pulumi-gcp 7.24.0a1716588893__py3-none-any.whl → 7.25.0a1717097889__py3-none-any.whl

pulumi_gcp/apphub/workload.py

@@ -436,215 +436,6 @@ class Workload(pulumi.CustomResource):
 
         ## Example Usage
 
-        ### Apphub Workload Basic
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-        import pulumi_std as std
-        import pulumi_time as time
-
-        application = gcp.apphub.Application("application",
-            location="us-central1",
-            application_id="example-application-1",
-            scope=gcp.apphub.ApplicationScopeArgs(
-                type="REGIONAL",
-            ))
-        service_project = gcp.organizations.Project("service_project",
-            project_id="project-1",
-            name="Service Project",
-            org_id="123456789",
-            billing_account="000000-0000000-0000000-000000")
-        # Enable Compute API
-        compute_service_project = gcp.projects.Service("compute_service_project",
-            project=service_project.project_id,
-            service="compute.googleapis.com")
-        wait120s = time.index.Sleep("wait_120s", create_duration=120s)
-        service_project_attachment = gcp.apphub.ServiceProjectAttachment("service_project_attachment", service_project_attachment_id=service_project.project_id)
-        # VPC network
-        ilb_network = gcp.compute.Network("ilb_network",
-            name="l7-ilb-network",
-            project=service_project.project_id,
-            auto_create_subnetworks=False)
-        # backend subnet
-        ilb_subnet = gcp.compute.Subnetwork("ilb_subnet",
-            name="l7-ilb-subnet",
-            project=service_project.project_id,
-            ip_cidr_range="10.0.1.0/24",
-            region="us-central1",
-            network=ilb_network.id)
-        # instance template
-        instance_template = gcp.compute.InstanceTemplate("instance_template",
-            network_interfaces=[gcp.compute.InstanceTemplateNetworkInterfaceArgs(
-                access_configs=[gcp.compute.InstanceTemplateNetworkInterfaceAccessConfigArgs()],
-                network=ilb_network.id,
-                subnetwork=ilb_subnet.id,
-            )],
-            name="l7-ilb-mig-template",
-            project=service_project.project_id,
-            machine_type="e2-small",
-            tags=["http-server"],
-            disks=[gcp.compute.InstanceTemplateDiskArgs(
-                source_image="debian-cloud/debian-10",
-                auto_delete=True,
-                boot=True,
-            )],
-            metadata={
-                "startup-script": \"\"\"#! /bin/bash
-        set -euo pipefail
-        export DEBIAN_FRONTEND=noninteractive
-        apt-get update
-        apt-get install -y nginx-light jq
-        NAME=$(curl -H "Metadata-Flavor: Google" "http://metadata.google.internal/computeMetadata/v1/instance/hostname")
-        IP=$(curl -H "Metadata-Flavor: Google" "http://metadata.google.internal/computeMetadata/v1/instance/network-interfaces/0/ip")
-        METADATA=$(curl -f -H "Metadata-Flavor: Google" "http://metadata.google.internal/computeMetadata/v1/instance/attributes/?recursive=True" | jq 'del(.["startup-script"])')
-        cat <<EOF > /var/www/html/index.html
-        <pre>
-        Name: $NAME
-        IP: $IP
-        Metadata: $METADATA
-        </pre>
-        EOF
-        \"\"\",
-            })
-        mig = gcp.compute.RegionInstanceGroupManager("mig",
-            name="l7-ilb-mig1",
-            project=service_project.project_id,
-            region="us-central1",
-            versions=[gcp.compute.RegionInstanceGroupManagerVersionArgs(
-                instance_template=instance_template.id,
-                name="primary",
-            )],
-            base_instance_name="vm",
-            target_size=2)
-        # Discovered workload
-        catalog_workload = std.replace_output(text=mig.instance_group,
-            search="https://www.googleapis.com/compute/v1",
-            replace="//compute.googleapis.com").apply(lambda invoke: gcp.apphub.get_discovered_workload_output(location="us-central1",
-            workload_uri=invoke.result))
-        wait120s_for_resource_ingestion = time.index.Sleep("wait_120s_for_resource_ingestion", create_duration=120s)
-        example = gcp.apphub.Workload("example",
-            location="us-central1",
-            application_id=application.application_id,
-            workload_id=mig.name,
-            discovered_workload=catalog_workload.name)
-        ```
-        ### Apphub Workload Full
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-        import pulumi_std as std
-        import pulumi_time as time
-
-        application = gcp.apphub.Application("application",
-            location="us-central1",
-            application_id="example-application-1",
-            scope=gcp.apphub.ApplicationScopeArgs(
-                type="REGIONAL",
-            ))
