pulumi-gcp 6.68.0a1698127103__py3-none-any.whl → 6.68.0a1698199636__py3-none-any.whl

pulumi_gcp/organizations/iam_audit_config.py

@@ -34,10 +34,22 @@ class IamAuditConfigArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             audit_log_configs: pulumi.Input[Sequence[pulumi.Input['IamAuditConfigAuditLogConfigArgs']]],
-             org_id: pulumi.Input[str],
-             service: pulumi.Input[str],
-             opts: Optional[pulumi.ResourceOptions]=None):
+             audit_log_configs: Optional[pulumi.Input[Sequence[pulumi.Input['IamAuditConfigAuditLogConfigArgs']]]] = None,
+             org_id: Optional[pulumi.Input[str]] = None,
+             service: Optional[pulumi.Input[str]] = None,
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if audit_log_configs is None and 'auditLogConfigs' in kwargs:
+            audit_log_configs = kwargs['auditLogConfigs']
+        if audit_log_configs is None:
+            raise TypeError("Missing 'audit_log_configs' argument")
+        if org_id is None and 'orgId' in kwargs:
+            org_id = kwargs['orgId']
+        if org_id is None:
+            raise TypeError("Missing 'org_id' argument")
+        if service is None:
+            raise TypeError("Missing 'service' argument")
+
         _setter("audit_log_configs", audit_log_configs)
         _setter("org_id", org_id)
         _setter("service", service)
@@ -107,7 +119,13 @@ class _IamAuditConfigState:
              etag: Optional[pulumi.Input[str]] = None,
              org_id: Optional[pulumi.Input[str]] = None,
              service: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if audit_log_configs is None and 'auditLogConfigs' in kwargs:
+            audit_log_configs = kwargs['auditLogConfigs']
+        if org_id is None and 'orgId' in kwargs:
+            org_id = kwargs['orgId']
+
         if audit_log_configs is not None:
             _setter("audit_log_configs", audit_log_configs)
         if etag is not None:
@@ -178,21 +196,6 @@ class IamAuditConfig(pulumi.CustomResource):
         """
         Allows management of audit logging config for a given service for a Google Cloud Platform Organization.
 
-        ## Example Usage
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        config = gcp.organizations.IamAuditConfig("config",
-            audit_log_configs=[gcp.organizations.IamAuditConfigAuditLogConfigArgs(
-                exempted_members=["user:joebloggs@hashicorp.com"],
-                log_type="DATA_READ",
-            )],
-            org_id="your-organization-id",
-            service="allServices")
-        ```
-
         ## Import
 
         IAM audit config imports use the identifier of the resource in question and the service, e.g.
@@ -216,21 +219,6 @@ class IamAuditConfig(pulumi.CustomResource):
         """
         Allows management of audit logging config for a given service for a Google Cloud Platform Organization.
 
-        ## Example Usage
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        config = gcp.organizations.IamAuditConfig("config",
-            audit_log_configs=[gcp.organizations.IamAuditConfigAuditLogConfigArgs(
-                exempted_members=["user:joebloggs@hashicorp.com"],
-                log_type="DATA_READ",
-            )],
-            org_id="your-organization-id",
-            service="allServices")
-        ```
-
         ## Import
 
         IAM audit config imports use the identifier of the resource in question and the service, e.g.

pulumi_gcp/organizations/iam_binding.py

@@ -38,11 +38,21 @@ class IAMBindingArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             members: pulumi.Input[Sequence[pulumi.Input[str]]],
-             org_id: pulumi.Input[str],
-             role: pulumi.Input[str],
+             members: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+             org_id: Optional[pulumi.Input[str]] = None,
+             role: Optional[pulumi.Input[str]] = None,
              condition: Optional[pulumi.Input['IAMBindingConditionArgs']] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if members is None:
+            raise TypeError("Missing 'members' argument")
+        if org_id is None and 'orgId' in kwargs:
+            org_id = kwargs['orgId']
+        if org_id is None:
+            raise TypeError("Missing 'org_id' argument")
+        if role is None:
+            raise TypeError("Missing 'role' argument")
+
         _setter("members", members)
         _setter("org_id", org_id)
         _setter("role", role)
@@ -130,7 +140,11 @@ class _IAMBindingState:
              members: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
              org_id: Optional[pulumi.Input[str]] = None,
              role: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if org_id is None and 'orgId' in kwargs:
+            org_id = kwargs['orgId']
+
         if condition is not None:
             _setter("condition", condition)
         if etag is not None:
@@ -224,18 +238,6 @@ class IAMBinding(pulumi.CustomResource):
             Use `pulumi import` and inspect the `output to ensure
             your existing members are preserved.
 
