pulumi-gcp 7.15.0a1711038061__py3-none-any.whl → 7.16.0__py3-none-any.whl

pulumi_gcp/__init__.py

@@ -24,6 +24,8 @@ if typing.TYPE_CHECKING:
     apigee = __apigee
     import pulumi_gcp.appengine as __appengine
     appengine = __appengine
+    import pulumi_gcp.apphub as __apphub
+    apphub = __apphub
     import pulumi_gcp.artifactregistry as __artifactregistry
     artifactregistry = __artifactregistry
     import pulumi_gcp.assuredworkloads as __assuredworkloads
@@ -70,6 +72,8 @@ if typing.TYPE_CHECKING:
     cloudidentity = __cloudidentity
     import pulumi_gcp.cloudids as __cloudids
     cloudids = __cloudids
+    import pulumi_gcp.cloudquota as __cloudquota
+    cloudquota = __cloudquota
     import pulumi_gcp.cloudrun as __cloudrun
     cloudrun = __cloudrun
     import pulumi_gcp.cloudrunv2 as __cloudrunv2
@@ -246,6 +250,7 @@ else:
     apigateway = _utilities.lazy_import('pulumi_gcp.apigateway')
     apigee = _utilities.lazy_import('pulumi_gcp.apigee')
     appengine = _utilities.lazy_import('pulumi_gcp.appengine')
+    apphub = _utilities.lazy_import('pulumi_gcp.apphub')
     artifactregistry = _utilities.lazy_import('pulumi_gcp.artifactregistry')
     assuredworkloads = _utilities.lazy_import('pulumi_gcp.assuredworkloads')
     backupdisasterrecovery = _utilities.lazy_import('pulumi_gcp.backupdisasterrecovery')
@@ -269,6 +274,7 @@ else:
     cloudfunctionsv2 = _utilities.lazy_import('pulumi_gcp.cloudfunctionsv2')
     cloudidentity = _utilities.lazy_import('pulumi_gcp.cloudidentity')
     cloudids = _utilities.lazy_import('pulumi_gcp.cloudids')
+    cloudquota = _utilities.lazy_import('pulumi_gcp.cloudquota')
     cloudrun = _utilities.lazy_import('pulumi_gcp.cloudrun')
     cloudrunv2 = _utilities.lazy_import('pulumi_gcp.cloudrunv2')
     cloudscheduler = _utilities.lazy_import('pulumi_gcp.cloudscheduler')
@@ -453,6 +459,14 @@ _utilities.register(
    "gcp:accesscontextmanager/servicePerimeter:ServicePerimeter": "ServicePerimeter"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "accesscontextmanager/servicePerimeterDryRunResource",
+  "fqn": "pulumi_gcp.accesscontextmanager",
+  "classes": {
+   "gcp:accesscontextmanager/servicePerimeterDryRunResource:ServicePerimeterDryRunResource": "ServicePerimeterDryRunResource"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "accesscontextmanager/servicePerimeterEgressPolicy",
@@ -877,6 +891,38 @@ _utilities.register(
    "gcp:appengine/standardAppVersion:StandardAppVersion": "StandardAppVersion"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "apphub/application",
+  "fqn": "pulumi_gcp.apphub",
+  "classes": {
+   "gcp:apphub/application:Application": "Application"
+  }
+ },
+ {
+  "pkg": "gcp",
+  "mod": "apphub/service",
+  "fqn": "pulumi_gcp.apphub",
+  "classes": {
+   "gcp:apphub/service:Service": "Service"
+  }
+ },
+ {
+  "pkg": "gcp",
+  "mod": "apphub/serviceProjectAttachment",
+  "fqn": "pulumi_gcp.apphub",
+  "classes": {
+   "gcp:apphub/serviceProjectAttachment:ServiceProjectAttachment": "ServiceProjectAttachment"
+  }
+ },
+ {
+  "pkg": "gcp",
+  "mod": "apphub/workload",
+  "fqn": "pulumi_gcp.apphub",
+  "classes": {
+   "gcp:apphub/workload:Workload": "Workload"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "artifactregistry/repository",
@@ -4261,6 +4307,14 @@ _utilities.register(
    "gcp:firebase/appCheckDebugToken:AppCheckDebugToken": "AppCheckDebugToken"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "firebase/appCheckDeviceCheckConfig",
+  "fqn": "pulumi_gcp.firebase",
+  "classes": {
+   "gcp:firebase/appCheckDeviceCheckConfig:AppCheckDeviceCheckConfig": "AppCheckDeviceCheckConfig"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "firebase/appCheckPlayIntegrityConfig",
@@ -5005,6 +5059,38 @@ _utilities.register(
    "gcp:iap/client:Client": "Client"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "iap/tunnelDestGroup",
+  "fqn": "pulumi_gcp.iap",
+  "classes": {
+   "gcp:iap/tunnelDestGroup:TunnelDestGroup": "TunnelDestGroup"
+  }
+ },
+ {
+  "pkg": "gcp",
+  "mod": "iap/tunnelDestGroupIamBinding",
+  "fqn": "pulumi_gcp.iap",
+  "classes": {
+   "gcp:iap/tunnelDestGroupIamBinding:TunnelDestGroupIamBinding": "TunnelDestGroupIamBinding"
+  }
+ },
+ {
+  "pkg": "gcp",
+  "mod": "iap/tunnelDestGroupIamMember",
+  "fqn": "pulumi_gcp.iap",
+  "classes": {
+   "gcp:iap/tunnelDestGroupIamMember:TunnelDestGroupIamMember": "TunnelDestGroupIamMember"
+  }
+ },
+ {
+  "pkg": "gcp",
+  "mod": "iap/tunnelDestGroupIamPolicy",
+  "fqn": "pulumi_gcp.iap",
+  "classes": {
+   "gcp:iap/tunnelDestGroupIamPolicy:TunnelDestGroupIamPolicy": "TunnelDestGroupIamPolicy"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "iap/tunnelIamBinding",
@@ -5301,6 +5387,14 @@ _utilities.register(
    "gcp:kms/cryptoKeyVersion:CryptoKeyVersion": "CryptoKeyVersion"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "kms/ekmConnection",
+  "fqn": "pulumi_gcp.kms",
+  "classes": {
+   "gcp:kms/ekmConnection:EkmConnection": "EkmConnection"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "kms/keyRing",
@@ -5765,6 +5859,14 @@ _utilities.register(
    "gcp:networksecurity/firewallEndpoint:FirewallEndpoint": "FirewallEndpoint"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "networksecurity/firewallEndpointAssociation",
+  "fqn": "pulumi_gcp.networksecurity",
+  "classes": {
+   "gcp:networksecurity/firewallEndpointAssociation:FirewallEndpointAssociation": "FirewallEndpointAssociation"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "networksecurity/gatewaySecurityPolicy",

