pulumi-gcp 7.23.0a1715695885__py3-none-any.whl → 7.24.0__py3-none-any.whl

pulumi_gcp/compute/firewall_policy_rule.py

@@ -24,11 +24,13 @@ class FirewallPolicyRuleArgs:
                  description: Optional[pulumi.Input[str]] = None,
                  disabled: Optional[pulumi.Input[bool]] = None,
                  enable_logging: Optional[pulumi.Input[bool]] = None,
+                 security_profile_group: Optional[pulumi.Input[str]] = None,
                  target_resources: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
+                 target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 tls_inspect: Optional[pulumi.Input[bool]] = None):
         """
         The set of arguments for constructing a FirewallPolicyRule resource.
-        :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
+        :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
         :param pulumi.Input[str] direction: The direction in which this rule applies. Possible values: INGRESS, EGRESS
         :param pulumi.Input[str] firewall_policy: The firewall policy of the resource.
         :param pulumi.Input['FirewallPolicyRuleMatchArgs'] match: A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced.
@@ -39,9 +41,14 @@ class FirewallPolicyRuleArgs:
         :param pulumi.Input[bool] enable_logging: Denotes whether to enable logging for a particular rule. If logging is enabled, logs will be exported to the configured
                export destination in Stackdriver. Logs may be exported to BigQuery or Pub/Sub. Note: you cannot enable logging on
                "goto_next" rules.
+        :param pulumi.Input[str] security_profile_group: A fully-qualified URL of a SecurityProfileGroup resource. Example:
+               https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
+               It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] target_resources: A list of network resource URLs to which this rule applies. This field allows you to control which network's VMs get
                this rule. If this field is left blank, all VMs within the organization will receive the rule.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] target_service_accounts: A list of service accounts indicating the sets of instances that are applied with this rule.
+        :param pulumi.Input[bool] tls_inspect: Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
+               'apply_security_profile_group' and cannot be set for other actions.
         """
         pulumi.set(__self__, "action", action)
         pulumi.set(__self__, "direction", direction)
@@ -54,16 +61,20 @@ class FirewallPolicyRuleArgs:
             pulumi.set(__self__, "disabled", disabled)
         if enable_logging is not None:
             pulumi.set(__self__, "enable_logging", enable_logging)
+        if security_profile_group is not None:
+            pulumi.set(__self__, "security_profile_group", security_profile_group)
         if target_resources is not None:
             pulumi.set(__self__, "target_resources", target_resources)
         if target_service_accounts is not None:
             pulumi.set(__self__, "target_service_accounts", target_service_accounts)
+        if tls_inspect is not None:
+            pulumi.set(__self__, "tls_inspect", tls_inspect)
 
     @property
     @pulumi.getter
     def action(self) -> pulumi.Input[str]:
         """
-        The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
+        The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
         """
         return pulumi.get(self, "action")
 
@@ -158,6 +169,20 @@ class FirewallPolicyRuleArgs:
     def enable_logging(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "enable_logging", value)
 
+    @property
+    @pulumi.getter(name="securityProfileGroup")
+    def security_profile_group(self) -> Optional[pulumi.Input[str]]:
+        """
+        A fully-qualified URL of a SecurityProfileGroup resource. Example:
+        https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
+        It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
+        """
+        return pulumi.get(self, "security_profile_group")
+
+    @security_profile_group.setter
+    def security_profile_group(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "security_profile_group", value)
+
     @property
     @pulumi.getter(name="targetResources")
     def target_resources(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
@@ -183,6 +208,19 @@ class FirewallPolicyRuleArgs:
     def target_service_accounts(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
         pulumi.set(self, "target_service_accounts", value)
 
+    @property
+    @pulumi.getter(name="tlsInspect")
+    def tls_inspect(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
+        'apply_security_profile_group' and cannot be set for other actions.
+        """
+        return pulumi.get(self, "tls_inspect")
+
+    @tls_inspect.setter
+    def tls_inspect(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "tls_inspect", value)
+
 
