pulumi-aiven 6.21.0a1722057299__py3-none-any.whl → 6.22.0__py3-none-any.whl

pulumi_aiven/_inputs.py

@@ -100,6 +100,7 @@ __all__ = [
     'KafkaConnectorTaskArgs',
     'KafkaKafkaArgs',
     'KafkaKafkaUserConfigArgs',
+    'KafkaKafkaUserConfigFollowerFetchingArgs',
     'KafkaKafkaUserConfigIpFilterObjectArgs',
     'KafkaKafkaUserConfigKafkaArgs',
     'KafkaKafkaUserConfigKafkaAuthenticationMethodsArgs',
@@ -108,6 +109,7 @@ __all__ = [
     'KafkaKafkaUserConfigKafkaConnectSecretProviderAwsArgs',
     'KafkaKafkaUserConfigKafkaConnectSecretProviderVaultArgs',
     'KafkaKafkaUserConfigKafkaRestConfigArgs',
+    'KafkaKafkaUserConfigKafkaSaslMechanismsArgs',
     'KafkaKafkaUserConfigPrivateAccessArgs',
     'KafkaKafkaUserConfigPrivatelinkAccessArgs',
     'KafkaKafkaUserConfigPublicAccessArgs',
@@ -168,7 +170,10 @@ __all__ = [
     'OpenSearchComponentArgs',
     'OpenSearchOpensearchArgs',
     'OpenSearchOpensearchUserConfigArgs',
+    'OpenSearchOpensearchUserConfigAzureMigrationArgs',
+    'OpenSearchOpensearchUserConfigGcsMigrationArgs',
     'OpenSearchOpensearchUserConfigIndexPatternArgs',
+    'OpenSearchOpensearchUserConfigIndexRollupArgs',
     'OpenSearchOpensearchUserConfigIndexTemplateArgs',
     'OpenSearchOpensearchUserConfigIpFilterObjectArgs',
     'OpenSearchOpensearchUserConfigOpenidArgs',
@@ -180,6 +185,7 @@ __all__ = [
     'OpenSearchOpensearchUserConfigPrivateAccessArgs',
     'OpenSearchOpensearchUserConfigPrivatelinkAccessArgs',
     'OpenSearchOpensearchUserConfigPublicAccessArgs',
+    'OpenSearchOpensearchUserConfigS3MigrationArgs',
     'OpenSearchOpensearchUserConfigSamlArgs',
     'OpenSearchServiceIntegrationArgs',
     'OpenSearchTagArgs',
@@ -2373,6 +2379,7 @@ class DragonflyDragonflyUserConfigMigrationArgs:
                  port: pulumi.Input[int],
                  dbname: Optional[pulumi.Input[str]] = None,
                  ignore_dbs: Optional[pulumi.Input[str]] = None,
+                 ignore_roles: Optional[pulumi.Input[str]] = None,
                  method: Optional[pulumi.Input[str]] = None,
                  password: Optional[pulumi.Input[str]] = None,
                  ssl: Optional[pulumi.Input[bool]] = None,
@@ -2382,6 +2389,7 @@ class DragonflyDragonflyUserConfigMigrationArgs:
         :param pulumi.Input[int] port: Port number of the server where to migrate data from. Example: `1234`.
         :param pulumi.Input[str] dbname: Database name for bootstrapping the initial connection. Example: `defaultdb`.
         :param pulumi.Input[str] ignore_dbs: Comma-separated list of databases, which should be ignored during migration (supported by MySQL and PostgreSQL only at the moment). Example: `db1,db2`.
+        :param pulumi.Input[str] ignore_roles: Comma-separated list of database roles, which should be ignored during migration (supported by PostgreSQL only at the moment). Example: `role1,role2`.
         :param pulumi.Input[str] method: Enum: `dump`, `replication`. The migration method to be used (currently supported only by Redis, Dragonfly, MySQL and PostgreSQL service types).
         :param pulumi.Input[str] password: Password for authentication with the server where to migrate data from. Example: `jjKk45Nnd`.
         :param pulumi.Input[bool] ssl: The server where to migrate data from is secured with SSL. Default: `true`.
@@ -2393,6 +2401,8 @@ class DragonflyDragonflyUserConfigMigrationArgs:
             pulumi.set(__self__, "dbname", dbname)
         if ignore_dbs is not None:
             pulumi.set(__self__, "ignore_dbs", ignore_dbs)
+        if ignore_roles is not None:
+            pulumi.set(__self__, "ignore_roles", ignore_roles)
         if method is not None:
             pulumi.set(__self__, "method", method)
         if password is not None:
@@ -2450,6 +2460,18 @@ class DragonflyDragonflyUserConfigMigrationArgs:
     def ignore_dbs(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "ignore_dbs", value)
 
+    @property
+    @pulumi.getter(name="ignoreRoles")
+    def ignore_roles(self) -> Optional[pulumi.Input[str]]:
+        """
+        Comma-separated list of database roles, which should be ignored during migration (supported by PostgreSQL only at the moment). Example: `role1,role2`.
+        """
+        return pulumi.get(self, "ignore_roles")
+
+    @ignore_roles.setter
+    def ignore_roles(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "ignore_roles", value)
+
     @property
     @pulumi.getter
     def method(self) -> Optional[pulumi.Input[str]]:
@@ -3480,7 +3502,8 @@ class GrafanaGrafanaUserConfigArgs:
                  unified_alerting_enabled: Optional[pulumi.Input[bool]] = None,
                  user_auto_assign_org: Optional[pulumi.Input[bool]] = None,
                  user_auto_assign_org_role: Optional[pulumi.Input[str]] = None,
-                 viewers_can_edit: Optional[pulumi.Input[bool]] = None):
+                 viewers_can_edit: Optional[pulumi.Input[bool]] = None,
+                 wal: Optional[pulumi.Input[bool]] = None):
         """
         :param pulumi.Input[str] additional_backup_regions: Additional Cloud Regions for Backup Replication.
         :param pulumi.Input[bool] alerting_enabled: Enable or disable Grafana legacy alerting functionality. This should not be enabled with unified*alerting*enabled.
@@ -3524,6 +3547,7 @@ class GrafanaGrafanaUserConfigArgs:
         :param pulumi.Input[bool] user_auto_assign_org: Auto-assign new users on signup to main organization. Defaults to false.
         :param pulumi.Input[str] user_auto_assign_org_role: Enum: `Viewer`, `Admin`, `Editor`. Set role for new signups. Defaults to Viewer.
         :param pulumi.Input[bool] viewers_can_edit: Users with view-only permission can edit but not save dashboards.
+        :param pulumi.Input[bool] wal: Setting to enable/disable Write-Ahead Logging. The default value is false (disabled).
         """
         if additional_backup_regions is not None:
             pulumi.set(__self__, "additional_backup_regions", additional_backup_regions)
@@ -3612,6 +3636,8 @@ class GrafanaGrafanaUserConfigArgs:
             pulumi.set(__self__, "user_auto_assign_org_role", user_auto_assign_org_role)
         if viewers_can_edit is not None:
             pulumi.set(__self__, "viewers_can_edit", viewers_can_edit)
+        if wal is not None:
+            pulumi.set(__self__, "wal", wal)
 
     @property
     @pulumi.getter(name="additionalBackupRegions")
@@ -4118,6 +4144,18 @@ class GrafanaGrafanaUserConfigArgs:
     def viewers_can_edit(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "viewers_can_edit", value)
 
+    @property
+    @pulumi.getter
+    def wal(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Setting to enable/disable Write-Ahead Logging. The default value is false (disabled).
+        """
+        return pulumi.get(self, "wal")
+
+    @wal.setter
+    def wal(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "wal", value)
+
 
 @pulumi.input_type
 class GrafanaGrafanaUserConfigAuthAzureadArgs:
@@ -7344,6 +7382,7 @@ class KafkaKafkaUserConfigArgs:
                  additional_backup_regions: Optional[pulumi.Input[str]] = None,
                  aiven_kafka_topic_messages: Optional[pulumi.Input[bool]] = None,
                  custom_domain: Optional[pulumi.Input[str]] = None,
+                 follower_fetching: Optional[pulumi.Input['KafkaKafkaUserConfigFollowerFetchingArgs']] = None,
                  ip_filter_objects: Optional[pulumi.Input[Sequence[pulumi.Input['KafkaKafkaUserConfigIpFilterObjectArgs']]]] = None,
                  ip_filter_strings: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  ip_filters: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
@@ -7355,6 +7394,7 @@ class KafkaKafkaUserConfigArgs:
                  kafka_rest: Optional[pulumi.Input[bool]] = None,
                  kafka_rest_authorization: Optional[pulumi.Input[bool]] = None,
                  kafka_rest_config: Optional[pulumi.Input['KafkaKafkaUserConfigKafkaRestConfigArgs']] = None,
+                 kafka_sasl_mechanisms: Optional[pulumi.Input['KafkaKafkaUserConfigKafkaSaslMechanismsArgs']] = None,
                  kafka_version: Optional[pulumi.Input[str]] = None,
                  letsencrypt_sasl_privatelink: Optional[pulumi.Input[bool]] = None,
                  private_access: Optional[pulumi.Input['KafkaKafkaUserConfigPrivateAccessArgs']] = None,
@@ -7369,6 +7409,7 @@ class KafkaKafkaUserConfigArgs:
         :param pulumi.Input[str] additional_backup_regions: Additional Cloud Regions for Backup Replication.
         :param pulumi.Input[bool] aiven_kafka_topic_messages: Allow access to read Kafka topic messages in the Aiven Console and REST API.
         :param pulumi.Input[str] custom_domain: Serve the web frontend using a custom CNAME pointing to the Aiven DNS name. Example: `grafana.example.org`.
+        :param pulumi.Input['KafkaKafkaUserConfigFollowerFetchingArgs'] follower_fetching: Enable follower fetching
         :param pulumi.Input[Sequence[pulumi.Input['KafkaKafkaUserConfigIpFilterObjectArgs']]] ip_filter_objects: Allow incoming connections from CIDR address block, e.g. `10.20.0.0/16`
         :param pulumi.Input[Sequence[pulumi.Input[str]]] ip_filter_strings: Allow incoming connections from CIDR address block, e.g. `10.20.0.0/16`.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] ip_filters: Allow incoming connections from CIDR address block, e.g. `10.20.0.0/16`.
@@ -7379,6 +7420,7 @@ class KafkaKafkaUserConfigArgs:
         :param pulumi.Input[bool] kafka_rest: Enable Kafka-REST service. Default: `false`.
         :param pulumi.Input[bool] kafka_rest_authorization: Enable authorization in Kafka-REST service.
         :param pulumi.Input['KafkaKafkaUserConfigKafkaRestConfigArgs'] kafka_rest_config: Kafka REST configuration
+        :param pulumi.Input['KafkaKafkaUserConfigKafkaSaslMechanismsArgs'] kafka_sasl_mechanisms: Kafka SASL mechanisms
         :param pulumi.Input[str] kafka_version: Enum: `3.1`, `3.2`, `3.3`, `3.4`, `3.5`, `3.6`, `3.7`, and newer. Kafka major version.
         :param pulumi.Input[bool] letsencrypt_sasl_privatelink: Use Letsencrypt CA for Kafka SASL via Privatelink.
         :param pulumi.Input['KafkaKafkaUserConfigPrivateAccessArgs'] private_access: Allow access to selected service ports from private networks
@@ -7399,6 +7441,8 @@ class KafkaKafkaUserConfigArgs:
             pulumi.set(__self__, "aiven_kafka_topic_messages", aiven_kafka_topic_messages)
         if custom_domain is not None:
             pulumi.set(__self__, "custom_domain", custom_domain)
+        if follower_fetching is not None:
+            pulumi.set(__self__, "follower_fetching", follower_fetching)
         if ip_filter_objects is not None:
             pulumi.set(__self__, "ip_filter_objects", ip_filter_objects)
         if ip_filter_strings is not None:
@@ -7424,6 +7468,8 @@ class KafkaKafkaUserConfigArgs:
             pulumi.set(__self__, "kafka_rest_authorization", kafka_rest_authorization)
         if kafka_rest_config is not None:
             pulumi.set(__self__, "kafka_rest_config", kafka_rest_config)
+        if kafka_sasl_mechanisms is not None:
+            pulumi.set(__self__, "kafka_sasl_mechanisms", kafka_sasl_mechanisms)
         if kafka_version is not None:
             pulumi.set(__self__, "kafka_version", kafka_version)
         if letsencrypt_sasl_privatelink is not None:
@@ -7482,6 +7528,18 @@ class KafkaKafkaUserConfigArgs:
     def custom_domain(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "custom_domain", value)
 
+    @property
+    @pulumi.getter(name="followerFetching")
+    def follower_fetching(self) -> Optional[pulumi.Input['KafkaKafkaUserConfigFollowerFetchingArgs']]:
+        """
+        Enable follower fetching
+        """
+        return pulumi.get(self, "follower_fetching")
+
+    @follower_fetching.setter
+    def follower_fetching(self, value: Optional[pulumi.Input['KafkaKafkaUserConfigFollowerFetchingArgs']]):
+        pulumi.set(self, "follower_fetching", value)
+
     @property
     @pulumi.getter(name="ipFilterObjects")
     def ip_filter_objects(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['KafkaKafkaUserConfigIpFilterObjectArgs']]]]:
@@ -7612,6 +7670,18 @@ class KafkaKafkaUserConfigArgs:
     def kafka_rest_config(self, value: Optional[pulumi.Input['KafkaKafkaUserConfigKafkaRestConfigArgs']]):
         pulumi.set(self, "kafka_rest_config", value)
 
+    @property
+    @pulumi.getter(name="kafkaSaslMechanisms")
+    def kafka_sasl_mechanisms(self) -> Optional[pulumi.Input['KafkaKafkaUserConfigKafkaSaslMechanismsArgs']]:
+        """
+        Kafka SASL mechanisms
+        """
+        return pulumi.get(self, "kafka_sasl_mechanisms")
+
+    @kafka_sasl_mechanisms.setter
+    def kafka_sasl_mechanisms(self, value: Optional[pulumi.Input['KafkaKafkaUserConfigKafkaSaslMechanismsArgs']]):
+        pulumi.set(self, "kafka_sasl_mechanisms", value)
+
     @property
     @pulumi.getter(name="kafkaVersion")
     def kafka_version(self) -> Optional[pulumi.Input[str]]:
@@ -7733,6 +7803,29 @@ class KafkaKafkaUserConfigArgs:
         pulumi.set(self, "tiered_storage", value)
 
 
+@pulumi.input_type
+class KafkaKafkaUserConfigFollowerFetchingArgs:
+    def __init__(__self__, *,
+                 enabled: Optional[pulumi.Input[bool]] = None):
+        """
+        :param pulumi.Input[bool] enabled: Whether to enable the follower fetching functionality.
+        """
+        if enabled is not None:
+            pulumi.set(__self__, "enabled", enabled)
+
+    @property
+    @pulumi.getter
+    def enabled(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Whether to enable the follower fetching functionality.
+        """
+        return pulumi.get(self, "enabled")
+
+    @enabled.setter
+    def enabled(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "enabled", value)
+
+
 @pulumi.input_type
 class KafkaKafkaUserConfigIpFilterObjectArgs:
     def __init__(__self__, *,
@@ -7821,52 +7914,52 @@ class KafkaKafkaUserConfigKafkaArgs:
                  transaction_remove_expired_transaction_cleanup_interval_ms: Optional[pulumi.Input[int]] = None,
                  transaction_state_log_segment_bytes: Optional[pulumi.Input[int]] = None):
         """
-        :param pulumi.Input[bool] auto_create_topics_enable: Enable auto creation of topics.
-        :param pulumi.Input[str] compression_type: Enum: `gzip`, `snappy`, `lz4`, `zstd`, `uncompressed`, `producer`. Specify the final compression type for a given topic. This configuration accepts the standard compression codecs (`gzip`, `snappy`, `lz4`, `zstd`). It additionally accepts `uncompressed` which is equivalent to no compression; and `producer` which means retain the original compression codec set by the producer.
-        :param pulumi.Input[int] connections_max_idle_ms: Idle connections timeout: the server socket processor threads close the connections that idle for longer than this. Example: `540000`.
-        :param pulumi.Input[int] default_replication_factor: Replication factor for autocreated topics.
-        :param pulumi.Input[int] group_initial_rebalance_delay_ms: The amount of time, in milliseconds, the group coordinator will wait for more consumers to join a new group before performing the first rebalance. A longer delay means potentially fewer rebalances, but increases the time until processing begins. The default value for this is 3 seconds. During development and testing it might be desirable to set this to 0 in order to not delay test execution time. Example: `3000`.
-        :param pulumi.Input[int] group_max_session_timeout_ms: The maximum allowed session timeout for registered consumers. Longer timeouts give consumers more time to process messages in between heartbeats at the cost of a longer time to detect failures. Example: `1800000`.
-        :param pulumi.Input[int] group_min_session_timeout_ms: The minimum allowed session timeout for registered consumers. Longer timeouts give consumers more time to process messages in between heartbeats at the cost of a longer time to detect failures. Example: `6000`.
-        :param pulumi.Input[int] log_cleaner_delete_retention_ms: How long are delete records retained? Example: `86400000`.
-        :param pulumi.Input[int] log_cleaner_max_compaction_lag_ms: The maximum amount of time message will remain uncompacted. Only applicable for logs that are being compacted.
-        :param pulumi.Input[float] log_cleaner_min_cleanable_ratio: Controls log compactor frequency. Larger value means more frequent compactions but also more space wasted for logs. Consider setting log.cleaner.max.compaction.lag.ms to enforce compactions sooner, instead of setting a very high value for this option. Example: `0.5`.
-        :param pulumi.Input[int] log_cleaner_min_compaction_lag_ms: The minimum time a message will remain uncompacted in the log. Only applicable for logs that are being compacted.
-        :param pulumi.Input[str] log_cleanup_policy: Enum: `delete`, `compact`, `compact,delete`. The default cleanup policy for segments beyond the retention window.
-        :param pulumi.Input[int] log_flush_interval_messages: The number of messages accumulated on a log partition before messages are flushed to disk. Example: `9223372036854775807`.
-        :param pulumi.Input[int] log_flush_interval_ms: The maximum time in ms that a message in any topic is kept in memory before flushed to disk. If not set, the value in log.flush.scheduler.interval.ms is used.
-        :param pulumi.Input[int] log_index_interval_bytes: The interval with which Kafka adds an entry to the offset index. Example: `4096`.
-        :param pulumi.Input[int] log_index_size_max_bytes: The maximum size in bytes of the offset index. Example: `10485760`.
-        :param pulumi.Input[int] log_local_retention_bytes: The maximum size of local log segments that can grow for a partition before it gets eligible for deletion. If set to -2, the value of log.retention.bytes is used. The effective value should always be less than or equal to log.retention.bytes value.
-        :param pulumi.Input[int] log_local_retention_ms: The number of milliseconds to keep the local log segments before it gets eligible for deletion. If set to -2, the value of log.retention.ms is used. The effective value should always be less than or equal to log.retention.ms value.
-        :param pulumi.Input[bool] log_message_downconversion_enable: This configuration controls whether down-conversion of message formats is enabled to satisfy consume requests.
-        :param pulumi.Input[int] log_message_timestamp_difference_max_ms: The maximum difference allowed between the timestamp when a broker receives a message and the timestamp specified in the message.
-        :param pulumi.Input[str] log_message_timestamp_type: Enum: `CreateTime`, `LogAppendTime`. Define whether the timestamp in the message is message create time or log append time.
-        :param pulumi.Input[bool] log_preallocate: Should pre allocate file when create new segment?
-        :param pulumi.Input[int] log_retention_bytes: The maximum size of the log before deleting messages.
-        :param pulumi.Input[int] log_retention_hours: The number of hours to keep a log file before deleting it.
-        :param pulumi.Input[int] log_retention_ms: The number of milliseconds to keep a log file before deleting it (in milliseconds), If not set, the value in log.retention.minutes is used. If set to -1, no time limit is applied.
-        :param pulumi.Input[int] log_roll_jitter_ms: The maximum jitter to subtract from logRollTimeMillis (in milliseconds). If not set, the value in log.roll.jitter.hours is used.
-        :param pulumi.Input[int] log_roll_ms: The maximum time before a new log segment is rolled out (in milliseconds).
-        :param pulumi.Input[int] log_segment_bytes: The maximum size of a single log file.
-        :param pulumi.Input[int] log_segment_delete_delay_ms: The amount of time to wait before deleting a file from the filesystem. Example: `60000`.
-        :param pulumi.Input[int] max_connections_per_ip: The maximum number of connections allowed from each ip address (defaults to 2147483647).
-        :param pulumi.Input[int] max_incremental_fetch_session_cache_slots: The maximum number of incremental fetch sessions that the broker will maintain. Example: `1000`.
-        :param pulumi.Input[int] message_max_bytes: The maximum size of message that the server can receive. Example: `1048588`.
-        :param pulumi.Input[int] min_insync_replicas: When a producer sets acks to `all` (or `-1`), min.insync.replicas specifies the minimum number of replicas that must acknowledge a write for the write to be considered successful. Example: `1`.
-        :param pulumi.Input[int] num_partitions: Number of partitions for autocreated topics.
-        :param pulumi.Input[int] offsets_retention_minutes: Log retention window in minutes for offsets topic. Example: `10080`.
-        :param pulumi.Input[int] producer_purgatory_purge_interval_requests: The purge interval (in number of requests) of the producer request purgatory(defaults to 1000).
-        :param pulumi.Input[int] replica_fetch_max_bytes: The number of bytes of messages to attempt to fetch for each partition (defaults to 1048576). This is not an absolute maximum, if the first record batch in the first non-empty partition of the fetch is larger than this value, the record batch will still be returned to ensure that progress can be made.
-        :param pulumi.Input[int] replica_fetch_response_max_bytes: Maximum bytes expected for the entire fetch response (defaults to 10485760). Records are fetched in batches, and if the first record batch in the first non-empty partition of the fetch is larger than this value, the record batch will still be returned to ensure that progress can be made. As such, this is not an absolute maximum.
-        :param pulumi.Input[str] sasl_oauthbearer_expected_audience: The (optional) comma-delimited setting for the broker to use to verify that the JWT was issued for one of the expected audiences.
-        :param pulumi.Input[str] sasl_oauthbearer_expected_issuer: Optional setting for the broker to use to verify that the JWT was created by the expected issuer.
-        :param pulumi.Input[str] sasl_oauthbearer_jwks_endpoint_url: OIDC JWKS endpoint URL. By setting this the SASL SSL OAuth2/OIDC authentication is enabled. See also other options for SASL OAuth2/OIDC.
-        :param pulumi.Input[str] sasl_oauthbearer_sub_claim_name: Name of the scope from which to extract the subject claim from the JWT. Defaults to sub.
-        :param pulumi.Input[int] socket_request_max_bytes: The maximum number of bytes in a socket request (defaults to 104857600).
-        :param pulumi.Input[bool] transaction_partition_verification_enable: Enable verification that checks that the partition has been added to the transaction before writing transactional records to the partition.
-        :param pulumi.Input[int] transaction_remove_expired_transaction_cleanup_interval_ms: The interval at which to remove transactions that have expired due to transactional.id.expiration.ms passing (defaults to 3600000 (1 hour)).
-        :param pulumi.Input[int] transaction_state_log_segment_bytes: The transaction topic segment bytes should be kept relatively small in order to facilitate faster log compaction and cache loads (defaults to 104857600 (100 mebibytes)).
+        :param pulumi.Input[bool] auto_create_topics_enable: Enable auto-creation of topics. (Default: true).
+        :param pulumi.Input[str] compression_type: Enum: `gzip`, `snappy`, `lz4`, `zstd`, `uncompressed`, `producer`. Specify the final compression type for a given topic. This configuration accepts the standard compression codecs (`gzip`, `snappy`, `lz4`, `zstd`). It additionally accepts `uncompressed` which is equivalent to no compression; and `producer` which means retain the original compression codec set by the producer.(Default: producer).
+        :param pulumi.Input[int] connections_max_idle_ms: Idle connections timeout: the server socket processor threads close the connections that idle for longer than this. (Default: 600000 ms (10 minutes)). Example: `540000`.
+        :param pulumi.Input[int] default_replication_factor: Replication factor for auto-created topics (Default: 3).
+        :param pulumi.Input[int] group_initial_rebalance_delay_ms: The amount of time, in milliseconds, the group coordinator will wait for more consumers to join a new group before performing the first rebalance. A longer delay means potentially fewer rebalances, but increases the time until processing begins. The default value for this is 3 seconds. During development and testing it might be desirable to set this to 0 in order to not delay test execution time. (Default: 3000 ms (3 seconds)). Example: `3000`.
+        :param pulumi.Input[int] group_max_session_timeout_ms: The maximum allowed session timeout for registered consumers. Longer timeouts give consumers more time to process messages in between heartbeats at the cost of a longer time to detect failures. Default: 1800000 ms (30 minutes). Example: `1800000`.
+        :param pulumi.Input[int] group_min_session_timeout_ms: The minimum allowed session timeout for registered consumers. Longer timeouts give consumers more time to process messages in between heartbeats at the cost of a longer time to detect failures. (Default: 6000 ms (6 seconds)). Example: `6000`.
+        :param pulumi.Input[int] log_cleaner_delete_retention_ms: How long are delete records retained? (Default: 86400000 (1 day)). Example: `86400000`.
+        :param pulumi.Input[int] log_cleaner_max_compaction_lag_ms: The maximum amount of time message will remain uncompacted. Only applicable for logs that are being compacted. (Default: 9223372036854775807 ms (Long.MAX_VALUE)).
+        :param pulumi.Input[float] log_cleaner_min_cleanable_ratio: Controls log compactor frequency. Larger value means more frequent compactions but also more space wasted for logs. Consider setting log.cleaner.max.compaction.lag.ms to enforce compactions sooner, instead of setting a very high value for this option. (Default: 0.5). Example: `0.5`.
+        :param pulumi.Input[int] log_cleaner_min_compaction_lag_ms: The minimum time a message will remain uncompacted in the log. Only applicable for logs that are being compacted. (Default: 0 ms).
+        :param pulumi.Input[str] log_cleanup_policy: Enum: `delete`, `compact`, `compact,delete`. The default cleanup policy for segments beyond the retention window (Default: delete).
+        :param pulumi.Input[int] log_flush_interval_messages: The number of messages accumulated on a log partition before messages are flushed to disk (Default: 9223372036854775807 (Long.MAX_VALUE)). Example: `9223372036854775807`.
+        :param pulumi.Input[int] log_flush_interval_ms: The maximum time in ms that a message in any topic is kept in memory (page-cache) before flushed to disk. If not set, the value in log.flush.scheduler.interval.ms is used (Default: null).
+        :param pulumi.Input[int] log_index_interval_bytes: The interval with which Kafka adds an entry to the offset index (Default: 4096 bytes (4 kibibytes)). Example: `4096`.
+        :param pulumi.Input[int] log_index_size_max_bytes: The maximum size in bytes of the offset index (Default: 10485760 (10 mebibytes)). Example: `10485760`.
+        :param pulumi.Input[int] log_local_retention_bytes: The maximum size of local log segments that can grow for a partition before it gets eligible for deletion. If set to -2, the value of log.retention.bytes is used. The effective value should always be less than or equal to log.retention.bytes value. (Default: -2).
+        :param pulumi.Input[int] log_local_retention_ms: The number of milliseconds to keep the local log segments before it gets eligible for deletion. If set to -2, the value of log.retention.ms is used. The effective value should always be less than or equal to log.retention.ms value. (Default: -2).
+        :param pulumi.Input[bool] log_message_downconversion_enable: This configuration controls whether down-conversion of message formats is enabled to satisfy consume requests. (Default: true).
+        :param pulumi.Input[int] log_message_timestamp_difference_max_ms: The maximum difference allowed between the timestamp when a broker receives a message and the timestamp specified in the message (Default: 9223372036854775807 (Long.MAX_VALUE)).
+        :param pulumi.Input[str] log_message_timestamp_type: Enum: `CreateTime`, `LogAppendTime`. Define whether the timestamp in the message is message create time or log append time. (Default: CreateTime).
+        :param pulumi.Input[bool] log_preallocate: Should pre allocate file when create new segment? (Default: false).
+        :param pulumi.Input[int] log_retention_bytes: The maximum size of the log before deleting messages (Default: -1).
+        :param pulumi.Input[int] log_retention_hours: The number of hours to keep a log file before deleting it (Default: 168 hours (1 week)).
+        :param pulumi.Input[int] log_retention_ms: The number of milliseconds to keep a log file before deleting it (in milliseconds), If not set, the value in log.retention.minutes is used. If set to -1, no time limit is applied. (Default: null, log.retention.hours applies).
+        :param pulumi.Input[int] log_roll_jitter_ms: The maximum jitter to subtract from logRollTimeMillis (in milliseconds). If not set, the value in log.roll.jitter.hours is used (Default: null).
+        :param pulumi.Input[int] log_roll_ms: The maximum time before a new log segment is rolled out (in milliseconds). (Default: null, log.roll.hours applies (Default: 168, 7 days)).
+        :param pulumi.Input[int] log_segment_bytes: The maximum size of a single log file (Default: 1073741824 bytes (1 gibibyte)).
+        :param pulumi.Input[int] log_segment_delete_delay_ms: The amount of time to wait before deleting a file from the filesystem (Default: 60000 ms (1 minute)). Example: `60000`.
+        :param pulumi.Input[int] max_connections_per_ip: The maximum number of connections allowed from each ip address (Default: 2147483647).
+        :param pulumi.Input[int] max_incremental_fetch_session_cache_slots: The maximum number of incremental fetch sessions that the broker will maintain. (Default: 1000). Example: `1000`.
+        :param pulumi.Input[int] message_max_bytes: The maximum size of message that the server can receive. (Default: 1048588 bytes (1 mebibyte + 12 bytes)). Example: `1048588`.
+        :param pulumi.Input[int] min_insync_replicas: When a producer sets acks to `all` (or `-1`), min.insync.replicas specifies the minimum number of replicas that must acknowledge a write for the write to be considered successful. (Default: 1). Example: `1`.
+        :param pulumi.Input[int] num_partitions: Number of partitions for auto-created topics (Default: 1).
+        :param pulumi.Input[int] offsets_retention_minutes: Log retention window in minutes for offsets topic (Default: 10080 minutes (7 days)). Example: `10080`.
+        :param pulumi.Input[int] producer_purgatory_purge_interval_requests: The purge interval (in number of requests) of the producer request purgatory (Default: 1000).
+        :param pulumi.Input[int] replica_fetch_max_bytes: The number of bytes of messages to attempt to fetch for each partition . This is not an absolute maximum, if the first record batch in the first non-empty partition of the fetch is larger than this value, the record batch will still be returned to ensure that progress can be made. (Default: 1048576 bytes (1 mebibytes)).
+        :param pulumi.Input[int] replica_fetch_response_max_bytes: Maximum bytes expected for the entire fetch response. Records are fetched in batches, and if the first record batch in the first non-empty partition of the fetch is larger than this value, the record batch will still be returned to ensure that progress can be made. As such, this is not an absolute maximum. (Default: 10485760 bytes (10 mebibytes)).
+        :param pulumi.Input[str] sasl_oauthbearer_expected_audience: The (optional) comma-delimited setting for the broker to use to verify that the JWT was issued for one of the expected audiences. (Default: null).
+        :param pulumi.Input[str] sasl_oauthbearer_expected_issuer: Optional setting for the broker to use to verify that the JWT was created by the expected issuer.(Default: null).
+        :param pulumi.Input[str] sasl_oauthbearer_jwks_endpoint_url: OIDC JWKS endpoint URL. By setting this the SASL SSL OAuth2/OIDC authentication is enabled. See also other options for SASL OAuth2/OIDC. (Default: null).
+        :param pulumi.Input[str] sasl_oauthbearer_sub_claim_name: Name of the scope from which to extract the subject claim from the JWT.(Default: sub).
+        :param pulumi.Input[int] socket_request_max_bytes: The maximum number of bytes in a socket request (Default: 104857600 bytes).
+        :param pulumi.Input[bool] transaction_partition_verification_enable: Enable verification that checks that the partition has been added to the transaction before writing transactional records to the partition. (Default: true).
+        :param pulumi.Input[int] transaction_remove_expired_transaction_cleanup_interval_ms: The interval at which to remove transactions that have expired due to transactional.id.expiration.ms passing (Default: 3600000 ms (1 hour)). Example: `3600000`.
+        :param pulumi.Input[int] transaction_state_log_segment_bytes: The transaction topic segment bytes should be kept relatively small in order to facilitate faster log compaction and cache loads (Default: 104857600 bytes (100 mebibytes)). Example: `104857600`.
         """
         if auto_create_topics_enable is not None:
             pulumi.set(__self__, "auto_create_topics_enable", auto_create_topics_enable)
@@ -7965,7 +8058,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="autoCreateTopicsEnable")
     def auto_create_topics_enable(self) -> Optional[pulumi.Input[bool]]:
         """
-        Enable auto creation of topics.
+        Enable auto-creation of topics. (Default: true).
         """
         return pulumi.get(self, "auto_create_topics_enable")
 
@@ -7977,7 +8070,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="compressionType")
     def compression_type(self) -> Optional[pulumi.Input[str]]:
         """
-        Enum: `gzip`, `snappy`, `lz4`, `zstd`, `uncompressed`, `producer`. Specify the final compression type for a given topic. This configuration accepts the standard compression codecs (`gzip`, `snappy`, `lz4`, `zstd`). It additionally accepts `uncompressed` which is equivalent to no compression; and `producer` which means retain the original compression codec set by the producer.
+        Enum: `gzip`, `snappy`, `lz4`, `zstd`, `uncompressed`, `producer`. Specify the final compression type for a given topic. This configuration accepts the standard compression codecs (`gzip`, `snappy`, `lz4`, `zstd`). It additionally accepts `uncompressed` which is equivalent to no compression; and `producer` which means retain the original compression codec set by the producer.(Default: producer).
         """
         return pulumi.get(self, "compression_type")
 
@@ -7989,7 +8082,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="connectionsMaxIdleMs")
     def connections_max_idle_ms(self) -> Optional[pulumi.Input[int]]:
         """
-        Idle connections timeout: the server socket processor threads close the connections that idle for longer than this. Example: `540000`.
+        Idle connections timeout: the server socket processor threads close the connections that idle for longer than this. (Default: 600000 ms (10 minutes)). Example: `540000`.
         """
         return pulumi.get(self, "connections_max_idle_ms")
 
@@ -8001,7 +8094,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="defaultReplicationFactor")
     def default_replication_factor(self) -> Optional[pulumi.Input[int]]:
         """
-        Replication factor for autocreated topics.
+        Replication factor for auto-created topics (Default: 3).
         """
         return pulumi.get(self, "default_replication_factor")
 
@@ -8013,7 +8106,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="groupInitialRebalanceDelayMs")
     def group_initial_rebalance_delay_ms(self) -> Optional[pulumi.Input[int]]:
         """
-        The amount of time, in milliseconds, the group coordinator will wait for more consumers to join a new group before performing the first rebalance. A longer delay means potentially fewer rebalances, but increases the time until processing begins. The default value for this is 3 seconds. During development and testing it might be desirable to set this to 0 in order to not delay test execution time. Example: `3000`.
+        The amount of time, in milliseconds, the group coordinator will wait for more consumers to join a new group before performing the first rebalance. A longer delay means potentially fewer rebalances, but increases the time until processing begins. The default value for this is 3 seconds. During development and testing it might be desirable to set this to 0 in order to not delay test execution time. (Default: 3000 ms (3 seconds)). Example: `3000`.
         """
         return pulumi.get(self, "group_initial_rebalance_delay_ms")
 
@@ -8025,7 +8118,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="groupMaxSessionTimeoutMs")
     def group_max_session_timeout_ms(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum allowed session timeout for registered consumers. Longer timeouts give consumers more time to process messages in between heartbeats at the cost of a longer time to detect failures. Example: `1800000`.
+        The maximum allowed session timeout for registered consumers. Longer timeouts give consumers more time to process messages in between heartbeats at the cost of a longer time to detect failures. Default: 1800000 ms (30 minutes). Example: `1800000`.
         """
         return pulumi.get(self, "group_max_session_timeout_ms")
 
@@ -8037,7 +8130,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="groupMinSessionTimeoutMs")
     def group_min_session_timeout_ms(self) -> Optional[pulumi.Input[int]]:
         """
-        The minimum allowed session timeout for registered consumers. Longer timeouts give consumers more time to process messages in between heartbeats at the cost of a longer time to detect failures. Example: `6000`.
+        The minimum allowed session timeout for registered consumers. Longer timeouts give consumers more time to process messages in between heartbeats at the cost of a longer time to detect failures. (Default: 6000 ms (6 seconds)). Example: `6000`.
         """
         return pulumi.get(self, "group_min_session_timeout_ms")
 
@@ -8049,7 +8142,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logCleanerDeleteRetentionMs")
     def log_cleaner_delete_retention_ms(self) -> Optional[pulumi.Input[int]]:
         """
-        How long are delete records retained? Example: `86400000`.
+        How long are delete records retained? (Default: 86400000 (1 day)). Example: `86400000`.
         """
         return pulumi.get(self, "log_cleaner_delete_retention_ms")
 
@@ -8061,7 +8154,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logCleanerMaxCompactionLagMs")
     def log_cleaner_max_compaction_lag_ms(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum amount of time message will remain uncompacted. Only applicable for logs that are being compacted.
+        The maximum amount of time message will remain uncompacted. Only applicable for logs that are being compacted. (Default: 9223372036854775807 ms (Long.MAX_VALUE)).
         """
         return pulumi.get(self, "log_cleaner_max_compaction_lag_ms")
 
@@ -8073,7 +8166,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logCleanerMinCleanableRatio")
     def log_cleaner_min_cleanable_ratio(self) -> Optional[pulumi.Input[float]]:
         """
-        Controls log compactor frequency. Larger value means more frequent compactions but also more space wasted for logs. Consider setting log.cleaner.max.compaction.lag.ms to enforce compactions sooner, instead of setting a very high value for this option. Example: `0.5`.
+        Controls log compactor frequency. Larger value means more frequent compactions but also more space wasted for logs. Consider setting log.cleaner.max.compaction.lag.ms to enforce compactions sooner, instead of setting a very high value for this option. (Default: 0.5). Example: `0.5`.
         """
         return pulumi.get(self, "log_cleaner_min_cleanable_ratio")
 
@@ -8085,7 +8178,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logCleanerMinCompactionLagMs")
     def log_cleaner_min_compaction_lag_ms(self) -> Optional[pulumi.Input[int]]:
         """
-        The minimum time a message will remain uncompacted in the log. Only applicable for logs that are being compacted.
+        The minimum time a message will remain uncompacted in the log. Only applicable for logs that are being compacted. (Default: 0 ms).
         """
         return pulumi.get(self, "log_cleaner_min_compaction_lag_ms")
 
@@ -8097,7 +8190,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logCleanupPolicy")
     def log_cleanup_policy(self) -> Optional[pulumi.Input[str]]:
         """
-        Enum: `delete`, `compact`, `compact,delete`. The default cleanup policy for segments beyond the retention window.
+        Enum: `delete`, `compact`, `compact,delete`. The default cleanup policy for segments beyond the retention window (Default: delete).
         """
         return pulumi.get(self, "log_cleanup_policy")
 
@@ -8109,7 +8202,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logFlushIntervalMessages")
     def log_flush_interval_messages(self) -> Optional[pulumi.Input[int]]:
         """
-        The number of messages accumulated on a log partition before messages are flushed to disk. Example: `9223372036854775807`.
+        The number of messages accumulated on a log partition before messages are flushed to disk (Default: 9223372036854775807 (Long.MAX_VALUE)). Example: `9223372036854775807`.
         """
         return pulumi.get(self, "log_flush_interval_messages")
 
@@ -8121,7 +8214,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logFlushIntervalMs")
     def log_flush_interval_ms(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum time in ms that a message in any topic is kept in memory before flushed to disk. If not set, the value in log.flush.scheduler.interval.ms is used.
+        The maximum time in ms that a message in any topic is kept in memory (page-cache) before flushed to disk. If not set, the value in log.flush.scheduler.interval.ms is used (Default: null).
         """
         return pulumi.get(self, "log_flush_interval_ms")
 
@@ -8133,7 +8226,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logIndexIntervalBytes")
     def log_index_interval_bytes(self) -> Optional[pulumi.Input[int]]:
         """
-        The interval with which Kafka adds an entry to the offset index. Example: `4096`.
+        The interval with which Kafka adds an entry to the offset index (Default: 4096 bytes (4 kibibytes)). Example: `4096`.
         """
         return pulumi.get(self, "log_index_interval_bytes")
 
@@ -8145,7 +8238,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logIndexSizeMaxBytes")
     def log_index_size_max_bytes(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum size in bytes of the offset index. Example: `10485760`.
+        The maximum size in bytes of the offset index (Default: 10485760 (10 mebibytes)). Example: `10485760`.
         """
         return pulumi.get(self, "log_index_size_max_bytes")
 
@@ -8157,7 +8250,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logLocalRetentionBytes")
     def log_local_retention_bytes(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum size of local log segments that can grow for a partition before it gets eligible for deletion. If set to -2, the value of log.retention.bytes is used. The effective value should always be less than or equal to log.retention.bytes value.
+        The maximum size of local log segments that can grow for a partition before it gets eligible for deletion. If set to -2, the value of log.retention.bytes is used. The effective value should always be less than or equal to log.retention.bytes value. (Default: -2).
         """
         return pulumi.get(self, "log_local_retention_bytes")
 
@@ -8169,7 +8262,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logLocalRetentionMs")
     def log_local_retention_ms(self) -> Optional[pulumi.Input[int]]:
         """
-        The number of milliseconds to keep the local log segments before it gets eligible for deletion. If set to -2, the value of log.retention.ms is used. The effective value should always be less than or equal to log.retention.ms value.
+        The number of milliseconds to keep the local log segments before it gets eligible for deletion. If set to -2, the value of log.retention.ms is used. The effective value should always be less than or equal to log.retention.ms value. (Default: -2).
         """
         return pulumi.get(self, "log_local_retention_ms")
 
@@ -8181,7 +8274,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logMessageDownconversionEnable")
     def log_message_downconversion_enable(self) -> Optional[pulumi.Input[bool]]:
         """
-        This configuration controls whether down-conversion of message formats is enabled to satisfy consume requests.
+        This configuration controls whether down-conversion of message formats is enabled to satisfy consume requests. (Default: true).
         """
         return pulumi.get(self, "log_message_downconversion_enable")
 
@@ -8193,7 +8286,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logMessageTimestampDifferenceMaxMs")
     def log_message_timestamp_difference_max_ms(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum difference allowed between the timestamp when a broker receives a message and the timestamp specified in the message.
+        The maximum difference allowed between the timestamp when a broker receives a message and the timestamp specified in the message (Default: 9223372036854775807 (Long.MAX_VALUE)).
         """
         return pulumi.get(self, "log_message_timestamp_difference_max_ms")
 
@@ -8205,7 +8298,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logMessageTimestampType")
     def log_message_timestamp_type(self) -> Optional[pulumi.Input[str]]:
         """
-        Enum: `CreateTime`, `LogAppendTime`. Define whether the timestamp in the message is message create time or log append time.
+        Enum: `CreateTime`, `LogAppendTime`. Define whether the timestamp in the message is message create time or log append time. (Default: CreateTime).
         """
         return pulumi.get(self, "log_message_timestamp_type")
 
@@ -8217,7 +8310,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logPreallocate")
     def log_preallocate(self) -> Optional[pulumi.Input[bool]]:
         """
-        Should pre allocate file when create new segment?
+        Should pre allocate file when create new segment? (Default: false).
         """
         return pulumi.get(self, "log_preallocate")
 
@@ -8229,7 +8322,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logRetentionBytes")
     def log_retention_bytes(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum size of the log before deleting messages.
+        The maximum size of the log before deleting messages (Default: -1).
         """
         return pulumi.get(self, "log_retention_bytes")
 
@@ -8241,7 +8334,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logRetentionHours")
     def log_retention_hours(self) -> Optional[pulumi.Input[int]]:
         """
-        The number of hours to keep a log file before deleting it.
+        The number of hours to keep a log file before deleting it (Default: 168 hours (1 week)).
         """
         return pulumi.get(self, "log_retention_hours")
 
@@ -8253,7 +8346,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logRetentionMs")
     def log_retention_ms(self) -> Optional[pulumi.Input[int]]:
         """
-        The number of milliseconds to keep a log file before deleting it (in milliseconds), If not set, the value in log.retention.minutes is used. If set to -1, no time limit is applied.
+        The number of milliseconds to keep a log file before deleting it (in milliseconds), If not set, the value in log.retention.minutes is used. If set to -1, no time limit is applied. (Default: null, log.retention.hours applies).
         """
         return pulumi.get(self, "log_retention_ms")
 
@@ -8265,7 +8358,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logRollJitterMs")
     def log_roll_jitter_ms(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum jitter to subtract from logRollTimeMillis (in milliseconds). If not set, the value in log.roll.jitter.hours is used.
+        The maximum jitter to subtract from logRollTimeMillis (in milliseconds). If not set, the value in log.roll.jitter.hours is used (Default: null).
         """
         return pulumi.get(self, "log_roll_jitter_ms")
 
@@ -8277,7 +8370,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logRollMs")
     def log_roll_ms(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum time before a new log segment is rolled out (in milliseconds).
+        The maximum time before a new log segment is rolled out (in milliseconds). (Default: null, log.roll.hours applies (Default: 168, 7 days)).
         """
         return pulumi.get(self, "log_roll_ms")
 
@@ -8289,7 +8382,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logSegmentBytes")
     def log_segment_bytes(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum size of a single log file.
+        The maximum size of a single log file (Default: 1073741824 bytes (1 gibibyte)).
         """
         return pulumi.get(self, "log_segment_bytes")
 
@@ -8301,7 +8394,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="logSegmentDeleteDelayMs")
     def log_segment_delete_delay_ms(self) -> Optional[pulumi.Input[int]]:
         """
-        The amount of time to wait before deleting a file from the filesystem. Example: `60000`.
+        The amount of time to wait before deleting a file from the filesystem (Default: 60000 ms (1 minute)). Example: `60000`.
         """
         return pulumi.get(self, "log_segment_delete_delay_ms")
 
@@ -8313,7 +8406,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="maxConnectionsPerIp")
     def max_connections_per_ip(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum number of connections allowed from each ip address (defaults to 2147483647).
+        The maximum number of connections allowed from each ip address (Default: 2147483647).
         """
         return pulumi.get(self, "max_connections_per_ip")
 
@@ -8325,7 +8418,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="maxIncrementalFetchSessionCacheSlots")
     def max_incremental_fetch_session_cache_slots(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum number of incremental fetch sessions that the broker will maintain. Example: `1000`.
+        The maximum number of incremental fetch sessions that the broker will maintain. (Default: 1000). Example: `1000`.
         """
         return pulumi.get(self, "max_incremental_fetch_session_cache_slots")
 
@@ -8337,7 +8430,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="messageMaxBytes")
     def message_max_bytes(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum size of message that the server can receive. Example: `1048588`.
+        The maximum size of message that the server can receive. (Default: 1048588 bytes (1 mebibyte + 12 bytes)). Example: `1048588`.
         """
         return pulumi.get(self, "message_max_bytes")
 
@@ -8349,7 +8442,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="minInsyncReplicas")
     def min_insync_replicas(self) -> Optional[pulumi.Input[int]]:
         """
-        When a producer sets acks to `all` (or `-1`), min.insync.replicas specifies the minimum number of replicas that must acknowledge a write for the write to be considered successful. Example: `1`.
+        When a producer sets acks to `all` (or `-1`), min.insync.replicas specifies the minimum number of replicas that must acknowledge a write for the write to be considered successful. (Default: 1). Example: `1`.
         """
         return pulumi.get(self, "min_insync_replicas")
 
@@ -8361,7 +8454,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="numPartitions")
     def num_partitions(self) -> Optional[pulumi.Input[int]]:
         """
-        Number of partitions for autocreated topics.
+        Number of partitions for auto-created topics (Default: 1).
         """
         return pulumi.get(self, "num_partitions")
 
@@ -8373,7 +8466,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="offsetsRetentionMinutes")
     def offsets_retention_minutes(self) -> Optional[pulumi.Input[int]]:
         """
-        Log retention window in minutes for offsets topic. Example: `10080`.
+        Log retention window in minutes for offsets topic (Default: 10080 minutes (7 days)). Example: `10080`.
         """
         return pulumi.get(self, "offsets_retention_minutes")
 
@@ -8385,7 +8478,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="producerPurgatoryPurgeIntervalRequests")
     def producer_purgatory_purge_interval_requests(self) -> Optional[pulumi.Input[int]]:
         """
-        The purge interval (in number of requests) of the producer request purgatory(defaults to 1000).
+        The purge interval (in number of requests) of the producer request purgatory (Default: 1000).
         """
         return pulumi.get(self, "producer_purgatory_purge_interval_requests")
 
@@ -8397,7 +8490,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="replicaFetchMaxBytes")
     def replica_fetch_max_bytes(self) -> Optional[pulumi.Input[int]]:
         """
-        The number of bytes of messages to attempt to fetch for each partition (defaults to 1048576). This is not an absolute maximum, if the first record batch in the first non-empty partition of the fetch is larger than this value, the record batch will still be returned to ensure that progress can be made.
+        The number of bytes of messages to attempt to fetch for each partition . This is not an absolute maximum, if the first record batch in the first non-empty partition of the fetch is larger than this value, the record batch will still be returned to ensure that progress can be made. (Default: 1048576 bytes (1 mebibytes)).
         """
         return pulumi.get(self, "replica_fetch_max_bytes")
 
@@ -8409,7 +8502,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="replicaFetchResponseMaxBytes")
     def replica_fetch_response_max_bytes(self) -> Optional[pulumi.Input[int]]:
         """
-        Maximum bytes expected for the entire fetch response (defaults to 10485760). Records are fetched in batches, and if the first record batch in the first non-empty partition of the fetch is larger than this value, the record batch will still be returned to ensure that progress can be made. As such, this is not an absolute maximum.
+        Maximum bytes expected for the entire fetch response. Records are fetched in batches, and if the first record batch in the first non-empty partition of the fetch is larger than this value, the record batch will still be returned to ensure that progress can be made. As such, this is not an absolute maximum. (Default: 10485760 bytes (10 mebibytes)).
         """
         return pulumi.get(self, "replica_fetch_response_max_bytes")
 
@@ -8421,7 +8514,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="saslOauthbearerExpectedAudience")
     def sasl_oauthbearer_expected_audience(self) -> Optional[pulumi.Input[str]]:
         """
-        The (optional) comma-delimited setting for the broker to use to verify that the JWT was issued for one of the expected audiences.
+        The (optional) comma-delimited setting for the broker to use to verify that the JWT was issued for one of the expected audiences. (Default: null).
         """
         return pulumi.get(self, "sasl_oauthbearer_expected_audience")
 
@@ -8433,7 +8526,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="saslOauthbearerExpectedIssuer")
     def sasl_oauthbearer_expected_issuer(self) -> Optional[pulumi.Input[str]]:
         """
-        Optional setting for the broker to use to verify that the JWT was created by the expected issuer.
+        Optional setting for the broker to use to verify that the JWT was created by the expected issuer.(Default: null).
         """
         return pulumi.get(self, "sasl_oauthbearer_expected_issuer")
 
@@ -8445,7 +8538,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="saslOauthbearerJwksEndpointUrl")
     def sasl_oauthbearer_jwks_endpoint_url(self) -> Optional[pulumi.Input[str]]:
         """
-        OIDC JWKS endpoint URL. By setting this the SASL SSL OAuth2/OIDC authentication is enabled. See also other options for SASL OAuth2/OIDC.
+        OIDC JWKS endpoint URL. By setting this the SASL SSL OAuth2/OIDC authentication is enabled. See also other options for SASL OAuth2/OIDC. (Default: null).
         """
         return pulumi.get(self, "sasl_oauthbearer_jwks_endpoint_url")
 
@@ -8457,7 +8550,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="saslOauthbearerSubClaimName")
     def sasl_oauthbearer_sub_claim_name(self) -> Optional[pulumi.Input[str]]:
         """
-        Name of the scope from which to extract the subject claim from the JWT. Defaults to sub.
+        Name of the scope from which to extract the subject claim from the JWT.(Default: sub).
         """
         return pulumi.get(self, "sasl_oauthbearer_sub_claim_name")
 
@@ -8469,7 +8562,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="socketRequestMaxBytes")
     def socket_request_max_bytes(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum number of bytes in a socket request (defaults to 104857600).
+        The maximum number of bytes in a socket request (Default: 104857600 bytes).
         """
         return pulumi.get(self, "socket_request_max_bytes")
 
@@ -8481,7 +8574,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="transactionPartitionVerificationEnable")
     def transaction_partition_verification_enable(self) -> Optional[pulumi.Input[bool]]:
         """
-        Enable verification that checks that the partition has been added to the transaction before writing transactional records to the partition.
+        Enable verification that checks that the partition has been added to the transaction before writing transactional records to the partition. (Default: true).
         """
         return pulumi.get(self, "transaction_partition_verification_enable")
 
@@ -8493,7 +8586,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="transactionRemoveExpiredTransactionCleanupIntervalMs")
     def transaction_remove_expired_transaction_cleanup_interval_ms(self) -> Optional[pulumi.Input[int]]:
         """
-        The interval at which to remove transactions that have expired due to transactional.id.expiration.ms passing (defaults to 3600000 (1 hour)).
+        The interval at which to remove transactions that have expired due to transactional.id.expiration.ms passing (Default: 3600000 ms (1 hour)). Example: `3600000`.
         """
         return pulumi.get(self, "transaction_remove_expired_transaction_cleanup_interval_ms")
 
@@ -8505,7 +8598,7 @@ class KafkaKafkaUserConfigKafkaArgs:
     @pulumi.getter(name="transactionStateLogSegmentBytes")
     def transaction_state_log_segment_bytes(self) -> Optional[pulumi.Input[int]]:
         """
-        The transaction topic segment bytes should be kept relatively small in order to facilitate faster log compaction and cache loads (defaults to 104857600 (100 mebibytes)).
+        The transaction topic segment bytes should be kept relatively small in order to facilitate faster log compaction and cache loads (Default: 104857600 bytes (100 mebibytes)). Example: `104857600`.
         """
         return pulumi.get(self, "transaction_state_log_segment_bytes")
 
@@ -9175,6 +9268,61 @@ class KafkaKafkaUserConfigKafkaRestConfigArgs:
         pulumi.set(self, "simpleconsumer_pool_size_max", value)
 
 
+@pulumi.input_type
+class KafkaKafkaUserConfigKafkaSaslMechanismsArgs:
+    def __init__(__self__, *,
+                 plain: Optional[pulumi.Input[bool]] = None,
+                 scram_sha256: Optional[pulumi.Input[bool]] = None,
+                 scram_sha512: Optional[pulumi.Input[bool]] = None):
+        """
+        :param pulumi.Input[bool] plain: Enable PLAIN mechanism. Default: `true`.
+        :param pulumi.Input[bool] scram_sha256: Enable SCRAM-SHA-256 mechanism. Default: `true`.
+        :param pulumi.Input[bool] scram_sha512: Enable SCRAM-SHA-512 mechanism. Default: `true`.
+        """
+        if plain is not None:
+            pulumi.set(__self__, "plain", plain)
+        if scram_sha256 is not None:
+            pulumi.set(__self__, "scram_sha256", scram_sha256)
+        if scram_sha512 is not None:
+            pulumi.set(__self__, "scram_sha512", scram_sha512)
+
+    @property
+    @pulumi.getter
+    def plain(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Enable PLAIN mechanism. Default: `true`.
+        """
+        return pulumi.get(self, "plain")
+
+    @plain.setter
+    def plain(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "plain", value)
+
+    @property
+    @pulumi.getter(name="scramSha256")
+    def scram_sha256(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Enable SCRAM-SHA-256 mechanism. Default: `true`.
+        """
+        return pulumi.get(self, "scram_sha256")
+
+    @scram_sha256.setter
+    def scram_sha256(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "scram_sha256", value)
+
+    @property
+    @pulumi.getter(name="scramSha512")
+    def scram_sha512(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Enable SCRAM-SHA-512 mechanism. Default: `true`.
+        """
+        return pulumi.get(self, "scram_sha512")
+
+    @scram_sha512.setter
+    def scram_sha512(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "scram_sha512", value)
+
+
 @pulumi.input_type
 class KafkaKafkaUserConfigPrivateAccessArgs:
     def __init__(__self__, *,
@@ -9864,6 +10012,7 @@ class KafkaMirrorMakerKafkaMirrormakerUserConfigIpFilterObjectArgs:
 @pulumi.input_type
 class KafkaMirrorMakerKafkaMirrormakerUserConfigKafkaMirrormakerArgs:
     def __init__(__self__, *,
+                 admin_timeout_ms: Optional[pulumi.Input[int]] = None,
                  emit_checkpoints_enabled: Optional[pulumi.Input[bool]] = None,
                  emit_checkpoints_interval_seconds: Optional[pulumi.Input[int]] = None,
                  groups: Optional[pulumi.Input[str]] = None,
@@ -9878,6 +10027,7 @@ class KafkaMirrorMakerKafkaMirrormakerUserConfigKafkaMirrormakerArgs:
                  sync_topic_configs_enabled: Optional[pulumi.Input[bool]] = None,
                  tasks_max_per_cpu: Optional[pulumi.Input[int]] = None):
         """
+        :param pulumi.Input[int] admin_timeout_ms: Timeout for administrative tasks, e.g. detecting new topics, loading of consumer group and offsets. Defaults to 60000 milliseconds (1 minute).
         :param pulumi.Input[bool] emit_checkpoints_enabled: Whether to emit consumer group offset checkpoints to target cluster periodically (default: true).
         :param pulumi.Input[int] emit_checkpoints_interval_seconds: Frequency at which consumer group offset checkpoints are emitted (default: 60, every minute). Example: `60`.
         :param pulumi.Input[str] groups: Consumer groups to replicate. Supports comma-separated group IDs and regexes. Example: `.*`.
@@ -9892,6 +10042,8 @@ class KafkaMirrorMakerKafkaMirrormakerUserConfigKafkaMirrormakerArgs:
         :param pulumi.Input[bool] sync_topic_configs_enabled: Whether to periodically configure remote topics to match their corresponding upstream topics.
         :param pulumi.Input[int] tasks_max_per_cpu: `tasks.max` is set to this multiplied by the number of CPUs in the service. Default: `1`.
         """
+        if admin_timeout_ms is not None:
+            pulumi.set(__self__, "admin_timeout_ms", admin_timeout_ms)
         if emit_checkpoints_enabled is not None:
             pulumi.set(__self__, "emit_checkpoints_enabled", emit_checkpoints_enabled)
         if emit_checkpoints_interval_seconds is not None:
@@ -9919,6 +10071,18 @@ class KafkaMirrorMakerKafkaMirrormakerUserConfigKafkaMirrormakerArgs:
         if tasks_max_per_cpu is not None:
             pulumi.set(__self__, "tasks_max_per_cpu", tasks_max_per_cpu)
 
+    @property
+    @pulumi.getter(name="adminTimeoutMs")
+    def admin_timeout_ms(self) -> Optional[pulumi.Input[int]]:
+        """
+        Timeout for administrative tasks, e.g. detecting new topics, loading of consumer group and offsets. Defaults to 60000 milliseconds (1 minute).
+        """
+        return pulumi.get(self, "admin_timeout_ms")
+
+    @admin_timeout_ms.setter
+    def admin_timeout_ms(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "admin_timeout_ms", value)
+
     @property
     @pulumi.getter(name="emitCheckpointsEnabled")
     def emit_checkpoints_enabled(self) -> Optional[pulumi.Input[bool]]:
@@ -13225,6 +13389,7 @@ class MySqlMysqlUserConfigMigrationArgs:
                  port: pulumi.Input[int],
                  dbname: Optional[pulumi.Input[str]] = None,
                  ignore_dbs: Optional[pulumi.Input[str]] = None,
+                 ignore_roles: Optional[pulumi.Input[str]] = None,
                  method: Optional[pulumi.Input[str]] = None,
                  password: Optional[pulumi.Input[str]] = None,
                  ssl: Optional[pulumi.Input[bool]] = None,
@@ -13234,6 +13399,7 @@ class MySqlMysqlUserConfigMigrationArgs:
         :param pulumi.Input[int] port: Port number of the server where to migrate data from. Example: `1234`.
         :param pulumi.Input[str] dbname: Database name for bootstrapping the initial connection. Example: `defaultdb`.
         :param pulumi.Input[str] ignore_dbs: Comma-separated list of databases, which should be ignored during migration (supported by MySQL and PostgreSQL only at the moment). Example: `db1,db2`.
+        :param pulumi.Input[str] ignore_roles: Comma-separated list of database roles, which should be ignored during migration (supported by PostgreSQL only at the moment). Example: `role1,role2`.
         :param pulumi.Input[str] method: Enum: `dump`, `replication`. The migration method to be used (currently supported only by Redis, Dragonfly, MySQL and PostgreSQL service types).
         :param pulumi.Input[str] password: Password for authentication with the server where to migrate data from. Example: `jjKk45Nnd`.
         :param pulumi.Input[bool] ssl: The server where to migrate data from is secured with SSL. Default: `true`.
@@ -13245,6 +13411,8 @@ class MySqlMysqlUserConfigMigrationArgs:
             pulumi.set(__self__, "dbname", dbname)
         if ignore_dbs is not None:
             pulumi.set(__self__, "ignore_dbs", ignore_dbs)
+        if ignore_roles is not None:
+            pulumi.set(__self__, "ignore_roles", ignore_roles)
         if method is not None:
             pulumi.set(__self__, "method", method)
         if password is not None:
@@ -13302,6 +13470,18 @@ class MySqlMysqlUserConfigMigrationArgs:
     def ignore_dbs(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "ignore_dbs", value)
 
+    @property
+    @pulumi.getter(name="ignoreRoles")
+    def ignore_roles(self) -> Optional[pulumi.Input[str]]:
+        """
+        Comma-separated list of database roles, which should be ignored during migration (supported by PostgreSQL only at the moment). Example: `role1,role2`.
+        """
+        return pulumi.get(self, "ignore_roles")
+
+    @ignore_roles.setter
+    def ignore_roles(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "ignore_roles", value)
+
     @property
     @pulumi.getter
     def method(self) -> Optional[pulumi.Input[str]]:
@@ -14325,9 +14505,12 @@ class OpenSearchOpensearchArgs:
 class OpenSearchOpensearchUserConfigArgs:
     def __init__(__self__, *,
                  additional_backup_regions: Optional[pulumi.Input[str]] = None,
+                 azure_migration: Optional[pulumi.Input['OpenSearchOpensearchUserConfigAzureMigrationArgs']] = None,
                  custom_domain: Optional[pulumi.Input[str]] = None,
                  disable_replication_factor_adjustment: Optional[pulumi.Input[bool]] = None,
+                 gcs_migration: Optional[pulumi.Input['OpenSearchOpensearchUserConfigGcsMigrationArgs']] = None,
                  index_patterns: Optional[pulumi.Input[Sequence[pulumi.Input['OpenSearchOpensearchUserConfigIndexPatternArgs']]]] = None,
+                 index_rollup: Optional[pulumi.Input['OpenSearchOpensearchUserConfigIndexRollupArgs']] = None,
                  index_template: Optional[pulumi.Input['OpenSearchOpensearchUserConfigIndexTemplateArgs']] = None,
                  ip_filter_objects: Optional[pulumi.Input[Sequence[pulumi.Input['OpenSearchOpensearchUserConfigIpFilterObjectArgs']]]] = None,
                  ip_filter_strings: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
@@ -14343,6 +14526,7 @@ class OpenSearchOpensearchUserConfigArgs:
                  project_to_fork_from: Optional[pulumi.Input[str]] = None,
                  public_access: Optional[pulumi.Input['OpenSearchOpensearchUserConfigPublicAccessArgs']] = None,
                  recovery_basebackup_name: Optional[pulumi.Input[str]] = None,
+                 s3_migration: Optional[pulumi.Input['OpenSearchOpensearchUserConfigS3MigrationArgs']] = None,
                  saml: Optional[pulumi.Input['OpenSearchOpensearchUserConfigSamlArgs']] = None,
                  service_log: Optional[pulumi.Input[bool]] = None,
                  service_to_fork_from: Optional[pulumi.Input[str]] = None,
@@ -14352,6 +14536,7 @@ class OpenSearchOpensearchUserConfigArgs:
         :param pulumi.Input[str] custom_domain: Serve the web frontend using a custom CNAME pointing to the Aiven DNS name. Example: `grafana.example.org`.
         :param pulumi.Input[bool] disable_replication_factor_adjustment: Disable automatic replication factor adjustment for multi-node services. By default, Aiven ensures all indexes are replicated at least to two nodes. Note: Due to potential data loss in case of losing a service node, this setting can no longer be activated.
         :param pulumi.Input[Sequence[pulumi.Input['OpenSearchOpensearchUserConfigIndexPatternArgs']]] index_patterns: Index patterns
+        :param pulumi.Input['OpenSearchOpensearchUserConfigIndexRollupArgs'] index_rollup: Index rollup settings
         :param pulumi.Input['OpenSearchOpensearchUserConfigIndexTemplateArgs'] index_template: Template settings for all new indexes
         :param pulumi.Input[Sequence[pulumi.Input['OpenSearchOpensearchUserConfigIpFilterObjectArgs']]] ip_filter_objects: Allow incoming connections from CIDR address block, e.g. `10.20.0.0/16`
         :param pulumi.Input[Sequence[pulumi.Input[str]]] ip_filter_strings: Allow incoming connections from CIDR address block, e.g. `10.20.0.0/16`.
@@ -14374,12 +14559,18 @@ class OpenSearchOpensearchUserConfigArgs:
         """
         if additional_backup_regions is not None:
             pulumi.set(__self__, "additional_backup_regions", additional_backup_regions)
+        if azure_migration is not None:
+            pulumi.set(__self__, "azure_migration", azure_migration)
         if custom_domain is not None:
             pulumi.set(__self__, "custom_domain", custom_domain)
         if disable_replication_factor_adjustment is not None:
             pulumi.set(__self__, "disable_replication_factor_adjustment", disable_replication_factor_adjustment)
+        if gcs_migration is not None:
+            pulumi.set(__self__, "gcs_migration", gcs_migration)
         if index_patterns is not None:
             pulumi.set(__self__, "index_patterns", index_patterns)
+        if index_rollup is not None:
+            pulumi.set(__self__, "index_rollup", index_rollup)
         if index_template is not None:
             pulumi.set(__self__, "index_template", index_template)
         if ip_filter_objects is not None:
@@ -14413,6 +14604,8 @@ class OpenSearchOpensearchUserConfigArgs:
             pulumi.set(__self__, "public_access", public_access)
         if recovery_basebackup_name is not None:
             pulumi.set(__self__, "recovery_basebackup_name", recovery_basebackup_name)
+        if s3_migration is not None:
+            pulumi.set(__self__, "s3_migration", s3_migration)
         if saml is not None:
             pulumi.set(__self__, "saml", saml)
         if service_log is not None:
@@ -14434,6 +14627,15 @@ class OpenSearchOpensearchUserConfigArgs:
     def additional_backup_regions(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "additional_backup_regions", value)
 
+    @property
+    @pulumi.getter(name="azureMigration")
+    def azure_migration(self) -> Optional[pulumi.Input['OpenSearchOpensearchUserConfigAzureMigrationArgs']]:
+        return pulumi.get(self, "azure_migration")
+
+    @azure_migration.setter
+    def azure_migration(self, value: Optional[pulumi.Input['OpenSearchOpensearchUserConfigAzureMigrationArgs']]):
+        pulumi.set(self, "azure_migration", value)
+
     @property
     @pulumi.getter(name="customDomain")
     def custom_domain(self) -> Optional[pulumi.Input[str]]:
@@ -14458,6 +14660,15 @@ class OpenSearchOpensearchUserConfigArgs:
     def disable_replication_factor_adjustment(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "disable_replication_factor_adjustment", value)
 
+    @property
+    @pulumi.getter(name="gcsMigration")
+    def gcs_migration(self) -> Optional[pulumi.Input['OpenSearchOpensearchUserConfigGcsMigrationArgs']]:
+        return pulumi.get(self, "gcs_migration")
+
+    @gcs_migration.setter
+    def gcs_migration(self, value: Optional[pulumi.Input['OpenSearchOpensearchUserConfigGcsMigrationArgs']]):
+        pulumi.set(self, "gcs_migration", value)
+
     @property
     @pulumi.getter(name="indexPatterns")
     def index_patterns(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['OpenSearchOpensearchUserConfigIndexPatternArgs']]]]:
@@ -14470,6 +14681,18 @@ class OpenSearchOpensearchUserConfigArgs:
     def index_patterns(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['OpenSearchOpensearchUserConfigIndexPatternArgs']]]]):
         pulumi.set(self, "index_patterns", value)
 
+    @property
+    @pulumi.getter(name="indexRollup")
+    def index_rollup(self) -> Optional[pulumi.Input['OpenSearchOpensearchUserConfigIndexRollupArgs']]:
+        """
+        Index rollup settings
+        """
+        return pulumi.get(self, "index_rollup")
+
+    @index_rollup.setter
+    def index_rollup(self, value: Optional[pulumi.Input['OpenSearchOpensearchUserConfigIndexRollupArgs']]):
+        pulumi.set(self, "index_rollup", value)
+
     @property
     @pulumi.getter(name="indexTemplate")
     def index_template(self) -> Optional[pulumi.Input['OpenSearchOpensearchUserConfigIndexTemplateArgs']]:
@@ -14651,6 +14874,15 @@ class OpenSearchOpensearchUserConfigArgs:
     def recovery_basebackup_name(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "recovery_basebackup_name", value)
 
+    @property
+    @pulumi.getter(name="s3Migration")
+    def s3_migration(self) -> Optional[pulumi.Input['OpenSearchOpensearchUserConfigS3MigrationArgs']]:
+        return pulumi.get(self, "s3_migration")
+
+    @s3_migration.setter
+    def s3_migration(self, value: Optional[pulumi.Input['OpenSearchOpensearchUserConfigS3MigrationArgs']]):
+        pulumi.set(self, "s3_migration", value)
+
     @property
     @pulumi.getter
     def saml(self) -> Optional[pulumi.Input['OpenSearchOpensearchUserConfigSamlArgs']]:
@@ -14700,6 +14932,252 @@ class OpenSearchOpensearchUserConfigArgs:
         pulumi.set(self, "static_ips", value)
 
 
+@pulumi.input_type
+class OpenSearchOpensearchUserConfigAzureMigrationArgs:
+    def __init__(__self__, *,
+                 account: pulumi.Input[str],
+                 base_path: pulumi.Input[str],
+                 container: pulumi.Input[str],
+                 snapshot_name: pulumi.Input[str],
+                 chunk_size: Optional[pulumi.Input[str]] = None,
+                 compress: Optional[pulumi.Input[bool]] = None,
+                 endpoint_suffix: Optional[pulumi.Input[str]] = None,
+                 key: Optional[pulumi.Input[str]] = None,
+                 sas_token: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] account: Azure account name.
+        :param pulumi.Input[str] base_path: The path to the repository data within its container. The value of this setting should not start or end with a /.
+        :param pulumi.Input[str] container: Azure container name.
+        :param pulumi.Input[str] snapshot_name: The snapshot name to restore from.
+        :param pulumi.Input[str] chunk_size: Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
+        :param pulumi.Input[bool] compress: When set to true metadata files are stored in compressed format.
+        :param pulumi.Input[str] endpoint_suffix: Defines the DNS suffix for Azure Storage endpoints.
+        :param pulumi.Input[str] key: Azure account secret key. One of key or sas_token should be specified.
+        :param pulumi.Input[str] sas_token: A shared access signatures (SAS) token. One of key or sas_token should be specified.
+        """
+        pulumi.set(__self__, "account", account)
+        pulumi.set(__self__, "base_path", base_path)
+        pulumi.set(__self__, "container", container)
+        pulumi.set(__self__, "snapshot_name", snapshot_name)
+        if chunk_size is not None:
+            pulumi.set(__self__, "chunk_size", chunk_size)
+        if compress is not None:
+            pulumi.set(__self__, "compress", compress)
+        if endpoint_suffix is not None:
+            pulumi.set(__self__, "endpoint_suffix", endpoint_suffix)
+        if key is not None:
+            pulumi.set(__self__, "key", key)
+        if sas_token is not None:
+            pulumi.set(__self__, "sas_token", sas_token)
+
+    @property
+    @pulumi.getter
+    def account(self) -> pulumi.Input[str]:
+        """
+        Azure account name.
+        """
+        return pulumi.get(self, "account")
+
+    @account.setter
+    def account(self, value: pulumi.Input[str]):
+        pulumi.set(self, "account", value)
+
+    @property
+    @pulumi.getter(name="basePath")
+    def base_path(self) -> pulumi.Input[str]:
+        """
+        The path to the repository data within its container. The value of this setting should not start or end with a /.
+        """
+        return pulumi.get(self, "base_path")
+
+    @base_path.setter
+    def base_path(self, value: pulumi.Input[str]):
+        pulumi.set(self, "base_path", value)
+
+    @property
+    @pulumi.getter
+    def container(self) -> pulumi.Input[str]:
+        """
+        Azure container name.
+        """
+        return pulumi.get(self, "container")
+
+    @container.setter
+    def container(self, value: pulumi.Input[str]):
+        pulumi.set(self, "container", value)
+
+    @property
+    @pulumi.getter(name="snapshotName")
+    def snapshot_name(self) -> pulumi.Input[str]:
+        """
+        The snapshot name to restore from.
+        """
+        return pulumi.get(self, "snapshot_name")
+
+    @snapshot_name.setter
+    def snapshot_name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "snapshot_name", value)
+
+    @property
+    @pulumi.getter(name="chunkSize")
+    def chunk_size(self) -> Optional[pulumi.Input[str]]:
+        """
+        Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
+        """
+        return pulumi.get(self, "chunk_size")
+
+    @chunk_size.setter
+    def chunk_size(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "chunk_size", value)
+
+    @property
+    @pulumi.getter
+    def compress(self) -> Optional[pulumi.Input[bool]]:
+        """
+        When set to true metadata files are stored in compressed format.
+        """
+        return pulumi.get(self, "compress")
+
+    @compress.setter
+    def compress(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "compress", value)
+
+    @property
+    @pulumi.getter(name="endpointSuffix")
+    def endpoint_suffix(self) -> Optional[pulumi.Input[str]]:
+        """
+        Defines the DNS suffix for Azure Storage endpoints.
+        """
+        return pulumi.get(self, "endpoint_suffix")
+
+    @endpoint_suffix.setter
+    def endpoint_suffix(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "endpoint_suffix", value)
+
+    @property
+    @pulumi.getter
+    def key(self) -> Optional[pulumi.Input[str]]:
+        """
+        Azure account secret key. One of key or sas_token should be specified.
+        """
+        return pulumi.get(self, "key")
+
+    @key.setter
+    def key(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "key", value)
+
+    @property
+    @pulumi.getter(name="sasToken")
+    def sas_token(self) -> Optional[pulumi.Input[str]]:
+        """
+        A shared access signatures (SAS) token. One of key or sas_token should be specified.
+        """
+        return pulumi.get(self, "sas_token")
+
+    @sas_token.setter
+    def sas_token(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "sas_token", value)
+
+
+@pulumi.input_type
+class OpenSearchOpensearchUserConfigGcsMigrationArgs:
+    def __init__(__self__, *,
+                 base_path: pulumi.Input[str],
+                 bucket: pulumi.Input[str],
+                 credentials: pulumi.Input[str],
+                 snapshot_name: pulumi.Input[str],
+                 chunk_size: Optional[pulumi.Input[str]] = None,
+                 compress: Optional[pulumi.Input[bool]] = None):
+        """
+        :param pulumi.Input[str] base_path: The path to the repository data within its container. The value of this setting should not start or end with a /.
+        :param pulumi.Input[str] bucket: The path to the repository data within its container.
+        :param pulumi.Input[str] credentials: Google Cloud Storage credentials file content.
+        :param pulumi.Input[str] snapshot_name: The snapshot name to restore from.
+        :param pulumi.Input[str] chunk_size: Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
+        :param pulumi.Input[bool] compress: When set to true metadata files are stored in compressed format.
+        """
+        pulumi.set(__self__, "base_path", base_path)
+        pulumi.set(__self__, "bucket", bucket)
+        pulumi.set(__self__, "credentials", credentials)
+        pulumi.set(__self__, "snapshot_name", snapshot_name)
+        if chunk_size is not None:
+            pulumi.set(__self__, "chunk_size", chunk_size)
+        if compress is not None:
+            pulumi.set(__self__, "compress", compress)
+
+    @property
+    @pulumi.getter(name="basePath")
+    def base_path(self) -> pulumi.Input[str]:
+        """
+        The path to the repository data within its container. The value of this setting should not start or end with a /.
+        """
+        return pulumi.get(self, "base_path")
+
+    @base_path.setter
+    def base_path(self, value: pulumi.Input[str]):
+        pulumi.set(self, "base_path", value)
+
+    @property
+    @pulumi.getter
+    def bucket(self) -> pulumi.Input[str]:
+        """
+        The path to the repository data within its container.
+        """
+        return pulumi.get(self, "bucket")
+
+    @bucket.setter
+    def bucket(self, value: pulumi.Input[str]):
+        pulumi.set(self, "bucket", value)
+
+    @property
+    @pulumi.getter
+    def credentials(self) -> pulumi.Input[str]:
+        """
+        Google Cloud Storage credentials file content.
+        """
+        return pulumi.get(self, "credentials")
+
+    @credentials.setter
+    def credentials(self, value: pulumi.Input[str]):
+        pulumi.set(self, "credentials", value)
+
+    @property
+    @pulumi.getter(name="snapshotName")
+    def snapshot_name(self) -> pulumi.Input[str]:
+        """
+        The snapshot name to restore from.
+        """
+        return pulumi.get(self, "snapshot_name")
+
+    @snapshot_name.setter
+    def snapshot_name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "snapshot_name", value)
+
+    @property
+    @pulumi.getter(name="chunkSize")
+    def chunk_size(self) -> Optional[pulumi.Input[str]]:
+        """
+        Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
+        """
+        return pulumi.get(self, "chunk_size")
+
+    @chunk_size.setter
+    def chunk_size(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "chunk_size", value)
+
+    @property
+    @pulumi.getter
+    def compress(self) -> Optional[pulumi.Input[bool]]:
+        """
+        When set to true metadata files are stored in compressed format.
+        """
+        return pulumi.get(self, "compress")
+
+    @compress.setter
+    def compress(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "compress", value)
+
+
 @pulumi.input_type
 class OpenSearchOpensearchUserConfigIndexPatternArgs:
     def __init__(__self__, *,
@@ -14753,6 +15231,93 @@ class OpenSearchOpensearchUserConfigIndexPatternArgs:
         pulumi.set(self, "sorting_algorithm", value)
 
 
+@pulumi.input_type
+class OpenSearchOpensearchUserConfigIndexRollupArgs:
+    def __init__(__self__, *,
+                 rollup_dashboards_enabled: Optional[pulumi.Input[bool]] = None,
+                 rollup_enabled: Optional[pulumi.Input[bool]] = None,
+                 rollup_search_backoff_count: Optional[pulumi.Input[int]] = None,
+                 rollup_search_backoff_millis: Optional[pulumi.Input[int]] = None,
+                 rollup_search_search_all_jobs: Optional[pulumi.Input[bool]] = None):
+        """
+        :param pulumi.Input[bool] rollup_dashboards_enabled: Whether rollups are enabled in OpenSearch Dashboards. Defaults to true.
+        :param pulumi.Input[bool] rollup_enabled: Whether the rollup plugin is enabled. Defaults to true.
+        :param pulumi.Input[int] rollup_search_backoff_count: How many retries the plugin should attempt for failed rollup jobs. Defaults to 5.
+        :param pulumi.Input[int] rollup_search_backoff_millis: The backoff time between retries for failed rollup jobs. Defaults to 1000ms.
+        :param pulumi.Input[bool] rollup_search_search_all_jobs: Whether OpenSearch should return all jobs that match all specified search terms. If disabled, OpenSearch returns just one, as opposed to all, of the jobs that matches the search terms. Defaults to false.
+        """
+        if rollup_dashboards_enabled is not None:
+            pulumi.set(__self__, "rollup_dashboards_enabled", rollup_dashboards_enabled)
+        if rollup_enabled is not None:
+            pulumi.set(__self__, "rollup_enabled", rollup_enabled)
+        if rollup_search_backoff_count is not None:
+            pulumi.set(__self__, "rollup_search_backoff_count", rollup_search_backoff_count)
+        if rollup_search_backoff_millis is not None:
+            pulumi.set(__self__, "rollup_search_backoff_millis", rollup_search_backoff_millis)
+        if rollup_search_search_all_jobs is not None:
+            pulumi.set(__self__, "rollup_search_search_all_jobs", rollup_search_search_all_jobs)
+
+    @property
+    @pulumi.getter(name="rollupDashboardsEnabled")
+    def rollup_dashboards_enabled(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Whether rollups are enabled in OpenSearch Dashboards. Defaults to true.
+        """
+        return pulumi.get(self, "rollup_dashboards_enabled")
+
+    @rollup_dashboards_enabled.setter
+    def rollup_dashboards_enabled(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "rollup_dashboards_enabled", value)
+
+    @property
+    @pulumi.getter(name="rollupEnabled")
+    def rollup_enabled(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Whether the rollup plugin is enabled. Defaults to true.
+        """
+        return pulumi.get(self, "rollup_enabled")
+
+    @rollup_enabled.setter
+    def rollup_enabled(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "rollup_enabled", value)
+
+    @property
+    @pulumi.getter(name="rollupSearchBackoffCount")
+    def rollup_search_backoff_count(self) -> Optional[pulumi.Input[int]]:
+        """
+        How many retries the plugin should attempt for failed rollup jobs. Defaults to 5.
+        """
+        return pulumi.get(self, "rollup_search_backoff_count")
+
+    @rollup_search_backoff_count.setter
+    def rollup_search_backoff_count(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "rollup_search_backoff_count", value)
+
+    @property
+    @pulumi.getter(name="rollupSearchBackoffMillis")
+    def rollup_search_backoff_millis(self) -> Optional[pulumi.Input[int]]:
+        """
+        The backoff time between retries for failed rollup jobs. Defaults to 1000ms.
+        """
+        return pulumi.get(self, "rollup_search_backoff_millis")
+
+    @rollup_search_backoff_millis.setter
+    def rollup_search_backoff_millis(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "rollup_search_backoff_millis", value)
+
+    @property
+    @pulumi.getter(name="rollupSearchSearchAllJobs")
+    def rollup_search_search_all_jobs(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Whether OpenSearch should return all jobs that match all specified search terms. If disabled, OpenSearch returns just one, as opposed to all, of the jobs that matches the search terms. Defaults to false.
+        """
+        return pulumi.get(self, "rollup_search_search_all_jobs")
+
+    @rollup_search_search_all_jobs.setter
+    def rollup_search_search_all_jobs(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "rollup_search_search_all_jobs", value)
+
+
 @pulumi.input_type
 class OpenSearchOpensearchUserConfigIndexTemplateArgs:
     def __init__(__self__, *,
@@ -14862,8 +15427,8 @@ class OpenSearchOpensearchUserConfigOpenidArgs:
                  scope: Optional[pulumi.Input[str]] = None,
                  subject_key: Optional[pulumi.Input[str]] = None):
         """
-        :param pulumi.Input[str] client_id: The ID of the OpenID Connect client configured in your IdP. Required. Example: ``.
-        :param pulumi.Input[str] client_secret: The client secret of the OpenID Connect client configured in your IdP. Required. Example: ``.
+        :param pulumi.Input[str] client_id: The ID of the OpenID Connect client configured in your IdP. Required.
+        :param pulumi.Input[str] client_secret: The client secret of the OpenID Connect client configured in your IdP. Required.
         :param pulumi.Input[str] connect_url: The URL of your IdP where the Security plugin can find the OpenID Connect metadata/configuration settings. Example: `https://test-account.okta.com/app/exk491jujcVc83LEX697/sso/saml/metadata`.
         :param pulumi.Input[bool] enabled: Enables or disables OpenID Connect authentication for OpenSearch. When enabled, users can authenticate using OpenID Connect with an Identity Provider. Default: `true`.
         :param pulumi.Input[str] header: HTTP header name of the JWT token. Optional. Default is Authorization. Default: `Authorization`.
@@ -14872,7 +15437,7 @@ class OpenSearchOpensearchUserConfigOpenidArgs:
         :param pulumi.Input[int] refresh_rate_limit_count: The maximum number of unknown key IDs in the time frame. Default is 10. Optional. Default: `10`.
         :param pulumi.Input[int] refresh_rate_limit_time_window_ms: The time frame to use when checking the maximum number of unknown key IDs, in milliseconds. Optional.Default is 10000 (10 seconds). Default: `10000`.
         :param pulumi.Input[str] roles_key: The key in the JSON payload that stores the user’s roles. The value of this key must be a comma-separated list of roles. Required only if you want to use roles in the JWT. Example: `roles`.
-        :param pulumi.Input[str] scope: The scope of the identity token issued by the IdP. Optional. Default is openid profile email address phone. Example: ``.
+        :param pulumi.Input[str] scope: The scope of the identity token issued by the IdP. Optional. Default is openid profile email address phone.
         :param pulumi.Input[str] subject_key: The key in the JSON payload that stores the user’s name. If not defined, the subject registered claim is used. Most IdP providers use the preferred_username claim. Optional. Example: `preferred_username`.
         """
         pulumi.set(__self__, "client_id", client_id)
@@ -14900,7 +15465,7 @@ class OpenSearchOpensearchUserConfigOpenidArgs:
     @pulumi.getter(name="clientId")
     def client_id(self) -> pulumi.Input[str]:
         """
-        The ID of the OpenID Connect client configured in your IdP. Required. Example: ``.
+        The ID of the OpenID Connect client configured in your IdP. Required.
         """
         return pulumi.get(self, "client_id")
 
@@ -14912,7 +15477,7 @@ class OpenSearchOpensearchUserConfigOpenidArgs:
     @pulumi.getter(name="clientSecret")
     def client_secret(self) -> pulumi.Input[str]:
         """
-        The client secret of the OpenID Connect client configured in your IdP. Required. Example: ``.
+        The client secret of the OpenID Connect client configured in your IdP. Required.
         """
         return pulumi.get(self, "client_secret")
 
@@ -15020,7 +15585,7 @@ class OpenSearchOpensearchUserConfigOpenidArgs:
     @pulumi.getter
     def scope(self) -> Optional[pulumi.Input[str]]:
         """
-        The scope of the identity token issued by the IdP. Optional. Default is openid profile email address phone. Example: ``.
+        The scope of the identity token issued by the IdP. Optional. Default is openid profile email address phone.
         """
         return pulumi.get(self, "scope")
 
@@ -15097,7 +15662,7 @@ class OpenSearchOpensearchUserConfigOpensearchArgs:
         :param pulumi.Input[str] email_sender_name: Sender name placeholder to be used in Opensearch Dashboards and Opensearch keystore. Example: `alert-sender`.
         :param pulumi.Input[str] email_sender_password: Sender password for Opensearch alerts to authenticate with SMTP server. Example: `very-secure-mail-password`.
         :param pulumi.Input[str] email_sender_username: Sender username for Opensearch alerts. Example: `jane@example.com`.
-        :param pulumi.Input[bool] enable_security_audit: Enable/Disable security audit. Default: `false`.
+        :param pulumi.Input[bool] enable_security_audit: Enable/Disable security audit.
         :param pulumi.Input[int] http_max_content_length: Maximum content length for HTTP requests to the OpenSearch HTTP API, in bytes.
         :param pulumi.Input[int] http_max_header_size: The max size of allowed headers, in bytes. Example: `8192`.
         :param pulumi.Input[int] http_max_initial_line_length: The max length of an HTTP URL, in bytes. Example: `4096`.
@@ -15109,14 +15674,14 @@ class OpenSearchOpensearchUserConfigOpensearchArgs:
         :param pulumi.Input[int] indices_query_bool_max_clause_count: Maximum number of clauses Lucene BooleanQuery can have. The default value (1024) is relatively high, and increasing it may cause performance issues. Investigate other approaches first before increasing this value.
         :param pulumi.Input[int] indices_recovery_max_bytes_per_sec: Limits total inbound and outbound recovery traffic for each node. Applies to both peer recoveries as well as snapshot recoveries (i.e., restores from a snapshot). Defaults to 40mb.
         :param pulumi.Input[int] indices_recovery_max_concurrent_file_chunks: Number of file chunks sent in parallel for each recovery. Defaults to 2.
-        :param pulumi.Input[bool] ism_enabled: Specifies whether ISM is enabled or not. Default: `true`.
-        :param pulumi.Input[bool] ism_history_enabled: Specifies whether audit history is enabled or not. The logs from ISM are automatically indexed to a logs document. Default: `true`.
-        :param pulumi.Input[int] ism_history_max_age: The maximum age before rolling over the audit history index in hours. Default: `24`.
-        :param pulumi.Input[int] ism_history_max_docs: The maximum number of documents before rolling over the audit history index. Default: `2500000`.
-        :param pulumi.Input[int] ism_history_rollover_check_period: The time between rollover checks for the audit history index in hours. Default: `8`.
-        :param pulumi.Input[int] ism_history_rollover_retention_period: How long audit history indices are kept in days. Default: `30`.
-        :param pulumi.Input[bool] knn_memory_circuit_breaker_enabled: Enable or disable KNN memory circuit breaker. Defaults to true. Default: `true`.
-        :param pulumi.Input[int] knn_memory_circuit_breaker_limit: Maximum amount of memory that can be used for KNN index. Defaults to 50% of the JVM heap size. Default: `50`.
+        :param pulumi.Input[bool] ism_enabled: Specifies whether ISM is enabled or not.
+        :param pulumi.Input[bool] ism_history_enabled: Specifies whether audit history is enabled or not. The logs from ISM are automatically indexed to a logs document.
+        :param pulumi.Input[int] ism_history_max_age: The maximum age before rolling over the audit history index in hours. Example: `24`.
+        :param pulumi.Input[int] ism_history_max_docs: The maximum number of documents before rolling over the audit history index. Example: `2500000`.
+        :param pulumi.Input[int] ism_history_rollover_check_period: The time between rollover checks for the audit history index in hours. Example: `8`.
+        :param pulumi.Input[int] ism_history_rollover_retention_period: How long audit history indices are kept in days. Example: `30`.
+        :param pulumi.Input[bool] knn_memory_circuit_breaker_enabled: Enable or disable KNN memory circuit breaker. Defaults to true.
+        :param pulumi.Input[int] knn_memory_circuit_breaker_limit: Maximum amount of memory that can be used for KNN index. Defaults to 50% of the JVM heap size.
         :param pulumi.Input[bool] override_main_response_version: Compatibility mode sets OpenSearch to report its version as 7.10 so clients continue to work. Default is false.
         :param pulumi.Input[bool] plugins_alerting_filter_by_backend_roles: Enable or disable filtering of alerting by backend roles. Requires Security plugin. Defaults to false.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] reindex_remote_whitelists: Whitelisted addresses for reindexing. Changing this value will cause all OpenSearch instances to restart.
@@ -15323,7 +15888,7 @@ class OpenSearchOpensearchUserConfigOpensearchArgs:
     @pulumi.getter(name="enableSecurityAudit")
     def enable_security_audit(self) -> Optional[pulumi.Input[bool]]:
         """
-        Enable/Disable security audit. Default: `false`.
+        Enable/Disable security audit.
         """
         return pulumi.get(self, "enable_security_audit")
 
@@ -15467,7 +16032,7 @@ class OpenSearchOpensearchUserConfigOpensearchArgs:
     @pulumi.getter(name="ismEnabled")
     def ism_enabled(self) -> Optional[pulumi.Input[bool]]:
         """
-        Specifies whether ISM is enabled or not. Default: `true`.
+        Specifies whether ISM is enabled or not.
         """
         return pulumi.get(self, "ism_enabled")
 
@@ -15479,7 +16044,7 @@ class OpenSearchOpensearchUserConfigOpensearchArgs:
     @pulumi.getter(name="ismHistoryEnabled")
     def ism_history_enabled(self) -> Optional[pulumi.Input[bool]]:
         """
-        Specifies whether audit history is enabled or not. The logs from ISM are automatically indexed to a logs document. Default: `true`.
+        Specifies whether audit history is enabled or not. The logs from ISM are automatically indexed to a logs document.
         """
         return pulumi.get(self, "ism_history_enabled")
 
@@ -15491,7 +16056,7 @@ class OpenSearchOpensearchUserConfigOpensearchArgs:
     @pulumi.getter(name="ismHistoryMaxAge")
     def ism_history_max_age(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum age before rolling over the audit history index in hours. Default: `24`.
+        The maximum age before rolling over the audit history index in hours. Example: `24`.
         """
         return pulumi.get(self, "ism_history_max_age")
 
@@ -15503,7 +16068,7 @@ class OpenSearchOpensearchUserConfigOpensearchArgs:
     @pulumi.getter(name="ismHistoryMaxDocs")
     def ism_history_max_docs(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum number of documents before rolling over the audit history index. Default: `2500000`.
+        The maximum number of documents before rolling over the audit history index. Example: `2500000`.
         """
         return pulumi.get(self, "ism_history_max_docs")
 
@@ -15515,7 +16080,7 @@ class OpenSearchOpensearchUserConfigOpensearchArgs:
     @pulumi.getter(name="ismHistoryRolloverCheckPeriod")
     def ism_history_rollover_check_period(self) -> Optional[pulumi.Input[int]]:
         """
-        The time between rollover checks for the audit history index in hours. Default: `8`.
+        The time between rollover checks for the audit history index in hours. Example: `8`.
         """
         return pulumi.get(self, "ism_history_rollover_check_period")
 
@@ -15527,7 +16092,7 @@ class OpenSearchOpensearchUserConfigOpensearchArgs:
     @pulumi.getter(name="ismHistoryRolloverRetentionPeriod")
     def ism_history_rollover_retention_period(self) -> Optional[pulumi.Input[int]]:
         """
-        How long audit history indices are kept in days. Default: `30`.
+        How long audit history indices are kept in days. Example: `30`.
         """
         return pulumi.get(self, "ism_history_rollover_retention_period")
 
@@ -15539,7 +16104,7 @@ class OpenSearchOpensearchUserConfigOpensearchArgs:
     @pulumi.getter(name="knnMemoryCircuitBreakerEnabled")
     def knn_memory_circuit_breaker_enabled(self) -> Optional[pulumi.Input[bool]]:
         """
-        Enable or disable KNN memory circuit breaker. Defaults to true. Default: `true`.
+        Enable or disable KNN memory circuit breaker. Defaults to true.
         """
         return pulumi.get(self, "knn_memory_circuit_breaker_enabled")
 
@@ -15551,7 +16116,7 @@ class OpenSearchOpensearchUserConfigOpensearchArgs:
     @pulumi.getter(name="knnMemoryCircuitBreakerLimit")
     def knn_memory_circuit_breaker_limit(self) -> Optional[pulumi.Input[int]]:
         """
-        Maximum amount of memory that can be used for KNN index. Defaults to 50% of the JVM heap size. Default: `50`.
+        Maximum amount of memory that can be used for KNN index. Defaults to 50% of the JVM heap size.
         """
         return pulumi.get(self, "knn_memory_circuit_breaker_limit")
 
@@ -16229,6 +16794,167 @@ class OpenSearchOpensearchUserConfigPublicAccessArgs:
         pulumi.set(self, "prometheus", value)
 
 
+@pulumi.input_type
+class OpenSearchOpensearchUserConfigS3MigrationArgs:
+    def __init__(__self__, *,
+                 access_key: pulumi.Input[str],
+                 base_path: pulumi.Input[str],
+                 bucket: pulumi.Input[str],
+                 region: pulumi.Input[str],
+                 secret_key: pulumi.Input[str],
+                 snapshot_name: pulumi.Input[str],
+                 chunk_size: Optional[pulumi.Input[str]] = None,
+                 compress: Optional[pulumi.Input[bool]] = None,
+                 endpoint: Optional[pulumi.Input[str]] = None,
+                 server_side_encryption: Optional[pulumi.Input[bool]] = None):
+        """
+        :param pulumi.Input[str] access_key: AWS Access key.
+        :param pulumi.Input[str] base_path: The path to the repository data within its container. The value of this setting should not start or end with a /.
+        :param pulumi.Input[str] bucket: S3 bucket name.
+        :param pulumi.Input[str] region: S3 region.
+        :param pulumi.Input[str] secret_key: AWS secret key.
+        :param pulumi.Input[str] snapshot_name: The snapshot name to restore from.
+        :param pulumi.Input[str] chunk_size: Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
+        :param pulumi.Input[bool] compress: When set to true metadata files are stored in compressed format.
+        :param pulumi.Input[str] endpoint: The S3 service endpoint to connect to. If you are using an S3-compatible service then you should set this to the service’s endpoint.
+        :param pulumi.Input[bool] server_side_encryption: When set to true files are encrypted on server side.
+        """
+        pulumi.set(__self__, "access_key", access_key)
+        pulumi.set(__self__, "base_path", base_path)
+        pulumi.set(__self__, "bucket", bucket)
+        pulumi.set(__self__, "region", region)
+        pulumi.set(__self__, "secret_key", secret_key)
+        pulumi.set(__self__, "snapshot_name", snapshot_name)
+        if chunk_size is not None:
+            pulumi.set(__self__, "chunk_size", chunk_size)
+        if compress is not None:
+            pulumi.set(__self__, "compress", compress)
+        if endpoint is not None:
+            pulumi.set(__self__, "endpoint", endpoint)
+        if server_side_encryption is not None:
+            pulumi.set(__self__, "server_side_encryption", server_side_encryption)
+
+    @property
+    @pulumi.getter(name="accessKey")
+    def access_key(self) -> pulumi.Input[str]:
+        """
+        AWS Access key.
+        """
+        return pulumi.get(self, "access_key")
+
+    @access_key.setter
+    def access_key(self, value: pulumi.Input[str]):
+        pulumi.set(self, "access_key", value)
+
+    @property
+    @pulumi.getter(name="basePath")
+    def base_path(self) -> pulumi.Input[str]:
+        """
+        The path to the repository data within its container. The value of this setting should not start or end with a /.
+        """
+        return pulumi.get(self, "base_path")
+
+    @base_path.setter
+    def base_path(self, value: pulumi.Input[str]):
+        pulumi.set(self, "base_path", value)
+
+    @property
+    @pulumi.getter
+    def bucket(self) -> pulumi.Input[str]:
+        """
+        S3 bucket name.
+        """
+        return pulumi.get(self, "bucket")
+
+    @bucket.setter
+    def bucket(self, value: pulumi.Input[str]):
+        pulumi.set(self, "bucket", value)
+
+    @property
+    @pulumi.getter
+    def region(self) -> pulumi.Input[str]:
+        """
+        S3 region.
+        """
+        return pulumi.get(self, "region")
+
+    @region.setter
+    def region(self, value: pulumi.Input[str]):
+        pulumi.set(self, "region", value)
+
+    @property
+    @pulumi.getter(name="secretKey")
+    def secret_key(self) -> pulumi.Input[str]:
+        """
+        AWS secret key.
+        """
+        return pulumi.get(self, "secret_key")
+
+    @secret_key.setter
+    def secret_key(self, value: pulumi.Input[str]):
+        pulumi.set(self, "secret_key", value)
+
+    @property
+    @pulumi.getter(name="snapshotName")
+    def snapshot_name(self) -> pulumi.Input[str]:
+        """
+        The snapshot name to restore from.
+        """
+        return pulumi.get(self, "snapshot_name")
+
+    @snapshot_name.setter
+    def snapshot_name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "snapshot_name", value)
+
+    @property
+    @pulumi.getter(name="chunkSize")
+    def chunk_size(self) -> Optional[pulumi.Input[str]]:
+        """
+        Big files can be broken down into chunks during snapshotting if needed. Should be the same as for the 3rd party repository.
+        """
+        return pulumi.get(self, "chunk_size")
+
+    @chunk_size.setter
+    def chunk_size(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "chunk_size", value)
+
+    @property
+    @pulumi.getter
+    def compress(self) -> Optional[pulumi.Input[bool]]:
+        """
+        When set to true metadata files are stored in compressed format.
+        """
+        return pulumi.get(self, "compress")
+
+    @compress.setter
+    def compress(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "compress", value)
+
+    @property
+    @pulumi.getter
+    def endpoint(self) -> Optional[pulumi.Input[str]]:
+        """
+        The S3 service endpoint to connect to. If you are using an S3-compatible service then you should set this to the service’s endpoint.
+        """
+        return pulumi.get(self, "endpoint")
+
+    @endpoint.setter
+    def endpoint(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "endpoint", value)
+
+    @property
+    @pulumi.getter(name="serverSideEncryption")
+    def server_side_encryption(self) -> Optional[pulumi.Input[bool]]:
+        """
+        When set to true files are encrypted on server side.
+        """
+        return pulumi.get(self, "server_side_encryption")
+
+    @server_side_encryption.setter
+    def server_side_encryption(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "server_side_encryption", value)
+
+
 @pulumi.input_type
 class OpenSearchOpensearchUserConfigSamlArgs:
     def __init__(__self__, *,
@@ -16812,20 +17538,20 @@ class PgPgArgs:
                  uris: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  user: Optional[pulumi.Input[str]] = None):
         """
-        :param pulumi.Input[str] bouncer: Bouncer connection details
-        :param pulumi.Input[str] dbname: Primary PostgreSQL database name
-        :param pulumi.Input[str] host: PostgreSQL master node host IP or name
-        :param pulumi.Input[int] max_connections: Connection limit
-        :param pulumi.Input[Sequence[pulumi.Input['PgPgParamArgs']]] params: PostgreSQL connection parameters
-        :param pulumi.Input[str] password: PostgreSQL admin user password
-        :param pulumi.Input[int] port: PostgreSQL port
-        :param pulumi.Input[str] replica_uri: PostgreSQL replica URI for services with a replica
-        :param pulumi.Input[str] sslmode: PostgreSQL sslmode setting (currently always "require")
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] standby_uris: PostgreSQL standby connection URIs
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] syncing_uris: PostgreSQL syncing connection URIs
-        :param pulumi.Input[str] uri: PostgreSQL master connection URI
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] uris: PostgreSQL master connection URIs
-        :param pulumi.Input[str] user: PostgreSQL admin user name
+        :param pulumi.Input[str] bouncer: PgBouncer connection details for [connection pooling](https://aiven.io/docs/products/postgresql/concepts/pg-connection-pooling).
+        :param pulumi.Input[str] dbname: Primary PostgreSQL database name.
+        :param pulumi.Input[str] host: PostgreSQL primary node host IP or name.
+        :param pulumi.Input[int] max_connections: The [number of allowed connections](https://aiven.io/docs/products/postgresql/reference/pg-connection-limits). Varies based on the service plan.
+        :param pulumi.Input[Sequence[pulumi.Input['PgPgParamArgs']]] params: PostgreSQL connection parameters.
+        :param pulumi.Input[str] password: PostgreSQL admin user password.
+        :param pulumi.Input[int] port: PostgreSQL port.
+        :param pulumi.Input[str] replica_uri: PostgreSQL replica URI for services with a replica.
+        :param pulumi.Input[str] sslmode: PostgreSQL SSL mode setting.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] standby_uris: PostgreSQL standby connection URIs.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] syncing_uris: PostgreSQL syncing connection URIs.
+        :param pulumi.Input[str] uri: PostgreSQL primary connection URI.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] uris: PostgreSQL primary connection URIs.
+        :param pulumi.Input[str] user: PostgreSQL admin user name.
         """
         if bouncer is not None:
             pulumi.set(__self__, "bouncer", bouncer)
@@ -16860,7 +17586,7 @@ class PgPgArgs:
     @pulumi.getter
     def bouncer(self) -> Optional[pulumi.Input[str]]:
         """
-        Bouncer connection details
+        PgBouncer connection details for [connection pooling](https://aiven.io/docs/products/postgresql/concepts/pg-connection-pooling).
         """
         return pulumi.get(self, "bouncer")
 
@@ -16872,7 +17598,7 @@ class PgPgArgs:
     @pulumi.getter
     def dbname(self) -> Optional[pulumi.Input[str]]:
         """
-        Primary PostgreSQL database name
+        Primary PostgreSQL database name.
         """
         return pulumi.get(self, "dbname")
 
@@ -16884,7 +17610,7 @@ class PgPgArgs:
     @pulumi.getter
     def host(self) -> Optional[pulumi.Input[str]]:
         """
-        PostgreSQL master node host IP or name
+        PostgreSQL primary node host IP or name.
         """
         return pulumi.get(self, "host")
 
@@ -16896,7 +17622,7 @@ class PgPgArgs:
     @pulumi.getter(name="maxConnections")
     def max_connections(self) -> Optional[pulumi.Input[int]]:
         """
-        Connection limit
+        The [number of allowed connections](https://aiven.io/docs/products/postgresql/reference/pg-connection-limits). Varies based on the service plan.
         """
         return pulumi.get(self, "max_connections")
 
@@ -16908,7 +17634,7 @@ class PgPgArgs:
     @pulumi.getter
     def params(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['PgPgParamArgs']]]]:
         """
-        PostgreSQL connection parameters
+        PostgreSQL connection parameters.
         """
         return pulumi.get(self, "params")
 
@@ -16920,7 +17646,7 @@ class PgPgArgs:
     @pulumi.getter
     def password(self) -> Optional[pulumi.Input[str]]:
         """
-        PostgreSQL admin user password
+        PostgreSQL admin user password.
         """
         return pulumi.get(self, "password")
 
@@ -16932,7 +17658,7 @@ class PgPgArgs:
     @pulumi.getter
     def port(self) -> Optional[pulumi.Input[int]]:
         """
-        PostgreSQL port
+        PostgreSQL port.
         """
         return pulumi.get(self, "port")
 
@@ -16944,7 +17670,7 @@ class PgPgArgs:
     @pulumi.getter(name="replicaUri")
     def replica_uri(self) -> Optional[pulumi.Input[str]]:
         """
-        PostgreSQL replica URI for services with a replica
+        PostgreSQL replica URI for services with a replica.
         """
         return pulumi.get(self, "replica_uri")
 
@@ -16956,7 +17682,7 @@ class PgPgArgs:
     @pulumi.getter
     def sslmode(self) -> Optional[pulumi.Input[str]]:
         """
-        PostgreSQL sslmode setting (currently always "require")
+        PostgreSQL SSL mode setting.
         """
         return pulumi.get(self, "sslmode")
 
@@ -16968,7 +17694,7 @@ class PgPgArgs:
     @pulumi.getter(name="standbyUris")
     def standby_uris(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        PostgreSQL standby connection URIs
+        PostgreSQL standby connection URIs.
         """
         return pulumi.get(self, "standby_uris")
 
@@ -16980,7 +17706,7 @@ class PgPgArgs:
     @pulumi.getter(name="syncingUris")
     def syncing_uris(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        PostgreSQL syncing connection URIs
+        PostgreSQL syncing connection URIs.
         """
         return pulumi.get(self, "syncing_uris")
 
@@ -16992,7 +17718,7 @@ class PgPgArgs:
     @pulumi.getter
     def uri(self) -> Optional[pulumi.Input[str]]:
         """
-        PostgreSQL master connection URI
+        PostgreSQL primary connection URI.
         """
         return pulumi.get(self, "uri")
 
@@ -17004,7 +17730,7 @@ class PgPgArgs:
     @pulumi.getter
     def uris(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        PostgreSQL master connection URIs
+        PostgreSQL primary connection URIs.
         """
         return pulumi.get(self, "uris")
 
@@ -17016,7 +17742,7 @@ class PgPgArgs:
     @pulumi.getter
     def user(self) -> Optional[pulumi.Input[str]]:
         """
-        PostgreSQL admin user name
+        PostgreSQL admin user name.
         """
         return pulumi.get(self, "user")
 
@@ -17035,12 +17761,12 @@ class PgPgParamArgs:
                  sslmode: Optional[pulumi.Input[str]] = None,
                  user: Optional[pulumi.Input[str]] = None):
         """
-        :param pulumi.Input[str] database_name: Primary PostgreSQL database name
-        :param pulumi.Input[str] host: PostgreSQL host IP or name
-        :param pulumi.Input[str] password: PostgreSQL admin user password
-        :param pulumi.Input[int] port: PostgreSQL port
-        :param pulumi.Input[str] sslmode: PostgreSQL sslmode setting (currently always "require")
-        :param pulumi.Input[str] user: PostgreSQL admin user name
+        :param pulumi.Input[str] database_name: Primary PostgreSQL database name.
+        :param pulumi.Input[str] host: PostgreSQL host IP or name.
+        :param pulumi.Input[str] password: PostgreSQL admin user password.
+        :param pulumi.Input[int] port: PostgreSQL port.
+        :param pulumi.Input[str] sslmode: PostgreSQL SSL mode setting.
+        :param pulumi.Input[str] user: PostgreSQL admin user name.
         """
         if database_name is not None:
             pulumi.set(__self__, "database_name", database_name)
@@ -17059,7 +17785,7 @@ class PgPgParamArgs:
     @pulumi.getter(name="databaseName")
     def database_name(self) -> Optional[pulumi.Input[str]]:
         """
-        Primary PostgreSQL database name
+        Primary PostgreSQL database name.
         """
         return pulumi.get(self, "database_name")
 
@@ -17071,7 +17797,7 @@ class PgPgParamArgs:
     @pulumi.getter
     def host(self) -> Optional[pulumi.Input[str]]:
         """
-        PostgreSQL host IP or name
+        PostgreSQL host IP or name.
         """
         return pulumi.get(self, "host")
 
@@ -17083,7 +17809,7 @@ class PgPgParamArgs:
     @pulumi.getter
     def password(self) -> Optional[pulumi.Input[str]]:
         """
-        PostgreSQL admin user password
+        PostgreSQL admin user password.
         """
         return pulumi.get(self, "password")
 
@@ -17095,7 +17821,7 @@ class PgPgParamArgs:
     @pulumi.getter
     def port(self) -> Optional[pulumi.Input[int]]:
         """
-        PostgreSQL port
+        PostgreSQL port.
         """
         return pulumi.get(self, "port")
 
@@ -17107,7 +17833,7 @@ class PgPgParamArgs:
     @pulumi.getter
     def sslmode(self) -> Optional[pulumi.Input[str]]:
         """
-        PostgreSQL sslmode setting (currently always "require")
+        PostgreSQL SSL mode setting.
         """
         return pulumi.get(self, "sslmode")
 
@@ -17119,7 +17845,7 @@ class PgPgParamArgs:
     @pulumi.getter
     def user(self) -> Optional[pulumi.Input[str]]:
         """
-        PostgreSQL admin user name
+        PostgreSQL admin user name.
         """
         return pulumi.get(self, "user")
 
@@ -17704,6 +18430,7 @@ class PgPgUserConfigMigrationArgs:
                  port: pulumi.Input[int],
                  dbname: Optional[pulumi.Input[str]] = None,
                  ignore_dbs: Optional[pulumi.Input[str]] = None,
+                 ignore_roles: Optional[pulumi.Input[str]] = None,
                  method: Optional[pulumi.Input[str]] = None,
                  password: Optional[pulumi.Input[str]] = None,
                  ssl: Optional[pulumi.Input[bool]] = None,
@@ -17713,6 +18440,7 @@ class PgPgUserConfigMigrationArgs:
         :param pulumi.Input[int] port: Port number of the server where to migrate data from. Example: `1234`.
         :param pulumi.Input[str] dbname: Database name for bootstrapping the initial connection. Example: `defaultdb`.
         :param pulumi.Input[str] ignore_dbs: Comma-separated list of databases, which should be ignored during migration (supported by MySQL and PostgreSQL only at the moment). Example: `db1,db2`.
+        :param pulumi.Input[str] ignore_roles: Comma-separated list of database roles, which should be ignored during migration (supported by PostgreSQL only at the moment). Example: `role1,role2`.
         :param pulumi.Input[str] method: Enum: `dump`, `replication`. The migration method to be used (currently supported only by Redis, Dragonfly, MySQL and PostgreSQL service types).
         :param pulumi.Input[str] password: Password for authentication with the server where to migrate data from. Example: `jjKk45Nnd`.
         :param pulumi.Input[bool] ssl: The server where to migrate data from is secured with SSL. Default: `true`.
@@ -17724,6 +18452,8 @@ class PgPgUserConfigMigrationArgs:
             pulumi.set(__self__, "dbname", dbname)
         if ignore_dbs is not None:
             pulumi.set(__self__, "ignore_dbs", ignore_dbs)
+        if ignore_roles is not None:
+            pulumi.set(__self__, "ignore_roles", ignore_roles)
         if method is not None:
             pulumi.set(__self__, "method", method)
         if password is not None:
@@ -17781,6 +18511,18 @@ class PgPgUserConfigMigrationArgs:
     def ignore_dbs(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "ignore_dbs", value)
 
+    @property
+    @pulumi.getter(name="ignoreRoles")
+    def ignore_roles(self) -> Optional[pulumi.Input[str]]:
+        """
+        Comma-separated list of database roles, which should be ignored during migration (supported by PostgreSQL only at the moment). Example: `role1,role2`.
+        """
+        return pulumi.get(self, "ignore_roles")
+
+    @ignore_roles.setter
+    def ignore_roles(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "ignore_roles", value)
+
     @property
     @pulumi.getter
     def method(self) -> Optional[pulumi.Input[str]]:
@@ -19023,6 +19765,7 @@ class PgPgUserConfigPgbouncerArgs:
                  autodb_pool_mode: Optional[pulumi.Input[str]] = None,
                  autodb_pool_size: Optional[pulumi.Input[int]] = None,
                  ignore_startup_parameters: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 max_prepared_statements: Optional[pulumi.Input[int]] = None,
                  min_pool_size: Optional[pulumi.Input[int]] = None,
                  server_idle_timeout: Optional[pulumi.Input[int]] = None,
                  server_lifetime: Optional[pulumi.Input[int]] = None,
@@ -19033,6 +19776,7 @@ class PgPgUserConfigPgbouncerArgs:
         :param pulumi.Input[str] autodb_pool_mode: Enum: `session`, `transaction`, `statement`. PGBouncer pool mode. Default: `transaction`.
         :param pulumi.Input[int] autodb_pool_size: If non-zero then create automatically a pool of that size per user when a pool doesn't exist. Default: `0`.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] ignore_startup_parameters: List of parameters to ignore when given in startup packet.
+        :param pulumi.Input[int] max_prepared_statements: PgBouncer tracks protocol-level named prepared statements related commands sent by the client in transaction and statement pooling modes when max*prepared*statements is set to a non-zero value. Setting it to 0 disables prepared statements. max*prepared*statements defaults to 100, and its maximum is 3000. Default: `100`.
         :param pulumi.Input[int] min_pool_size: Add more server connections to pool if below this number. Improves behavior when usual load comes suddenly back after period of total inactivity. The value is effectively capped at the pool size. Default: `0`.
         :param pulumi.Input[int] server_idle_timeout: If a server connection has been idle more than this many seconds it will be dropped. If 0 then timeout is disabled. (seconds). Default: `600`.
         :param pulumi.Input[int] server_lifetime: The pooler will close an unused server connection that has been connected longer than this. (seconds). Default: `3600`.
@@ -19048,6 +19792,8 @@ class PgPgUserConfigPgbouncerArgs:
             pulumi.set(__self__, "autodb_pool_size", autodb_pool_size)
         if ignore_startup_parameters is not None:
             pulumi.set(__self__, "ignore_startup_parameters", ignore_startup_parameters)
+        if max_prepared_statements is not None:
+            pulumi.set(__self__, "max_prepared_statements", max_prepared_statements)
         if min_pool_size is not None:
             pulumi.set(__self__, "min_pool_size", min_pool_size)
         if server_idle_timeout is not None:
@@ -19117,6 +19863,18 @@ class PgPgUserConfigPgbouncerArgs:
     def ignore_startup_parameters(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
         pulumi.set(self, "ignore_startup_parameters", value)
 
+    @property
+    @pulumi.getter(name="maxPreparedStatements")
+    def max_prepared_statements(self) -> Optional[pulumi.Input[int]]:
+        """
+        PgBouncer tracks protocol-level named prepared statements related commands sent by the client in transaction and statement pooling modes when max*prepared*statements is set to a non-zero value. Setting it to 0 disables prepared statements. max*prepared*statements defaults to 100, and its maximum is 3000. Default: `100`.
+        """
+        return pulumi.get(self, "max_prepared_statements")
+
+    @max_prepared_statements.setter
+    def max_prepared_statements(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "max_prepared_statements", value)
+
     @property
     @pulumi.getter(name="minPoolSize")
     def min_pool_size(self) -> Optional[pulumi.Input[int]]:
@@ -20172,6 +20930,7 @@ class RedisRedisUserConfigMigrationArgs:
                  port: pulumi.Input[int],
                  dbname: Optional[pulumi.Input[str]] = None,
                  ignore_dbs: Optional[pulumi.Input[str]] = None,
+                 ignore_roles: Optional[pulumi.Input[str]] = None,
                  method: Optional[pulumi.Input[str]] = None,
                  password: Optional[pulumi.Input[str]] = None,
                  ssl: Optional[pulumi.Input[bool]] = None,
@@ -20181,6 +20940,7 @@ class RedisRedisUserConfigMigrationArgs:
         :param pulumi.Input[int] port: Port number of the server where to migrate data from. Example: `1234`.
         :param pulumi.Input[str] dbname: Database name for bootstrapping the initial connection. Example: `defaultdb`.
         :param pulumi.Input[str] ignore_dbs: Comma-separated list of databases, which should be ignored during migration (supported by MySQL and PostgreSQL only at the moment). Example: `db1,db2`.
+        :param pulumi.Input[str] ignore_roles: Comma-separated list of database roles, which should be ignored during migration (supported by PostgreSQL only at the moment). Example: `role1,role2`.
         :param pulumi.Input[str] method: Enum: `dump`, `replication`. The migration method to be used (currently supported only by Redis, Dragonfly, MySQL and PostgreSQL service types).
         :param pulumi.Input[str] password: Password for authentication with the server where to migrate data from. Example: `jjKk45Nnd`.
         :param pulumi.Input[bool] ssl: The server where to migrate data from is secured with SSL. Default: `true`.
@@ -20192,6 +20952,8 @@ class RedisRedisUserConfigMigrationArgs:
             pulumi.set(__self__, "dbname", dbname)
         if ignore_dbs is not None:
             pulumi.set(__self__, "ignore_dbs", ignore_dbs)
+        if ignore_roles is not None:
+            pulumi.set(__self__, "ignore_roles", ignore_roles)
         if method is not None:
             pulumi.set(__self__, "method", method)
         if password is not None:
@@ -20249,6 +21011,18 @@ class RedisRedisUserConfigMigrationArgs:
     def ignore_dbs(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "ignore_dbs", value)
 
+    @property
+    @pulumi.getter(name="ignoreRoles")
+    def ignore_roles(self) -> Optional[pulumi.Input[str]]:
+        """
+        Comma-separated list of database roles, which should be ignored during migration (supported by PostgreSQL only at the moment). Example: `role1,role2`.
+        """
+        return pulumi.get(self, "ignore_roles")
+
+    @ignore_roles.setter
+    def ignore_roles(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "ignore_roles", value)
+
     @property
     @pulumi.getter
     def method(self) -> Optional[pulumi.Input[str]]:
@@ -20549,7 +21323,9 @@ class ServiceIntegrationClickhouseKafkaUserConfigTableArgs:
                  max_rows_per_message: Optional[pulumi.Input[int]] = None,
                  num_consumers: Optional[pulumi.Input[int]] = None,
                  poll_max_batch_size: Optional[pulumi.Input[int]] = None,
-                 skip_broken_messages: Optional[pulumi.Input[int]] = None):
+                 poll_max_timeout_ms: Optional[pulumi.Input[int]] = None,
+                 skip_broken_messages: Optional[pulumi.Input[int]] = None,
+                 thread_per_consumer: Optional[pulumi.Input[bool]] = None):
         """
         :param pulumi.Input[Sequence[pulumi.Input['ServiceIntegrationClickhouseKafkaUserConfigTableColumnArgs']]] columns: Table columns
         :param pulumi.Input[str] data_format: Enum: `Avro`, `CSV`, `JSONAsString`, `JSONCompactEachRow`, `JSONCompactStringsEachRow`, `JSONEachRow`, `JSONStringsEachRow`, `MsgPack`, `TSKV`, `TSV`, `TabSeparated`, `RawBLOB`, `AvroConfluent`, `Parquet`. Message data format. Default: `JSONEachRow`.
@@ -20563,7 +21339,9 @@ class ServiceIntegrationClickhouseKafkaUserConfigTableArgs:
         :param pulumi.Input[int] max_rows_per_message: The maximum number of rows produced in one kafka message for row-based formats. Default: `1`.
         :param pulumi.Input[int] num_consumers: The number of consumers per table per replica. Default: `1`.
         :param pulumi.Input[int] poll_max_batch_size: Maximum amount of messages to be polled in a single Kafka poll. Default: `0`.
+        :param pulumi.Input[int] poll_max_timeout_ms: Timeout in milliseconds for a single poll from Kafka. Takes the value of the stream*flush*interval_ms server setting by default (500ms). Default: `0`.
         :param pulumi.Input[int] skip_broken_messages: Skip at least this number of broken messages from Kafka topic per block. Default: `0`.
+        :param pulumi.Input[bool] thread_per_consumer: Provide an independent thread for each consumer. All consumers run in the same thread by default. Default: `false`.
         """
         pulumi.set(__self__, "columns", columns)
         pulumi.set(__self__, "data_format", data_format)
@@ -20584,8 +21362,12 @@ class ServiceIntegrationClickhouseKafkaUserConfigTableArgs:
             pulumi.set(__self__, "num_consumers", num_consumers)
         if poll_max_batch_size is not None:
             pulumi.set(__self__, "poll_max_batch_size", poll_max_batch_size)
+        if poll_max_timeout_ms is not None:
+            pulumi.set(__self__, "poll_max_timeout_ms", poll_max_timeout_ms)
         if skip_broken_messages is not None:
             pulumi.set(__self__, "skip_broken_messages", skip_broken_messages)
+        if thread_per_consumer is not None:
+            pulumi.set(__self__, "thread_per_consumer", thread_per_consumer)
 
     @property
     @pulumi.getter
@@ -20731,6 +21513,18 @@ class ServiceIntegrationClickhouseKafkaUserConfigTableArgs:
     def poll_max_batch_size(self, value: Optional[pulumi.Input[int]]):
         pulumi.set(self, "poll_max_batch_size", value)
 
+    @property
+    @pulumi.getter(name="pollMaxTimeoutMs")
+    def poll_max_timeout_ms(self) -> Optional[pulumi.Input[int]]:
+        """
+        Timeout in milliseconds for a single poll from Kafka. Takes the value of the stream*flush*interval_ms server setting by default (500ms). Default: `0`.
+        """
+        return pulumi.get(self, "poll_max_timeout_ms")
+
+    @poll_max_timeout_ms.setter
+    def poll_max_timeout_ms(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "poll_max_timeout_ms", value)
+
     @property
     @pulumi.getter(name="skipBrokenMessages")
     def skip_broken_messages(self) -> Optional[pulumi.Input[int]]:
@@ -20743,6 +21537,18 @@ class ServiceIntegrationClickhouseKafkaUserConfigTableArgs:
     def skip_broken_messages(self, value: Optional[pulumi.Input[int]]):
         pulumi.set(self, "skip_broken_messages", value)
 
+    @property
+    @pulumi.getter(name="threadPerConsumer")
+    def thread_per_consumer(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Provide an independent thread for each consumer. All consumers run in the same thread by default. Default: `false`.
+        """
+        return pulumi.get(self, "thread_per_consumer")
+
+    @thread_per_consumer.setter
+    def thread_per_consumer(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "thread_per_consumer", value)
+
 
 @pulumi.input_type
 class ServiceIntegrationClickhouseKafkaUserConfigTableColumnArgs:
@@ -25083,6 +25889,7 @@ class ValkeyValkeyUserConfigMigrationArgs:
                  port: pulumi.Input[int],
                  dbname: Optional[pulumi.Input[str]] = None,
                  ignore_dbs: Optional[pulumi.Input[str]] = None,
+                 ignore_roles: Optional[pulumi.Input[str]] = None,
                  method: Optional[pulumi.Input[str]] = None,
                  password: Optional[pulumi.Input[str]] = None,
                  ssl: Optional[pulumi.Input[bool]] = None,
@@ -25092,6 +25899,7 @@ class ValkeyValkeyUserConfigMigrationArgs:
         :param pulumi.Input[int] port: Port number of the server where to migrate data from. Example: `1234`.
         :param pulumi.Input[str] dbname: Database name for bootstrapping the initial connection. Example: `defaultdb`.
         :param pulumi.Input[str] ignore_dbs: Comma-separated list of databases, which should be ignored during migration (supported by MySQL and PostgreSQL only at the moment). Example: `db1,db2`.
+        :param pulumi.Input[str] ignore_roles: Comma-separated list of database roles, which should be ignored during migration (supported by PostgreSQL only at the moment). Example: `role1,role2`.
         :param pulumi.Input[str] method: Enum: `dump`, `replication`. The migration method to be used (currently supported only by Redis, Dragonfly, MySQL and PostgreSQL service types).
         :param pulumi.Input[str] password: Password for authentication with the server where to migrate data from. Example: `jjKk45Nnd`.
         :param pulumi.Input[bool] ssl: The server where to migrate data from is secured with SSL. Default: `true`.
@@ -25103,6 +25911,8 @@ class ValkeyValkeyUserConfigMigrationArgs:
             pulumi.set(__self__, "dbname", dbname)
         if ignore_dbs is not None:
             pulumi.set(__self__, "ignore_dbs", ignore_dbs)
+        if ignore_roles is not None:
+            pulumi.set(__self__, "ignore_roles", ignore_roles)
         if method is not None:
             pulumi.set(__self__, "method", method)
         if password is not None:
@@ -25160,6 +25970,18 @@ class ValkeyValkeyUserConfigMigrationArgs:
     def ignore_dbs(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "ignore_dbs", value)
 
+    @property
+    @pulumi.getter(name="ignoreRoles")
+    def ignore_roles(self) -> Optional[pulumi.Input[str]]:
+        """
+        Comma-separated list of database roles, which should be ignored during migration (supported by PostgreSQL only at the moment). Example: `role1,role2`.
+        """
+        return pulumi.get(self, "ignore_roles")
+
+    @ignore_roles.setter
+    def ignore_roles(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "ignore_roles", value)
+
     @property
     @pulumi.getter
     def method(self) -> Optional[pulumi.Input[str]]: