pulumi-gcp 7.24.0a1715926460__py3-none-any.whl → 7.24.0a1716588893__py3-none-any.whl

pulumi_gcp/compute/router_nat.py

@@ -18,6 +18,7 @@ class RouterNatArgs:
     def __init__(__self__, *,
                  router: pulumi.Input[str],
                  source_subnetwork_ip_ranges_to_nat: pulumi.Input[str],
+                 auto_network_tier: Optional[pulumi.Input[str]] = None,
                  drain_nat_ips: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  enable_dynamic_port_allocation: Optional[pulumi.Input[bool]] = None,
                  enable_endpoint_independent_mapping: Optional[pulumi.Input[bool]] = None,
@@ -55,6 +56,10 @@ class RouterNatArgs:
                ALL_SUBNETWORKS_ALL_PRIMARY_IP_RANGES, then there should not be any
                other RouterNat section in any Router for this network in this region.
                Possible values are: `ALL_SUBNETWORKS_ALL_IP_RANGES`, `ALL_SUBNETWORKS_ALL_PRIMARY_IP_RANGES`, `LIST_OF_SUBNETWORKS`.
+        :param pulumi.Input[str] auto_network_tier: The network tier to use when automatically reserving NAT IP addresses.
+               Must be one of: PREMIUM, STANDARD. If not specified, then the current
+               project-level default tier is used.
+               Possible values are: `PREMIUM`, `STANDARD`.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] drain_nat_ips: A list of URLs of the IP resources to be drained. These IPs must be
                valid static external IPs that have been assigned to the NAT.
         :param pulumi.Input[bool] enable_dynamic_port_allocation: Enable Dynamic Port Allocation.
@@ -107,6 +112,8 @@ class RouterNatArgs:
         """
         pulumi.set(__self__, "router", router)
         pulumi.set(__self__, "source_subnetwork_ip_ranges_to_nat", source_subnetwork_ip_ranges_to_nat)
+        if auto_network_tier is not None:
+            pulumi.set(__self__, "auto_network_tier", auto_network_tier)
         if drain_nat_ips is not None:
             pulumi.set(__self__, "drain_nat_ips", drain_nat_ips)
         if enable_dynamic_port_allocation is not None:
@@ -185,6 +192,21 @@ class RouterNatArgs:
     def source_subnetwork_ip_ranges_to_nat(self, value: pulumi.Input[str]):
         pulumi.set(self, "source_subnetwork_ip_ranges_to_nat", value)
 
+    @property
+    @pulumi.getter(name="autoNetworkTier")
+    def auto_network_tier(self) -> Optional[pulumi.Input[str]]:
+        """
+        The network tier to use when automatically reserving NAT IP addresses.
+        Must be one of: PREMIUM, STANDARD. If not specified, then the current
+        project-level default tier is used.
+        Possible values are: `PREMIUM`, `STANDARD`.
+        """
+        return pulumi.get(self, "auto_network_tier")
+
+    @auto_network_tier.setter
+    def auto_network_tier(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "auto_network_tier", value)
+
     @property
     @pulumi.getter(name="drainNatIps")
     def drain_nat_ips(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
@@ -458,6 +480,7 @@ class RouterNatArgs:
 @pulumi.input_type
 class _RouterNatState:
     def __init__(__self__, *,
+                 auto_network_tier: Optional[pulumi.Input[str]] = None,
                  drain_nat_ips: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  enable_dynamic_port_allocation: Optional[pulumi.Input[bool]] = None,
                  enable_endpoint_independent_mapping: Optional[pulumi.Input[bool]] = None,
@@ -482,6 +505,10 @@ class _RouterNatState:
                  udp_idle_timeout_sec: Optional[pulumi.Input[int]] = None):
         """
         Input properties used for looking up and filtering RouterNat resources.
+        :param pulumi.Input[str] auto_network_tier: The network tier to use when automatically reserving NAT IP addresses.
+               Must be one of: PREMIUM, STANDARD. If not specified, then the current
+               project-level default tier is used.
+               Possible values are: `PREMIUM`, `STANDARD`.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] drain_nat_ips: A list of URLs of the IP resources to be drained. These IPs must be
                valid static external IPs that have been assigned to the NAT.
         :param pulumi.Input[bool] enable_dynamic_port_allocation: Enable Dynamic Port Allocation.
@@ -547,6 +574,8 @@ class _RouterNatState:
                Possible values are: `PUBLIC`, `PRIVATE`.
         :param pulumi.Input[int] udp_idle_timeout_sec: Timeout (in seconds) for UDP connections. Defaults to 30s if not set.
         """
+        if auto_network_tier is not None:
+            pulumi.set(__self__, "auto_network_tier", auto_network_tier)
         if drain_nat_ips is not None:
             pulumi.set(__self__, "drain_nat_ips", drain_nat_ips)
         if enable_dynamic_port_allocation is not None:
@@ -592,6 +621,21 @@ class _RouterNatState:
         if udp_idle_timeout_sec is not None:
             pulumi.set(__self__, "udp_idle_timeout_sec", udp_idle_timeout_sec)
 
