pulumi-gcp 7.24.0a1716588893__py3-none-any.whl → 7.25.0__py3-none-any.whl

pulumi_gcp/pubsub/subscription.py

@@ -955,6 +955,15 @@ class Subscription(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         example = gcp.pubsub.Topic("example", name="example-topic")
+        project = gcp.organizations.get_project()
+        viewer = gcp.projects.IAMMember("viewer",
+            project=project.project_id,
+            role="roles/bigquery.metadataViewer",
+            member=f"serviceAccount:service-{project.number}@gcp-sa-pubsub.iam.gserviceaccount.com")
+        editor = gcp.projects.IAMMember("editor",
+            project=project.project_id,
+            role="roles/bigquery.dataEditor",
+            member=f"serviceAccount:service-{project.number}@gcp-sa-pubsub.iam.gserviceaccount.com")
         test = gcp.bigquery.Dataset("test", dataset_id="example_dataset")
         test_table = gcp.bigquery.Table("test",
             deletion_protection=False,
@@ -974,7 +983,19 @@ class Subscription(pulumi.CustomResource):
             topic=example.id,
             bigquery_config=gcp.pubsub.SubscriptionBigqueryConfigArgs(
                 table=pulumi.Output.all(test_table.project, test_table.dataset_id, test_table.table_id).apply(lambda project, dataset_id, table_id: f"{project}.{dataset_id}.{table_id}"),
-            ))
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[
+                    viewer,
+                    editor,
+                ]))
+        ```
+        ### Pubsub Subscription Push Bq Table Schema
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        example = gcp.pubsub.Topic("example", name="example-topic")
         project = gcp.organizations.get_project()
         viewer = gcp.projects.IAMMember("viewer",
             project=project.project_id,
@@ -984,14 +1005,6 @@ class Subscription(pulumi.CustomResource):
             project=project.project_id,
             role="roles/bigquery.dataEditor",
             member=f"serviceAccount:service-{project.number}@gcp-sa-pubsub.iam.gserviceaccount.com")
-        ```
-        ### Pubsub Subscription Push Bq Table Schema
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        example = gcp.pubsub.Topic("example", name="example-topic")
         test = gcp.bigquery.Dataset("test", dataset_id="example_dataset")
         test_table = gcp.bigquery.Table("test",
             deletion_protection=False,
@@ -1012,16 +1025,11 @@ class Subscription(pulumi.CustomResource):
             bigquery_config=gcp.pubsub.SubscriptionBigqueryConfigArgs(
                 table=pulumi.Output.all(test_table.project, test_table.dataset_id, test_table.table_id).apply(lambda project, dataset_id, table_id: f"{project}.{dataset_id}.{table_id}"),
                 use_table_schema=True,
-            ))
-        project = gcp.organizations.get_project()
-        viewer = gcp.projects.IAMMember("viewer",
-            project=project.project_id,
-            role="roles/bigquery.metadataViewer",
-            member=f"serviceAccount:service-{project.number}@gcp-sa-pubsub.iam.gserviceaccount.com")
-        editor = gcp.projects.IAMMember("editor",
-            project=project.project_id,
-            role="roles/bigquery.dataEditor",
-            member=f"serviceAccount:service-{project.number}@gcp-sa-pubsub.iam.gserviceaccount.com")
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[
+                    viewer,
+                    editor,
+                ]))
         ```
         ### Pubsub Subscription Push Cloudstorage
 
@@ -1034,21 +1042,26 @@ class Subscription(pulumi.CustomResource):
             location="US",
             uniform_bucket_level_access=True)
         example_topic = gcp.pubsub.Topic("example", name="example-topic")
+        project = gcp.organizations.get_project()
+        admin = gcp.storage.BucketIAMMember("admin",
+            bucket=example.name,
+            role="roles/storage.admin",
+            member=f"serviceAccount:service-{project.number}@gcp-sa-pubsub.iam.gserviceaccount.com")
         example_subscription = gcp.pubsub.Subscription("example",
             name="example-subscription",
             topic=example_topic.id,
             cloud_storage_config=gcp.pubsub.SubscriptionCloudStorageConfigArgs(
                 bucket=example.name,
                 filename_prefix="pre-",
-                filename_suffix="-_2067",
+                filename_suffix="-_40785",
+                filename_datetime_format="YYYY-MM-DD/hh_mm_ssZ",
                 max_bytes=1000,
                 max_duration="300s",
-            ))
-        project = gcp.organizations.get_project()
-        admin = gcp.storage.BucketIAMMember("admin",
-            bucket=example.name,
-            role="roles/storage.admin",
-            member=f"serviceAccount:service-{project.number}@gcp-sa-pubsub.iam.gserviceaccount.com")
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[
+                    example,
+                    admin,
+                ]))
         ```
         ### Pubsub Subscription Push Cloudstorage Avro
 
