pulumi-gcp 7.29.0a1719417555__py3-none-any.whl → 7.30.0__py3-none-any.whl

pulumi_gcp/projects/_inputs.py

@@ -4,30 +4,80 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = [
     'AccessApprovalSettingsEnrolledServiceArgs',
+    'AccessApprovalSettingsEnrolledServiceArgsDict',
     'ApiKeyRestrictionsArgs',
+    'ApiKeyRestrictionsArgsDict',
     'ApiKeyRestrictionsAndroidKeyRestrictionsArgs',
+    'ApiKeyRestrictionsAndroidKeyRestrictionsArgsDict',
     'ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArgs',
+    'ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArgsDict',
     'ApiKeyRestrictionsApiTargetArgs',
+    'ApiKeyRestrictionsApiTargetArgsDict',
     'ApiKeyRestrictionsBrowserKeyRestrictionsArgs',
+    'ApiKeyRestrictionsBrowserKeyRestrictionsArgsDict',
     'ApiKeyRestrictionsIosKeyRestrictionsArgs',
+    'ApiKeyRestrictionsIosKeyRestrictionsArgsDict',
     'ApiKeyRestrictionsServerKeyRestrictionsArgs',
+    'ApiKeyRestrictionsServerKeyRestrictionsArgsDict',
     'IAMAuditConfigAuditLogConfigArgs',
+    'IAMAuditConfigAuditLogConfigArgsDict',
     'IAMBindingConditionArgs',
+    'IAMBindingConditionArgsDict',
     'IAMMemberConditionArgs',
+    'IAMMemberConditionArgsDict',
     'OrganizationPolicyBooleanPolicyArgs',
+    'OrganizationPolicyBooleanPolicyArgsDict',
     'OrganizationPolicyListPolicyArgs',
+    'OrganizationPolicyListPolicyArgsDict',
     'OrganizationPolicyListPolicyAllowArgs',
+    'OrganizationPolicyListPolicyAllowArgsDict',
     'OrganizationPolicyListPolicyDenyArgs',
+    'OrganizationPolicyListPolicyDenyArgsDict',
     'OrganizationPolicyRestorePolicyArgs',
+    'OrganizationPolicyRestorePolicyArgsDict',
 ]
 
+MYPY = False
+
+if not MYPY:
+    class AccessApprovalSettingsEnrolledServiceArgsDict(TypedDict):
+        cloud_product: pulumi.Input[str]
+        """
+        The product for which Access Approval will be enrolled. Allowed values are listed (case-sensitive):
+        all
+        appengine.googleapis.com
+        bigquery.googleapis.com
+        bigtable.googleapis.com
+        cloudkms.googleapis.com
+        compute.googleapis.com
+        dataflow.googleapis.com
+        iam.googleapis.com
+        pubsub.googleapis.com
+        storage.googleapis.com
+        """
+        enrollment_level: NotRequired[pulumi.Input[str]]
+        """
+        The enrollment level of the service.
+        Default value is `BLOCK_ALL`.
+        Possible values are: `BLOCK_ALL`.
+
+        - - -
+        """
+elif False:
+    AccessApprovalSettingsEnrolledServiceArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class AccessApprovalSettingsEnrolledServiceArgs:
     def __init__(__self__, *,
@@ -94,6 +144,31 @@ class AccessApprovalSettingsEnrolledServiceArgs:
         pulumi.set(self, "enrollment_level", value)
 
 
+if not MYPY:
+    class ApiKeyRestrictionsArgsDict(TypedDict):
+        android_key_restrictions: NotRequired[pulumi.Input['ApiKeyRestrictionsAndroidKeyRestrictionsArgsDict']]
+        """
+        The Android apps that are allowed to use the key.
+        """
+        api_targets: NotRequired[pulumi.Input[Sequence[pulumi.Input['ApiKeyRestrictionsApiTargetArgsDict']]]]
+        """
+        A restriction for a specific service and optionally one or more specific methods. Requests are allowed if they match any of these restrictions. If no restrictions are specified, all targets are allowed.
+        """
+        browser_key_restrictions: NotRequired[pulumi.Input['ApiKeyRestrictionsBrowserKeyRestrictionsArgsDict']]
+        """
+        The HTTP referrers (websites) that are allowed to use the key.
+        """
+        ios_key_restrictions: NotRequired[pulumi.Input['ApiKeyRestrictionsIosKeyRestrictionsArgsDict']]
+        """
+        The iOS apps that are allowed to use the key.
+        """
+        server_key_restrictions: NotRequired[pulumi.Input['ApiKeyRestrictionsServerKeyRestrictionsArgsDict']]
+        """
+        The IP addresses of callers that are allowed to use the key.
+        """
+elif False:
+    ApiKeyRestrictionsArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class ApiKeyRestrictionsArgs:
     def __init__(__self__, *,
@@ -181,6 +256,15 @@ class ApiKeyRestrictionsArgs:
         pulumi.set(self, "server_key_restrictions", value)
 
