pulumi-gcp 7.19.0__py3-none-any.whl → 7.19.0a1712989149__py3-none-any.whl

pulumi_gcp/kms/key_ring_iam_member.py

@@ -26,7 +26,8 @@ class KeyRingIAMMemberArgs:
                `{project_id}/{location_name}/{key_ring_name}` or
                `{location_name}/{key_ring_name}`. In the second form, the provider's
                project setting will be used as a fallback.
-        :param pulumi.Input[str] member: Identities that will be granted the privilege in `role`.
+               
+               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
                Each entry can have one of the following values:
                * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
@@ -54,6 +55,15 @@ class KeyRingIAMMemberArgs:
         `{project_id}/{location_name}/{key_ring_name}` or
         `{location_name}/{key_ring_name}`. In the second form, the provider's
         project setting will be used as a fallback.
+
+        * `member/members` - (Required) Identities that will be granted the privilege in `role`.
+        Each entry can have one of the following values:
+        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
+        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
+        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
+        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
         """
         return pulumi.get(self, "key_ring_id")
 
@@ -64,16 +74,6 @@ class KeyRingIAMMemberArgs:
     @property
     @pulumi.getter
     def member(self) -> pulumi.Input[str]:
-        """
-        Identities that will be granted the privilege in `role`.
-        Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-        """
         return pulumi.get(self, "member")
 
     @member.setter
@@ -125,7 +125,8 @@ class _KeyRingIAMMemberState:
                `{project_id}/{location_name}/{key_ring_name}` or
                `{location_name}/{key_ring_name}`. In the second form, the provider's
                project setting will be used as a fallback.
-        :param pulumi.Input[str] member: Identities that will be granted the privilege in `role`.
+               
+               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
                Each entry can have one of the following values:
                * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
@@ -181,6 +182,15 @@ class _KeyRingIAMMemberState:
         `{project_id}/{location_name}/{key_ring_name}` or
         `{location_name}/{key_ring_name}`. In the second form, the provider's
         project setting will be used as a fallback.
+
+        * `member/members` - (Required) Identities that will be granted the privilege in `role`.
+        Each entry can have one of the following values:
+        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
+        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
+        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
+        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
         """
         return pulumi.get(self, "key_ring_id")
 
@@ -191,16 +201,6 @@ class _KeyRingIAMMemberState:
     @property
     @pulumi.getter
     def member(self) -> Optional[pulumi.Input[str]]:
-        """
-        Identities that will be granted the privilege in `role`.
-        Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-        """
         return pulumi.get(self, "member")
 
     @member.setter
@@ -354,117 +354,6 @@ class KeyRingIAMMember(pulumi.CustomResource):
         ```
         <!--End PulumiCodeChooser -->
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_policy
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        keyring = gcp.kms.KeyRing("keyring",
-            name="keyring-example",
-            location="global")
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/editor",
-            members=["user:jane@example.com"],
-        )])
-        key_ring = gcp.kms.KeyRingIAMPolicy("key_ring",
-            key_ring_id=keyring.id,
-            policy_data=admin.policy_data)
-        ```
-        <!--End PulumiCodeChooser -->
-
-        With IAM Conditions:
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        keyring = gcp.kms.KeyRing("keyring",
-            name="keyring-example",
-            location="global")
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/editor",
-            members=["user:jane@example.com"],
-            condition=gcp.organizations.GetIAMPolicyBindingConditionArgs(
-                title="expires_after_2019_12_31",
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            ),
-        )])
-        key_ring = gcp.kms.KeyRingIAMPolicy("key_ring",
-            key_ring_id=keyring.id,
-            policy_data=admin.policy_data)
-        ```
-        <!--End PulumiCodeChooser -->
-
-        ## google\\_kms\\_key\\_ring\\_iam\\_binding
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        key_ring = gcp.kms.KeyRingIAMBinding("key_ring",
-            key_ring_id="your-key-ring-id",
-            role="roles/cloudkms.admin",
-            members=["user:jane@example.com"])
-        ```
-        <!--End PulumiCodeChooser -->
-
-        With IAM Conditions:
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        key_ring = gcp.kms.KeyRingIAMBinding("key_ring",
-            key_ring_id="your-key-ring-id",
-            role="roles/cloudkms.admin",
-            members=["user:jane@example.com"],
-            condition=gcp.kms.KeyRingIAMBindingConditionArgs(
-                title="expires_after_2019_12_31",
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            ))
-        ```
-        <!--End PulumiCodeChooser -->
-
-        ## google\\_kms\\_key\\_ring\\_iam\\_member
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        key_ring = gcp.kms.KeyRingIAMMember("key_ring",
-            key_ring_id="your-key-ring-id",
-            role="roles/cloudkms.admin",
-            member="user:jane@example.com")
-        ```
-        <!--End PulumiCodeChooser -->
-
-        With IAM Conditions:
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        key_ring = gcp.kms.KeyRingIAMMember("key_ring",
-            key_ring_id="your-key-ring-id",
-            role="roles/cloudkms.admin",
-            member="user:jane@example.com",
-            condition=gcp.kms.KeyRingIAMMemberConditionArgs(
-                title="expires_after_2019_12_31",
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            ))
-        ```
-        <!--End PulumiCodeChooser -->
-
         ## Import
 
         ### Importing IAM policies
@@ -499,7 +388,8 @@ class KeyRingIAMMember(pulumi.CustomResource):
                `{project_id}/{location_name}/{key_ring_name}` or
                `{location_name}/{key_ring_name}`. In the second form, the provider's
                project setting will be used as a fallback.
-        :param pulumi.Input[str] member: Identities that will be granted the privilege in `role`.
+               
+               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
                Each entry can have one of the following values:
                * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
@@ -639,117 +529,6 @@ class KeyRingIAMMember(pulumi.CustomResource):
         ```
         <!--End PulumiCodeChooser -->
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_policy
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        keyring = gcp.kms.KeyRing("keyring",
-            name="keyring-example",
-            location="global")
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/editor",
-            members=["user:jane@example.com"],
-        )])
-        key_ring = gcp.kms.KeyRingIAMPolicy("key_ring",
-            key_ring_id=keyring.id,
-            policy_data=admin.policy_data)
-        ```
-        <!--End PulumiCodeChooser -->
-
-        With IAM Conditions:
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        keyring = gcp.kms.KeyRing("keyring",
-            name="keyring-example",
-            location="global")
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/editor",
-            members=["user:jane@example.com"],
-            condition=gcp.organizations.GetIAMPolicyBindingConditionArgs(
-                title="expires_after_2019_12_31",
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            ),
-        )])
-        key_ring = gcp.kms.KeyRingIAMPolicy("key_ring",
-            key_ring_id=keyring.id,
-            policy_data=admin.policy_data)
-        ```
-        <!--End PulumiCodeChooser -->
-
-        ## google\\_kms\\_key\\_ring\\_iam\\_binding
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        key_ring = gcp.kms.KeyRingIAMBinding("key_ring",
-            key_ring_id="your-key-ring-id",
-            role="roles/cloudkms.admin",
-            members=["user:jane@example.com"])
-        ```
-        <!--End PulumiCodeChooser -->
-
-        With IAM Conditions:
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        key_ring = gcp.kms.KeyRingIAMBinding("key_ring",
-            key_ring_id="your-key-ring-id",
-            role="roles/cloudkms.admin",
-            members=["user:jane@example.com"],
-            condition=gcp.kms.KeyRingIAMBindingConditionArgs(
-                title="expires_after_2019_12_31",
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            ))
-        ```
-        <!--End PulumiCodeChooser -->
-
-        ## google\\_kms\\_key\\_ring\\_iam\\_member
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        key_ring = gcp.kms.KeyRingIAMMember("key_ring",
-            key_ring_id="your-key-ring-id",
-            role="roles/cloudkms.admin",
-            member="user:jane@example.com")
-        ```
-        <!--End PulumiCodeChooser -->
-
-        With IAM Conditions:
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        key_ring = gcp.kms.KeyRingIAMMember("key_ring",
-            key_ring_id="your-key-ring-id",
-            role="roles/cloudkms.admin",
-            member="user:jane@example.com",
-            condition=gcp.kms.KeyRingIAMMemberConditionArgs(
-                title="expires_after_2019_12_31",
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            ))
-        ```
-        <!--End PulumiCodeChooser -->
-
         ## Import
 
         ### Importing IAM policies
@@ -844,7 +623,8 @@ class KeyRingIAMMember(pulumi.CustomResource):
                `{project_id}/{location_name}/{key_ring_name}` or
                `{location_name}/{key_ring_name}`. In the second form, the provider's
                project setting will be used as a fallback.
-        :param pulumi.Input[str] member: Identities that will be granted the privilege in `role`.
+               
+               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
                Each entry can have one of the following values:
                * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
@@ -892,14 +672,8 @@ class KeyRingIAMMember(pulumi.CustomResource):
         `{project_id}/{location_name}/{key_ring_name}` or
         `{location_name}/{key_ring_name}`. In the second form, the provider's
         project setting will be used as a fallback.
-        """
-        return pulumi.get(self, "key_ring_id")
 
-    @property
-    @pulumi.getter
-    def member(self) -> pulumi.Output[str]:
-        """
-        Identities that will be granted the privilege in `role`.
+        * `member/members` - (Required) Identities that will be granted the privilege in `role`.
         Each entry can have one of the following values:
         * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
         * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
@@ -908,6 +682,11 @@ class KeyRingIAMMember(pulumi.CustomResource):
         * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
         * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
         """
+        return pulumi.get(self, "key_ring_id")
+
+    @property
+    @pulumi.getter
+    def member(self) -> pulumi.Output[str]:
         return pulumi.get(self, "member")
 
     @property