pulumi-gcp 7.29.0a1719417555__py3-none-any.whl → 7.30.0__py3-none-any.whl

pulumi_gcp/orgpolicy/_inputs.py

@@ -4,22 +4,62 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = [
     'PolicyDryRunSpecArgs',
+    'PolicyDryRunSpecArgsDict',
     'PolicyDryRunSpecRuleArgs',
+    'PolicyDryRunSpecRuleArgsDict',
     'PolicyDryRunSpecRuleConditionArgs',
+    'PolicyDryRunSpecRuleConditionArgsDict',
     'PolicyDryRunSpecRuleValuesArgs',
+    'PolicyDryRunSpecRuleValuesArgsDict',
     'PolicySpecArgs',
+    'PolicySpecArgsDict',
     'PolicySpecRuleArgs',
+    'PolicySpecRuleArgsDict',
     'PolicySpecRuleConditionArgs',
+    'PolicySpecRuleConditionArgsDict',
     'PolicySpecRuleValuesArgs',
+    'PolicySpecRuleValuesArgsDict',
 ]
 
+MYPY = False
+
+if not MYPY:
+    class PolicyDryRunSpecArgsDict(TypedDict):
+        etag: NotRequired[pulumi.Input[str]]
+        """
+        An opaque tag indicating the current version of the policy, used for concurrency control. This field is ignored if used in a `CreatePolicy` request. When the policy` is returned from either a `GetPolicy` or a `ListPolicies` request, this `etag` indicates the version of the current policy to use when executing a read-modify-write loop. When the policy is returned from a `GetEffectivePolicy` request, the `etag` will be unset.
+        """
+        inherit_from_parent: NotRequired[pulumi.Input[bool]]
+        """
+        Determines the inheritance behavior for this policy. If `inherit_from_parent` is true, policy rules set higher up in the hierarchy (up to the closest root) are inherited and present in the effective policy. If it is false, then no rules are inherited, and this policy becomes the new root for evaluation. This field can be set only for policies which configure list constraints.
+        """
+        reset: NotRequired[pulumi.Input[bool]]
+        """
+        Ignores policies set above this resource and restores the `constraint_default` enforcement behavior of the specific constraint at this resource. This field can be set in policies for either list or boolean constraints. If set, `rules` must be empty and `inherit_from_parent` must be set to false.
+        """
+        rules: NotRequired[pulumi.Input[Sequence[pulumi.Input['PolicyDryRunSpecRuleArgsDict']]]]
+        """
+        In policies for boolean constraints, the following requirements apply: - There must be one and only one policy rule where condition is unset. - Boolean policy rules with conditions must set `enforced` to the opposite of the policy rule without a condition. - During policy evaluation, policy rules with conditions that are true for a target resource take precedence.
+        """
+        update_time: NotRequired[pulumi.Input[str]]
+        """
+        Output only. The time stamp this was previously updated. This represents the last time a call to `CreatePolicy` or `UpdatePolicy` was made for that policy.
+        """
+elif False:
+    PolicyDryRunSpecArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class PolicyDryRunSpecArgs:
     def __init__(__self__, *,
@@ -107,6 +147,31 @@ class PolicyDryRunSpecArgs:
         pulumi.set(self, "update_time", value)
 
