pulumi-gcp 7.12.0a1709365001__py3-none-any.whl → 7.13.0a1709814369__py3-none-any.whl

pulumi_gcp/certificatemanager/dns_authorization.py

@@ -19,6 +19,7 @@ class DnsAuthorizationArgs:
                  domain: pulumi.Input[str],
                  description: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
+                 location: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None):
         """
@@ -30,6 +31,7 @@ class DnsAuthorizationArgs:
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Set of label tags associated with the DNS Authorization resource.
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
                Please refer to the field `effective_labels` for all of the labels present on the resource.
+        :param pulumi.Input[str] location: The Certificate Manager location. If not specified, "global" is used.
         :param pulumi.Input[str] name: Name of the resource; provided by the client when the resource is created.
                The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter,
                and all following characters must be a dash, underscore, letter or digit.
@@ -44,6 +46,8 @@ class DnsAuthorizationArgs:
             pulumi.set(__self__, "description", description)
         if labels is not None:
             pulumi.set(__self__, "labels", labels)
+        if location is not None:
+            pulumi.set(__self__, "location", location)
         if name is not None:
             pulumi.set(__self__, "name", name)
         if project is not None:
@@ -89,6 +93,18 @@ class DnsAuthorizationArgs:
     def labels(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
         pulumi.set(self, "labels", value)
 
+    @property
+    @pulumi.getter
+    def location(self) -> Optional[pulumi.Input[str]]:
+        """
+        The Certificate Manager location. If not specified, "global" is used.
+        """
+        return pulumi.get(self, "location")
+
+    @location.setter
+    def location(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "location", value)
+
     @property
     @pulumi.getter
     def name(self) -> Optional[pulumi.Input[str]]:
@@ -128,6 +144,7 @@ class _DnsAuthorizationState:
                  domain: Optional[pulumi.Input[str]] = None,
                  effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
+                 location: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
                  pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None):
@@ -145,6 +162,7 @@ class _DnsAuthorizationState:
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Set of label tags associated with the DNS Authorization resource.
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
                Please refer to the field `effective_labels` for all of the labels present on the resource.
+        :param pulumi.Input[str] location: The Certificate Manager location. If not specified, "global" is used.
         :param pulumi.Input[str] name: Name of the resource; provided by the client when the resource is created.
                The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter,
                and all following characters must be a dash, underscore, letter or digit.
@@ -166,6 +184,8 @@ class _DnsAuthorizationState:
             pulumi.set(__self__, "effective_labels", effective_labels)
         if labels is not None:
             pulumi.set(__self__, "labels", labels)
+        if location is not None:
+            pulumi.set(__self__, "location", location)
         if name is not None:
             pulumi.set(__self__, "name", name)
         if project is not None:
@@ -240,6 +260,18 @@ class _DnsAuthorizationState:
     def labels(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
         pulumi.set(self, "labels", value)
 
+    @property
+    @pulumi.getter
+    def location(self) -> Optional[pulumi.Input[str]]:
+        """
+        The Certificate Manager location. If not specified, "global" is used.
+        """
+        return pulumi.get(self, "location")
+
+    @location.setter
+    def location(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "location", value)
+
     @property
     @pulumi.getter
     def name(self) -> Optional[pulumi.Input[str]]:
@@ -292,6 +324,7 @@ class DnsAuthorization(pulumi.CustomResource):
                  description: Optional[pulumi.Input[str]] = None,
                  domain: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
+                 location: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
                  __props__=None):
@@ -307,7 +340,8 @@ class DnsAuthorization(pulumi.CustomResource):
 
         default = gcp.certificatemanager.DnsAuthorization("default",
             name="dns-auth",
-            description="The default dnss",
+            location="global",
+            description="The default dns",
             domain="subdomain.hashicorptest.com")
         pulumi.export("recordNameToInsert", default.dns_resource_records[0].name)
         pulumi.export("recordTypeToInsert", default.dns_resource_records[0].type)
@@ -318,24 +352,24 @@ class DnsAuthorization(pulumi.CustomResource):
 
         DnsAuthorization can be imported using any of these accepted formats:
 
-         * `projects/{{project}}/locations/global/dnsAuthorizations/{{name}}`
+         * `projects/{{project}}/locations/{{location}}/dnsAuthorizations/{{name}}`
 
-         * `{{project}}/{{name}}`
+         * `{{project}}/{{location}}/{{name}}`
 
-         * `{{name}}`
+         * `{{location}}/{{name}}`
 
          When using the `pulumi import` command, DnsAuthorization can be imported using one of the formats above. For example:
 
         ```sh
-        $ pulumi import gcp:certificatemanager/dnsAuthorization:DnsAuthorization default projects/{{project}}/locations/global/dnsAuthorizations/{{name}}
+        $ pulumi import gcp:certificatemanager/dnsAuthorization:DnsAuthorization default projects/{{project}}/locations/{{location}}/dnsAuthorizations/{{name}}
         ```
 
         ```sh
-        $ pulumi import gcp:certificatemanager/dnsAuthorization:DnsAuthorization default {{project}}/{{name}}
+        $ pulumi import gcp:certificatemanager/dnsAuthorization:DnsAuthorization default {{project}}/{{location}}/{{name}}
         ```
 
         ```sh
-        $ pulumi import gcp:certificatemanager/dnsAuthorization:DnsAuthorization default {{name}}
+        $ pulumi import gcp:certificatemanager/dnsAuthorization:DnsAuthorization default {{location}}/{{name}}
         ```
 
         :param str resource_name: The name of the resource.
@@ -347,6 +381,7 @@ class DnsAuthorization(pulumi.CustomResource):
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Set of label tags associated with the DNS Authorization resource.
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
                Please refer to the field `effective_labels` for all of the labels present on the resource.
+        :param pulumi.Input[str] location: The Certificate Manager location. If not specified, "global" is used.
         :param pulumi.Input[str] name: Name of the resource; provided by the client when the resource is created.
                The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter,
                and all following characters must be a dash, underscore, letter or digit.
@@ -374,7 +409,8 @@ class DnsAuthorization(pulumi.CustomResource):
 
         default = gcp.certificatemanager.DnsAuthorization("default",
             name="dns-auth",
-            description="The default dnss",
+            location="global",
+            description="The default dns",
             domain="subdomain.hashicorptest.com")
         pulumi.export("recordNameToInsert", default.dns_resource_records[0].name)
         pulumi.export("recordTypeToInsert", default.dns_resource_records[0].type)
@@ -385,24 +421,24 @@ class DnsAuthorization(pulumi.CustomResource):
 
         DnsAuthorization can be imported using any of these accepted formats:
 
-         * `projects/{{project}}/locations/global/dnsAuthorizations/{{name}}`
+         * `projects/{{project}}/locations/{{location}}/dnsAuthorizations/{{name}}`
 
-         * `{{project}}/{{name}}`
+         * `{{project}}/{{location}}/{{name}}`
 
-         * `{{name}}`
+         * `{{location}}/{{name}}`
 
          When using the `pulumi import` command, DnsAuthorization can be imported using one of the formats above. For example:
 
         ```sh
-        $ pulumi import gcp:certificatemanager/dnsAuthorization:DnsAuthorization default projects/{{project}}/locations/global/dnsAuthorizations/{{name}}
+        $ pulumi import gcp:certificatemanager/dnsAuthorization:DnsAuthorization default projects/{{project}}/locations/{{location}}/dnsAuthorizations/{{name}}
         ```
 
         ```sh
-        $ pulumi import gcp:certificatemanager/dnsAuthorization:DnsAuthorization default {{project}}/{{name}}
+        $ pulumi import gcp:certificatemanager/dnsAuthorization:DnsAuthorization default {{project}}/{{location}}/{{name}}
         ```
 
         ```sh
-        $ pulumi import gcp:certificatemanager/dnsAuthorization:DnsAuthorization default {{name}}
+        $ pulumi import gcp:certificatemanager/dnsAuthorization:DnsAuthorization default {{location}}/{{name}}
         ```
 
         :param str resource_name: The name of the resource.
@@ -423,6 +459,7 @@ class DnsAuthorization(pulumi.CustomResource):
                  description: Optional[pulumi.Input[str]] = None,
                  domain: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
+                 location: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
                  __props__=None):
@@ -439,6 +476,7 @@ class DnsAuthorization(pulumi.CustomResource):
                 raise TypeError("Missing required property 'domain'")
             __props__.__dict__["domain"] = domain
             __props__.__dict__["labels"] = labels
+            __props__.__dict__["location"] = location
             __props__.__dict__["name"] = name
             __props__.__dict__["project"] = project
             __props__.__dict__["dns_resource_records"] = None
@@ -461,6 +499,7 @@ class DnsAuthorization(pulumi.CustomResource):
             domain: Optional[pulumi.Input[str]] = None,
             effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
             labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
+            location: Optional[pulumi.Input[str]] = None,
             name: Optional[pulumi.Input[str]] = None,
             project: Optional[pulumi.Input[str]] = None,
             pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None) -> 'DnsAuthorization':
@@ -483,6 +522,7 @@ class DnsAuthorization(pulumi.CustomResource):
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Set of label tags associated with the DNS Authorization resource.
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
                Please refer to the field `effective_labels` for all of the labels present on the resource.
+        :param pulumi.Input[str] location: The Certificate Manager location. If not specified, "global" is used.
         :param pulumi.Input[str] name: Name of the resource; provided by the client when the resource is created.
                The name must be 1-64 characters long, and match the regular expression [a-zA-Z][a-zA-Z0-9_-]* which means the first character must be a letter,
                and all following characters must be a dash, underscore, letter or digit.
@@ -503,6 +543,7 @@ class DnsAuthorization(pulumi.CustomResource):
         __props__.__dict__["domain"] = domain
         __props__.__dict__["effective_labels"] = effective_labels
         __props__.__dict__["labels"] = labels
+        __props__.__dict__["location"] = location
         __props__.__dict__["name"] = name
         __props__.__dict__["project"] = project
         __props__.__dict__["pulumi_labels"] = pulumi_labels
@@ -555,6 +596,14 @@ class DnsAuthorization(pulumi.CustomResource):
         """
         return pulumi.get(self, "labels")
 
+    @property
+    @pulumi.getter
+    def location(self) -> pulumi.Output[Optional[str]]:
+        """
+        The Certificate Manager location. If not specified, "global" is used.
+        """
+        return pulumi.get(self, "location")
+
     @property
     @pulumi.getter
     def name(self) -> pulumi.Output[str]:

pulumi_gcp/clouddeploy/__init__.py

@@ -12,6 +12,10 @@ from .delivery_pipeline_iam_binding import *
 from .delivery_pipeline_iam_member import *
 from .delivery_pipeline_iam_policy import *
 from .get_delivery_pipeline_iam_policy import *
+from .get_target_iam_policy import *
 from .target import *
+from .target_iam_binding import *
+from .target_iam_member import *
+from .target_iam_policy import *
 from ._inputs import *
 from . import outputs

pulumi_gcp/clouddeploy/_inputs.py

@@ -48,6 +48,8 @@ __all__ = [
     'TargetAnthosClusterArgs',
     'TargetExecutionConfigArgs',
     'TargetGkeArgs',
+    'TargetIamBindingConditionArgs',
+    'TargetIamMemberConditionArgs',
     'TargetMultiTargetArgs',
     'TargetRunArgs',
 ]
@@ -1809,6 +1811,84 @@ class TargetGkeArgs:
         pulumi.set(self, "internal_ip", value)
 
 
+@pulumi.input_type
+class TargetIamBindingConditionArgs:
+    def __init__(__self__, *,
+                 expression: pulumi.Input[str],
+                 title: pulumi.Input[str],
+                 description: Optional[pulumi.Input[str]] = None):
+        pulumi.set(__self__, "expression", expression)
+        pulumi.set(__self__, "title", title)
+        if description is not None:
+            pulumi.set(__self__, "description", description)
+
+    @property
+    @pulumi.getter
+    def expression(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "expression")
+
+    @expression.setter
+    def expression(self, value: pulumi.Input[str]):
+        pulumi.set(self, "expression", value)
+
+    @property
+    @pulumi.getter
+    def title(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "title")
+
+    @title.setter
+    def title(self, value: pulumi.Input[str]):
+        pulumi.set(self, "title", value)
+
+    @property
+    @pulumi.getter
+    def description(self) -> Optional[pulumi.Input[str]]:
+        return pulumi.get(self, "description")
+
+    @description.setter
+    def description(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "description", value)
+
+
+@pulumi.input_type
+class TargetIamMemberConditionArgs:
+    def __init__(__self__, *,
+                 expression: pulumi.Input[str],
+                 title: pulumi.Input[str],
+                 description: Optional[pulumi.Input[str]] = None):
+        pulumi.set(__self__, "expression", expression)
+        pulumi.set(__self__, "title", title)
+        if description is not None:
+            pulumi.set(__self__, "description", description)
+
+    @property
+    @pulumi.getter
+    def expression(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "expression")
+
+    @expression.setter
+    def expression(self, value: pulumi.Input[str]):
+        pulumi.set(self, "expression", value)
+
+    @property
+    @pulumi.getter
+    def title(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "title")
+
+    @title.setter
+    def title(self, value: pulumi.Input[str]):
+        pulumi.set(self, "title", value)
+
+    @property
+    @pulumi.getter
+    def description(self) -> Optional[pulumi.Input[str]]:
+        return pulumi.get(self, "description")
+
+    @description.setter
+    def description(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "description", value)
+
+
 @pulumi.input_type
 class TargetMultiTargetArgs:
     def __init__(__self__, *,

pulumi_gcp/clouddeploy/automation.py

@@ -538,6 +538,14 @@ class Automation(pulumi.CustomResource):
                  suspended: Optional[pulumi.Input[bool]] = None,
                  __props__=None):
         """
+        An `Automation` enables the automation of manually driven actions for a Delivery Pipeline, which includes Release promotion amongst Targets, Rollout repair and Rollout deployment strategy advancement.
+
+        To get more information about Automation, see:
+
+        * [API documentation](https://cloud.google.com/deploy/docs/api/reference/rest/v1/projects.locations.deliveryPipelines.automations)
+        * How-to Guides
+            * [Automate your deployment](https://cloud.google.com/deploy/docs/automation)
+
         ## Example Usage
         ### Clouddeploy Automation Basic
 
@@ -681,6 +689,14 @@ class Automation(pulumi.CustomResource):
                  args: AutomationArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        An `Automation` enables the automation of manually driven actions for a Delivery Pipeline, which includes Release promotion amongst Targets, Rollout repair and Rollout deployment strategy advancement.
+
+        To get more information about Automation, see:
+
+        * [API documentation](https://cloud.google.com/deploy/docs/api/reference/rest/v1/projects.locations.deliveryPipelines.automations)
+        * How-to Guides
+            * [Automate your deployment](https://cloud.google.com/deploy/docs/automation)
+
         ## Example Usage
         ### Clouddeploy Automation Basic
 

pulumi_gcp/clouddeploy/get_target_iam_policy.py

@@ -0,0 +1,162 @@
+# coding=utf-8
+# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+from .. import _utilities
+
+__all__ = [
+    'GetTargetIamPolicyResult',
+    'AwaitableGetTargetIamPolicyResult',
+    'get_target_iam_policy',
+    'get_target_iam_policy_output',
+]
+
+@pulumi.output_type
+class GetTargetIamPolicyResult:
+    """
+    A collection of values returned by getTargetIamPolicy.
+    """
+    def __init__(__self__, etag=None, id=None, location=None, name=None, policy_data=None, project=None):
+        if etag and not isinstance(etag, str):
+            raise TypeError("Expected argument 'etag' to be a str")
+        pulumi.set(__self__, "etag", etag)
+        if id and not isinstance(id, str):
+            raise TypeError("Expected argument 'id' to be a str")
+        pulumi.set(__self__, "id", id)
+        if location and not isinstance(location, str):
+            raise TypeError("Expected argument 'location' to be a str")
+        pulumi.set(__self__, "location", location)
+        if name and not isinstance(name, str):
+            raise TypeError("Expected argument 'name' to be a str")
+        pulumi.set(__self__, "name", name)
+        if policy_data and not isinstance(policy_data, str):
+            raise TypeError("Expected argument 'policy_data' to be a str")
+        pulumi.set(__self__, "policy_data", policy_data)
+        if project and not isinstance(project, str):
+            raise TypeError("Expected argument 'project' to be a str")
+        pulumi.set(__self__, "project", project)
+
+    @property
+    @pulumi.getter
+    def etag(self) -> str:
+        """
+        (Computed) The etag of the IAM policy.
+        """
+        return pulumi.get(self, "etag")
+
+    @property
+    @pulumi.getter
+    def id(self) -> str:
+        """
+        The provider-assigned unique ID for this managed resource.
+        """
+        return pulumi.get(self, "id")
+
+    @property
+    @pulumi.getter
+    def location(self) -> str:
+        return pulumi.get(self, "location")
+
+    @property
+    @pulumi.getter
+    def name(self) -> str:
+        return pulumi.get(self, "name")
+
+    @property
+    @pulumi.getter(name="policyData")
+    def policy_data(self) -> str:
+        """
+        (Required only by `clouddeploy.TargetIamPolicy`) The policy data generated by
+        a `organizations_get_iam_policy` data source.
+        """
+        return pulumi.get(self, "policy_data")
+
+    @property
+    @pulumi.getter
+    def project(self) -> str:
+        return pulumi.get(self, "project")
+
+
+class AwaitableGetTargetIamPolicyResult(GetTargetIamPolicyResult):
+    # pylint: disable=using-constant-test
+    def __await__(self):
+        if False:
+            yield self
+        return GetTargetIamPolicyResult(
+            etag=self.etag,
+            id=self.id,
+            location=self.location,
+            name=self.name,
+            policy_data=self.policy_data,
+            project=self.project)
+
+
+def get_target_iam_policy(location: Optional[str] = None,
+                          name: Optional[str] = None,
+                          project: Optional[str] = None,
+                          opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetTargetIamPolicyResult:
+    """
+    Retrieves the current IAM policy data for target
+
+    ## example
+
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    policy = gcp.clouddeploy.get_target_iam_policy(project=default["project"],
+        location=default["location"],
+        name=default["name"])
+    ```
+
+
+    :param str name: Used to find the parent resource to bind the IAM policy to
+    :param str project: The ID of the project in which the resource belongs.
+           If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+    """
+    __args__ = dict()
+    __args__['location'] = location
+    __args__['name'] = name
+    __args__['project'] = project
+    opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke('gcp:clouddeploy/getTargetIamPolicy:getTargetIamPolicy', __args__, opts=opts, typ=GetTargetIamPolicyResult).value
+
+    return AwaitableGetTargetIamPolicyResult(
+        etag=pulumi.get(__ret__, 'etag'),
+        id=pulumi.get(__ret__, 'id'),
+        location=pulumi.get(__ret__, 'location'),
+        name=pulumi.get(__ret__, 'name'),
+        policy_data=pulumi.get(__ret__, 'policy_data'),
+        project=pulumi.get(__ret__, 'project'))
+
+
+@_utilities.lift_output_func(get_target_iam_policy)
+def get_target_iam_policy_output(location: Optional[pulumi.Input[Optional[str]]] = None,
+                                 name: Optional[pulumi.Input[str]] = None,
+                                 project: Optional[pulumi.Input[Optional[str]]] = None,
+                                 opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetTargetIamPolicyResult]:
+    """
+    Retrieves the current IAM policy data for target
+
+    ## example
+
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    policy = gcp.clouddeploy.get_target_iam_policy(project=default["project"],
+        location=default["location"],
+        name=default["name"])
+    ```
+
+
+    :param str name: Used to find the parent resource to bind the IAM policy to
+    :param str project: The ID of the project in which the resource belongs.
+           If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+    """
+    ...

pulumi_gcp/clouddeploy/outputs.py

@@ -49,6 +49,8 @@ __all__ = [
     'TargetAnthosCluster',
     'TargetExecutionConfig',
     'TargetGke',
+    'TargetIamBindingCondition',
+    'TargetIamMemberCondition',
     'TargetMultiTarget',
     'TargetRun',
 ]
@@ -1825,6 +1827,60 @@ class TargetGke(dict):
         return pulumi.get(self, "internal_ip")
 
 
+@pulumi.output_type
+class TargetIamBindingCondition(dict):
+    def __init__(__self__, *,
+                 expression: str,
+                 title: str,
+                 description: Optional[str] = None):
+        pulumi.set(__self__, "expression", expression)
+        pulumi.set(__self__, "title", title)
+        if description is not None:
+            pulumi.set(__self__, "description", description)
+
+    @property
+    @pulumi.getter
+    def expression(self) -> str:
+        return pulumi.get(self, "expression")
+
+    @property
+    @pulumi.getter
+    def title(self) -> str:
+        return pulumi.get(self, "title")
+
+    @property
+    @pulumi.getter
+    def description(self) -> Optional[str]:
+        return pulumi.get(self, "description")
+
+
+@pulumi.output_type
+class TargetIamMemberCondition(dict):
+    def __init__(__self__, *,
+                 expression: str,
+                 title: str,
+                 description: Optional[str] = None):
+        pulumi.set(__self__, "expression", expression)
+        pulumi.set(__self__, "title", title)
+        if description is not None:
+            pulumi.set(__self__, "description", description)
+
+    @property
+    @pulumi.getter
+    def expression(self) -> str:
+        return pulumi.get(self, "expression")
+
+    @property
+    @pulumi.getter
+    def title(self) -> str:
+        return pulumi.get(self, "title")
+
+    @property
+    @pulumi.getter
+    def description(self) -> Optional[str]:
+        return pulumi.get(self, "description")
+
+
 @pulumi.output_type
 class TargetMultiTarget(dict):
     @staticmethod