pulumi-gcp 7.26.0a1717725112__py3-none-any.whl → 7.27.0__py3-none-any.whl

pulumi_gcp/secretmanager/secret_iam_policy.py

@@ -161,6 +161,8 @@ class SecretIamPolicy(pulumi.CustomResource):
 
         > **Note:** `secretmanager.SecretIamBinding` resources **can be** used in conjunction with `secretmanager.SecretIamMember` resources **only if** they do not grant privilege to the same role.
 
+        > **Note:**  This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
+
         ## secretmanager.SecretIamPolicy
 
         ```python
@@ -177,6 +179,26 @@ class SecretIamPolicy(pulumi.CustomResource):
             policy_data=admin.policy_data)
         ```
 
+        With IAM Conditions:
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
+            role="roles/secretmanager.secretAccessor",
+            members=["user:jane@example.com"],
+            condition=gcp.organizations.GetIAMPolicyBindingConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ),
+        )])
+        policy = gcp.secretmanager.SecretIamPolicy("policy",
+            project=secret_basic["project"],
+            secret_id=secret_basic["secretId"],
+            policy_data=admin.policy_data)
+        ```
         ## secretmanager.SecretIamBinding
 
         ```python
@@ -190,6 +212,23 @@ class SecretIamPolicy(pulumi.CustomResource):
             members=["user:jane@example.com"])
         ```
 
+        With IAM Conditions:
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.secretmanager.SecretIamBinding("binding",
+            project=secret_basic["project"],
+            secret_id=secret_basic["secretId"],
+            role="roles/secretmanager.secretAccessor",
+            members=["user:jane@example.com"],
+            condition=gcp.secretmanager.SecretIamBindingConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ))
+        ```
         ## secretmanager.SecretIamMember
 
         ```python
@@ -203,6 +242,24 @@ class SecretIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        With IAM Conditions:
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.secretmanager.SecretIamMember("member",
+            project=secret_basic["project"],
+            secret_id=secret_basic["secretId"],
+            role="roles/secretmanager.secretAccessor",
+            member="user:jane@example.com",
+            condition=gcp.secretmanager.SecretIamMemberConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ))
+        ```
+
         ## secretmanager.SecretIamPolicy
 
         ```python
@@ -219,6 +276,26 @@ class SecretIamPolicy(pulumi.CustomResource):
             policy_data=admin.policy_data)
         ```
 
+        With IAM Conditions:
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
+            role="roles/secretmanager.secretAccessor",
+            members=["user:jane@example.com"],
+            condition=gcp.organizations.GetIAMPolicyBindingConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ),
+        )])
+        policy = gcp.secretmanager.SecretIamPolicy("policy",
+            project=secret_basic["project"],
+            secret_id=secret_basic["secretId"],
+            policy_data=admin.policy_data)
+        ```
         ## secretmanager.SecretIamBinding
 
         ```python
@@ -232,6 +309,23 @@ class SecretIamPolicy(pulumi.CustomResource):
             members=["user:jane@example.com"])
         ```
 
+        With IAM Conditions:
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.secretmanager.SecretIamBinding("binding",
+            project=secret_basic["project"],
+            secret_id=secret_basic["secretId"],
+            role="roles/secretmanager.secretAccessor",
+            members=["user:jane@example.com"],
+            condition=gcp.secretmanager.SecretIamBindingConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ))
+        ```
         ## secretmanager.SecretIamMember
 
         ```python
@@ -245,6 +339,24 @@ class SecretIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        With IAM Conditions:
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.secretmanager.SecretIamMember("member",
+            project=secret_basic["project"],
+            secret_id=secret_basic["secretId"],
+            role="roles/secretmanager.secretAccessor",
+            member="user:jane@example.com",
+            condition=gcp.secretmanager.SecretIamMemberConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ))
+        ```
+
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms:
@@ -309,6 +421,8 @@ class SecretIamPolicy(pulumi.CustomResource):
 
         > **Note:** `secretmanager.SecretIamBinding` resources **can be** used in conjunction with `secretmanager.SecretIamMember` resources **only if** they do not grant privilege to the same role.
 
