pulumi-gcp 6.68.0a1697867869__py3-none-any.whl → 6.68.0a1698199636__py3-none-any.whl

pulumi_gcp/folder/_inputs.py

@@ -64,9 +64,17 @@ class AccessApprovalSettingsEnrolledServiceArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             cloud_product: pulumi.Input[str],
+             cloud_product: Optional[pulumi.Input[str]] = None,
              enrollment_level: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if cloud_product is None and 'cloudProduct' in kwargs:
+            cloud_product = kwargs['cloudProduct']
+        if cloud_product is None:
+            raise TypeError("Missing 'cloud_product' argument")
+        if enrollment_level is None and 'enrollmentLevel' in kwargs:
+            enrollment_level = kwargs['enrollmentLevel']
+
         _setter("cloud_product", cloud_product)
         if enrollment_level is not None:
             _setter("enrollment_level", enrollment_level)
@@ -137,10 +145,16 @@ class IAMBindingConditionArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             expression: pulumi.Input[str],
-             title: pulumi.Input[str],
+             expression: Optional[pulumi.Input[str]] = None,
+             title: Optional[pulumi.Input[str]] = None,
              description: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if expression is None:
+            raise TypeError("Missing 'expression' argument")
+        if title is None:
+            raise TypeError("Missing 'title' argument")
+
         _setter("expression", expression)
         _setter("title", title)
         if description is not None:
@@ -198,10 +212,16 @@ class IAMMemberConditionArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             expression: pulumi.Input[str],
-             title: pulumi.Input[str],
+             expression: Optional[pulumi.Input[str]] = None,
+             title: Optional[pulumi.Input[str]] = None,
              description: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if expression is None:
+            raise TypeError("Missing 'expression' argument")
+        if title is None:
+            raise TypeError("Missing 'title' argument")
+
         _setter("expression", expression)
         _setter("title", title)
         if description is not None:
@@ -265,9 +285,17 @@ class IamAuditConfigAuditLogConfigArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             log_type: pulumi.Input[str],
+             log_type: Optional[pulumi.Input[str]] = None,
              exempted_members: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if log_type is None and 'logType' in kwargs:
+            log_type = kwargs['logType']
+        if log_type is None:
+            raise TypeError("Missing 'log_type' argument")
+        if exempted_members is None and 'exemptedMembers' in kwargs:
+            exempted_members = kwargs['exemptedMembers']
+
         _setter("log_type", log_type)
         if exempted_members is not None:
             _setter("exempted_members", exempted_members)
@@ -311,8 +339,12 @@ class OrganizationPolicyBooleanPolicyArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             enforced: pulumi.Input[bool],
-             opts: Optional[pulumi.ResourceOptions]=None):
+             enforced: Optional[pulumi.Input[bool]] = None,
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if enforced is None:
+            raise TypeError("Missing 'enforced' argument")
+
         _setter("enforced", enforced)
 
     @property
@@ -357,7 +389,13 @@ class OrganizationPolicyListPolicyArgs:
              deny: Optional[pulumi.Input['OrganizationPolicyListPolicyDenyArgs']] = None,
              inherit_from_parent: Optional[pulumi.Input[bool]] = None,
              suggested_value: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if inherit_from_parent is None and 'inheritFromParent' in kwargs:
+            inherit_from_parent = kwargs['inheritFromParent']
+        if suggested_value is None and 'suggestedValue' in kwargs:
+            suggested_value = kwargs['suggestedValue']
+
         if allow is not None:
             _setter("allow", allow)
         if deny is not None:
@@ -435,7 +473,9 @@ class OrganizationPolicyListPolicyAllowArgs:
              _setter: Callable[[Any, Any], None],
              all: Optional[pulumi.Input[bool]] = None,
              values: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+
         if all is not None:
             _setter("all", all)
         if values is not None:
@@ -485,7 +525,9 @@ class OrganizationPolicyListPolicyDenyArgs:
              _setter: Callable[[Any, Any], None],
              all: Optional[pulumi.Input[bool]] = None,
              values: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+
         if all is not None:
             _setter("all", all)
         if values is not None:
@@ -530,8 +572,12 @@ class OrganizationPolicyRestorePolicyArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             default: pulumi.Input[bool],
-             opts: Optional[pulumi.ResourceOptions]=None):
+             default: Optional[pulumi.Input[bool]] = None,
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if default is None:
+            raise TypeError("Missing 'default' argument")
+
         _setter("default", default)
 