+    @property
+    @pulumi.getter(name="autoNetworkTier")
+    def auto_network_tier(self) -> Optional[pulumi.Input[str]]:
+        """
+        The network tier to use when automatically reserving NAT IP addresses.
+        Must be one of: PREMIUM, STANDARD. If not specified, then the current
+        project-level default tier is used.
+        Possible values are: `PREMIUM`, `STANDARD`.
+        """
+        return pulumi.get(self, "auto_network_tier")
+
+    @auto_network_tier.setter
+    def auto_network_tier(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "auto_network_tier", value)
+
     @property
     @pulumi.getter(name="drainNatIps")
     def drain_nat_ips(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
@@ -904,6 +948,7 @@ class RouterNat(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 auto_network_tier: Optional[pulumi.Input[str]] = None,
                  drain_nat_ips: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  enable_dynamic_port_allocation: Optional[pulumi.Input[bool]] = None,
                  enable_endpoint_independent_mapping: Optional[pulumi.Input[bool]] = None,
@@ -1139,6 +1184,10 @@ class RouterNat(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[str] auto_network_tier: The network tier to use when automatically reserving NAT IP addresses.
+               Must be one of: PREMIUM, STANDARD. If not specified, then the current
+               project-level default tier is used.
+               Possible values are: `PREMIUM`, `STANDARD`.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] drain_nat_ips: A list of URLs of the IP resources to be drained. These IPs must be
                valid static external IPs that have been assigned to the NAT.
         :param pulumi.Input[bool] enable_dynamic_port_allocation: Enable Dynamic Port Allocation.
@@ -1435,6 +1484,7 @@ class RouterNat(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 auto_network_tier: Optional[pulumi.Input[str]] = None,
                  drain_nat_ips: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  enable_dynamic_port_allocation: Optional[pulumi.Input[bool]] = None,
                  enable_endpoint_independent_mapping: Optional[pulumi.Input[bool]] = None,
@@ -1466,6 +1516,7 @@ class RouterNat(pulumi.CustomResource):
                 raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
             __props__ = RouterNatArgs.__new__(RouterNatArgs)
 
+            __props__.__dict__["auto_network_tier"] = auto_network_tier
             __props__.__dict__["drain_nat_ips"] = drain_nat_ips
             __props__.__dict__["enable_dynamic_port_allocation"] = enable_dynamic_port_allocation
             __props__.__dict__["enable_endpoint_independent_mapping"] = enable_endpoint_independent_mapping
@@ -1502,6 +1553,7 @@ class RouterNat(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
+            auto_network_tier: Optional[pulumi.Input[str]] = None,
             drain_nat_ips: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
             enable_dynamic_port_allocation: Optional[pulumi.Input[bool]] = None,
             enable_endpoint_independent_mapping: Optional[pulumi.Input[bool]] = None,
@@ -1531,6 +1583,10 @@ class RouterNat(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[str] auto_network_tier: The network tier to use when automatically reserving NAT IP addresses.
+               Must be one of: PREMIUM, STANDARD. If not specified, then the current
+               project-level default tier is used.
+               Possible values are: `PREMIUM`, `STANDARD`.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] drain_nat_ips: A list of URLs of the IP resources to be drained. These IPs must be
                valid static external IPs that have been assigned to the NAT.
         :param pulumi.Input[bool] enable_dynamic_port_allocation: Enable Dynamic Port Allocation.
@@ -1600,6 +1656,7 @@ class RouterNat(pulumi.CustomResource):
 