@@ -1061,24 +1074,29 @@ class Subscription(pulumi.CustomResource):
             location="US",
             uniform_bucket_level_access=True)
         example_topic = gcp.pubsub.Topic("example", name="example-topic")
+        project = gcp.organizations.get_project()
+        admin = gcp.storage.BucketIAMMember("admin",
+            bucket=example.name,
+            role="roles/storage.admin",
+            member=f"serviceAccount:service-{project.number}@gcp-sa-pubsub.iam.gserviceaccount.com")
         example_subscription = gcp.pubsub.Subscription("example",
             name="example-subscription",
             topic=example_topic.id,
             cloud_storage_config=gcp.pubsub.SubscriptionCloudStorageConfigArgs(
                 bucket=example.name,
                 filename_prefix="pre-",
-                filename_suffix="-_40785",
+                filename_suffix="-_79169",
+                filename_datetime_format="YYYY-MM-DD/hh_mm_ssZ",
                 max_bytes=1000,
                 max_duration="300s",
                 avro_config=gcp.pubsub.SubscriptionCloudStorageConfigAvroConfigArgs(
                     write_metadata=True,
                 ),
-            ))
-        project = gcp.organizations.get_project()
-        admin = gcp.storage.BucketIAMMember("admin",
-            bucket=example.name,
-            role="roles/storage.admin",
-            member=f"serviceAccount:service-{project.number}@gcp-sa-pubsub.iam.gserviceaccount.com")
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[
+                    example,
+                    admin,
+                ]))
         ```
 
         ## Import
@@ -1282,6 +1300,15 @@ class Subscription(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         example = gcp.pubsub.Topic("example", name="example-topic")
+        project = gcp.organizations.get_project()
+        viewer = gcp.projects.IAMMember("viewer",
+            project=project.project_id,
+            role="roles/bigquery.metadataViewer",
+            member=f"serviceAccount:service-{project.number}@gcp-sa-pubsub.iam.gserviceaccount.com")
+        editor = gcp.projects.IAMMember("editor",
+            project=project.project_id,
+            role="roles/bigquery.dataEditor",
+            member=f"serviceAccount:service-{project.number}@gcp-sa-pubsub.iam.gserviceaccount.com")
         test = gcp.bigquery.Dataset("test", dataset_id="example_dataset")
         test_table = gcp.bigquery.Table("test",
             deletion_protection=False,
@@ -1301,7 +1328,19 @@ class Subscription(pulumi.CustomResource):
             topic=example.id,
             bigquery_config=gcp.pubsub.SubscriptionBigqueryConfigArgs(
                 table=pulumi.Output.all(test_table.project, test_table.dataset_id, test_table.table_id).apply(lambda project, dataset_id, table_id: f"{project}.{dataset_id}.{table_id}"),
-            ))
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[
+                    viewer,
+                    editor,
+                ]))
+        ```
+        ### Pubsub Subscription Push Bq Table Schema
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        example = gcp.pubsub.Topic("example", name="example-topic")
         project = gcp.organizations.get_project()
         viewer = gcp.projects.IAMMember("viewer",
             project=project.project_id,
@@ -1311,14 +1350,6 @@ class Subscription(pulumi.CustomResource):
             project=project.project_id,
             role="roles/bigquery.dataEditor",
             member=f"serviceAccount:service-{project.number}@gcp-sa-pubsub.iam.gserviceaccount.com")
-        ```
-        ### Pubsub Subscription Push Bq Table Schema
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        example = gcp.pubsub.Topic("example", name="example-topic")
         test = gcp.bigquery.Dataset("test", dataset_id="example_dataset")
         test_table = gcp.bigquery.Table("test",
             deletion_protection=False,
@@ -1339,16 +1370,11 @@ class Subscription(pulumi.CustomResource):
             bigquery_config=gcp.pubsub.SubscriptionBigqueryConfigArgs(
                 table=pulumi.Output.all(test_table.project, test_table.dataset_id, test_table.table_id).apply(lambda project, dataset_id, table_id: f"{project}.{dataset_id}.{table_id}"),
                 use_table_schema=True,
-            ))
-        project = gcp.organizations.get_project()
-        viewer = gcp.projects.IAMMember("viewer",
-            project=project.project_id,
-            role="roles/bigquery.metadataViewer",
-            member=f"serviceAccount:service-{project.number}@gcp-sa-pubsub.iam.gserviceaccount.com")
-        editor = gcp.projects.IAMMember("editor",
-            project=project.project_id,
-            role="roles/bigquery.dataEditor",
-            member=f"serviceAccount:service-{project.number}@gcp-sa-pubsub.iam.gserviceaccount.com")
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[
+                    viewer,
+                    editor,
+                ]))
         ```
         ### Pubsub Subscription Push Cloudstorage
 
