pulumi-gcp 7.19.0__py3-none-any.whl → 7.19.0a1712989149__py3-none-any.whl

pulumi_gcp/serviceaccount/iam_policy.py

@@ -21,6 +21,15 @@ class IAMPolicyArgs:
         :param pulumi.Input[str] policy_data: The policy data generated by
                a `organizations_get_iam_policy` data source.
         :param pulumi.Input[str] service_account_id: The fully-qualified name of the service account to apply policy to.
+               
+               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
+               Each entry can have one of the following values:
+               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
+               * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
+               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
+               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+               * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
         """
         pulumi.set(__self__, "policy_data", policy_data)
         pulumi.set(__self__, "service_account_id", service_account_id)
@@ -43,6 +52,15 @@ class IAMPolicyArgs:
     def service_account_id(self) -> pulumi.Input[str]:
         """
         The fully-qualified name of the service account to apply policy to.
+
+        * `member/members` - (Required) Identities that will be granted the privilege in `role`.
+        Each entry can have one of the following values:
+        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
+        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
+        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
+        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
         """
         return pulumi.get(self, "service_account_id")
 
@@ -63,6 +81,15 @@ class _IAMPolicyState:
         :param pulumi.Input[str] policy_data: The policy data generated by
                a `organizations_get_iam_policy` data source.
         :param pulumi.Input[str] service_account_id: The fully-qualified name of the service account to apply policy to.
+               
+               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
+               Each entry can have one of the following values:
+               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
+               * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
+               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
+               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+               * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
         """
         if etag is not None:
             pulumi.set(__self__, "etag", etag)
@@ -101,6 +128,15 @@ class _IAMPolicyState:
     def service_account_id(self) -> Optional[pulumi.Input[str]]:
         """
         The fully-qualified name of the service account to apply policy to.
+
+        * `member/members` - (Required) Identities that will be granted the privilege in `role`.
+        Each entry can have one of the following values:
+        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
+        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
+        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
+        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
         """
         return pulumi.get(self, "service_account_id")
 
@@ -236,112 +272,6 @@ class IAMPolicy(pulumi.CustomResource):
         ```
         <!--End PulumiCodeChooser -->
 
-        ### Additional Examples
-
-        ### Service Account IAM Policy
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/iam.serviceAccountUser",
-            members=["user:jane@example.com"],
-        )])
-        sa = gcp.serviceaccount.Account("sa",
-            account_id="my-service-account",
-            display_name="A service account that only Jane can interact with")
-        admin_account_iam = gcp.serviceaccount.IAMPolicy("admin-account-iam",
-            service_account_id=sa.name,
-            policy_data=admin.policy_data)
-        ```
-        <!--End PulumiCodeChooser -->
-
-        ### Service Account IAM Binding
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        sa = gcp.serviceaccount.Account("sa",
-            account_id="my-service-account",
-            display_name="A service account that only Jane can use")
-        admin_account_iam = gcp.serviceaccount.IAMBinding("admin-account-iam",
-            service_account_id=sa.name,
-            role="roles/iam.serviceAccountUser",
-            members=["user:jane@example.com"])
-        ```
-        <!--End PulumiCodeChooser -->
-
-        ### Service Account IAM Binding With IAM Conditions:
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        sa = gcp.serviceaccount.Account("sa",
-            account_id="my-service-account",
-            display_name="A service account that only Jane can use")
-        admin_account_iam = gcp.serviceaccount.IAMBinding("admin-account-iam",
-            service_account_id=sa.name,
-            role="roles/iam.serviceAccountUser",
-            members=["user:jane@example.com"],
-            condition=gcp.serviceaccount.IAMBindingConditionArgs(
-                title="expires_after_2019_12_31",
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            ))
-        ```
-        <!--End PulumiCodeChooser -->
-
-        ### Service Account IAM Member
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        default = gcp.compute.get_default_service_account()
-        sa = gcp.serviceaccount.Account("sa",
-            account_id="my-service-account",
-            display_name="A service account that Jane can use")
-        admin_account_iam = gcp.serviceaccount.IAMMember("admin-account-iam",
-            service_account_id=sa.name,
-            role="roles/iam.serviceAccountUser",
-            member="user:jane@example.com")
-        # Allow SA service account use the default GCE account
-        gce_default_account_iam = gcp.serviceaccount.IAMMember("gce-default-account-iam",
-            service_account_id=default.name,
-            role="roles/iam.serviceAccountUser",
-            member=sa.email.apply(lambda email: f"serviceAccount:{email}"))
-        ```
-        <!--End PulumiCodeChooser -->
-
-        ### Service Account IAM Member With IAM Conditions:
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        sa = gcp.serviceaccount.Account("sa",
-            account_id="my-service-account",
-            display_name="A service account that Jane can use")
-        admin_account_iam = gcp.serviceaccount.IAMMember("admin-account-iam",
-            service_account_id=sa.name,
-            role="roles/iam.serviceAccountUser",
-            member="user:jane@example.com",
-            condition=gcp.serviceaccount.IAMMemberConditionArgs(
-                title="expires_after_2019_12_31",
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            ))
-        ```
-        <!--End PulumiCodeChooser -->
-
         ## Import
 
         ### Importing with conditions:
@@ -361,6 +291,15 @@ class IAMPolicy(pulumi.CustomResource):
         :param pulumi.Input[str] policy_data: The policy data generated by
                a `organizations_get_iam_policy` data source.
         :param pulumi.Input[str] service_account_id: The fully-qualified name of the service account to apply policy to.
+               
+               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
+               Each entry can have one of the following values:
+               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
+               * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
+               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
+               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+               * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
         """
         ...
     @overload
@@ -487,112 +426,6 @@ class IAMPolicy(pulumi.CustomResource):
         ```
         <!--End PulumiCodeChooser -->
 
-        ### Additional Examples
-
-        ### Service Account IAM Policy
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/iam.serviceAccountUser",
-            members=["user:jane@example.com"],
-        )])
-        sa = gcp.serviceaccount.Account("sa",
-            account_id="my-service-account",
-            display_name="A service account that only Jane can interact with")
-        admin_account_iam = gcp.serviceaccount.IAMPolicy("admin-account-iam",
-            service_account_id=sa.name,
-            policy_data=admin.policy_data)
-        ```
-        <!--End PulumiCodeChooser -->
-
-        ### Service Account IAM Binding
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        sa = gcp.serviceaccount.Account("sa",
-            account_id="my-service-account",
-            display_name="A service account that only Jane can use")
-        admin_account_iam = gcp.serviceaccount.IAMBinding("admin-account-iam",
-            service_account_id=sa.name,
-            role="roles/iam.serviceAccountUser",
-            members=["user:jane@example.com"])
-        ```
-        <!--End PulumiCodeChooser -->
-
-        ### Service Account IAM Binding With IAM Conditions:
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        sa = gcp.serviceaccount.Account("sa",
-            account_id="my-service-account",
-            display_name="A service account that only Jane can use")
-        admin_account_iam = gcp.serviceaccount.IAMBinding("admin-account-iam",
-            service_account_id=sa.name,
-            role="roles/iam.serviceAccountUser",
-            members=["user:jane@example.com"],
-            condition=gcp.serviceaccount.IAMBindingConditionArgs(
-                title="expires_after_2019_12_31",
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            ))
-        ```
-        <!--End PulumiCodeChooser -->
-
-        ### Service Account IAM Member
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        default = gcp.compute.get_default_service_account()
-        sa = gcp.serviceaccount.Account("sa",
-            account_id="my-service-account",
-            display_name="A service account that Jane can use")
-        admin_account_iam = gcp.serviceaccount.IAMMember("admin-account-iam",
-            service_account_id=sa.name,
-            role="roles/iam.serviceAccountUser",
-            member="user:jane@example.com")
-        # Allow SA service account use the default GCE account
-        gce_default_account_iam = gcp.serviceaccount.IAMMember("gce-default-account-iam",
-            service_account_id=default.name,
-            role="roles/iam.serviceAccountUser",
-            member=sa.email.apply(lambda email: f"serviceAccount:{email}"))
-        ```
-        <!--End PulumiCodeChooser -->
-
-        ### Service Account IAM Member With IAM Conditions:
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        sa = gcp.serviceaccount.Account("sa",
-            account_id="my-service-account",
-            display_name="A service account that Jane can use")
-        admin_account_iam = gcp.serviceaccount.IAMMember("admin-account-iam",
-            service_account_id=sa.name,
-            role="roles/iam.serviceAccountUser",
-            member="user:jane@example.com",
-            condition=gcp.serviceaccount.IAMMemberConditionArgs(
-                title="expires_after_2019_12_31",
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            ))
-        ```
-        <!--End PulumiCodeChooser -->
-
         ## Import
 
         ### Importing with conditions:
@@ -666,6 +499,15 @@ class IAMPolicy(pulumi.CustomResource):
         :param pulumi.Input[str] policy_data: The policy data generated by
                a `organizations_get_iam_policy` data source.
         :param pulumi.Input[str] service_account_id: The fully-qualified name of the service account to apply policy to.
+               
+               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
+               Each entry can have one of the following values:
+               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
+               * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
+               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
+               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+               * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -698,6 +540,15 @@ class IAMPolicy(pulumi.CustomResource):
     def service_account_id(self) -> pulumi.Output[str]:
         """
         The fully-qualified name of the service account to apply policy to.
+
+        * `member/members` - (Required) Identities that will be granted the privilege in `role`.
+        Each entry can have one of the following values:
+        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
+        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
+        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
+        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
         """
         return pulumi.get(self, "service_account_id")
 

pulumi_gcp/servicedirectory/namespace_iam_binding.py

@@ -22,7 +22,12 @@ class NamespaceIamBindingArgs:
                  name: Optional[pulumi.Input[str]] = None):
         """
         The set of arguments for constructing a NamespaceIamBinding resource.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] members: Identities that will be granted the privilege in `role`.
+        :param pulumi.Input[str] role: The role that should be applied. Only one
+               `servicedirectory.NamespaceIamBinding` can be used per role. Note that custom roles must be of the format
+               `[projects|organizations]/{parent-name}/roles/{role-name}`.
+        :param pulumi.Input[str] name: Used to find the parent resource to bind the IAM policy to
+               
+               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
                Each entry can have one of the following values:
                * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
@@ -33,10 +38,6 @@ class NamespaceIamBindingArgs:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
-        :param pulumi.Input[str] role: The role that should be applied. Only one
-               `servicedirectory.NamespaceIamBinding` can be used per role. Note that custom roles must be of the format
-               `[projects|organizations]/{parent-name}/roles/{role-name}`.
-        :param pulumi.Input[str] name: Used to find the parent resource to bind the IAM policy to
         """
         pulumi.set(__self__, "members", members)
         pulumi.set(__self__, "role", role)
@@ -48,19 +49,6 @@ class NamespaceIamBindingArgs:
     @property
     @pulumi.getter
     def members(self) -> pulumi.Input[Sequence[pulumi.Input[str]]]:
-        """
-        Identities that will be granted the privilege in `role`.
-        Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-        * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-        * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-        * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
-        """
         return pulumi.get(self, "members")
 
     @members.setter
@@ -95,6 +83,18 @@ class NamespaceIamBindingArgs:
     def name(self) -> Optional[pulumi.Input[str]]:
         """
         Used to find the parent resource to bind the IAM policy to
+
+        * `member/members` - (Required) Identities that will be granted the privilege in `role`.
+        Each entry can have one of the following values:
+        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
+        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
+        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
+        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
+        * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
+        * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
+        * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         """
         return pulumi.get(self, "name")
 
@@ -114,7 +114,9 @@ class _NamespaceIamBindingState:
         """
         Input properties used for looking up and filtering NamespaceIamBinding resources.
         :param pulumi.Input[str] etag: (Computed) The etag of the IAM policy.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] members: Identities that will be granted the privilege in `role`.
+        :param pulumi.Input[str] name: Used to find the parent resource to bind the IAM policy to
+               
+               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
                Each entry can have one of the following values:
                * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
@@ -125,7 +127,6 @@ class _NamespaceIamBindingState:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
-        :param pulumi.Input[str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[str] role: The role that should be applied. Only one
                `servicedirectory.NamespaceIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -165,19 +166,6 @@ class _NamespaceIamBindingState:
     @property
     @pulumi.getter
     def members(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
-        """
-        Identities that will be granted the privilege in `role`.
-        Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-        * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-        * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-        * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
-        """
         return pulumi.get(self, "members")
 
     @members.setter
@@ -189,6 +177,18 @@ class _NamespaceIamBindingState:
     def name(self) -> Optional[pulumi.Input[str]]:
         """
         Used to find the parent resource to bind the IAM policy to
+
+        * `member/members` - (Required) Identities that will be granted the privilege in `role`.
+        Each entry can have one of the following values:
+        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
+        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
+        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
+        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
+        * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
+        * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
+        * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         """
         return pulumi.get(self, "name")
 
@@ -281,51 +281,6 @@ class NamespaceIamBinding(pulumi.CustomResource):
         ```
         <!--End PulumiCodeChooser -->
 
-        ## google\\_service\\_directory\\_namespace\\_iam\\_policy
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/viewer",
-            members=["user:jane@example.com"],
-        )])
-        policy = gcp.servicedirectory.NamespaceIamPolicy("policy",
-            name=example["name"],
-            policy_data=admin.policy_data)
-        ```
-        <!--End PulumiCodeChooser -->
-
-        ## google\\_service\\_directory\\_namespace\\_iam\\_binding
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        binding = gcp.servicedirectory.NamespaceIamBinding("binding",
-            name=example["name"],
-            role="roles/viewer",
-            members=["user:jane@example.com"])
-        ```
-        <!--End PulumiCodeChooser -->
-
-        ## google\\_service\\_directory\\_namespace\\_iam\\_member
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        member = gcp.servicedirectory.NamespaceIamMember("member",
-            name=example["name"],
-            role="roles/viewer",
-            member="user:jane@example.com")
-        ```
-        <!--End PulumiCodeChooser -->
-
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms:
@@ -364,7 +319,9 @@ class NamespaceIamBinding(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] members: Identities that will be granted the privilege in `role`.
+        :param pulumi.Input[str] name: Used to find the parent resource to bind the IAM policy to
+               
+               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
                Each entry can have one of the following values:
                * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
@@ -375,7 +332,6 @@ class NamespaceIamBinding(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
-        :param pulumi.Input[str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[str] role: The role that should be applied. Only one
                `servicedirectory.NamespaceIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -446,51 +402,6 @@ class NamespaceIamBinding(pulumi.CustomResource):
         ```
         <!--End PulumiCodeChooser -->
 
-        ## google\\_service\\_directory\\_namespace\\_iam\\_policy
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/viewer",
-            members=["user:jane@example.com"],
-        )])
-        policy = gcp.servicedirectory.NamespaceIamPolicy("policy",
-            name=example["name"],
-            policy_data=admin.policy_data)
-        ```
-        <!--End PulumiCodeChooser -->
-
-        ## google\\_service\\_directory\\_namespace\\_iam\\_binding
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        binding = gcp.servicedirectory.NamespaceIamBinding("binding",
-            name=example["name"],
-            role="roles/viewer",
-            members=["user:jane@example.com"])
-        ```
-        <!--End PulumiCodeChooser -->
-
-        ## google\\_service\\_directory\\_namespace\\_iam\\_member
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        member = gcp.servicedirectory.NamespaceIamMember("member",
-            name=example["name"],
-            role="roles/viewer",
-            member="user:jane@example.com")
-        ```
-        <!--End PulumiCodeChooser -->
-
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms:
@@ -587,7 +498,9 @@ class NamespaceIamBinding(pulumi.CustomResource):
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[str] etag: (Computed) The etag of the IAM policy.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] members: Identities that will be granted the privilege in `role`.
+        :param pulumi.Input[str] name: Used to find the parent resource to bind the IAM policy to
+               
+               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
                Each entry can have one of the following values:
                * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
@@ -598,7 +511,6 @@ class NamespaceIamBinding(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
-        :param pulumi.Input[str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[str] role: The role that should be applied. Only one
                `servicedirectory.NamespaceIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -630,8 +542,15 @@ class NamespaceIamBinding(pulumi.CustomResource):
     @property
     @pulumi.getter
     def members(self) -> pulumi.Output[Sequence[str]]:
+        return pulumi.get(self, "members")
+
+    @property
+    @pulumi.getter
+    def name(self) -> pulumi.Output[str]:
         """
-        Identities that will be granted the privilege in `role`.
+        Used to find the parent resource to bind the IAM policy to
+
+        * `member/members` - (Required) Identities that will be granted the privilege in `role`.
         Each entry can have one of the following values:
         * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
         * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
@@ -643,14 +562,6 @@ class NamespaceIamBinding(pulumi.CustomResource):
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         """
-        return pulumi.get(self, "members")
-
-    @property
-    @pulumi.getter
-    def name(self) -> pulumi.Output[str]:
-        """
-        Used to find the parent resource to bind the IAM policy to
-        """
         return pulumi.get(self, "name")
 
     @property