pulumi-gcp 7.10.0a1708496697__py3-none-any.whl → 7.11.0__py3-none-any.whl

pulumi_gcp/notebooks/instance.py

@@ -26,6 +26,7 @@ class InstanceArgs:
                  custom_gpu_driver_path: Optional[pulumi.Input[str]] = None,
                  data_disk_size_gb: Optional[pulumi.Input[int]] = None,
                  data_disk_type: Optional[pulumi.Input[str]] = None,
+                 desired_state: Optional[pulumi.Input[str]] = None,
                  disk_encryption: Optional[pulumi.Input[str]] = None,
                  install_gpu_driver: Optional[pulumi.Input[bool]] = None,
                  instance_owners: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
@@ -75,6 +76,7 @@ class InstanceArgs:
                If not specified, this defaults to 100.
         :param pulumi.Input[str] data_disk_type: Possible disk types for notebook instances.
                Possible values are: `DISK_TYPE_UNSPECIFIED`, `PD_STANDARD`, `PD_SSD`, `PD_BALANCED`, `PD_EXTREME`.
+        :param pulumi.Input[str] desired_state: Desired state of the Notebook Instance. Set this field to `ACTIVE` to start the Instance, and `STOPPED` to stop the Instance.
         :param pulumi.Input[str] disk_encryption: Disk encryption method used on the boot and data disks, defaults to GMEK.
                Possible values are: `DISK_ENCRYPTION_UNSPECIFIED`, `GMEK`, `CMEK`.
         :param pulumi.Input[bool] install_gpu_driver: Whether the end user authorizes Google Cloud to install GPU driver
@@ -146,6 +148,8 @@ class InstanceArgs:
             pulumi.set(__self__, "data_disk_size_gb", data_disk_size_gb)
         if data_disk_type is not None:
             pulumi.set(__self__, "data_disk_type", data_disk_type)
+        if desired_state is not None:
+            pulumi.set(__self__, "desired_state", desired_state)
         if disk_encryption is not None:
             pulumi.set(__self__, "disk_encryption", disk_encryption)
         if install_gpu_driver is not None:
@@ -326,6 +330,18 @@ class InstanceArgs:
     def data_disk_type(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "data_disk_type", value)
 
+    @property
+    @pulumi.getter(name="desiredState")
+    def desired_state(self) -> Optional[pulumi.Input[str]]:
+        """
+        Desired state of the Notebook Instance. Set this field to `ACTIVE` to start the Instance, and `STOPPED` to stop the Instance.
+        """
+        return pulumi.get(self, "desired_state")
+
+    @desired_state.setter
+    def desired_state(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "desired_state", value)
+
     @property
     @pulumi.getter(name="diskEncryption")
     def disk_encryption(self) -> Optional[pulumi.Input[str]]:
@@ -632,6 +648,7 @@ class _InstanceState:
                  custom_gpu_driver_path: Optional[pulumi.Input[str]] = None,
                  data_disk_size_gb: Optional[pulumi.Input[int]] = None,
                  data_disk_type: Optional[pulumi.Input[str]] = None,
+                 desired_state: Optional[pulumi.Input[str]] = None,
                  disk_encryption: Optional[pulumi.Input[str]] = None,
                  effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  install_gpu_driver: Optional[pulumi.Input[bool]] = None,
@@ -682,6 +699,7 @@ class _InstanceState:
                If not specified, this defaults to 100.
         :param pulumi.Input[str] data_disk_type: Possible disk types for notebook instances.
                Possible values are: `DISK_TYPE_UNSPECIFIED`, `PD_STANDARD`, `PD_SSD`, `PD_BALANCED`, `PD_EXTREME`.
+        :param pulumi.Input[str] desired_state: Desired state of the Notebook Instance. Set this field to `ACTIVE` to start the Instance, and `STOPPED` to stop the Instance.
         :param pulumi.Input[str] disk_encryption: Disk encryption method used on the boot and data disks, defaults to GMEK.
                Possible values are: `DISK_ENCRYPTION_UNSPECIFIED`, `GMEK`, `CMEK`.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
@@ -764,6 +782,8 @@ class _InstanceState:
             pulumi.set(__self__, "data_disk_size_gb", data_disk_size_gb)
         if data_disk_type is not None:
             pulumi.set(__self__, "data_disk_type", data_disk_type)
+        if desired_state is not None:
+            pulumi.set(__self__, "desired_state", desired_state)
         if disk_encryption is not None:
             pulumi.set(__self__, "disk_encryption", disk_encryption)
         if effective_labels is not None:
@@ -929,6 +949,18 @@ class _InstanceState:
     def data_disk_type(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "data_disk_type", value)
 
