pulumi-gcp 7.13.0a1709814369__py3-none-any.whl → 7.14.0a1710186287__py3-none-any.whl

pulumi_gcp/securitycenter/source.py

@@ -193,8 +193,10 @@ class Source(pulumi.CustomResource):
             * [Official Documentation](https://cloud.google.com/security-command-center/docs)
 
         ## Example Usage
+
         ### Scc Source Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -204,16 +206,17 @@ class Source(pulumi.CustomResource):
             organization="123456789",
             description="My custom Cloud Security Command Center Finding Source")
         ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
         Source can be imported using any of these accepted formats:
 
-         * `organizations/{{organization}}/sources/{{name}}`
+        * `organizations/{{organization}}/sources/{{name}}`
 
-         * `{{organization}}/{{name}}`
+        * `{{organization}}/{{name}}`
 
-         When using the `pulumi import` command, Source can be imported using one of the formats above. For example:
+        When using the `pulumi import` command, Source can be imported using one of the formats above. For example:
 
         ```sh
         $ pulumi import gcp:securitycenter/source:Source default organizations/{{organization}}/sources/{{name}}
@@ -256,8 +259,10 @@ class Source(pulumi.CustomResource):
             * [Official Documentation](https://cloud.google.com/security-command-center/docs)
 
         ## Example Usage
+
         ### Scc Source Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -267,16 +272,17 @@ class Source(pulumi.CustomResource):
             organization="123456789",
             description="My custom Cloud Security Command Center Finding Source")
         ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
         Source can be imported using any of these accepted formats:
 
-         * `organizations/{{organization}}/sources/{{name}}`
+        * `organizations/{{organization}}/sources/{{name}}`
 
-         * `{{organization}}/{{name}}`
+        * `{{organization}}/{{name}}`
 
-         When using the `pulumi import` command, Source can be imported using one of the formats above. For example:
+        When using the `pulumi import` command, Source can be imported using one of the formats above. For example:
 
         ```sh
         $ pulumi import gcp:securitycenter/source:Source default organizations/{{organization}}/sources/{{name}}

pulumi_gcp/securitycenter/source_iam_binding.py

@@ -205,8 +205,10 @@ class SourceIamBinding(pulumi.CustomResource):
             * [Official Documentation](https://cloud.google.com/security-command-center/docs)
 
         ## Example Usage
+
         ### Scc Source Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -216,16 +218,17 @@ class SourceIamBinding(pulumi.CustomResource):
             organization="123456789",
             description="My custom Cloud Security Command Center Finding Source")
         ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
         Source can be imported using any of these accepted formats:
 
-         * `organizations/{{organization}}/sources/{{name}}`
+        * `organizations/{{organization}}/sources/{{name}}`
 
-         * `{{organization}}/{{name}}`
+        * `{{organization}}/{{name}}`
 
-         When using the `pulumi import` command, Source can be imported using one of the formats above. For example:
+        When using the `pulumi import` command, Source can be imported using one of the formats above. For example:
 
         ```sh
         $ pulumi import gcp:securitycenter/sourceIamBinding:SourceIamBinding default organizations/{{organization}}/sources/{{name}}
@@ -262,8 +265,10 @@ class SourceIamBinding(pulumi.CustomResource):
             * [Official Documentation](https://cloud.google.com/security-command-center/docs)
 
         ## Example Usage
+
         ### Scc Source Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -273,16 +278,17 @@ class SourceIamBinding(pulumi.CustomResource):
             organization="123456789",
             description="My custom Cloud Security Command Center Finding Source")
         ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
         Source can be imported using any of these accepted formats:
 
-         * `organizations/{{organization}}/sources/{{name}}`
+        * `organizations/{{organization}}/sources/{{name}}`
 
-         * `{{organization}}/{{name}}`
+        * `{{organization}}/{{name}}`
 
-         When using the `pulumi import` command, Source can be imported using one of the formats above. For example:
+        When using the `pulumi import` command, Source can be imported using one of the formats above. For example:
 
