pulumi-gcp 7.29.0a1719416802__py3-none-any.whl → 7.30.0__py3-none-any.whl

pulumi_gcp/oslogin/ssh_public_key.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = ['SshPublicKeyArgs', 'SshPublicKey']

pulumi_gcp/parallelstore/instance.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = ['InstanceArgs', 'Instance']

pulumi_gcp/privilegedaccessmanager/_inputs.py

@@ -4,26 +4,58 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = [
     'EntitlementAdditionalNotificationTargetsArgs',
+    'EntitlementAdditionalNotificationTargetsArgsDict',
     'EntitlementApprovalWorkflowArgs',
+    'EntitlementApprovalWorkflowArgsDict',
     'EntitlementApprovalWorkflowManualApprovalsArgs',
+    'EntitlementApprovalWorkflowManualApprovalsArgsDict',
     'EntitlementApprovalWorkflowManualApprovalsStepArgs',
+    'EntitlementApprovalWorkflowManualApprovalsStepArgsDict',
     'EntitlementApprovalWorkflowManualApprovalsStepApproversArgs',
+    'EntitlementApprovalWorkflowManualApprovalsStepApproversArgsDict',
     'EntitlementEligibleUserArgs',
+    'EntitlementEligibleUserArgsDict',
     'EntitlementPrivilegedAccessArgs',
+    'EntitlementPrivilegedAccessArgsDict',
     'EntitlementPrivilegedAccessGcpIamAccessArgs',
+    'EntitlementPrivilegedAccessGcpIamAccessArgsDict',
     'EntitlementPrivilegedAccessGcpIamAccessRoleBindingArgs',
+    'EntitlementPrivilegedAccessGcpIamAccessRoleBindingArgsDict',
     'EntitlementRequesterJustificationConfigArgs',
+    'EntitlementRequesterJustificationConfigArgsDict',
     'EntitlementRequesterJustificationConfigNotMandatoryArgs',
+    'EntitlementRequesterJustificationConfigNotMandatoryArgsDict',
     'EntitlementRequesterJustificationConfigUnstructuredArgs',
+    'EntitlementRequesterJustificationConfigUnstructuredArgsDict',
 ]
 
+MYPY = False
+
+if not MYPY:
+    class EntitlementAdditionalNotificationTargetsArgsDict(TypedDict):
+        admin_email_recipients: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        Optional. Additional email addresses to be notified when a principal(requester) is granted access.
+        """
+        requester_email_recipients: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        Optional. Additional email address to be notified about an eligible entitlement.
+        """
+elif False:
+    EntitlementAdditionalNotificationTargetsArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class EntitlementAdditionalNotificationTargetsArgs:
     def __init__(__self__, *,
@@ -63,6 +95,22 @@ class EntitlementAdditionalNotificationTargetsArgs:
         pulumi.set(self, "requester_email_recipients", value)
 
 
+if not MYPY:
+    class EntitlementApprovalWorkflowArgsDict(TypedDict):
+        manual_approvals: pulumi.Input['EntitlementApprovalWorkflowManualApprovalsArgsDict']
+        """
+        A manual approval workflow where users who are designated as approvers need to call the ApproveGrant/DenyGrant APIs for an Grant.
+        The workflow can consist of multiple serial steps where each step defines who can act as Approver in that step and how many of those users should approve before the workflow moves to the next step.
+        This can be used to create approval workflows such as
+        * Require an approval from any user in a group G.
+        * Require an approval from any k number of users from a Group G.
+        * Require an approval from any user in a group G and then from a user U. etc.
+        A single user might be part of `approvers` ACL for multiple steps in this workflow but they can only approve once and that approval will only be considered to satisfy the approval step at which it was granted.
+        Structure is documented below.
+        """
+elif False:
+    EntitlementApprovalWorkflowArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class EntitlementApprovalWorkflowArgs:
     def __init__(__self__, *,
@@ -99,6 +147,20 @@ class EntitlementApprovalWorkflowArgs:
         pulumi.set(self, "manual_approvals", value)
 