-        ## Example Usage
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        binding = gcp.organizations.IAMBinding("binding",
-            members=["user:alice@gmail.com"],
-            org_id="123456789",
-            role="roles/browser")
-        ```
-
         ## Import
 
         IAM binding imports use space-delimited identifiers; first the resource in question and then the role.
@@ -276,18 +278,6 @@ class IAMBinding(pulumi.CustomResource):
             Use `pulumi import` and inspect the `output to ensure
             your existing members are preserved.
 
-        ## Example Usage
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        binding = gcp.organizations.IAMBinding("binding",
-            members=["user:alice@gmail.com"],
-            org_id="123456789",
-            role="roles/browser")
-        ```
-
         ## Import
 
         IAM binding imports use space-delimited identifiers; first the resource in question and then the role.
@@ -334,11 +324,7 @@ class IAMBinding(pulumi.CustomResource):
                 raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
             __props__ = IAMBindingArgs.__new__(IAMBindingArgs)
 
-            if condition is not None and not isinstance(condition, IAMBindingConditionArgs):
-                condition = condition or {}
-                def _setter(key, value):
-                    condition[key] = value
-                IAMBindingConditionArgs._configure(_setter, **condition)
+            condition = _utilities.configure(condition, IAMBindingConditionArgs, True)
             __props__.__dict__["condition"] = condition
             if members is None and not opts.urn:
                 raise TypeError("Missing required property 'members'")

pulumi_gcp/organizations/iam_custom_role.py

@@ -43,13 +43,27 @@ class IAMCustomRoleArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             org_id: pulumi.Input[str],
-             permissions: pulumi.Input[Sequence[pulumi.Input[str]]],
-             role_id: pulumi.Input[str],
-             title: pulumi.Input[str],
+             org_id: Optional[pulumi.Input[str]] = None,
+             permissions: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+             role_id: Optional[pulumi.Input[str]] = None,
+             title: Optional[pulumi.Input[str]] = None,
              description: Optional[pulumi.Input[str]] = None,
              stage: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if org_id is None and 'orgId' in kwargs:
+            org_id = kwargs['orgId']
+        if org_id is None:
+            raise TypeError("Missing 'org_id' argument")
+        if permissions is None:
+            raise TypeError("Missing 'permissions' argument")
+        if role_id is None and 'roleId' in kwargs:
+            role_id = kwargs['roleId']
+        if role_id is None:
+            raise TypeError("Missing 'role_id' argument")
+        if title is None:
+            raise TypeError("Missing 'title' argument")
+
         _setter("org_id", org_id)
         _setter("permissions", permissions)
         _setter("role_id", role_id)
@@ -180,7 +194,13 @@ class _IAMCustomRoleState:
              role_id: Optional[pulumi.Input[str]] = None,
              stage: Optional[pulumi.Input[str]] = None,
              title: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if org_id is None and 'orgId' in kwargs:
+            org_id = kwargs['orgId']
+        if role_id is None and 'roleId' in kwargs:
+            role_id = kwargs['roleId']
+
         if deleted is not None:
             _setter("deleted", deleted)
         if description is not None:
@@ -322,26 +342,6 @@ class IAMCustomRole(pulumi.CustomResource):
          made available again. This means a deleted role that has been deleted for more than 7 days cannot be changed at all
          by the provider, and new roles cannot share that name.
 
-        ## Example Usage
-
-        This snippet creates a customized IAM organization role.
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        my_custom_role = gcp.organizations.IAMCustomRole("my-custom-role",
-            description="A description",
-            org_id="123456789",
-            permissions=[
-                "iam.roles.list",
-                "iam.roles.create",
-                "iam.roles.delete",
-            ],
-            role_id="myCustomRole",
-            title="My Custom Role")
-        ```
-
         ## Import
 
         Customized IAM organization role can be imported using their URI, e.g.
@@ -380,26 +380,6 @@ class IAMCustomRole(pulumi.CustomResource):
          made available again. This means a deleted role that has been deleted for more than 7 days cannot be changed at all
          by the provider, and new roles cannot share that name.
 
-        ## Example Usage
-
-        This snippet creates a customized IAM organization role.
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        my_custom_role = gcp.organizations.IAMCustomRole("my-custom-role",
-            description="A description",
-            org_id="123456789",
-            permissions=[
-                "iam.roles.list",
-                "iam.roles.create",
-                "iam.roles.delete",
-            ],
-            role_id="myCustomRole",
-            title="My Custom Role")
-        ```
-
         ## Import
 
