pulumi-gcp 7.12.0a1709365001__tar.gz → 7.13.0a1709814369__tar.gz

{pulumi_gcp-7.12.0a1709365001 → pulumi_gcp-7.13.0a1709814369}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: pulumi_gcp
-Version: 7.12.0a1709365001
+Version: 7.13.0a1709814369
 Summary: A Pulumi package for creating and managing Google Cloud Platform resources.
 License: Apache-2.0
 Project-URL: Homepage, https://pulumi.io

{pulumi_gcp-7.12.0a1709365001 → pulumi_gcp-7.13.0a1709814369}/pulumi_gcp/__init__.py

@@ -1685,6 +1685,30 @@ _utilities.register(
    "gcp:clouddeploy/target:Target": "Target"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "clouddeploy/targetIamBinding",
+  "fqn": "pulumi_gcp.clouddeploy",
+  "classes": {
+   "gcp:clouddeploy/targetIamBinding:TargetIamBinding": "TargetIamBinding"
+  }
+ },
+ {
+  "pkg": "gcp",
+  "mod": "clouddeploy/targetIamMember",
+  "fqn": "pulumi_gcp.clouddeploy",
+  "classes": {
+   "gcp:clouddeploy/targetIamMember:TargetIamMember": "TargetIamMember"
+  }
+ },
+ {
+  "pkg": "gcp",
+  "mod": "clouddeploy/targetIamPolicy",
+  "fqn": "pulumi_gcp.clouddeploy",
+  "classes": {
+   "gcp:clouddeploy/targetIamPolicy:TargetIamPolicy": "TargetIamPolicy"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "clouddomains/registration",
@@ -4197,6 +4221,14 @@ _utilities.register(
    "gcp:firebase/androidApp:AndroidApp": "AndroidApp"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "firebase/appCheckAppAttestConfig",
+  "fqn": "pulumi_gcp.firebase",
+  "classes": {
+   "gcp:firebase/appCheckAppAttestConfig:AppCheckAppAttestConfig": "AppCheckAppAttestConfig"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "firebase/appCheckDebugToken",
@@ -4205,6 +4237,30 @@ _utilities.register(
    "gcp:firebase/appCheckDebugToken:AppCheckDebugToken": "AppCheckDebugToken"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "firebase/appCheckPlayIntegrityConfig",
+  "fqn": "pulumi_gcp.firebase",
+  "classes": {
+   "gcp:firebase/appCheckPlayIntegrityConfig:AppCheckPlayIntegrityConfig": "AppCheckPlayIntegrityConfig"
+  }
+ },
+ {
+  "pkg": "gcp",
+  "mod": "firebase/appCheckRecaptchaEnterpriseConfig",
+  "fqn": "pulumi_gcp.firebase",
+  "classes": {
+   "gcp:firebase/appCheckRecaptchaEnterpriseConfig:AppCheckRecaptchaEnterpriseConfig": "AppCheckRecaptchaEnterpriseConfig"
+  }
+ },
+ {
+  "pkg": "gcp",
+  "mod": "firebase/appCheckRecaptchaV3Config",
+  "fqn": "pulumi_gcp.firebase",
+  "classes": {
+   "gcp:firebase/appCheckRecaptchaV3Config:AppCheckRecaptchaV3Config": "AppCheckRecaptchaV3Config"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "firebase/appCheckServiceConfig",
@@ -5429,6 +5485,14 @@ _utilities.register(
    "gcp:migrationcenter/group:Group": "Group"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "migrationcenter/preferenceSet",
+  "fqn": "pulumi_gcp.migrationcenter",
+  "classes": {
+   "gcp:migrationcenter/preferenceSet:PreferenceSet": "PreferenceSet"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "ml/engineModel",
@@ -5565,6 +5629,14 @@ _utilities.register(
    "gcp:netapp/volume:Volume": "Volume"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "netapp/volumeReplication",
+  "fqn": "pulumi_gcp.netapp",
+  "classes": {
+   "gcp:netapp/volumeReplication:VolumeReplication": "VolumeReplication"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "netapp/volumeSnapshot",