     @property

pulumi_gcp/folder/access_approval_settings.py

@@ -45,11 +45,25 @@ class AccessApprovalSettingsArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             enrolled_services: pulumi.Input[Sequence[pulumi.Input['AccessApprovalSettingsEnrolledServiceArgs']]],
-             folder_id: pulumi.Input[str],
+             enrolled_services: Optional[pulumi.Input[Sequence[pulumi.Input['AccessApprovalSettingsEnrolledServiceArgs']]]] = None,
+             folder_id: Optional[pulumi.Input[str]] = None,
              active_key_version: Optional[pulumi.Input[str]] = None,
              notification_emails: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if enrolled_services is None and 'enrolledServices' in kwargs:
+            enrolled_services = kwargs['enrolledServices']
+        if enrolled_services is None:
+            raise TypeError("Missing 'enrolled_services' argument")
+        if folder_id is None and 'folderId' in kwargs:
+            folder_id = kwargs['folderId']
+        if folder_id is None:
+            raise TypeError("Missing 'folder_id' argument")
+        if active_key_version is None and 'activeKeyVersion' in kwargs:
+            active_key_version = kwargs['activeKeyVersion']
+        if notification_emails is None and 'notificationEmails' in kwargs:
+            notification_emails = kwargs['notificationEmails']
+
         _setter("enrolled_services", enrolled_services)
         _setter("folder_id", folder_id)
         if active_key_version is not None:
@@ -169,7 +183,23 @@ class _AccessApprovalSettingsState:
              invalid_key_version: Optional[pulumi.Input[bool]] = None,
              name: Optional[pulumi.Input[str]] = None,
              notification_emails: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if active_key_version is None and 'activeKeyVersion' in kwargs:
+            active_key_version = kwargs['activeKeyVersion']
+        if ancestor_has_active_key_version is None and 'ancestorHasActiveKeyVersion' in kwargs:
+            ancestor_has_active_key_version = kwargs['ancestorHasActiveKeyVersion']
+        if enrolled_ancestor is None and 'enrolledAncestor' in kwargs:
+            enrolled_ancestor = kwargs['enrolledAncestor']
+        if enrolled_services is None and 'enrolledServices' in kwargs:
+            enrolled_services = kwargs['enrolledServices']
+        if folder_id is None and 'folderId' in kwargs:
+            folder_id = kwargs['folderId']
+        if invalid_key_version is None and 'invalidKeyVersion' in kwargs:
+            invalid_key_version = kwargs['invalidKeyVersion']
+        if notification_emails is None and 'notificationEmails' in kwargs:
+            notification_emails = kwargs['notificationEmails']
+
         if active_key_version is not None:
             _setter("active_key_version", active_key_version)
         if ancestor_has_active_key_version is not None:
@@ -313,60 +343,6 @@ class AccessApprovalSettings(pulumi.CustomResource):
         * [API documentation](https://cloud.google.com/access-approval/docs/reference/rest/v1/folders)
 
         ## Example Usage
-        ### Folder Access Approval Full
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        my_folder = gcp.organizations.Folder("myFolder",
-            display_name="my-folder",
-            parent="organizations/123456789")
-        folder_access_approval = gcp.folder.AccessApprovalSettings("folderAccessApproval",
-            folder_id=my_folder.folder_id,
-            notification_emails=[
-                "testuser@example.com",
-                "example.user@example.com",
-            ],
-            enrolled_services=[gcp.folder.AccessApprovalSettingsEnrolledServiceArgs(
-                cloud_product="all",
-            )])
-        ```
-        ### Folder Access Approval Active Key Version
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        my_folder = gcp.organizations.Folder("myFolder",
-            display_name="my-folder",
-            parent="organizations/123456789")
-        my_project = gcp.organizations.Project("myProject",
-            project_id="your-project-id",
-            folder_id=my_folder.name)
-        key_ring = gcp.kms.KeyRing("keyRing",
-            location="global",
-            project=my_project.project_id)
-        crypto_key = gcp.kms.CryptoKey("cryptoKey",
-            key_ring=key_ring.id,
-            purpose="ASYMMETRIC_SIGN",
-            version_template=gcp.kms.CryptoKeyVersionTemplateArgs(
-                algorithm="EC_SIGN_P384_SHA384",
-            ))
-        service_account = gcp.accessapproval.get_folder_service_account_output(folder_id=my_folder.folder_id)
-        iam = gcp.kms.CryptoKeyIAMMember("iam",
-            crypto_key_id=crypto_key.id,
-            role="roles/cloudkms.signerVerifier",
-            member=service_account.apply(lambda service_account: f"serviceAccount:{service_account.account_email}"))
-        crypto_key_version = gcp.kms.get_kms_crypto_key_version_output(crypto_key=crypto_key.id)
-        folder_access_approval = gcp.folder.AccessApprovalSettings("folderAccessApproval",
-            folder_id=my_folder.folder_id,
-            active_key_version=crypto_key_version.name,
-            enrolled_services=[gcp.folder.AccessApprovalSettingsEnrolledServiceArgs(
-                cloud_product="all",
-            )],
-            opts=pulumi.ResourceOptions(depends_on=[iam]))
-        ```
 
