pulumi-gcp 7.19.0__py3-none-any.whl → 7.19.0a1712989149__py3-none-any.whl

pulumi_gcp/storage/bucket_iam_member.py

@@ -23,7 +23,8 @@ class BucketIAMMemberArgs:
         """
         The set of arguments for constructing a BucketIAMMember resource.
         :param pulumi.Input[str] bucket: Used to find the parent resource to bind the IAM policy to
-        :param pulumi.Input[str] member: Identities that will be granted the privilege in `role`.
+               
+               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
                Each entry can have one of the following values:
                * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
@@ -51,18 +52,8 @@ class BucketIAMMemberArgs:
     def bucket(self) -> pulumi.Input[str]:
         """
         Used to find the parent resource to bind the IAM policy to
-        """
-        return pulumi.get(self, "bucket")
 
-    @bucket.setter
-    def bucket(self, value: pulumi.Input[str]):
-        pulumi.set(self, "bucket", value)
-
-    @property
-    @pulumi.getter
-    def member(self) -> pulumi.Input[str]:
-        """
-        Identities that will be granted the privilege in `role`.
+        * `member/members` - (Required) Identities that will be granted the privilege in `role`.
         Each entry can have one of the following values:
         * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
         * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
@@ -74,6 +65,15 @@ class BucketIAMMemberArgs:
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         """
+        return pulumi.get(self, "bucket")
+
+    @bucket.setter
+    def bucket(self, value: pulumi.Input[str]):
+        pulumi.set(self, "bucket", value)
+
+    @property
+    @pulumi.getter
+    def member(self) -> pulumi.Input[str]:
         return pulumi.get(self, "member")
 
     @member.setter
@@ -119,10 +119,8 @@ class _BucketIAMMemberState:
         """
         Input properties used for looking up and filtering BucketIAMMember resources.
         :param pulumi.Input[str] bucket: Used to find the parent resource to bind the IAM policy to
-        :param pulumi.Input['BucketIAMMemberConditionArgs'] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
-               Structure is documented below.
-        :param pulumi.Input[str] etag: (Computed) The etag of the IAM policy.
-        :param pulumi.Input[str] member: Identities that will be granted the privilege in `role`.
+               
+               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
                Each entry can have one of the following values:
                * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
@@ -133,6 +131,9 @@ class _BucketIAMMemberState:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        :param pulumi.Input['BucketIAMMemberConditionArgs'] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
+               Structure is documented below.
+        :param pulumi.Input[str] etag: (Computed) The etag of the IAM policy.
         :param pulumi.Input[str] role: The role that should be applied. Only one
                `storage.BucketIAMBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -153,6 +154,18 @@ class _BucketIAMMemberState:
     def bucket(self) -> Optional[pulumi.Input[str]]:
         """
         Used to find the parent resource to bind the IAM policy to
+
+        * `member/members` - (Required) Identities that will be granted the privilege in `role`.
+        Each entry can have one of the following values:
+        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
+        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
+        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
+        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
+        * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
+        * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
+        * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         """
         return pulumi.get(self, "bucket")
 
@@ -188,19 +201,6 @@ class _BucketIAMMemberState:
     @property
     @pulumi.getter
     def member(self) -> Optional[pulumi.Input[str]]:
-        """
-        Identities that will be granted the privilege in `role`.
-        Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-        * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-        * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-        * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
-        """
         return pulumi.get(self, "member")
 
     @member.setter
@@ -352,109 +352,6 @@ class BucketIAMMember(pulumi.CustomResource):
         ```
         <!--End PulumiCodeChooser -->
 
-        ## google\\_storage\\_bucket\\_iam\\_policy
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/storage.admin",
-            members=["user:jane@example.com"],
-        )])
-        policy = gcp.storage.BucketIAMPolicy("policy",
-            bucket=default["name"],
-            policy_data=admin.policy_data)
-        ```
-        <!--End PulumiCodeChooser -->
-
-        With IAM Conditions:
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/storage.admin",
-            members=["user:jane@example.com"],
-            condition=gcp.organizations.GetIAMPolicyBindingConditionArgs(
-                title="expires_after_2019_12_31",
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            ),
-        )])
-        policy = gcp.storage.BucketIAMPolicy("policy",
-            bucket=default["name"],
-            policy_data=admin.policy_data)
-        ```
-        <!--End PulumiCodeChooser -->
-        ## google\\_storage\\_bucket\\_iam\\_binding
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        binding = gcp.storage.BucketIAMBinding("binding",
-            bucket=default["name"],
-            role="roles/storage.admin",
-            members=["user:jane@example.com"])
-        ```
-        <!--End PulumiCodeChooser -->
-
-        With IAM Conditions:
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        binding = gcp.storage.BucketIAMBinding("binding",
-            bucket=default["name"],
-            role="roles/storage.admin",
-            members=["user:jane@example.com"],
-            condition=gcp.storage.BucketIAMBindingConditionArgs(
-                title="expires_after_2019_12_31",
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            ))
-        ```
-        <!--End PulumiCodeChooser -->
-        ## google\\_storage\\_bucket\\_iam\\_member
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        member = gcp.storage.BucketIAMMember("member",
-            bucket=default["name"],
-            role="roles/storage.admin",
-            member="user:jane@example.com")
-        ```
-        <!--End PulumiCodeChooser -->
-
-        With IAM Conditions:
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        member = gcp.storage.BucketIAMMember("member",
-            bucket=default["name"],
-            role="roles/storage.admin",
-            member="user:jane@example.com",
-            condition=gcp.storage.BucketIAMMemberConditionArgs(
-                title="expires_after_2019_12_31",
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            ))
-        ```
-        <!--End PulumiCodeChooser -->
-
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms:
@@ -492,9 +389,8 @@ class BucketIAMMember(pulumi.CustomResource):
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[str] bucket: Used to find the parent resource to bind the IAM policy to
-        :param pulumi.Input[pulumi.InputType['BucketIAMMemberConditionArgs']] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
-               Structure is documented below.
-        :param pulumi.Input[str] member: Identities that will be granted the privilege in `role`.
+               
+               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
                Each entry can have one of the following values:
                * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
@@ -505,6 +401,8 @@ class BucketIAMMember(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        :param pulumi.Input[pulumi.InputType['BucketIAMMemberConditionArgs']] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
+               Structure is documented below.
         :param pulumi.Input[str] role: The role that should be applied. Only one
                `storage.BucketIAMBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -635,109 +533,6 @@ class BucketIAMMember(pulumi.CustomResource):
         ```
         <!--End PulumiCodeChooser -->
 
-        ## google\\_storage\\_bucket\\_iam\\_policy
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/storage.admin",
-            members=["user:jane@example.com"],
-        )])
-        policy = gcp.storage.BucketIAMPolicy("policy",
-            bucket=default["name"],
-            policy_data=admin.policy_data)
-        ```
-        <!--End PulumiCodeChooser -->
-
-        With IAM Conditions:
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/storage.admin",
-            members=["user:jane@example.com"],
-            condition=gcp.organizations.GetIAMPolicyBindingConditionArgs(
-                title="expires_after_2019_12_31",
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            ),
-        )])
-        policy = gcp.storage.BucketIAMPolicy("policy",
-            bucket=default["name"],
-            policy_data=admin.policy_data)
-        ```
-        <!--End PulumiCodeChooser -->
-        ## google\\_storage\\_bucket\\_iam\\_binding
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        binding = gcp.storage.BucketIAMBinding("binding",
-            bucket=default["name"],
-            role="roles/storage.admin",
-            members=["user:jane@example.com"])
-        ```
-        <!--End PulumiCodeChooser -->
-
-        With IAM Conditions:
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        binding = gcp.storage.BucketIAMBinding("binding",
-            bucket=default["name"],
-            role="roles/storage.admin",
-            members=["user:jane@example.com"],
-            condition=gcp.storage.BucketIAMBindingConditionArgs(
-                title="expires_after_2019_12_31",
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            ))
-        ```
-        <!--End PulumiCodeChooser -->
-        ## google\\_storage\\_bucket\\_iam\\_member
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        member = gcp.storage.BucketIAMMember("member",
-            bucket=default["name"],
-            role="roles/storage.admin",
-            member="user:jane@example.com")
-        ```
-        <!--End PulumiCodeChooser -->
-
-        With IAM Conditions:
-
-        <!--Start PulumiCodeChooser -->
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        member = gcp.storage.BucketIAMMember("member",
-            bucket=default["name"],
-            role="roles/storage.admin",
-            member="user:jane@example.com",
-            condition=gcp.storage.BucketIAMMemberConditionArgs(
-                title="expires_after_2019_12_31",
-                description="Expiring at midnight of 2019-12-31",
-                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            ))
-        ```
-        <!--End PulumiCodeChooser -->
-
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms:
@@ -834,10 +629,8 @@ class BucketIAMMember(pulumi.CustomResource):
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[str] bucket: Used to find the parent resource to bind the IAM policy to
-        :param pulumi.Input[pulumi.InputType['BucketIAMMemberConditionArgs']] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
-               Structure is documented below.
-        :param pulumi.Input[str] etag: (Computed) The etag of the IAM policy.
-        :param pulumi.Input[str] member: Identities that will be granted the privilege in `role`.
+               
+               * `member/members` - (Required) Identities that will be granted the privilege in `role`.
                Each entry can have one of the following values:
                * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
                * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
@@ -848,6 +641,9 @@ class BucketIAMMember(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        :param pulumi.Input[pulumi.InputType['BucketIAMMemberConditionArgs']] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
+               Structure is documented below.
+        :param pulumi.Input[str] etag: (Computed) The etag of the IAM policy.
         :param pulumi.Input[str] role: The role that should be applied. Only one
                `storage.BucketIAMBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -868,6 +664,18 @@ class BucketIAMMember(pulumi.CustomResource):
     def bucket(self) -> pulumi.Output[str]:
         """
         Used to find the parent resource to bind the IAM policy to
+
+        * `member/members` - (Required) Identities that will be granted the privilege in `role`.
+        Each entry can have one of the following values:
+        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
+        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
+        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
+        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
+        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
+        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
+        * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
+        * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
+        * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         """
         return pulumi.get(self, "bucket")
 
@@ -891,19 +699,6 @@ class BucketIAMMember(pulumi.CustomResource):
     @property
     @pulumi.getter
     def member(self) -> pulumi.Output[str]:
-        """
-        Identities that will be granted the privilege in `role`.
-        Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-        * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-        * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-        * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
-        """
         return pulumi.get(self, "member")
 
     @property