 
+if not MYPY:
+    class EntitlementApprovalWorkflowManualApprovalsArgsDict(TypedDict):
+        steps: pulumi.Input[Sequence[pulumi.Input['EntitlementApprovalWorkflowManualApprovalsStepArgsDict']]]
+        """
+        List of approval steps in this workflow. These steps would be followed in the specified order sequentially.  1 step is supported for now.
+        Structure is documented below.
+        """
+        require_approver_justification: NotRequired[pulumi.Input[bool]]
+        """
+        Optional. Do the approvers need to provide a justification for their actions?
+        """
+elif False:
+    EntitlementApprovalWorkflowManualApprovalsArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class EntitlementApprovalWorkflowManualApprovalsArgs:
     def __init__(__self__, *,
@@ -139,6 +201,27 @@ class EntitlementApprovalWorkflowManualApprovalsArgs:
         pulumi.set(self, "require_approver_justification", value)
 
 
+if not MYPY:
+    class EntitlementApprovalWorkflowManualApprovalsStepArgsDict(TypedDict):
+        approvers: pulumi.Input['EntitlementApprovalWorkflowManualApprovalsStepApproversArgsDict']
+        """
+        The potential set of approvers in this step. This list should contain at only one entry.
+        Structure is documented below.
+        """
+        approvals_needed: NotRequired[pulumi.Input[int]]
+        """
+        How many users from the above list need to approve.
+        If there are not enough distinct users in the list above then the workflow
+        will indefinitely block. Should always be greater than 0. Currently 1 is the only
+        supported value.
+        """
+        approver_email_recipients: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        Optional. Additional email addresses to be notified when a grant is pending approval.
+        """
+elif False:
+    EntitlementApprovalWorkflowManualApprovalsStepArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class EntitlementApprovalWorkflowManualApprovalsStepArgs:
     def __init__(__self__, *,
@@ -201,6 +284,15 @@ class EntitlementApprovalWorkflowManualApprovalsStepArgs:
         pulumi.set(self, "approver_email_recipients", value)
 
 
+if not MYPY:
+    class EntitlementApprovalWorkflowManualApprovalsStepApproversArgsDict(TypedDict):
+        principals: pulumi.Input[Sequence[pulumi.Input[str]]]
+        """
+        Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at: https://cloud.google.com/iam/docs/principal-identifiers#v1
+        """
+elif False:
+    EntitlementApprovalWorkflowManualApprovalsStepApproversArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class EntitlementApprovalWorkflowManualApprovalsStepApproversArgs:
     def __init__(__self__, *,
@@ -223,6 +315,15 @@ class EntitlementApprovalWorkflowManualApprovalsStepApproversArgs:
         pulumi.set(self, "principals", value)
 
 
+if not MYPY:
+    class EntitlementEligibleUserArgsDict(TypedDict):
+        principals: pulumi.Input[Sequence[pulumi.Input[str]]]
+        """
+        Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at "https://cloud.google.com/iam/docs/principal-identifiers#v1"
+        """
+elif False:
+    EntitlementEligibleUserArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class EntitlementEligibleUserArgs:
     def __init__(__self__, *,
@@ -245,6 +346,16 @@ class EntitlementEligibleUserArgs:
         pulumi.set(self, "principals", value)
 
 
+if not MYPY:
+    class EntitlementPrivilegedAccessArgsDict(TypedDict):
+        gcp_iam_access: pulumi.Input['EntitlementPrivilegedAccessGcpIamAccessArgsDict']
+        """
+        GcpIamAccess represents IAM based access control on a GCP resource. Refer to https://cloud.google.com/iam/docs to understand more about IAM.
+        Structure is documented below.
+        """
+elif False:
+    EntitlementPrivilegedAccessArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class EntitlementPrivilegedAccessArgs:
     def __init__(__self__, *,
@@ -269,6 +380,24 @@ class EntitlementPrivilegedAccessArgs:
         pulumi.set(self, "gcp_iam_access", value)
 
 
+if not MYPY:
+    class EntitlementPrivilegedAccessGcpIamAccessArgsDict(TypedDict):
+        resource: pulumi.Input[str]
+        """
+        Name of the resource.
+        """
+        resource_type: pulumi.Input[str]
+        """
+        The type of this resource.
+        """
+        role_bindings: pulumi.Input[Sequence[pulumi.Input['EntitlementPrivilegedAccessGcpIamAccessRoleBindingArgsDict']]]
+        """
+        Role bindings to be created on successful grant.
+        Structure is documented below.
+        """
+elif False:
+    EntitlementPrivilegedAccessGcpIamAccessArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class EntitlementPrivilegedAccessGcpIamAccessArgs:
     def __init__(__self__, *,
@@ -323,6 +452,20 @@ class EntitlementPrivilegedAccessGcpIamAccessArgs:
         pulumi.set(self, "role_bindings", value)
 