-        service_project = gcp.organizations.Project("service_project",
-            project_id="project-1",
-            name="Service Project",
-            org_id="123456789",
-            billing_account="000000-0000000-0000000-000000")
-        # Enable Compute API
-        compute_service_project = gcp.projects.Service("compute_service_project",
-            project=service_project.project_id,
-            service="compute.googleapis.com")
-        wait120s = time.index.Sleep("wait_120s", create_duration=120s)
-        service_project_attachment = gcp.apphub.ServiceProjectAttachment("service_project_attachment", service_project_attachment_id=service_project.project_id)
-        # VPC network
-        ilb_network = gcp.compute.Network("ilb_network",
-            name="l7-ilb-network",
-            project=service_project.project_id,
-            auto_create_subnetworks=False)
-        # backend subnet
-        ilb_subnet = gcp.compute.Subnetwork("ilb_subnet",
-            name="l7-ilb-subnet",
-            project=service_project.project_id,
-            ip_cidr_range="10.0.1.0/24",
-            region="us-central1",
-            network=ilb_network.id)
-        # instance template
-        instance_template = gcp.compute.InstanceTemplate("instance_template",
-            network_interfaces=[gcp.compute.InstanceTemplateNetworkInterfaceArgs(
-                access_configs=[gcp.compute.InstanceTemplateNetworkInterfaceAccessConfigArgs()],
-                network=ilb_network.id,
-                subnetwork=ilb_subnet.id,
-            )],
-            name="l7-ilb-mig-template",
-            project=service_project.project_id,
-            machine_type="e2-small",
-            tags=["http-server"],
-            disks=[gcp.compute.InstanceTemplateDiskArgs(
-                source_image="debian-cloud/debian-10",
-                auto_delete=True,
-                boot=True,
-            )],
-            metadata={
-                "startup-script": \"\"\"#! /bin/bash
-        set -euo pipefail
-        export DEBIAN_FRONTEND=noninteractive
-        apt-get update
-        apt-get install -y nginx-light jq
-        NAME=$(curl -H "Metadata-Flavor: Google" "http://metadata.google.internal/computeMetadata/v1/instance/hostname")
-        IP=$(curl -H "Metadata-Flavor: Google" "http://metadata.google.internal/computeMetadata/v1/instance/network-interfaces/0/ip")
-        METADATA=$(curl -f -H "Metadata-Flavor: Google" "http://metadata.google.internal/computeMetadata/v1/instance/attributes/?recursive=True" | jq 'del(.["startup-script"])')
-        cat <<EOF > /var/www/html/index.html
-        <pre>
-        Name: $NAME
-        IP: $IP
-        Metadata: $METADATA
-        </pre>
-        EOF
-        \"\"\",
-            })
-        mig = gcp.compute.RegionInstanceGroupManager("mig",
-            name="l7-ilb-mig1",
-            project=service_project.project_id,
-            region="us-central1",
-            versions=[gcp.compute.RegionInstanceGroupManagerVersionArgs(
-                instance_template=instance_template.id,
-                name="primary",
-            )],
-            base_instance_name="vm",
-            target_size=2)
-        # Discovered workload 
-        catalog_workload = std.replace_output(text=mig.instance_group,
-            search="https://www.googleapis.com/compute/v1",
-            replace="//compute.googleapis.com").apply(lambda invoke: gcp.apphub.get_discovered_workload_output(location="us-central1",
-            workload_uri=invoke.result))
-        wait120s_for_resource_ingestion = time.index.Sleep("wait_120s_for_resource_ingestion", create_duration=120s)
-        example = gcp.apphub.Workload("example",
-            location="us-central1",
-            application_id=application.application_id,
-            workload_id=mig.name,
-            discovered_workload=catalog_workload.name,
-            display_name="Example Service Full",
-            description="Register service for testing",
-            attributes=gcp.apphub.WorkloadAttributesArgs(
-                environment=gcp.apphub.WorkloadAttributesEnvironmentArgs(
-                    type="STAGING",
-                ),
-                criticality=gcp.apphub.WorkloadAttributesCriticalityArgs(
-                    type="MISSION_CRITICAL",
-                ),
-                business_owners=[gcp.apphub.WorkloadAttributesBusinessOwnerArgs(
-                    display_name="Alice",
-                    email="alice@google.com",
-                )],
-                developer_owners=[gcp.apphub.WorkloadAttributesDeveloperOwnerArgs(
-                    display_name="Bob",
-                    email="bob@google.com",
-                )],
-                operator_owners=[gcp.apphub.WorkloadAttributesOperatorOwnerArgs(
-                    display_name="Charlie",
-                    email="charlie@google.com",
-                )],
-            ))
-        ```
-
         ## Import
 