 
+if not MYPY:
+    class PolicyDryRunSpecRuleArgsDict(TypedDict):
+        allow_all: NotRequired[pulumi.Input[str]]
+        """
+        Setting this to `"TRUE"` means that all values are allowed. This field can be set only in Policies for list constraints.
+        """
+        condition: NotRequired[pulumi.Input['PolicyDryRunSpecRuleConditionArgsDict']]
+        """
+        A condition which determines whether this rule is used in the evaluation of the policy. When set, the `expression` field in the `Expr' must include from 1 to 10 subexpressions, joined by the "||" or "&&" operators. Each subexpression must be of the form "resource.matchTag('/tag_key_short_name, 'tag_value_short_name')". or "resource.matchTagId('tagKeys/key_id', 'tagValues/value_id')". where key_name and value_name are the resource names for Label Keys and Values. These names are available from the Tag Manager Service. An example expression is: "resource.matchTag('123456789/environment, 'prod')". or "resource.matchTagId('tagKeys/123', 'tagValues/456')".
+        """
+        deny_all: NotRequired[pulumi.Input[str]]
+        """
+        Setting this to `"TRUE"` means that all values are denied. This field can be set only in Policies for list constraints.
+        """
+        enforce: NotRequired[pulumi.Input[str]]
+        """
+        If `"TRUE"`, then the `Policy` is enforced. If `"FALSE"`, then any configuration is acceptable. This field can be set only in Policies for boolean constraints.
+        """
+        values: NotRequired[pulumi.Input['PolicyDryRunSpecRuleValuesArgsDict']]
+        """
+        List of values to be used for this PolicyRule. This field can be set only in Policies for list constraints.
+        """
+elif False:
+    PolicyDryRunSpecRuleArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class PolicyDryRunSpecRuleArgs:
     def __init__(__self__, *,
@@ -194,6 +259,27 @@ class PolicyDryRunSpecRuleArgs:
         pulumi.set(self, "values", value)
 
 
+if not MYPY:
+    class PolicyDryRunSpecRuleConditionArgsDict(TypedDict):
+        description: NotRequired[pulumi.Input[str]]
+        """
+        Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
+        """
+        expression: NotRequired[pulumi.Input[str]]
+        """
+        Textual representation of an expression in Common Expression Language syntax.
+        """
+        location: NotRequired[pulumi.Input[str]]
+        """
+        Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
+        """
+        title: NotRequired[pulumi.Input[str]]
+        """
+        Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
+        """
+elif False:
+    PolicyDryRunSpecRuleConditionArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class PolicyDryRunSpecRuleConditionArgs:
     def __init__(__self__, *,
@@ -265,6 +351,19 @@ class PolicyDryRunSpecRuleConditionArgs:
         pulumi.set(self, "title", value)
 
 
+if not MYPY:
+    class PolicyDryRunSpecRuleValuesArgsDict(TypedDict):
+        allowed_values: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        List of values allowed at this resource.
+        """
+        denied_values: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        List of values denied at this resource.
+        """
+elif False:
+    PolicyDryRunSpecRuleValuesArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class PolicyDryRunSpecRuleValuesArgs:
     def __init__(__self__, *,
@@ -304,6 +403,31 @@ class PolicyDryRunSpecRuleValuesArgs:
         pulumi.set(self, "denied_values", value)
 
 
+if not MYPY:
+    class PolicySpecArgsDict(TypedDict):
+        etag: NotRequired[pulumi.Input[str]]
+        """
+        An opaque tag indicating the current version of the `Policy`, used for concurrency control. This field is ignored if used in a `CreatePolicy` request. When the `Policy` is returned from either a `GetPolicy` or a `ListPolicies` request, this `etag` indicates the version of the current `Policy` to use when executing a read-modify-write loop. When the `Policy` is returned from a `GetEffectivePolicy` request, the `etag` will be unset.
+        """
+        inherit_from_parent: NotRequired[pulumi.Input[bool]]
+        """
+        Determines the inheritance behavior for this `Policy`. If `inherit_from_parent` is true, PolicyRules set higher up in the hierarchy (up to the closest root) are inherited and present in the effective policy. If it is false, then no rules are inherited, and this Policy becomes the new root for evaluation. This field can be set only for Policies which configure list constraints.
+        """
+        reset: NotRequired[pulumi.Input[bool]]
+        """
+        Ignores policies set above this resource and restores the `constraint_default` enforcement behavior of the specific `Constraint` at this resource. This field can be set in policies for either list or boolean constraints. If set, `rules` must be empty and `inherit_from_parent` must be set to false.
+        """
+        rules: NotRequired[pulumi.Input[Sequence[pulumi.Input['PolicySpecRuleArgsDict']]]]
+        """
+        Up to 10 PolicyRules are allowed. In Policies for boolean constraints, the following requirements apply: - There must be one and only one PolicyRule where condition is unset. - BooleanPolicyRules with conditions must set `enforced` to the opposite of the PolicyRule without a condition. - During policy evaluation, PolicyRules with conditions that are true for a target resource take precedence.
+        """
+        update_time: NotRequired[pulumi.Input[str]]
+        """
+        Output only. The time stamp this was previously updated. This represents the last time a call to `CreatePolicy` or `UpdatePolicy` was made for that `Policy`.
+        """
+elif False:
+    PolicySpecArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class PolicySpecArgs:
     def __init__(__self__, *,
@@ -391,6 +515,31 @@ class PolicySpecArgs:
         pulumi.set(self, "update_time", value)
 