 
+if not MYPY:
+    class EntitlementPrivilegedAccessGcpIamAccessRoleBindingArgsDict(TypedDict):
+        role: pulumi.Input[str]
+        """
+        IAM role to be granted. https://cloud.google.com/iam/docs/roles-overview.
+        """
+        condition_expression: NotRequired[pulumi.Input[str]]
+        """
+        The expression field of the IAM condition to be associated with the role. If specified, a user with an active grant for this entitlement would be able to access the resource only if this condition evaluates to true for their request.
+        https://cloud.google.com/iam/docs/conditions-overview#attributes.
+        """
+elif False:
+    EntitlementPrivilegedAccessGcpIamAccessRoleBindingArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class EntitlementPrivilegedAccessGcpIamAccessRoleBindingArgs:
     def __init__(__self__, *,
@@ -363,6 +506,21 @@ class EntitlementPrivilegedAccessGcpIamAccessRoleBindingArgs:
         pulumi.set(self, "condition_expression", value)
 
 
+if not MYPY:
+    class EntitlementRequesterJustificationConfigArgsDict(TypedDict):
+        not_mandatory: NotRequired[pulumi.Input['EntitlementRequesterJustificationConfigNotMandatoryArgsDict']]
+        """
+        The justification is not mandatory but can be provided in any of the supported formats.
+        """
+        unstructured: NotRequired[pulumi.Input['EntitlementRequesterJustificationConfigUnstructuredArgsDict']]
+        """
+        The requester has to provide a justification in the form of free flowing text.
+
+        - - -
+        """
+elif False:
+    EntitlementRequesterJustificationConfigArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class EntitlementRequesterJustificationConfigArgs:
     def __init__(__self__, *,
@@ -406,12 +564,24 @@ class EntitlementRequesterJustificationConfigArgs:
         pulumi.set(self, "unstructured", value)
 
 
+if not MYPY:
+    class EntitlementRequesterJustificationConfigNotMandatoryArgsDict(TypedDict):
+        pass
+elif False:
+    EntitlementRequesterJustificationConfigNotMandatoryArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class EntitlementRequesterJustificationConfigNotMandatoryArgs:
     def __init__(__self__):
         pass
 
 
+if not MYPY:
+    class EntitlementRequesterJustificationConfigUnstructuredArgsDict(TypedDict):
+        pass
+elif False:
+    EntitlementRequesterJustificationConfigUnstructuredArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class EntitlementRequesterJustificationConfigUnstructuredArgs:
     def __init__(__self__):