         Workload can be imported using any of these accepted formats:
@@ -696,215 +487,6 @@ class Workload(pulumi.CustomResource):
 
         ## Example Usage
 
-        ### Apphub Workload Basic
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-        import pulumi_std as std
-        import pulumi_time as time
-
-        application = gcp.apphub.Application("application",
-            location="us-central1",
-            application_id="example-application-1",
-            scope=gcp.apphub.ApplicationScopeArgs(
-                type="REGIONAL",
-            ))
-        service_project = gcp.organizations.Project("service_project",
-            project_id="project-1",
-            name="Service Project",
-            org_id="123456789",
-            billing_account="000000-0000000-0000000-000000")
-        # Enable Compute API
-        compute_service_project = gcp.projects.Service("compute_service_project",
-            project=service_project.project_id,
-            service="compute.googleapis.com")
-        wait120s = time.index.Sleep("wait_120s", create_duration=120s)
-        service_project_attachment = gcp.apphub.ServiceProjectAttachment("service_project_attachment", service_project_attachment_id=service_project.project_id)
-        # VPC network
-        ilb_network = gcp.compute.Network("ilb_network",
-            name="l7-ilb-network",
-            project=service_project.project_id,
-            auto_create_subnetworks=False)
-        # backend subnet
-        ilb_subnet = gcp.compute.Subnetwork("ilb_subnet",
-            name="l7-ilb-subnet",
-            project=service_project.project_id,
-            ip_cidr_range="10.0.1.0/24",
-            region="us-central1",
-            network=ilb_network.id)
-        # instance template
-        instance_template = gcp.compute.InstanceTemplate("instance_template",
-            network_interfaces=[gcp.compute.InstanceTemplateNetworkInterfaceArgs(
-                access_configs=[gcp.compute.InstanceTemplateNetworkInterfaceAccessConfigArgs()],
-                network=ilb_network.id,
-                subnetwork=ilb_subnet.id,
-            )],
-            name="l7-ilb-mig-template",
-            project=service_project.project_id,
-            machine_type="e2-small",
-            tags=["http-server"],
-            disks=[gcp.compute.InstanceTemplateDiskArgs(
-                source_image="debian-cloud/debian-10",
-                auto_delete=True,
-                boot=True,
-            )],
-            metadata={
-                "startup-script": \"\"\"#! /bin/bash
-        set -euo pipefail
-        export DEBIAN_FRONTEND=noninteractive
-        apt-get update
-        apt-get install -y nginx-light jq
-        NAME=$(curl -H "Metadata-Flavor: Google" "http://metadata.google.internal/computeMetadata/v1/instance/hostname")
-        IP=$(curl -H "Metadata-Flavor: Google" "http://metadata.google.internal/computeMetadata/v1/instance/network-interfaces/0/ip")
-        METADATA=$(curl -f -H "Metadata-Flavor: Google" "http://metadata.google.internal/computeMetadata/v1/instance/attributes/?recursive=True" | jq 'del(.["startup-script"])')
-        cat <<EOF > /var/www/html/index.html
-        <pre>
-        Name: $NAME
-        IP: $IP
-        Metadata: $METADATA
-        </pre>
-        EOF
-        \"\"\",
-            })
-        mig = gcp.compute.RegionInstanceGroupManager("mig",
-            name="l7-ilb-mig1",
-            project=service_project.project_id,
-            region="us-central1",
-            versions=[gcp.compute.RegionInstanceGroupManagerVersionArgs(
-                instance_template=instance_template.id,
-                name="primary",
-            )],
-            base_instance_name="vm",
-            target_size=2)
-        # Discovered workload
-        catalog_workload = std.replace_output(text=mig.instance_group,
-            search="https://www.googleapis.com/compute/v1",
-            replace="//compute.googleapis.com").apply(lambda invoke: gcp.apphub.get_discovered_workload_output(location="us-central1",
-            workload_uri=invoke.result))
-        wait120s_for_resource_ingestion = time.index.Sleep("wait_120s_for_resource_ingestion", create_duration=120s)
-        example = gcp.apphub.Workload("example",
-            location="us-central1",
-            application_id=application.application_id,
-            workload_id=mig.name,
-            discovered_workload=catalog_workload.name)
-        ```
-        ### Apphub Workload Full
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-        import pulumi_std as std
-        import pulumi_time as time
-
-        application = gcp.apphub.Application("application",
-            location="us-central1",
-            application_id="example-application-1",
-            scope=gcp.apphub.ApplicationScopeArgs(
-                type="REGIONAL",
-            ))
-        service_project = gcp.organizations.Project("service_project",