         __props__ = _RouterNatState.__new__(_RouterNatState)
 
+        __props__.__dict__["auto_network_tier"] = auto_network_tier
         __props__.__dict__["drain_nat_ips"] = drain_nat_ips
         __props__.__dict__["enable_dynamic_port_allocation"] = enable_dynamic_port_allocation
         __props__.__dict__["enable_endpoint_independent_mapping"] = enable_endpoint_independent_mapping
@@ -1624,6 +1681,17 @@ class RouterNat(pulumi.CustomResource):
         __props__.__dict__["udp_idle_timeout_sec"] = udp_idle_timeout_sec
         return RouterNat(resource_name, opts=opts, __props__=__props__)
 
+    @property
+    @pulumi.getter(name="autoNetworkTier")
+    def auto_network_tier(self) -> pulumi.Output[str]:
+        """
+        The network tier to use when automatically reserving NAT IP addresses.
+        Must be one of: PREMIUM, STANDARD. If not specified, then the current
+        project-level default tier is used.
+        Possible values are: `PREMIUM`, `STANDARD`.
+        """
+        return pulumi.get(self, "auto_network_tier")
+
     @property
     @pulumi.getter(name="drainNatIps")
     def drain_nat_ips(self) -> pulumi.Output[Optional[Sequence[str]]]:

pulumi_gcp/compute/router_peer.py

@@ -53,6 +53,14 @@ class RouterPeerArgs:
                Possible values are: `DEFAULT`, `CUSTOM`.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] advertised_groups: User-specified list of prefix groups to advertise in custom
                mode, which currently supports the following option:
+               * `ALL_SUBNETS`: Advertises all of the router's own VPC subnets.
+               This excludes any routes learned for subnets that use VPC Network
+               Peering.
+               
+               Note that this field can only be populated if advertiseMode is `CUSTOM`
+               and overrides the list defined for the router (in the "bgp" message).
+               These groups are advertised in addition to any specified prefixes.
+               Leave this field blank to advertise no custom groups.
         :param pulumi.Input[Sequence[pulumi.Input['RouterPeerAdvertisedIpRangeArgs']]] advertised_ip_ranges: User-specified list of individual IP ranges to advertise in
                custom mode. This field can only be populated if advertiseMode
                is `CUSTOM` and is advertised to all peers of the router. These IP
@@ -204,6 +212,14 @@ class RouterPeerArgs:
         """
         User-specified list of prefix groups to advertise in custom
         mode, which currently supports the following option:
+        * `ALL_SUBNETS`: Advertises all of the router's own VPC subnets.
+        This excludes any routes learned for subnets that use VPC Network
+        Peering.
+
+        Note that this field can only be populated if advertiseMode is `CUSTOM`
+        and overrides the list defined for the router (in the "bgp" message).
+        These groups are advertised in addition to any specified prefixes.
+        Leave this field blank to advertise no custom groups.
         """
         return pulumi.get(self, "advertised_groups")
 