pulumi_gcp/privilegedaccessmanager/entitlement.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 from ._inputs import *
@@ -433,15 +438,15 @@ class Entitlement(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 additional_notification_targets: Optional[pulumi.Input[pulumi.InputType['EntitlementAdditionalNotificationTargetsArgs']]] = None,
-                 approval_workflow: Optional[pulumi.Input[pulumi.InputType['EntitlementApprovalWorkflowArgs']]] = None,
-                 eligible_users: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['EntitlementEligibleUserArgs']]]]] = None,
+                 additional_notification_targets: Optional[pulumi.Input[Union['EntitlementAdditionalNotificationTargetsArgs', 'EntitlementAdditionalNotificationTargetsArgsDict']]] = None,
+                 approval_workflow: Optional[pulumi.Input[Union['EntitlementApprovalWorkflowArgs', 'EntitlementApprovalWorkflowArgsDict']]] = None,
+                 eligible_users: Optional[pulumi.Input[Sequence[pulumi.Input[Union['EntitlementEligibleUserArgs', 'EntitlementEligibleUserArgsDict']]]]] = None,
                  entitlement_id: Optional[pulumi.Input[str]] = None,
                  location: Optional[pulumi.Input[str]] = None,
                  max_request_duration: Optional[pulumi.Input[str]] = None,
                  parent: Optional[pulumi.Input[str]] = None,
-                 privileged_access: Optional[pulumi.Input[pulumi.InputType['EntitlementPrivilegedAccessArgs']]] = None,
-                 requester_justification_config: Optional[pulumi.Input[pulumi.InputType['EntitlementRequesterJustificationConfigArgs']]] = None,
+                 privileged_access: Optional[pulumi.Input[Union['EntitlementPrivilegedAccessArgs', 'EntitlementPrivilegedAccessArgsDict']]] = None,
+                 requester_justification_config: Optional[pulumi.Input[Union['EntitlementRequesterJustificationConfigArgs', 'EntitlementRequesterJustificationConfigArgsDict']]] = None,
                  __props__=None):
         """
         ## Example Usage
@@ -457,38 +462,38 @@ class Entitlement(pulumi.CustomResource):
             location="global",
             max_request_duration="43200s",
             parent="projects/my-project-name",
-            requester_justification_config=gcp.privilegedaccessmanager.EntitlementRequesterJustificationConfigArgs(
-                unstructured=gcp.privilegedaccessmanager.EntitlementRequesterJustificationConfigUnstructuredArgs(),
-            ),
-            eligible_users=[gcp.privilegedaccessmanager.EntitlementEligibleUserArgs(
-                principals=["group:test@google.com"],
-            )],
-            privileged_access=gcp.privilegedaccessmanager.EntitlementPrivilegedAccessArgs(
-                gcp_iam_access=gcp.privilegedaccessmanager.EntitlementPrivilegedAccessGcpIamAccessArgs(
-                    role_bindings=[gcp.privilegedaccessmanager.EntitlementPrivilegedAccessGcpIamAccessRoleBindingArgs(
-                        role="roles/storage.admin",
-                        condition_expression="request.time < timestamp(\\"2024-04-23T18:30:00.000Z\\")",
-                    )],
-                    resource="//cloudresourcemanager.googleapis.com/projects/my-project-name",
-                    resource_type="cloudresourcemanager.googleapis.com/Project",
-                ),
-            ),
-            additional_notification_targets=gcp.privilegedaccessmanager.EntitlementAdditionalNotificationTargetsArgs(
-                admin_email_recipients=["user@example.com"],
-                requester_email_recipients=["user@example.com"],
-            ),
-            approval_workflow=gcp.privilegedaccessmanager.EntitlementApprovalWorkflowArgs(
-                manual_approvals=gcp.privilegedaccessmanager.EntitlementApprovalWorkflowManualApprovalsArgs(
-                    require_approver_justification=True,
-                    steps=[gcp.privilegedaccessmanager.EntitlementApprovalWorkflowManualApprovalsStepArgs(
-                        approvals_needed=1,
-                        approver_email_recipients=["user@example.com"],
-                        approvers=gcp.privilegedaccessmanager.EntitlementApprovalWorkflowManualApprovalsStepApproversArgs(
-                            principals=["group:test@google.com"],
-                        ),
-                    )],
-                ),
-            ))
+            requester_justification_config={
+                "unstructured": {},
+            },
+            eligible_users=[{
+                "principals": ["group:test@google.com"],
+            }],
+            privileged_access={
+                "gcpIamAccess": {
+                    "roleBindings": [{
+                        "role": "roles/storage.admin",
+                        "conditionExpression": "request.time < timestamp(\\"2024-04-23T18:30:00.000Z\\")",
+                    }],
+                    "resource": "//cloudresourcemanager.googleapis.com/projects/my-project-name",
+                    "resourceType": "cloudresourcemanager.googleapis.com/Project",
+                },
+            },
+            additional_notification_targets={
+                "adminEmailRecipients": ["user@example.com"],
+                "requesterEmailRecipients": ["user@example.com"],
+            },
+            approval_workflow={
+                "manualApprovals": {
+                    "requireApproverJustification": True,
+                    "steps": [{
+                        "approvalsNeeded": 1,
+                        "approverEmailRecipients": ["user@example.com"],
+                        "approvers": {
+                            "principals": ["group:test@google.com"],
+                        },
+                    }],
+                },
+            })
         ```
 