+    @property
+    @pulumi.getter(name="desiredState")
+    def desired_state(self) -> Optional[pulumi.Input[str]]:
+        """
+        Desired state of the Notebook Instance. Set this field to `ACTIVE` to start the Instance, and `STOPPED` to stop the Instance.
+        """
+        return pulumi.get(self, "desired_state")
+
+    @desired_state.setter
+    def desired_state(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "desired_state", value)
+
     @property
     @pulumi.getter(name="diskEncryption")
     def disk_encryption(self) -> Optional[pulumi.Input[str]]:
@@ -1316,6 +1348,7 @@ class Instance(pulumi.CustomResource):
                  custom_gpu_driver_path: Optional[pulumi.Input[str]] = None,
                  data_disk_size_gb: Optional[pulumi.Input[int]] = None,
                  data_disk_type: Optional[pulumi.Input[str]] = None,
+                 desired_state: Optional[pulumi.Input[str]] = None,
                  disk_encryption: Optional[pulumi.Input[str]] = None,
                  install_gpu_driver: Optional[pulumi.Input[bool]] = None,
                  instance_owners: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
@@ -1342,6 +1375,8 @@ class Instance(pulumi.CustomResource):
                  vm_image: Optional[pulumi.Input[pulumi.InputType['InstanceVmImageArgs']]] = None,
                  __props__=None):
         """
+        > **Warning:** `google_notebook_instance` is deprecated and will be removed in a future major release. Use `workbench.Instance` instead.
+
         A Cloud AI Platform Notebook instance.
 
         > **Note:** Due to limitations of the Notebooks Instance API, many fields
@@ -1369,6 +1404,21 @@ class Instance(pulumi.CustomResource):
                 project="deeplearning-platform-release",
             ))
         ```
+        ### Notebook Instance Basic Stopped
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        instance = gcp.notebooks.Instance("instance",
+            desired_state="STOPPED",
+            location="us-west1-a",
+            machine_type="e2-medium",
+            vm_image=gcp.notebooks.InstanceVmImageArgs(
+                image_family="tf-latest-cpu",
+                project="deeplearning-platform-release",
+            ))
+        ```
         ### Notebook Instance Basic Container
 
         ```python
@@ -1432,7 +1482,19 @@ class Instance(pulumi.CustomResource):
             subnet=my_subnetwork.id,
             labels={
                 "k": "val",
-            })
+            },
+            metadata={
+                "terraform": "true",
+            },
+            service_account_scopes=[
+                "https://www.googleapis.com/auth/bigquery",
+                "https://www.googleapis.com/auth/devstorage.read_write",
+                "https://www.googleapis.com/auth/cloud-platform",
+                "https://www.googleapis.com/auth/userinfo.email",
+            ],
+            disk_encryption="CMEK",
+            kms_key="my-crypto-key",
+            desired_state="ACTIVE")
         ```
 
         ## Import
@@ -1481,6 +1543,7 @@ class Instance(pulumi.CustomResource):
                If not specified, this defaults to 100.
         :param pulumi.Input[str] data_disk_type: Possible disk types for notebook instances.
                Possible values are: `DISK_TYPE_UNSPECIFIED`, `PD_STANDARD`, `PD_SSD`, `PD_BALANCED`, `PD_EXTREME`.
+        :param pulumi.Input[str] desired_state: Desired state of the Notebook Instance. Set this field to `ACTIVE` to start the Instance, and `STOPPED` to stop the Instance.
         :param pulumi.Input[str] disk_encryption: Disk encryption method used on the boot and data disks, defaults to GMEK.
                Possible values are: `DISK_ENCRYPTION_UNSPECIFIED`, `GMEK`, `CMEK`.
         :param pulumi.Input[bool] install_gpu_driver: Whether the end user authorizes Google Cloud to install GPU driver
@@ -1546,6 +1609,8 @@ class Instance(pulumi.CustomResource):
                  args: InstanceArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        > **Warning:** `google_notebook_instance` is deprecated and will be removed in a future major release. Use `workbench.Instance` instead.
+
         A Cloud AI Platform Notebook instance.
 
         > **Note:** Due to limitations of the Notebooks Instance API, many fields
@@ -1573,6 +1638,21 @@ class Instance(pulumi.CustomResource):
                 project="deeplearning-platform-release",
             ))
         ```
+        ### Notebook Instance Basic Stopped
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        instance = gcp.notebooks.Instance("instance",
+            desired_state="STOPPED",
+            location="us-west1-a",
+            machine_type="e2-medium",
+            vm_image=gcp.notebooks.InstanceVmImageArgs(
+                image_family="tf-latest-cpu",
+                project="deeplearning-platform-release",
+            ))
+        ```
         ### Notebook Instance Basic Container
 
