pulumi-gcp 7.15.0a1711031093__py3-none-any.whl → 7.15.0a1711123513__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (62) hide show
  1. pulumi_gcp/__init__.py +94 -0
  2. pulumi_gcp/accesscontextmanager/_inputs.py +74 -58
  3. pulumi_gcp/accesscontextmanager/outputs.py +74 -58
  4. pulumi_gcp/accesscontextmanager/service_perimeter.py +0 -2
  5. pulumi_gcp/apphub/__init__.py +15 -0
  6. pulumi_gcp/apphub/_inputs.py +1016 -0
  7. pulumi_gcp/apphub/application.py +775 -0
  8. pulumi_gcp/apphub/get_discovered_service.py +180 -0
  9. pulumi_gcp/apphub/get_discovered_workload.py +180 -0
  10. pulumi_gcp/apphub/outputs.py +1206 -0
  11. pulumi_gcp/apphub/service.py +1121 -0
  12. pulumi_gcp/apphub/service_project_attachment.py +516 -0
  13. pulumi_gcp/apphub/workload.py +1197 -0
  14. pulumi_gcp/cloudquota/__init__.py +9 -0
  15. pulumi_gcp/cloudquota/get_s_quota_info.py +322 -0
  16. pulumi_gcp/cloudquota/outputs.py +105 -0
  17. pulumi_gcp/cloudrunv2/_inputs.py +26 -2
  18. pulumi_gcp/cloudrunv2/get_service.py +11 -1
  19. pulumi_gcp/cloudrunv2/outputs.py +58 -2
  20. pulumi_gcp/cloudrunv2/service.py +54 -0
  21. pulumi_gcp/compute/_inputs.py +4 -4
  22. pulumi_gcp/compute/outputs.py +4 -4
  23. pulumi_gcp/compute/region_network_endpoint_group.py +30 -0
  24. pulumi_gcp/config/__init__.pyi +4 -0
  25. pulumi_gcp/config/vars.py +8 -0
  26. pulumi_gcp/firebase/__init__.py +1 -0
  27. pulumi_gcp/firebase/app_check_device_check_config.py +572 -0
  28. pulumi_gcp/firestore/_inputs.py +69 -0
  29. pulumi_gcp/firestore/database.py +206 -0
  30. pulumi_gcp/firestore/outputs.py +80 -0
  31. pulumi_gcp/gkeonprem/_inputs.py +1 -3
  32. pulumi_gcp/gkeonprem/outputs.py +1 -3
  33. pulumi_gcp/gkeonprem/v_mware_cluster.py +2 -0
  34. pulumi_gcp/iap/__init__.py +5 -0
  35. pulumi_gcp/iap/_inputs.py +100 -0
  36. pulumi_gcp/iap/get_tunnel_dest_group_iam_policy.py +172 -0
  37. pulumi_gcp/iap/outputs.py +76 -0
  38. pulumi_gcp/iap/tunnel_dest_group.py +524 -0
  39. pulumi_gcp/iap/tunnel_dest_group_iam_binding.py +858 -0
  40. pulumi_gcp/iap/tunnel_dest_group_iam_member.py +858 -0
  41. pulumi_gcp/iap/tunnel_dest_group_iam_policy.py +760 -0
  42. pulumi_gcp/kms/__init__.py +1 -0
  43. pulumi_gcp/kms/_inputs.py +246 -0
  44. pulumi_gcp/kms/ekm_connection.py +610 -0
  45. pulumi_gcp/kms/outputs.py +242 -0
  46. pulumi_gcp/networksecurity/__init__.py +1 -0
  47. pulumi_gcp/networksecurity/firewall_endpoint_association.py +753 -0
  48. pulumi_gcp/notebooks/instance.py +8 -0
  49. pulumi_gcp/orgpolicy/policy.py +2 -2
  50. pulumi_gcp/provider.py +40 -0
  51. pulumi_gcp/pubsub/subscription.py +4 -4
  52. pulumi_gcp/securityposture/posture.py +2 -2
  53. pulumi_gcp/securityposture/posture_deployment.py +2 -2
  54. pulumi_gcp/storage/_inputs.py +32 -15
  55. pulumi_gcp/storage/outputs.py +29 -14
  56. pulumi_gcp/workstations/_inputs.py +134 -4
  57. pulumi_gcp/workstations/outputs.py +152 -4
  58. pulumi_gcp/workstations/workstation_config.py +54 -0