         ## Import
@@ -505,10 +510,10 @@ class Entitlement(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[pulumi.InputType['EntitlementAdditionalNotificationTargetsArgs']] additional_notification_targets: AdditionalNotificationTargets includes email addresses to be notified.
-        :param pulumi.Input[pulumi.InputType['EntitlementApprovalWorkflowArgs']] approval_workflow: The approvals needed before access will be granted to a requester. No approvals will be needed if this field is null.
+        :param pulumi.Input[Union['EntitlementAdditionalNotificationTargetsArgs', 'EntitlementAdditionalNotificationTargetsArgsDict']] additional_notification_targets: AdditionalNotificationTargets includes email addresses to be notified.
+        :param pulumi.Input[Union['EntitlementApprovalWorkflowArgs', 'EntitlementApprovalWorkflowArgsDict']] approval_workflow: The approvals needed before access will be granted to a requester. No approvals will be needed if this field is null.
                Different types of approval workflows that can be used to gate privileged access granting.
-        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['EntitlementEligibleUserArgs']]]] eligible_users: Who can create Grants using Entitlement. This list should contain at most one entry
+        :param pulumi.Input[Sequence[pulumi.Input[Union['EntitlementEligibleUserArgs', 'EntitlementEligibleUserArgsDict']]]] eligible_users: Who can create Grants using Entitlement. This list should contain at most one entry
                Structure is documented below.
         :param pulumi.Input[str] entitlement_id: The ID to use for this Entitlement. This will become the last part of the resource name.
                This value should be 4-63 characters, and valid characters are "[a-z]", "[0-9]", and "-". The first character should be from [a-z].
@@ -518,9 +523,9 @@ class Entitlement(pulumi.CustomResource):
                A requester can choose to ask for access for less than this duration but never more.
                Format: calculate the time in seconds and concatenate it with 's' i.e. 2 hours = "7200s", 45 minutes = "2700s"
         :param pulumi.Input[str] parent: Format: projects/{project-id|project-number} or organizations/{organization-number} or folders/{folder-number}
-        :param pulumi.Input[pulumi.InputType['EntitlementPrivilegedAccessArgs']] privileged_access: Privileged access that this service can be used to gate.
+        :param pulumi.Input[Union['EntitlementPrivilegedAccessArgs', 'EntitlementPrivilegedAccessArgsDict']] privileged_access: Privileged access that this service can be used to gate.
                Structure is documented below.
-        :param pulumi.Input[pulumi.InputType['EntitlementRequesterJustificationConfigArgs']] requester_justification_config: Defines the ways in which a requester should provide the justification while requesting for access.
+        :param pulumi.Input[Union['EntitlementRequesterJustificationConfigArgs', 'EntitlementRequesterJustificationConfigArgsDict']] requester_justification_config: Defines the ways in which a requester should provide the justification while requesting for access.
                Structure is documented below.
         """
         ...
@@ -543,38 +548,38 @@ class Entitlement(pulumi.CustomResource):
             location="global",
             max_request_duration="43200s",
             parent="projects/my-project-name",
-            requester_justification_config=gcp.privilegedaccessmanager.EntitlementRequesterJustificationConfigArgs(
-                unstructured=gcp.privilegedaccessmanager.EntitlementRequesterJustificationConfigUnstructuredArgs(),
-            ),
-            eligible_users=[gcp.privilegedaccessmanager.EntitlementEligibleUserArgs(
-                principals=["group:test@google.com"],
-            )],
-            privileged_access=gcp.privilegedaccessmanager.EntitlementPrivilegedAccessArgs(
-                gcp_iam_access=gcp.privilegedaccessmanager.EntitlementPrivilegedAccessGcpIamAccessArgs(
-                    role_bindings=[gcp.privilegedaccessmanager.EntitlementPrivilegedAccessGcpIamAccessRoleBindingArgs(
-                        role="roles/storage.admin",
-                        condition_expression="request.time < timestamp(\\"2024-04-23T18:30:00.000Z\\")",
-                    )],
-                    resource="//cloudresourcemanager.googleapis.com/projects/my-project-name",
-                    resource_type="cloudresourcemanager.googleapis.com/Project",
-                ),
-            ),
-            additional_notification_targets=gcp.privilegedaccessmanager.EntitlementAdditionalNotificationTargetsArgs(
-                admin_email_recipients=["user@example.com"],
-                requester_email_recipients=["user@example.com"],
-            ),
-            approval_workflow=gcp.privilegedaccessmanager.EntitlementApprovalWorkflowArgs(
-                manual_approvals=gcp.privilegedaccessmanager.EntitlementApprovalWorkflowManualApprovalsArgs(
-                    require_approver_justification=True,
-                    steps=[gcp.privilegedaccessmanager.EntitlementApprovalWorkflowManualApprovalsStepArgs(
-                        approvals_needed=1,
-                        approver_email_recipients=["user@example.com"],
-                        approvers=gcp.privilegedaccessmanager.EntitlementApprovalWorkflowManualApprovalsStepApproversArgs(
-                            principals=["group:test@google.com"],
-                        ),
-                    )],
-                ),
-            ))
+            requester_justification_config={
+                "unstructured": {},
+            },
+            eligible_users=[{
+                "principals": ["group:test@google.com"],
+            }],
+            privileged_access={
+                "gcpIamAccess": {
+                    "roleBindings": [{
+                        "role": "roles/storage.admin",
+                        "conditionExpression": "request.time < timestamp(\\"2024-04-23T18:30:00.000Z\\")",
+                    }],
+                    "resource": "//cloudresourcemanager.googleapis.com/projects/my-project-name",
+                    "resourceType": "cloudresourcemanager.googleapis.com/Project",
+                },
+            },
+            additional_notification_targets={
+                "adminEmailRecipients": ["user@example.com"],
+                "requesterEmailRecipients": ["user@example.com"],
+            },
+            approval_workflow={
+                "manualApprovals": {
+                    "requireApproverJustification": True,
+                    "steps": [{
+                        "approvalsNeeded": 1,
+                        "approverEmailRecipients": ["user@example.com"],
+                        "approvers": {
+                            "principals": ["group:test@google.com"],
+                        },
+                    }],
+                },
+            })
         ```
 