-            project_id="project-1",
-            name="Service Project",
-            org_id="123456789",
-            billing_account="000000-0000000-0000000-000000")
-        # Enable Compute API
-        compute_service_project = gcp.projects.Service("compute_service_project",
-            project=service_project.project_id,
-            service="compute.googleapis.com")
-        wait120s = time.index.Sleep("wait_120s", create_duration=120s)
-        service_project_attachment = gcp.apphub.ServiceProjectAttachment("service_project_attachment", service_project_attachment_id=service_project.project_id)
-        # VPC network
-        ilb_network = gcp.compute.Network("ilb_network",
-            name="l7-ilb-network",
-            project=service_project.project_id,
-            auto_create_subnetworks=False)
-        # backend subnet
-        ilb_subnet = gcp.compute.Subnetwork("ilb_subnet",
-            name="l7-ilb-subnet",
-            project=service_project.project_id,
-            ip_cidr_range="10.0.1.0/24",
-            region="us-central1",
-            network=ilb_network.id)
-        # instance template
-        instance_template = gcp.compute.InstanceTemplate("instance_template",
-            network_interfaces=[gcp.compute.InstanceTemplateNetworkInterfaceArgs(
-                access_configs=[gcp.compute.InstanceTemplateNetworkInterfaceAccessConfigArgs()],
-                network=ilb_network.id,
-                subnetwork=ilb_subnet.id,
-            )],
-            name="l7-ilb-mig-template",
-            project=service_project.project_id,
-            machine_type="e2-small",
-            tags=["http-server"],
-            disks=[gcp.compute.InstanceTemplateDiskArgs(
-                source_image="debian-cloud/debian-10",
-                auto_delete=True,
-                boot=True,
-            )],
-            metadata={
-                "startup-script": \"\"\"#! /bin/bash
-        set -euo pipefail
-        export DEBIAN_FRONTEND=noninteractive
-        apt-get update
-        apt-get install -y nginx-light jq
-        NAME=$(curl -H "Metadata-Flavor: Google" "http://metadata.google.internal/computeMetadata/v1/instance/hostname")
-        IP=$(curl -H "Metadata-Flavor: Google" "http://metadata.google.internal/computeMetadata/v1/instance/network-interfaces/0/ip")
-        METADATA=$(curl -f -H "Metadata-Flavor: Google" "http://metadata.google.internal/computeMetadata/v1/instance/attributes/?recursive=True" | jq 'del(.["startup-script"])')
-        cat <<EOF > /var/www/html/index.html
-        <pre>
-        Name: $NAME
-        IP: $IP
-        Metadata: $METADATA
-        </pre>
-        EOF
-        \"\"\",
-            })
-        mig = gcp.compute.RegionInstanceGroupManager("mig",
-            name="l7-ilb-mig1",
-            project=service_project.project_id,
-            region="us-central1",
-            versions=[gcp.compute.RegionInstanceGroupManagerVersionArgs(
-                instance_template=instance_template.id,
-                name="primary",
-            )],
-            base_instance_name="vm",
-            target_size=2)
-        # Discovered workload 
-        catalog_workload = std.replace_output(text=mig.instance_group,
-            search="https://www.googleapis.com/compute/v1",
-            replace="//compute.googleapis.com").apply(lambda invoke: gcp.apphub.get_discovered_workload_output(location="us-central1",
-            workload_uri=invoke.result))
-        wait120s_for_resource_ingestion = time.index.Sleep("wait_120s_for_resource_ingestion", create_duration=120s)
-        example = gcp.apphub.Workload("example",
-            location="us-central1",
-            application_id=application.application_id,
-            workload_id=mig.name,
-            discovered_workload=catalog_workload.name,
-            display_name="Example Service Full",
-            description="Register service for testing",
-            attributes=gcp.apphub.WorkloadAttributesArgs(
-                environment=gcp.apphub.WorkloadAttributesEnvironmentArgs(
-                    type="STAGING",
-                ),
-                criticality=gcp.apphub.WorkloadAttributesCriticalityArgs(
-                    type="MISSION_CRITICAL",
-                ),
-                business_owners=[gcp.apphub.WorkloadAttributesBusinessOwnerArgs(
-                    display_name="Alice",
-                    email="alice@google.com",
-                )],
-                developer_owners=[gcp.apphub.WorkloadAttributesDeveloperOwnerArgs(
-                    display_name="Bob",
-                    email="bob@google.com",
-                )],
-                operator_owners=[gcp.apphub.WorkloadAttributesOperatorOwnerArgs(
-                    display_name="Charlie",
-                    email="charlie@google.com",
-                )],
-            ))
-        ```
-
         ## Import
 