{pulumi_gcp-7.12.0a1709365001 → pulumi_gcp-7.13.0a1709814369}/pulumi_gcp/appengine/application_url_dispatch_rules.py

@@ -132,7 +132,7 @@ class ApplicationUrlDispatchRules(pulumi.CustomResource):
         admin_v3 = gcp.appengine.StandardAppVersion("admin_v3",
             version_id="v3",
             service="admin",
-            runtime="nodejs10",
+            runtime="nodejs20",
             entrypoint=gcp.appengine.StandardAppVersionEntrypointArgs(
                 shell="node ./app.js",
             ),
@@ -208,7 +208,7 @@ class ApplicationUrlDispatchRules(pulumi.CustomResource):
         admin_v3 = gcp.appengine.StandardAppVersion("admin_v3",
             version_id="v3",
             service="admin",
-            runtime="nodejs10",
+            runtime="nodejs20",
             entrypoint=gcp.appengine.StandardAppVersionEntrypointArgs(
                 shell="node ./app.js",
             ),

{pulumi_gcp-7.12.0a1709365001 → pulumi_gcp-7.13.0a1709814369}/pulumi_gcp/appengine/engine_split_traffic.py

@@ -198,7 +198,7 @@ class EngineSplitTraffic(pulumi.CustomResource):
             version_id="v1",
             service="liveapp",
             delete_service_on_destroy=True,
-            runtime="nodejs10",
+            runtime="nodejs20",
             entrypoint=gcp.appengine.StandardAppVersionEntrypointArgs(
                 shell="node ./app.js",
             ),
@@ -214,7 +214,7 @@ class EngineSplitTraffic(pulumi.CustomResource):
             version_id="v2",
             service="liveapp",
             noop_on_destroy=True,
-            runtime="nodejs10",
+            runtime="nodejs20",
             entrypoint=gcp.appengine.StandardAppVersionEntrypointArgs(
                 shell="node ./app.js",
             ),
@@ -302,7 +302,7 @@ class EngineSplitTraffic(pulumi.CustomResource):
             version_id="v1",
             service="liveapp",
             delete_service_on_destroy=True,
-            runtime="nodejs10",
+            runtime="nodejs20",
             entrypoint=gcp.appengine.StandardAppVersionEntrypointArgs(
                 shell="node ./app.js",
             ),
@@ -318,7 +318,7 @@ class EngineSplitTraffic(pulumi.CustomResource):
             version_id="v2",
             service="liveapp",
             noop_on_destroy=True,
-            runtime="nodejs10",
+            runtime="nodejs20",
             entrypoint=gcp.appengine.StandardAppVersionEntrypointArgs(
                 shell="node ./app.js",
             ),

{pulumi_gcp-7.12.0a1709365001 → pulumi_gcp-7.13.0a1709814369}/pulumi_gcp/appengine/service_network_settings.py

@@ -165,7 +165,7 @@ class ServiceNetworkSettings(pulumi.CustomResource):
             version_id="v1",
             service="internalapp",
             delete_service_on_destroy=True,
-            runtime="nodejs10",
+            runtime="nodejs20",
             entrypoint=gcp.appengine.StandardAppVersionEntrypointArgs(
                 shell="node ./app.js",
             ),
@@ -247,7 +247,7 @@ class ServiceNetworkSettings(pulumi.CustomResource):
             version_id="v1",
             service="internalapp",
             delete_service_on_destroy=True,
-            runtime="nodejs10",
+            runtime="nodejs20",
             entrypoint=gcp.appengine.StandardAppVersionEntrypointArgs(
                 shell="node ./app.js",
             ),

{pulumi_gcp-7.12.0a1709365001 → pulumi_gcp-7.13.0a1709814369}/pulumi_gcp/appengine/standard_app_version.py