pulumi_gcp/accesscontextmanager/__init__.py

@@ -18,6 +18,7 @@ from .gcp_user_access_binding import *
 from .get_access_policy_iam_policy import *
 from .ingress_policy import *
 from .service_perimeter import *
+from .service_perimeter_dry_run_resource import *
 from .service_perimeter_egress_policy import *
 from .service_perimeter_ingress_policy import *
 from .service_perimeter_resource import *

pulumi_gcp/accesscontextmanager/_inputs.py

@@ -1618,8 +1618,8 @@ class ServicePerimeterEgressPolicyEgressFromArgs:
                  sources: Optional[pulumi.Input[Sequence[pulumi.Input['ServicePerimeterEgressPolicyEgressFromSourceArgs']]]] = None):
         """
         :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this `EgressPolicy`.
-               Should be in the format of email address. The email address should
-               represent individual user or service account only.
+               Should be in the format of an email address. The email address should
+               represent an individual user, service account, or Google group.
         :param pulumi.Input[str] identity_type: Specifies the type of identities that are allowed access to outside the
                perimeter. If left unspecified, then members of `identities` field will
                be allowed access.
@@ -1643,8 +1643,8 @@ class ServicePerimeterEgressPolicyEgressFromArgs:
     def identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
         A list of identities that are allowed access through this `EgressPolicy`.
-        Should be in the format of email address. The email address should
-        represent individual user or service account only.
+        Should be in the format of an email address. The email address should
+        represent an individual user, service account, or Google group.
         """
         return pulumi.get(self, "identities")
 