         ```sh
         $ pulumi import gcp:securitycenter/sourceIamBinding:SourceIamBinding default organizations/{{organization}}/sources/{{name}}

pulumi_gcp/securitycenter/source_iam_member.py

@@ -205,8 +205,10 @@ class SourceIamMember(pulumi.CustomResource):
             * [Official Documentation](https://cloud.google.com/security-command-center/docs)
 
         ## Example Usage
+
         ### Scc Source Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -216,16 +218,17 @@ class SourceIamMember(pulumi.CustomResource):
             organization="123456789",
             description="My custom Cloud Security Command Center Finding Source")
         ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
         Source can be imported using any of these accepted formats:
 
-         * `organizations/{{organization}}/sources/{{name}}`
+        * `organizations/{{organization}}/sources/{{name}}`
 
-         * `{{organization}}/{{name}}`
+        * `{{organization}}/{{name}}`
 
-         When using the `pulumi import` command, Source can be imported using one of the formats above. For example:
+        When using the `pulumi import` command, Source can be imported using one of the formats above. For example:
 
         ```sh
         $ pulumi import gcp:securitycenter/sourceIamMember:SourceIamMember default organizations/{{organization}}/sources/{{name}}
@@ -262,8 +265,10 @@ class SourceIamMember(pulumi.CustomResource):
             * [Official Documentation](https://cloud.google.com/security-command-center/docs)
 
         ## Example Usage
+
         ### Scc Source Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -273,16 +278,17 @@ class SourceIamMember(pulumi.CustomResource):
             organization="123456789",
             description="My custom Cloud Security Command Center Finding Source")
         ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
         Source can be imported using any of these accepted formats:
 
-         * `organizations/{{organization}}/sources/{{name}}`
+        * `organizations/{{organization}}/sources/{{name}}`
 
-         * `{{organization}}/{{name}}`
+        * `{{organization}}/{{name}}`
 
-         When using the `pulumi import` command, Source can be imported using one of the formats above. For example:
+        When using the `pulumi import` command, Source can be imported using one of the formats above. For example:
 
         ```sh
         $ pulumi import gcp:securitycenter/sourceIamMember:SourceIamMember default organizations/{{organization}}/sources/{{name}}

pulumi_gcp/securitycenter/source_iam_policy.py

@@ -154,8 +154,10 @@ class SourceIamPolicy(pulumi.CustomResource):
             * [Official Documentation](https://cloud.google.com/security-command-center/docs)
 
         ## Example Usage
+
         ### Scc Source Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -165,16 +167,17 @@ class SourceIamPolicy(pulumi.CustomResource):
             organization="123456789",
             description="My custom Cloud Security Command Center Finding Source")
         ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
         Source can be imported using any of these accepted formats:
 
-         * `organizations/{{organization}}/sources/{{name}}`
+        * `organizations/{{organization}}/sources/{{name}}`
 
-         * `{{organization}}/{{name}}`
+        * `{{organization}}/{{name}}`
 
-         When using the `pulumi import` command, Source can be imported using one of the formats above. For example:
+        When using the `pulumi import` command, Source can be imported using one of the formats above. For example:
 
         ```sh
         $ pulumi import gcp:securitycenter/sourceIamPolicy:SourceIamPolicy default organizations/{{organization}}/sources/{{name}}
@@ -211,8 +214,10 @@ class SourceIamPolicy(pulumi.CustomResource):
             * [Official Documentation](https://cloud.google.com/security-command-center/docs)
 
         ## Example Usage
+
         ### Scc Source Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -222,16 +227,17 @@ class SourceIamPolicy(pulumi.CustomResource):
             organization="123456789",
             description="My custom Cloud Security Command Center Finding Source")
         ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
         Source can be imported using any of these accepted formats:
 
-         * `organizations/{{organization}}/sources/{{name}}`
+        * `organizations/{{organization}}/sources/{{name}}`
 
-         * `{{organization}}/{{name}}`
+        * `{{organization}}/{{name}}`
 
-         When using the `pulumi import` command, Source can be imported using one of the formats above. For example:
+        When using the `pulumi import` command, Source can be imported using one of the formats above. For example:
 
         ```sh
         $ pulumi import gcp:securitycenter/sourceIamPolicy:SourceIamPolicy default organizations/{{organization}}/sources/{{name}}

pulumi_gcp/securityposture/posture.py

@@ -348,8 +348,10 @@ class Posture(pulumi.CustomResource):
             * [Create and deploy a posture](https://cloud.google.com/security-command-center/docs/how-to-use-security-posture)
 
         ## Example Usage
+
         ### Securityposture Posture Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -456,14 +458,15 @@ class Posture(pulumi.CustomResource):
                 ),
             ])
         ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
         Posture can be imported using any of these accepted formats:
 
-         * `{{parent}}/locations/{{location}}/postures/{{posture_id}}`
+        * `{{parent}}/locations/{{location}}/postures/{{posture_id}}`
 
-         When using the `pulumi import` command, Posture can be imported using one of the formats above. For example:
+        When using the `pulumi import` command, Posture can be imported using one of the formats above. For example:
 
         ```sh
         $ pulumi import gcp:securityposture/posture:Posture default {{parent}}/locations/{{location}}/postures/{{posture_id}}
@@ -499,8 +502,10 @@ class Posture(pulumi.CustomResource):
             * [Create and deploy a posture](https://cloud.google.com/security-command-center/docs/how-to-use-security-posture)
 
         ## Example Usage
+
         ### Securityposture Posture Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -607,14 +612,15 @@ class Posture(pulumi.CustomResource):
                 ),
             ])
         ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
         Posture can be imported using any of these accepted formats:
 
-         * `{{parent}}/locations/{{location}}/postures/{{posture_id}}`
+        * `{{parent}}/locations/{{location}}/postures/{{posture_id}}`
 
-         When using the `pulumi import` command, Posture can be imported using one of the formats above. For example:
+        When using the `pulumi import` command, Posture can be imported using one of the formats above. For example:
 
         ```sh
         $ pulumi import gcp:securityposture/posture:Posture default {{parent}}/locations/{{location}}/postures/{{posture_id}}

pulumi_gcp/securityposture/posture_deployment.py

@@ -459,8 +459,10 @@ class PostureDeployment(pulumi.CustomResource):
             * [Create and deploy a posture](https://cloud.google.com/security-command-center/docs/how-to-use-security-posture)
 
         ## Example Usage
+
         ### Securityposture Posture Deployment Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -495,14 +497,15 @@ class PostureDeployment(pulumi.CustomResource):
             posture_id=posture1.name,
             posture_revision_id=posture1.revision_id)
         ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
         PostureDeployment can be imported using any of these accepted formats:
 
-         * `{{parent}}/locations/{{location}}/postureDeployments/{{posture_deployment_id}}`
+        * `{{parent}}/locations/{{location}}/postureDeployments/{{posture_deployment_id}}`
 
-         When using the `pulumi import` command, PostureDeployment can be imported using one of the formats above. For example:
+        When using the `pulumi import` command, PostureDeployment can be imported using one of the formats above. For example:
 
         ```sh
         $ pulumi import gcp:securityposture/postureDeployment:PostureDeployment default {{parent}}/locations/{{location}}/postureDeployments/{{posture_deployment_id}}
@@ -544,8 +547,10 @@ class PostureDeployment(pulumi.CustomResource):
             * [Create and deploy a posture](https://cloud.google.com/security-command-center/docs/how-to-use-security-posture)
 
         ## Example Usage
+
         ### Securityposture Posture Deployment Basic
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -580,14 +585,15 @@ class PostureDeployment(pulumi.CustomResource):
             posture_id=posture1.name,
             posture_revision_id=posture1.revision_id)
         ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
         PostureDeployment can be imported using any of these accepted formats:
 
-         * `{{parent}}/locations/{{location}}/postureDeployments/{{posture_deployment_id}}`
+        * `{{parent}}/locations/{{location}}/postureDeployments/{{posture_deployment_id}}`
 
-         When using the `pulumi import` command, PostureDeployment can be imported using one of the formats above. For example:
+        When using the `pulumi import` command, PostureDeployment can be imported using one of the formats above. For example:
 
         ```sh
         $ pulumi import gcp:securityposture/postureDeployment:PostureDeployment default {{parent}}/locations/{{location}}/postureDeployments/{{posture_deployment_id}}

pulumi_gcp/serviceaccount/account.py

@@ -343,6 +343,7 @@ class Account(pulumi.CustomResource):
 
         This snippet creates a service account in a project.
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -351,14 +352,15 @@ class Account(pulumi.CustomResource):
             account_id="service-account-id",
             display_name="Service Account")
         ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
         Service accounts can be imported using their URI, e.g.
 
-         * `projects/{{project_id}}/serviceAccounts/{{email}}`
+        * `projects/{{project_id}}/serviceAccounts/{{email}}`
 
-         When using the `pulumi import` command, service accounts can be imported using one of the formats above. For example:
+        When using the `pulumi import` command, service accounts can be imported using one of the formats above. For example:
 
         ```sh
         $ pulumi import gcp:serviceaccount/account:Account default projects/{{project_id}}/serviceAccounts/{{email}}
@@ -403,6 +405,7 @@ class Account(pulumi.CustomResource):
 
         This snippet creates a service account in a project.
 
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_gcp as gcp
@@ -411,14 +414,15 @@ class Account(pulumi.CustomResource):
             account_id="service-account-id",
             display_name="Service Account")
         ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
         Service accounts can be imported using their URI, e.g.
 
-         * `projects/{{project_id}}/serviceAccounts/{{email}}`
+        * `projects/{{project_id}}/serviceAccounts/{{email}}`
 
-         When using the `pulumi import` command, service accounts can be imported using one of the formats above. For example:
+        When using the `pulumi import` command, service accounts can be imported using one of the formats above. For example:
 
         ```sh
         $ pulumi import gcp:serviceaccount/account:Account default projects/{{project_id}}/serviceAccounts/{{email}}

pulumi_gcp/serviceaccount/get_account.py

@@ -133,13 +133,17 @@ def get_account(account_id: Optional[str] = None,
 
     ## Example Usage
 
+    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import pulumi_gcp as gcp
 
     object_viewer = gcp.serviceaccount.get_account(account_id="object-viewer")
     ```
+    <!--End PulumiCodeChooser -->
+
     ### Save Key In Kubernetes Secret
+    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import pulumi_gcp as gcp
@@ -156,6 +160,7 @@ def get_account(account_id: Optional[str] = None,
             "json": std.base64decode_output(input=mykey.private_key).apply(lambda invoke: invoke.result),
         })
     ```
+    <!--End PulumiCodeChooser -->
 
 
     :param str account_id: The Google service account ID. This be one of:
@@ -197,13 +202,17 @@ def get_account_output(account_id: Optional[pulumi.Input[str]] = None,
 
     ## Example Usage
 
+    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import pulumi_gcp as gcp
 
     object_viewer = gcp.serviceaccount.get_account(account_id="object-viewer")
     ```
+    <!--End PulumiCodeChooser -->
+
     ### Save Key In Kubernetes Secret
+    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import pulumi_gcp as gcp
@@ -220,6 +229,7 @@ def get_account_output(account_id: Optional[pulumi.Input[str]] = None,
             "json": std.base64decode_output(input=mykey.private_key).apply(lambda invoke: invoke.result),
         })
     ```
+    <!--End PulumiCodeChooser -->
 
 
     :param str account_id: The Google service account ID. This be one of:

pulumi_gcp/serviceaccount/get_account_access_token.py

@@ -109,6 +109,7 @@ def get_account_access_token(delegates: Optional[Sequence[str]] = None,
 
     In the IAM policy below, `service_A` is given the Token Creator role impersonate `service_B`
 
+    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import pulumi_gcp as gcp
@@ -118,11 +119,13 @@ def get_account_access_token(delegates: Optional[Sequence[str]] = None,
         role="roles/iam.serviceAccountTokenCreator",
         members=["serviceAccount:service_A@projectA.iam.gserviceaccount.com"])
     ```
+    <!--End PulumiCodeChooser -->
 
     Once the IAM permissions are set, you can apply the new token to a provider bootstrapped with it.  Any resources that references the aliased provider will run as the new identity.
 
     In the example below, `organizations.Project` will run as `service_B`.
 
+    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import pulumi_gcp as gcp
@@ -137,6 +140,7 @@ def get_account_access_token(delegates: Optional[Sequence[str]] = None,
     me = gcp.organizations.get_client_open_id_user_info()
     pulumi.export("target-email", me.email)
     ```
+    <!--End PulumiCodeChooser -->
 
     > *Note*: the generated token is non-refreshable and can have a maximum `lifetime` of `3600` seconds.
 
@@ -181,6 +185,7 @@ def get_account_access_token_output(delegates: Optional[pulumi.Input[Optional[Se
 
     In the IAM policy below, `service_A` is given the Token Creator role impersonate `service_B`
 
+    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import pulumi_gcp as gcp
@@ -190,11 +195,13 @@ def get_account_access_token_output(delegates: Optional[pulumi.Input[Optional[Se
         role="roles/iam.serviceAccountTokenCreator",
         members=["serviceAccount:service_A@projectA.iam.gserviceaccount.com"])
     ```
+    <!--End PulumiCodeChooser -->
 
     Once the IAM permissions are set, you can apply the new token to a provider bootstrapped with it.  Any resources that references the aliased provider will run as the new identity.
 
     In the example below, `organizations.Project` will run as `service_B`.
 
+    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import pulumi_gcp as gcp
@@ -209,6 +216,7 @@ def get_account_access_token_output(delegates: Optional[pulumi.Input[Optional[Se
     me = gcp.organizations.get_client_open_id_user_info()
     pulumi.export("target-email", me.email)
     ```
+    <!--End PulumiCodeChooser -->
 
     > *Note*: the generated token is non-refreshable and can have a maximum `lifetime` of `3600` seconds.
 

pulumi_gcp/serviceaccount/get_account_id_token.py

@@ -108,15 +108,47 @@ def get_account_id_token(delegates: Optional[Sequence[str]] = None,
     ### ServiceAccount JSON Credential File.
       `serviceaccount_get_account_id_token` will use the configured provider credentials
 
+      <!--Start PulumiCodeChooser -->
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    oidc = gcp.serviceaccount.get_account_id_token(target_audience="https://foo.bar/")
+    pulumi.export("oidcToken", oidc.id_token)
+    ```
+    <!--End PulumiCodeChooser -->
+
     ### Service Account Impersonation.
       `serviceaccount_get_account_access_token` will use background impersonated credentials provided by `serviceaccount_get_account_access_token`.
 
       Note: to use the following, you must grant `target_service_account` the
       `roles/iam.serviceAccountTokenCreator` role on itself.
+
+      <!--Start PulumiCodeChooser -->
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    impersonated = gcp.serviceaccount.get_account_access_token(target_service_account="impersonated-account@project.iam.gserviceaccount.com",
+        delegates=[],
+        scopes=[
+            "userinfo-email",
+            "cloud-platform",
+        ],
+        lifetime="300s")
+    oidc = gcp.serviceaccount.get_account_id_token(target_service_account="impersonated-account@project.iam.gserviceaccount.com",
+        delegates=[],
+        include_email=True,
+        target_audience="https://foo.bar/")
+    pulumi.export("oidcToken", oidc.id_token)
+    ```
+    <!--End PulumiCodeChooser -->
+
     ### Invoking Cloud Run Endpoint
 
       The following configuration will invoke [Cloud Run](https://cloud.google.com/run/docs/authenticating/service-to-service) endpoint where the service account for the provider has been granted `roles/run.invoker` role previously.
 
+    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import pulumi_gcp as gcp
@@ -129,6 +161,7 @@ def get_account_id_token(delegates: Optional[Sequence[str]] = None,
         })
     pulumi.export("cloudRunResponse", cloudrun.body)
     ```
+    <!--End PulumiCodeChooser -->
 
 
     :param Sequence[str] delegates: Delegate chain of approvals needed to perform full impersonation. Specify the fully qualified service account name.   Used only when using impersonation mode.
@@ -170,15 +203,47 @@ def get_account_id_token_output(delegates: Optional[pulumi.Input[Optional[Sequen
     ### ServiceAccount JSON Credential File.
       `serviceaccount_get_account_id_token` will use the configured provider credentials
 
+      <!--Start PulumiCodeChooser -->
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    oidc = gcp.serviceaccount.get_account_id_token(target_audience="https://foo.bar/")
+    pulumi.export("oidcToken", oidc.id_token)
+    ```
+    <!--End PulumiCodeChooser -->
+
     ### Service Account Impersonation.
       `serviceaccount_get_account_access_token` will use background impersonated credentials provided by `serviceaccount_get_account_access_token`.
 
       Note: to use the following, you must grant `target_service_account` the
       `roles/iam.serviceAccountTokenCreator` role on itself.
+
+      <!--Start PulumiCodeChooser -->
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    impersonated = gcp.serviceaccount.get_account_access_token(target_service_account="impersonated-account@project.iam.gserviceaccount.com",
+        delegates=[],
+        scopes=[
+            "userinfo-email",
+            "cloud-platform",
+        ],
+        lifetime="300s")
+    oidc = gcp.serviceaccount.get_account_id_token(target_service_account="impersonated-account@project.iam.gserviceaccount.com",
+        delegates=[],
+        include_email=True,
+        target_audience="https://foo.bar/")
+    pulumi.export("oidcToken", oidc.id_token)
+    ```
+    <!--End PulumiCodeChooser -->
+
     ### Invoking Cloud Run Endpoint
 
       The following configuration will invoke [Cloud Run](https://cloud.google.com/run/docs/authenticating/service-to-service) endpoint where the service account for the provider has been granted `roles/run.invoker` role previously.
 
+    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import pulumi_gcp as gcp
@@ -191,6 +256,7 @@ def get_account_id_token_output(delegates: Optional[pulumi.Input[Optional[Sequen
         })
     pulumi.export("cloudRunResponse", cloudrun.body)
     ```
+    <!--End PulumiCodeChooser -->
 
 
     :param Sequence[str] delegates: Delegate chain of approvals needed to perform full impersonation. Specify the fully qualified service account name.   Used only when using impersonation mode.

pulumi_gcp/serviceaccount/get_account_jwt.py

@@ -104,6 +104,7 @@ def get_account_jwt(delegates: Optional[Sequence[str]] = None,
 
     Note: in order to use the following, the caller must have _at least_ `roles/iam.serviceAccountTokenCreator` on the `target_service_account`.
 
+    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import json
@@ -117,6 +118,7 @@ def get_account_jwt(delegates: Optional[Sequence[str]] = None,
         expires_in=60)
     pulumi.export("jwt", foo.jwt)
     ```
+    <!--End PulumiCodeChooser -->
 
 
     :param Sequence[str] delegates: Delegate chain of approvals needed to perform full impersonation. Specify the fully qualified service account name.
@@ -154,6 +156,7 @@ def get_account_jwt_output(delegates: Optional[pulumi.Input[Optional[Sequence[st
 
     Note: in order to use the following, the caller must have _at least_ `roles/iam.serviceAccountTokenCreator` on the `target_service_account`.
 
+    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import json
@@ -167,6 +170,7 @@ def get_account_jwt_output(delegates: Optional[pulumi.Input[Optional[Sequence[st
         expires_in=60)
     pulumi.export("jwt", foo.jwt)
     ```
+    <!--End PulumiCodeChooser -->
 
 
     :param Sequence[str] delegates: Delegate chain of approvals needed to perform full impersonation. Specify the fully qualified service account name.