@@ -844,7 +844,7 @@ class StandardAppVersion(pulumi.CustomResource):
         myapp_v1 = gcp.appengine.StandardAppVersion("myapp_v1",
             version_id="v1",
             service="myapp",
-            runtime="nodejs10",
+            runtime="nodejs20",
             entrypoint=gcp.appengine.StandardAppVersionEntrypointArgs(
                 shell="node ./app.js",
             ),
@@ -874,7 +874,7 @@ class StandardAppVersion(pulumi.CustomResource):
         myapp_v2 = gcp.appengine.StandardAppVersion("myapp_v2",
             version_id="v2",
             service="myapp",
-            runtime="nodejs10",
+            runtime="nodejs20",
             app_engine_apis=True,
             entrypoint=gcp.appengine.StandardAppVersionEntrypointArgs(
                 shell="node ./app.js",
@@ -1004,7 +1004,7 @@ class StandardAppVersion(pulumi.CustomResource):
         myapp_v1 = gcp.appengine.StandardAppVersion("myapp_v1",
             version_id="v1",
             service="myapp",
-            runtime="nodejs10",
+            runtime="nodejs20",
             entrypoint=gcp.appengine.StandardAppVersionEntrypointArgs(
                 shell="node ./app.js",
             ),
@@ -1034,7 +1034,7 @@ class StandardAppVersion(pulumi.CustomResource):
         myapp_v2 = gcp.appengine.StandardAppVersion("myapp_v2",
             version_id="v2",
             service="myapp",
-            runtime="nodejs10",
+            runtime="nodejs20",
             app_engine_apis=True,
             entrypoint=gcp.appengine.StandardAppVersionEntrypointArgs(
                 shell="node ./app.js",

{pulumi_gcp-7.12.0a1709365001 → pulumi_gcp-7.13.0a1709814369}/pulumi_gcp/bigquery/_inputs.py

@@ -64,6 +64,7 @@ __all__ = [
     'JobStatusErrorResultArgs',
     'ReservationAutoscaleArgs',
     'RoutineArgumentArgs',
+    'RoutineRemoteFunctionOptionsArgs',
     'RoutineSparkOptionsArgs',
     'TableEncryptionConfigurationArgs',
     'TableExternalDataConfigurationArgs',
@@ -3779,6 +3780,93 @@ class RoutineArgumentArgs:
         pulumi.set(self, "name", value)
 
 
+@pulumi.input_type
+class RoutineRemoteFunctionOptionsArgs:
+    def __init__(__self__, *,
+                 connection: Optional[pulumi.Input[str]] = None,
+                 endpoint: Optional[pulumi.Input[str]] = None,
+                 max_batching_rows: Optional[pulumi.Input[str]] = None,
+                 user_defined_context: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None):
+        """
+        :param pulumi.Input[str] connection: Fully qualified name of the user-provided connection object which holds
+               the authentication information to send requests to the remote service.
+               Format: "projects/{projectId}/locations/{locationId}/connections/{connectionId}"
+        :param pulumi.Input[str] endpoint: Endpoint of the user-provided remote service, e.g.
+               `https://us-east1-my_gcf_project.cloudfunctions.net/remote_add`
+        :param pulumi.Input[str] max_batching_rows: Max number of rows in each batch sent to the remote service. If absent or if 0,
+               BigQuery dynamically decides the number of rows in a batch.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] user_defined_context: User-defined context as a set of key/value pairs, which will be sent as function
+               invocation context together with batched arguments in the requests to the remote
+               service. The total number of bytes of keys and values must be less than 8KB.
+               An object containing a list of "key": value pairs. Example:
+               `{ "name": "wrench", "mass": "1.3kg", "count": "3" }`.
+        """
+        if connection is not None:
+            pulumi.set(__self__, "connection", connection)
+        if endpoint is not None:
+            pulumi.set(__self__, "endpoint", endpoint)
+        if max_batching_rows is not None:
+            pulumi.set(__self__, "max_batching_rows", max_batching_rows)
+        if user_defined_context is not None:
+            pulumi.set(__self__, "user_defined_context", user_defined_context)
+
+    @property
+    @pulumi.getter
+    def connection(self) -> Optional[pulumi.Input[str]]:
+        """
+        Fully qualified name of the user-provided connection object which holds
+        the authentication information to send requests to the remote service.
+        Format: "projects/{projectId}/locations/{locationId}/connections/{connectionId}"
+        """
+        return pulumi.get(self, "connection")
+
+    @connection.setter
+    def connection(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "connection", value)
+
+    @property
+    @pulumi.getter
+    def endpoint(self) -> Optional[pulumi.Input[str]]:
+        """
+        Endpoint of the user-provided remote service, e.g.
+        `https://us-east1-my_gcf_project.cloudfunctions.net/remote_add`
+        """
+        return pulumi.get(self, "endpoint")
+
+    @endpoint.setter
+    def endpoint(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "endpoint", value)
+
+    @property
+    @pulumi.getter(name="maxBatchingRows")
+    def max_batching_rows(self) -> Optional[pulumi.Input[str]]:
+        """
+        Max number of rows in each batch sent to the remote service. If absent or if 0,
+        BigQuery dynamically decides the number of rows in a batch.
+        """
+        return pulumi.get(self, "max_batching_rows")
+
+    @max_batching_rows.setter
+    def max_batching_rows(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "max_batching_rows", value)
+
+    @property
+    @pulumi.getter(name="userDefinedContext")
+    def user_defined_context(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
+        """
+        User-defined context as a set of key/value pairs, which will be sent as function
+        invocation context together with batched arguments in the requests to the remote
+        service. The total number of bytes of keys and values must be less than 8KB.
+        An object containing a list of "key": value pairs. Example:
+        `{ "name": "wrench", "mass": "1.3kg", "count": "3" }`.
+        """
+        return pulumi.get(self, "user_defined_context")
+
+    @user_defined_context.setter
+    def user_defined_context(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
+        pulumi.set(self, "user_defined_context", value)
+
+
 @pulumi.input_type
 class RoutineSparkOptionsArgs:
     def __init__(__self__, *,