 
+if not MYPY:
+    class ApiKeyRestrictionsAndroidKeyRestrictionsArgsDict(TypedDict):
+        allowed_applications: pulumi.Input[Sequence[pulumi.Input['ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArgsDict']]]
+        """
+        A list of Android applications that are allowed to make API calls with this key.
+        """
+elif False:
+    ApiKeyRestrictionsAndroidKeyRestrictionsArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class ApiKeyRestrictionsAndroidKeyRestrictionsArgs:
     def __init__(__self__, *,
@@ -203,6 +287,21 @@ class ApiKeyRestrictionsAndroidKeyRestrictionsArgs:
         pulumi.set(self, "allowed_applications", value)
 
 
+if not MYPY:
+    class ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArgsDict(TypedDict):
+        package_name: pulumi.Input[str]
+        """
+        The package name of the application.
+        """
+        sha1_fingerprint: pulumi.Input[str]
+        """
+        The SHA1 fingerprint of the application. For example, both sha1 formats are acceptable : DA:39:A3:EE:5E:6B:4B:0D:32:55:BF:EF:95:60:18:90:AF:D8:07:09 or DA39A3EE5E6B4B0D3255BFEF95601890AFD80709. Output format is the latter.
+
+        - - -
+        """
+elif False:
+    ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArgs:
     def __init__(__self__, *,
@@ -244,6 +343,19 @@ class ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArgs:
         pulumi.set(self, "sha1_fingerprint", value)
 
 
+if not MYPY:
+    class ApiKeyRestrictionsApiTargetArgsDict(TypedDict):
+        service: pulumi.Input[str]
+        """
+        The service for this restriction. It should be the canonical service name, for example: `translate.googleapis.com`. You can use `gcloud services list` to get a list of services that are enabled in the project.
+        """
+        methods: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        Optional. List of one or more methods that can be called. If empty, all methods for the service are allowed. A wildcard (*) can be used as the last symbol. Valid examples: `google.cloud.translate.v2.TranslateService.GetSupportedLanguage` `TranslateText` `Get*` `translate.googleapis.com.Get*`
+        """
+elif False:
+    ApiKeyRestrictionsApiTargetArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class ApiKeyRestrictionsApiTargetArgs:
     def __init__(__self__, *,
@@ -282,6 +394,15 @@ class ApiKeyRestrictionsApiTargetArgs:
         pulumi.set(self, "methods", value)
 
 
+if not MYPY:
+    class ApiKeyRestrictionsBrowserKeyRestrictionsArgsDict(TypedDict):
+        allowed_referrers: pulumi.Input[Sequence[pulumi.Input[str]]]
+        """
+        A list of regular expressions for the referrer URLs that are allowed to make API calls with this key.
+        """
+elif False:
+    ApiKeyRestrictionsBrowserKeyRestrictionsArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class ApiKeyRestrictionsBrowserKeyRestrictionsArgs:
     def __init__(__self__, *,
@@ -304,6 +425,15 @@ class ApiKeyRestrictionsBrowserKeyRestrictionsArgs:
         pulumi.set(self, "allowed_referrers", value)
 
 
+if not MYPY:
+    class ApiKeyRestrictionsIosKeyRestrictionsArgsDict(TypedDict):
+        allowed_bundle_ids: pulumi.Input[Sequence[pulumi.Input[str]]]
+        """
+        A list of bundle IDs that are allowed when making API calls with this key.
+        """
+elif False:
+    ApiKeyRestrictionsIosKeyRestrictionsArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class ApiKeyRestrictionsIosKeyRestrictionsArgs:
     def __init__(__self__, *,
@@ -326,6 +456,15 @@ class ApiKeyRestrictionsIosKeyRestrictionsArgs:
         pulumi.set(self, "allowed_bundle_ids", value)
 
 
+if not MYPY:
+    class ApiKeyRestrictionsServerKeyRestrictionsArgsDict(TypedDict):
+        allowed_ips: pulumi.Input[Sequence[pulumi.Input[str]]]
+        """
+        A list of the caller IP addresses that are allowed to make API calls with this key.
+        """
+elif False:
+    ApiKeyRestrictionsServerKeyRestrictionsArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class ApiKeyRestrictionsServerKeyRestrictionsArgs:
     def __init__(__self__, *,
@@ -348,6 +487,19 @@ class ApiKeyRestrictionsServerKeyRestrictionsArgs:
         pulumi.set(self, "allowed_ips", value)
 