@@ -1361,21 +1387,26 @@ class Subscription(pulumi.CustomResource):
             location="US",
             uniform_bucket_level_access=True)
         example_topic = gcp.pubsub.Topic("example", name="example-topic")
+        project = gcp.organizations.get_project()
+        admin = gcp.storage.BucketIAMMember("admin",
+            bucket=example.name,
+            role="roles/storage.admin",
+            member=f"serviceAccount:service-{project.number}@gcp-sa-pubsub.iam.gserviceaccount.com")
         example_subscription = gcp.pubsub.Subscription("example",
             name="example-subscription",
             topic=example_topic.id,
             cloud_storage_config=gcp.pubsub.SubscriptionCloudStorageConfigArgs(
                 bucket=example.name,
                 filename_prefix="pre-",
-                filename_suffix="-_2067",
+                filename_suffix="-_40785",
+                filename_datetime_format="YYYY-MM-DD/hh_mm_ssZ",
                 max_bytes=1000,
                 max_duration="300s",
-            ))
-        project = gcp.organizations.get_project()
-        admin = gcp.storage.BucketIAMMember("admin",
-            bucket=example.name,
-            role="roles/storage.admin",
-            member=f"serviceAccount:service-{project.number}@gcp-sa-pubsub.iam.gserviceaccount.com")
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[
+                    example,
+                    admin,
+                ]))
         ```
         ### Pubsub Subscription Push Cloudstorage Avro
 
@@ -1388,24 +1419,29 @@ class Subscription(pulumi.CustomResource):
             location="US",
             uniform_bucket_level_access=True)
         example_topic = gcp.pubsub.Topic("example", name="example-topic")
+        project = gcp.organizations.get_project()
+        admin = gcp.storage.BucketIAMMember("admin",
+            bucket=example.name,
+            role="roles/storage.admin",
+            member=f"serviceAccount:service-{project.number}@gcp-sa-pubsub.iam.gserviceaccount.com")
         example_subscription = gcp.pubsub.Subscription("example",
             name="example-subscription",
             topic=example_topic.id,
             cloud_storage_config=gcp.pubsub.SubscriptionCloudStorageConfigArgs(
                 bucket=example.name,
                 filename_prefix="pre-",
-                filename_suffix="-_40785",
+                filename_suffix="-_79169",
+                filename_datetime_format="YYYY-MM-DD/hh_mm_ssZ",
                 max_bytes=1000,
                 max_duration="300s",
                 avro_config=gcp.pubsub.SubscriptionCloudStorageConfigAvroConfigArgs(
                     write_metadata=True,
                 ),
-            ))
-        project = gcp.organizations.get_project()
-        admin = gcp.storage.BucketIAMMember("admin",
-            bucket=example.name,
-            role="roles/storage.admin",
-            member=f"serviceAccount:service-{project.number}@gcp-sa-pubsub.iam.gserviceaccount.com")
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[
+                    example,
+                    admin,
+                ]))
         ```
 
         ## Import

pulumi_gcp/pubsub/topic.py

@@ -509,7 +509,8 @@ class Topic(pulumi.CustomResource):
             schema_settings=gcp.pubsub.TopicSchemaSettingsArgs(
                 schema="projects/my-project-name/schemas/example",
                 encoding="JSON",
-            ))
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[example]))
         ```
         ### Pubsub Topic Ingestion Kinesis
 