@@ -1891,9 +1891,9 @@ class ServicePerimeterIngressPolicyIngressFromArgs:
                  identity_type: Optional[pulumi.Input[str]] = None,
                  sources: Optional[pulumi.Input[Sequence[pulumi.Input['ServicePerimeterIngressPolicyIngressFromSourceArgs']]]] = None):
         """
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this ingress policy.
-               Should be in the format of email address. The email address should represent
-               individual user or service account only.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this `IngressPolicy`.
+               Should be in the format of an email address. The email address should represent
+               an individual user, service account, or Google group.
         :param pulumi.Input[str] identity_type: Specifies the type of identities that are allowed access from outside the
                perimeter. If left unspecified, then members of `identities` field will be
                allowed access.
@@ -1912,9 +1912,9 @@ class ServicePerimeterIngressPolicyIngressFromArgs:
     @pulumi.getter
     def identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        A list of identities that are allowed access through this ingress policy.
-        Should be in the format of email address. The email address should represent
-        individual user or service account only.
+        A list of identities that are allowed access through this `IngressPolicy`.
+        Should be in the format of an email address. The email address should represent
+        an individual user, service account, or Google group.
         """
         return pulumi.get(self, "identities")
 
@@ -2371,9 +2371,10 @@ class ServicePerimeterSpecEgressPolicyEgressFromArgs:
                  source_restriction: Optional[pulumi.Input[str]] = None,
                  sources: Optional[pulumi.Input[Sequence[pulumi.Input['ServicePerimeterSpecEgressPolicyEgressFromSourceArgs']]]] = None):
         """
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this `EgressPolicy`.
-               Should be in the format of email address. The email address should
-               represent individual user or service account only.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: 'A list of identities that are allowed access through this `EgressPolicy`.
+               To specify an identity or identity group, use the IAM v1
+               format specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
+               The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
         :param pulumi.Input[str] identity_type: Specifies the type of identities that are allowed access to outside the
                perimeter. If left unspecified, then members of `identities` field will
                be allowed access.
@@ -2396,9 +2397,10 @@ class ServicePerimeterSpecEgressPolicyEgressFromArgs:
     @pulumi.getter
     def identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        A list of identities that are allowed access through this `EgressPolicy`.
-        Should be in the format of email address. The email address should
-        represent individual user or service account only.
+        'A list of identities that are allowed access through this `EgressPolicy`.
+        To specify an identity or identity group, use the IAM v1
+        format specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
+        The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
         """
         return pulumi.get(self, "identities")
 
@@ -2692,9 +2694,10 @@ class ServicePerimeterSpecIngressPolicyIngressFromArgs:
                  identity_type: Optional[pulumi.Input[str]] = None,
                  sources: Optional[pulumi.Input[Sequence[pulumi.Input['ServicePerimeterSpecIngressPolicyIngressFromSourceArgs']]]] = None):
         """
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this ingress policy.
-               Should be in the format of email address. The email address should represent
-               individual user or service account only.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: 'A list of identities that are allowed access through this `IngressPolicy`.
+               To specify an identity or identity group, use the IAM v1
+               format specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
+               The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
         :param pulumi.Input[str] identity_type: Specifies the type of identities that are allowed access from outside the
                perimeter. If left unspecified, then members of `identities` field will be
                allowed access.
@@ -2713,9 +2716,10 @@ class ServicePerimeterSpecIngressPolicyIngressFromArgs:
     @pulumi.getter
     def identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        A list of identities that are allowed access through this ingress policy.
-        Should be in the format of email address. The email address should represent
-        individual user or service account only.
+        'A list of identities that are allowed access through this `IngressPolicy`.
+        To specify an identity or identity group, use the IAM v1
+        format specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
+        The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
         """
         return pulumi.get(self, "identities")
 
@@ -3201,9 +3205,10 @@ class ServicePerimeterStatusEgressPolicyEgressFromArgs:
                  source_restriction: Optional[pulumi.Input[str]] = None,
                  sources: Optional[pulumi.Input[Sequence[pulumi.Input['ServicePerimeterStatusEgressPolicyEgressFromSourceArgs']]]] = None):
         """
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this `EgressPolicy`.
-               Should be in the format of email address. The email address should
-               represent individual user or service account only.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: 'A list of identities that are allowed access through this `EgressPolicy`.
+               To specify an identity or identity group, use the IAM v1
+               format specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
+               The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
         :param pulumi.Input[str] identity_type: Specifies the type of identities that are allowed access to outside the
                perimeter. If left unspecified, then members of `identities` field will
                be allowed access.
@@ -3226,9 +3231,10 @@ class ServicePerimeterStatusEgressPolicyEgressFromArgs:
     @pulumi.getter
     def identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        A list of identities that are allowed access through this `EgressPolicy`.
-        Should be in the format of email address. The email address should
-        represent individual user or service account only.
+        'A list of identities that are allowed access through this `EgressPolicy`.
+        To specify an identity or identity group, use the IAM v1
+        format specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
+        The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
         """
         return pulumi.get(self, "identities")
 
@@ -3522,9 +3528,10 @@ class ServicePerimeterStatusIngressPolicyIngressFromArgs:
                  identity_type: Optional[pulumi.Input[str]] = None,
                  sources: Optional[pulumi.Input[Sequence[pulumi.Input['ServicePerimeterStatusIngressPolicyIngressFromSourceArgs']]]] = None):
         """
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this ingress policy.
-               Should be in the format of email address. The email address should represent
-               individual user or service account only.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: 'A list of identities that are allowed access through this `IngressPolicy`.
+               To specify an identity or identity group, use the IAM v1
+               format specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
+               The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
         :param pulumi.Input[str] identity_type: Specifies the type of identities that are allowed access from outside the
                perimeter. If left unspecified, then members of `identities` field will be
                allowed access.
@@ -3543,9 +3550,10 @@ class ServicePerimeterStatusIngressPolicyIngressFromArgs:
     @pulumi.getter
     def identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        A list of identities that are allowed access through this ingress policy.
-        Should be in the format of email address. The email address should represent
-        individual user or service account only.
+        'A list of identities that are allowed access through this `IngressPolicy`.
+        To specify an identity or identity group, use the IAM v1
+        format specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
+        The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
         """
         return pulumi.get(self, "identities")
 
@@ -4250,9 +4258,10 @@ class ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromArgs:
                  source_restriction: Optional[pulumi.Input[str]] = None,
                  sources: Optional[pulumi.Input[Sequence[pulumi.Input['ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromSourceArgs']]]] = None):
         """
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this `EgressPolicy`.
-               Should be in the format of email address. The email address should
-               represent individual user or service account only.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: 'A list of identities that are allowed access through this `EgressPolicy`.
+               To specify an identity or identity group, use the IAM v1 format
+               specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
+               The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
         :param pulumi.Input[str] identity_type: Specifies the type of identities that are allowed access to outside the
                perimeter. If left unspecified, then members of `identities` field will
                be allowed access.
@@ -4275,9 +4284,10 @@ class ServicePerimetersServicePerimeterSpecEgressPolicyEgressFromArgs:
     @pulumi.getter
     def identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        A list of identities that are allowed access through this `EgressPolicy`.
-        Should be in the format of email address. The email address should
-        represent individual user or service account only.
+        'A list of identities that are allowed access through this `EgressPolicy`.
+        To specify an identity or identity group, use the IAM v1 format
+        specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
+        The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
         """
         return pulumi.get(self, "identities")
 
@@ -4571,9 +4581,10 @@ class ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromArgs:
                  identity_type: Optional[pulumi.Input[str]] = None,
                  sources: Optional[pulumi.Input[Sequence[pulumi.Input['ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromSourceArgs']]]] = None):
         """
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this ingress policy.
-               Should be in the format of email address. The email address should represent
-               individual user or service account only.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: 'A list of identities that are allowed access through this `IngressPolicy`.
+               To specify an identity or identity group, use the IAM v1 format
+               specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
+               The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
         :param pulumi.Input[str] identity_type: Specifies the type of identities that are allowed access from outside the
                perimeter. If left unspecified, then members of `identities` field will be
                allowed access.
@@ -4592,9 +4603,10 @@ class ServicePerimetersServicePerimeterSpecIngressPolicyIngressFromArgs:
     @pulumi.getter
     def identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        A list of identities that are allowed access through this ingress policy.
-        Should be in the format of email address. The email address should represent
-        individual user or service account only.
+        'A list of identities that are allowed access through this `IngressPolicy`.
+        To specify an identity or identity group, use the IAM v1 format
+        specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
+        The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
         """
         return pulumi.get(self, "identities")
 
@@ -5080,9 +5092,10 @@ class ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromArgs:
                  source_restriction: Optional[pulumi.Input[str]] = None,
                  sources: Optional[pulumi.Input[Sequence[pulumi.Input['ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromSourceArgs']]]] = None):
         """
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this `EgressPolicy`.
-               Should be in the format of email address. The email address should
-               represent individual user or service account only.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: 'A list of identities that are allowed access through this `EgressPolicy`.
+               To specify an identity or identity group, use the IAM v1 format
+               specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
+               The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
         :param pulumi.Input[str] identity_type: Specifies the type of identities that are allowed access to outside the
                perimeter. If left unspecified, then members of `identities` field will
                be allowed access.
@@ -5105,9 +5118,10 @@ class ServicePerimetersServicePerimeterStatusEgressPolicyEgressFromArgs:
     @pulumi.getter
     def identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        A list of identities that are allowed access through this `EgressPolicy`.
-        Should be in the format of email address. The email address should
-        represent individual user or service account only.
+        'A list of identities that are allowed access through this `EgressPolicy`.
+        To specify an identity or identity group, use the IAM v1 format
+        specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
+        The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
         """
         return pulumi.get(self, "identities")
 
@@ -5401,9 +5415,10 @@ class ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromArgs:
                  identity_type: Optional[pulumi.Input[str]] = None,
                  sources: Optional[pulumi.Input[Sequence[pulumi.Input['ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromSourceArgs']]]] = None):
         """
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: A list of identities that are allowed access through this ingress policy.
-               Should be in the format of email address. The email address should represent
-               individual user or service account only.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] identities: 'A list of identities that are allowed access through this `IngressPolicy`.
+               To specify an identity or identity group, use the IAM v1 format
+               specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
+               The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
         :param pulumi.Input[str] identity_type: Specifies the type of identities that are allowed access from outside the
                perimeter. If left unspecified, then members of `identities` field will be
                allowed access.
@@ -5422,9 +5437,10 @@ class ServicePerimetersServicePerimeterStatusIngressPolicyIngressFromArgs:
     @pulumi.getter
     def identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        A list of identities that are allowed access through this ingress policy.
-        Should be in the format of email address. The email address should represent
-        individual user or service account only.
+        'A list of identities that are allowed access through this `IngressPolicy`.
+        To specify an identity or identity group, use the IAM v1 format
+        specified [here](https://cloud.google.com/iam/docs/principal-identifiers.md#v1).
+        The following prefixes are supprted: user, group, serviceAccount, principal, and principalSet.'
         """
         return pulumi.get(self, "identities")