@@ -480,6 +496,14 @@ class _RouterPeerState:
                Possible values are: `DEFAULT`, `CUSTOM`.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] advertised_groups: User-specified list of prefix groups to advertise in custom
                mode, which currently supports the following option:
+               * `ALL_SUBNETS`: Advertises all of the router's own VPC subnets.
+               This excludes any routes learned for subnets that use VPC Network
+               Peering.
+               
+               Note that this field can only be populated if advertiseMode is `CUSTOM`
+               and overrides the list defined for the router (in the "bgp" message).
+               These groups are advertised in addition to any specified prefixes.
+               Leave this field blank to advertise no custom groups.
         :param pulumi.Input[Sequence[pulumi.Input['RouterPeerAdvertisedIpRangeArgs']]] advertised_ip_ranges: User-specified list of individual IP ranges to advertise in
                custom mode. This field can only be populated if advertiseMode
                is `CUSTOM` and is advertised to all peers of the router. These IP
@@ -506,6 +530,14 @@ class _RouterPeerState:
                If you do not specify the next hop addresses, Google Cloud automatically
                assigns unused addresses from the 2600:2d00:0:2::/64 or 2600:2d00:0:3::/64 range for you.
         :param pulumi.Input[str] management_type: The resource that configures and manages this BGP peer.
+               * `MANAGED_BY_USER` is the default value and can be managed by
+               you or other users
+               * `MANAGED_BY_ATTACHMENT` is a BGP peer that is configured and
+               managed by Cloud Interconnect, specifically by an
+               InterconnectAttachment of type PARTNER. Google automatically
+               creates, updates, and deletes this type of BGP peer when the
+               PARTNER InterconnectAttachment is created, updated,
+               or deleted.
         :param pulumi.Input['RouterPeerMd5AuthenticationKeyArgs'] md5_authentication_key: Configuration for MD5 authentication on the BGP session.
                Structure is documented below.
         :param pulumi.Input[str] name: Name of this BGP peer. The name must be 1-63 characters long,
@@ -604,6 +636,14 @@ class _RouterPeerState:
         """
         User-specified list of prefix groups to advertise in custom
         mode, which currently supports the following option:
+        * `ALL_SUBNETS`: Advertises all of the router's own VPC subnets.
+        This excludes any routes learned for subnets that use VPC Network
+        Peering.
+
+        Note that this field can only be populated if advertiseMode is `CUSTOM`
+        and overrides the list defined for the router (in the "bgp" message).
+        These groups are advertised in addition to any specified prefixes.
+        Leave this field blank to advertise no custom groups.
         """
         return pulumi.get(self, "advertised_groups")
 
@@ -751,6 +791,14 @@ class _RouterPeerState:
     def management_type(self) -> Optional[pulumi.Input[str]]:
         """
         The resource that configures and manages this BGP peer.
+        * `MANAGED_BY_USER` is the default value and can be managed by
+        you or other users
+        * `MANAGED_BY_ATTACHMENT` is a BGP peer that is configured and
+        managed by Cloud Interconnect, specifically by an
+        InterconnectAttachment of type PARTNER. Google automatically
+        creates, updates, and deletes this type of BGP peer when the
+        PARTNER InterconnectAttachment is created, updated,
+        or deleted.
         """
         return pulumi.get(self, "management_type")
 
@@ -1134,6 +1182,14 @@ class RouterPeer(pulumi.CustomResource):
                Possible values are: `DEFAULT`, `CUSTOM`.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] advertised_groups: User-specified list of prefix groups to advertise in custom
                mode, which currently supports the following option:
+               * `ALL_SUBNETS`: Advertises all of the router's own VPC subnets.
+               This excludes any routes learned for subnets that use VPC Network
+               Peering.
+               
+               Note that this field can only be populated if advertiseMode is `CUSTOM`
+               and overrides the list defined for the router (in the "bgp" message).
+               These groups are advertised in addition to any specified prefixes.
+               Leave this field blank to advertise no custom groups.
         :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['RouterPeerAdvertisedIpRangeArgs']]]] advertised_ip_ranges: User-specified list of individual IP ranges to advertise in
                custom mode. This field can only be populated if advertiseMode
                is `CUSTOM` and is advertised to all peers of the router. These IP
@@ -1516,6 +1572,14 @@ class RouterPeer(pulumi.CustomResource):
                Possible values are: `DEFAULT`, `CUSTOM`.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] advertised_groups: User-specified list of prefix groups to advertise in custom
                mode, which currently supports the following option:
+               * `ALL_SUBNETS`: Advertises all of the router's own VPC subnets.
+               This excludes any routes learned for subnets that use VPC Network
+               Peering.
+               
+               Note that this field can only be populated if advertiseMode is `CUSTOM`
+               and overrides the list defined for the router (in the "bgp" message).
+               These groups are advertised in addition to any specified prefixes.
+               Leave this field blank to advertise no custom groups.
         :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['RouterPeerAdvertisedIpRangeArgs']]]] advertised_ip_ranges: User-specified list of individual IP ranges to advertise in
                custom mode. This field can only be populated if advertiseMode
                is `CUSTOM` and is advertised to all peers of the router. These IP
@@ -1542,6 +1606,14 @@ class RouterPeer(pulumi.CustomResource):
                If you do not specify the next hop addresses, Google Cloud automatically
                assigns unused addresses from the 2600:2d00:0:2::/64 or 2600:2d00:0:3::/64 range for you.
         :param pulumi.Input[str] management_type: The resource that configures and manages this BGP peer.
+               * `MANAGED_BY_USER` is the default value and can be managed by
+               you or other users
+               * `MANAGED_BY_ATTACHMENT` is a BGP peer that is configured and
+               managed by Cloud Interconnect, specifically by an
+               InterconnectAttachment of type PARTNER. Google automatically
+               creates, updates, and deletes this type of BGP peer when the
+               PARTNER InterconnectAttachment is created, updated,
+               or deleted.
         :param pulumi.Input[pulumi.InputType['RouterPeerMd5AuthenticationKeyArgs']] md5_authentication_key: Configuration for MD5 authentication on the BGP session.
                Structure is documented below.
         :param pulumi.Input[str] name: Name of this BGP peer. The name must be 1-63 characters long,
@@ -1618,6 +1690,14 @@ class RouterPeer(pulumi.CustomResource):
         """
         User-specified list of prefix groups to advertise in custom
         mode, which currently supports the following option:
+        * `ALL_SUBNETS`: Advertises all of the router's own VPC subnets.
+        This excludes any routes learned for subnets that use VPC Network
+        Peering.
+
+        Note that this field can only be populated if advertiseMode is `CUSTOM`
+        and overrides the list defined for the router (in the "bgp" message).
+        These groups are advertised in addition to any specified prefixes.
+        Leave this field blank to advertise no custom groups.
         """
         return pulumi.get(self, "advertised_groups")
 