{pulumi_gcp-7.12.0a1709365001 → pulumi_gcp-7.13.0a1709814369}/pulumi_gcp/bigquery/dataset_iam_binding.py

@@ -27,12 +27,13 @@ class DatasetIamBindingArgs:
                
                * `member/members` - (Required) Identities that will be granted the privilege in `role`.
                Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
+               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+               * **iamMember:{principal}**: Some other type of member that appears in the IAM Policy but isn't a user, group, domain, or special group. This is used for example for workload/workforce federated identities (principal, principalSet).
+               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
         :param pulumi.Input[str] role: The role that should be applied. Only one
                `bigquery.DatasetIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -55,12 +56,13 @@ class DatasetIamBindingArgs:
 
         * `member/members` - (Required) Identities that will be granted the privilege in `role`.
         Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
         * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
         * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
+        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+        * **iamMember:{principal}**: Some other type of member that appears in the IAM Policy but isn't a user, group, domain, or special group. This is used for example for workload/workforce federated identities (principal, principalSet).
+        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
         """
         return pulumi.get(self, "dataset_id")
 
@@ -129,12 +131,13 @@ class _DatasetIamBindingState:
                
                * `member/members` - (Required) Identities that will be granted the privilege in `role`.
                Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
+               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+               * **iamMember:{principal}**: Some other type of member that appears in the IAM Policy but isn't a user, group, domain, or special group. This is used for example for workload/workforce federated identities (principal, principalSet).
+               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
         :param pulumi.Input[str] etag: (Computed) The etag of the dataset's IAM policy.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
@@ -172,12 +175,13 @@ class _DatasetIamBindingState:
 
         * `member/members` - (Required) Identities that will be granted the privilege in `role`.
         Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
         * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
         * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
+        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+        * **iamMember:{principal}**: Some other type of member that appears in the IAM Policy but isn't a user, group, domain, or special group. This is used for example for workload/workforce federated identities (principal, principalSet).
+        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
         """
         return pulumi.get(self, "dataset_id")
 
@@ -338,12 +342,13 @@ class DatasetIamBinding(pulumi.CustomResource):
                
                * `member/members` - (Required) Identities that will be granted the privilege in `role`.
                Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
+               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+               * **iamMember:{principal}**: Some other type of member that appears in the IAM Policy but isn't a user, group, domain, or special group. This is used for example for workload/workforce federated identities (principal, principalSet).
+               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[str] role: The role that should be applied. Only one
@@ -511,12 +516,13 @@ class DatasetIamBinding(pulumi.CustomResource):
                
