pulumi-gcp 7.24.0a1716510380__py3-none-any.whl → 7.25.0__py3-none-any.whl

pulumi_gcp/kms/key_ring_iam_member.py

@@ -243,7 +243,7 @@ class KeyRingIAMMember(pulumi.CustomResource):
 
         > **Note:** `kms.KeyRingIAMBinding` resources **can be** used in conjunction with `kms.KeyRingIAMMember` resources **only if** they do not grant privilege to the same role.
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_policy
+        ## kms.KeyRingIAMPolicy
 
         ```python
         import pulumi
@@ -284,7 +284,7 @@ class KeyRingIAMMember(pulumi.CustomResource):
             policy_data=admin.policy_data)
         ```
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_binding
+        ## kms.KeyRingIAMBinding
 
         ```python
         import pulumi
@@ -313,7 +313,7 @@ class KeyRingIAMMember(pulumi.CustomResource):
             ))
         ```
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_member
+        ## kms.KeyRingIAMMember
 
         ```python
         import pulumi
@@ -342,7 +342,7 @@ class KeyRingIAMMember(pulumi.CustomResource):
             ))
         ```
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_policy
+        ## kms.KeyRingIAMPolicy
 
         ```python
         import pulumi
@@ -383,7 +383,7 @@ class KeyRingIAMMember(pulumi.CustomResource):
             policy_data=admin.policy_data)
         ```
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_binding
+        ## kms.KeyRingIAMBinding
 
         ```python
         import pulumi
@@ -412,7 +412,7 @@ class KeyRingIAMMember(pulumi.CustomResource):
             ))
         ```
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_member
+        ## kms.KeyRingIAMMember
 
         ```python
         import pulumi
@@ -504,7 +504,7 @@ class KeyRingIAMMember(pulumi.CustomResource):
 
         > **Note:** `kms.KeyRingIAMBinding` resources **can be** used in conjunction with `kms.KeyRingIAMMember` resources **only if** they do not grant privilege to the same role.
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_policy
+        ## kms.KeyRingIAMPolicy
 
         ```python
         import pulumi
@@ -545,7 +545,7 @@ class KeyRingIAMMember(pulumi.CustomResource):
             policy_data=admin.policy_data)
         ```
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_binding
+        ## kms.KeyRingIAMBinding
 
         ```python
         import pulumi
@@ -574,7 +574,7 @@ class KeyRingIAMMember(pulumi.CustomResource):
             ))
         ```
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_member
+        ## kms.KeyRingIAMMember
 
         ```python
         import pulumi
@@ -603,7 +603,7 @@ class KeyRingIAMMember(pulumi.CustomResource):
             ))
         ```
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_policy
+        ## kms.KeyRingIAMPolicy
 
         ```python
         import pulumi
@@ -644,7 +644,7 @@ class KeyRingIAMMember(pulumi.CustomResource):
             policy_data=admin.policy_data)
         ```
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_binding
+        ## kms.KeyRingIAMBinding
 
         ```python
         import pulumi
@@ -673,7 +673,7 @@ class KeyRingIAMMember(pulumi.CustomResource):
             ))
         ```
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_member
+        ## kms.KeyRingIAMMember
 
         ```python
         import pulumi

pulumi_gcp/kms/key_ring_iam_policy.py

@@ -140,7 +140,7 @@ class KeyRingIAMPolicy(pulumi.CustomResource):
 
         > **Note:** `kms.KeyRingIAMBinding` resources **can be** used in conjunction with `kms.KeyRingIAMMember` resources **only if** they do not grant privilege to the same role.
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_policy
+        ## kms.KeyRingIAMPolicy
 
         ```python
         import pulumi
@@ -181,7 +181,7 @@ class KeyRingIAMPolicy(pulumi.CustomResource):
             policy_data=admin.policy_data)
         ```
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_binding
+        ## kms.KeyRingIAMBinding
 
         ```python
         import pulumi
@@ -210,7 +210,7 @@ class KeyRingIAMPolicy(pulumi.CustomResource):
             ))
         ```
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_member
+        ## kms.KeyRingIAMMember
 