  59. {pulumi_gcp-7.15.0a1711031093.dist-info → pulumi_gcp-7.15.0a1711123513.dist-info}/METADATA +1 -1
  60. {pulumi_gcp-7.15.0a1711031093.dist-info → pulumi_gcp-7.15.0a1711123513.dist-info}/RECORD +62 -42
  61. {pulumi_gcp-7.15.0a1711031093.dist-info → pulumi_gcp-7.15.0a1711123513.dist-info}/WHEEL +0 -0
  62. {pulumi_gcp-7.15.0a1711031093.dist-info → pulumi_gcp-7.15.0a1711123513.dist-info}/top_level.txt +0 -0
pulumi_gcp/__init__.py CHANGED
@@ -24,6 +24,8 @@ if typing.TYPE_CHECKING:
24
24
  apigee = __apigee
25
25
  import pulumi_gcp.appengine as __appengine
26
26
  appengine = __appengine
27
+ import pulumi_gcp.apphub as __apphub
28
+ apphub = __apphub
27
29
  import pulumi_gcp.artifactregistry as __artifactregistry
28
30
  artifactregistry = __artifactregistry
29
31
  import pulumi_gcp.assuredworkloads as __assuredworkloads
@@ -70,6 +72,8 @@ if typing.TYPE_CHECKING:
70
72
  cloudidentity = __cloudidentity
71
73
  import pulumi_gcp.cloudids as __cloudids
72
74
  cloudids = __cloudids
75
+ import pulumi_gcp.cloudquota as __cloudquota
76
+ cloudquota = __cloudquota
73
77
  import pulumi_gcp.cloudrun as __cloudrun
74
78
  cloudrun = __cloudrun
75
79
  import pulumi_gcp.cloudrunv2 as __cloudrunv2
@@ -246,6 +250,7 @@ else:
246
250
  apigateway = _utilities.lazy_import('pulumi_gcp.apigateway')
247
251
  apigee = _utilities.lazy_import('pulumi_gcp.apigee')
248
252
  appengine = _utilities.lazy_import('pulumi_gcp.appengine')
253
+ apphub = _utilities.lazy_import('pulumi_gcp.apphub')
249
254
  artifactregistry = _utilities.lazy_import('pulumi_gcp.artifactregistry')
250
255
  assuredworkloads = _utilities.lazy_import('pulumi_gcp.assuredworkloads')
251
256
  backupdisasterrecovery = _utilities.lazy_import('pulumi_gcp.backupdisasterrecovery')
@@ -269,6 +274,7 @@ else:
269
274
  cloudfunctionsv2 = _utilities.lazy_import('pulumi_gcp.cloudfunctionsv2')
270
275
  cloudidentity = _utilities.lazy_import('pulumi_gcp.cloudidentity')
271
276
  cloudids = _utilities.lazy_import('pulumi_gcp.cloudids')
277
+ cloudquota = _utilities.lazy_import('pulumi_gcp.cloudquota')
272
278
  cloudrun = _utilities.lazy_import('pulumi_gcp.cloudrun')
273
279
  cloudrunv2 = _utilities.lazy_import('pulumi_gcp.cloudrunv2')
274
280
  cloudscheduler = _utilities.lazy_import('pulumi_gcp.cloudscheduler')
@@ -877,6 +883,38 @@ _utilities.register(
877
883
  "gcp:appengine/standardAppVersion:StandardAppVersion": "StandardAppVersion"
878
884
  }
879
885
  },
886
+ {
887
+ "pkg": "gcp",
888
+ "mod": "apphub/application",
889
+ "fqn": "pulumi_gcp.apphub",
890
+ "classes": {
891
+ "gcp:apphub/application:Application": "Application"
892
+ }
893
+ },
894
+ {
895
+ "pkg": "gcp",
896
+ "mod": "apphub/service",
897
+ "fqn": "pulumi_gcp.apphub",
898
+ "classes": {
899
+ "gcp:apphub/service:Service": "Service"
900
+ }
901
+ },
902
+ {
903
+ "pkg": "gcp",
904
+ "mod": "apphub/serviceProjectAttachment",
905
+ "fqn": "pulumi_gcp.apphub",
906
+ "classes": {
907
+ "gcp:apphub/serviceProjectAttachment:ServiceProjectAttachment": "ServiceProjectAttachment"