 @pulumi.input_type
 class _FirewallPolicyRuleState:
@@ -197,11 +235,13 @@ class _FirewallPolicyRuleState:
                  match: Optional[pulumi.Input['FirewallPolicyRuleMatchArgs']] = None,
                  priority: Optional[pulumi.Input[int]] = None,
                  rule_tuple_count: Optional[pulumi.Input[int]] = None,
+                 security_profile_group: Optional[pulumi.Input[str]] = None,
                  target_resources: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
+                 target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 tls_inspect: Optional[pulumi.Input[bool]] = None):
         """
         Input properties used for looking up and filtering FirewallPolicyRule resources.
-        :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
+        :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
         :param pulumi.Input[str] description: An optional description for this resource.
         :param pulumi.Input[str] direction: The direction in which this rule applies. Possible values: INGRESS, EGRESS
         :param pulumi.Input[bool] disabled: Denotes whether the firewall policy rule is disabled. When set to true, the firewall policy rule is not enforced and
@@ -214,9 +254,14 @@ class _FirewallPolicyRuleState:
         :param pulumi.Input['FirewallPolicyRuleMatchArgs'] match: A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced.
         :param pulumi.Input[int] priority: An integer indicating the priority of a rule in the list. The priority must be a positive value between 0 and 2147483647. Rules are evaluated from highest to lowest priority where 0 is the highest priority and 2147483647 is the lowest prority.
         :param pulumi.Input[int] rule_tuple_count: Calculation of the complexity of a single firewall policy rule.
+        :param pulumi.Input[str] security_profile_group: A fully-qualified URL of a SecurityProfileGroup resource. Example:
+               https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
+               It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] target_resources: A list of network resource URLs to which this rule applies. This field allows you to control which network's VMs get
                this rule. If this field is left blank, all VMs within the organization will receive the rule.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] target_service_accounts: A list of service accounts indicating the sets of instances that are applied with this rule.
+        :param pulumi.Input[bool] tls_inspect: Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
+               'apply_security_profile_group' and cannot be set for other actions.
         """
         if action is not None:
             pulumi.set(__self__, "action", action)
@@ -238,16 +283,20 @@ class _FirewallPolicyRuleState:
             pulumi.set(__self__, "priority", priority)
         if rule_tuple_count is not None:
             pulumi.set(__self__, "rule_tuple_count", rule_tuple_count)
+        if security_profile_group is not None:
+            pulumi.set(__self__, "security_profile_group", security_profile_group)
         if target_resources is not None:
             pulumi.set(__self__, "target_resources", target_resources)
         if target_service_accounts is not None:
             pulumi.set(__self__, "target_service_accounts", target_service_accounts)
+        if tls_inspect is not None:
+            pulumi.set(__self__, "tls_inspect", tls_inspect)
 
     @property
     @pulumi.getter
     def action(self) -> Optional[pulumi.Input[str]]:
         """
-        The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
+        The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
         """
         return pulumi.get(self, "action")
 
@@ -366,6 +415,20 @@ class _FirewallPolicyRuleState:
     def rule_tuple_count(self, value: Optional[pulumi.Input[int]]):
         pulumi.set(self, "rule_tuple_count", value)
 
+    @property
+    @pulumi.getter(name="securityProfileGroup")
+    def security_profile_group(self) -> Optional[pulumi.Input[str]]:
+        """
+        A fully-qualified URL of a SecurityProfileGroup resource. Example:
+        https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
+        It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
+        """
+        return pulumi.get(self, "security_profile_group")
+
+    @security_profile_group.setter
+    def security_profile_group(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "security_profile_group", value)
+
     @property
     @pulumi.getter(name="targetResources")
     def target_resources(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
@@ -391,6 +454,19 @@ class _FirewallPolicyRuleState:
     def target_service_accounts(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
         pulumi.set(self, "target_service_accounts", value)
 
+    @property
+    @pulumi.getter(name="tlsInspect")
+    def tls_inspect(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
+        'apply_security_profile_group' and cannot be set for other actions.
+        """
+        return pulumi.get(self, "tls_inspect")
+
+    @tls_inspect.setter
+    def tls_inspect(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "tls_inspect", value)
+
 
 class FirewallPolicyRule(pulumi.CustomResource):
     @overload
@@ -405,8 +481,10 @@ class FirewallPolicyRule(pulumi.CustomResource):
                  firewall_policy: Optional[pulumi.Input[str]] = None,
                  match: Optional[pulumi.Input[pulumi.InputType['FirewallPolicyRuleMatchArgs']]] = None,
                  priority: Optional[pulumi.Input[int]] = None,
+                 security_profile_group: Optional[pulumi.Input[str]] = None,
                  target_resources: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 tls_inspect: Optional[pulumi.Input[bool]] = None,
                  __props__=None):
         """
         The Compute FirewallPolicyRule resource
@@ -482,7 +560,7 @@ class FirewallPolicyRule(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
+        :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
         :param pulumi.Input[str] description: An optional description for this resource.
         :param pulumi.Input[str] direction: The direction in which this rule applies. Possible values: INGRESS, EGRESS
         :param pulumi.Input[bool] disabled: Denotes whether the firewall policy rule is disabled. When set to true, the firewall policy rule is not enforced and
@@ -493,9 +571,14 @@ class FirewallPolicyRule(pulumi.CustomResource):
         :param pulumi.Input[str] firewall_policy: The firewall policy of the resource.
         :param pulumi.Input[pulumi.InputType['FirewallPolicyRuleMatchArgs']] match: A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced.
         :param pulumi.Input[int] priority: An integer indicating the priority of a rule in the list. The priority must be a positive value between 0 and 2147483647. Rules are evaluated from highest to lowest priority where 0 is the highest priority and 2147483647 is the lowest prority.
+        :param pulumi.Input[str] security_profile_group: A fully-qualified URL of a SecurityProfileGroup resource. Example:
+               https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
+               It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] target_resources: A list of network resource URLs to which this rule applies. This field allows you to control which network's VMs get
                this rule. If this field is left blank, all VMs within the organization will receive the rule.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] target_service_accounts: A list of service accounts indicating the sets of instances that are applied with this rule.
+        :param pulumi.Input[bool] tls_inspect: Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
+               'apply_security_profile_group' and cannot be set for other actions.
         """
         ...
     @overload
@@ -598,8 +681,10 @@ class FirewallPolicyRule(pulumi.CustomResource):
                  firewall_policy: Optional[pulumi.Input[str]] = None,
                  match: Optional[pulumi.Input[pulumi.InputType['FirewallPolicyRuleMatchArgs']]] = None,
                  priority: Optional[pulumi.Input[int]] = None,
+                 security_profile_group: Optional[pulumi.Input[str]] = None,
                  target_resources: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 tls_inspect: Optional[pulumi.Input[bool]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -627,8 +712,10 @@ class FirewallPolicyRule(pulumi.CustomResource):
             if priority is None and not opts.urn:
                 raise TypeError("Missing required property 'priority'")
             __props__.__dict__["priority"] = priority
+            __props__.__dict__["security_profile_group"] = security_profile_group
             __props__.__dict__["target_resources"] = target_resources
             __props__.__dict__["target_service_accounts"] = target_service_accounts
+            __props__.__dict__["tls_inspect"] = tls_inspect
             __props__.__dict__["kind"] = None
             __props__.__dict__["rule_tuple_count"] = None
         super(FirewallPolicyRule, __self__).__init__(
@@ -651,8 +738,10 @@ class FirewallPolicyRule(pulumi.CustomResource):
             match: Optional[pulumi.Input[pulumi.InputType['FirewallPolicyRuleMatchArgs']]] = None,
             priority: Optional[pulumi.Input[int]] = None,
             rule_tuple_count: Optional[pulumi.Input[int]] = None,
+            security_profile_group: Optional[pulumi.Input[str]] = None,
             target_resources: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-            target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None) -> 'FirewallPolicyRule':
+            target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+            tls_inspect: Optional[pulumi.Input[bool]] = None) -> 'FirewallPolicyRule':
         """
         Get an existing FirewallPolicyRule resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -660,7 +749,7 @@ class FirewallPolicyRule(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
+        :param pulumi.Input[str] action: The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
         :param pulumi.Input[str] description: An optional description for this resource.
         :param pulumi.Input[str] direction: The direction in which this rule applies. Possible values: INGRESS, EGRESS
         :param pulumi.Input[bool] disabled: Denotes whether the firewall policy rule is disabled. When set to true, the firewall policy rule is not enforced and
@@ -673,9 +762,14 @@ class FirewallPolicyRule(pulumi.CustomResource):
         :param pulumi.Input[pulumi.InputType['FirewallPolicyRuleMatchArgs']] match: A match condition that incoming traffic is evaluated against. If it evaluates to true, the corresponding 'action' is enforced.
         :param pulumi.Input[int] priority: An integer indicating the priority of a rule in the list. The priority must be a positive value between 0 and 2147483647. Rules are evaluated from highest to lowest priority where 0 is the highest priority and 2147483647 is the lowest prority.
         :param pulumi.Input[int] rule_tuple_count: Calculation of the complexity of a single firewall policy rule.
+        :param pulumi.Input[str] security_profile_group: A fully-qualified URL of a SecurityProfileGroup resource. Example:
+               https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
+               It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] target_resources: A list of network resource URLs to which this rule applies. This field allows you to control which network's VMs get
                this rule. If this field is left blank, all VMs within the organization will receive the rule.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] target_service_accounts: A list of service accounts indicating the sets of instances that are applied with this rule.
+        :param pulumi.Input[bool] tls_inspect: Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
+               'apply_security_profile_group' and cannot be set for other actions.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -691,15 +785,17 @@ class FirewallPolicyRule(pulumi.CustomResource):
         __props__.__dict__["match"] = match
         __props__.__dict__["priority"] = priority
         __props__.__dict__["rule_tuple_count"] = rule_tuple_count
+        __props__.__dict__["security_profile_group"] = security_profile_group
         __props__.__dict__["target_resources"] = target_resources
         __props__.__dict__["target_service_accounts"] = target_service_accounts
+        __props__.__dict__["tls_inspect"] = tls_inspect
         return FirewallPolicyRule(resource_name, opts=opts, __props__=__props__)
 
     @property
     @pulumi.getter
     def action(self) -> pulumi.Output[str]:
         """
-        The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny" and "goto_next".
+        The Action to perform when the client connection triggers the rule. Valid actions are "allow", "deny", "goto_next" and "apply_security_profile_group".
         """
         return pulumi.get(self, "action")
 
@@ -778,6 +874,16 @@ class FirewallPolicyRule(pulumi.CustomResource):
         """
         return pulumi.get(self, "rule_tuple_count")
 
+    @property
+    @pulumi.getter(name="securityProfileGroup")
+    def security_profile_group(self) -> pulumi.Output[Optional[str]]:
+        """
+        A fully-qualified URL of a SecurityProfileGroup resource. Example:
+        https://networksecurity.googleapis.com/v1/organizations/{organizationId}/locations/global/securityProfileGroups/my-security-profile-group.
+        It must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
+        """
+        return pulumi.get(self, "security_profile_group")
+
     @property
     @pulumi.getter(name="targetResources")
     def target_resources(self) -> pulumi.Output[Optional[Sequence[str]]]:
@@ -795,3 +901,12 @@ class FirewallPolicyRule(pulumi.CustomResource):
         """
         return pulumi.get(self, "target_service_accounts")
 
+    @property
+    @pulumi.getter(name="tlsInspect")
+    def tls_inspect(self) -> pulumi.Output[Optional[bool]]:
+        """
+        Boolean flag indicating if the traffic should be TLS decrypted. It can be set only if action =
+        'apply_security_profile_group' and cannot be set for other actions.
+        """
+        return pulumi.get(self, "tls_inspect")
+

pulumi_gcp/compute/forwarding_rule.py

@@ -2366,7 +2366,7 @@ class ForwardingRule(pulumi.CustomResource):
             port_range="80",
             target=default_region_target_http_proxy.id,
             network=default_network.id,
-            ip_address=default_address.id,
+            ip_address=default_address.address,
             network_tier="STANDARD")
         fw1 = gcp.compute.Firewall("fw1",
             name="website-fw-1",
@@ -2592,7 +2592,7 @@ class ForwardingRule(pulumi.CustomResource):
         steering = gcp.compute.ForwardingRule("steering",
             name="steering-rule",
             region="us-central1",
-            ip_address=basic.self_link,
+            ip_address=basic.address,
             backend_service=external.self_link,
             load_balancing_scheme="EXTERNAL",
             source_ip_ranges=[
@@ -2602,7 +2602,7 @@ class ForwardingRule(pulumi.CustomResource):
         external_forwarding_rule = gcp.compute.ForwardingRule("external",
             name="external-forwarding-rule",
             region="us-central1",
-            ip_address=basic.self_link,
+            ip_address=basic.address,
             backend_service=external.self_link,
             load_balancing_scheme="EXTERNAL")
         ```
@@ -3560,7 +3560,7 @@ class ForwardingRule(pulumi.CustomResource):
             port_range="80",
             target=default_region_target_http_proxy.id,
             network=default_network.id,
-            ip_address=default_address.id,
+            ip_address=default_address.address,
             network_tier="STANDARD")
         fw1 = gcp.compute.Firewall("fw1",
             name="website-fw-1",
@@ -3786,7 +3786,7 @@ class ForwardingRule(pulumi.CustomResource):
         steering = gcp.compute.ForwardingRule("steering",
             name="steering-rule",
             region="us-central1",
-            ip_address=basic.self_link,
+            ip_address=basic.address,
             backend_service=external.self_link,
             load_balancing_scheme="EXTERNAL",
             source_ip_ranges=[
@@ -3796,7 +3796,7 @@ class ForwardingRule(pulumi.CustomResource):
         external_forwarding_rule = gcp.compute.ForwardingRule("external",
             name="external-forwarding-rule",
             region="us-central1",
-            ip_address=basic.self_link,
+            ip_address=basic.address,
             backend_service=external.self_link,
             load_balancing_scheme="EXTERNAL")
         ```

pulumi_gcp/compute/get_network_endpoint_group.py

@@ -178,7 +178,7 @@ def get_network_endpoint_group(name: Optional[str] = None,
            Provide either this or a `self_link`.
     :param str project: The ID of the project to list versions in.
            If it is not provided, the provider project is used.
-    :param str self_link: The Network Endpoint Group self\\_link.
+    :param str self_link: The Network Endpoint Group self_link.
     :param str zone: The Network Endpoint Group availability zone.
     """
     __args__ = dict()
@@ -230,7 +230,7 @@ def get_network_endpoint_group_output(name: Optional[pulumi.Input[Optional[str]]
            Provide either this or a `self_link`.
     :param str project: The ID of the project to list versions in.
            If it is not provided, the provider project is used.
-    :param str self_link: The Network Endpoint Group self\\_link.
+    :param str self_link: The Network Endpoint Group self_link.
     :param str zone: The Network Endpoint Group availability zone.
     """
     ...

pulumi_gcp/compute/get_region_network_endpoint_group.py

@@ -202,7 +202,7 @@ def get_region_network_endpoint_group(name: Optional[str] = None,
     :param str name: The Network Endpoint Group name. Provide either this or a `self_link`.
     :param str project: The ID of the project to list versions in. If it is not provided, the provider project is used.
     :param str region: A reference to the region where the Serverless REGs Reside. Provide either this or a `self_link`.
-    :param str self_link: The Network Endpoint Group self\\_link.
+    :param str self_link: The Network Endpoint Group self_link.
     """
     __args__ = dict()
     __args__['name'] = name
@@ -255,6 +255,6 @@ def get_region_network_endpoint_group_output(name: Optional[pulumi.Input[Optiona
     :param str name: The Network Endpoint Group name. Provide either this or a `self_link`.
     :param str project: The ID of the project to list versions in. If it is not provided, the provider project is used.
     :param str region: A reference to the region where the Serverless REGs Reside. Provide either this or a `self_link`.
-    :param str self_link: The Network Endpoint Group self\\_link.
+    :param str self_link: The Network Endpoint Group self_link.
     """
     ...