         ```python
@@ -1636,7 +1716,19 @@ class Instance(pulumi.CustomResource):
             subnet=my_subnetwork.id,
             labels={
                 "k": "val",
-            })
+            },
+            metadata={
+                "terraform": "true",
+            },
+            service_account_scopes=[
+                "https://www.googleapis.com/auth/bigquery",
+                "https://www.googleapis.com/auth/devstorage.read_write",
+                "https://www.googleapis.com/auth/cloud-platform",
+                "https://www.googleapis.com/auth/userinfo.email",
+            ],
+            disk_encryption="CMEK",
+            kms_key="my-crypto-key",
+            desired_state="ACTIVE")
         ```
 
         ## Import
@@ -1686,6 +1778,7 @@ class Instance(pulumi.CustomResource):
                  custom_gpu_driver_path: Optional[pulumi.Input[str]] = None,
                  data_disk_size_gb: Optional[pulumi.Input[int]] = None,
                  data_disk_type: Optional[pulumi.Input[str]] = None,
+                 desired_state: Optional[pulumi.Input[str]] = None,
                  disk_encryption: Optional[pulumi.Input[str]] = None,
                  install_gpu_driver: Optional[pulumi.Input[bool]] = None,
                  instance_owners: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
@@ -1727,6 +1820,7 @@ class Instance(pulumi.CustomResource):
             __props__.__dict__["custom_gpu_driver_path"] = custom_gpu_driver_path
             __props__.__dict__["data_disk_size_gb"] = data_disk_size_gb
             __props__.__dict__["data_disk_type"] = data_disk_type
+            __props__.__dict__["desired_state"] = desired_state
             __props__.__dict__["disk_encryption"] = disk_encryption
             __props__.__dict__["install_gpu_driver"] = install_gpu_driver
             __props__.__dict__["instance_owners"] = instance_owners
@@ -1779,6 +1873,7 @@ class Instance(pulumi.CustomResource):
             custom_gpu_driver_path: Optional[pulumi.Input[str]] = None,
             data_disk_size_gb: Optional[pulumi.Input[int]] = None,
             data_disk_type: Optional[pulumi.Input[str]] = None,
+            desired_state: Optional[pulumi.Input[str]] = None,
             disk_encryption: Optional[pulumi.Input[str]] = None,
             effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
             install_gpu_driver: Optional[pulumi.Input[bool]] = None,
@@ -1834,6 +1929,7 @@ class Instance(pulumi.CustomResource):
                If not specified, this defaults to 100.
         :param pulumi.Input[str] data_disk_type: Possible disk types for notebook instances.
                Possible values are: `DISK_TYPE_UNSPECIFIED`, `PD_STANDARD`, `PD_SSD`, `PD_BALANCED`, `PD_EXTREME`.
+        :param pulumi.Input[str] desired_state: Desired state of the Notebook Instance. Set this field to `ACTIVE` to start the Instance, and `STOPPED` to stop the Instance.
         :param pulumi.Input[str] disk_encryption: Disk encryption method used on the boot and data disks, defaults to GMEK.
                Possible values are: `DISK_ENCRYPTION_UNSPECIFIED`, `GMEK`, `CMEK`.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
@@ -1912,6 +2008,7 @@ class Instance(pulumi.CustomResource):
         __props__.__dict__["custom_gpu_driver_path"] = custom_gpu_driver_path
         __props__.__dict__["data_disk_size_gb"] = data_disk_size_gb
         __props__.__dict__["data_disk_type"] = data_disk_type
+        __props__.__dict__["desired_state"] = desired_state
         __props__.__dict__["disk_encryption"] = disk_encryption
         __props__.__dict__["effective_labels"] = effective_labels
         __props__.__dict__["install_gpu_driver"] = install_gpu_driver
@@ -2018,9 +2115,17 @@ class Instance(pulumi.CustomResource):
         """
         return pulumi.get(self, "data_disk_type")
 