         ```python
         import pulumi
@@ -239,7 +239,7 @@ class KeyRingIAMPolicy(pulumi.CustomResource):
             ))
         ```
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_policy
+        ## kms.KeyRingIAMPolicy
 
         ```python
         import pulumi
@@ -280,7 +280,7 @@ class KeyRingIAMPolicy(pulumi.CustomResource):
             policy_data=admin.policy_data)
         ```
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_binding
+        ## kms.KeyRingIAMBinding
 
         ```python
         import pulumi
@@ -309,7 +309,7 @@ class KeyRingIAMPolicy(pulumi.CustomResource):
             ))
         ```
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_member
+        ## kms.KeyRingIAMMember
 
         ```python
         import pulumi
@@ -390,7 +390,7 @@ class KeyRingIAMPolicy(pulumi.CustomResource):
 
         > **Note:** `kms.KeyRingIAMBinding` resources **can be** used in conjunction with `kms.KeyRingIAMMember` resources **only if** they do not grant privilege to the same role.
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_policy
+        ## kms.KeyRingIAMPolicy
 
         ```python
         import pulumi
@@ -431,7 +431,7 @@ class KeyRingIAMPolicy(pulumi.CustomResource):
             policy_data=admin.policy_data)
         ```
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_binding
+        ## kms.KeyRingIAMBinding
 
         ```python
         import pulumi
@@ -460,7 +460,7 @@ class KeyRingIAMPolicy(pulumi.CustomResource):
             ))
         ```
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_member
+        ## kms.KeyRingIAMMember
 
         ```python
         import pulumi
@@ -489,7 +489,7 @@ class KeyRingIAMPolicy(pulumi.CustomResource):
             ))
         ```
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_policy
+        ## kms.KeyRingIAMPolicy
 
         ```python
         import pulumi
@@ -530,7 +530,7 @@ class KeyRingIAMPolicy(pulumi.CustomResource):
             policy_data=admin.policy_data)
         ```
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_binding
+        ## kms.KeyRingIAMBinding
 
         ```python
         import pulumi
@@ -559,7 +559,7 @@ class KeyRingIAMPolicy(pulumi.CustomResource):
             ))
         ```
 
-        ## google\\_kms\\_key\\_ring\\_iam\\_member
+        ## kms.KeyRingIAMMember
 
         ```python
         import pulumi

pulumi_gcp/logging/folder_settings.py

@@ -244,16 +244,17 @@ class FolderSettings(pulumi.CustomResource):
         my_folder = gcp.organizations.Folder("my_folder",
             display_name="folder-name",
             parent="organizations/123456789")
-        example = gcp.logging.FolderSettings("example",
-            disable_default_sink=True,
-            folder=my_folder.folder_id,
-            kms_key_name="kms-key",
-            storage_location="us-central1")
         settings = gcp.logging.get_folder_settings_output(folder=my_folder.folder_id)
         iam = gcp.kms.CryptoKeyIAMMember("iam",
             crypto_key_id="kms-key",
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=settings.apply(lambda settings: f"serviceAccount:{settings.kms_service_account_id}"))
+        example = gcp.logging.FolderSettings("example",
+            disable_default_sink=True,
+            folder=my_folder.folder_id,
+            kms_key_name="kms-key",
+            storage_location="us-central1",
+            opts=pulumi.ResourceOptions(depends_on=[iam]))
         ```
 
         ## Import
@@ -310,16 +311,17 @@ class FolderSettings(pulumi.CustomResource):
         my_folder = gcp.organizations.Folder("my_folder",
             display_name="folder-name",
             parent="organizations/123456789")
-        example = gcp.logging.FolderSettings("example",
-            disable_default_sink=True,
-            folder=my_folder.folder_id,
-            kms_key_name="kms-key",
-            storage_location="us-central1")
         settings = gcp.logging.get_folder_settings_output(folder=my_folder.folder_id)
         iam = gcp.kms.CryptoKeyIAMMember("iam",
             crypto_key_id="kms-key",
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=settings.apply(lambda settings: f"serviceAccount:{settings.kms_service_account_id}"))
+        example = gcp.logging.FolderSettings("example",
+            disable_default_sink=True,
+            folder=my_folder.folder_id,
+            kms_key_name="kms-key",
+            storage_location="us-central1",
+            opts=pulumi.ResourceOptions(depends_on=[iam]))
         ```
 
