pulumi-gcp 7.13.0a1709814369__py3-none-any.whl → 7.14.0a1710186287__py3-none-any.whl

pulumi_gcp/iam/workforce_pool_provider.py

@@ -81,8 +81,6 @@ class WorkforcePoolProviderArgs:
                For OIDC providers, you must supply a custom mapping that includes the `google.subject` attribute.
                For example, the following maps the sub claim of the incoming credential to the `subject` attribute
                on a Google token:
-               An object containing a list of `"key": value` pairs.
-               Example: `{ "name": "wrench", "mass": "1.3kg", "count": "3" }`.
         :param pulumi.Input[str] description: A user-specified description of the provider. Cannot exceed 256 characters.
         :param pulumi.Input[bool] disabled: Whether the provider is disabled. You cannot use a disabled provider to exchange tokens.
                However, existing tokens still grant access.
@@ -211,8 +209,6 @@ class WorkforcePoolProviderArgs:
         For OIDC providers, you must supply a custom mapping that includes the `google.subject` attribute.
         For example, the following maps the sub claim of the incoming credential to the `subject` attribute
         on a Google token:
-        An object containing a list of `"key": value` pairs.
-        Example: `{ "name": "wrench", "mass": "1.3kg", "count": "3" }`.
         """
         return pulumi.get(self, "attribute_mapping")
 
@@ -343,8 +339,6 @@ class _WorkforcePoolProviderState:
                For OIDC providers, you must supply a custom mapping that includes the `google.subject` attribute.
                For example, the following maps the sub claim of the incoming credential to the `subject` attribute
                on a Google token:
-               An object containing a list of `"key": value` pairs.
-               Example: `{ "name": "wrench", "mass": "1.3kg", "count": "3" }`.
         :param pulumi.Input[str] description: A user-specified description of the provider. Cannot exceed 256 characters.
         :param pulumi.Input[bool] disabled: Whether the provider is disabled. You cannot use a disabled provider to exchange tokens.
                However, existing tokens still grant access.
@@ -455,8 +449,6 @@ class _WorkforcePoolProviderState:
         For OIDC providers, you must supply a custom mapping that includes the `google.subject` attribute.
         For example, the following maps the sub claim of the incoming credential to the `subject` attribute
         on a Google token:
-        An object containing a list of `"key": value` pairs.
-        Example: `{ "name": "wrench", "mass": "1.3kg", "count": "3" }`.
         """
         return pulumi.get(self, "attribute_mapping")
 
@@ -631,8 +623,10 @@ class WorkforcePoolProvider(pulumi.CustomResource):
         billing/quota project. The account team notifies you when the project is granted access.
 
         ## Example Usage
+
         ### Iam Workforce Pool Provider Saml Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -652,8 +646,10 @@ class WorkforcePoolProvider(pulumi.CustomResource):
                 idp_metadata_xml="<?xml version=\\"1.0\\"?><md:EntityDescriptor xmlns:md=\\"urn:oasis:names:tc:SAML:2.0:metadata\\" entityID=\\"https://test.com\\"><md:IDPSSODescriptor protocolSupportEnumeration=\\"urn:oasis:names:tc:SAML:2.0:protocol\\"> <md:KeyDescriptor use=\\"signing\\"><ds:KeyInfo xmlns:ds=\\"http://www.w3.org/2000/09/xmldsig#\\"><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></md:KeyDescriptor><md:SingleSignOnService Binding=\\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect\\" Location=\\"https://test.com/sso\\"/></md:IDPSSODescriptor></md:EntityDescriptor>",
             ))
         ```
+        <!--End PulumiCodeChooser -->
         ### Iam Workforce Pool Provider Saml Full
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -677,8 +673,10 @@ class WorkforcePoolProvider(pulumi.CustomResource):
             disabled=False,
             attribute_condition="true")
         ```
+        <!--End PulumiCodeChooser -->
         ### Iam Workforce Pool Provider Oidc Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -708,8 +706,10 @@ class WorkforcePoolProvider(pulumi.CustomResource):
                 ),
             ))
         ```
+        <!--End PulumiCodeChooser -->
         ### Iam Workforce Pool Provider Oidc Full
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -747,16 +747,17 @@ class WorkforcePoolProvider(pulumi.CustomResource):
             disabled=False,
             attribute_condition="true")
         ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
         WorkforcePoolProvider can be imported using any of these accepted formats:
 