 
+if not MYPY:
+    class IAMAuditConfigAuditLogConfigArgsDict(TypedDict):
+        log_type: pulumi.Input[str]
+        """
+        Permission type for which logging is to be configured.  Must be one of `DATA_READ`, `DATA_WRITE`, or `ADMIN_READ`.
+        """
+        exempted_members: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        Identities that do not cause logging for this type of permission.  The format is the same as that for `members`.
+        """
+elif False:
+    IAMAuditConfigAuditLogConfigArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class IAMAuditConfigAuditLogConfigArgs:
     def __init__(__self__, *,
@@ -386,6 +538,27 @@ class IAMAuditConfigAuditLogConfigArgs:
         pulumi.set(self, "exempted_members", value)
 
 
+if not MYPY:
+    class IAMBindingConditionArgsDict(TypedDict):
+        expression: pulumi.Input[str]
+        """
+        Textual representation of an expression in Common Expression Language syntax.
+        """
+        title: pulumi.Input[str]
+        """
+        A title for the expression, i.e. a short string describing its purpose.
+        """
+        description: NotRequired[pulumi.Input[str]]
+        """
+        An optional description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
+
+        > **Warning:** This provider considers the `role` and condition contents (`title`+`description`+`expression`) as the
+        identifier for the binding. This means that if any part of the condition is changed out-of-band, the provider will
+        consider it to be an entirely different resource and will treat it as such.
+        """
+elif False:
+    IAMBindingConditionArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class IAMBindingConditionArgs:
     def __init__(__self__, *,
@@ -447,6 +620,27 @@ class IAMBindingConditionArgs:
         pulumi.set(self, "description", value)
 
 
+if not MYPY:
+    class IAMMemberConditionArgsDict(TypedDict):
+        expression: pulumi.Input[str]
+        """
+        Textual representation of an expression in Common Expression Language syntax.
+        """
+        title: pulumi.Input[str]
+        """
+        A title for the expression, i.e. a short string describing its purpose.
+        """
+        description: NotRequired[pulumi.Input[str]]
+        """
+        An optional description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
+
+        > **Warning:** This provider considers the `role` and condition contents (`title`+`description`+`expression`) as the
+        identifier for the binding. This means that if any part of the condition is changed out-of-band, the provider will
+        consider it to be an entirely different resource and will treat it as such.
+        """
+elif False:
+    IAMMemberConditionArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class IAMMemberConditionArgs:
     def __init__(__self__, *,
@@ -508,6 +702,15 @@ class IAMMemberConditionArgs:
         pulumi.set(self, "description", value)
 
 
+if not MYPY:
+    class OrganizationPolicyBooleanPolicyArgsDict(TypedDict):
+        enforced: pulumi.Input[bool]
+        """
+        If true, then the Policy is enforced. If false, then any configuration is acceptable.
+        """
+elif False:
+    OrganizationPolicyBooleanPolicyArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class OrganizationPolicyBooleanPolicyArgs:
     def __init__(__self__, *,
@@ -530,6 +733,30 @@ class OrganizationPolicyBooleanPolicyArgs:
         pulumi.set(self, "enforced", value)
 
 
+if not MYPY:
+    class OrganizationPolicyListPolicyArgsDict(TypedDict):
+        allow: NotRequired[pulumi.Input['OrganizationPolicyListPolicyAllowArgsDict']]
+        """
+        or `deny` - (Optional) One or the other must be set.
+        """
+        deny: NotRequired[pulumi.Input['OrganizationPolicyListPolicyDenyArgsDict']]
+        """
+        One or the other must be set.
+        """
+        inherit_from_parent: NotRequired[pulumi.Input[bool]]
+        """
+        If set to true, the values from the effective Policy of the parent resource
+        are inherited, meaning the values set in this Policy are added to the values inherited up the hierarchy.
+
+        The `allow` or `deny` blocks support:
+        """
+        suggested_value: NotRequired[pulumi.Input[str]]
+        """
+        The Google Cloud Console will try to default to a configuration that matches the value specified in this field.
+        """
+elif False:
+    OrganizationPolicyListPolicyArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class OrganizationPolicyListPolicyArgs:
     def __init__(__self__, *,
@@ -607,6 +834,19 @@ class OrganizationPolicyListPolicyArgs:
         pulumi.set(self, "suggested_value", value)
 