         Workload can be imported using any of these accepted formats:

pulumi_gcp/applicationintegration/auth_config.py

@@ -579,7 +579,8 @@ class AuthConfig(pulumi.CustomResource):
                     username="test-username",
                     password="test-password",
                 ),
-            ))
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[client]))
         ```
 
         ## Import
@@ -650,7 +651,8 @@ class AuthConfig(pulumi.CustomResource):
                     username="test-username",
                     password="test-password",
                 ),
-            ))
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[client]))
         ```
 
         ## Import

pulumi_gcp/artifactregistry/repository.py

@@ -747,17 +747,18 @@ class Repository(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        my_repo = gcp.artifactregistry.Repository("my-repo",
-            location="us-central1",
-            repository_id="my-repository",
-            description="example docker repository with cmek",
-            format="DOCKER",
-            kms_key_name="kms-key")
         project = gcp.organizations.get_project()
         crypto_key = gcp.kms.CryptoKeyIAMMember("crypto_key",
             crypto_key_id="kms-key",
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:service-{project.number}@gcp-sa-artifactregistry.iam.gserviceaccount.com")
+        my_repo = gcp.artifactregistry.Repository("my-repo",
+            location="us-central1",
+            repository_id="my-repository",
+            description="example docker repository with cmek",
+            format="DOCKER",
+            kms_key_name="kms-key",
+            opts=pulumi.ResourceOptions(depends_on=[crypto_key]))
         ```
         ### Artifact Registry Repository Virtual
 