908
+ }
909
+ },
910
+ {
911
+ "pkg": "gcp",
912
+ "mod": "apphub/workload",
913
+ "fqn": "pulumi_gcp.apphub",
914
+ "classes": {
915
+ "gcp:apphub/workload:Workload": "Workload"
916
+ }
917
+ },
880
918
  {
881
919
  "pkg": "gcp",
882
920
  "mod": "artifactregistry/repository",
@@ -4261,6 +4299,14 @@ _utilities.register(
4261
4299
  "gcp:firebase/appCheckDebugToken:AppCheckDebugToken": "AppCheckDebugToken"
4262
4300
  }
4263
4301
  },
4302
+ {
4303
+ "pkg": "gcp",
4304
+ "mod": "firebase/appCheckDeviceCheckConfig",
4305
+ "fqn": "pulumi_gcp.firebase",
4306
+ "classes": {
4307
+ "gcp:firebase/appCheckDeviceCheckConfig:AppCheckDeviceCheckConfig": "AppCheckDeviceCheckConfig"
4308
+ }
4309
+ },
4264
4310
  {
4265
4311
  "pkg": "gcp",
4266
4312
  "mod": "firebase/appCheckPlayIntegrityConfig",
@@ -5005,6 +5051,38 @@ _utilities.register(
5005
5051
  "gcp:iap/client:Client": "Client"
5006
5052
  }
5007
5053
  },
5054
+ {
5055
+ "pkg": "gcp",
5056
+ "mod": "iap/tunnelDestGroup",
5057
+ "fqn": "pulumi_gcp.iap",
5058
+ "classes": {
5059
+ "gcp:iap/tunnelDestGroup:TunnelDestGroup": "TunnelDestGroup"
5060
+ }
5061
+ },
5062
+ {
5063
+ "pkg": "gcp",
5064
+ "mod": "iap/tunnelDestGroupIamBinding",
5065
+ "fqn": "pulumi_gcp.iap",
5066
+ "classes": {
5067
+ "gcp:iap/tunnelDestGroupIamBinding:TunnelDestGroupIamBinding": "TunnelDestGroupIamBinding"
5068
+ }
5069
+ },
5070
+ {
5071
+ "pkg": "gcp",
5072
+ "mod": "iap/tunnelDestGroupIamMember",
5073
+ "fqn": "pulumi_gcp.iap",
5074
+ "classes": {
5075
+ "gcp:iap/tunnelDestGroupIamMember:TunnelDestGroupIamMember": "TunnelDestGroupIamMember"
5076
+ }
5077
+ },
5078
+ {
5079
+ "pkg": "gcp",
5080
+ "mod": "iap/tunnelDestGroupIamPolicy",
5081
+ "fqn": "pulumi_gcp.iap",
5082
+ "classes": {
5083
+ "gcp:iap/tunnelDestGroupIamPolicy:TunnelDestGroupIamPolicy": "TunnelDestGroupIamPolicy"
5084
+ }
5085
+ },
5008
5086
  {
5009
5087
  "pkg": "gcp",
5010
5088
  "mod": "iap/tunnelIamBinding",
@@ -5301,6 +5379,14 @@ _utilities.register(
5301
5379
  "gcp:kms/cryptoKeyVersion:CryptoKeyVersion": "CryptoKeyVersion"
5302
5380
  }
5303
5381
  },
5382
+ {
5383
+ "pkg": "gcp",
5384
+ "mod": "kms/ekmConnection",
5385
+ "fqn": "pulumi_gcp.kms",
5386
+ "classes": {
5387
+ "gcp:kms/ekmConnection:EkmConnection": "EkmConnection"
5388
+ }
5389
+ },
5304
5390
  {
5305
5391
  "pkg": "gcp",
5306
5392
  "mod": "kms/keyRing",
@@ -5765,6 +5851,14 @@ _utilities.register(
5765
5851
  "gcp:networksecurity/firewallEndpoint:FirewallEndpoint": "FirewallEndpoint"
5766
5852
  }
5767
5853
  },
5854
+ {
5855
+ "pkg": "gcp",
5856
+ "mod": "networksecurity/firewallEndpointAssociation",
5857
+ "fqn": "pulumi_gcp.networksecurity",
5858
+ "classes": {
5859
+ "gcp:networksecurity/firewallEndpointAssociation:FirewallEndpointAssociation": "FirewallEndpointAssociation"
5860
+ }
5861
+ },
5768
5862
  {
5769
5863
  "pkg": "gcp",
5770
5864
  "mod": "networksecurity/gatewaySecurityPolicy",
@@ -1618,8 +1618,8 @@ class ServicePerimeterEgressPolicyEgressFromArgs:
1618
1618
  sources: Optional[pulumi.Input[Sequence[pulumi.Input['ServicePerimeterEgressPolicyEgressFromSourceArgs']]]] = None):
1619
1619
  """
1620
1620
  :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this `EgressPolicy`.
1621
- Should be in the format of email address. The email address should
1622
- represent individual user or service account only.
1621
+ Should be in the format of an email address. The email address should
1622
+ represent an individual user, service account, or Google group.
1623
1623
  :param pulumi.Input[str] identity_type: Specifies the type of identities that are allowed access to outside the
1624
1624
  perimeter. If left unspecified, then members of `identities` field will
1625
1625
  be allowed access.
@@ -1643,8 +1643,8 @@ class ServicePerimeterEgressPolicyEgressFromArgs:
1643
1643
  def identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
1644
1644
  """
1645
1645
  A list of identities that are allowed access through this `EgressPolicy`.
1646
- Should be in the format of email address. The email address should
1647
- represent individual user or service account only.
1646
+ Should be in the format of an email address. The email address should
1647
+ represent an individual user, service account, or Google group.
1648
1648
  """
1649
1649
  return pulumi.get(self, "identities")
1650
1650
 
@@ -1891,9 +1891,9 @@ class ServicePerimeterIngressPolicyIngressFromArgs:
1891
1891
  identity_type: Optional[pulumi.Input[str]] = None,
1892
1892
  sources: Optional[pulumi.Input[Sequence[pulumi.Input['ServicePerimeterIngressPolicyIngressFromSourceArgs']]]] = None):
1893
1893
  """
1894
- :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this ingress policy.
1895
- Should be in the format of email address. The email address should represent
1896
- individual user or service account only.
1894
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this `IngressPolicy`.
1895
+ Should be in the format of an email address. The email address should represent
1896
+ an individual user, service account, or Google group.
1897
1897
  :param pulumi.Input[str] identity_type: Specifies the type of identities that are allowed access from outside the
1898
1898
  perimeter. If left unspecified, then members of `identities` field will be
1899
1899
  allowed access.
@@ -1912,9 +1912,9 @@ class ServicePerimeterIngressPolicyIngressFromArgs:
1912
1912
  @pulumi.getter
1913
1913
  def identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
1914
1914
  """
1915
- A list of identities that are allowed access through this ingress policy.
1916
- Should be in the format of email address. The email address should represent
1917
- individual user or service account only.
1915
+ A list of identities that are allowed access through this `IngressPolicy`.
1916
+ Should be in the format of an email address. The email address should represent
1917
+ an individual user, service account, or Google group.
1918
1918
  """
1919
1919
  return pulumi.get(self, "identities")
1920
1920
 
@@ -2371,9 +2371,10 @@ class ServicePerimeterSpecEgressPolicyEgressFromArgs:
2371
2371
  source_restriction: Optional[pulumi.Input[str]] = None,
2372
2372
  sources: Optional[pulumi.Input[Sequence[pulumi.Input['ServicePerimeterSpecEgressPolicyEgressFromSourceArgs']]]] = None):
2373
2373
  """
2374
- :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this `EgressPolicy`.
2375
- Should be in the format of email address. The email address should
2376
- represent individual user or service account only.
2374
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: 'A list of identities that are allowed access through this `EgressPolicy`.
2375
+ To specify an identity or identity group, use the IAM v1
2376
+ format specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
2377
+ The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
2377
2378
  :param pulumi.Input[str] identity_type: Specifies the type of identities that are allowed access to outside the
2378
2379
  perimeter. If left unspecified, then members of `identities` field will
2379
2380
  be allowed access.
@@ -2396,9 +2397,10 @@ class ServicePerimeterSpecEgressPolicyEgressFromArgs:
2396
2397
  @pulumi.getter
2397
2398
  def identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
2398
2399
  """
2399
- A list of identities that are allowed access through this `EgressPolicy`.
2400
- Should be in the format of email address. The email address should
2401
- represent individual user or service account only.
2400
+ 'A list of identities that are allowed access through this `EgressPolicy`.
2401
+ To specify an identity or identity group, use the IAM v1
2402
+ format specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
2403
+ The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
2402
2404
  """
2403
2405
  return pulumi.get(self, "identities")
2404
2406
 
@@ -2692,9 +2694,10 @@ class ServicePerimeterSpecIngressPolicyIngressFromArgs:
2692
2694
  identity_type: Optional[pulumi.Input[str]] = None,
2693
2695
  sources: Optional[pulumi.Input[Sequence[pulumi.Input['ServicePerimeterSpecIngressPolicyIngressFromSourceArgs']]]] = None):
2694
2696
  """
2695
- :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this ingress policy.
2696
- Should be in the format of email address. The email address should represent
2697
- individual user or service account only.
2697
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: 'A list of identities that are allowed access through this `IngressPolicy`.
2698
+ To specify an identity or identity group, use the IAM v1
2699
+ format specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
2700
+ The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
2698
2701
  :param pulumi.Input[str] identity_type: Specifies the type of identities that are allowed access from outside the
2699
2702
  perimeter. If left unspecified, then members of `identities` field will be
2700
2703
  allowed access.
@@ -2713,9 +2716,10 @@ class ServicePerimeterSpecIngressPolicyIngressFromArgs:
2713
2716
  @pulumi.getter
2714
2717
  def identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
2715
2718
  """
2716
- A list of identities that are allowed access through this ingress policy.
2717
- Should be in the format of email address. The email address should represent
2718
- individual user or service account only.
2719
+ 'A list of identities that are allowed access through this `IngressPolicy`.
2720
+ To specify an identity or identity group, use the IAM v1
2721
+ format specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
2722
+ The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
2719
2723
  """
2720
2724
  return pulumi.get(self, "identities")
2721
2725
 
@@ -3201,9 +3205,10 @@ class ServicePerimeterStatusEgressPolicyEgressFromArgs:
3201
3205
  source_restriction: Optional[pulumi.Input[str]] = None,
3202
3206
  sources: Optional[pulumi.Input[Sequence[pulumi.Input['ServicePerimeterStatusEgressPolicyEgressFromSourceArgs']]]] = None):
3203
3207
  """
3204
- :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this `EgressPolicy`.
3205
- Should be in the format of email address. The email address should
3206
- represent individual user or service account only.
3208
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: 'A list of identities that are allowed access through this `EgressPolicy`.
3209
+ To specify an identity or identity group, use the IAM v1
3210
+ format specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
3211
+ The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
3207
3212
  :param pulumi.Input[str] identity_type: Specifies the type of identities that are allowed access to outside the
3208
3213
  perimeter. If left unspecified, then members of `identities` field will
3209
3214
  be allowed access.