+    @property
+    @pulumi.getter(name="desiredState")
+    def desired_state(self) -> pulumi.Output[Optional[str]]:
+        """
+        Desired state of the Notebook Instance. Set this field to `ACTIVE` to start the Instance, and `STOPPED` to stop the Instance.
+        """
+        return pulumi.get(self, "desired_state")
+
     @property
     @pulumi.getter(name="diskEncryption")
-    def disk_encryption(self) -> pulumi.Output[Optional[str]]:
+    def disk_encryption(self) -> pulumi.Output[str]:
         """
         Disk encryption method used on the boot and data disks, defaults to GMEK.
         Possible values are: `DISK_ENCRYPTION_UNSPECIFIED`, `GMEK`, `CMEK`.
@@ -2218,7 +2323,7 @@ class Instance(pulumi.CustomResource):
 
     @property
     @pulumi.getter(name="serviceAccountScopes")
-    def service_account_scopes(self) -> pulumi.Output[Optional[Sequence[str]]]:
+    def service_account_scopes(self) -> pulumi.Output[Sequence[str]]:
         """
         Optional. The URIs of service account scopes to be included in Compute Engine instances.
         If not specified, the following scopes are defined:

pulumi_gcp/provider.py

@@ -186,6 +186,8 @@ class ProviderArgs:
             pulumi.set(__self__, "access_approval_custom_endpoint", access_approval_custom_endpoint)
         if access_context_manager_custom_endpoint is not None:
             pulumi.set(__self__, "access_context_manager_custom_endpoint", access_context_manager_custom_endpoint)
+        if access_token is None:
+            access_token = _utilities.get_env('GOOGLE_OAUTH_ACCESS_TOKEN')
         if access_token is not None:
             pulumi.set(__self__, "access_token", access_token)
         if active_directory_custom_endpoint is not None:
@@ -286,6 +288,8 @@ class ProviderArgs:
             pulumi.set(__self__, "container_custom_endpoint", container_custom_endpoint)
         if core_billing_custom_endpoint is not None:
             pulumi.set(__self__, "core_billing_custom_endpoint", core_billing_custom_endpoint)
+        if credentials is None:
+            credentials = _utilities.get_env('GOOGLE_CREDENTIALS', 'GOOGLE_CLOUD_KEYFILE_JSON', 'GCLOUD_KEYFILE_JSON')
         if credentials is not None:
             pulumi.set(__self__, "credentials", credentials)
         if data_catalog_custom_endpoint is not None:
@@ -2375,6 +2379,8 @@ class Provider(pulumi.ProviderResource):
 
             __props__.__dict__["access_approval_custom_endpoint"] = access_approval_custom_endpoint
             __props__.__dict__["access_context_manager_custom_endpoint"] = access_context_manager_custom_endpoint
+            if access_token is None:
+                access_token = _utilities.get_env('GOOGLE_OAUTH_ACCESS_TOKEN')
             __props__.__dict__["access_token"] = access_token
             __props__.__dict__["active_directory_custom_endpoint"] = active_directory_custom_endpoint
             __props__.__dict__["add_terraform_attribution_label"] = pulumi.Output.from_input(add_terraform_attribution_label).apply(pulumi.runtime.to_json) if add_terraform_attribution_label is not None else None
@@ -2425,6 +2431,8 @@ class Provider(pulumi.ProviderResource):
             __props__.__dict__["container_azure_custom_endpoint"] = container_azure_custom_endpoint
             __props__.__dict__["container_custom_endpoint"] = container_custom_endpoint
             __props__.__dict__["core_billing_custom_endpoint"] = core_billing_custom_endpoint
+            if credentials is None:
+                credentials = _utilities.get_env('GOOGLE_CREDENTIALS', 'GOOGLE_CLOUD_KEYFILE_JSON', 'GCLOUD_KEYFILE_JSON')
             __props__.__dict__["credentials"] = credentials
             __props__.__dict__["data_catalog_custom_endpoint"] = data_catalog_custom_endpoint
             __props__.__dict__["data_fusion_custom_endpoint"] = data_fusion_custom_endpoint

pulumi_gcp/recaptcha/enterprise_key.py

@@ -192,7 +192,7 @@ class _EnterpriseKeyState:
                
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
                Please refer to the field `effective_labels` for all of the labels present on the resource.
-        :param pulumi.Input[str] name: The resource name for the Key in the format "projects/{project}/keys/{key}".
+        :param pulumi.Input[str] name: The resource id for the Key, which is the same as the Site Key itself.
         :param pulumi.Input[str] project: The project for the resource
         :param pulumi.Input[Mapping[str, Any]] pulumi_labels: The combination of labels configured directly on the resource and default labels configured on the provider.
         :param pulumi.Input['EnterpriseKeyTestingOptionsArgs'] testing_options: Options for user acceptance testing.
@@ -307,7 +307,7 @@ class _EnterpriseKeyState:
     @pulumi.getter
     def name(self) -> Optional[pulumi.Input[str]]:
         """
-        The resource name for the Key in the format "projects/{project}/keys/{key}".
+        The resource id for the Key, which is the same as the Site Key itself.
         """
         return pulumi.get(self, "name")
 
@@ -816,7 +816,7 @@ class EnterpriseKey(pulumi.CustomResource):
                
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
                Please refer to the field `effective_labels` for all of the labels present on the resource.
-        :param pulumi.Input[str] name: The resource name for the Key in the format "projects/{project}/keys/{key}".
+        :param pulumi.Input[str] name: The resource id for the Key, which is the same as the Site Key itself.
         :param pulumi.Input[str] project: The project for the resource
         :param pulumi.Input[Mapping[str, Any]] pulumi_labels: The combination of labels configured directly on the resource and default labels configured on the provider.
         :param pulumi.Input[pulumi.InputType['EnterpriseKeyTestingOptionsArgs']] testing_options: Options for user acceptance testing.
@@ -900,7 +900,7 @@ class EnterpriseKey(pulumi.CustomResource):
     @pulumi.getter
     def name(self) -> pulumi.Output[str]:
         """
-        The resource name for the Key in the format "projects/{project}/keys/{key}".
+        The resource id for the Key, which is the same as the Site Key itself.
         """
         return pulumi.get(self, "name")
 