@@ -1242,17 +1243,18 @@ class Repository(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        my_repo = gcp.artifactregistry.Repository("my-repo",
-            location="us-central1",
-            repository_id="my-repository",
-            description="example docker repository with cmek",
-            format="DOCKER",
-            kms_key_name="kms-key")
         project = gcp.organizations.get_project()
         crypto_key = gcp.kms.CryptoKeyIAMMember("crypto_key",
             crypto_key_id="kms-key",
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:service-{project.number}@gcp-sa-artifactregistry.iam.gserviceaccount.com")
+        my_repo = gcp.artifactregistry.Repository("my-repo",
+            location="us-central1",
+            repository_id="my-repository",
+            description="example docker repository with cmek",
+            format="DOCKER",
+            kms_key_name="kms-key",
+            opts=pulumi.ResourceOptions(depends_on=[crypto_key]))
         ```
         ### Artifact Registry Repository Virtual
 

pulumi_gcp/backupdisasterrecovery/management_server.py

@@ -255,7 +255,8 @@ class ManagementServer(pulumi.CustomResource):
             networks=[gcp.backupdisasterrecovery.ManagementServerNetworkArgs(
                 network=default.id,
                 peering_mode="PRIVATE_SERVICE_ACCESS",
-            )])
+            )],
+            opts=pulumi.ResourceOptions(depends_on=[default_connection]))
         ```
 
         ## Import
@@ -323,7 +324,8 @@ class ManagementServer(pulumi.CustomResource):
             networks=[gcp.backupdisasterrecovery.ManagementServerNetworkArgs(
                 network=default.id,
                 peering_mode="PRIVATE_SERVICE_ACCESS",
-            )])
+            )],
+            opts=pulumi.ResourceOptions(depends_on=[default_connection]))
         ```
 
         ## Import

pulumi_gcp/bigquery/data_transfer_config.py

@@ -669,7 +669,8 @@ class DataTransferConfig(pulumi.CustomResource):
             dataset_id="my_dataset",
             friendly_name="foo",
             description="bar",
-            location="asia-northeast1")
+            location="asia-northeast1",
+            opts=pulumi.ResourceOptions(depends_on=[permissions]))
         query_config = gcp.bigquery.DataTransferConfig("query_config",
             display_name="my-query",
             location="asia-northeast1",
@@ -680,7 +681,8 @@ class DataTransferConfig(pulumi.CustomResource):
                 "destination_table_name_template": "my_table",
                 "write_disposition": "WRITE_APPEND",
                 "query": "SELECT name FROM tabl WHERE x = 'y'",
-            })
+            },
+            opts=pulumi.ResourceOptions(depends_on=[permissions]))
         ```
 
         ## Import
@@ -776,7 +778,8 @@ class DataTransferConfig(pulumi.CustomResource):
             dataset_id="my_dataset",
             friendly_name="foo",
             description="bar",
-            location="asia-northeast1")
+            location="asia-northeast1",
+            opts=pulumi.ResourceOptions(depends_on=[permissions]))
         query_config = gcp.bigquery.DataTransferConfig("query_config",
             display_name="my-query",
             location="asia-northeast1",
@@ -787,7 +790,8 @@ class DataTransferConfig(pulumi.CustomResource):
                 "destination_table_name_template": "my_table",
                 "write_disposition": "WRITE_APPEND",
                 "query": "SELECT name FROM tabl WHERE x = 'y'",
-            })
+            },
+            opts=pulumi.ResourceOptions(depends_on=[permissions]))
         ```
 
         ## Import

pulumi_gcp/bigquery/job.py

@@ -580,7 +580,8 @@ class Job(pulumi.CustomResource):
                 autodetect=True,
                 source_format="NEWLINE_DELIMITED_JSON",
                 json_extension="GEOJSON",
-            ))
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[object]))
         ```
         ### Bigquery Job Load Parquet
 
@@ -679,6 +680,11 @@ class Job(pulumi.CustomResource):
         crypto_key = gcp.kms.CryptoKey("crypto_key",
             name="example-key",
             key_ring=key_ring.id)
+        project = gcp.organizations.get_project(project_id="my-project-name")
+        encrypt_role = gcp.projects.IAMMember("encrypt_role",
+            project=project.project_id,
+            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
+            member=f"serviceAccount:bq-{project.number}@bigquery-encryption.iam.gserviceaccount.com")
         dest = gcp.bigquery.Table("dest",
             deletion_protection=False,
             dataset_id=dest_dataset.dataset_id,
@@ -703,12 +709,8 @@ class Job(pulumi.CustomResource):
         \"\"\",
             encryption_configuration=gcp.bigquery.TableEncryptionConfigurationArgs(
                 kms_key_name=crypto_key.id,
-            ))
-        project = gcp.organizations.get_project(project_id="my-project-name")
-        encrypt_role = gcp.projects.IAMMember("encrypt_role",
-            project=project.project_id,
-            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
-            member=f"serviceAccount:bq-{project.number}@bigquery-encryption.iam.gserviceaccount.com")
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[encrypt_role]))
         job = gcp.bigquery.Job("job",
             job_id="job_copy",
             copy=gcp.bigquery.JobCopyArgs(
@@ -732,7 +734,8 @@ class Job(pulumi.CustomResource):
                 destination_encryption_configuration=gcp.bigquery.JobCopyDestinationEncryptionConfigurationArgs(
                     kms_key_name=crypto_key.id,
                 ),
-            ))
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[encrypt_role]))
         ```
         ### Bigquery Job Extract
 
@@ -1005,7 +1008,8 @@ class Job(pulumi.CustomResource):
                 autodetect=True,
                 source_format="NEWLINE_DELIMITED_JSON",
                 json_extension="GEOJSON",
-            ))
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[object]))
         ```
         ### Bigquery Job Load Parquet
 
@@ -1104,6 +1108,11 @@ class Job(pulumi.CustomResource):
         crypto_key = gcp.kms.CryptoKey("crypto_key",
             name="example-key",
             key_ring=key_ring.id)
+        project = gcp.organizations.get_project(project_id="my-project-name")
+        encrypt_role = gcp.projects.IAMMember("encrypt_role",
+            project=project.project_id,
+            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
+            member=f"serviceAccount:bq-{project.number}@bigquery-encryption.iam.gserviceaccount.com")
         dest = gcp.bigquery.Table("dest",
             deletion_protection=False,
             dataset_id=dest_dataset.dataset_id,
@@ -1128,12 +1137,8 @@ class Job(pulumi.CustomResource):
         \"\"\",
             encryption_configuration=gcp.bigquery.TableEncryptionConfigurationArgs(
                 kms_key_name=crypto_key.id,
-            ))
-        project = gcp.organizations.get_project(project_id="my-project-name")
-        encrypt_role = gcp.projects.IAMMember("encrypt_role",
-            project=project.project_id,
-            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
-            member=f"serviceAccount:bq-{project.number}@bigquery-encryption.iam.gserviceaccount.com")
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[encrypt_role]))
         job = gcp.bigquery.Job("job",
             job_id="job_copy",
             copy=gcp.bigquery.JobCopyArgs(
@@ -1157,7 +1162,8 @@ class Job(pulumi.CustomResource):
                 destination_encryption_configuration=gcp.bigquery.JobCopyDestinationEncryptionConfigurationArgs(
                     kms_key_name=crypto_key.id,
                 ),
-            ))
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[encrypt_role]))
         ```
         ### Bigquery Job Extract