@@ -1721,6 +1801,14 @@ class RouterPeer(pulumi.CustomResource):
     def management_type(self) -> pulumi.Output[str]:
         """
         The resource that configures and manages this BGP peer.
+        * `MANAGED_BY_USER` is the default value and can be managed by
+        you or other users
+        * `MANAGED_BY_ATTACHMENT` is a BGP peer that is configured and
+        managed by Cloud Interconnect, specifically by an
+        InterconnectAttachment of type PARTNER. Google automatically
+        creates, updates, and deletes this type of BGP peer when the
+        PARTNER InterconnectAttachment is created, updated,
+        or deleted.
         """
         return pulumi.get(self, "management_type")
 

pulumi_gcp/compute/security_policy.py

@@ -40,6 +40,13 @@ class SecurityPolicyArgs:
                rule (rule with priority 2147483647 and match "\\*"). If no rules are provided when creating a
                security policy, a default rule with action "allow" will be added. Structure is documented below.
         :param pulumi.Input[str] type: The type indicates the intended use of the security policy. This field can be set only at resource creation time.
+               * `CLOUD_ARMOR` - Cloud Armor backend security policies can be configured to filter incoming HTTP requests targeting backend services.
+               They filter requests before they hit the origin servers.
+               * `CLOUD_ARMOR_EDGE` - Cloud Armor edge security policies can be configured to filter incoming HTTP requests targeting backend services
+               (including Cloud CDN-enabled) as well as backend buckets (Cloud Storage).
+               They filter requests before the request is served from Google's cache.
+               * `CLOUD_ARMOR_INTERNAL_SERVICE` - Cloud Armor internal service policies can be configured to filter HTTP requests targeting services
+               managed by Traffic Director in a service mesh. They filter requests before the request is served from the application.
         """
         if adaptive_protection_config is not None:
             pulumi.set(__self__, "adaptive_protection_config", adaptive_protection_config)
@@ -153,6 +160,13 @@ class SecurityPolicyArgs:
     def type(self) -> Optional[pulumi.Input[str]]:
         """
         The type indicates the intended use of the security policy. This field can be set only at resource creation time.
+        * `CLOUD_ARMOR` - Cloud Armor backend security policies can be configured to filter incoming HTTP requests targeting backend services.
+        They filter requests before they hit the origin servers.
+        * `CLOUD_ARMOR_EDGE` - Cloud Armor edge security policies can be configured to filter incoming HTTP requests targeting backend services
+        (including Cloud CDN-enabled) as well as backend buckets (Cloud Storage).
+        They filter requests before the request is served from Google's cache.
+        * `CLOUD_ARMOR_INTERNAL_SERVICE` - Cloud Armor internal service policies can be configured to filter HTTP requests targeting services
+        managed by Traffic Director in a service mesh. They filter requests before the request is served from the application.
         """
         return pulumi.get(self, "type")
 