 
+if not MYPY:
+    class PolicySpecRuleArgsDict(TypedDict):
+        allow_all: NotRequired[pulumi.Input[str]]
+        """
+        Setting this to `"TRUE"` means that all values are allowed. This field can be set only in Policies for list constraints.
+        """
+        condition: NotRequired[pulumi.Input['PolicySpecRuleConditionArgsDict']]
+        """
+        A condition which determines whether this rule is used in the evaluation of the policy. When set, the `expression` field in the `Expr' must include from 1 to 10 subexpressions, joined by the "||" or "&&" operators. Each subexpression must be of the form "resource.matchTag('/tag_key_short_name, 'tag_value_short_name')". or "resource.matchTagId('tagKeys/key_id', 'tagValues/value_id')". where key_name and value_name are the resource names for Label Keys and Values. These names are available from the Tag Manager Service. An example expression is: "resource.matchTag('123456789/environment, 'prod')". or "resource.matchTagId('tagKeys/123', 'tagValues/456')".
+        """
+        deny_all: NotRequired[pulumi.Input[str]]
+        """
+        Setting this to `"TRUE"` means that all values are denied. This field can be set only in Policies for list constraints.
+        """
+        enforce: NotRequired[pulumi.Input[str]]
+        """
+        If `"TRUE"`, then the `Policy` is enforced. If `"FALSE"`, then any configuration is acceptable. This field can be set only in Policies for boolean constraints.
+        """
+        values: NotRequired[pulumi.Input['PolicySpecRuleValuesArgsDict']]
+        """
+        List of values to be used for this PolicyRule. This field can be set only in Policies for list constraints.
+        """
+elif False:
+    PolicySpecRuleArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class PolicySpecRuleArgs:
     def __init__(__self__, *,
@@ -478,6 +627,27 @@ class PolicySpecRuleArgs:
         pulumi.set(self, "values", value)
 
 
+if not MYPY:
+    class PolicySpecRuleConditionArgsDict(TypedDict):
+        description: NotRequired[pulumi.Input[str]]
+        """
+        Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
+        """
+        expression: NotRequired[pulumi.Input[str]]
+        """
+        Textual representation of an expression in Common Expression Language syntax.
+        """
+        location: NotRequired[pulumi.Input[str]]
+        """
+        Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
+        """
+        title: NotRequired[pulumi.Input[str]]
+        """
+        Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
+        """
+elif False:
+    PolicySpecRuleConditionArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class PolicySpecRuleConditionArgs:
     def __init__(__self__, *,
@@ -549,6 +719,19 @@ class PolicySpecRuleConditionArgs:
         pulumi.set(self, "title", value)
 
 
+if not MYPY:
+    class PolicySpecRuleValuesArgsDict(TypedDict):
+        allowed_values: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        List of values allowed at this resource.
+        """
+        denied_values: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        List of values denied at this resource.
+        """
+elif False:
+    PolicySpecRuleValuesArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class PolicySpecRuleValuesArgs:
     def __init__(__self__, *,

pulumi_gcp/orgpolicy/custom_constraint.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = ['CustomConstraintArgs', 'CustomConstraint']
@@ -374,11 +379,11 @@ class CustomConstraint(pulumi.CustomResource):
         bool = gcp.orgpolicy.Policy("bool",
             name=constraint.name.apply(lambda name: f"organizations/123456789/policies/{name}"),
             parent="organizations/123456789",
-            spec=gcp.orgpolicy.PolicySpecArgs(
-                rules=[gcp.orgpolicy.PolicySpecRuleArgs(
-                    enforce="TRUE",
-                )],
-            ))
+            spec={
+                "rules": [{
+                    "enforce": "TRUE",
+                }],
+            })
         ```
 
