA0C,CAAC"}

package/iam/index.js

@@ -25,13 +25,15 @@ var __importStar = (this && this.__importStar) || function (mod) {
     return result;
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WorkloadIdentityServiceAgent = exports.WorkloadIdentityPoolProvider = exports.WorkloadIdentityPoolNamespace = exports.WorkloadIdentityPoolManagedIdentity = exports.WorkloadIdentityPoolIamPolicy = exports.WorkloadIdentityPoolIamMember = exports.WorkloadIdentityPoolIamBinding = exports.WorkloadIdentityPool = exports.WorkforcePoolProviderScimToken = exports.WorkforcePoolProviderScimTenant = exports.WorkforcePoolProviderKey = exports.WorkforcePoolProvider = exports.WorkforcePoolIamPolicy = exports.WorkforcePoolIamMember = exports.WorkforcePoolIamBinding = exports.WorkforcePool = exports.ProjectsPolicyBinding = exports.PrincipalAccessBoundaryPolicy = exports.OrganizationsPolicyBinding = exports.OauthClientCredential = exports.OauthClient = exports.getWorkloadIdentityPoolProviderOutput = exports.getWorkloadIdentityPoolProvider = exports.getWorkloadIdentityPoolIamPolicyOutput = exports.getWorkloadIdentityPoolIamPolicy = exports.getWorkloadIdentityPoolOutput = exports.getWorkloadIdentityPool = exports.getWorkforcePoolIamPolicyOutput = exports.getWorkforcePoolIamPolicy = exports.getTestablePermissionsOutput = exports.getTestablePermissions = exports.getRuleOutput = exports.getRule = exports.FoldersPolicyBinding = exports.DenyPolicy = exports.AccessBoundaryPolicy = void 0;
+exports.WorkloadIdentityServiceAgent = exports.WorkloadIdentityPoolProvider = exports.WorkloadIdentityPoolNamespace = exports.WorkloadIdentityPoolManagedIdentity = exports.WorkloadIdentityPoolIamPolicy = exports.WorkloadIdentityPoolIamMember = exports.WorkloadIdentityPoolIamBinding = exports.WorkloadIdentityPool = exports.WorkforcePoolProviderScimToken = exports.WorkforcePoolProviderScimTenant = exports.WorkforcePoolProviderKey = exports.WorkforcePoolProvider = exports.WorkforcePoolIamPolicy = exports.WorkforcePoolIamMember = exports.WorkforcePoolIamBinding = exports.WorkforcePool = exports.ProjectsPolicyBinding = exports.ProjectAccessPolicy = exports.PrincipalAccessBoundaryPolicy = exports.OrganizationsPolicyBinding = exports.OauthClientCredential = exports.OauthClient = exports.getWorkloadIdentityPoolProviderOutput = exports.getWorkloadIdentityPoolProvider = exports.getWorkloadIdentityPoolIamPolicyOutput = exports.getWorkloadIdentityPoolIamPolicy = exports.getWorkloadIdentityPoolOutput = exports.getWorkloadIdentityPool = exports.getWorkforcePoolIamPolicyOutput = exports.getWorkforcePoolIamPolicy = exports.getTestablePermissionsOutput = exports.getTestablePermissions = exports.getRuleOutput = exports.getRule = exports.FoldersPolicyBinding = exports.FolderAccessPolicy = exports.DenyPolicy = exports.AccessBoundaryPolicy = void 0;
 const pulumi = __importStar(require("@pulumi/pulumi"));
 const utilities = __importStar(require("../utilities"));
 exports.AccessBoundaryPolicy = null;
 utilities.lazyLoad(exports, ["AccessBoundaryPolicy"], () => require("./accessBoundaryPolicy"));
 exports.DenyPolicy = null;
 utilities.lazyLoad(exports, ["DenyPolicy"], () => require("./denyPolicy"));
+exports.FolderAccessPolicy = null;
+utilities.lazyLoad(exports, ["FolderAccessPolicy"], () => require("./folderAccessPolicy"));
 exports.FoldersPolicyBinding = null;
 utilities.lazyLoad(exports, ["FoldersPolicyBinding"], () => require("./foldersPolicyBinding"));
 exports.getRule = null;
@@ -60,6 +62,8 @@ exports.OrganizationsPolicyBinding = null;
 utilities.lazyLoad(exports, ["OrganizationsPolicyBinding"], () => require("./organizationsPolicyBinding"));
 exports.PrincipalAccessBoundaryPolicy = null;
 utilities.lazyLoad(exports, ["PrincipalAccessBoundaryPolicy"], () => require("./principalAccessBoundaryPolicy"));
+exports.ProjectAccessPolicy = null;
+utilities.lazyLoad(exports, ["ProjectAccessPolicy"], () => require("./projectAccessPolicy"));
 exports.ProjectsPolicyBinding = null;
 utilities.lazyLoad(exports, ["ProjectsPolicyBinding"], () => require("./projectsPolicyBinding"));
 exports.WorkforcePool = null;
@@ -102,6 +106,8 @@ const _module = {
                 return new exports.AccessBoundaryPolicy(name, undefined, { urn });
             case "gcp:iam/denyPolicy:DenyPolicy":
                 return new exports.DenyPolicy(name, undefined, { urn });
+            case "gcp:iam/folderAccessPolicy:FolderAccessPolicy":
+                return new exports.FolderAccessPolicy(name, undefined, { urn });
             case "gcp:iam/foldersPolicyBinding:FoldersPolicyBinding":
                 return new exports.FoldersPolicyBinding(name, undefined, { urn });
             case "gcp:iam/oauthClient:OauthClient":
@@ -112,6 +118,8 @@ const _module = {
                 return new exports.OrganizationsPolicyBinding(name, undefined, { urn });
             case "gcp:iam/principalAccessBoundaryPolicy:PrincipalAccessBoundaryPolicy":
                 return new exports.PrincipalAccessBoundaryPolicy(name, undefined, { urn });
+            case "gcp:iam/projectAccessPolicy:ProjectAccessPolicy":
+                return new exports.ProjectAccessPolicy(name, undefined, { urn });
             case "gcp:iam/projectsPolicyBinding:ProjectsPolicyBinding":
                 return new exports.ProjectsPolicyBinding(name, undefined, { urn });
             case "gcp:iam/workforcePool:WorkforcePool":
@@ -153,11 +161,13 @@ const _module = {
 };
 pulumi.runtime.registerResourceModule("gcp", "iam/accessBoundaryPolicy", _module);
 pulumi.runtime.registerResourceModule("gcp", "iam/denyPolicy", _module);
+pulumi.runtime.registerResourceModule("gcp", "iam/folderAccessPolicy", _module);
 pulumi.runtime.registerResourceModule("gcp", "iam/foldersPolicyBinding", _module);
 pulumi.runtime.registerResourceModule("gcp", "iam/oauthClient", _module);
 pulumi.runtime.registerResourceModule("gcp", "iam/oauthClientCredential", _module);
 pulumi.runtime.registerResourceModule("gcp", "iam/organizationsPolicyBinding", _module);
 pulumi.runtime.registerResourceModule("gcp", "iam/principalAccessBoundaryPolicy", _module);
+pulumi.runtime.registerResourceModule("gcp", "iam/projectAccessPolicy", _module);
 pulumi.runtime.registerResourceModule("gcp", "iam/projectsPolicyBinding", _module);
 pulumi.runtime.registerResourceModule("gcp", "iam/workforcePool", _module);
 pulumi.runtime.registerResourceModule("gcp", "iam/workforcePoolIamBinding", _module);