-         * `locations/{{location}}/workforcePools/{{workforce_pool_id}}/providers/{{provider_id}}`
+        * `locations/{{location}}/workforcePools/{{workforce_pool_id}}/providers/{{provider_id}}`
 
-         * `{{location}}/{{workforce_pool_id}}/{{provider_id}}`
+        * `{{location}}/{{workforce_pool_id}}/{{provider_id}}`
 
-         When using the `pulumi import` command, WorkforcePoolProvider can be imported using one of the formats above. For example:
+        When using the `pulumi import` command, WorkforcePoolProvider can be imported using one of the formats above. For example:
 
         ```sh
         $ pulumi import gcp:iam/workforcePoolProvider:WorkforcePoolProvider default locations/{{location}}/workforcePools/{{workforce_pool_id}}/providers/{{provider_id}}
@@ -810,8 +811,6 @@ class WorkforcePoolProvider(pulumi.CustomResource):
                For OIDC providers, you must supply a custom mapping that includes the `google.subject` attribute.
                For example, the following maps the sub claim of the incoming credential to the `subject` attribute
                on a Google token:
-               An object containing a list of `"key": value` pairs.
-               Example: `{ "name": "wrench", "mass": "1.3kg", "count": "3" }`.
         :param pulumi.Input[str] description: A user-specified description of the provider. Cannot exceed 256 characters.
         :param pulumi.Input[bool] disabled: Whether the provider is disabled. You cannot use a disabled provider to exchange tokens.
                However, existing tokens still grant access.
@@ -851,8 +850,10 @@ class WorkforcePoolProvider(pulumi.CustomResource):
         billing/quota project. The account team notifies you when the project is granted access.
 
         ## Example Usage
+
         ### Iam Workforce Pool Provider Saml Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -872,8 +873,10 @@ class WorkforcePoolProvider(pulumi.CustomResource):
                 idp_metadata_xml="<?xml version=\\"1.0\\"?><md:EntityDescriptor xmlns:md=\\"urn:oasis:names:tc:SAML:2.0:metadata\\" entityID=\\"https://test.com\\"><md:IDPSSODescriptor protocolSupportEnumeration=\\"urn:oasis:names:tc:SAML:2.0:protocol\\"> <md:KeyDescriptor use=\\"signing\\"><ds:KeyInfo xmlns:ds=\\"http://www.w3.org/2000/09/xmldsig#\\"><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></md:KeyDescriptor><md:SingleSignOnService Binding=\\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect\\" Location=\\"https://test.com/sso\\"/></md:IDPSSODescriptor></md:EntityDescriptor>",
             ))
         ```
+        <!--End PulumiCodeChooser -->
         ### Iam Workforce Pool Provider Saml Full
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -897,8 +900,10 @@ class WorkforcePoolProvider(pulumi.CustomResource):
             disabled=False,
             attribute_condition="true")
         ```
+        <!--End PulumiCodeChooser -->
         ### Iam Workforce Pool Provider Oidc Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -928,8 +933,10 @@ class WorkforcePoolProvider(pulumi.CustomResource):
                 ),
             ))
         ```
+        <!--End PulumiCodeChooser -->
         ### Iam Workforce Pool Provider Oidc Full
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -967,16 +974,17 @@ class WorkforcePoolProvider(pulumi.CustomResource):
             disabled=False,
             attribute_condition="true")
         ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
         WorkforcePoolProvider can be imported using any of these accepted formats:
 
-         * `locations/{{location}}/workforcePools/{{workforce_pool_id}}/providers/{{provider_id}}`
+        * `locations/{{location}}/workforcePools/{{workforce_pool_id}}/providers/{{provider_id}}`
 
-         * `{{location}}/{{workforce_pool_id}}/{{provider_id}}`
+        * `{{location}}/{{workforce_pool_id}}/{{provider_id}}`
 