         ## Import
@@ -464,11 +469,11 @@ class CustomConstraint(pulumi.CustomResource):
         bool = gcp.orgpolicy.Policy("bool",
             name=constraint.name.apply(lambda name: f"organizations/123456789/policies/{name}"),
             parent="organizations/123456789",
-            spec=gcp.orgpolicy.PolicySpecArgs(
-                rules=[gcp.orgpolicy.PolicySpecRuleArgs(
-                    enforce="TRUE",
-                )],
-            ))
+            spec={
+                "rules": [{
+                    "enforce": "TRUE",
+                }],
+            })
         ```
 
         ## Import

pulumi_gcp/orgpolicy/outputs.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 

pulumi_gcp/orgpolicy/policy.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 from ._inputs import *
@@ -193,10 +198,10 @@ class Policy(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 dry_run_spec: Optional[pulumi.Input[pulumi.InputType['PolicyDryRunSpecArgs']]] = None,
+                 dry_run_spec: Optional[pulumi.Input[Union['PolicyDryRunSpecArgs', 'PolicyDryRunSpecArgsDict']]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  parent: Optional[pulumi.Input[str]] = None,
-                 spec: Optional[pulumi.Input[pulumi.InputType['PolicySpecArgs']]] = None,
+                 spec: Optional[pulumi.Input[Union['PolicySpecArgs', 'PolicySpecArgsDict']]] = None,
                  __props__=None):
         """
         An organization policy gives you programmatic control over your organization's cloud resources.  Using Organization Policies, you will be able to configure constraints across your entire resource hierarchy.
@@ -220,11 +225,11 @@ class Policy(pulumi.CustomResource):
         primary = gcp.orgpolicy.Policy("primary",
             name=basic.name.apply(lambda name: f"projects/{name}/policies/iam.disableServiceAccountKeyUpload"),
             parent=basic.name.apply(lambda name: f"projects/{name}"),
-            spec=gcp.orgpolicy.PolicySpecArgs(
-                rules=[gcp.orgpolicy.PolicySpecRuleArgs(
-                    enforce="FALSE",
-                )],
-            ))
+            spec={
+                "rules": [{
+                    "enforce": "FALSE",
+                }],
+            })
         ```
         ### Folder_policy
         A test of an orgpolicy policy for a folder
@@ -238,12 +243,12 @@ class Policy(pulumi.CustomResource):
         primary = gcp.orgpolicy.Policy("primary",
             name=basic.name.apply(lambda name: f"{name}/policies/gcp.resourceLocations"),
             parent=basic.name,
-            spec=gcp.orgpolicy.PolicySpecArgs(
-                inherit_from_parent=True,
-                rules=[gcp.orgpolicy.PolicySpecRuleArgs(
-                    deny_all="TRUE",
-                )],
-            ))
+            spec={
+                "inheritFromParent": True,
+                "rules": [{
+                    "denyAll": "TRUE",
+                }],
+            })
         ```
         ### Organization_policy
         A test of an orgpolicy policy for an organization
@@ -254,9 +259,9 @@ class Policy(pulumi.CustomResource):
         primary = gcp.orgpolicy.Policy("primary",
             name="organizations/123456789/policies/gcp.detailedAuditLoggingMode",
             parent="organizations/123456789",
-            spec=gcp.orgpolicy.PolicySpecArgs(