         ## Import

pulumi_gcp/logging/linked_dataset.py

@@ -352,7 +352,8 @@ class LinkedDataset(pulumi.CustomResource):
             bucket="my-bucket",
             parent="projects/my-project-name",
             location="global",
-            description="Linked dataset test")
+            description="Linked dataset test",
+            opts=pulumi.ResourceOptions(depends_on=[logging_linked_dataset]))
         ```
 
         ## Import
@@ -431,7 +432,8 @@ class LinkedDataset(pulumi.CustomResource):
             bucket="my-bucket",
             parent="projects/my-project-name",
             location="global",
-            description="Linked dataset test")
+            description="Linked dataset test",
+            opts=pulumi.ResourceOptions(depends_on=[logging_linked_dataset]))
         ```
 
         ## Import

pulumi_gcp/logging/organization_settings.py

@@ -241,16 +241,17 @@ class OrganizationSettings(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        example = gcp.logging.OrganizationSettings("example",
-            disable_default_sink=True,
-            kms_key_name="kms-key",
-            organization="123456789",
-            storage_location="us-central1")
         settings = gcp.logging.get_organization_settings(organization="123456789")
         iam = gcp.kms.CryptoKeyIAMMember("iam",
             crypto_key_id="kms-key",
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:{settings.kms_service_account_id}")
+        example = gcp.logging.OrganizationSettings("example",
+            disable_default_sink=True,
+            kms_key_name="kms-key",
+            organization="123456789",
+            storage_location="us-central1",
+            opts=pulumi.ResourceOptions(depends_on=[iam]))
         ```
 
         ## Import
@@ -304,16 +305,17 @@ class OrganizationSettings(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        example = gcp.logging.OrganizationSettings("example",
-            disable_default_sink=True,
-            kms_key_name="kms-key",
-            organization="123456789",
-            storage_location="us-central1")
         settings = gcp.logging.get_organization_settings(organization="123456789")
         iam = gcp.kms.CryptoKeyIAMMember("iam",
             crypto_key_id="kms-key",
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:{settings.kms_service_account_id}")
+        example = gcp.logging.OrganizationSettings("example",
+            disable_default_sink=True,
+            kms_key_name="kms-key",
+            organization="123456789",
+            storage_location="us-central1",
+            opts=pulumi.ResourceOptions(depends_on=[iam]))
         ```
 
         ## Import

pulumi_gcp/logging/project_bucket_config.py

@@ -437,7 +437,8 @@ class ProjectBucketConfig(pulumi.CustomResource):
             bucket_id="custom-bucket",
             cmek_settings=gcp.logging.ProjectBucketConfigCmekSettingsArgs(
                 kms_key_name=key.id,
-            ))
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[crypto_key_binding]))
         ```
 
         Create logging bucket with index configs
@@ -563,7 +564,8 @@ class ProjectBucketConfig(pulumi.CustomResource):
             bucket_id="custom-bucket",
             cmek_settings=gcp.logging.ProjectBucketConfigCmekSettingsArgs(
                 kms_key_name=key.id,
-            ))
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[crypto_key_binding]))
         ```
 