-         When using the `pulumi import` command, WorkforcePoolProvider can be imported using one of the formats above. For example:
+        When using the `pulumi import` command, WorkforcePoolProvider can be imported using one of the formats above. For example:
 
         ```sh
         $ pulumi import gcp:iam/workforcePoolProvider:WorkforcePoolProvider default locations/{{location}}/workforcePools/{{workforce_pool_id}}/providers/{{provider_id}}
@@ -1109,8 +1117,6 @@ class WorkforcePoolProvider(pulumi.CustomResource):
                For OIDC providers, you must supply a custom mapping that includes the `google.subject` attribute.
                For example, the following maps the sub claim of the incoming credential to the `subject` attribute
                on a Google token:
-               An object containing a list of `"key": value` pairs.
-               Example: `{ "name": "wrench", "mass": "1.3kg", "count": "3" }`.
         :param pulumi.Input[str] description: A user-specified description of the provider. Cannot exceed 256 characters.
         :param pulumi.Input[bool] disabled: Whether the provider is disabled. You cannot use a disabled provider to exchange tokens.
                However, existing tokens still grant access.
@@ -1210,8 +1216,6 @@ class WorkforcePoolProvider(pulumi.CustomResource):
         For OIDC providers, you must supply a custom mapping that includes the `google.subject` attribute.
         For example, the following maps the sub claim of the incoming credential to the `subject` attribute
         on a Google token:
-        An object containing a list of `"key": value` pairs.
-        Example: `{ "name": "wrench", "mass": "1.3kg", "count": "3" }`.
         """
         return pulumi.get(self, "attribute_mapping")
 

pulumi_gcp/iam/workload_identity_pool.py

@@ -290,16 +290,20 @@ class WorkloadIdentityPool(pulumi.CustomResource):
             * [Managing workload identity pools](https://cloud.google.com/iam/docs/manage-workload-identity-pools-providers#pools)
 
         ## Example Usage
+
         ### Iam Workload Identity Pool Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
 
         example = gcp.iam.WorkloadIdentityPool("example", workload_identity_pool_id="example-pool")
         ```
+        <!--End PulumiCodeChooser -->
         ### Iam Workload Identity Pool Full
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -310,18 +314,19 @@ class WorkloadIdentityPool(pulumi.CustomResource):
             description="Identity pool for automated test",
             disabled=True)
         ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
         WorkloadIdentityPool can be imported using any of these accepted formats:
 
-         * `projects/{{project}}/locations/global/workloadIdentityPools/{{workload_identity_pool_id}}`
+        * `projects/{{project}}/locations/global/workloadIdentityPools/{{workload_identity_pool_id}}`
 
-         * `{{project}}/{{workload_identity_pool_id}}`
+        * `{{project}}/{{workload_identity_pool_id}}`
 
-         * `{{workload_identity_pool_id}}`
+        * `{{workload_identity_pool_id}}`
 
-         When using the `pulumi import` command, WorkloadIdentityPool can be imported using one of the formats above. For example:
+        When using the `pulumi import` command, WorkloadIdentityPool can be imported using one of the formats above. For example:
 
         ```sh
         $ pulumi import gcp:iam/workloadIdentityPool:WorkloadIdentityPool default projects/{{project}}/locations/global/workloadIdentityPools/{{workload_identity_pool_id}}
@@ -368,16 +373,20 @@ class WorkloadIdentityPool(pulumi.CustomResource):
             * [Managing workload identity pools](https://cloud.google.com/iam/docs/manage-workload-identity-pools-providers#pools)
 
         ## Example Usage
+
         ### Iam Workload Identity Pool Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
 
         example = gcp.iam.WorkloadIdentityPool("example", workload_identity_pool_id="example-pool")
         ```
+        <!--End PulumiCodeChooser -->
         ### Iam Workload Identity Pool Full
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -388,18 +397,19 @@ class WorkloadIdentityPool(pulumi.CustomResource):
             description="Identity pool for automated test",
             disabled=True)
         ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
         WorkloadIdentityPool can be imported using any of these accepted formats:
 