@@ -677,7 +678,8 @@ class Topic(pulumi.CustomResource):
             schema_settings=gcp.pubsub.TopicSchemaSettingsArgs(
                 schema="projects/my-project-name/schemas/example",
                 encoding="JSON",
-            ))
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[example]))
         ```
         ### Pubsub Topic Ingestion Kinesis
 

pulumi_gcp/pulumi-plugin.json

@@ -1,5 +1,5 @@
 {
   "resource": true,
   "name": "gcp",
-  "version": "7.24.0-alpha.1716588893"
+  "version": "7.25.0"
 }

pulumi_gcp/redis/cluster.py

@@ -561,20 +561,6 @@ class Cluster(pulumi.CustomResource):
         producer_net = gcp.compute.Network("producer_net",
             name="mynetwork",
             auto_create_subnetworks=False)
-        cluster_ha = gcp.redis.Cluster("cluster-ha",
-            name="ha-cluster",
-            shard_count=3,
-            psc_configs=[gcp.redis.ClusterPscConfigArgs(
-                network=producer_net.id,
-            )],
-            region="us-central1",
-            replica_count=1,
-            node_type="REDIS_SHARED_CORE_NANO",
-            transit_encryption_mode="TRANSIT_ENCRYPTION_MODE_DISABLED",
-            authorization_mode="AUTH_MODE_DISABLED",
-            redis_configs={
-                "maxmemory-policy": "volatile-ttl",
-            })
         producer_subnet = gcp.compute.Subnetwork("producer_subnet",
             name="mysubnet",
             ip_cidr_range="10.0.0.248/29",
@@ -589,6 +575,21 @@ class Cluster(pulumi.CustomResource):
             psc_config=gcp.networkconnectivity.ServiceConnectionPolicyPscConfigArgs(
                 subnetworks=[producer_subnet.id],
             ))
+        cluster_ha = gcp.redis.Cluster("cluster-ha",
+            name="ha-cluster",
+            shard_count=3,
+            psc_configs=[gcp.redis.ClusterPscConfigArgs(
+                network=producer_net.id,
+            )],
+            region="us-central1",
+            replica_count=1,
+            node_type="REDIS_SHARED_CORE_NANO",
+            transit_encryption_mode="TRANSIT_ENCRYPTION_MODE_DISABLED",
+            authorization_mode="AUTH_MODE_DISABLED",
+            redis_configs={
+                "maxmemory-policy": "volatile-ttl",
+            },
+            opts=pulumi.ResourceOptions(depends_on=[default]))
         ```
 
         ## Import
@@ -670,20 +671,6 @@ class Cluster(pulumi.CustomResource):
         producer_net = gcp.compute.Network("producer_net",
             name="mynetwork",
             auto_create_subnetworks=False)
-        cluster_ha = gcp.redis.Cluster("cluster-ha",
-            name="ha-cluster",
-            shard_count=3,
-            psc_configs=[gcp.redis.ClusterPscConfigArgs(
-                network=producer_net.id,
-            )],
-            region="us-central1",
-            replica_count=1,
-            node_type="REDIS_SHARED_CORE_NANO",
-            transit_encryption_mode="TRANSIT_ENCRYPTION_MODE_DISABLED",
-            authorization_mode="AUTH_MODE_DISABLED",
-            redis_configs={
-                "maxmemory-policy": "volatile-ttl",
-            })
         producer_subnet = gcp.compute.Subnetwork("producer_subnet",
             name="mysubnet",
             ip_cidr_range="10.0.0.248/29",
@@ -698,6 +685,21 @@ class Cluster(pulumi.CustomResource):
             psc_config=gcp.networkconnectivity.ServiceConnectionPolicyPscConfigArgs(
                 subnetworks=[producer_subnet.id],
             ))
+        cluster_ha = gcp.redis.Cluster("cluster-ha",
+            name="ha-cluster",
+            shard_count=3,
+            psc_configs=[gcp.redis.ClusterPscConfigArgs(
+                network=producer_net.id,
+            )],
+            region="us-central1",
+            replica_count=1,
+            node_type="REDIS_SHARED_CORE_NANO",
+            transit_encryption_mode="TRANSIT_ENCRYPTION_MODE_DISABLED",
+            authorization_mode="AUTH_MODE_DISABLED",
+            redis_configs={
+                "maxmemory-policy": "volatile-ttl",
+            },
+            opts=pulumi.ResourceOptions(depends_on=[default]))
         ```
 
         ## Import

pulumi_gcp/redis/instance.py

@@ -1309,7 +1309,8 @@ class Instance(pulumi.CustomResource):
             authorized_network=redis_network.id,
             connect_mode="PRIVATE_SERVICE_ACCESS",
             redis_version="REDIS_4_0",
-            display_name="Test Instance")
+            display_name="Test Instance",
+            opts=pulumi.ResourceOptions(depends_on=[private_service_connection]))
         ```
         ### Redis Instance Mrr
 
@@ -1604,7 +1605,8 @@ class Instance(pulumi.CustomResource):
             authorized_network=redis_network.id,
             connect_mode="PRIVATE_SERVICE_ACCESS",
             redis_version="REDIS_4_0",
-            display_name="Test Instance")
+            display_name="Test Instance",
+            opts=pulumi.ResourceOptions(depends_on=[private_service_connection]))
         ```
         ### Redis Instance Mrr
 

pulumi_gcp/secretmanager/secret.py

@@ -659,7 +659,8 @@ class Secret(pulumi.CustomResource):
                         kms_key_name="kms-key",
                     ),
                 ),
-            ))
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[kms_secret_binding]))
         ```
 
         ## Import
@@ -818,7 +819,8 @@ class Secret(pulumi.CustomResource):
                         kms_key_name="kms-key",
                     ),
                 ),
-            ))
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[kms_secret_binding]))
         ```
 
         ## Import

pulumi_gcp/securesourcemanager/instance.py

@@ -439,7 +439,8 @@ class Instance(pulumi.CustomResource):
         default = gcp.securesourcemanager.Instance("default",
             location="us-central1",
             instance_id="my-instance",
-            kms_key=crypto_key.id)
+            kms_key=crypto_key.id,
+            opts=pulumi.ResourceOptions(depends_on=[crypto_key_binding]))
         ```
         ### Secure Source Manager Instance Private
 
@@ -493,15 +494,20 @@ class Instance(pulumi.CustomResource):
             ca_pool=ca_pool.id,
             role="roles/privateca.certificateRequester",
             members=[f"serviceAccount:service-{project.number}@gcp-sa-sourcemanager.iam.gserviceaccount.com"])
+        # ca pool IAM permissions can take time to propagate
+        wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
+        opts=pulumi.ResourceOptions(depends_on=[ca_pool_binding]))
         default = gcp.securesourcemanager.Instance("default",
             instance_id="my-instance",
             location="us-central1",
             private_config=gcp.securesourcemanager.InstancePrivateConfigArgs(
                 is_private=True,
                 ca_pool=ca_pool.id,
-            ))
-        # ca pool IAM permissions can take time to propagate
-        wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s)
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[
+                    root_ca,
+                    wait60_seconds,
+                ]))
         ```
 
         ## Import
@@ -601,7 +607,8 @@ class Instance(pulumi.CustomResource):
         default = gcp.securesourcemanager.Instance("default",
             location="us-central1",
             instance_id="my-instance",
-            kms_key=crypto_key.id)
+            kms_key=crypto_key.id,
+            opts=pulumi.ResourceOptions(depends_on=[crypto_key_binding]))
         ```
         ### Secure Source Manager Instance Private
 
@@ -655,15 +662,20 @@ class Instance(pulumi.CustomResource):
             ca_pool=ca_pool.id,
             role="roles/privateca.certificateRequester",
             members=[f"serviceAccount:service-{project.number}@gcp-sa-sourcemanager.iam.gserviceaccount.com"])
+        # ca pool IAM permissions can take time to propagate
+        wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
+        opts=pulumi.ResourceOptions(depends_on=[ca_pool_binding]))
         default = gcp.securesourcemanager.Instance("default",
             instance_id="my-instance",
             location="us-central1",
             private_config=gcp.securesourcemanager.InstancePrivateConfigArgs(
                 is_private=True,
                 ca_pool=ca_pool.id,
-            ))
-        # ca pool IAM permissions can take time to propagate
-        wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s)
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[
+                    root_ca,
+                    wait60_seconds,
+                ]))
         ```
 
