pulumi-gcp 7.23.0a1715695885__py3-none-any.whl → 7.24.0__py3-none-any.whl

pulumi_gcp/networksecurity/firewall_endpoint.py

@@ -360,6 +360,23 @@ class FirewallEndpoint(pulumi.CustomResource):
                  parent: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
+        A Firewall endpoint is a Cloud Firewall resource that enables
+        layer 7 advanced protection capabilities, such as intrusion prevention,
+        in your network.
+
+        To get more information about FirewallEndpoint, see:
+
+        * [API documentation](https://cloud.google.com/firewall/docs/reference/network-security/rest/v1/organizations.locations.firewallEndpoints)
+        * How-to Guides
+            * [Firewall endpoint overview](https://cloud.google.com/firewall/docs/about-firewall-endpoints)
+            * [Create and associate firewall endpoints](https://cloud.google.com/firewall/docs/configure-firewall-endpoints)
+
+        > **Warning:** If you are using User ADCs (Application Default Credentials) with this resource,
+        you must specify a `billing_project_id` and set `user_project_override` to true
+        in the provider configuration. Otherwise the ACM API will return a 403 error.
+        Your account must have the `serviceusage.services.use` permission on the
+        `billing_project_id` you defined.
+
         ## Example Usage
 
         ### Network Security Firewall Endpoint Basic
@@ -412,6 +429,23 @@ class FirewallEndpoint(pulumi.CustomResource):
                  args: FirewallEndpointArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        A Firewall endpoint is a Cloud Firewall resource that enables
+        layer 7 advanced protection capabilities, such as intrusion prevention,
+        in your network.
+
+        To get more information about FirewallEndpoint, see:
+
+        * [API documentation](https://cloud.google.com/firewall/docs/reference/network-security/rest/v1/organizations.locations.firewallEndpoints)
+        * How-to Guides
+            * [Firewall endpoint overview](https://cloud.google.com/firewall/docs/about-firewall-endpoints)
+            * [Create and associate firewall endpoints](https://cloud.google.com/firewall/docs/configure-firewall-endpoints)
+
+        > **Warning:** If you are using User ADCs (Application Default Credentials) with this resource,
+        you must specify a `billing_project_id` and set `user_project_override` to true
+        in the provider configuration. Otherwise the ACM API will return a 403 error.
+        Your account must have the `serviceusage.services.use` permission on the
+        `billing_project_id` you defined.
+
         ## Example Usage
 
         ### Network Security Firewall Endpoint Basic

pulumi_gcp/networksecurity/firewall_endpoint_association.py

@@ -445,6 +445,18 @@ class FirewallEndpointAssociation(pulumi.CustomResource):
                  tls_inspection_policy: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
+        Firewall endpoint association links a firewall endpoint to a VPC network in
+        the same zone. After you define this association, Cloud Firewall forwards the
+        zonal workload traffic in your VPC network that requires layer 7 inspection to
+        the attached firewall endpoint.
+
+        To get more information about FirewallEndpointAssociation, see:
+
+        * [API documentation](https://cloud.google.com/firewall/docs/reference/network-security/rest/v1/projects.locations.firewallEndpointAssociations#FirewallEndpointAssociation)
+        * How-to Guides
+            * [Firewall endpoint overview](https://cloud.google.com/firewall/docs/about-firewall-endpoints)
+            * [Create and associate firewall endpoints](https://cloud.google.com/firewall/docs/configure-firewall-endpoints)
+
         ## Example Usage
 
         ### Network Security Firewall Endpoint Association Basic
@@ -508,6 +520,18 @@ class FirewallEndpointAssociation(pulumi.CustomResource):
                  args: FirewallEndpointAssociationArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        Firewall endpoint association links a firewall endpoint to a VPC network in
+        the same zone. After you define this association, Cloud Firewall forwards the
+        zonal workload traffic in your VPC network that requires layer 7 inspection to
+        the attached firewall endpoint.
+
+        To get more information about FirewallEndpointAssociation, see:
+
+        * [API documentation](https://cloud.google.com/firewall/docs/reference/network-security/rest/v1/projects.locations.firewallEndpointAssociations#FirewallEndpointAssociation)
+        * How-to Guides
+            * [Firewall endpoint overview](https://cloud.google.com/firewall/docs/about-firewall-endpoints)
+            * [Create and associate firewall endpoints](https://cloud.google.com/firewall/docs/configure-firewall-endpoints)
+
         ## Example Usage
 