-         * `projects/{{project}}/locations/global/workloadIdentityPools/{{workload_identity_pool_id}}`
+        * `projects/{{project}}/locations/global/workloadIdentityPools/{{workload_identity_pool_id}}`
 
-         * `{{project}}/{{workload_identity_pool_id}}`
+        * `{{project}}/{{workload_identity_pool_id}}`
 
-         * `{{workload_identity_pool_id}}`
+        * `{{workload_identity_pool_id}}`
 
-         When using the `pulumi import` command, WorkloadIdentityPool can be imported using one of the formats above. For example:
+        When using the `pulumi import` command, WorkloadIdentityPool can be imported using one of the formats above. For example:
 
         ```sh
         $ pulumi import gcp:iam/workloadIdentityPool:WorkloadIdentityPool default projects/{{project}}/locations/global/workloadIdentityPools/{{workload_identity_pool_id}}

pulumi_gcp/iam/workload_identity_pool_provider.py

@@ -74,12 +74,6 @@ class WorkloadIdentityPoolProviderArgs:
                the total size of all mapped attributes must not exceed 8KB.
                For AWS providers, the following rules apply:
                - If no attribute mapping is defined, the following default mapping applies:
-               - If any custom attribute mappings are defined, they must include a mapping to the
-               `google.subject` attribute.
-               For OIDC providers, the following rules apply:
-               - Custom attribute mappings must be defined, and must include a mapping to the
-               `google.subject` attribute. For example, the following maps the `sub` claim of the
-               incoming credential to the `subject` attribute on a Google token.
         :param pulumi.Input['WorkloadIdentityPoolProviderAwsArgs'] aws: An Amazon Web Services identity provider. Not compatible with the property oidc or saml.
                Structure is documented below.
         :param pulumi.Input[str] description: A description for the provider. Cannot exceed 256 characters.
@@ -196,12 +190,6 @@ class WorkloadIdentityPoolProviderArgs:
         the total size of all mapped attributes must not exceed 8KB.
         For AWS providers, the following rules apply:
         - If no attribute mapping is defined, the following default mapping applies:
-        - If any custom attribute mappings are defined, they must include a mapping to the
-        `google.subject` attribute.
-        For OIDC providers, the following rules apply:
-        - Custom attribute mappings must be defined, and must include a mapping to the
-        `google.subject` attribute. For example, the following maps the `sub` claim of the
-        incoming credential to the `subject` attribute on a Google token.
         """
         return pulumi.get(self, "attribute_mapping")
 
@@ -353,12 +341,6 @@ class _WorkloadIdentityPoolProviderState:
                the total size of all mapped attributes must not exceed 8KB.
                For AWS providers, the following rules apply:
                - If no attribute mapping is defined, the following default mapping applies:
-               - If any custom attribute mappings are defined, they must include a mapping to the
-               `google.subject` attribute.
-               For OIDC providers, the following rules apply:
-               - Custom attribute mappings must be defined, and must include a mapping to the
-               `google.subject` attribute. For example, the following maps the `sub` claim of the
-               incoming credential to the `subject` attribute on a Google token.
         :param pulumi.Input['WorkloadIdentityPoolProviderAwsArgs'] aws: An Amazon Web Services identity provider. Not compatible with the property oidc or saml.
                Structure is documented below.
         :param pulumi.Input[str] description: A description for the provider. Cannot exceed 256 characters.
@@ -468,12 +450,6 @@ class _WorkloadIdentityPoolProviderState:
         the total size of all mapped attributes must not exceed 8KB.
         For AWS providers, the following rules apply:
         - If no attribute mapping is defined, the following default mapping applies:
-        - If any custom attribute mappings are defined, they must include a mapping to the
-        `google.subject` attribute.
-        For OIDC providers, the following rules apply:
-        - Custom attribute mappings must be defined, and must include a mapping to the
-        `google.subject` attribute. For example, the following maps the `sub` claim of the
-        incoming credential to the `subject` attribute on a Google token.
         """
         return pulumi.get(self, "attribute_mapping")
 