-                reset=True,
-            ))
+            spec={
+                "reset": True,
+            })
         ```
         ### Project_policy
         A test of an orgpolicy policy for a project
@@ -271,25 +276,25 @@ class Policy(pulumi.CustomResource):
         primary = gcp.orgpolicy.Policy("primary",
             name=basic.name.apply(lambda name: f"projects/{name}/policies/gcp.resourceLocations"),
             parent=basic.name.apply(lambda name: f"projects/{name}"),
-            spec=gcp.orgpolicy.PolicySpecArgs(
-                rules=[
-                    gcp.orgpolicy.PolicySpecRuleArgs(
-                        condition=gcp.orgpolicy.PolicySpecRuleConditionArgs(
-                            description="A sample condition for the policy",
-                            expression="resource.matchLabels('labelKeys/123', 'labelValues/345')",
-                            location="sample-location.log",
-                            title="sample-condition",
-                        ),
-                        values=gcp.orgpolicy.PolicySpecRuleValuesArgs(
-                            allowed_values=["projects/allowed-project"],
-                            denied_values=["projects/denied-project"],
-                        ),
-                    ),
-                    gcp.orgpolicy.PolicySpecRuleArgs(
-                        allow_all="TRUE",
-                    ),
+            spec={
+                "rules": [
+                    {
+                        "condition": {
+                            "description": "A sample condition for the policy",
+                            "expression": "resource.matchLabels('labelKeys/123', 'labelValues/345')",
+                            "location": "sample-location.log",
+                            "title": "sample-condition",
+                        },
+                        "values": {
+                            "allowedValues": ["projects/allowed-project"],
+                            "deniedValues": ["projects/denied-project"],
+                        },
+                    },
+                    {
+                        "allowAll": "TRUE",
+                    },
                 ],
-            ))
+            })
         ```
         ### Dry_run_spec
         ```python
@@ -308,18 +313,18 @@ class Policy(pulumi.CustomResource):
         primary = gcp.orgpolicy.Policy("primary",
             name=constraint.name.apply(lambda name: f"organizations/123456789/policies/{name}"),
             parent="organizations/123456789",
-            spec=gcp.orgpolicy.PolicySpecArgs(
-                rules=[gcp.orgpolicy.PolicySpecRuleArgs(
-                    enforce="FALSE",
-                )],
-            ),
-            dry_run_spec=gcp.orgpolicy.PolicyDryRunSpecArgs(
-                inherit_from_parent=False,
-                reset=False,
-                rules=[gcp.orgpolicy.PolicyDryRunSpecRuleArgs(
-                    enforce="FALSE",
-                )],
-            ))
+            spec={
+                "rules": [{
+                    "enforce": "FALSE",
+                }],
+            },
+            dry_run_spec={
+                "inheritFromParent": False,
+                "reset": False,
+                "rules": [{
+                    "enforce": "FALSE",
+                }],
+            })
         ```
 