 
+if not MYPY:
+    class OrganizationPolicyListPolicyAllowArgsDict(TypedDict):
+        all: NotRequired[pulumi.Input[bool]]
+        """
+        The policy allows or denies all values.
+        """
+        values: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        The policy can define specific values that are allowed or denied.
+        """
+elif False:
+    OrganizationPolicyListPolicyAllowArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class OrganizationPolicyListPolicyAllowArgs:
     def __init__(__self__, *,
@@ -646,6 +886,19 @@ class OrganizationPolicyListPolicyAllowArgs:
         pulumi.set(self, "values", value)
 
 
+if not MYPY:
+    class OrganizationPolicyListPolicyDenyArgsDict(TypedDict):
+        all: NotRequired[pulumi.Input[bool]]
+        """
+        The policy allows or denies all values.
+        """
+        values: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        The policy can define specific values that are allowed or denied.
+        """
+elif False:
+    OrganizationPolicyListPolicyDenyArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class OrganizationPolicyListPolicyDenyArgs:
     def __init__(__self__, *,
@@ -685,6 +938,15 @@ class OrganizationPolicyListPolicyDenyArgs:
         pulumi.set(self, "values", value)
 
 
+if not MYPY:
+    class OrganizationPolicyRestorePolicyArgsDict(TypedDict):
+        default: pulumi.Input[bool]
+        """
+        May only be set to true. If set, then the default Policy is restored.
+        """
+elif False:
+    OrganizationPolicyRestorePolicyArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class OrganizationPolicyRestorePolicyArgs:
     def __init__(__self__, *,

pulumi_gcp/projects/access_approval_settings.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 from ._inputs import *
@@ -303,7 +308,7 @@ class AccessApprovalSettings(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  active_key_version: Optional[pulumi.Input[str]] = None,
-                 enrolled_services: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['AccessApprovalSettingsEnrolledServiceArgs']]]]] = None,
+                 enrolled_services: Optional[pulumi.Input[Sequence[pulumi.Input[Union['AccessApprovalSettingsEnrolledServiceArgs', 'AccessApprovalSettingsEnrolledServiceArgsDict']]]]] = None,
                  notification_emails: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  project: Optional[pulumi.Input[str]] = None,
                  project_id: Optional[pulumi.Input[str]] = None,
@@ -329,10 +334,10 @@ class AccessApprovalSettings(pulumi.CustomResource):
                 "testuser@example.com",
                 "example.user@example.com",
             ],
-            enrolled_services=[gcp.projects.AccessApprovalSettingsEnrolledServiceArgs(
-                cloud_product="all",
-                enrollment_level="BLOCK_ALL",
-            )])
+            enrolled_services=[{
+                "cloudProduct": "all",
+                "enrollmentLevel": "BLOCK_ALL",
+            }])
         ```
         ### Project Access Approval Active Key Version
 
@@ -348,9 +353,9 @@ class AccessApprovalSettings(pulumi.CustomResource):
             name="crypto-key",
             key_ring=key_ring.id,
             purpose="ASYMMETRIC_SIGN",
-            version_template=gcp.kms.CryptoKeyVersionTemplateArgs(
-                algorithm="EC_SIGN_P384_SHA384",
-            ))
+            version_template={
+                "algorithm": "EC_SIGN_P384_SHA384",
+            })
         service_account = gcp.accessapproval.get_project_service_account(project_id="my-project-name")
         iam = gcp.kms.CryptoKeyIAMMember("iam",
             crypto_key_id=crypto_key.id,
@@ -360,9 +365,9 @@ class AccessApprovalSettings(pulumi.CustomResource):
         project_access_approval = gcp.projects.AccessApprovalSettings("project_access_approval",
             project_id="my-project-name",
             active_key_version=crypto_key_version.name,
-            enrolled_services=[gcp.projects.AccessApprovalSettingsEnrolledServiceArgs(
-                cloud_product="all",
-            )],
+            enrolled_services=[{
+                "cloudProduct": "all",
+            }],
             opts = pulumi.ResourceOptions(depends_on=[iam]))
         ```
 