@@ -192,6 +206,13 @@ class _SecurityPolicyState:
                security policy, a default rule with action "allow" will be added. Structure is documented below.
         :param pulumi.Input[str] self_link: The URI of the created resource.
         :param pulumi.Input[str] type: The type indicates the intended use of the security policy. This field can be set only at resource creation time.
+               * `CLOUD_ARMOR` - Cloud Armor backend security policies can be configured to filter incoming HTTP requests targeting backend services.
+               They filter requests before they hit the origin servers.
+               * `CLOUD_ARMOR_EDGE` - Cloud Armor edge security policies can be configured to filter incoming HTTP requests targeting backend services
+               (including Cloud CDN-enabled) as well as backend buckets (Cloud Storage).
+               They filter requests before the request is served from Google's cache.
+               * `CLOUD_ARMOR_INTERNAL_SERVICE` - Cloud Armor internal service policies can be configured to filter HTTP requests targeting services
+               managed by Traffic Director in a service mesh. They filter requests before the request is served from the application.
         """
         if adaptive_protection_config is not None:
             pulumi.set(__self__, "adaptive_protection_config", adaptive_protection_config)
@@ -333,6 +354,13 @@ class _SecurityPolicyState:
     def type(self) -> Optional[pulumi.Input[str]]:
         """
         The type indicates the intended use of the security policy. This field can be set only at resource creation time.
+        * `CLOUD_ARMOR` - Cloud Armor backend security policies can be configured to filter incoming HTTP requests targeting backend services.
+        They filter requests before they hit the origin servers.
+        * `CLOUD_ARMOR_EDGE` - Cloud Armor edge security policies can be configured to filter incoming HTTP requests targeting backend services
+        (including Cloud CDN-enabled) as well as backend buckets (Cloud Storage).
+        They filter requests before the request is served from Google's cache.
+        * `CLOUD_ARMOR_INTERNAL_SERVICE` - Cloud Armor internal service policies can be configured to filter HTTP requests targeting services
+        managed by Traffic Director in a service mesh. They filter requests before the request is served from the application.
         """
         return pulumi.get(self, "type")
 
@@ -545,6 +573,13 @@ class SecurityPolicy(pulumi.CustomResource):
                rule (rule with priority 2147483647 and match "\\*"). If no rules are provided when creating a
                security policy, a default rule with action "allow" will be added. Structure is documented below.
         :param pulumi.Input[str] type: The type indicates the intended use of the security policy. This field can be set only at resource creation time.
+               * `CLOUD_ARMOR` - Cloud Armor backend security policies can be configured to filter incoming HTTP requests targeting backend services.
+               They filter requests before they hit the origin servers.
+               * `CLOUD_ARMOR_EDGE` - Cloud Armor edge security policies can be configured to filter incoming HTTP requests targeting backend services
+               (including Cloud CDN-enabled) as well as backend buckets (Cloud Storage).
+               They filter requests before the request is served from Google's cache.
+               * `CLOUD_ARMOR_INTERNAL_SERVICE` - Cloud Armor internal service policies can be configured to filter HTTP requests targeting services
+               managed by Traffic Director in a service mesh. They filter requests before the request is served from the application.
         """
         ...
     @overload
@@ -811,6 +846,13 @@ class SecurityPolicy(pulumi.CustomResource):
                security policy, a default rule with action "allow" will be added. Structure is documented below.
         :param pulumi.Input[str] self_link: The URI of the created resource.
         :param pulumi.Input[str] type: The type indicates the intended use of the security policy. This field can be set only at resource creation time.
+               * `CLOUD_ARMOR` - Cloud Armor backend security policies can be configured to filter incoming HTTP requests targeting backend services.
+               They filter requests before they hit the origin servers.
+               * `CLOUD_ARMOR_EDGE` - Cloud Armor edge security policies can be configured to filter incoming HTTP requests targeting backend services
+               (including Cloud CDN-enabled) as well as backend buckets (Cloud Storage).
+               They filter requests before the request is served from Google's cache.
+               * `CLOUD_ARMOR_INTERNAL_SERVICE` - Cloud Armor internal service policies can be configured to filter HTTP requests targeting services
+               managed by Traffic Director in a service mesh. They filter requests before the request is served from the application.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -911,6 +953,13 @@ class SecurityPolicy(pulumi.CustomResource):
     def type(self) -> pulumi.Output[str]:
         """
         The type indicates the intended use of the security policy. This field can be set only at resource creation time.
+        * `CLOUD_ARMOR` - Cloud Armor backend security policies can be configured to filter incoming HTTP requests targeting backend services.
+        They filter requests before they hit the origin servers.
+        * `CLOUD_ARMOR_EDGE` - Cloud Armor edge security policies can be configured to filter incoming HTTP requests targeting backend services
+        (including Cloud CDN-enabled) as well as backend buckets (Cloud Storage).
+        They filter requests before the request is served from Google's cache.
+        * `CLOUD_ARMOR_INTERNAL_SERVICE` - Cloud Armor internal service policies can be configured to filter HTTP requests targeting services
+        managed by Traffic Director in a service mesh. They filter requests before the request is served from the application.
         """
         return pulumi.get(self, "type")
 