         ## Import

pulumi_gcp/securitycenter/instance_iam_binding.py

@@ -293,18 +293,19 @@ class InstanceIamBinding(pulumi.CustomResource):
         crypto_key = gcp.kms.CryptoKey("crypto_key",
             name="my-instance",
             key_ring=key_ring.id)
+        project = gcp.organizations.get_project()
+        crypto_key_member = gcp.kms.CryptoKeyIAMMember("crypto_key_member",
+            crypto_key_id=crypto_key.id,
+            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
+            member=f"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com")
         cmek = gcp.datafusion.Instance("cmek",
             name="my-instance",
             region="us-central1",
             type="BASIC",
             crypto_key_config=gcp.datafusion.InstanceCryptoKeyConfigArgs(
                 key_reference=crypto_key.id,
-            ))
-        project = gcp.organizations.get_project()
-        crypto_key_member = gcp.kms.CryptoKeyIAMMember("crypto_key_member",
-            crypto_key_id=crypto_key.id,
-            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
-            member=f"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com")
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[crypto_key_member]))
         ```
         ### Data Fusion Instance Enterprise
 
@@ -460,18 +461,19 @@ class InstanceIamBinding(pulumi.CustomResource):
         crypto_key = gcp.kms.CryptoKey("crypto_key",
             name="my-instance",
             key_ring=key_ring.id)
+        project = gcp.organizations.get_project()
+        crypto_key_member = gcp.kms.CryptoKeyIAMMember("crypto_key_member",
+            crypto_key_id=crypto_key.id,
+            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
+            member=f"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com")
         cmek = gcp.datafusion.Instance("cmek",
             name="my-instance",
             region="us-central1",
             type="BASIC",
             crypto_key_config=gcp.datafusion.InstanceCryptoKeyConfigArgs(
                 key_reference=crypto_key.id,
-            ))
-        project = gcp.organizations.get_project()
-        crypto_key_member = gcp.kms.CryptoKeyIAMMember("crypto_key_member",
-            crypto_key_id=crypto_key.id,
-            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
-            member=f"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com")
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[crypto_key_member]))
         ```
         ### Data Fusion Instance Enterprise
 

pulumi_gcp/securitycenter/instance_iam_member.py

@@ -293,18 +293,19 @@ class InstanceIamMember(pulumi.CustomResource):
         crypto_key = gcp.kms.CryptoKey("crypto_key",
             name="my-instance",
             key_ring=key_ring.id)
+        project = gcp.organizations.get_project()
+        crypto_key_member = gcp.kms.CryptoKeyIAMMember("crypto_key_member",
+            crypto_key_id=crypto_key.id,
+            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
+            member=f"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com")
         cmek = gcp.datafusion.Instance("cmek",
             name="my-instance",
             region="us-central1",
             type="BASIC",
             crypto_key_config=gcp.datafusion.InstanceCryptoKeyConfigArgs(
                 key_reference=crypto_key.id,
-            ))
-        project = gcp.organizations.get_project()
-        crypto_key_member = gcp.kms.CryptoKeyIAMMember("crypto_key_member",
-            crypto_key_id=crypto_key.id,
-            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
-            member=f"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com")
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[crypto_key_member]))
         ```
         ### Data Fusion Instance Enterprise
 
@@ -460,18 +461,19 @@ class InstanceIamMember(pulumi.CustomResource):
         crypto_key = gcp.kms.CryptoKey("crypto_key",
             name="my-instance",
             key_ring=key_ring.id)
+        project = gcp.organizations.get_project()
+        crypto_key_member = gcp.kms.CryptoKeyIAMMember("crypto_key_member",
+            crypto_key_id=crypto_key.id,
+            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
+            member=f"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com")
         cmek = gcp.datafusion.Instance("cmek",
             name="my-instance",
             region="us-central1",
             type="BASIC",
             crypto_key_config=gcp.datafusion.InstanceCryptoKeyConfigArgs(
                 key_reference=crypto_key.id,
-            ))
-        project = gcp.organizations.get_project()
-        crypto_key_member = gcp.kms.CryptoKeyIAMMember("crypto_key_member",
-            crypto_key_id=crypto_key.id,
-            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
-            member=f"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com")
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[crypto_key_member]))
         ```
         ### Data Fusion Instance Enterprise