         Create logging bucket with index configs

pulumi_gcp/looker/instance.py

@@ -860,6 +860,10 @@ class Instance(pulumi.CustomResource):
             address_type="INTERNAL",
             prefix_length=20,
             network=looker_network.id)
+        looker_vpc_connection = gcp.servicenetworking.Connection("looker_vpc_connection",
+            network=looker_network.id,
+            service="servicenetworking.googleapis.com",
+            reserved_peering_ranges=[looker_range.name])
         looker_instance = gcp.looker.Instance("looker-instance",
             name="my-instance",
             platform_edition="LOOKER_CORE_ENTERPRISE_ANNUAL",
@@ -904,11 +908,8 @@ class Instance(pulumi.CustomResource):
             oauth_config=gcp.looker.InstanceOauthConfigArgs(
                 client_id="my-client-id",
                 client_secret="my-client-secret",
-            ))
-        looker_vpc_connection = gcp.servicenetworking.Connection("looker_vpc_connection",
-            network=looker_network.id,
-            service="servicenetworking.googleapis.com",
-            reserved_peering_ranges=[looker_range.name])
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[looker_vpc_connection]))
         project = gcp.organizations.get_project()
         crypto_key = gcp.kms.CryptoKeyIAMMember("crypto_key",
             crypto_key_id="looker-kms-key",
@@ -1106,6 +1107,10 @@ class Instance(pulumi.CustomResource):
             address_type="INTERNAL",
             prefix_length=20,
             network=looker_network.id)
+        looker_vpc_connection = gcp.servicenetworking.Connection("looker_vpc_connection",
+            network=looker_network.id,
+            service="servicenetworking.googleapis.com",
+            reserved_peering_ranges=[looker_range.name])
         looker_instance = gcp.looker.Instance("looker-instance",
             name="my-instance",
             platform_edition="LOOKER_CORE_ENTERPRISE_ANNUAL",
@@ -1150,11 +1155,8 @@ class Instance(pulumi.CustomResource):
             oauth_config=gcp.looker.InstanceOauthConfigArgs(
                 client_id="my-client-id",
                 client_secret="my-client-secret",
-            ))
-        looker_vpc_connection = gcp.servicenetworking.Connection("looker_vpc_connection",
-            network=looker_network.id,
-            service="servicenetworking.googleapis.com",
-            reserved_peering_ranges=[looker_range.name])
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[looker_vpc_connection]))
         project = gcp.organizations.get_project()
         crypto_key = gcp.kms.CryptoKeyIAMMember("crypto_key",
             crypto_key_id="looker-kms-key",

pulumi_gcp/netapp/storage_pool.py

@@ -31,7 +31,7 @@ class StoragePoolArgs:
         :param pulumi.Input[str] location: Name of the location. Usually a region name, expect for some STANDARD service level pools which require a zone name.
         :param pulumi.Input[str] network: VPC network name with format: `projects/{{project}}/global/networks/{{network}}`
         :param pulumi.Input[str] service_level: Service level of the storage pool.
-               Possible values are: `PREMIUM`, `EXTREME`, `STANDARD`.
+               Possible values are: `PREMIUM`, `EXTREME`, `STANDARD`, `FLEX`.
         :param pulumi.Input[str] active_directory: Specifies the Active Directory policy to be used. Format: `projects/{{project}}/locations/{{location}}/activeDirectories/{{name}}`.
                The policy needs to be in the same location as the storage pool.
         :param pulumi.Input[str] description: An optional description of this resource.
@@ -110,7 +110,7 @@ class StoragePoolArgs:
     def service_level(self) -> pulumi.Input[str]:
         """
         Service level of the storage pool.
-        Possible values are: `PREMIUM`, `EXTREME`, `STANDARD`.
+        Possible values are: `PREMIUM`, `EXTREME`, `STANDARD`, `FLEX`.
         """
         return pulumi.get(self, "service_level")
 
@@ -259,7 +259,7 @@ class _StoragePoolState:
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] pulumi_labels: The combination of labels configured directly on the resource
                and default labels configured on the provider.
         :param pulumi.Input[str] service_level: Service level of the storage pool.
-               Possible values are: `PREMIUM`, `EXTREME`, `STANDARD`.
+               Possible values are: `PREMIUM`, `EXTREME`, `STANDARD`, `FLEX`.
         :param pulumi.Input[str] volume_capacity_gib: Size allocated to volumes in the storage pool (in GiB).
         :param pulumi.Input[int] volume_count: Number of volume in the storage pool.
         """
@@ -468,7 +468,7 @@ class _StoragePoolState:
     def service_level(self) -> Optional[pulumi.Input[str]]:
         """
         Service level of the storage pool.
-        Possible values are: `PREMIUM`, `EXTREME`, `STANDARD`.
+        Possible values are: `PREMIUM`, `EXTREME`, `STANDARD`, `FLEX`.
         """
         return pulumi.get(self, "service_level")
 
@@ -625,7 +625,7 @@ class StoragePool(pulumi.CustomResource):
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[str] service_level: Service level of the storage pool.
-               Possible values are: `PREMIUM`, `EXTREME`, `STANDARD`.
+               Possible values are: `PREMIUM`, `EXTREME`, `STANDARD`, `FLEX`.
         """
         ...
     @overload
@@ -836,7 +836,7 @@ class StoragePool(pulumi.CustomResource):
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] pulumi_labels: The combination of labels configured directly on the resource
                and default labels configured on the provider.
         :param pulumi.Input[str] service_level: Service level of the storage pool.
-               Possible values are: `PREMIUM`, `EXTREME`, `STANDARD`.
+               Possible values are: `PREMIUM`, `EXTREME`, `STANDARD`, `FLEX`.
         :param pulumi.Input[str] volume_capacity_gib: Size allocated to volumes in the storage pool (in GiB).
         :param pulumi.Input[int] volume_count: Number of volume in the storage pool.
         """
@@ -982,7 +982,7 @@ class StoragePool(pulumi.CustomResource):
     def service_level(self) -> pulumi.Output[str]:
         """
         Service level of the storage pool.
-        Possible values are: `PREMIUM`, `EXTREME`, `STANDARD`.
+        Possible values are: `PREMIUM`, `EXTREME`, `STANDARD`, `FLEX`.
         """
         return pulumi.get(self, "service_level")
 

pulumi_gcp/netapp/volume.py

@@ -436,7 +436,7 @@ class _VolumeState:
         :param pulumi.Input[str] security_style: Security Style of the Volume. Use UNIX to use UNIX or NFSV4 ACLs for file permissions.
                Use NTFS to use NTFS ACLs for file permissions. Can only be set for volumes which use SMB together with NFS as protocol.
                Possible values are: `NTFS`, `UNIX`.
-        :param pulumi.Input[str] service_level: Service level of the volume. Inherited from storage pool.
+        :param pulumi.Input[str] service_level: Service level of the volume. Inherited from storage pool. Supported values are : PREMIUM, EXTERME, STANDARD, FLEX.
         :param pulumi.Input[str] share_name: Share name (SMB) or export path (NFS) of the volume. Needs to be unique per location.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] smb_settings: Settings for volumes with SMB access.
                Each value may be one of: `ENCRYPT_DATA`, `BROWSABLE`, `CHANGE_NOTIFY`, `NON_BROWSABLE`, `OPLOCKS`, `SHOW_SNAPSHOT`, `SHOW_PREVIOUS_VERSIONS`, `ACCESS_BASED_ENUMERATION`, `CONTINUOUSLY_AVAILABLE`.
@@ -828,7 +828,7 @@ class _VolumeState:
     @pulumi.getter(name="serviceLevel")
     def service_level(self) -> Optional[pulumi.Input[str]]:
         """
-        Service level of the volume. Inherited from storage pool.
+        Service level of the volume. Inherited from storage pool. Supported values are : PREMIUM, EXTERME, STANDARD, FLEX.
         """
         return pulumi.get(self, "service_level")
 
@@ -1326,7 +1326,7 @@ class Volume(pulumi.CustomResource):
         :param pulumi.Input[str] security_style: Security Style of the Volume. Use UNIX to use UNIX or NFSV4 ACLs for file permissions.
                Use NTFS to use NTFS ACLs for file permissions. Can only be set for volumes which use SMB together with NFS as protocol.
                Possible values are: `NTFS`, `UNIX`.
-        :param pulumi.Input[str] service_level: Service level of the volume. Inherited from storage pool.
+        :param pulumi.Input[str] service_level: Service level of the volume. Inherited from storage pool. Supported values are : PREMIUM, EXTERME, STANDARD, FLEX.
         :param pulumi.Input[str] share_name: Share name (SMB) or export path (NFS) of the volume. Needs to be unique per location.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] smb_settings: Settings for volumes with SMB access.
                Each value may be one of: `ENCRYPT_DATA`, `BROWSABLE`, `CHANGE_NOTIFY`, `NON_BROWSABLE`, `OPLOCKS`, `SHOW_SNAPSHOT`, `SHOW_PREVIOUS_VERSIONS`, `ACCESS_BASED_ENUMERATION`, `CONTINUOUSLY_AVAILABLE`.
@@ -1593,7 +1593,7 @@ class Volume(pulumi.CustomResource):
     @pulumi.getter(name="serviceLevel")
     def service_level(self) -> pulumi.Output[str]:
         """
-        Service level of the volume. Inherited from storage pool.
+        Service level of the volume. Inherited from storage pool. Supported values are : PREMIUM, EXTERME, STANDARD, FLEX.
         """
         return pulumi.get(self, "service_level")
 

pulumi_gcp/netapp/volume_replication.py

@@ -709,7 +709,8 @@ class VolumeReplication(pulumi.CustomResource):
                 description="This is a replicated volume",
             ),
             delete_destination_volume=True,
-            wait_for_mirror=True)
+            wait_for_mirror=True,
+            opts=pulumi.ResourceOptions(depends_on=[source_volume]))
         ```
 
         ## Import
@@ -813,7 +814,8 @@ class VolumeReplication(pulumi.CustomResource):
                 description="This is a replicated volume",
             ),
             delete_destination_volume=True,
-            wait_for_mirror=True)
+            wait_for_mirror=True,
+            opts=pulumi.ResourceOptions(depends_on=[source_volume]))
         ```
 
         ## Import

pulumi_gcp/netapp/volume_snapshot.py

@@ -346,7 +346,8 @@ class VolumeSnapshot(pulumi.CustomResource):
         test_snapshot = gcp.netapp.VolumeSnapshot("test_snapshot",
             location=default_volume.location,
             volume_name=default_volume.name,
-            name="testvolumesnap")
+            name="testvolumesnap",
+            opts=pulumi.ResourceOptions(depends_on=[default_volume]))
         ```
 
         ## Import
@@ -434,7 +435,8 @@ class VolumeSnapshot(pulumi.CustomResource):
         test_snapshot = gcp.netapp.VolumeSnapshot("test_snapshot",
             location=default_volume.location,
             volume_name=default_volume.name,
-            name="testvolumesnap")
+            name="testvolumesnap",
+            opts=pulumi.ResourceOptions(depends_on=[default_volume]))
         ```
 
         ## Import

pulumi_gcp/networkconnectivity/internal_range.py

@@ -571,6 +571,11 @@ class InternalRange(pulumi.CustomResource):
         default_network = gcp.compute.Network("default",
             name="internal-ranges",
             auto_create_subnetworks=False)
+        default_subnetwork = gcp.compute.Subnetwork("default",
+            name="overlapping-subnet",
+            ip_cidr_range="10.0.0.0/24",
+            region="us-central1",
+            network=default_network.id)
         default = gcp.networkconnectivity.InternalRange("default",
             name="overlap-range",
             description="Test internal range",
@@ -578,12 +583,8 @@ class InternalRange(pulumi.CustomResource):
             usage="FOR_VPC",
             peering="FOR_SELF",
             ip_cidr_range="10.0.0.0/30",
-            overlaps=["OVERLAP_EXISTING_SUBNET_RANGE"])
-        default_subnetwork = gcp.compute.Subnetwork("default",
-            name="overlapping-subnet",
-            ip_cidr_range="10.0.0.0/24",
-            region="us-central1",
-            network=default_network.id)
+            overlaps=["OVERLAP_EXISTING_SUBNET_RANGE"],
+            opts=pulumi.ResourceOptions(depends_on=[default_subnetwork]))
         ```
 
         ## Import
@@ -718,6 +719,11 @@ class InternalRange(pulumi.CustomResource):
         default_network = gcp.compute.Network("default",
             name="internal-ranges",
             auto_create_subnetworks=False)
+        default_subnetwork = gcp.compute.Subnetwork("default",
+            name="overlapping-subnet",
+            ip_cidr_range="10.0.0.0/24",
+            region="us-central1",
+            network=default_network.id)
         default = gcp.networkconnectivity.InternalRange("default",
             name="overlap-range",
             description="Test internal range",
@@ -725,12 +731,8 @@ class InternalRange(pulumi.CustomResource):
             usage="FOR_VPC",
             peering="FOR_SELF",
             ip_cidr_range="10.0.0.0/30",
-            overlaps=["OVERLAP_EXISTING_SUBNET_RANGE"])
-        default_subnetwork = gcp.compute.Subnetwork("default",
-            name="overlapping-subnet",
-            ip_cidr_range="10.0.0.0/24",
-            region="us-central1",
-            network=default_network.id)
+            overlaps=["OVERLAP_EXISTING_SUBNET_RANGE"],
+            opts=pulumi.ResourceOptions(depends_on=[default_subnetwork]))
         ```
 
         ## Import

pulumi_gcp/networksecurity/gateway_security_policy.py

@@ -360,20 +360,26 @@ class GatewaySecurityPolicy(pulumi.CustomResource):
             key_spec=gcp.certificateauthority.AuthorityKeySpecArgs(
                 algorithm="RSA_PKCS1_4096_SHA256",
             ))
-        ns_sa = gcp.projects.ServiceIdentity("ns_sa", service="networksecurity.googleapis.com")
+        project = gcp.organizations.get_project()
         tls_inspection_permission = gcp.certificateauthority.CaPoolIamMember("tls_inspection_permission",
             ca_pool=default.id,
             role="roles/privateca.certificateManager",
-            member=ns_sa.email.apply(lambda email: f"serviceAccount:{email}"))
+            member=f"serviceAccount:service-{project.number}@gcp-sa-networksecurity.iam.gserviceaccount.com")
         default_tls_inspection_policy = gcp.networksecurity.TlsInspectionPolicy("default",
             name="my-tls-inspection-policy",
             location="us-central1",
-            ca_pool=default.id)
+            ca_pool=default.id,
+            opts=pulumi.ResourceOptions(depends_on=[
+                    default,
+                    default_authority,
+                    tls_inspection_permission,
+                ]))
         default_gateway_security_policy = gcp.networksecurity.GatewaySecurityPolicy("default",
             name="my-gateway-security-policy",
             location="us-central1",
             description="my description",
-            tls_inspection_policy=default_tls_inspection_policy.id)
+            tls_inspection_policy=default_tls_inspection_policy.id,
+            opts=pulumi.ResourceOptions(depends_on=[default_tls_inspection_policy]))
         ```
 
         ## Import
@@ -502,20 +508,26 @@ class GatewaySecurityPolicy(pulumi.CustomResource):
             key_spec=gcp.certificateauthority.AuthorityKeySpecArgs(
                 algorithm="RSA_PKCS1_4096_SHA256",
             ))
-        ns_sa = gcp.projects.ServiceIdentity("ns_sa", service="networksecurity.googleapis.com")
+        project = gcp.organizations.get_project()
         tls_inspection_permission = gcp.certificateauthority.CaPoolIamMember("tls_inspection_permission",
             ca_pool=default.id,
             role="roles/privateca.certificateManager",
-            member=ns_sa.email.apply(lambda email: f"serviceAccount:{email}"))
+            member=f"serviceAccount:service-{project.number}@gcp-sa-networksecurity.iam.gserviceaccount.com")
         default_tls_inspection_policy = gcp.networksecurity.TlsInspectionPolicy("default",
             name="my-tls-inspection-policy",
             location="us-central1",
-            ca_pool=default.id)
+            ca_pool=default.id,
+            opts=pulumi.ResourceOptions(depends_on=[
+                    default,
+                    default_authority,
+                    tls_inspection_permission,
+                ]))
         default_gateway_security_policy = gcp.networksecurity.GatewaySecurityPolicy("default",
             name="my-gateway-security-policy",
             location="us-central1",
             description="my description",
-            tls_inspection_policy=default_tls_inspection_policy.id)
+            tls_inspection_policy=default_tls_inspection_policy.id,
+            opts=pulumi.ResourceOptions(depends_on=[default_tls_inspection_policy]))
         ```
 
         ## Import