@@ -660,8 +636,10 @@ class WorkloadIdentityPoolProvider(pulumi.CustomResource):
             * [Managing workload identity providers](https://cloud.google.com/iam/docs/manage-workload-identity-pools-providers#managing_workload_identity_providers)
 
         ## Example Usage
+
         ### Iam Workload Identity Pool Provider Aws Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -674,8 +652,10 @@ class WorkloadIdentityPoolProvider(pulumi.CustomResource):
                 account_id="999999999999",
             ))
         ```
+        <!--End PulumiCodeChooser -->
         ### Iam Workload Identity Pool Provider Aws Full
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -697,8 +677,10 @@ class WorkloadIdentityPoolProvider(pulumi.CustomResource):
                 account_id="999999999999",
             ))
         ```
+        <!--End PulumiCodeChooser -->
         ### Iam Workload Identity Pool Provider Oidc Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -714,8 +696,10 @@ class WorkloadIdentityPoolProvider(pulumi.CustomResource):
                 issuer_uri="https://sts.windows.net/azure-tenant-id",
             ))
         ```
+        <!--End PulumiCodeChooser -->
         ### Iam Workload Identity Pool Provider Oidc Full
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -745,8 +729,10 @@ class WorkloadIdentityPoolProvider(pulumi.CustomResource):
                 issuer_uri="https://sts.windows.net/azure-tenant-id",
             ))
         ```
+        <!--End PulumiCodeChooser -->
         ### Iam Workload Identity Pool Provider Saml Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -765,8 +751,10 @@ class WorkloadIdentityPoolProvider(pulumi.CustomResource):
                 idp_metadata_xml=std.file(input="test-fixtures/metadata.xml").result,
             ))
         ```
+        <!--End PulumiCodeChooser -->
         ### Iam Workload Identity Pool Provider Saml Full
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -788,8 +776,10 @@ class WorkloadIdentityPoolProvider(pulumi.CustomResource):
                 idp_metadata_xml=std.file(input="test-fixtures/metadata.xml").result,
             ))
         ```
+        <!--End PulumiCodeChooser -->
         ### Iam Workload Identity Pool Provider Oidc Upload Key
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -820,18 +810,19 @@ class WorkloadIdentityPoolProvider(pulumi.CustomResource):
                 jwks_json="{\\"keys\\":[{\\"kty\\":\\"RSA\\",\\"alg\\":\\"RS256\\",\\"kid\\":\\"sif0AR-F6MuvksAyAOv-Pds08Bcf2eUMlxE30NofddA\\",\\"use\\":\\"sig\\",\\"e\\":\\"AQAB\\",\\"n\\":\\"ylH1Chl1tpfti3lh51E1g5dPogzXDaQseqjsefGLknaNl5W6Wd4frBhHyE2t41Q5zgz_Ll0-NvWm0FlaG6brhrN9QZu6sJP1bM8WPfJVPgXOanxi7d7TXCkeNubGeiLTf5R3UXtS9Lm_guemU7MxDjDTelxnlgGCihOVTcL526suNJUdfXtpwUsvdU6_ZnAp9IpsuYjCtwPm9hPumlcZGMbxstdh07O4y4O90cVQClJOKSGQjAUCKJWXIQ0cqffGS_HuS_725CPzQ85SzYZzaNpgfhAER7kx_9P16ARM3BJz0PI5fe2hECE61J4GYU_BY43sxDfs7HyJpEXKLU9eWw\\"}]}",
             ))
         ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
         WorkloadIdentityPoolProvider can be imported using any of these accepted formats:
 
-         * `projects/{{project}}/locations/global/workloadIdentityPools/{{workload_identity_pool_id}}/providers/{{workload_identity_pool_provider_id}}`
+        * `projects/{{project}}/locations/global/workloadIdentityPools/{{workload_identity_pool_id}}/providers/{{workload_identity_pool_provider_id}}`
 
-         * `{{project}}/{{workload_identity_pool_id}}/{{workload_identity_pool_provider_id}}`
+        * `{{project}}/{{workload_identity_pool_id}}/{{workload_identity_pool_provider_id}}`
 