         ## Import
@@ -604,15 +609,15 @@ class Entitlement(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 additional_notification_targets: Optional[pulumi.Input[pulumi.InputType['EntitlementAdditionalNotificationTargetsArgs']]] = None,
-                 approval_workflow: Optional[pulumi.Input[pulumi.InputType['EntitlementApprovalWorkflowArgs']]] = None,
-                 eligible_users: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['EntitlementEligibleUserArgs']]]]] = None,
+                 additional_notification_targets: Optional[pulumi.Input[Union['EntitlementAdditionalNotificationTargetsArgs', 'EntitlementAdditionalNotificationTargetsArgsDict']]] = None,
+                 approval_workflow: Optional[pulumi.Input[Union['EntitlementApprovalWorkflowArgs', 'EntitlementApprovalWorkflowArgsDict']]] = None,
+                 eligible_users: Optional[pulumi.Input[Sequence[pulumi.Input[Union['EntitlementEligibleUserArgs', 'EntitlementEligibleUserArgsDict']]]]] = None,
                  entitlement_id: Optional[pulumi.Input[str]] = None,
                  location: Optional[pulumi.Input[str]] = None,
                  max_request_duration: Optional[pulumi.Input[str]] = None,
                  parent: Optional[pulumi.Input[str]] = None,
-                 privileged_access: Optional[pulumi.Input[pulumi.InputType['EntitlementPrivilegedAccessArgs']]] = None,
-                 requester_justification_config: Optional[pulumi.Input[pulumi.InputType['EntitlementRequesterJustificationConfigArgs']]] = None,
+                 privileged_access: Optional[pulumi.Input[Union['EntitlementPrivilegedAccessArgs', 'EntitlementPrivilegedAccessArgsDict']]] = None,
+                 requester_justification_config: Optional[pulumi.Input[Union['EntitlementRequesterJustificationConfigArgs', 'EntitlementRequesterJustificationConfigArgsDict']]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -660,18 +665,18 @@ class Entitlement(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
-            additional_notification_targets: Optional[pulumi.Input[pulumi.InputType['EntitlementAdditionalNotificationTargetsArgs']]] = None,
-            approval_workflow: Optional[pulumi.Input[pulumi.InputType['EntitlementApprovalWorkflowArgs']]] = None,
+            additional_notification_targets: Optional[pulumi.Input[Union['EntitlementAdditionalNotificationTargetsArgs', 'EntitlementAdditionalNotificationTargetsArgsDict']]] = None,
+            approval_workflow: Optional[pulumi.Input[Union['EntitlementApprovalWorkflowArgs', 'EntitlementApprovalWorkflowArgsDict']]] = None,
             create_time: Optional[pulumi.Input[str]] = None,
-            eligible_users: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['EntitlementEligibleUserArgs']]]]] = None,
+            eligible_users: Optional[pulumi.Input[Sequence[pulumi.Input[Union['EntitlementEligibleUserArgs', 'EntitlementEligibleUserArgsDict']]]]] = None,
             entitlement_id: Optional[pulumi.Input[str]] = None,
             etag: Optional[pulumi.Input[str]] = None,
             location: Optional[pulumi.Input[str]] = None,
             max_request_duration: Optional[pulumi.Input[str]] = None,
             name: Optional[pulumi.Input[str]] = None,
             parent: Optional[pulumi.Input[str]] = None,
-            privileged_access: Optional[pulumi.Input[pulumi.InputType['EntitlementPrivilegedAccessArgs']]] = None,
-            requester_justification_config: Optional[pulumi.Input[pulumi.InputType['EntitlementRequesterJustificationConfigArgs']]] = None,
+            privileged_access: Optional[pulumi.Input[Union['EntitlementPrivilegedAccessArgs', 'EntitlementPrivilegedAccessArgsDict']]] = None,
+            requester_justification_config: Optional[pulumi.Input[Union['EntitlementRequesterJustificationConfigArgs', 'EntitlementRequesterJustificationConfigArgsDict']]] = None,
             state: Optional[pulumi.Input[str]] = None,
             update_time: Optional[pulumi.Input[str]] = None) -> 'Entitlement':
         """
@@ -681,12 +686,12 @@ class Entitlement(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[pulumi.InputType['EntitlementAdditionalNotificationTargetsArgs']] additional_notification_targets: AdditionalNotificationTargets includes email addresses to be notified.
-        :param pulumi.Input[pulumi.InputType['EntitlementApprovalWorkflowArgs']] approval_workflow: The approvals needed before access will be granted to a requester. No approvals will be needed if this field is null.
+        :param pulumi.Input[Union['EntitlementAdditionalNotificationTargetsArgs', 'EntitlementAdditionalNotificationTargetsArgsDict']] additional_notification_targets: AdditionalNotificationTargets includes email addresses to be notified.
+        :param pulumi.Input[Union['EntitlementApprovalWorkflowArgs', 'EntitlementApprovalWorkflowArgsDict']] approval_workflow: The approvals needed before access will be granted to a requester. No approvals will be needed if this field is null.
                Different types of approval workflows that can be used to gate privileged access granting.
         :param pulumi.Input[str] create_time: Output only. Create time stamp. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits.
                Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z"
-        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['EntitlementEligibleUserArgs']]]] eligible_users: Who can create Grants using Entitlement. This list should contain at most one entry
+        :param pulumi.Input[Sequence[pulumi.Input[Union['EntitlementEligibleUserArgs', 'EntitlementEligibleUserArgsDict']]]] eligible_users: Who can create Grants using Entitlement. This list should contain at most one entry
                Structure is documented below.
         :param pulumi.Input[str] entitlement_id: The ID to use for this Entitlement. This will become the last part of the resource name.
                This value should be 4-63 characters, and valid characters are "[a-z]", "[0-9]", and "-". The first character should be from [a-z].
@@ -699,9 +704,9 @@ class Entitlement(pulumi.CustomResource):
         :param pulumi.Input[str] name: Output Only. The entitlement's name follows a hierarchical structure, comprising the organization, folder, or project, alongside the region and a unique entitlement ID.
                Formats: organizations/{organization-number}/locations/{region}/entitlements/{entitlement-id}, folders/{folder-number}/locations/{region}/entitlements/{entitlement-id}, and projects/{project-id|project-number}/locations/{region}/entitlements/{entitlement-id}.
         :param pulumi.Input[str] parent: Format: projects/{project-id|project-number} or organizations/{organization-number} or folders/{folder-number}
-        :param pulumi.Input[pulumi.InputType['EntitlementPrivilegedAccessArgs']] privileged_access: Privileged access that this service can be used to gate.
+        :param pulumi.Input[Union['EntitlementPrivilegedAccessArgs', 'EntitlementPrivilegedAccessArgsDict']] privileged_access: Privileged access that this service can be used to gate.
                Structure is documented below.
-        :param pulumi.Input[pulumi.InputType['EntitlementRequesterJustificationConfigArgs']] requester_justification_config: Defines the ways in which a requester should provide the justification while requesting for access.
+        :param pulumi.Input[Union['EntitlementRequesterJustificationConfigArgs', 'EntitlementRequesterJustificationConfigArgsDict']] requester_justification_config: Defines the ways in which a requester should provide the justification while requesting for access.
                Structure is documented below.
         :param pulumi.Input[str] state: Output only. The current state of the Entitlement.
         :param pulumi.Input[str] update_time: Output only. Update time stamp. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits.

pulumi_gcp/privilegedaccessmanager/outputs.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs