pulumi-confluentcloud 2.50.0a1761889162__tar.gz → 2.52.0a1763696172__tar.gz

{pulumi_confluentcloud-2.50.0a1761889162 → pulumi_confluentcloud-2.52.0a1763696172}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pulumi_confluentcloud
-Version: 2.50.0a1761889162
+Version: 2.52.0a1763696172
 Summary: A Pulumi package for creating and managing Confluent cloud resources.
 License: Apache-2.0
 Project-URL: Homepage, https://www.pulumi.com

{pulumi_confluentcloud-2.50.0a1761889162 → pulumi_confluentcloud-2.52.0a1763696172}/pulumi_confluentcloud/__init__.py

@@ -54,6 +54,7 @@ from .get_ip_filter import *
 from .get_ip_group import *
 from .get_kafka_client_quota import *
 from .get_kafka_cluster import *
+from .get_kafka_clusters import *
 from .get_kafka_topic import *
 from .get_ksql_cluster import *
 from .get_network import *
@@ -65,6 +66,8 @@ from .get_private_link_access import *
 from .get_private_link_attachment import *
 from .get_private_link_attachment_connection import *
 from .get_provider_integration import *
+from .get_provider_integration_authorization import *
+from .get_provider_integration_setup import *
 from .get_role_binding import *
 from .get_schema import *
 from .get_schema_registry_cluster import *
@@ -106,6 +109,8 @@ from .private_link_attachment import *
 from .private_link_attachment_connection import *
 from .provider import *
 from .provider_integration import *
+from .provider_integration_authorization import *
+from .provider_integration_setup import *
 from .role_binding import *
 from .schema import *
 from .schema_exporter import *
@@ -486,6 +491,22 @@ _utilities.register(
    "confluentcloud:index/providerIntegration:ProviderIntegration": "ProviderIntegration"
   }
  },
+ {
+  "pkg": "confluentcloud",
+  "mod": "index/providerIntegrationAuthorization",
+  "fqn": "pulumi_confluentcloud",
+  "classes": {
+   "confluentcloud:index/providerIntegrationAuthorization:ProviderIntegrationAuthorization": "ProviderIntegrationAuthorization"
+  }
+ },
+ {
+  "pkg": "confluentcloud",
+  "mod": "index/providerIntegrationSetup",
+  "fqn": "pulumi_confluentcloud",
+  "classes": {
+   "confluentcloud:index/providerIntegrationSetup:ProviderIntegrationSetup": "ProviderIntegrationSetup"
+  }
+ },
  {
   "pkg": "confluentcloud",
   "mod": "index/roleBinding",

{pulumi_confluentcloud-2.50.0a1761889162 → pulumi_confluentcloud-2.52.0a1763696172}/pulumi_confluentcloud/_inputs.py

@@ -265,10 +265,18 @@ __all__ = [
     'PrivateLinkAttachmentEnvironmentArgsDict',
     'PrivateLinkAttachmentGcpArgs',
     'PrivateLinkAttachmentGcpArgsDict',
+    'ProviderIntegrationAuthorizationAzureArgs',
+    'ProviderIntegrationAuthorizationAzureArgsDict',
+    'ProviderIntegrationAuthorizationEnvironmentArgs',
+    'ProviderIntegrationAuthorizationEnvironmentArgsDict',
+    'ProviderIntegrationAuthorizationGcpArgs',
+    'ProviderIntegrationAuthorizationGcpArgsDict',
     'ProviderIntegrationAwsArgs',
     'ProviderIntegrationAwsArgsDict',
     'ProviderIntegrationEnvironmentArgs',
     'ProviderIntegrationEnvironmentArgsDict',
+    'ProviderIntegrationSetupEnvironmentArgs',
+    'ProviderIntegrationSetupEnvironmentArgsDict',
     'ProviderOauthArgs',
     'ProviderOauthArgsDict',
     'SchemaCredentialsArgs',
@@ -319,6 +327,8 @@ __all__ = [
     'SubjectModeCredentialsArgsDict',
     'SubjectModeSchemaRegistryClusterArgs',
     'SubjectModeSchemaRegistryClusterArgsDict',
+    'TableflowTopicAzureDataLakeStorageGen2Args',
+    'TableflowTopicAzureDataLakeStorageGen2ArgsDict',
     'TableflowTopicByobAwsArgs',
     'TableflowTopicByobAwsArgsDict',
     'TableflowTopicCredentialsArgs',
@@ -407,6 +417,8 @@ __all__ = [
     'GetKafkaClusterFreightArgsDict',
     'GetKafkaClusterStandardArgs',
     'GetKafkaClusterStandardArgsDict',
+    'GetKafkaClustersEnvironmentArgs',
+    'GetKafkaClustersEnvironmentArgsDict',
     'GetKafkaTopicCredentialsArgs',
     'GetKafkaTopicCredentialsArgsDict',
     'GetKafkaTopicKafkaClusterArgs',
@@ -437,8 +449,12 @@ __all__ = [
     'GetPrivateLinkAttachmentConnectionEnvironmentArgsDict',
     'GetPrivateLinkAttachmentEnvironmentArgs',
     'GetPrivateLinkAttachmentEnvironmentArgsDict',
+    'GetProviderIntegrationAuthorizationEnvironmentArgs',
+    'GetProviderIntegrationAuthorizationEnvironmentArgsDict',
     'GetProviderIntegrationEnvironmentArgs',
     'GetProviderIntegrationEnvironmentArgsDict',
+    'GetProviderIntegrationSetupEnvironmentArgs',
+    'GetProviderIntegrationSetupEnvironmentArgsDict',
     'GetSchemaCredentialsArgs',
     'GetSchemaCredentialsArgsDict',
     'GetSchemaMetadataArgs',
@@ -6109,6 +6125,145 @@ class PrivateLinkAttachmentGcpArgs:
         pulumi.set(self, "private_service_connect_service_attachment", value)
 
 
+if not MYPY:
+    class ProviderIntegrationAuthorizationAzureArgsDict(TypedDict):
+        customer_azure_tenant_id: pulumi.Input[_builtins.str]
+        """
+        Customer's Azure Tenant ID.
+        """
+        confluent_multi_tenant_app_id: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        (Computed String) Confluent Multi-Tenant App ID used to access customer Azure resources.
+        """
+elif False:
+    ProviderIntegrationAuthorizationAzureArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ProviderIntegrationAuthorizationAzureArgs:
+    def __init__(__self__, *,
+                 customer_azure_tenant_id: pulumi.Input[_builtins.str],
+                 confluent_multi_tenant_app_id: Optional[pulumi.Input[_builtins.str]] = None):
+        """
+        :param pulumi.Input[_builtins.str] customer_azure_tenant_id: Customer's Azure Tenant ID.
+        :param pulumi.Input[_builtins.str] confluent_multi_tenant_app_id: (Computed String) Confluent Multi-Tenant App ID used to access customer Azure resources.
+        """
+        pulumi.set(__self__, "customer_azure_tenant_id", customer_azure_tenant_id)
+        if confluent_multi_tenant_app_id is not None:
+            pulumi.set(__self__, "confluent_multi_tenant_app_id", confluent_multi_tenant_app_id)
+
+    @_builtins.property
+    @pulumi.getter(name="customerAzureTenantId")
+    def customer_azure_tenant_id(self) -> pulumi.Input[_builtins.str]:
+        """
+        Customer's Azure Tenant ID.
+        """
+        return pulumi.get(self, "customer_azure_tenant_id")
+
+    @customer_azure_tenant_id.setter
+    def customer_azure_tenant_id(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "customer_azure_tenant_id", value)
+
+    @_builtins.property
+    @pulumi.getter(name="confluentMultiTenantAppId")
+    def confluent_multi_tenant_app_id(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        (Computed String) Confluent Multi-Tenant App ID used to access customer Azure resources.
+        """
+        return pulumi.get(self, "confluent_multi_tenant_app_id")
+
+    @confluent_multi_tenant_app_id.setter
+    def confluent_multi_tenant_app_id(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "confluent_multi_tenant_app_id", value)
+
+
+if not MYPY:
+    class ProviderIntegrationAuthorizationEnvironmentArgsDict(TypedDict):
+        id: pulumi.Input[_builtins.str]
+        """
+        The ID of the Environment that the Provider Integration belongs to, for example, `env-abc123`.
+        """
+elif False:
+    ProviderIntegrationAuthorizationEnvironmentArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ProviderIntegrationAuthorizationEnvironmentArgs:
+    def __init__(__self__, *,
+                 id: pulumi.Input[_builtins.str]):
+        """
+        :param pulumi.Input[_builtins.str] id: The ID of the Environment that the Provider Integration belongs to, for example, `env-abc123`.
+        """
+        pulumi.set(__self__, "id", id)
+
+    @_builtins.property
+    @pulumi.getter
+    def id(self) -> pulumi.Input[_builtins.str]:
+        """
+        The ID of the Environment that the Provider Integration belongs to, for example, `env-abc123`.
+        """
+        return pulumi.get(self, "id")
+
+    @id.setter
+    def id(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "id", value)
+
+
+if not MYPY:
+    class ProviderIntegrationAuthorizationGcpArgsDict(TypedDict):
+        customer_google_service_account: pulumi.Input[_builtins.str]
+        """
+        Customer's Google Service Account that Confluent Cloud impersonates.
+
+        > **Note:** Exactly one of `azure` or `gcp` configuration blocks must be provided, matching the cloud provider of the associated provider integration.
+        """
+        google_service_account: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        (Computed String) Google Service Account that Confluent Cloud uses for impersonation.
+        """
+elif False:
+    ProviderIntegrationAuthorizationGcpArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ProviderIntegrationAuthorizationGcpArgs:
+    def __init__(__self__, *,
+                 customer_google_service_account: pulumi.Input[_builtins.str],
+                 google_service_account: Optional[pulumi.Input[_builtins.str]] = None):
+        """
+        :param pulumi.Input[_builtins.str] customer_google_service_account: Customer's Google Service Account that Confluent Cloud impersonates.
+               
+               > **Note:** Exactly one of `azure` or `gcp` configuration blocks must be provided, matching the cloud provider of the associated provider integration.
+        :param pulumi.Input[_builtins.str] google_service_account: (Computed String) Google Service Account that Confluent Cloud uses for impersonation.
+        """
+        pulumi.set(__self__, "customer_google_service_account", customer_google_service_account)
+        if google_service_account is not None:
+            pulumi.set(__self__, "google_service_account", google_service_account)
+
+    @_builtins.property
+    @pulumi.getter(name="customerGoogleServiceAccount")
+    def customer_google_service_account(self) -> pulumi.Input[_builtins.str]:
+        """
+        Customer's Google Service Account that Confluent Cloud impersonates.
+
+        > **Note:** Exactly one of `azure` or `gcp` configuration blocks must be provided, matching the cloud provider of the associated provider integration.
+        """
+        return pulumi.get(self, "customer_google_service_account")
+
+    @customer_google_service_account.setter
+    def customer_google_service_account(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "customer_google_service_account", value)
+
+    @_builtins.property
+    @pulumi.getter(name="googleServiceAccount")
+    def google_service_account(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        (Computed String) Google Service Account that Confluent Cloud uses for impersonation.
+        """
+        return pulumi.get(self, "google_service_account")
+
+    @google_service_account.setter
+    def google_service_account(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "google_service_account", value)
+
+
 if not MYPY:
     class ProviderIntegrationAwsArgsDict(TypedDict):
         customer_role_arn: pulumi.Input[_builtins.str]
@@ -6223,6 +6378,37 @@ class ProviderIntegrationEnvironmentArgs:
         pulumi.set(self, "id", value)
 
 
+if not MYPY:
+    class ProviderIntegrationSetupEnvironmentArgsDict(TypedDict):
+        id: pulumi.Input[_builtins.str]
+        """
+        The ID of the Environment that the Provider Integration belongs to, for example, `env-abc123`.
+        """
+elif False:
+    ProviderIntegrationSetupEnvironmentArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ProviderIntegrationSetupEnvironmentArgs:
+    def __init__(__self__, *,
+                 id: pulumi.Input[_builtins.str]):
+        """
+        :param pulumi.Input[_builtins.str] id: The ID of the Environment that the Provider Integration belongs to, for example, `env-abc123`.
+        """
+        pulumi.set(__self__, "id", id)
+
+    @_builtins.property
+    @pulumi.getter
+    def id(self) -> pulumi.Input[_builtins.str]:
+        """
+        The ID of the Environment that the Provider Integration belongs to, for example, `env-abc123`.
+        """
+        return pulumi.get(self, "id")
+
+    @id.setter
+    def id(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "id", value)
+
+
 if not MYPY:
     class ProviderOauthArgsDict(TypedDict):
         oauth_identity_pool_id: pulumi.Input[_builtins.str]
@@ -7656,6 +7842,95 @@ class SubjectModeSchemaRegistryClusterArgs:
         pulumi.set(self, "id", value)
 
 
+if not MYPY:
+    class TableflowTopicAzureDataLakeStorageGen2ArgsDict(TypedDict):
+        container_name: pulumi.Input[_builtins.str]
+        """
+        The container name.
+        """
+        provider_integration_id: pulumi.Input[_builtins.str]
+        """
+        The provider integration id.
+        """
+        storage_account_name: pulumi.Input[_builtins.str]
+        """
+        The storage account name.
+        """
+        storage_region: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        (Required String) The storage region.
+        """
+elif False:
+    TableflowTopicAzureDataLakeStorageGen2ArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class TableflowTopicAzureDataLakeStorageGen2Args:
+    def __init__(__self__, *,
+                 container_name: pulumi.Input[_builtins.str],
+                 provider_integration_id: pulumi.Input[_builtins.str],
+                 storage_account_name: pulumi.Input[_builtins.str],
+                 storage_region: Optional[pulumi.Input[_builtins.str]] = None):
+        """
+        :param pulumi.Input[_builtins.str] container_name: The container name.
+        :param pulumi.Input[_builtins.str] provider_integration_id: The provider integration id.
+        :param pulumi.Input[_builtins.str] storage_account_name: The storage account name.
+        :param pulumi.Input[_builtins.str] storage_region: (Required String) The storage region.
+        """
+        pulumi.set(__self__, "container_name", container_name)
+        pulumi.set(__self__, "provider_integration_id", provider_integration_id)
+        pulumi.set(__self__, "storage_account_name", storage_account_name)
+        if storage_region is not None:
+            pulumi.set(__self__, "storage_region", storage_region)
+
+    @_builtins.property
+    @pulumi.getter(name="containerName")
+    def container_name(self) -> pulumi.Input[_builtins.str]:
+        """
+        The container name.
+        """
+        return pulumi.get(self, "container_name")
+
+    @container_name.setter
+    def container_name(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "container_name", value)
+
+    @_builtins.property
+    @pulumi.getter(name="providerIntegrationId")
+    def provider_integration_id(self) -> pulumi.Input[_builtins.str]:
+        """
+        The provider integration id.
+        """
+        return pulumi.get(self, "provider_integration_id")
+
+    @provider_integration_id.setter
+    def provider_integration_id(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "provider_integration_id", value)
+
+    @_builtins.property
+    @pulumi.getter(name="storageAccountName")
+    def storage_account_name(self) -> pulumi.Input[_builtins.str]:
+        """
+        The storage account name.
+        """
+        return pulumi.get(self, "storage_account_name")
+
+    @storage_account_name.setter
+    def storage_account_name(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "storage_account_name", value)
+
+    @_builtins.property
+    @pulumi.getter(name="storageRegion")
+    def storage_region(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        (Required String) The storage region.
+        """
+        return pulumi.get(self, "storage_region")
+
+    @storage_region.setter
+    def storage_region(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "storage_region", value)
+
+
 if not MYPY:
     class TableflowTopicByobAwsArgsDict(TypedDict):
         bucket_name: pulumi.Input[_builtins.str]
@@ -9430,6 +9705,37 @@ class GetKafkaClusterStandardArgs:
         pass
 
 
+if not MYPY:
+    class GetKafkaClustersEnvironmentArgsDict(TypedDict):
+        id: _builtins.str
+        """
+        The ID of the Environment that the Kafka clusters belongs to, for example, `env-xyz456`.
+        """
+elif False:
+    GetKafkaClustersEnvironmentArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class GetKafkaClustersEnvironmentArgs:
+    def __init__(__self__, *,
+                 id: _builtins.str):
+        """
+        :param _builtins.str id: The ID of the Environment that the Kafka clusters belongs to, for example, `env-xyz456`.
+        """
+        pulumi.set(__self__, "id", id)
+
+    @_builtins.property
+    @pulumi.getter
+    def id(self) -> _builtins.str:
+        """
+        The ID of the Environment that the Kafka clusters belongs to, for example, `env-xyz456`.
+        """
+        return pulumi.get(self, "id")
+
+    @id.setter
+    def id(self, value: _builtins.str):
+        pulumi.set(self, "id", value)
+
+
 if not MYPY:
     class GetKafkaTopicCredentialsArgsDict(TypedDict):
         key: _builtins.str
@@ -10045,6 +10351,37 @@ class GetPrivateLinkAttachmentEnvironmentArgs:
         pulumi.set(self, "id", value)
 
 
+if not MYPY:
+    class GetProviderIntegrationAuthorizationEnvironmentArgsDict(TypedDict):
+        id: _builtins.str
+        """
+        The ID of the Environment that the Provider Integration belongs to, for example, `env-abc123`.
+        """
+elif False:
+    GetProviderIntegrationAuthorizationEnvironmentArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class GetProviderIntegrationAuthorizationEnvironmentArgs:
+    def __init__(__self__, *,
+                 id: _builtins.str):
+        """
+        :param _builtins.str id: The ID of the Environment that the Provider Integration belongs to, for example, `env-abc123`.
+        """
+        pulumi.set(__self__, "id", id)
+
+    @_builtins.property
+    @pulumi.getter
+    def id(self) -> _builtins.str:
+        """
+        The ID of the Environment that the Provider Integration belongs to, for example, `env-abc123`.
+        """
+        return pulumi.get(self, "id")
+
+    @id.setter
+    def id(self, value: _builtins.str):
+        pulumi.set(self, "id", value)
+
+
 if not MYPY:
     class GetProviderIntegrationEnvironmentArgsDict(TypedDict):
         id: _builtins.str
@@ -10082,6 +10419,37 @@ class GetProviderIntegrationEnvironmentArgs:
         pulumi.set(self, "id", value)
 
 
+if not MYPY:
+    class GetProviderIntegrationSetupEnvironmentArgsDict(TypedDict):
+        id: _builtins.str
+        """
+        The ID of the Environment that the Provider Integration belongs to, for example, `env-abc123`.
+        """
+elif False:
+    GetProviderIntegrationSetupEnvironmentArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class GetProviderIntegrationSetupEnvironmentArgs:
+    def __init__(__self__, *,
+                 id: _builtins.str):
+        """
+        :param _builtins.str id: The ID of the Environment that the Provider Integration belongs to, for example, `env-abc123`.
+        """
+        pulumi.set(__self__, "id", id)
+
+    @_builtins.property
+    @pulumi.getter
+    def id(self) -> _builtins.str:
+        """
+        The ID of the Environment that the Provider Integration belongs to, for example, `env-abc123`.
+        """
+        return pulumi.get(self, "id")
+
+    @id.setter
+    def id(self, value: _builtins.str):
+        pulumi.set(self, "id", value)
+
+
 if not MYPY:
     class GetSchemaCredentialsArgsDict(TypedDict):
         key: _builtins.str

{pulumi_confluentcloud-2.50.0a1761889162 → pulumi_confluentcloud-2.52.0a1763696172}/pulumi_confluentcloud/api_key.py

@@ -225,12 +225,96 @@ class ApiKey(pulumi.CustomResource):
         ## Example Usage
 
         ### Example Kafka API Key
+        ```python
+        import pulumi
+        import pulumi_confluentcloud as confluentcloud
+
+        app_manager_kafka_api_key = confluentcloud.ApiKey("app-manager-kafka-api-key",
+            display_name="app-manager-kafka-api-key",
+            description="Kafka API Key that is owned by 'app-manager' service account",
+            owner={
+                "id": app_manager["id"],
+                "api_version": app_manager["apiVersion"],
+                "kind": app_manager["kind"],
+            },
+            managed_resource={
+                "id": basic["id"],
+                "api_version": basic["apiVersion"],
+                "kind": basic["kind"],
+                "environments": [{
+                    "id": staging["id"],
+                }],
+            })
+        ```
 
         ### Example ksqlDB API Key
+        ```python
+        import pulumi
+        import pulumi_confluentcloud as confluentcloud
+
+        ksqldb_api_key = confluentcloud.ApiKey("ksqldb-api-key",
+            display_name="ksqldb-api-key",
+            description="KsqlDB API Key that is owned by 'app-manager' service account",
+            owner={
+                "id": app_manager["id"],
+                "api_version": app_manager["apiVersion"],
+                "kind": app_manager["kind"],
+            },
+            managed_resource={
+                "id": main["id"],
+                "api_version": main["apiVersion"],
+                "kind": main["kind"],
+                "environments": [{
+                    "id": staging["id"],
+                }],
+            })
+        ```
 
         ### Example Schema Registry API Key
+        ```python
+        import pulumi
+        import pulumi_confluentcloud as confluentcloud
+
+        env_manager_schema_registry_api_key = confluentcloud.ApiKey("env-manager-schema-registry-api-key",
+            display_name="env-manager-schema-registry-api-key",
+            description="Schema Registry API Key that is owned by 'env-manager' service account",
+            owner={
+                "id": env_manager["id"],
+                "api_version": env_manager["apiVersion"],
+                "kind": env_manager["kind"],
+            },
+            managed_resource={
+                "id": essentials["id"],
+                "api_version": essentials["apiVersion"],
+                "kind": essentials["kind"],
+                "environments": [{
+                    "id": staging["id"],
+                }],
+            })
+        ```
 
         ### Example Flink API Key
+        ```python
+        import pulumi
+        import pulumi_confluentcloud as confluentcloud
+
+        env_manager_flink_api_key = confluentcloud.ApiKey("env-manager-flink-api-key",
+            display_name="env-manager-flink-api-key",
+            description="Flink API Key that is owned by 'env-manager' service account",
+            owner={
+                "id": env_manager["id"],
+                "api_version": env_manager["apiVersion"],
+                "kind": env_manager["kind"],
+            },
+            managed_resource={
+                "id": example["id"],
+                "api_version": example["apiVersion"],
+                "kind": example["kind"],
+                "environments": [{
+                    "id": staging["id"],
+                }],
+            })
+        ```
 
         ### Example Tableflow API Key
         ```python
@@ -342,12 +426,96 @@ class ApiKey(pulumi.CustomResource):
         ## Example Usage
 
         ### Example Kafka API Key
+        ```python
+        import pulumi
+        import pulumi_confluentcloud as confluentcloud
+
+        app_manager_kafka_api_key = confluentcloud.ApiKey("app-manager-kafka-api-key",
+            display_name="app-manager-kafka-api-key",
+            description="Kafka API Key that is owned by 'app-manager' service account",
+            owner={
+                "id": app_manager["id"],
+                "api_version": app_manager["apiVersion"],
+                "kind": app_manager["kind"],
+            },
+            managed_resource={
+                "id": basic["id"],
+                "api_version": basic["apiVersion"],
+                "kind": basic["kind"],
+                "environments": [{
+                    "id": staging["id"],
+                }],
+            })
+        ```
 
         ### Example ksqlDB API Key
+        ```python
+        import pulumi
+        import pulumi_confluentcloud as confluentcloud
+
+        ksqldb_api_key = confluentcloud.ApiKey("ksqldb-api-key",
+            display_name="ksqldb-api-key",
+            description="KsqlDB API Key that is owned by 'app-manager' service account",
+            owner={
+                "id": app_manager["id"],
+                "api_version": app_manager["apiVersion"],
+                "kind": app_manager["kind"],
+            },
+            managed_resource={
+                "id": main["id"],
+                "api_version": main["apiVersion"],
+                "kind": main["kind"],
+                "environments": [{
+                    "id": staging["id"],
+                }],
+            })
+        ```
 
         ### Example Schema Registry API Key
+        ```python
+        import pulumi
+        import pulumi_confluentcloud as confluentcloud
+
+        env_manager_schema_registry_api_key = confluentcloud.ApiKey("env-manager-schema-registry-api-key",
+            display_name="env-manager-schema-registry-api-key",
+            description="Schema Registry API Key that is owned by 'env-manager' service account",
+            owner={
+                "id": env_manager["id"],
+                "api_version": env_manager["apiVersion"],
+                "kind": env_manager["kind"],
+            },
+            managed_resource={
+                "id": essentials["id"],
+                "api_version": essentials["apiVersion"],
+                "kind": essentials["kind"],
+                "environments": [{
+                    "id": staging["id"],
+                }],
+            })
+        ```
 
         ### Example Flink API Key
+        ```python
+        import pulumi
+        import pulumi_confluentcloud as confluentcloud
+
+        env_manager_flink_api_key = confluentcloud.ApiKey("env-manager-flink-api-key",
+            display_name="env-manager-flink-api-key",
+            description="Flink API Key that is owned by 'env-manager' service account",
+            owner={
+                "id": env_manager["id"],
+                "api_version": env_manager["apiVersion"],
+                "kind": env_manager["kind"],
+            },
+            managed_resource={
+                "id": example["id"],
+                "api_version": example["apiVersion"],
+                "kind": example["kind"],
+                "environments": [{
+                    "id": staging["id"],
+                }],
+            })
+        ```
 
         ### Example Tableflow API Key
         ```python