pulumi_gcp/compute/get_router_nat.py

@@ -22,7 +22,10 @@ class GetRouterNatResult:
     """
     A collection of values returned by getRouterNat.
     """
-    def __init__(__self__, drain_nat_ips=None, enable_dynamic_port_allocation=None, enable_endpoint_independent_mapping=None, endpoint_types=None, icmp_idle_timeout_sec=None, id=None, log_configs=None, max_ports_per_vm=None, min_ports_per_vm=None, name=None, nat_ip_allocate_option=None, nat_ips=None, project=None, region=None, router=None, rules=None, source_subnetwork_ip_ranges_to_nat=None, subnetworks=None, tcp_established_idle_timeout_sec=None, tcp_time_wait_timeout_sec=None, tcp_transitory_idle_timeout_sec=None, type=None, udp_idle_timeout_sec=None):
+    def __init__(__self__, auto_network_tier=None, drain_nat_ips=None, enable_dynamic_port_allocation=None, enable_endpoint_independent_mapping=None, endpoint_types=None, icmp_idle_timeout_sec=None, id=None, log_configs=None, max_ports_per_vm=None, min_ports_per_vm=None, name=None, nat_ip_allocate_option=None, nat_ips=None, project=None, region=None, router=None, rules=None, source_subnetwork_ip_ranges_to_nat=None, subnetworks=None, tcp_established_idle_timeout_sec=None, tcp_time_wait_timeout_sec=None, tcp_transitory_idle_timeout_sec=None, type=None, udp_idle_timeout_sec=None):
+        if auto_network_tier and not isinstance(auto_network_tier, str):
+            raise TypeError("Expected argument 'auto_network_tier' to be a str")
+        pulumi.set(__self__, "auto_network_tier", auto_network_tier)
         if drain_nat_ips and not isinstance(drain_nat_ips, list):
             raise TypeError("Expected argument 'drain_nat_ips' to be a list")
         pulumi.set(__self__, "drain_nat_ips", drain_nat_ips)
@@ -93,6 +96,11 @@ class GetRouterNatResult:
             raise TypeError("Expected argument 'udp_idle_timeout_sec' to be a int")
         pulumi.set(__self__, "udp_idle_timeout_sec", udp_idle_timeout_sec)
 
+    @property
+    @pulumi.getter(name="autoNetworkTier")
+    def auto_network_tier(self) -> str:
+        return pulumi.get(self, "auto_network_tier")
+
     @property
     @pulumi.getter(name="drainNatIps")
     def drain_nat_ips(self) -> Sequence[str]:
@@ -218,6 +226,7 @@ class AwaitableGetRouterNatResult(GetRouterNatResult):
         if False:
             yield self
         return GetRouterNatResult(
+            auto_network_tier=self.auto_network_tier,
             drain_nat_ips=self.drain_nat_ips,
             enable_dynamic_port_allocation=self.enable_dynamic_port_allocation,
             enable_endpoint_independent_mapping=self.enable_endpoint_independent_mapping,
@@ -284,6 +293,7 @@ def get_router_nat(name: Optional[str] = None,
     __ret__ = pulumi.runtime.invoke('gcp:compute/getRouterNat:getRouterNat', __args__, opts=opts, typ=GetRouterNatResult).value
 
     return AwaitableGetRouterNatResult(
+        auto_network_tier=pulumi.get(__ret__, 'auto_network_tier'),
         drain_nat_ips=pulumi.get(__ret__, 'drain_nat_ips'),
         enable_dynamic_port_allocation=pulumi.get(__ret__, 'enable_dynamic_port_allocation'),
         enable_endpoint_independent_mapping=pulumi.get(__ret__, 'enable_endpoint_independent_mapping'),

pulumi_gcp/compute/get_snapshot.py

@@ -263,6 +263,7 @@ def get_snapshot(filter: Optional[str] = None,
     :param str filter: A filter to retrieve the compute snapshot.
            See [gcloud topic filters](https://cloud.google.com/sdk/gcloud/reference/topic/filters) for reference.
            If multiple compute snapshot match, either adjust the filter or specify `most_recent`. One of `name` or `filter` must be provided.
+           If you want to use a regular expression, use the `eq` (equal) or `ne` (not equal) operator against a single un-parenthesized expression with or without quotes or against multiple parenthesized expressions. Example `sourceDisk eq '.*(.*/data-disk$).*'`. More details for golang Snapshots list call filters [here](https://pkg.go.dev/google.golang.org/api/compute/v1#SnapshotsListCall.Filter).
     :param bool most_recent: If `filter` is provided, ensures the most recent snapshot is returned when multiple compute snapshot match. 
            
            - - -
@@ -333,6 +334,7 @@ def get_snapshot_output(filter: Optional[pulumi.Input[Optional[str]]] = None,
     :param str filter: A filter to retrieve the compute snapshot.
            See [gcloud topic filters](https://cloud.google.com/sdk/gcloud/reference/topic/filters) for reference.
            If multiple compute snapshot match, either adjust the filter or specify `most_recent`. One of `name` or `filter` must be provided.
+           If you want to use a regular expression, use the `eq` (equal) or `ne` (not equal) operator against a single un-parenthesized expression with or without quotes or against multiple parenthesized expressions. Example `sourceDisk eq '.*(.*/data-disk$).*'`. More details for golang Snapshots list call filters [here](https://pkg.go.dev/google.golang.org/api/compute/v1#SnapshotsListCall.Filter).
     :param bool most_recent: If `filter` is provided, ensures the most recent snapshot is returned when multiple compute snapshot match. 
            
            - - -

pulumi_gcp/compute/image_iam_binding.py

@@ -286,7 +286,7 @@ class ImageIamBinding(pulumi.CustomResource):
 
         > **Note:**  This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
 
-        ## google\\_compute\\_image\\_iam\\_policy
+        ## compute.ImageIamPolicy
 
         ```python
         import pulumi
@@ -322,7 +322,7 @@ class ImageIamBinding(pulumi.CustomResource):
             image=example["name"],
             policy_data=admin.policy_data)
         ```
-        ## google\\_compute\\_image\\_iam\\_binding
+        ## compute.ImageIamBinding
 
         ```python
         import pulumi
@@ -352,7 +352,7 @@ class ImageIamBinding(pulumi.CustomResource):
                 expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
             ))
         ```
-        ## google\\_compute\\_image\\_iam\\_member
+        ## compute.ImageIamMember
 
         ```python
         import pulumi
@@ -383,7 +383,7 @@ class ImageIamBinding(pulumi.CustomResource):
             ))
         ```
 
-        ## google\\_compute\\_image\\_iam\\_policy
+        ## compute.ImageIamPolicy
 
         ```python
         import pulumi
@@ -419,7 +419,7 @@ class ImageIamBinding(pulumi.CustomResource):
             image=example["name"],
             policy_data=admin.policy_data)
         ```
-        ## google\\_compute\\_image\\_iam\\_binding
+        ## compute.ImageIamBinding
 
         ```python
         import pulumi
@@ -449,7 +449,7 @@ class ImageIamBinding(pulumi.CustomResource):
                 expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
             ))
         ```
-        ## google\\_compute\\_image\\_iam\\_member
+        ## compute.ImageIamMember
 
         ```python
         import pulumi
@@ -561,7 +561,7 @@ class ImageIamBinding(pulumi.CustomResource):
 
         > **Note:**  This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
 
-        ## google\\_compute\\_image\\_iam\\_policy
+        ## compute.ImageIamPolicy
 
         ```python
         import pulumi
@@ -597,7 +597,7 @@ class ImageIamBinding(pulumi.CustomResource):
             image=example["name"],
             policy_data=admin.policy_data)
         ```
-        ## google\\_compute\\_image\\_iam\\_binding
+        ## compute.ImageIamBinding
 
         ```python
         import pulumi
@@ -627,7 +627,7 @@ class ImageIamBinding(pulumi.CustomResource):
                 expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
             ))
         ```
-        ## google\\_compute\\_image\\_iam\\_member
+        ## compute.ImageIamMember
 
         ```python
         import pulumi
@@ -658,7 +658,7 @@ class ImageIamBinding(pulumi.CustomResource):
             ))
         ```
 
-        ## google\\_compute\\_image\\_iam\\_policy
+        ## compute.ImageIamPolicy
 
         ```python
         import pulumi
@@ -694,7 +694,7 @@ class ImageIamBinding(pulumi.CustomResource):
             image=example["name"],
             policy_data=admin.policy_data)
         ```
-        ## google\\_compute\\_image\\_iam\\_binding
+        ## compute.ImageIamBinding
 
         ```python
         import pulumi
@@ -724,7 +724,7 @@ class ImageIamBinding(pulumi.CustomResource):
                 expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
             ))
         ```
-        ## google\\_compute\\_image\\_iam\\_member
+        ## compute.ImageIamMember
 
         ```python
         import pulumi