-         * `{{workload_identity_pool_id}}/{{workload_identity_pool_provider_id}}`
+        * `{{workload_identity_pool_id}}/{{workload_identity_pool_provider_id}}`
 
-         When using the `pulumi import` command, WorkloadIdentityPoolProvider can be imported using one of the formats above. For example:
+        When using the `pulumi import` command, WorkloadIdentityPoolProvider can be imported using one of the formats above. For example:
 
         ```sh
         $ pulumi import gcp:iam/workloadIdentityPoolProvider:WorkloadIdentityPoolProvider default projects/{{project}}/locations/global/workloadIdentityPools/{{workload_identity_pool_id}}/providers/{{workload_identity_pool_provider_id}}
@@ -883,12 +874,6 @@ class WorkloadIdentityPoolProvider(pulumi.CustomResource):
                the total size of all mapped attributes must not exceed 8KB.
                For AWS providers, the following rules apply:
                - If no attribute mapping is defined, the following default mapping applies:
-               - If any custom attribute mappings are defined, they must include a mapping to the
-               `google.subject` attribute.
-               For OIDC providers, the following rules apply:
-               - Custom attribute mappings must be defined, and must include a mapping to the
-               `google.subject` attribute. For example, the following maps the `sub` claim of the
-               incoming credential to the `subject` attribute on a Google token.
         :param pulumi.Input[pulumi.InputType['WorkloadIdentityPoolProviderAwsArgs']] aws: An Amazon Web Services identity provider. Not compatible with the property oidc or saml.
                Structure is documented below.
         :param pulumi.Input[str] description: A description for the provider. Cannot exceed 256 characters.
@@ -927,8 +912,10 @@ class WorkloadIdentityPoolProvider(pulumi.CustomResource):
             * [Managing workload identity providers](https://cloud.google.com/iam/docs/manage-workload-identity-pools-providers#managing_workload_identity_providers)
 
         ## Example Usage
+
         ### Iam Workload Identity Pool Provider Aws Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -941,8 +928,10 @@ class WorkloadIdentityPoolProvider(pulumi.CustomResource):
                 account_id="999999999999",
             ))
         ```
+        <!--End PulumiCodeChooser -->
         ### Iam Workload Identity Pool Provider Aws Full
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -964,8 +953,10 @@ class WorkloadIdentityPoolProvider(pulumi.CustomResource):
                 account_id="999999999999",
             ))
         ```
+        <!--End PulumiCodeChooser -->
         ### Iam Workload Identity Pool Provider Oidc Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -981,8 +972,10 @@ class WorkloadIdentityPoolProvider(pulumi.CustomResource):
                 issuer_uri="https://sts.windows.net/azure-tenant-id",
             ))
         ```
+        <!--End PulumiCodeChooser -->
         ### Iam Workload Identity Pool Provider Oidc Full
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -1012,8 +1005,10 @@ class WorkloadIdentityPoolProvider(pulumi.CustomResource):
                 issuer_uri="https://sts.windows.net/azure-tenant-id",
             ))
         ```
+        <!--End PulumiCodeChooser -->
         ### Iam Workload Identity Pool Provider Saml Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -1032,8 +1027,10 @@ class WorkloadIdentityPoolProvider(pulumi.CustomResource):
                 idp_metadata_xml=std.file(input="test-fixtures/metadata.xml").result,
             ))
         ```
+        <!--End PulumiCodeChooser -->
         ### Iam Workload Identity Pool Provider Saml Full
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -1055,8 +1052,10 @@ class WorkloadIdentityPoolProvider(pulumi.CustomResource):
                 idp_metadata_xml=std.file(input="test-fixtures/metadata.xml").result,
             ))
         ```
+        <!--End PulumiCodeChooser -->
         ### Iam Workload Identity Pool Provider Oidc Upload Key
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -1087,18 +1086,19 @@ class WorkloadIdentityPoolProvider(pulumi.CustomResource):
                 jwks_json="{\\"keys\\":[{\\"kty\\":\\"RSA\\",\\"alg\\":\\"RS256\\",\\"kid\\":\\"sif0AR-F6MuvksAyAOv-Pds08Bcf2eUMlxE30NofddA\\",\\"use\\":\\"sig\\",\\"e\\":\\"AQAB\\",\\"n\\":\\"ylH1Chl1tpfti3lh51E1g5dPogzXDaQseqjsefGLknaNl5W6Wd4frBhHyE2t41Q5zgz_Ll0-NvWm0FlaG6brhrN9QZu6sJP1bM8WPfJVPgXOanxi7d7TXCkeNubGeiLTf5R3UXtS9Lm_guemU7MxDjDTelxnlgGCihOVTcL526suNJUdfXtpwUsvdU6_ZnAp9IpsuYjCtwPm9hPumlcZGMbxstdh07O4y4O90cVQClJOKSGQjAUCKJWXIQ0cqffGS_HuS_725CPzQ85SzYZzaNpgfhAER7kx_9P16ARM3BJz0PI5fe2hECE61J4GYU_BY43sxDfs7HyJpEXKLU9eWw\\"}]}",
             ))
         ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
         WorkloadIdentityPoolProvider can be imported using any of these accepted formats:
 
