pulumi-gcp 7.23.0__py3-none-any.whl → 7.23.0a1715695885__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (42) hide show
  1. pulumi_gcp/__init__.py +0 -24
  2. pulumi_gcp/bigquery/table.py +0 -47
  3. pulumi_gcp/bigtable/__init__.py +0 -1
  4. pulumi_gcp/bigtable/_inputs.py +0 -101
  5. pulumi_gcp/bigtable/outputs.py +0 -119
  6. pulumi_gcp/certificateauthority/certificate_template.py +0 -70
  7. pulumi_gcp/cloudbuildv2/repository.py +2 -2
  8. pulumi_gcp/clouddeploy/_inputs.py +0 -96
  9. pulumi_gcp/clouddeploy/custom_target_type.py +0 -46
  10. pulumi_gcp/clouddeploy/delivery_pipeline.py +7 -7
  11. pulumi_gcp/clouddeploy/outputs.py +1 -96
  12. pulumi_gcp/clouddeploy/target.py +7 -54
  13. pulumi_gcp/compute/_inputs.py +0 -689
  14. pulumi_gcp/compute/firewall_policy_rule.py +10 -125
  15. pulumi_gcp/compute/network_firewall_policy_rule.py +10 -125
  16. pulumi_gcp/compute/outputs.py +0 -684
  17. pulumi_gcp/compute/region_network_firewall_policy_rule.py +10 -125
  18. pulumi_gcp/compute/region_security_policy_rule.py +1 -230
  19. pulumi_gcp/container/_inputs.py +3 -67
  20. pulumi_gcp/container/outputs.py +4 -93
  21. pulumi_gcp/dataflow/flex_template_job.py +7 -7
  22. pulumi_gcp/dataflow/job.py +7 -7
  23. pulumi_gcp/iam/_inputs.py +2 -191
  24. pulumi_gcp/iam/outputs.py +2 -197
  25. pulumi_gcp/iam/workforce_pool_provider.py +0 -245
  26. pulumi_gcp/integrationconnectors/__init__.py +0 -1
  27. pulumi_gcp/networkconnectivity/__init__.py +0 -1
  28. pulumi_gcp/networksecurity/firewall_endpoint.py +0 -34
  29. pulumi_gcp/networksecurity/firewall_endpoint_association.py +0 -24
  30. pulumi_gcp/networksecurity/security_profile.py +0 -16
  31. pulumi_gcp/networksecurity/security_profile_group.py +0 -18
  32. pulumi_gcp/networksecurity/tls_inspection_policy.py +0 -16
  33. pulumi_gcp/orgpolicy/policy.py +2 -2
  34. pulumi_gcp/pubsub/subscription.py +4 -4
  35. pulumi_gcp/pulumi-plugin.json +1 -1
  36. {pulumi_gcp-7.23.0.dist-info → pulumi_gcp-7.23.0a1715695885.dist-info}/METADATA +1 -1
  37. {pulumi_gcp-7.23.0.dist-info → pulumi_gcp-7.23.0a1715695885.dist-info}/RECORD +39 -42
  38. pulumi_gcp/bigtable/authorized_view.py +0 -440
  39. pulumi_gcp/integrationconnectors/managed_zone.py +0 -753
  40. pulumi_gcp/networkconnectivity/regional_endpoint.py +0 -946
  41. {pulumi_gcp-7.23.0.dist-info → pulumi_gcp-7.23.0a1715695885.dist-info}/WHEEL +0 -0
  42. {pulumi_gcp-7.23.0.dist-info → pulumi_gcp-7.23.0a1715695885.dist-info}/top_level.txt +0 -0
pulumi_gcp/compute/region_network_firewall_policy_rule.py CHANGED
@@ -27,13 +27,11 @@ class RegionNetworkFirewallPolicyRuleArgs:
27
27
  project: Optional[pulumi.Input[str]] = None,
28
28
  region: Optional[pulumi.Input[str]] = None,
29
29
  rule_name: Optional[pulumi.Input[str]] = None,
30
- security_profile_group: Optional[pulumi.Input[str]] = None,
31
30
  target_secure_tags: Optional[pulumi.Input[Sequence[pulumi.Input['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]]] = None,
32
- target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
33
- tls_inspect: Optional[pulumi.Input[bool]] = None):