pulumi_gcp/compute/snapshot_iam_binding.py

@@ -273,7 +273,7 @@ class SnapshotIamBinding(pulumi.CustomResource):
 
         > **Note:** `compute.SnapshotIamBinding` resources **can be** used in conjunction with `compute.SnapshotIamMember` resources **only if** they do not grant privilege to the same role.
 
-        ## google\\_compute\\_snapshot\\_iam\\_policy
+        ## compute.SnapshotIamPolicy
 
         ```python
         import pulumi
@@ -289,7 +289,7 @@ class SnapshotIamBinding(pulumi.CustomResource):
             policy_data=admin.policy_data)
         ```
 
-        ## google\\_compute\\_snapshot\\_iam\\_binding
+        ## compute.SnapshotIamBinding
 
         ```python
         import pulumi
@@ -302,7 +302,7 @@ class SnapshotIamBinding(pulumi.CustomResource):
             members=["user:jane@example.com"])
         ```
 
-        ## google\\_compute\\_snapshot\\_iam\\_member
+        ## compute.SnapshotIamMember
 
         ```python
         import pulumi
@@ -315,7 +315,7 @@ class SnapshotIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## google\\_compute\\_snapshot\\_iam\\_policy
+        ## compute.SnapshotIamPolicy
 
         ```python
         import pulumi
@@ -331,7 +331,7 @@ class SnapshotIamBinding(pulumi.CustomResource):
             policy_data=admin.policy_data)
         ```
 
-        ## google\\_compute\\_snapshot\\_iam\\_binding
+        ## compute.SnapshotIamBinding
 
         ```python
         import pulumi
@@ -344,7 +344,7 @@ class SnapshotIamBinding(pulumi.CustomResource):
             members=["user:jane@example.com"])
         ```
 
-        ## google\\_compute\\_snapshot\\_iam\\_member
+        ## compute.SnapshotIamMember
 
         ```python
         import pulumi
@@ -434,7 +434,7 @@ class SnapshotIamBinding(pulumi.CustomResource):
 
         > **Note:** `compute.SnapshotIamBinding` resources **can be** used in conjunction with `compute.SnapshotIamMember` resources **only if** they do not grant privilege to the same role.
 
-        ## google\\_compute\\_snapshot\\_iam\\_policy
+        ## compute.SnapshotIamPolicy
 
         ```python
         import pulumi
@@ -450,7 +450,7 @@ class SnapshotIamBinding(pulumi.CustomResource):
             policy_data=admin.policy_data)
         ```
 
-        ## google\\_compute\\_snapshot\\_iam\\_binding
+        ## compute.SnapshotIamBinding
 
         ```python
         import pulumi
@@ -463,7 +463,7 @@ class SnapshotIamBinding(pulumi.CustomResource):
             members=["user:jane@example.com"])
         ```
 
-        ## google\\_compute\\_snapshot\\_iam\\_member
+        ## compute.SnapshotIamMember
 
         ```python
         import pulumi
@@ -476,7 +476,7 @@ class SnapshotIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## google\\_compute\\_snapshot\\_iam\\_policy
+        ## compute.SnapshotIamPolicy
 
         ```python
         import pulumi
@@ -492,7 +492,7 @@ class SnapshotIamBinding(pulumi.CustomResource):
             policy_data=admin.policy_data)
         ```
 