         Customized IAM organization role can be imported using their URI, e.g.

pulumi_gcp/organizations/iam_member.py

@@ -39,11 +39,21 @@ class IAMMemberArgs:
     @staticmethod
     def _configure(
              _setter: Callable[[Any, Any], None],
-             member: pulumi.Input[str],
-             org_id: pulumi.Input[str],
-             role: pulumi.Input[str],
+             member: Optional[pulumi.Input[str]] = None,
+             org_id: Optional[pulumi.Input[str]] = None,
+             role: Optional[pulumi.Input[str]] = None,
              condition: Optional[pulumi.Input['IAMMemberConditionArgs']] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if member is None:
+            raise TypeError("Missing 'member' argument")
+        if org_id is None and 'orgId' in kwargs:
+            org_id = kwargs['orgId']
+        if org_id is None:
+            raise TypeError("Missing 'org_id' argument")
+        if role is None:
+            raise TypeError("Missing 'role' argument")
+
         _setter("member", member)
         _setter("org_id", org_id)
         _setter("role", role)
@@ -133,7 +143,11 @@ class _IAMMemberState:
              member: Optional[pulumi.Input[str]] = None,
              org_id: Optional[pulumi.Input[str]] = None,
              role: Optional[pulumi.Input[str]] = None,
-             opts: Optional[pulumi.ResourceOptions]=None):
+             opts: Optional[pulumi.ResourceOptions] = None,
+             **kwargs):
+        if org_id is None and 'orgId' in kwargs:
+            org_id = kwargs['orgId']
+
         if condition is not None:
             _setter("condition", condition)
         if etag is not None:
@@ -228,133 +242,6 @@ class IAMMember(pulumi.CustomResource):
 
         > **Note:** `organizations.IAMBinding` resources **can be** used in conjunction with `organizations.IAMMember` resources **only if** they do not grant privilege to the same role.
 
-        ## google\\_organization\\_iam\\_policy
-
-        !> **Warning:** New organizations have several default policies which will,
-           without extreme caution, be **overwritten** by use of this resource.
-           The safest alternative is to use multiple `organizations.IAMBinding`
-           resources. This resource makes it easy to remove your own access to
-           an organization, which will require a call to Google Support to have
-           fixed, and can take multiple days to resolve.
-
-           In general, this resource should only be used with organizations
-           fully managed by this provider.I f you do use this resource,
-           the best way to be sure that you are not making dangerous changes is to start
-           by **importing** your existing policy, and examining the diff very closely.
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/editor",
-            members=["user:jane@example.com"],
-        )])
-        organization = gcp.organizations.IAMPolicy("organization",
-            org_id="1234567890",
-            policy_data=admin.policy_data)
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            condition=gcp.organizations.GetIAMPolicyBindingConditionArgs(
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-                title="expires_after_2019_12_31",
-            ),
-            members=["user:jane@example.com"],
-            role="roles/editor",
-        )])
-        organization = gcp.organizations.IAMPolicy("organization",
-            org_id="1234567890",
-            policy_data=admin.policy_data)
-        ```
-
-        ## google\\_organization\\_iam\\_binding
-
-        > **Note:** If `role` is set to `roles/owner` and you don't specify a user or service account you have access to in `members`, you can lock yourself out of your organization.
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        organization = gcp.organizations.IAMBinding("organization",
-            members=["user:jane@example.com"],
-            org_id="1234567890",
-            role="roles/editor")
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        organization = gcp.organizations.IAMBinding("organization",
-            condition=gcp.organizations.IAMBindingConditionArgs(
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-                title="expires_after_2019_12_31",
-            ),
-            members=["user:jane@example.com"],
-            org_id="1234567890",
-            role="roles/editor")
-        ```
-
-        ## google\\_organization\\_iam\\_member
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        organization = gcp.organizations.IAMMember("organization",
-            member="user:jane@example.com",
-            org_id="1234567890",
-            role="roles/editor")
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        organization = gcp.organizations.IAMMember("organization",
-            condition=gcp.organizations.IAMMemberConditionArgs(
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-                title="expires_after_2019_12_31",
-            ),
-            member="user:jane@example.com",
-            org_id="1234567890",
-            role="roles/editor")
-        ```
-
-        ## google\\_organization\\_iam\\_audit\\_config
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        organization = gcp.organizations.IamAuditConfig("organization",
-            audit_log_configs=[
-                gcp.organizations.IamAuditConfigAuditLogConfigArgs(
-                    log_type="ADMIN_READ",
-                ),
-                gcp.organizations.IamAuditConfigAuditLogConfigArgs(
-                    exempted_members=["user:joebloggs@hashicorp.com"],
-                    log_type="DATA_READ",
-                ),
-            ],
-            org_id="1234567890",
-            service="allServices")
-        ```
-
         ## Import
 