31
+ target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
34
32
  """
35
33
  The set of arguments for constructing a RegionNetworkFirewallPolicyRule resource.
36
- :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
34
+ :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
37
35
  :param pulumi.Input[str] direction: The direction in which this rule applies. Possible values: INGRESS, EGRESS
38
36
  :param pulumi.Input[str] firewall_policy: The firewall policy of the resource.
39
37
  :param pulumi.Input['RegionNetworkFirewallPolicyRuleMatchArgs'] match: A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced.
@@ -47,9 +45,6 @@ class RegionNetworkFirewallPolicyRuleArgs:
47
45
  :param pulumi.Input[str] project: The project for the resource
48
46
  :param pulumi.Input[str] region: The location of this resource.
49
47
  :param pulumi.Input[str] rule_name: An optional name for the rule. This field is not a unique identifier and can be updated.
50
- :param pulumi.Input[str] security_profile_group: A fully-qualified URL of a SecurityProfileGroup resource. Example:
51
- https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
52
- It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
53
48
  :param pulumi.Input[Sequence[pulumi.Input['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]] target_secure_tags: A list of secure tags that controls which instances the firewall rule applies to. If <code>targetSecureTag</code> are
54
49
  specified, then the firewall rule applies only to instances in the VPC network that have one of those EFFECTIVE secure
55
50
  tags, if all the target_secure_tag are in INEFFECTIVE state, then this rule will be ignored.
@@ -57,8 +52,6 @@ class RegionNetworkFirewallPolicyRuleArgs:
57
52
  <code>targetServiceAccounts</code> nor <code>targetSecureTag</code> are specified, the firewall rule applies to all
58
53
  instances on the specified network. Maximum number of target label tags allowed is 256.
59
54
  :param pulumi.Input[Sequence[pulumi.Input[str]]] target_service_accounts: A list of service accounts indicating the sets of instances that are applied with this rule.
60
- :param pulumi.Input[bool] tls_inspect: Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
61
- 'apply_security_profile_group' and cannot be set for other actions.
62
55
  """
63
56
  pulumi.set(__self__, "action", action)
64
57
  pulumi.set(__self__, "direction", direction)
@@ -77,20 +70,16 @@ class RegionNetworkFirewallPolicyRuleArgs:
77
70
  pulumi.set(__self__, "region", region)
78
71
  if rule_name is not None:
79
72
  pulumi.set(__self__, "rule_name", rule_name)
80
- if security_profile_group is not None:
81
- pulumi.set(__self__, "security_profile_group", security_profile_group)
82
73
  if target_secure_tags is not None:
83
74
  pulumi.set(__self__, "target_secure_tags", target_secure_tags)
84
75
  if target_service_accounts is not None:
85
76
  pulumi.set(__self__, "target_service_accounts", target_service_accounts)
86
- if tls_inspect is not None:
87
- pulumi.set(__self__, "tls_inspect", tls_inspect)
88
77
 
89
78
  @property
90
79
  @pulumi.getter
91
80
  def action(self) -> pulumi.Input[str]:
92
81
  """
93
- The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
82
+ The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
94
83
  """
95
84
  return pulumi.get(self, "action")
96
85
 
@@ -221,20 +210,6 @@ class RegionNetworkFirewallPolicyRuleArgs:
221
210
  def rule_name(self, value: Optional[pulumi.Input[str]]):
222
211
  pulumi.set(self, "rule_name", value)
223
212
 
224
- @property
225
- @pulumi.getter(name="securityProfileGroup")
226
- def security_profile_group(self) -> Optional[pulumi.Input[str]]:
227
- """
228
- A fully-qualified URL of a SecurityProfileGroup resource. Example:
229
- https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
230
- It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
231
- """
232
- return pulumi.get(self, "security_profile_group")
233
-
234
- @security_profile_group.setter
235
- def security_profile_group(self, value: Optional[pulumi.Input[str]]):
236
- pulumi.set(self, "security_profile_group", value)
237
-
238
213
  @property
239
214
  @pulumi.getter(name="targetSecureTags")
240
215
  def target_secure_tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]]]:
@@ -264,19 +239,6 @@ class RegionNetworkFirewallPolicyRuleArgs:
264
239
  def target_service_accounts(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
265
240
  pulumi.set(self, "target_service_accounts", value)
266
241
 
267
- @property
268
- @pulumi.getter(name="tlsInspect")
269
- def tls_inspect(self) -> Optional[pulumi.Input[bool]]:
270
- """
271
- Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
272
- 'apply_security_profile_group' and cannot be set for other actions.
273
- """
274
- return pulumi.get(self, "tls_inspect")
275
-
276
- @tls_inspect.setter
277
- def tls_inspect(self, value: Optional[pulumi.Input[bool]]):
278
- pulumi.set(self, "tls_inspect", value)
279
-
280
242
 
281
243
  @pulumi.input_type
282
244
  class _RegionNetworkFirewallPolicyRuleState:
@@ -294,13 +256,11 @@ class _RegionNetworkFirewallPolicyRuleState:
294
256
  region: Optional[pulumi.Input[str]] = None,
295
257
  rule_name: Optional[pulumi.Input[str]] = None,
296
258
  rule_tuple_count: Optional[pulumi.Input[int]] = None,
297
- security_profile_group: Optional[pulumi.Input[str]] = None,
298
259
  target_secure_tags: Optional[pulumi.Input[Sequence[pulumi.Input['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]]] = None,
299
- target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
300
- tls_inspect: Optional[pulumi.Input[bool]] = None):
260
+ target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
301
261
  """
302
262
  Input properties used for looking up and filtering RegionNetworkFirewallPolicyRule resources.
303
- :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
263
+ :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
304
264
  :param pulumi.Input[str] description: An optional description for this resource.
305
265
  :param pulumi.Input[str] direction: The direction in which this rule applies. Possible values: INGRESS, EGRESS
306
266
  :param pulumi.Input[bool] disabled: Denotes whether the firewall policy rule is disabled. When set to true, the firewall policy rule is not enforced and
@@ -316,9 +276,6 @@ class _RegionNetworkFirewallPolicyRuleState:
316
276
  :param pulumi.Input[str] region: The location of this resource.
317
277
  :param pulumi.Input[str] rule_name: An optional name for the rule. This field is not a unique identifier and can be updated.
318
278
  :param pulumi.Input[int] rule_tuple_count: Calculation of the complexity of a single firewall policy rule.
319
- :param pulumi.Input[str] security_profile_group: A fully-qualified URL of a SecurityProfileGroup resource. Example:
320
- https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
321
- It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
322
279
  :param pulumi.Input[Sequence[pulumi.Input['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]] target_secure_tags: A list of secure tags that controls which instances the firewall rule applies to. If <code>targetSecureTag</code> are
323
280
  specified, then the firewall rule applies only to instances in the VPC network that have one of those EFFECTIVE secure
324
281
  tags, if all the target_secure_tag are in INEFFECTIVE state, then this rule will be ignored.
@@ -326,8 +283,6 @@ class _RegionNetworkFirewallPolicyRuleState:
326
283
  <code>targetServiceAccounts</code> nor <code>targetSecureTag</code> are specified, the firewall rule applies to all
327
284
  instances on the specified network. Maximum number of target label tags allowed is 256.
328
285
  :param pulumi.Input[Sequence[pulumi.Input[str]]] target_service_accounts: A list of service accounts indicating the sets of instances that are applied with this rule.
329
- :param pulumi.Input[bool] tls_inspect: Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
330
- 'apply_security_profile_group' and cannot be set for other actions.
331
286
  """
332
287
  if action is not None:
333
288
  pulumi.set(__self__, "action", action)
@@ -355,20 +310,16 @@ class _RegionNetworkFirewallPolicyRuleState:
355
310
  pulumi.set(__self__, "rule_name", rule_name)
356
311
  if rule_tuple_count is not None:
357
312
  pulumi.set(__self__, "rule_tuple_count", rule_tuple_count)
358
- if security_profile_group is not None:
359
- pulumi.set(__self__, "security_profile_group", security_profile_group)
360
313
  if target_secure_tags is not None:
361
314
  pulumi.set(__self__, "target_secure_tags", target_secure_tags)
362
315
  if target_service_accounts is not None:
363
316
  pulumi.set(__self__, "target_service_accounts", target_service_accounts)
364
- if tls_inspect is not None:
365
- pulumi.set(__self__, "tls_inspect", tls_inspect)
366
317
 
367
318
  @property
368
319
  @pulumi.getter
369
320
  def action(self) -> Optional[pulumi.Input[str]]:
370
321
  """
371
- The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
322
+ The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
372
323
  """
373
324
  return pulumi.get(self, "action")
374
325
 
@@ -523,20 +474,6 @@ class _RegionNetworkFirewallPolicyRuleState:
523
474
  def rule_tuple_count(self, value: Optional[pulumi.Input[int]]):
524
475
  pulumi.set(self, "rule_tuple_count", value)
525
476
 
526
- @property
527
- @pulumi.getter(name="securityProfileGroup")
528
- def security_profile_group(self) -> Optional[pulumi.Input[str]]:
529
- """
530
- A fully-qualified URL of a SecurityProfileGroup resource. Example:
531
- https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
532
- It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
533
- """
534
- return pulumi.get(self, "security_profile_group")
535
-
536
- @security_profile_group.setter
537
- def security_profile_group(self, value: Optional[pulumi.Input[str]]):
538
- pulumi.set(self, "security_profile_group", value)
539
-
540
477
  @property
541
478
  @pulumi.getter(name="targetSecureTags")
542
479
  def target_secure_tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]]]:
@@ -566,19 +503,6 @@ class _RegionNetworkFirewallPolicyRuleState:
566
503
  def target_service_accounts(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
567
504
  pulumi.set(self, "target_service_accounts", value)
568
505
 
569
- @property
570
- @pulumi.getter(name="tlsInspect")
571
- def tls_inspect(self) -> Optional[pulumi.Input[bool]]:
572
- """
573
- Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
574
- 'apply_security_profile_group' and cannot be set for other actions.
575
- """
576
- return pulumi.get(self, "tls_inspect")
577
-
578
- @tls_inspect.setter
579
- def tls_inspect(self, value: Optional[pulumi.Input[bool]]):
580
- pulumi.set(self, "tls_inspect", value)
581
-
582
506
 
583
507
  class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
584
508
  @overload
@@ -596,10 +520,8 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
596
520
  project: Optional[pulumi.Input[str]] = None,
597
521
  region: Optional[pulumi.Input[str]] = None,
598
522
  rule_name: Optional[pulumi.Input[str]] = None,
599
- security_profile_group: Optional[pulumi.Input[str]] = None,
600
523
  target_secure_tags: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]]]] = None,
601
524
  target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
602
- tls_inspect: Optional[pulumi.Input[bool]] = None,
603
525
  __props__=None):
604
526
  """
605
527
  The Compute NetworkFirewallPolicyRule resource
@@ -695,7 +617,7 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
695
617
 
696
618
  :param str resource_name: The name of the resource.
697
619
  :param pulumi.ResourceOptions opts: Options for the resource.
698
- :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
620
+ :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
699
621
  :param pulumi.Input[str] description: An optional description for this resource.
700
622
  :param pulumi.Input[str] direction: The direction in which this rule applies. Possible values: INGRESS, EGRESS
701
623
  :param pulumi.Input[bool] disabled: Denotes whether the firewall policy rule is disabled. When set to true, the firewall policy rule is not enforced and
@@ -709,9 +631,6 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
709
631
  :param pulumi.Input[str] project: The project for the resource
710
632
  :param pulumi.Input[str] region: The location of this resource.
711
633
  :param pulumi.Input[str] rule_name: An optional name for the rule. This field is not a unique identifier and can be updated.
712
- :param pulumi.Input[str] security_profile_group: A fully-qualified URL of a SecurityProfileGroup resource. Example:
713
- https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
714
- It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
715
634
  :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]]] target_secure_tags: A list of secure tags that controls which instances the firewall rule applies to. If <code>targetSecureTag</code> are
716
635
  specified, then the firewall rule applies only to instances in the VPC network that have one of those EFFECTIVE secure
717
636
  tags, if all the target_secure_tag are in INEFFECTIVE state, then this rule will be ignored.
@@ -719,8 +638,6 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
719
638
  <code>targetServiceAccounts</code> nor <code>targetSecureTag</code> are specified, the firewall rule applies to all
720
639
  instances on the specified network. Maximum number of target label tags allowed is 256.
721
640
  :param pulumi.Input[Sequence[pulumi.Input[str]]] target_service_accounts: A list of service accounts indicating the sets of instances that are applied with this rule.
722
- :param pulumi.Input[bool] tls_inspect: Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
723
- 'apply_security_profile_group' and cannot be set for other actions.
724
641
  """
725
642
  ...
726
643
  @overload
@@ -846,10 +763,8 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
846
763
  project: Optional[pulumi.Input[str]] = None,
847
764
  region: Optional[pulumi.Input[str]] = None,
848
765
  rule_name: Optional[pulumi.Input[str]] = None,
849
- security_profile_group: Optional[pulumi.Input[str]] = None,
850
766
  target_secure_tags: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]]]] = None,
851
767
  target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
852
- tls_inspect: Optional[pulumi.Input[bool]] = None,
853
768
  __props__=None):
854
769
  opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
855
770
  if not isinstance(opts, pulumi.ResourceOptions):
@@ -880,10 +795,8 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
880
795
  __props__.__dict__["project"] = project
881
796
  __props__.__dict__["region"] = region
882
797
  __props__.__dict__["rule_name"] = rule_name
883
- __props__.__dict__["security_profile_group"] = security_profile_group
884
798
  __props__.__dict__["target_secure_tags"] = target_secure_tags
885
799
  __props__.__dict__["target_service_accounts"] = target_service_accounts
886
- __props__.__dict__["tls_inspect"] = tls_inspect
887
800
  __props__.__dict__["kind"] = None
888
801
  __props__.__dict__["rule_tuple_count"] = None
889
802
  super(RegionNetworkFirewallPolicyRule, __self__).__init__(
@@ -909,10 +822,8 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
909
822
  region: Optional[pulumi.Input[str]] = None,
910
823
  rule_name: Optional[pulumi.Input[str]] = None,
911
824
  rule_tuple_count: Optional[pulumi.Input[int]] = None,
912
- security_profile_group: Optional[pulumi.Input[str]] = None,
913
825
  target_secure_tags: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]]]] = None,
914
- target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
915
- tls_inspect: Optional[pulumi.Input[bool]] = None) -> 'RegionNetworkFirewallPolicyRule':
826
+ target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None) -> 'RegionNetworkFirewallPolicyRule':
916
827
  """
917
828
  Get an existing RegionNetworkFirewallPolicyRule resource's state with the given name, id, and optional extra
918
829
  properties used to qualify the lookup.
@@ -920,7 +831,7 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
920
831
  :param str resource_name: The unique name of the resulting resource.
921
832
  :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
922
833
  :param pulumi.ResourceOptions opts: Options for the resource.
923
- :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
834
+ :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
924
835
  :param pulumi.Input[str] description: An optional description for this resource.
925
836
  :param pulumi.Input[str] direction: The direction in which this rule applies. Possible values: INGRESS, EGRESS
926
837
  :param pulumi.Input[bool] disabled: Denotes whether the firewall policy rule is disabled. When set to true, the firewall policy rule is not enforced and
@@ -936,9 +847,6 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
936
847
  :param pulumi.Input[str] region: The location of this resource.
937
848
  :param pulumi.Input[str] rule_name: An optional name for the rule. This field is not a unique identifier and can be updated.
938
849
  :param pulumi.Input[int] rule_tuple_count: Calculation of the complexity of a single firewall policy rule.
939
- :param pulumi.Input[str] security_profile_group: A fully-qualified URL of a SecurityProfileGroup resource. Example:
940
- https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
941
- It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
942
850
  :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['RegionNetworkFirewallPolicyRuleTargetSecureTagArgs']]]] target_secure_tags: A list of secure tags that controls which instances the firewall rule applies to. If <code>targetSecureTag</code> are
943
851
  specified, then the firewall rule applies only to instances in the VPC network that have one of those EFFECTIVE secure
944
852
  tags, if all the target_secure_tag are in INEFFECTIVE state, then this rule will be ignored.
@@ -946,8 +854,6 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
946
854
  <code>targetServiceAccounts</code> nor <code>targetSecureTag</code> are specified, the firewall rule applies to all
947
855
  instances on the specified network. Maximum number of target label tags allowed is 256.
948
856
  :param pulumi.Input[Sequence[pulumi.Input[str]]] target_service_accounts: A list of service accounts indicating the sets of instances that are applied with this rule.
949
- :param pulumi.Input[bool] tls_inspect: Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
950
- 'apply_security_profile_group' and cannot be set for other actions.
951
857
  """
952
858
  opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
953
859
 
@@ -966,17 +872,15 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
966
872
  __props__.__dict__["region"] = region
967
873
  __props__.__dict__["rule_name"] = rule_name
968
874
  __props__.__dict__["rule_tuple_count"] = rule_tuple_count
969
- __props__.__dict__["security_profile_group"] = security_profile_group
970
875
  __props__.__dict__["target_secure_tags"] = target_secure_tags
971
876
  __props__.__dict__["target_service_accounts"] = target_service_accounts
972
- __props__.__dict__["tls_inspect"] = tls_inspect
973
877
  return RegionNetworkFirewallPolicyRule(resource_name, opts=opts, __props__=__props__)
974
878
 
975
879
  @property
976
880
  @pulumi.getter
977
881
  def action(self) -> pulumi.Output[str]:
978
882
  """
979
- The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
883
+ The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
980
884
  """
981
885
  return pulumi.get(self, "action")
982
886
 
@@ -1079,16 +983,6 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
1079
983
  """
1080
984
  return pulumi.get(self, "rule_tuple_count")
1081
985
 
1082
- @property
1083
- @pulumi.getter(name="securityProfileGroup")
1084
- def security_profile_group(self) -> pulumi.Output[Optional[str]]:
1085
- """
1086
- A fully-qualified URL of a SecurityProfileGroup resource. Example:
1087
- https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
1088
- It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
1089
- """
1090
- return pulumi.get(self, "security_profile_group")
1091
-
1092
986
  @property
1093
987
  @pulumi.getter(name="targetSecureTags")
1094
988
  def target_secure_tags(self) -> pulumi.Output[Optional[Sequence['outputs.RegionNetworkFirewallPolicyRuleTargetSecureTag']]]:
@@ -1110,12 +1004,3 @@ class RegionNetworkFirewallPolicyRule(pulumi.CustomResource):
1110
1004
  """
1111
1005
  return pulumi.get(self, "target_service_accounts")
1112
1006
 
1113
- @property
1114
- @pulumi.getter(name="tlsInspect")
1115
- def tls_inspect(self) -> pulumi.Output[Optional[bool]]:
1116
- """
1117
- Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
1118
- 'apply_security_profile_group' and cannot be set for other actions.
1119
- """
1120
- return pulumi.get(self, "tls_inspect")
1121
-