@@ -3226,9 +3231,10 @@ class ServicePerimeterStatusEgressPolicyEgressFromArgs:
3226
3231
  @pulumi.getter
3227
3232
  def identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
3228
3233
  """
3229
- A list of identities that are allowed access through this `EgressPolicy`.
3230
- Should be in the format of email address. The email address should
3231
- represent individual user or service account only.
3234
+ 'A list of identities that are allowed access through this `EgressPolicy`.
3235
+ To specify an identity or identity group, use the IAM v1
3236
+ format specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
3237
+ The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
3232
3238
  """
3233
3239
  return pulumi.get(self, "identities")
3234
3240
 
@@ -3522,9 +3528,10 @@ class ServicePerimeterStatusIngressPolicyIngressFromArgs:
3522
3528
  identity_type: Optional[pulumi.Input[str]] = None,
3523
3529
  sources: Optional[pulumi.Input[Sequence[pulumi.Input['ServicePerimeterStatusIngressPolicyIngressFromSourceArgs']]]] = None):
3524
3530
  """
3525
- :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this ingress policy.
3526
- Should be in the format of email address. The email address should represent
3527
- individual user or service account only.
3531
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: 'A list of identities that are allowed access through this `IngressPolicy`.
3532
+ To specify an identity or identity group, use the IAM v1
3533
+ format specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
3534
+ The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
3528
3535
  :param pulumi.Input[str] identity_type: Specifies the type of identities that are allowed access from outside the
3529
3536
  perimeter. If left unspecified, then members of `identities` field will be
3530
3537
  allowed access.
@@ -3543,9 +3550,10 @@ class ServicePerimeterStatusIngressPolicyIngressFromArgs:
3543
3550
  @pulumi.getter
3544
3551
  def identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
3545
3552
  """
3546
- A list of identities that are allowed access through this ingress policy.
3547
- Should be in the format of email address. The email address should represent
3548
- individual user or service account only.
3553
+ 'A list of identities that are allowed access through this `IngressPolicy`.
3554
+ To specify an identity or identity group, use the IAM v1
3555
+ format specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
3556
+ The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
3549
3557
  """
3550
3558
  return pulumi.get(self, "identities")
3551
3559
 
@@ -4250,9 +4258,10 @@ class ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromArgs:
4250
4258
  source_restriction: Optional[pulumi.Input[str]] = None,
4251
4259
  sources: Optional[pulumi.Input[Sequence[pulumi.Input['ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArgs']]]] = None):
4252
4260
  """
4253
- :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this `EgressPolicy`.
4254
- Should be in the format of email address. The email address should
4255
- represent individual user or service account only.
4261
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: 'A list of identities that are allowed access through this `EgressPolicy`.
4262
+ To specify an identity or identity group, use the IAM v1 format
4263
+ specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
4264
+ The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
4256
4265
  :param pulumi.Input[str] identity_type: Specifies the type of identities that are allowed access to outside the
4257
4266
  perimeter. If left unspecified, then members of `identities` field will
4258
4267
  be allowed access.
@@ -4275,9 +4284,10 @@ class ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromArgs:
4275
4284
  @pulumi.getter
4276
4285
  def identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
4277
4286
  """
4278
- A list of identities that are allowed access through this `EgressPolicy`.
4279
- Should be in the format of email address. The email address should
4280
- represent individual user or service account only.
4287
+ 'A list of identities that are allowed access through this `EgressPolicy`.
4288
+ To specify an identity or identity group, use the IAM v1 format
4289
+ specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
4290
+ The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
4281
4291
  """
4282
4292
  return pulumi.get(self, "identities")
4283
4293
 
@@ -4571,9 +4581,10 @@ class ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromArgs:
4571
4581
  identity_type: Optional[pulumi.Input[str]] = None,
4572
4582
  sources: Optional[pulumi.Input[Sequence[pulumi.Input['ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArgs']]]] = None):
4573
4583
  """
4574
- :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this ingress policy.