-         * `projects/{{project}}/locations/global/workloadIdentityPools/{{workload_identity_pool_id}}/providers/{{workload_identity_pool_provider_id}}`
+        * `projects/{{project}}/locations/global/workloadIdentityPools/{{workload_identity_pool_id}}/providers/{{workload_identity_pool_provider_id}}`
 
-         * `{{project}}/{{workload_identity_pool_id}}/{{workload_identity_pool_provider_id}}`
+        * `{{project}}/{{workload_identity_pool_id}}/{{workload_identity_pool_provider_id}}`
 
-         * `{{workload_identity_pool_id}}/{{workload_identity_pool_provider_id}}`
+        * `{{workload_identity_pool_id}}/{{workload_identity_pool_provider_id}}`
 
-         When using the `pulumi import` command, WorkloadIdentityPoolProvider can be imported using one of the formats above. For example:
+        When using the `pulumi import` command, WorkloadIdentityPoolProvider can be imported using one of the formats above. For example:
 
         ```sh
         $ pulumi import gcp:iam/workloadIdentityPoolProvider:WorkloadIdentityPoolProvider default projects/{{project}}/locations/global/workloadIdentityPools/{{workload_identity_pool_id}}/providers/{{workload_identity_pool_provider_id}}
@@ -1230,12 +1230,6 @@ class WorkloadIdentityPoolProvider(pulumi.CustomResource):
                the total size of all mapped attributes must not exceed 8KB.
                For AWS providers, the following rules apply:
                - If no attribute mapping is defined, the following default mapping applies:
-               - If any custom attribute mappings are defined, they must include a mapping to the
-               `google.subject` attribute.
-               For OIDC providers, the following rules apply:
-               - Custom attribute mappings must be defined, and must include a mapping to the
-               `google.subject` attribute. For example, the following maps the `sub` claim of the
-               incoming credential to the `subject` attribute on a Google token.
         :param pulumi.Input[pulumi.InputType['WorkloadIdentityPoolProviderAwsArgs']] aws: An Amazon Web Services identity provider. Not compatible with the property oidc or saml.
                Structure is documented below.
         :param pulumi.Input[str] description: A description for the provider. Cannot exceed 256 characters.
@@ -1333,12 +1327,6 @@ class WorkloadIdentityPoolProvider(pulumi.CustomResource):
         the total size of all mapped attributes must not exceed 8KB.
         For AWS providers, the following rules apply:
         - If no attribute mapping is defined, the following default mapping applies:
-        - If any custom attribute mappings are defined, they must include a mapping to the
-        `google.subject` attribute.
-        For OIDC providers, the following rules apply:
-        - Custom attribute mappings must be defined, and must include a mapping to the
-        `google.subject` attribute. For example, the following maps the `sub` claim of the
-        incoming credential to the `subject` attribute on a Google token.
         """
         return pulumi.get(self, "attribute_mapping")