+        > **Note:**  This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
+
         ## secretmanager.SecretIamPolicy
 
         ```python
@@ -325,6 +439,26 @@ class SecretIamPolicy(pulumi.CustomResource):
             policy_data=admin.policy_data)
         ```
 
+        With IAM Conditions:
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
+            role="roles/secretmanager.secretAccessor",
+            members=["user:jane@example.com"],
+            condition=gcp.organizations.GetIAMPolicyBindingConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ),
+        )])
+        policy = gcp.secretmanager.SecretIamPolicy("policy",
+            project=secret_basic["project"],
+            secret_id=secret_basic["secretId"],
+            policy_data=admin.policy_data)
+        ```
         ## secretmanager.SecretIamBinding
 
         ```python
@@ -338,6 +472,23 @@ class SecretIamPolicy(pulumi.CustomResource):
             members=["user:jane@example.com"])
         ```
 
+        With IAM Conditions:
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.secretmanager.SecretIamBinding("binding",
+            project=secret_basic["project"],
+            secret_id=secret_basic["secretId"],
+            role="roles/secretmanager.secretAccessor",
+            members=["user:jane@example.com"],
+            condition=gcp.secretmanager.SecretIamBindingConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ))
+        ```
         ## secretmanager.SecretIamMember
 
         ```python
@@ -351,6 +502,24 @@ class SecretIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        With IAM Conditions:
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.secretmanager.SecretIamMember("member",
+            project=secret_basic["project"],
+            secret_id=secret_basic["secretId"],
+            role="roles/secretmanager.secretAccessor",
+            member="user:jane@example.com",
+            condition=gcp.secretmanager.SecretIamMemberConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ))
+        ```
+
         ## secretmanager.SecretIamPolicy
 
         ```python
@@ -367,6 +536,26 @@ class SecretIamPolicy(pulumi.CustomResource):
             policy_data=admin.policy_data)
         ```
 
+        With IAM Conditions:
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
+            role="roles/secretmanager.secretAccessor",
+            members=["user:jane@example.com"],
+            condition=gcp.organizations.GetIAMPolicyBindingConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ),
+        )])
+        policy = gcp.secretmanager.SecretIamPolicy("policy",
+            project=secret_basic["project"],
+            secret_id=secret_basic["secretId"],
+            policy_data=admin.policy_data)
+        ```
         ## secretmanager.SecretIamBinding
 
         ```python
@@ -380,6 +569,23 @@ class SecretIamPolicy(pulumi.CustomResource):
             members=["user:jane@example.com"])
         ```
 
+        With IAM Conditions:
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.secretmanager.SecretIamBinding("binding",
+            project=secret_basic["project"],
+            secret_id=secret_basic["secretId"],
+            role="roles/secretmanager.secretAccessor",
+            members=["user:jane@example.com"],
+            condition=gcp.secretmanager.SecretIamBindingConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ))
+        ```
         ## secretmanager.SecretIamMember
 
         ```python
@@ -393,6 +599,24 @@ class SecretIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        With IAM Conditions:
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.secretmanager.SecretIamMember("member",
+            project=secret_basic["project"],
+            secret_id=secret_basic["secretId"],
+            role="roles/secretmanager.secretAccessor",
+            member="user:jane@example.com",
+            condition=gcp.secretmanager.SecretIamMemberConditionArgs(
+                title="expires_after_2019_12_31",
+                description="Expiring at midnight of 2019-12-31",
+                expression="request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
+            ))
+        ```
+
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms:

pulumi_gcp/securitycenter/__init__.py

@@ -11,6 +11,7 @@ from .get_source_iam_policy import *
 from .instance_iam_binding import *
 from .instance_iam_member import *
 from .instance_iam_policy import *
+from .management_organization_event_threat_detection_custom_module import *
 from .mute_config import *
 from .notification_config import *
 from .organization_custom_module import *