         ### Network Security Firewall Endpoint Association Basic

pulumi_gcp/networksecurity/gateway_security_policy.py

@@ -360,11 +360,11 @@ class GatewaySecurityPolicy(pulumi.CustomResource):
             key_spec=gcp.certificateauthority.AuthorityKeySpecArgs(
                 algorithm="RSA_PKCS1_4096_SHA256",
             ))
-        ns_sa = gcp.projects.ServiceIdentity("ns_sa", service="networksecurity.googleapis.com")
+        project = gcp.organizations.get_project()
         tls_inspection_permission = gcp.certificateauthority.CaPoolIamMember("tls_inspection_permission",
             ca_pool=default.id,
             role="roles/privateca.certificateManager",
-            member=ns_sa.email.apply(lambda email: f"serviceAccount:{email}"))
+            member=f"serviceAccount:service-{project.number}@gcp-sa-networksecurity.iam.gserviceaccount.com")
         default_tls_inspection_policy = gcp.networksecurity.TlsInspectionPolicy("default",
             name="my-tls-inspection-policy",
             location="us-central1",
@@ -502,11 +502,11 @@ class GatewaySecurityPolicy(pulumi.CustomResource):
             key_spec=gcp.certificateauthority.AuthorityKeySpecArgs(
                 algorithm="RSA_PKCS1_4096_SHA256",
             ))
-        ns_sa = gcp.projects.ServiceIdentity("ns_sa", service="networksecurity.googleapis.com")
+        project = gcp.organizations.get_project()
         tls_inspection_permission = gcp.certificateauthority.CaPoolIamMember("tls_inspection_permission",
             ca_pool=default.id,
             role="roles/privateca.certificateManager",
-            member=ns_sa.email.apply(lambda email: f"serviceAccount:{email}"))
+            member=f"serviceAccount:service-{project.number}@gcp-sa-networksecurity.iam.gserviceaccount.com")
         default_tls_inspection_policy = gcp.networksecurity.TlsInspectionPolicy("default",
             name="my-tls-inspection-policy",
             location="us-central1",

pulumi_gcp/networksecurity/security_profile.py

@@ -408,6 +408,14 @@ class SecurityProfile(pulumi.CustomResource):
                  type: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
+        A security profile defines the behavior associated to a profile type.
+
+        To get more information about SecurityProfile, see:
+
+        * [API documentation](https://cloud.google.com/firewall/docs/reference/network-security/rest/v1/projects.locations.securityProfiles)
+        * How-to Guides
+            * [Create and manage security profiles](https://cloud.google.com/firewall/docs/configure-security-profiles)
+
         ## Example Usage
 
         ### Network Security Security Profile Basic
@@ -493,6 +501,14 @@ class SecurityProfile(pulumi.CustomResource):
                  args: SecurityProfileArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        A security profile defines the behavior associated to a profile type.
+
+        To get more information about SecurityProfile, see:
+
+        * [API documentation](https://cloud.google.com/firewall/docs/reference/network-security/rest/v1/projects.locations.securityProfiles)
+        * How-to Guides
+            * [Create and manage security profiles](https://cloud.google.com/firewall/docs/configure-security-profiles)
+
         ## Example Usage
 
         ### Network Security Security Profile Basic

pulumi_gcp/networksecurity/security_profile_group.py

@@ -350,6 +350,15 @@ class SecurityProfileGroup(pulumi.CustomResource):
                  threat_prevention_profile: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
+        A security profile group defines a container for security profiles.
+
+        To get more information about SecurityProfileGroup, see:
+
+        * [API documentation](https://cloud.google.com/firewall/docs/reference/network-security/rest/v1/organizations.locations.securityProfileGroups)
+        * How-to Guides
+            * [Security profile groups overview](https://cloud.google.com/firewall/docs/about-security-profile-groups)
+            * [Create and manage security profile groups](https://cloud.google.com/firewall/docs/configure-security-profile-groups)
+
         ## Example Usage
 
         ### Network Security Security Profile Group Basic
@@ -409,6 +418,15 @@ class SecurityProfileGroup(pulumi.CustomResource):
                  args: Optional[SecurityProfileGroupArgs] = None,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        A security profile group defines a container for security profiles.
+
+        To get more information about SecurityProfileGroup, see:
+
+        * [API documentation](https://cloud.google.com/firewall/docs/reference/network-security/rest/v1/organizations.locations.securityProfileGroups)
+        * How-to Guides
+            * [Security profile groups overview](https://cloud.google.com/firewall/docs/about-security-profile-groups)
+            * [Create and manage security profile groups](https://cloud.google.com/firewall/docs/configure-security-profile-groups)
+
         ## Example Usage
 
         ### Network Security Security Profile Group Basic