         IAM member imports use space-delimited identifiers; the resource in question, the role, and the account.
@@ -422,133 +309,6 @@ class IAMMember(pulumi.CustomResource):
 
         > **Note:** `organizations.IAMBinding` resources **can be** used in conjunction with `organizations.IAMMember` resources **only if** they do not grant privilege to the same role.
 
-        ## google\\_organization\\_iam\\_policy
-
-        !> **Warning:** New organizations have several default policies which will,
-           without extreme caution, be **overwritten** by use of this resource.
-           The safest alternative is to use multiple `organizations.IAMBinding`
-           resources. This resource makes it easy to remove your own access to
-           an organization, which will require a call to Google Support to have
-           fixed, and can take multiple days to resolve.
-
-           In general, this resource should only be used with organizations
-           fully managed by this provider.I f you do use this resource,
-           the best way to be sure that you are not making dangerous changes is to start
-           by **importing** your existing policy, and examining the diff very closely.
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/editor",
-            members=["user:jane@example.com"],
-        )])
-        organization = gcp.organizations.IAMPolicy("organization",
-            org_id="1234567890",
-            policy_data=admin.policy_data)
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            condition=gcp.organizations.GetIAMPolicyBindingConditionArgs(
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-                title="expires_after_2019_12_31",
-            ),
-            members=["user:jane@example.com"],
-            role="roles/editor",
-        )])
-        organization = gcp.organizations.IAMPolicy("organization",
-            org_id="1234567890",
-            policy_data=admin.policy_data)
-        ```
-
-        ## google\\_organization\\_iam\\_binding
-
-        > **Note:** If `role` is set to `roles/owner` and you don't specify a user or service account you have access to in `members`, you can lock yourself out of your organization.
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        organization = gcp.organizations.IAMBinding("organization",
-            members=["user:jane@example.com"],
-            org_id="1234567890",
-            role="roles/editor")
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        organization = gcp.organizations.IAMBinding("organization",
-            condition=gcp.organizations.IAMBindingConditionArgs(
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-                title="expires_after_2019_12_31",
-            ),
-            members=["user:jane@example.com"],
-            org_id="1234567890",
-            role="roles/editor")
-        ```
-
-        ## google\\_organization\\_iam\\_member
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        organization = gcp.organizations.IAMMember("organization",
-            member="user:jane@example.com",
-            org_id="1234567890",
-            role="roles/editor")
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        organization = gcp.organizations.IAMMember("organization",
-            condition=gcp.organizations.IAMMemberConditionArgs(
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-                title="expires_after_2019_12_31",
-            ),
-            member="user:jane@example.com",
-            org_id="1234567890",
-            role="roles/editor")
-        ```
-
-        ## google\\_organization\\_iam\\_audit\\_config
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        organization = gcp.organizations.IamAuditConfig("organization",
-            audit_log_configs=[
-                gcp.organizations.IamAuditConfigAuditLogConfigArgs(
-                    log_type="ADMIN_READ",
-                ),
-                gcp.organizations.IamAuditConfigAuditLogConfigArgs(
-                    exempted_members=["user:joebloggs@hashicorp.com"],
-                    log_type="DATA_READ",
-                ),
-            ],
-            org_id="1234567890",
-            service="allServices")
-        ```
-
         ## Import
 
         IAM member imports use space-delimited identifiers; the resource in question, the role, and the account.
@@ -621,11 +381,7 @@ class IAMMember(pulumi.CustomResource):
                 raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
             __props__ = IAMMemberArgs.__new__(IAMMemberArgs)
 
-            if condition is not None and not isinstance(condition, IAMMemberConditionArgs):
-                condition = condition or {}
-                def _setter(key, value):
-                    condition[key] = value
-                IAMMemberConditionArgs._configure(_setter, **condition)
+            condition = _utilities.configure(condition, IAMMemberConditionArgs, True)
             __props__.__dict__["condition"] = condition
             if member is None and not opts.urn:
                 raise TypeError("Missing required property 'member'")