pulumi_gcp/securityposture/_inputs.py

@@ -18,10 +18,10 @@ __all__ = [
     'PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomArgs',
     'PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomCustomConstraintArgs',
     'PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleArgs',
-    'PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleExprArgs',
+    'PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleConditionArgs',
     'PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleValuesArgs',
     'PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleArgs',
-    'PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleExprArgs',
+    'PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleConditionArgs',
     'PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleValuesArgs',
     'PosturePolicySetPolicyConstraintSecurityHealthAnalyticsCustomModuleArgs',
     'PosturePolicySetPolicyConstraintSecurityHealthAnalyticsCustomModuleConfigArgs',
@@ -481,30 +481,30 @@ class PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomCustomConstraintA
 class PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleArgs:
     def __init__(__self__, *,
                  allow_all: Optional[pulumi.Input[bool]] = None,
+                 condition: Optional[pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleConditionArgs']] = None,
                  deny_all: Optional[pulumi.Input[bool]] = None,
                  enforce: Optional[pulumi.Input[bool]] = None,
-                 expr: Optional[pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleExprArgs']] = None,
                  values: Optional[pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleValuesArgs']] = None):
         """
         :param pulumi.Input[bool] allow_all: Setting this to true means that all values are allowed. This field can be set only in policies for list constraints.
-        :param pulumi.Input[bool] deny_all: Setting this to true means that all values are denied. This field can be set only in policies for list constraints.
-        :param pulumi.Input[bool] enforce: If `true`, then the policy is enforced. If `false`, then any configuration is acceptable.
-               This field can be set only in policies for boolean constraints.
-        :param pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleExprArgs'] expr: Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language.
+        :param pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleConditionArgs'] condition: Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language.
                This page details the objects and attributes that are used to the build the CEL expressions for
                custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec.
                Structure is documented below.
+        :param pulumi.Input[bool] deny_all: Setting this to true means that all values are denied. This field can be set only in policies for list constraints.
+        :param pulumi.Input[bool] enforce: If `true`, then the policy is enforced. If `false`, then any configuration is acceptable.
+               This field can be set only in policies for boolean constraints.
         :param pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleValuesArgs'] values: List of values to be used for this policy rule. This field can be set only in policies for list constraints.
                Structure is documented below.
         """
         if allow_all is not None:
             pulumi.set(__self__, "allow_all", allow_all)
+        if condition is not None:
+            pulumi.set(__self__, "condition", condition)
         if deny_all is not None:
             pulumi.set(__self__, "deny_all", deny_all)
         if enforce is not None:
             pulumi.set(__self__, "enforce", enforce)
-        if expr is not None:
-            pulumi.set(__self__, "expr", expr)
         if values is not None:
             pulumi.set(__self__, "values", values)
 
@@ -520,6 +520,21 @@ class PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleArgs:
     def allow_all(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "allow_all", value)
 
+    @property
+    @pulumi.getter
+    def condition(self) -> Optional[pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleConditionArgs']]:
+        """
+        Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language.
+        This page details the objects and attributes that are used to the build the CEL expressions for
+        custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "condition")
+
+    @condition.setter
+    def condition(self, value: Optional[pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleConditionArgs']]):
+        pulumi.set(self, "condition", value)
+
     @property
     @pulumi.getter(name="denyAll")
     def deny_all(self) -> Optional[pulumi.Input[bool]]:
@@ -545,21 +560,6 @@ class PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleArgs:
     def enforce(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "enforce", value)
 
-    @property
-    @pulumi.getter
-    def expr(self) -> Optional[pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleExprArgs']]:
-        """
-        Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language.
-        This page details the objects and attributes that are used to the build the CEL expressions for
-        custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec.
-        Structure is documented below.
-        """
-        return pulumi.get(self, "expr")
-
-    @expr.setter
-    def expr(self, value: Optional[pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleExprArgs']]):
-        pulumi.set(self, "expr", value)
-
     @property
     @pulumi.getter
     def values(self) -> Optional[pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleValuesArgs']]:
@@ -575,7 +575,7 @@ class PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleArgs:
 
 
 @pulumi.input_type
-class PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleExprArgs:
+class PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleConditionArgs:
     def __init__(__self__, *,
                  expression: pulumi.Input[str],
                  description: Optional[pulumi.Input[str]] = None,
@@ -687,30 +687,30 @@ class PosturePolicySetPolicyConstraintOrgPolicyConstraintCustomPolicyRuleValuesA
 class PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleArgs:
     def __init__(__self__, *,
                  allow_all: Optional[pulumi.Input[bool]] = None,
+                 condition: Optional[pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleConditionArgs']] = None,
                  deny_all: Optional[pulumi.Input[bool]] = None,
                  enforce: Optional[pulumi.Input[bool]] = None,
-                 expr: Optional[pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleExprArgs']] = None,
                  values: Optional[pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleValuesArgs']] = None):
         """
         :param pulumi.Input[bool] allow_all: Setting this to true means that all values are allowed. This field can be set only in policies for list constraints.
-        :param pulumi.Input[bool] deny_all: Setting this to true means that all values are denied. This field can be set only in policies for list constraints.
-        :param pulumi.Input[bool] enforce: If `true`, then the policy is enforced. If `false`, then any configuration is acceptable.
-               This field can be set only in policies for boolean constraints.
-        :param pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleExprArgs'] expr: Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language.
+        :param pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleConditionArgs'] condition: Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language.
                This page details the objects and attributes that are used to the build the CEL expressions for
                custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec.
                Structure is documented below.
+        :param pulumi.Input[bool] deny_all: Setting this to true means that all values are denied. This field can be set only in policies for list constraints.
+        :param pulumi.Input[bool] enforce: If `true`, then the policy is enforced. If `false`, then any configuration is acceptable.
+               This field can be set only in policies for boolean constraints.
         :param pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleValuesArgs'] values: List of values to be used for this policy rule. This field can be set only in policies for list constraints.
                Structure is documented below.
         """
         if allow_all is not None:
             pulumi.set(__self__, "allow_all", allow_all)
+        if condition is not None:
+            pulumi.set(__self__, "condition", condition)
         if deny_all is not None:
             pulumi.set(__self__, "deny_all", deny_all)
         if enforce is not None:
             pulumi.set(__self__, "enforce", enforce)
-        if expr is not None:
-            pulumi.set(__self__, "expr", expr)
         if values is not None:
             pulumi.set(__self__, "values", values)
 
@@ -726,6 +726,21 @@ class PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleArgs:
     def allow_all(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "allow_all", value)
 
+    @property
+    @pulumi.getter
+    def condition(self) -> Optional[pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleConditionArgs']]:
+        """
+        Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language.
+        This page details the objects and attributes that are used to the build the CEL expressions for
+        custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "condition")
+
+    @condition.setter
+    def condition(self, value: Optional[pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleConditionArgs']]):
+        pulumi.set(self, "condition", value)
+
     @property
     @pulumi.getter(name="denyAll")
     def deny_all(self) -> Optional[pulumi.Input[bool]]:
@@ -751,21 +766,6 @@ class PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleArgs:
     def enforce(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "enforce", value)
 
-    @property
-    @pulumi.getter
-    def expr(self) -> Optional[pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleExprArgs']]:
-        """
-        Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language.
-        This page details the objects and attributes that are used to the build the CEL expressions for
-        custom access levels - https://cloud.google.com/access-context-manager/docs/custom-access-level-spec.
-        Structure is documented below.
-        """
-        return pulumi.get(self, "expr")
-
-    @expr.setter
-    def expr(self, value: Optional[pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleExprArgs']]):
-        pulumi.set(self, "expr", value)
-
     @property
     @pulumi.getter
     def values(self) -> Optional[pulumi.Input['PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleValuesArgs']]:
@@ -781,7 +781,7 @@ class PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleArgs:
 
 
 @pulumi.input_type
-class PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleExprArgs:
+class PosturePolicySetPolicyConstraintOrgPolicyConstraintPolicyRuleConditionArgs:
     def __init__(__self__, *,
                  expression: pulumi.Input[str],
                  description: Optional[pulumi.Input[str]] = None,