         ## Import
@@ -335,14 +340,14 @@ class Policy(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[pulumi.InputType['PolicyDryRunSpecArgs']] dry_run_spec: Dry-run policy. Audit-only policy, can be used to monitor how the policy would have impacted the existing and future resources if it's enforced.
+        :param pulumi.Input[Union['PolicyDryRunSpecArgs', 'PolicyDryRunSpecArgsDict']] dry_run_spec: Dry-run policy. Audit-only policy, can be used to monitor how the policy would have impacted the existing and future resources if it's enforced.
         :param pulumi.Input[str] name: Immutable. The resource name of the Policy. Must be one of the following forms, where constraint_name is the name of the constraint which this Policy configures: * `projects/{project_number}/policies/{constraint_name}` * `folders/{folder_id}/policies/{constraint_name}` * `organizations/{organization_id}/policies/{constraint_name}` For example, "projects/123/policies/compute.disableSerialPortAccess". Note: `projects/{project_id}/policies/{constraint_name}` is also an acceptable name for API requests, but responses will return the name using the equivalent project number.
         :param pulumi.Input[str] parent: The parent of the resource.
                
                
                
                - - -
-        :param pulumi.Input[pulumi.InputType['PolicySpecArgs']] spec: Basic information about the Organization Policy.
+        :param pulumi.Input[Union['PolicySpecArgs', 'PolicySpecArgsDict']] spec: Basic information about the Organization Policy.
         """
         ...
     @overload
@@ -372,11 +377,11 @@ class Policy(pulumi.CustomResource):
         primary = gcp.orgpolicy.Policy("primary",
             name=basic.name.apply(lambda name: f"projects/{name}/policies/iam.disableServiceAccountKeyUpload"),
             parent=basic.name.apply(lambda name: f"projects/{name}"),
-            spec=gcp.orgpolicy.PolicySpecArgs(
-                rules=[gcp.orgpolicy.PolicySpecRuleArgs(
-                    enforce="FALSE",
-                )],
-            ))
+            spec={
+                "rules": [{
+                    "enforce": "FALSE",
+                }],
+            })
         ```
         ### Folder_policy
         A test of an orgpolicy policy for a folder
@@ -390,12 +395,12 @@ class Policy(pulumi.CustomResource):
         primary = gcp.orgpolicy.Policy("primary",
             name=basic.name.apply(lambda name: f"{name}/policies/gcp.resourceLocations"),
             parent=basic.name,
-            spec=gcp.orgpolicy.PolicySpecArgs(
-                inherit_from_parent=True,
-                rules=[gcp.orgpolicy.PolicySpecRuleArgs(
-                    deny_all="TRUE",
-                )],
-            ))
+            spec={
+                "inheritFromParent": True,
+                "rules": [{
+                    "denyAll": "TRUE",
+                }],
+            })
         ```
         ### Organization_policy
         A test of an orgpolicy policy for an organization
@@ -406,9 +411,9 @@ class Policy(pulumi.CustomResource):
         primary = gcp.orgpolicy.Policy("primary",
             name="organizations/123456789/policies/gcp.detailedAuditLoggingMode",
             parent="organizations/123456789",
-            spec=gcp.orgpolicy.PolicySpecArgs(
-                reset=True,
-            ))
+            spec={
+                "reset": True,
+            })
         ```
         ### Project_policy
         A test of an orgpolicy policy for a project
@@ -423,25 +428,25 @@ class Policy(pulumi.CustomResource):
         primary = gcp.orgpolicy.Policy("primary",
             name=basic.name.apply(lambda name: f"projects/{name}/policies/gcp.resourceLocations"),
             parent=basic.name.apply(lambda name: f"projects/{name}"),
-            spec=gcp.orgpolicy.PolicySpecArgs(
-                rules=[
-                    gcp.orgpolicy.PolicySpecRuleArgs(
-                        condition=gcp.orgpolicy.PolicySpecRuleConditionArgs(
-                            description="A sample condition for the policy",
-                            expression="resource.matchLabels('labelKeys/123', 'labelValues/345')",
-                            location="sample-location.log",
-                            title="sample-condition",
-                        ),
-                        values=gcp.orgpolicy.PolicySpecRuleValuesArgs(
-                            allowed_values=["projects/allowed-project"],
-                            denied_values=["projects/denied-project"],
-                        ),
-                    ),
-                    gcp.orgpolicy.PolicySpecRuleArgs(
-                        allow_all="TRUE",
-                    ),
+            spec={
+                "rules": [
+                    {
+                        "condition": {
+                            "description": "A sample condition for the policy",
+                            "expression": "resource.matchLabels('labelKeys/123', 'labelValues/345')",
+                            "location": "sample-location.log",
+                            "title": "sample-condition",
+                        },
+                        "values": {
+                            "allowedValues": ["projects/allowed-project"],
+                            "deniedValues": ["projects/denied-project"],
+                        },
+                    },
+                    {
+                        "allowAll": "TRUE",
+                    },
                 ],
-            ))
+            })
         ```
         ### Dry_run_spec
         ```python
@@ -460,18 +465,18 @@ class Policy(pulumi.CustomResource):
         primary = gcp.orgpolicy.Policy("primary",
             name=constraint.name.apply(lambda name: f"organizations/123456789/policies/{name}"),
             parent="organizations/123456789",
-            spec=gcp.orgpolicy.PolicySpecArgs(
-                rules=[gcp.orgpolicy.PolicySpecRuleArgs(
-                    enforce="FALSE",
-                )],
-            ),
-            dry_run_spec=gcp.orgpolicy.PolicyDryRunSpecArgs(
-                inherit_from_parent=False,
-                reset=False,
-                rules=[gcp.orgpolicy.PolicyDryRunSpecRuleArgs(
-                    enforce="FALSE",
-                )],
-            ))
+            spec={
+                "rules": [{
+                    "enforce": "FALSE",
+                }],
+            },
+            dry_run_spec={
+                "inheritFromParent": False,
+                "reset": False,
+                "rules": [{
+                    "enforce": "FALSE",
+                }],
+            })
         ```
 
         ## Import
@@ -500,10 +505,10 @@ class Policy(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 dry_run_spec: Optional[pulumi.Input[pulumi.InputType['PolicyDryRunSpecArgs']]] = None,
+                 dry_run_spec: Optional[pulumi.Input[Union['PolicyDryRunSpecArgs', 'PolicyDryRunSpecArgsDict']]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  parent: Optional[pulumi.Input[str]] = None,
-                 spec: Optional[pulumi.Input[pulumi.InputType['PolicySpecArgs']]] = None,
+                 spec: Optional[pulumi.Input[Union['PolicySpecArgs', 'PolicySpecArgsDict']]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -530,11 +535,11 @@ class Policy(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
-            dry_run_spec: Optional[pulumi.Input[pulumi.InputType['PolicyDryRunSpecArgs']]] = None,
+            dry_run_spec: Optional[pulumi.Input[Union['PolicyDryRunSpecArgs', 'PolicyDryRunSpecArgsDict']]] = None,
             etag: Optional[pulumi.Input[str]] = None,
             name: Optional[pulumi.Input[str]] = None,
             parent: Optional[pulumi.Input[str]] = None,
-            spec: Optional[pulumi.Input[pulumi.InputType['PolicySpecArgs']]] = None) -> 'Policy':
+            spec: Optional[pulumi.Input[Union['PolicySpecArgs', 'PolicySpecArgsDict']]] = None) -> 'Policy':
         """
         Get an existing Policy resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -542,7 +547,7 @@ class Policy(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[pulumi.InputType['PolicyDryRunSpecArgs']] dry_run_spec: Dry-run policy. Audit-only policy, can be used to monitor how the policy would have impacted the existing and future resources if it's enforced.
+        :param pulumi.Input[Union['PolicyDryRunSpecArgs', 'PolicyDryRunSpecArgsDict']] dry_run_spec: Dry-run policy. Audit-only policy, can be used to monitor how the policy would have impacted the existing and future resources if it's enforced.
         :param pulumi.Input[str] etag: Optional. An opaque tag indicating the current state of the policy, used for concurrency control. This 'etag' is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.
         :param pulumi.Input[str] name: Immutable. The resource name of the Policy. Must be one of the following forms, where constraint_name is the name of the constraint which this Policy configures: * `projects/{project_number}/policies/{constraint_name}` * `folders/{folder_id}/policies/{constraint_name}` * `organizations/{organization_id}/policies/{constraint_name}` For example, "projects/123/policies/compute.disableSerialPortAccess". Note: `projects/{project_id}/policies/{constraint_name}` is also an acceptable name for API requests, but responses will return the name using the equivalent project number.
         :param pulumi.Input[str] parent: The parent of the resource.
@@ -550,7 +555,7 @@ class Policy(pulumi.CustomResource):
                
                
                - - -
-        :param pulumi.Input[pulumi.InputType['PolicySpecArgs']] spec: Basic information about the Organization Policy.
+        :param pulumi.Input[Union['PolicySpecArgs', 'PolicySpecArgsDict']] spec: Basic information about the Organization Policy.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))