pulumi-gcp 7.15.0a1711038061__py3-none-any.whl → 7.16.0__py3-none-any.whl

pulumi_gcp/pubsub/topic.py

@@ -16,6 +16,7 @@ __all__ = ['TopicArgs', 'Topic']
 @pulumi.input_type
 class TopicArgs:
     def __init__(__self__, *,
+                 ingestion_data_source_settings: Optional[pulumi.Input['TopicIngestionDataSourceSettingsArgs']] = None,
                  kms_key_name: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  message_retention_duration: Optional[pulumi.Input[str]] = None,
@@ -25,6 +26,8 @@ class TopicArgs:
                  schema_settings: Optional[pulumi.Input['TopicSchemaSettingsArgs']] = None):
         """
         The set of arguments for constructing a Topic resource.
+        :param pulumi.Input['TopicIngestionDataSourceSettingsArgs'] ingestion_data_source_settings: Settings for ingestion from a data source into this topic.
+               Structure is documented below.
         :param pulumi.Input[str] kms_key_name: The resource name of the Cloud KMS CryptoKey to be used to protect access
                to messages published on this topic. Your project's PubSub service account
                (`service-{{PROJECT_NUMBER}}@gcp-sa-pubsub.iam.gserviceaccount.com`) must have
@@ -55,6 +58,8 @@ class TopicArgs:
         :param pulumi.Input['TopicSchemaSettingsArgs'] schema_settings: Settings for validating messages published against a schema.
                Structure is documented below.
         """
+        if ingestion_data_source_settings is not None:
+            pulumi.set(__self__, "ingestion_data_source_settings", ingestion_data_source_settings)
         if kms_key_name is not None:
             pulumi.set(__self__, "kms_key_name", kms_key_name)
         if labels is not None:
@@ -70,6 +75,19 @@ class TopicArgs:
         if schema_settings is not None:
             pulumi.set(__self__, "schema_settings", schema_settings)
 
+    @property
+    @pulumi.getter(name="ingestionDataSourceSettings")
+    def ingestion_data_source_settings(self) -> Optional[pulumi.Input['TopicIngestionDataSourceSettingsArgs']]:
+        """
+        Settings for ingestion from a data source into this topic.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "ingestion_data_source_settings")
+
+    @ingestion_data_source_settings.setter
+    def ingestion_data_source_settings(self, value: Optional[pulumi.Input['TopicIngestionDataSourceSettingsArgs']]):
+        pulumi.set(self, "ingestion_data_source_settings", value)
+
     @property
     @pulumi.getter(name="kmsKeyName")
     def kms_key_name(self) -> Optional[pulumi.Input[str]]:
@@ -181,6 +199,7 @@ class TopicArgs:
 class _TopicState:
     def __init__(__self__, *,
                  effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
+                 ingestion_data_source_settings: Optional[pulumi.Input['TopicIngestionDataSourceSettingsArgs']] = None,
                  kms_key_name: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  message_retention_duration: Optional[pulumi.Input[str]] = None,
@@ -192,6 +211,8 @@ class _TopicState:
         """
         Input properties used for looking up and filtering Topic resources.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
+        :param pulumi.Input['TopicIngestionDataSourceSettingsArgs'] ingestion_data_source_settings: Settings for ingestion from a data source into this topic.
+               Structure is documented below.
         :param pulumi.Input[str] kms_key_name: The resource name of the Cloud KMS CryptoKey to be used to protect access
                to messages published on this topic. Your project's PubSub service account
                (`service-{{PROJECT_NUMBER}}@gcp-sa-pubsub.iam.gserviceaccount.com`) must have
@@ -226,6 +247,8 @@ class _TopicState:
         """
         if effective_labels is not None:
             pulumi.set(__self__, "effective_labels", effective_labels)
+        if ingestion_data_source_settings is not None:
+            pulumi.set(__self__, "ingestion_data_source_settings", ingestion_data_source_settings)
         if kms_key_name is not None:
             pulumi.set(__self__, "kms_key_name", kms_key_name)
         if labels is not None:
@@ -255,6 +278,19 @@ class _TopicState:
     def effective_labels(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
         pulumi.set(self, "effective_labels", value)
 
+    @property
+    @pulumi.getter(name="ingestionDataSourceSettings")
+    def ingestion_data_source_settings(self) -> Optional[pulumi.Input['TopicIngestionDataSourceSettingsArgs']]:
+        """
+        Settings for ingestion from a data source into this topic.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "ingestion_data_source_settings")
+
+    @ingestion_data_source_settings.setter
+    def ingestion_data_source_settings(self, value: Optional[pulumi.Input['TopicIngestionDataSourceSettingsArgs']]):
+        pulumi.set(self, "ingestion_data_source_settings", value)
+
     @property
     @pulumi.getter(name="kmsKeyName")
     def kms_key_name(self) -> Optional[pulumi.Input[str]]:
@@ -380,6 +416,7 @@ class Topic(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 ingestion_data_source_settings: Optional[pulumi.Input[pulumi.InputType['TopicIngestionDataSourceSettingsArgs']]] = None,
                  kms_key_name: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  message_retention_duration: Optional[pulumi.Input[str]] = None,
@@ -482,6 +519,25 @@ class Topic(pulumi.CustomResource):
             ))
         ```
         <!--End PulumiCodeChooser -->
+        ### Pubsub Topic Ingestion Kinesis
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        example = gcp.pubsub.Topic("example",
+            name="example-topic",
+            ingestion_data_source_settings=gcp.pubsub.TopicIngestionDataSourceSettingsArgs(
+                aws_kinesis=gcp.pubsub.TopicIngestionDataSourceSettingsAwsKinesisArgs(
+                    stream_arn="arn:aws:kinesis:us-west-2:111111111111:stream/fake-stream-name",
+                    consumer_arn="arn:aws:kinesis:us-west-2:111111111111:stream/fake-stream-name/consumer/consumer-1:1111111111",
+                    aws_role_arn="arn:aws:iam::111111111111:role/fake-role-name",
+                    gcp_service_account="fake-service-account@fake-gcp-project.iam.gserviceaccount.com",
+                ),
+            ))
+        ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
@@ -509,6 +565,8 @@ class Topic(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[pulumi.InputType['TopicIngestionDataSourceSettingsArgs']] ingestion_data_source_settings: Settings for ingestion from a data source into this topic.
+               Structure is documented below.
         :param pulumi.Input[str] kms_key_name: The resource name of the Cloud KMS CryptoKey to be used to protect access
                to messages published on this topic. Your project's PubSub service account
                (`service-{{PROJECT_NUMBER}}@gcp-sa-pubsub.iam.gserviceaccount.com`) must have
@@ -639,6 +697,25 @@ class Topic(pulumi.CustomResource):
             ))
         ```
         <!--End PulumiCodeChooser -->
+        ### Pubsub Topic Ingestion Kinesis
+
+        <!--Start PulumiCodeChooser -->
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        example = gcp.pubsub.Topic("example",
+            name="example-topic",
+            ingestion_data_source_settings=gcp.pubsub.TopicIngestionDataSourceSettingsArgs(
+                aws_kinesis=gcp.pubsub.TopicIngestionDataSourceSettingsAwsKinesisArgs(
+                    stream_arn="arn:aws:kinesis:us-west-2:111111111111:stream/fake-stream-name",
+                    consumer_arn="arn:aws:kinesis:us-west-2:111111111111:stream/fake-stream-name/consumer/consumer-1:1111111111",
+                    aws_role_arn="arn:aws:iam::111111111111:role/fake-role-name",
+                    gcp_service_account="fake-service-account@fake-gcp-project.iam.gserviceaccount.com",
+                ),
+            ))
+        ```
+        <!--End PulumiCodeChooser -->
 
         ## Import
 
@@ -679,6 +756,7 @@ class Topic(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 ingestion_data_source_settings: Optional[pulumi.Input[pulumi.InputType['TopicIngestionDataSourceSettingsArgs']]] = None,
                  kms_key_name: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  message_retention_duration: Optional[pulumi.Input[str]] = None,
@@ -695,6 +773,7 @@ class Topic(pulumi.CustomResource):
                 raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
             __props__ = TopicArgs.__new__(TopicArgs)
 
+            __props__.__dict__["ingestion_data_source_settings"] = ingestion_data_source_settings
             __props__.__dict__["kms_key_name"] = kms_key_name
             __props__.__dict__["labels"] = labels
             __props__.__dict__["message_retention_duration"] = message_retention_duration
@@ -717,6 +796,7 @@ class Topic(pulumi.CustomResource):
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
             effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
+            ingestion_data_source_settings: Optional[pulumi.Input[pulumi.InputType['TopicIngestionDataSourceSettingsArgs']]] = None,
             kms_key_name: Optional[pulumi.Input[str]] = None,
             labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
             message_retention_duration: Optional[pulumi.Input[str]] = None,
@@ -733,6 +813,8 @@ class Topic(pulumi.CustomResource):
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
+        :param pulumi.Input[pulumi.InputType['TopicIngestionDataSourceSettingsArgs']] ingestion_data_source_settings: Settings for ingestion from a data source into this topic.
+               Structure is documented below.
         :param pulumi.Input[str] kms_key_name: The resource name of the Cloud KMS CryptoKey to be used to protect access
                to messages published on this topic. Your project's PubSub service account
                (`service-{{PROJECT_NUMBER}}@gcp-sa-pubsub.iam.gserviceaccount.com`) must have
@@ -770,6 +852,7 @@ class Topic(pulumi.CustomResource):
         __props__ = _TopicState.__new__(_TopicState)
 
         __props__.__dict__["effective_labels"] = effective_labels
+        __props__.__dict__["ingestion_data_source_settings"] = ingestion_data_source_settings
         __props__.__dict__["kms_key_name"] = kms_key_name
         __props__.__dict__["labels"] = labels
         __props__.__dict__["message_retention_duration"] = message_retention_duration
@@ -788,6 +871,15 @@ class Topic(pulumi.CustomResource):
         """
         return pulumi.get(self, "effective_labels")
 
+    @property
+    @pulumi.getter(name="ingestionDataSourceSettings")
+    def ingestion_data_source_settings(self) -> pulumi.Output[Optional['outputs.TopicIngestionDataSourceSettings']]:
+        """
+        Settings for ingestion from a data source into this topic.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "ingestion_data_source_settings")
+
     @property
     @pulumi.getter(name="kmsKeyName")
     def kms_key_name(self) -> pulumi.Output[Optional[str]]:

pulumi_gcp/securityposture/posture.py

@@ -357,7 +357,7 @@ class Posture(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         posture1 = gcp.securityposture.Posture("posture1",
-            posture_id="posture_1",
+            posture_id="posture_example",
             parent="organizations/123456789",
             location="global",
             state="ACTIVE",
@@ -511,7 +511,7 @@ class Posture(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         posture1 = gcp.securityposture.Posture("posture1",
-            posture_id="posture_1",
+            posture_id="posture_example",
             parent="organizations/123456789",
             location="global",
             state="ACTIVE",

pulumi_gcp/securityposture/posture_deployment.py

@@ -467,7 +467,7 @@ class PostureDeployment(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        posture1 = gcp.securityposture.Posture("posture1",
+        posture1 = gcp.securityposture.Posture("posture_1",
             posture_id="posture_1",
             parent="organizations/123456789",
             location="global",
@@ -555,7 +555,7 @@ class PostureDeployment(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        posture1 = gcp.securityposture.Posture("posture1",
+        posture1 = gcp.securityposture.Posture("posture_1",
             posture_id="posture_1",
             parent="organizations/123456789",
             location="global",

pulumi_gcp/storage/_inputs.py

@@ -23,6 +23,7 @@ __all__ = [
     'BucketObjectCustomerEncryptionArgs',
     'BucketObjectRetentionArgs',
     'BucketRetentionPolicyArgs',
+    'BucketSoftDeletePolicyArgs',
     'BucketVersioningArgs',
     'BucketWebsiteArgs',
     'DefaultObjectAccessControlProjectTeamArgs',
@@ -787,6 +788,45 @@ class BucketRetentionPolicyArgs:
         pulumi.set(self, "is_locked", value)
 
 
+@pulumi.input_type
+class BucketSoftDeletePolicyArgs:
+    def __init__(__self__, *,
+                 effective_time: Optional[pulumi.Input[str]] = None,
+                 retention_duration_seconds: Optional[pulumi.Input[int]] = None):
+        """
+        :param pulumi.Input[str] effective_time: Server-determined value that indicates the time from which the policy, or one with a greater retention, was effective. This value is in RFC 3339 format.
+        :param pulumi.Input[int] retention_duration_seconds: The duration in seconds that soft-deleted objects in the bucket will be retained and cannot be permanently deleted. Default value is 604800. The value must be in between 604800(7 days) and 7776000(90 days). **Note**: To disable the soft delete policy on a bucket, This field must be set to 0.
+        """
+        if effective_time is not None:
+            pulumi.set(__self__, "effective_time", effective_time)
+        if retention_duration_seconds is not None:
+            pulumi.set(__self__, "retention_duration_seconds", retention_duration_seconds)
+
+    @property
+    @pulumi.getter(name="effectiveTime")
+    def effective_time(self) -> Optional[pulumi.Input[str]]:
+        """
+        Server-determined value that indicates the time from which the policy, or one with a greater retention, was effective. This value is in RFC 3339 format.
+        """
+        return pulumi.get(self, "effective_time")
+
+    @effective_time.setter
+    def effective_time(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "effective_time", value)
+
+    @property
+    @pulumi.getter(name="retentionDurationSeconds")
+    def retention_duration_seconds(self) -> Optional[pulumi.Input[int]]:
+        """
+        The duration in seconds that soft-deleted objects in the bucket will be retained and cannot be permanently deleted. Default value is 604800. The value must be in between 604800(7 days) and 7776000(90 days). **Note**: To disable the soft delete policy on a bucket, This field must be set to 0.
+        """
+        return pulumi.get(self, "retention_duration_seconds")
+
+    @retention_duration_seconds.setter
+    def retention_duration_seconds(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "retention_duration_seconds", value)
+
+
 @pulumi.input_type
 class BucketVersioningArgs:
     def __init__(__self__, *,
@@ -1944,34 +1984,27 @@ class TransferJobTransferSpecAwsS3DataSourceAwsAccessKeyArgs:
 @pulumi.input_type
 class TransferJobTransferSpecAzureBlobStorageDataSourceArgs:
     def __init__(__self__, *,
-                 azure_credentials: pulumi.Input['TransferJobTransferSpecAzureBlobStorageDataSourceAzureCredentialsArgs'],
                  container: pulumi.Input[str],
                  storage_account: pulumi.Input[str],
+                 azure_credentials: Optional[pulumi.Input['TransferJobTransferSpecAzureBlobStorageDataSourceAzureCredentialsArgs']] = None,
+                 credentials_secret: Optional[pulumi.Input[str]] = None,
                  path: Optional[pulumi.Input[str]] = None):
         """
-        :param pulumi.Input['TransferJobTransferSpecAzureBlobStorageDataSourceAzureCredentialsArgs'] azure_credentials: Credentials used to authenticate API requests to Azure block.
         :param pulumi.Input[str] container: The container to transfer from the Azure Storage account.`
         :param pulumi.Input[str] storage_account: The name of the Azure Storage account.
+        :param pulumi.Input['TransferJobTransferSpecAzureBlobStorageDataSourceAzureCredentialsArgs'] azure_credentials: Credentials used to authenticate API requests to Azure block.
+        :param pulumi.Input[str] credentials_secret: Full Resource name of a secret in Secret Manager containing [SAS Credentials in JSON form](https://cloud.google.com/storage-transfer/docs/reference/rest/v1/TransferSpec#azureblobstoragedata:~:text=begin%!w(MISSING)ith%!a(MISSING)%27/%!-(MISSING),credentialsSecret,-string). Service Agent for Storage Transfer must have permissions to access secret. If credentials_secret is specified, do not specify azure_credentials.`,
         :param pulumi.Input[str] path: Root path to transfer objects. Must be an empty string or full path name that ends with a '/'. This field is treated as an object prefix. As such, it should generally not begin with a '/'.
         """
-        pulumi.set(__self__, "azure_credentials", azure_credentials)
         pulumi.set(__self__, "container", container)
         pulumi.set(__self__, "storage_account", storage_account)
+        if azure_credentials is not None:
+            pulumi.set(__self__, "azure_credentials", azure_credentials)
+        if credentials_secret is not None:
+            pulumi.set(__self__, "credentials_secret", credentials_secret)
         if path is not None:
             pulumi.set(__self__, "path", path)
 
-    @property
-    @pulumi.getter(name="azureCredentials")
-    def azure_credentials(self) -> pulumi.Input['TransferJobTransferSpecAzureBlobStorageDataSourceAzureCredentialsArgs']:
-        """
-        Credentials used to authenticate API requests to Azure block.
-        """
-        return pulumi.get(self, "azure_credentials")
-
-    @azure_credentials.setter
-    def azure_credentials(self, value: pulumi.Input['TransferJobTransferSpecAzureBlobStorageDataSourceAzureCredentialsArgs']):
-        pulumi.set(self, "azure_credentials", value)
-
     @property
     @pulumi.getter
     def container(self) -> pulumi.Input[str]:
@@ -1996,6 +2029,30 @@ class TransferJobTransferSpecAzureBlobStorageDataSourceArgs:
     def storage_account(self, value: pulumi.Input[str]):
         pulumi.set(self, "storage_account", value)
 
+    @property
+    @pulumi.getter(name="azureCredentials")
+    def azure_credentials(self) -> Optional[pulumi.Input['TransferJobTransferSpecAzureBlobStorageDataSourceAzureCredentialsArgs']]:
+        """
+        Credentials used to authenticate API requests to Azure block.
+        """
+        return pulumi.get(self, "azure_credentials")
+
+    @azure_credentials.setter
+    def azure_credentials(self, value: Optional[pulumi.Input['TransferJobTransferSpecAzureBlobStorageDataSourceAzureCredentialsArgs']]):
+        pulumi.set(self, "azure_credentials", value)
+
+    @property
+    @pulumi.getter(name="credentialsSecret")
+    def credentials_secret(self) -> Optional[pulumi.Input[str]]:
+        """
+        Full Resource name of a secret in Secret Manager containing [SAS Credentials in JSON form](https://cloud.google.com/storage-transfer/docs/reference/rest/v1/TransferSpec#azureblobstoragedata:~:text=begin%!w(MISSING)ith%!a(MISSING)%27/%!-(MISSING),credentialsSecret,-string). Service Agent for Storage Transfer must have permissions to access secret. If credentials_secret is specified, do not specify azure_credentials.`,
+        """
+        return pulumi.get(self, "credentials_secret")
+
+    @credentials_secret.setter
+    def credentials_secret(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "credentials_secret", value)
+
     @property
     @pulumi.getter
     def path(self) -> Optional[pulumi.Input[str]]:

pulumi_gcp/storage/bucket.py

@@ -33,6 +33,7 @@ class BucketArgs:
                  requester_pays: Optional[pulumi.Input[bool]] = None,
                  retention_policy: Optional[pulumi.Input['BucketRetentionPolicyArgs']] = None,
                  rpo: Optional[pulumi.Input[str]] = None,
+                 soft_delete_policy: Optional[pulumi.Input['BucketSoftDeletePolicyArgs']] = None,
                  storage_class: Optional[pulumi.Input[str]] = None,
                  uniform_bucket_level_access: Optional[pulumi.Input[bool]] = None,
                  versioning: Optional[pulumi.Input['BucketVersioningArgs']] = None,
@@ -61,6 +62,8 @@ class BucketArgs:
         :param pulumi.Input[bool] requester_pays: Enables [Requester Pays](https://cloud.google.com/storage/docs/requester-pays) on a storage bucket.
         :param pulumi.Input['BucketRetentionPolicyArgs'] retention_policy: Configuration of the bucket's data retention policy for how long objects in the bucket should be retained. Structure is documented below.
         :param pulumi.Input[str] rpo: The recovery point objective for cross-region replication of the bucket. Applicable only for dual and multi-region buckets. `"DEFAULT"` sets default replication. `"ASYNC_TURBO"` value enables turbo replication, valid for dual-region buckets only. See [Turbo Replication](https://cloud.google.com/storage/docs/managing-turbo-replication) for more information. If rpo is not specified at bucket creation, it defaults to `"DEFAULT"` for dual and multi-region buckets. **NOTE** If used with single-region bucket, It will throw an error.
+        :param pulumi.Input['BucketSoftDeletePolicyArgs'] soft_delete_policy: The bucket's soft delete policy, which defines the period of time that soft-deleted objects will be retained, and cannot
+               be permanently deleted. If it is not provided, by default Google Cloud Storage sets this to default soft delete policy
         :param pulumi.Input[str] storage_class: The [Storage Class](https://cloud.google.com/storage/docs/storage-classes) of the new bucket. Supported values include: `STANDARD`, `MULTI_REGIONAL`, `REGIONAL`, `NEARLINE`, `COLDLINE`, `ARCHIVE`.
         :param pulumi.Input[bool] uniform_bucket_level_access: Enables [Uniform bucket-level access](https://cloud.google.com/storage/docs/uniform-bucket-level-access) access to a bucket.
         :param pulumi.Input['BucketVersioningArgs'] versioning: The bucket's [Versioning](https://cloud.google.com/storage/docs/object-versioning) configuration.  Structure is documented below.
@@ -99,6 +102,8 @@ class BucketArgs:
             pulumi.set(__self__, "retention_policy", retention_policy)
         if rpo is not None:
             pulumi.set(__self__, "rpo", rpo)
+        if soft_delete_policy is not None:
+            pulumi.set(__self__, "soft_delete_policy", soft_delete_policy)
         if storage_class is not None:
             pulumi.set(__self__, "storage_class", storage_class)
         if uniform_bucket_level_access is not None:
@@ -317,6 +322,19 @@ class BucketArgs:
     def rpo(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "rpo", value)
 
+    @property
+    @pulumi.getter(name="softDeletePolicy")
+    def soft_delete_policy(self) -> Optional[pulumi.Input['BucketSoftDeletePolicyArgs']]:
+        """
+        The bucket's soft delete policy, which defines the period of time that soft-deleted objects will be retained, and cannot
+        be permanently deleted. If it is not provided, by default Google Cloud Storage sets this to default soft delete policy
+        """
+        return pulumi.get(self, "soft_delete_policy")
+
+    @soft_delete_policy.setter
+    def soft_delete_policy(self, value: Optional[pulumi.Input['BucketSoftDeletePolicyArgs']]):
+        pulumi.set(self, "soft_delete_policy", value)
+
     @property
     @pulumi.getter(name="storageClass")
     def storage_class(self) -> Optional[pulumi.Input[str]]:
@@ -389,6 +407,7 @@ class _BucketState:
                  retention_policy: Optional[pulumi.Input['BucketRetentionPolicyArgs']] = None,
                  rpo: Optional[pulumi.Input[str]] = None,
                  self_link: Optional[pulumi.Input[str]] = None,
+                 soft_delete_policy: Optional[pulumi.Input['BucketSoftDeletePolicyArgs']] = None,
                  storage_class: Optional[pulumi.Input[str]] = None,
                  uniform_bucket_level_access: Optional[pulumi.Input[bool]] = None,
                  url: Optional[pulumi.Input[str]] = None,
@@ -422,6 +441,8 @@ class _BucketState:
         :param pulumi.Input['BucketRetentionPolicyArgs'] retention_policy: Configuration of the bucket's data retention policy for how long objects in the bucket should be retained. Structure is documented below.
         :param pulumi.Input[str] rpo: The recovery point objective for cross-region replication of the bucket. Applicable only for dual and multi-region buckets. `"DEFAULT"` sets default replication. `"ASYNC_TURBO"` value enables turbo replication, valid for dual-region buckets only. See [Turbo Replication](https://cloud.google.com/storage/docs/managing-turbo-replication) for more information. If rpo is not specified at bucket creation, it defaults to `"DEFAULT"` for dual and multi-region buckets. **NOTE** If used with single-region bucket, It will throw an error.
         :param pulumi.Input[str] self_link: The URI of the created resource.
+        :param pulumi.Input['BucketSoftDeletePolicyArgs'] soft_delete_policy: The bucket's soft delete policy, which defines the period of time that soft-deleted objects will be retained, and cannot
+               be permanently deleted. If it is not provided, by default Google Cloud Storage sets this to default soft delete policy
         :param pulumi.Input[str] storage_class: The [Storage Class](https://cloud.google.com/storage/docs/storage-classes) of the new bucket. Supported values include: `STANDARD`, `MULTI_REGIONAL`, `REGIONAL`, `NEARLINE`, `COLDLINE`, `ARCHIVE`.
         :param pulumi.Input[bool] uniform_bucket_level_access: Enables [Uniform bucket-level access](https://cloud.google.com/storage/docs/uniform-bucket-level-access) access to a bucket.
         :param pulumi.Input[str] url: The base URL of the bucket, in the format `gs://<bucket-name>`.
@@ -468,6 +489,8 @@ class _BucketState:
             pulumi.set(__self__, "rpo", rpo)
         if self_link is not None:
             pulumi.set(__self__, "self_link", self_link)
+        if soft_delete_policy is not None:
+            pulumi.set(__self__, "soft_delete_policy", soft_delete_policy)
         if storage_class is not None:
             pulumi.set(__self__, "storage_class", storage_class)
         if uniform_bucket_level_access is not None:
@@ -725,6 +748,19 @@ class _BucketState:
     def self_link(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "self_link", value)
 
+    @property
+    @pulumi.getter(name="softDeletePolicy")
+    def soft_delete_policy(self) -> Optional[pulumi.Input['BucketSoftDeletePolicyArgs']]:
+        """
+        The bucket's soft delete policy, which defines the period of time that soft-deleted objects will be retained, and cannot
+        be permanently deleted. If it is not provided, by default Google Cloud Storage sets this to default soft delete policy
+        """
+        return pulumi.get(self, "soft_delete_policy")
+
+    @soft_delete_policy.setter
+    def soft_delete_policy(self, value: Optional[pulumi.Input['BucketSoftDeletePolicyArgs']]):
+        pulumi.set(self, "soft_delete_policy", value)
+
     @property
     @pulumi.getter(name="storageClass")
     def storage_class(self) -> Optional[pulumi.Input[str]]:
@@ -808,6 +844,7 @@ class Bucket(pulumi.CustomResource):
                  requester_pays: Optional[pulumi.Input[bool]] = None,
                  retention_policy: Optional[pulumi.Input[pulumi.InputType['BucketRetentionPolicyArgs']]] = None,
                  rpo: Optional[pulumi.Input[str]] = None,
+                 soft_delete_policy: Optional[pulumi.Input[pulumi.InputType['BucketSoftDeletePolicyArgs']]] = None,
                  storage_class: Optional[pulumi.Input[str]] = None,
                  uniform_bucket_level_access: Optional[pulumi.Input[bool]] = None,
                  versioning: Optional[pulumi.Input[pulumi.InputType['BucketVersioningArgs']]] = None,
@@ -959,6 +996,8 @@ class Bucket(pulumi.CustomResource):
         :param pulumi.Input[bool] requester_pays: Enables [Requester Pays](https://cloud.google.com/storage/docs/requester-pays) on a storage bucket.
         :param pulumi.Input[pulumi.InputType['BucketRetentionPolicyArgs']] retention_policy: Configuration of the bucket's data retention policy for how long objects in the bucket should be retained. Structure is documented below.
         :param pulumi.Input[str] rpo: The recovery point objective for cross-region replication of the bucket. Applicable only for dual and multi-region buckets. `"DEFAULT"` sets default replication. `"ASYNC_TURBO"` value enables turbo replication, valid for dual-region buckets only. See [Turbo Replication](https://cloud.google.com/storage/docs/managing-turbo-replication) for more information. If rpo is not specified at bucket creation, it defaults to `"DEFAULT"` for dual and multi-region buckets. **NOTE** If used with single-region bucket, It will throw an error.
+        :param pulumi.Input[pulumi.InputType['BucketSoftDeletePolicyArgs']] soft_delete_policy: The bucket's soft delete policy, which defines the period of time that soft-deleted objects will be retained, and cannot
+               be permanently deleted. If it is not provided, by default Google Cloud Storage sets this to default soft delete policy
         :param pulumi.Input[str] storage_class: The [Storage Class](https://cloud.google.com/storage/docs/storage-classes) of the new bucket. Supported values include: `STANDARD`, `MULTI_REGIONAL`, `REGIONAL`, `NEARLINE`, `COLDLINE`, `ARCHIVE`.
         :param pulumi.Input[bool] uniform_bucket_level_access: Enables [Uniform bucket-level access](https://cloud.google.com/storage/docs/uniform-bucket-level-access) access to a bucket.
         :param pulumi.Input[pulumi.InputType['BucketVersioningArgs']] versioning: The bucket's [Versioning](https://cloud.google.com/storage/docs/object-versioning) configuration.  Structure is documented below.
@@ -1124,6 +1163,7 @@ class Bucket(pulumi.CustomResource):
                  requester_pays: Optional[pulumi.Input[bool]] = None,
                  retention_policy: Optional[pulumi.Input[pulumi.InputType['BucketRetentionPolicyArgs']]] = None,
                  rpo: Optional[pulumi.Input[str]] = None,
+                 soft_delete_policy: Optional[pulumi.Input[pulumi.InputType['BucketSoftDeletePolicyArgs']]] = None,
                  storage_class: Optional[pulumi.Input[str]] = None,
                  uniform_bucket_level_access: Optional[pulumi.Input[bool]] = None,
                  versioning: Optional[pulumi.Input[pulumi.InputType['BucketVersioningArgs']]] = None,
@@ -1156,6 +1196,7 @@ class Bucket(pulumi.CustomResource):
             __props__.__dict__["requester_pays"] = requester_pays
             __props__.__dict__["retention_policy"] = retention_policy
             __props__.__dict__["rpo"] = rpo
+            __props__.__dict__["soft_delete_policy"] = soft_delete_policy
             __props__.__dict__["storage_class"] = storage_class
             __props__.__dict__["uniform_bucket_level_access"] = uniform_bucket_level_access
             __props__.__dict__["versioning"] = versioning
@@ -1196,6 +1237,7 @@ class Bucket(pulumi.CustomResource):
             retention_policy: Optional[pulumi.Input[pulumi.InputType['BucketRetentionPolicyArgs']]] = None,
             rpo: Optional[pulumi.Input[str]] = None,
             self_link: Optional[pulumi.Input[str]] = None,
+            soft_delete_policy: Optional[pulumi.Input[pulumi.InputType['BucketSoftDeletePolicyArgs']]] = None,
             storage_class: Optional[pulumi.Input[str]] = None,
             uniform_bucket_level_access: Optional[pulumi.Input[bool]] = None,
             url: Optional[pulumi.Input[str]] = None,
@@ -1234,6 +1276,8 @@ class Bucket(pulumi.CustomResource):
         :param pulumi.Input[pulumi.InputType['BucketRetentionPolicyArgs']] retention_policy: Configuration of the bucket's data retention policy for how long objects in the bucket should be retained. Structure is documented below.
         :param pulumi.Input[str] rpo: The recovery point objective for cross-region replication of the bucket. Applicable only for dual and multi-region buckets. `"DEFAULT"` sets default replication. `"ASYNC_TURBO"` value enables turbo replication, valid for dual-region buckets only. See [Turbo Replication](https://cloud.google.com/storage/docs/managing-turbo-replication) for more information. If rpo is not specified at bucket creation, it defaults to `"DEFAULT"` for dual and multi-region buckets. **NOTE** If used with single-region bucket, It will throw an error.
         :param pulumi.Input[str] self_link: The URI of the created resource.
+        :param pulumi.Input[pulumi.InputType['BucketSoftDeletePolicyArgs']] soft_delete_policy: The bucket's soft delete policy, which defines the period of time that soft-deleted objects will be retained, and cannot
+               be permanently deleted. If it is not provided, by default Google Cloud Storage sets this to default soft delete policy
         :param pulumi.Input[str] storage_class: The [Storage Class](https://cloud.google.com/storage/docs/storage-classes) of the new bucket. Supported values include: `STANDARD`, `MULTI_REGIONAL`, `REGIONAL`, `NEARLINE`, `COLDLINE`, `ARCHIVE`.
         :param pulumi.Input[bool] uniform_bucket_level_access: Enables [Uniform bucket-level access](https://cloud.google.com/storage/docs/uniform-bucket-level-access) access to a bucket.
         :param pulumi.Input[str] url: The base URL of the bucket, in the format `gs://<bucket-name>`.
@@ -1264,6 +1308,7 @@ class Bucket(pulumi.CustomResource):
         __props__.__dict__["retention_policy"] = retention_policy
         __props__.__dict__["rpo"] = rpo
         __props__.__dict__["self_link"] = self_link
+        __props__.__dict__["soft_delete_policy"] = soft_delete_policy
         __props__.__dict__["storage_class"] = storage_class
         __props__.__dict__["uniform_bucket_level_access"] = uniform_bucket_level_access
         __props__.__dict__["url"] = url
@@ -1437,6 +1482,15 @@ class Bucket(pulumi.CustomResource):
         """
         return pulumi.get(self, "self_link")
 
+    @property
+    @pulumi.getter(name="softDeletePolicy")
+    def soft_delete_policy(self) -> pulumi.Output['outputs.BucketSoftDeletePolicy']:
+        """
+        The bucket's soft delete policy, which defines the period of time that soft-deleted objects will be retained, and cannot
+        be permanently deleted. If it is not provided, by default Google Cloud Storage sets this to default soft delete policy
+        """
+        return pulumi.get(self, "soft_delete_policy")
+
     @property
     @pulumi.getter(name="storageClass")
     def storage_class(self) -> pulumi.Output[Optional[str]]:

pulumi_gcp/storage/get_bucket.py

@@ -22,7 +22,7 @@ class GetBucketResult:
     """
     A collection of values returned by getBucket.
     """
-    def __init__(__self__, autoclasses=None, cors=None, custom_placement_configs=None, default_event_based_hold=None, effective_labels=None, enable_object_retention=None, encryptions=None, force_destroy=None, id=None, labels=None, lifecycle_rules=None, location=None, loggings=None, name=None, project=None, public_access_prevention=None, pulumi_labels=None, requester_pays=None, retention_policies=None, rpo=None, self_link=None, storage_class=None, uniform_bucket_level_access=None, url=None, versionings=None, websites=None):
+    def __init__(__self__, autoclasses=None, cors=None, custom_placement_configs=None, default_event_based_hold=None, effective_labels=None, enable_object_retention=None, encryptions=None, force_destroy=None, id=None, labels=None, lifecycle_rules=None, location=None, loggings=None, name=None, project=None, public_access_prevention=None, pulumi_labels=None, requester_pays=None, retention_policies=None, rpo=None, self_link=None, soft_delete_policies=None, storage_class=None, uniform_bucket_level_access=None, url=None, versionings=None, websites=None):
         if autoclasses and not isinstance(autoclasses, list):
             raise TypeError("Expected argument 'autoclasses' to be a list")
         pulumi.set(__self__, "autoclasses", autoclasses)
@@ -86,6 +86,9 @@ class GetBucketResult:
         if self_link and not isinstance(self_link, str):
             raise TypeError("Expected argument 'self_link' to be a str")
         pulumi.set(__self__, "self_link", self_link)
+        if soft_delete_policies and not isinstance(soft_delete_policies, list):
+            raise TypeError("Expected argument 'soft_delete_policies' to be a list")
+        pulumi.set(__self__, "soft_delete_policies", soft_delete_policies)
         if storage_class and not isinstance(storage_class, str):
             raise TypeError("Expected argument 'storage_class' to be a str")
         pulumi.set(__self__, "storage_class", storage_class)
@@ -210,6 +213,11 @@ class GetBucketResult:
     def self_link(self) -> str:
         return pulumi.get(self, "self_link")
 
+    @property
+    @pulumi.getter(name="softDeletePolicies")
+    def soft_delete_policies(self) -> Sequence['outputs.GetBucketSoftDeletePolicyResult']:
+        return pulumi.get(self, "soft_delete_policies")
+
     @property
     @pulumi.getter(name="storageClass")
     def storage_class(self) -> str:
@@ -263,6 +271,7 @@ class AwaitableGetBucketResult(GetBucketResult):
             retention_policies=self.retention_policies,
             rpo=self.rpo,
             self_link=self.self_link,
+            soft_delete_policies=self.soft_delete_policies,
             storage_class=self.storage_class,
             uniform_bucket_level_access=self.uniform_bucket_level_access,
             url=self.url,
@@ -319,6 +328,7 @@ def get_bucket(name: Optional[str] = None,
         retention_policies=pulumi.get(__ret__, 'retention_policies'),
         rpo=pulumi.get(__ret__, 'rpo'),
         self_link=pulumi.get(__ret__, 'self_link'),
+        soft_delete_policies=pulumi.get(__ret__, 'soft_delete_policies'),
         storage_class=pulumi.get(__ret__, 'storage_class'),
         uniform_bucket_level_access=pulumi.get(__ret__, 'uniform_bucket_level_access'),
         url=pulumi.get(__ret__, 'url'),