         ## Import
 
@@ -409,60 +385,6 @@ class AccessApprovalSettings(pulumi.CustomResource):
         * [API documentation](https://cloud.google.com/access-approval/docs/reference/rest/v1/folders)
 
         ## Example Usage
-        ### Folder Access Approval Full
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        my_folder = gcp.organizations.Folder("myFolder",
-            display_name="my-folder",
-            parent="organizations/123456789")
-        folder_access_approval = gcp.folder.AccessApprovalSettings("folderAccessApproval",
-            folder_id=my_folder.folder_id,
-            notification_emails=[
-                "testuser@example.com",
-                "example.user@example.com",
-            ],
-            enrolled_services=[gcp.folder.AccessApprovalSettingsEnrolledServiceArgs(
-                cloud_product="all",
-            )])
-        ```
-        ### Folder Access Approval Active Key Version
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        my_folder = gcp.organizations.Folder("myFolder",
-            display_name="my-folder",
-            parent="organizations/123456789")
-        my_project = gcp.organizations.Project("myProject",
-            project_id="your-project-id",
-            folder_id=my_folder.name)
-        key_ring = gcp.kms.KeyRing("keyRing",
-            location="global",
-            project=my_project.project_id)
-        crypto_key = gcp.kms.CryptoKey("cryptoKey",
-            key_ring=key_ring.id,
-            purpose="ASYMMETRIC_SIGN",
-            version_template=gcp.kms.CryptoKeyVersionTemplateArgs(
-                algorithm="EC_SIGN_P384_SHA384",
-            ))
-        service_account = gcp.accessapproval.get_folder_service_account_output(folder_id=my_folder.folder_id)
-        iam = gcp.kms.CryptoKeyIAMMember("iam",
-            crypto_key_id=crypto_key.id,
-            role="roles/cloudkms.signerVerifier",
-            member=service_account.apply(lambda service_account: f"serviceAccount:{service_account.account_email}"))
-        crypto_key_version = gcp.kms.get_kms_crypto_key_version_output(crypto_key=crypto_key.id)
-        folder_access_approval = gcp.folder.AccessApprovalSettings("folderAccessApproval",
-            folder_id=my_folder.folder_id,
-            active_key_version=crypto_key_version.name,
-            enrolled_services=[gcp.folder.AccessApprovalSettingsEnrolledServiceArgs(
-                cloud_product="all",
-            )],
-            opts=pulumi.ResourceOptions(depends_on=[iam]))
-        ```
 
         ## Import
 

pulumi_gcp/folder/get_iam_policy.py

@@ -82,15 +82,6 @@ def get_iam_policy(folder: Optional[str] = None,
     """
     Retrieves the current IAM policy data for a folder.
 
-    ## example
-
-    ```python
-    import pulumi
-    import pulumi_gcp as gcp
-
-    test = gcp.folder.get_iam_policy(folder=google_folder["permissiontest"]["name"])
-    ```
-
 
     :param str folder: The resource name of the folder the policy is attached to. Its format is folders/{folder_id}.
     """
@@ -112,15 +103,6 @@ def get_iam_policy_output(folder: Optional[pulumi.Input[str]] = None,
     """
     Retrieves the current IAM policy data for a folder.
 
-    ## example
-
-    ```python
-    import pulumi
-    import pulumi_gcp as gcp
-
-    test = gcp.folder.get_iam_policy(folder=google_folder["permissiontest"]["name"])
-    ```
-
 
     :param str folder: The resource name of the folder the policy is attached to. Its format is folders/{folder_id}.
     """

pulumi_gcp/folder/get_organization_policy.py

@@ -125,17 +125,6 @@ def get_organization_policy(constraint: Optional[str] = None,
     [the official
     documentation](https://cloud.google.com/resource-manager/docs/organization-policy/overview)
 
-    ## Example Usage
-
-    ```python
-    import pulumi
-    import pulumi_gcp as gcp
-
-    policy = gcp.folder.get_organization_policy(folder="folders/folderid",
-        constraint="constraints/compute.trustedImageProjects")
-    pulumi.export("version", policy.version)
-    ```
-
 
     :param str constraint: (Required) The name of the Constraint the Policy is configuring, for example, `serviceuser.services`. Check out the [complete list of available constraints](https://cloud.google.com/resource-manager/docs/organization-policy/understanding-constraints#available_constraints).
     :param str folder: The resource name of the folder to set the policy for. Its format is folders/{folder_id}.
@@ -167,17 +156,6 @@ def get_organization_policy_output(constraint: Optional[pulumi.Input[str]] = Non
     [the official
     documentation](https://cloud.google.com/resource-manager/docs/organization-policy/overview)
 
-    ## Example Usage
-
-    ```python
-    import pulumi
-    import pulumi_gcp as gcp
-
-    policy = gcp.folder.get_organization_policy(folder="folders/folderid",
-        constraint="constraints/compute.trustedImageProjects")
-    pulumi.export("version", policy.version)
-    ```
-
 
     :param str constraint: (Required) The name of the Constraint the Policy is configuring, for example, `serviceuser.services`. Check out the [complete list of available constraints](https://cloud.google.com/resource-manager/docs/organization-policy/understanding-constraints#available_constraints).
     :param str folder: The resource name of the folder to set the policy for. Its format is folders/{folder_id}.

pulumi_gcp/folder/iam_audit_config.py

@@ -34,10 +34,20 @@ class IamAuditConfigArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             audit_log_configs: pulumi.Input[Sequence[pulumi.Input['IamAuditConfigAuditLogConfigArgs']]],
-             folder: pulumi.Input[str],
-             service: pulumi.Input[str],
-             opts: Optional[pulumi.ResourceOptions]=None):
+             audit_log_configs: Optional[pulumi.Input[Sequence[pulumi.Input['IamAuditConfigAuditLogConfigArgs']]]] = None,
+             folder: Optional[pulumi.Input[str]] = None,
+             service: Optional[pulumi.Input[str]] = None,
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if audit_log_configs is None and 'auditLogConfigs' in kwargs:
+            audit_log_configs = kwargs['auditLogConfigs']
+        if audit_log_configs is None:
+            raise TypeError("Missing 'audit_log_configs' argument")
+        if folder is None:
+            raise TypeError("Missing 'folder' argument")
+        if service is None:
+            raise TypeError("Missing 'service' argument")
+
         _setter("audit_log_configs", audit_log_configs)
         _setter("folder", folder)
         _setter("service", service)
@@ -107,7 +117,11 @@ class _IamAuditConfigState:
              etag: Optional[pulumi.Input[str]] = None,
              folder: Optional[pulumi.Input[str]] = None,
              service: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if audit_log_configs is None and 'auditLogConfigs' in kwargs:
+            audit_log_configs = kwargs['auditLogConfigs']
+
         if audit_log_configs is not None:
             _setter("audit_log_configs", audit_log_configs)
         if etag is not None:
@@ -190,127 +204,6 @@ class IamAuditConfig(pulumi.CustomResource):
         > **Note:** The underlying API method `projects.setIamPolicy` has constraints which are documented [here](https://cloud.google.com/resource-manager/reference/rest/v1/projects/setIamPolicy). In addition to these constraints,
            IAM Conditions cannot be used with Basic Roles such as Owner. Violating these constraints will result in the API returning a 400 error code so please review these if you encounter errors with this resource.
 
-        ## google\\_folder\\_iam\\_policy
-
-        !> **Be careful!** You can accidentally lock yourself out of your folder
-           using this resource. Deleting a `folder.IAMPolicy` removes access
-           from anyone without permissions on its parent folder/organization. Proceed with caution.
-           It's not recommended to use `folder.IAMPolicy` with your provider folder
-           to avoid locking yourself out, and it should generally only be used with folders
-           fully managed by this provider. If you do use this resource, it is recommended to **import** the policy before
-           applying the change.
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/editor",
-            members=["user:jane@example.com"],
-        )])
-        folder = gcp.folder.IAMPolicy("folder",
-            folder="folders/1234567",
-            policy_data=admin.policy_data)
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            condition=gcp.organizations.GetIAMPolicyBindingConditionArgs(
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-                title="expires_after_2019_12_31",
-            ),
-            members=["user:jane@example.com"],
-            role="roles/compute.admin",
-        )])
-        folder = gcp.folder.IAMPolicy("folder",
-            folder="folders/1234567",
-            policy_data=admin.policy_data)
-        ```
-
-        ## google\\_folder\\_iam\\_binding
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        folder = gcp.folder.IAMBinding("folder",
-            folder="folders/1234567",
-            members=["user:jane@example.com"],
-            role="roles/editor")
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        folder = gcp.folder.IAMBinding("folder",
-            condition=gcp.folder.IAMBindingConditionArgs(
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-                title="expires_after_2019_12_31",
-            ),
-            folder="folders/1234567",
-            members=["user:jane@example.com"],
-            role="roles/container.admin")
-        ```
-
-        ## google\\_folder\\_iam\\_member
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        folder = gcp.folder.IAMMember("folder",
-            folder="folders/1234567",
-            member="user:jane@example.com",
-            role="roles/editor")
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        folder = gcp.folder.IAMMember("folder",
-            condition=gcp.folder.IAMMemberConditionArgs(
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-                title="expires_after_2019_12_31",
-            ),
-            folder="folders/1234567",
-            member="user:jane@example.com",
-            role="roles/firebase.admin")
-        ```
-
-        ## google\\_folder\\_iam\\_audit\\_config
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        folder = gcp.folder.IamAuditConfig("folder",
-            audit_log_configs=[
-                gcp.folder.IamAuditConfigAuditLogConfigArgs(
-                    log_type="ADMIN_READ",
-                ),
-                gcp.folder.IamAuditConfigAuditLogConfigArgs(
-                    exempted_members=["user:joebloggs@hashicorp.com"],
-                    log_type="DATA_READ",
-                ),
-            ],
-            folder="folders/1234567",
-            service="allServices")
-        ```
-
         ## Import
 
         IAM member imports use space-delimited identifiers; the resource in question, the role, and the account.
@@ -378,127 +271,6 @@ class IamAuditConfig(pulumi.CustomResource):
         > **Note:** The underlying API method `projects.setIamPolicy` has constraints which are documented [here](https://cloud.google.com/resource-manager/reference/rest/v1/projects/setIamPolicy). In addition to these constraints,
            IAM Conditions cannot be used with Basic Roles such as Owner. Violating these constraints will result in the API returning a 400 error code so please review these if you encounter errors with this resource.
 
-        ## google\\_folder\\_iam\\_policy
-
-        !> **Be careful!** You can accidentally lock yourself out of your folder
-           using this resource. Deleting a `folder.IAMPolicy` removes access
-           from anyone without permissions on its parent folder/organization. Proceed with caution.
-           It's not recommended to use `folder.IAMPolicy` with your provider folder
-           to avoid locking yourself out, and it should generally only be used with folders
-           fully managed by this provider. If you do use this resource, it is recommended to **import** the policy before
-           applying the change.
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/editor",
-            members=["user:jane@example.com"],
-        )])
-        folder = gcp.folder.IAMPolicy("folder",
-            folder="folders/1234567",
-            policy_data=admin.policy_data)
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            condition=gcp.organizations.GetIAMPolicyBindingConditionArgs(
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-                title="expires_after_2019_12_31",
-            ),
-            members=["user:jane@example.com"],
-            role="roles/compute.admin",
-        )])
-        folder = gcp.folder.IAMPolicy("folder",
-            folder="folders/1234567",
-            policy_data=admin.policy_data)
-        ```
-
-        ## google\\_folder\\_iam\\_binding
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        folder = gcp.folder.IAMBinding("folder",
-            folder="folders/1234567",
-            members=["user:jane@example.com"],
-            role="roles/editor")
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        folder = gcp.folder.IAMBinding("folder",
-            condition=gcp.folder.IAMBindingConditionArgs(
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-                title="expires_after_2019_12_31",
-            ),
-            folder="folders/1234567",
-            members=["user:jane@example.com"],
-            role="roles/container.admin")
-        ```
-
-        ## google\\_folder\\_iam\\_member
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        folder = gcp.folder.IAMMember("folder",
-            folder="folders/1234567",
-            member="user:jane@example.com",
-            role="roles/editor")
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        folder = gcp.folder.IAMMember("folder",
-            condition=gcp.folder.IAMMemberConditionArgs(
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-                title="expires_after_2019_12_31",
-            ),
-            folder="folders/1234567",
-            member="user:jane@example.com",
-            role="roles/firebase.admin")
-        ```
-
-        ## google\\_folder\\_iam\\_audit\\_config
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        folder = gcp.folder.IamAuditConfig("folder",
-            audit_log_configs=[
-                gcp.folder.IamAuditConfigAuditLogConfigArgs(
-                    log_type="ADMIN_READ",
-                ),
-                gcp.folder.IamAuditConfigAuditLogConfigArgs(
-                    exempted_members=["user:joebloggs@hashicorp.com"],
-                    log_type="DATA_READ",
-                ),
-            ],
-            folder="folders/1234567",
-            service="allServices")
-        ```
-
         ## Import
 
         IAM member imports use space-delimited identifiers; the resource in question, the role, and the account.