-        ## google\\_compute\\_snapshot\\_iam\\_binding
+        ## compute.SnapshotIamBinding
 
         ```python
         import pulumi
@@ -505,7 +505,7 @@ class SnapshotIamBinding(pulumi.CustomResource):
             members=["user:jane@example.com"])
         ```
 
-        ## google\\_compute\\_snapshot\\_iam\\_member
+        ## compute.SnapshotIamMember
 
         ```python
         import pulumi

pulumi_gcp/compute/snapshot_iam_member.py

@@ -273,7 +273,7 @@ class SnapshotIamMember(pulumi.CustomResource):
 
         > **Note:** `compute.SnapshotIamBinding` resources **can be** used in conjunction with `compute.SnapshotIamMember` resources **only if** they do not grant privilege to the same role.
 
-        ## google\\_compute\\_snapshot\\_iam\\_policy
+        ## compute.SnapshotIamPolicy
 
         ```python
         import pulumi
@@ -289,7 +289,7 @@ class SnapshotIamMember(pulumi.CustomResource):
             policy_data=admin.policy_data)
         ```
 
-        ## google\\_compute\\_snapshot\\_iam\\_binding
+        ## compute.SnapshotIamBinding
 
         ```python
         import pulumi
@@ -302,7 +302,7 @@ class SnapshotIamMember(pulumi.CustomResource):
             members=["user:jane@example.com"])
         ```
 
-        ## google\\_compute\\_snapshot\\_iam\\_member
+        ## compute.SnapshotIamMember
 
         ```python
         import pulumi
@@ -315,7 +315,7 @@ class SnapshotIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## google\\_compute\\_snapshot\\_iam\\_policy
+        ## compute.SnapshotIamPolicy
 
         ```python
         import pulumi
@@ -331,7 +331,7 @@ class SnapshotIamMember(pulumi.CustomResource):
             policy_data=admin.policy_data)
         ```
 
-        ## google\\_compute\\_snapshot\\_iam\\_binding
+        ## compute.SnapshotIamBinding
 
         ```python
         import pulumi
@@ -344,7 +344,7 @@ class SnapshotIamMember(pulumi.CustomResource):
             members=["user:jane@example.com"])
         ```
 
-        ## google\\_compute\\_snapshot\\_iam\\_member
+        ## compute.SnapshotIamMember
 
         ```python
         import pulumi
@@ -434,7 +434,7 @@ class SnapshotIamMember(pulumi.CustomResource):
 
         > **Note:** `compute.SnapshotIamBinding` resources **can be** used in conjunction with `compute.SnapshotIamMember` resources **only if** they do not grant privilege to the same role.
 
-        ## google\\_compute\\_snapshot\\_iam\\_policy
+        ## compute.SnapshotIamPolicy
 
         ```python
         import pulumi
@@ -450,7 +450,7 @@ class SnapshotIamMember(pulumi.CustomResource):
             policy_data=admin.policy_data)
         ```
 
-        ## google\\_compute\\_snapshot\\_iam\\_binding
+        ## compute.SnapshotIamBinding
 
         ```python
         import pulumi
@@ -463,7 +463,7 @@ class SnapshotIamMember(pulumi.CustomResource):
             members=["user:jane@example.com"])
         ```
 
-        ## google\\_compute\\_snapshot\\_iam\\_member
+        ## compute.SnapshotIamMember
 
         ```python
         import pulumi
@@ -476,7 +476,7 @@ class SnapshotIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## google\\_compute\\_snapshot\\_iam\\_policy
+        ## compute.SnapshotIamPolicy
 
         ```python
         import pulumi
@@ -492,7 +492,7 @@ class SnapshotIamMember(pulumi.CustomResource):
             policy_data=admin.policy_data)
         ```
 
-        ## google\\_compute\\_snapshot\\_iam\\_binding
+        ## compute.SnapshotIamBinding
 
         ```python
         import pulumi
@@ -505,7 +505,7 @@ class SnapshotIamMember(pulumi.CustomResource):
             members=["user:jane@example.com"])
         ```
 
-        ## google\\_compute\\_snapshot\\_iam\\_member
+        ## compute.SnapshotIamMember
 
         ```python
         import pulumi