@@ -389,7 +394,7 @@ class AccessApprovalSettings(pulumi.CustomResource):
         :param pulumi.Input[str] active_key_version: The asymmetric crypto key version to use for signing approval requests. Empty active_key_version indicates that a
                Google-managed key should be used for signing. This property will be ignored if set by an ancestor of the resource, and
                new non-empty values may not be set.
-        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['AccessApprovalSettingsEnrolledServiceArgs']]]] enrolled_services: A list of Google Cloud Services for which the given resource has Access Approval enrolled.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['AccessApprovalSettingsEnrolledServiceArgs', 'AccessApprovalSettingsEnrolledServiceArgsDict']]]] enrolled_services: A list of Google Cloud Services for which the given resource has Access Approval enrolled.
                Access requests for the resource given by name against any of these services contained here will be required
                to have explicit approval. Enrollment can only be done on an all or nothing basis.
                A maximum of 10 enrolled services will be enforced, to be expanded as the set of supported services is expanded.
@@ -427,10 +432,10 @@ class AccessApprovalSettings(pulumi.CustomResource):
                 "testuser@example.com",
                 "example.user@example.com",
             ],
-            enrolled_services=[gcp.projects.AccessApprovalSettingsEnrolledServiceArgs(
-                cloud_product="all",
-                enrollment_level="BLOCK_ALL",
-            )])
+            enrolled_services=[{
+                "cloudProduct": "all",
+                "enrollmentLevel": "BLOCK_ALL",
+            }])
         ```
         ### Project Access Approval Active Key Version
 
@@ -446,9 +451,9 @@ class AccessApprovalSettings(pulumi.CustomResource):
             name="crypto-key",
             key_ring=key_ring.id,
             purpose="ASYMMETRIC_SIGN",
-            version_template=gcp.kms.CryptoKeyVersionTemplateArgs(
-                algorithm="EC_SIGN_P384_SHA384",
-            ))
+            version_template={
+                "algorithm": "EC_SIGN_P384_SHA384",
+            })
         service_account = gcp.accessapproval.get_project_service_account(project_id="my-project-name")
         iam = gcp.kms.CryptoKeyIAMMember("iam",
             crypto_key_id=crypto_key.id,
@@ -458,9 +463,9 @@ class AccessApprovalSettings(pulumi.CustomResource):
         project_access_approval = gcp.projects.AccessApprovalSettings("project_access_approval",
             project_id="my-project-name",
             active_key_version=crypto_key_version.name,
-            enrolled_services=[gcp.projects.AccessApprovalSettingsEnrolledServiceArgs(
-                cloud_product="all",
-            )],
+            enrolled_services=[{
+                "cloudProduct": "all",
+            }],
             opts = pulumi.ResourceOptions(depends_on=[iam]))
         ```
 
@@ -498,7 +503,7 @@ class AccessApprovalSettings(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  active_key_version: Optional[pulumi.Input[str]] = None,
-                 enrolled_services: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['AccessApprovalSettingsEnrolledServiceArgs']]]]] = None,
+                 enrolled_services: Optional[pulumi.Input[Sequence[pulumi.Input[Union['AccessApprovalSettingsEnrolledServiceArgs', 'AccessApprovalSettingsEnrolledServiceArgsDict']]]]] = None,
                  notification_emails: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  project: Optional[pulumi.Input[str]] = None,
                  project_id: Optional[pulumi.Input[str]] = None,
@@ -537,7 +542,7 @@ class AccessApprovalSettings(pulumi.CustomResource):
             active_key_version: Optional[pulumi.Input[str]] = None,
             ancestor_has_active_key_version: Optional[pulumi.Input[bool]] = None,
             enrolled_ancestor: Optional[pulumi.Input[bool]] = None,
-            enrolled_services: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['AccessApprovalSettingsEnrolledServiceArgs']]]]] = None,
+            enrolled_services: Optional[pulumi.Input[Sequence[pulumi.Input[Union['AccessApprovalSettingsEnrolledServiceArgs', 'AccessApprovalSettingsEnrolledServiceArgsDict']]]]] = None,
             invalid_key_version: Optional[pulumi.Input[bool]] = None,
             name: Optional[pulumi.Input[str]] = None,
             notification_emails: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
@@ -555,7 +560,7 @@ class AccessApprovalSettings(pulumi.CustomResource):
                new non-empty values may not be set.
         :param pulumi.Input[bool] ancestor_has_active_key_version: If the field is true, that indicates that an ancestor of this Project has set active_key_version.
         :param pulumi.Input[bool] enrolled_ancestor: If the field is true, that indicates that at least one service is enrolled for Access Approval in one or more ancestors of the Project.
-        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['AccessApprovalSettingsEnrolledServiceArgs']]]] enrolled_services: A list of Google Cloud Services for which the given resource has Access Approval enrolled.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['AccessApprovalSettingsEnrolledServiceArgs', 'AccessApprovalSettingsEnrolledServiceArgsDict']]]] enrolled_services: A list of Google Cloud Services for which the given resource has Access Approval enrolled.
                Access requests for the resource given by name against any of these services contained here will be required
                to have explicit approval. Enrollment can only be done on an all or nothing basis.
                A maximum of 10 enrolled services will be enforced, to be expanded as the set of supported services is expanded.