4575
- Should be in the format of email address. The email address should represent
4576
- individual user or service account only.
4584
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: 'A list of identities that are allowed access through this `IngressPolicy`.
4585
+ To specify an identity or identity group, use the IAM v1 format
4586
+ specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
4587
+ The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
4577
4588
  :param pulumi.Input[str] identity_type: Specifies the type of identities that are allowed access from outside the
4578
4589
  perimeter. If left unspecified, then members of `identities` field will be
4579
4590
  allowed access.
@@ -4592,9 +4603,10 @@ class ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromArgs:
4592
4603
  @pulumi.getter
4593
4604
  def identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
4594
4605
  """
4595
- A list of identities that are allowed access through this ingress policy.
4596
- Should be in the format of email address. The email address should represent
4597
- individual user or service account only.
4606
+ 'A list of identities that are allowed access through this `IngressPolicy`.
4607
+ To specify an identity or identity group, use the IAM v1 format
4608
+ specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
4609
+ The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
4598
4610
  """
4599
4611
  return pulumi.get(self, "identities")
4600
4612
 
@@ -5080,9 +5092,10 @@ class ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromArgs:
5080
5092
  source_restriction: Optional[pulumi.Input[str]] = None,
5081
5093
  sources: Optional[pulumi.Input[Sequence[pulumi.Input['ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArgs']]]] = None):
5082
5094
  """
5083
- :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this `EgressPolicy`.
5084
- Should be in the format of email address. The email address should
5085
- represent individual user or service account only.
5095
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: 'A list of identities that are allowed access through this `EgressPolicy`.
5096
+ To specify an identity or identity group, use the IAM v1 format
5097
+ specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
5098
+ The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
5086
5099
  :param pulumi.Input[str] identity_type: Specifies the type of identities that are allowed access to outside the
5087
5100
  perimeter. If left unspecified, then members of `identities` field will
5088
5101
  be allowed access.
@@ -5105,9 +5118,10 @@ class ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromArgs:
5105
5118
  @pulumi.getter
5106
5119
  def identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
5107
5120
  """
5108
- A list of identities that are allowed access through this `EgressPolicy`.
5109
- Should be in the format of email address. The email address should
5110
- represent individual user or service account only.
5121
+ 'A list of identities that are allowed access through this `EgressPolicy`.
5122
+ To specify an identity or identity group, use the IAM v1 format
5123
+ specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
5124
+ The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
5111
5125
  """
5112
5126
  return pulumi.get(self, "identities")
5113
5127
 
@@ -5401,9 +5415,10 @@ class ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromArgs:
5401
5415
  identity_type: Optional[pulumi.Input[str]] = None,
5402
5416
  sources: Optional[pulumi.Input[Sequence[pulumi.Input['ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArgs']]]] = None):
5403
5417
  """
5404
- :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this ingress policy.
5405
- Should be in the format of email address. The email address should represent
5406
- individual user or service account only.
5418
+ :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: 'A list of identities that are allowed access through this `IngressPolicy`.
5419
+ To specify an identity or identity group, use the IAM v1 format
5420
+ specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
5421
+ The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
5407
5422
  :param pulumi.Input[str] identity_type: Specifies the type of identities that are allowed access from outside the
5408
5423
  perimeter. If left unspecified, then members of `identities` field will be
5409
5424
  allowed access.
@@ -5422,9 +5437,10 @@ class ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromArgs:
5422
5437
  @pulumi.getter
5423
5438
  def identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
5424
5439
  """
5425
- A list of identities that are allowed access through this ingress policy.
5426
- Should be in the format of email address. The email address should represent
5427
- individual user or service account only.
5440
+ 'A list of identities that are allowed access through this `IngressPolicy`.
5441
+ To specify an identity or identity group, use the IAM v1 format
5442
+ specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
5443
+ The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
5428
5444
  """
5429
5445
  return pulumi.get(self, "identities")
5430
5446