                * `member/members` - (Required) Identities that will be granted the privilege in `role`.
                Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
+               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+               * **iamMember:{principal}**: Some other type of member that appears in the IAM Policy but isn't a user, group, domain, or special group. This is used for example for workload/workforce federated identities (principal, principalSet).
+               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
         :param pulumi.Input[str] etag: (Computed) The etag of the dataset's IAM policy.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
@@ -549,12 +555,13 @@ class DatasetIamBinding(pulumi.CustomResource):
 
         * `member/members` - (Required) Identities that will be granted the privilege in `role`.
         Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
         * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
         * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
+        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+        * **iamMember:{principal}**: Some other type of member that appears in the IAM Policy but isn't a user, group, domain, or special group. This is used for example for workload/workforce federated identities (principal, principalSet).
+        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
         """
         return pulumi.get(self, "dataset_id")
 

{pulumi_gcp-7.12.0a1709365001 → pulumi_gcp-7.13.0a1709814369}/pulumi_gcp/bigquery/dataset_iam_member.py

@@ -27,12 +27,13 @@ class DatasetIamMemberArgs:
                
                * `member/members` - (Required) Identities that will be granted the privilege in `role`.
                Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
+               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+               * **iamMember:{principal}**: Some other type of member that appears in the IAM Policy but isn't a user, group, domain, or special group. This is used for example for workload/workforce federated identities (principal, principalSet).
+               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
         :param pulumi.Input[str] role: The role that should be applied. Only one
                `bigquery.DatasetIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -55,12 +56,13 @@ class DatasetIamMemberArgs:
 
         * `member/members` - (Required) Identities that will be granted the privilege in `role`.
         Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
         * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
         * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
+        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+        * **iamMember:{principal}**: Some other type of member that appears in the IAM Policy but isn't a user, group, domain, or special group. This is used for example for workload/workforce federated identities (principal, principalSet).
+        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
         """
         return pulumi.get(self, "dataset_id")
 
@@ -129,12 +131,13 @@ class _DatasetIamMemberState:
                
                * `member/members` - (Required) Identities that will be granted the privilege in `role`.
                Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
+               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+               * **iamMember:{principal}**: Some other type of member that appears in the IAM Policy but isn't a user, group, domain, or special group. This is used for example for workload/workforce federated identities (principal, principalSet).
+               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
         :param pulumi.Input[str] etag: (Computed) The etag of the dataset's IAM policy.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
@@ -172,12 +175,13 @@ class _DatasetIamMemberState:
 
         * `member/members` - (Required) Identities that will be granted the privilege in `role`.
         Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
         * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
         * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
+        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+        * **iamMember:{principal}**: Some other type of member that appears in the IAM Policy but isn't a user, group, domain, or special group. This is used for example for workload/workforce federated identities (principal, principalSet).
+        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
         """
         return pulumi.get(self, "dataset_id")
 
@@ -338,12 +342,13 @@ class DatasetIamMember(pulumi.CustomResource):
                
                * `member/members` - (Required) Identities that will be granted the privilege in `role`.
                Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
+               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+               * **iamMember:{principal}**: Some other type of member that appears in the IAM Policy but isn't a user, group, domain, or special group. This is used for example for workload/workforce federated identities (principal, principalSet).
+               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[str] role: The role that should be applied. Only one
@@ -511,12 +516,13 @@ class DatasetIamMember(pulumi.CustomResource):
                
                * `member/members` - (Required) Identities that will be granted the privilege in `role`.
                Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
+               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+               * **iamMember:{principal}**: Some other type of member that appears in the IAM Policy but isn't a user, group, domain, or special group. This is used for example for workload/workforce federated identities (principal, principalSet).
+               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
         :param pulumi.Input[str] etag: (Computed) The etag of the dataset's IAM policy.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
@@ -549,12 +555,13 @@ class DatasetIamMember(pulumi.CustomResource):
 
         * `member/members` - (Required) Identities that will be granted the privilege in `role`.
         Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
         * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
         * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
+        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+        * **iamMember:{principal}**: Some other type of member that appears in the IAM Policy but isn't a user, group, domain, or special group. This is used for example for workload/workforce federated identities (principal, principalSet).
+        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
         """
         return pulumi.get(self, "dataset_id")