pulumi-gcp 7.30.0__py3-none-any.whl → 7.30.0a1719470057__py3-none-any.whl

pulumi_gcp/folder/_inputs.py

@@ -4,78 +4,23 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = [
     'AccessApprovalSettingsEnrolledServiceArgs',
-    'AccessApprovalSettingsEnrolledServiceArgsDict',
     'IAMBindingConditionArgs',
-    'IAMBindingConditionArgsDict',
     'IAMMemberConditionArgs',
-    'IAMMemberConditionArgsDict',
     'IamAuditConfigAuditLogConfigArgs',
-    'IamAuditConfigAuditLogConfigArgsDict',
     'OrganizationPolicyBooleanPolicyArgs',
-    'OrganizationPolicyBooleanPolicyArgsDict',
     'OrganizationPolicyListPolicyArgs',
-    'OrganizationPolicyListPolicyArgsDict',
     'OrganizationPolicyListPolicyAllowArgs',
-    'OrganizationPolicyListPolicyAllowArgsDict',
     'OrganizationPolicyListPolicyDenyArgs',
-    'OrganizationPolicyListPolicyDenyArgsDict',
     'OrganizationPolicyRestorePolicyArgs',
-    'OrganizationPolicyRestorePolicyArgsDict',
 ]
 
-MYPY = False
-
-if not MYPY:
-    class AccessApprovalSettingsEnrolledServiceArgsDict(TypedDict):
-        cloud_product: pulumi.Input[str]
-        """
-        The product for which Access Approval will be enrolled. Allowed values are listed (case-sensitive):
-        * all
-        * App Engine
-        * BigQuery
-        * Cloud Bigtable
-        * Cloud Key Management Service
-        * Compute Engine
-        * Cloud Dataflow
-        * Cloud Identity and Access Management
-        * Cloud Pub/Sub
-        * Cloud Storage
-        * Persistent Disk
-        Note: These values are supported as input, but considered a legacy format:
-        * all
-        * appengine.googleapis.com
-        * bigquery.googleapis.com
-        * bigtable.googleapis.com
-        * cloudkms.googleapis.com
-        * compute.googleapis.com
-        * dataflow.googleapis.com
-        * iam.googleapis.com
-        * pubsub.googleapis.com
-        * storage.googleapis.com
-        """
-        enrollment_level: NotRequired[pulumi.Input[str]]
-        """
-        The enrollment level of the service.
-        Default value is `BLOCK_ALL`.
-        Possible values are: `BLOCK_ALL`.
-
-        - - -
-        """
-elif False:
-    AccessApprovalSettingsEnrolledServiceArgsDict: TypeAlias = Mapping[str, Any]
-
 @pulumi.input_type
 class AccessApprovalSettingsEnrolledServiceArgs:
     def __init__(__self__, *,
@@ -166,14 +111,6 @@ class AccessApprovalSettingsEnrolledServiceArgs:
         pulumi.set(self, "enrollment_level", value)
 
 
-if not MYPY:
-    class IAMBindingConditionArgsDict(TypedDict):
-        expression: pulumi.Input[str]
-        title: pulumi.Input[str]
-        description: NotRequired[pulumi.Input[str]]
-elif False:
-    IAMBindingConditionArgsDict: TypeAlias = Mapping[str, Any]
-
 @pulumi.input_type
 class IAMBindingConditionArgs:
     def __init__(__self__, *,
@@ -213,27 +150,6 @@ class IAMBindingConditionArgs:
         pulumi.set(self, "description", value)
 
 
-if not MYPY:
-    class IAMMemberConditionArgsDict(TypedDict):
-        expression: pulumi.Input[str]
-        """
-        Textual representation of an expression in Common Expression Language syntax.
-        """
-        title: pulumi.Input[str]
-        """
-        A title for the expression, i.e. a short string describing its purpose.
-        """
-        description: NotRequired[pulumi.Input[str]]
-        """
-        An optional description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
-
-        > **Warning:** This provider considers the `role` and condition contents (`title`+`description`+`expression`) as the
-        identifier for the binding. This means that if any part of the condition is changed out-of-band, the provider will
-        consider it to be an entirely different resource and will treat it as such.
-        """
-elif False:
-    IAMMemberConditionArgsDict: TypeAlias = Mapping[str, Any]
-
 @pulumi.input_type
 class IAMMemberConditionArgs:
     def __init__(__self__, *,
@@ -295,19 +211,6 @@ class IAMMemberConditionArgs:
         pulumi.set(self, "description", value)
 
 
-if not MYPY:
-    class IamAuditConfigAuditLogConfigArgsDict(TypedDict):
-        log_type: pulumi.Input[str]
-        """
-        Permission type for which logging is to be configured.  Must be one of `DATA_READ`, `DATA_WRITE`, or `ADMIN_READ`.
-        """
-        exempted_members: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
-        """
-        Identities that do not cause logging for this type of permission.  The format is the same as that for `members`.
-        """
-elif False:
-    IamAuditConfigAuditLogConfigArgsDict: TypeAlias = Mapping[str, Any]
-
 @pulumi.input_type
 class IamAuditConfigAuditLogConfigArgs:
     def __init__(__self__, *,
@@ -346,15 +249,6 @@ class IamAuditConfigAuditLogConfigArgs:
         pulumi.set(self, "exempted_members", value)
 
 
-if not MYPY:
-    class OrganizationPolicyBooleanPolicyArgsDict(TypedDict):
-        enforced: pulumi.Input[bool]
-        """
-        If true, then the Policy is enforced. If false, then any configuration is acceptable.
-        """
-elif False:
-    OrganizationPolicyBooleanPolicyArgsDict: TypeAlias = Mapping[str, Any]
-
 @pulumi.input_type
 class OrganizationPolicyBooleanPolicyArgs:
     def __init__(__self__, *,
@@ -377,30 +271,6 @@ class OrganizationPolicyBooleanPolicyArgs:
         pulumi.set(self, "enforced", value)
 
 
-if not MYPY:
-    class OrganizationPolicyListPolicyArgsDict(TypedDict):
-        allow: NotRequired[pulumi.Input['OrganizationPolicyListPolicyAllowArgsDict']]
-        """
-        or `deny` - (Optional) One or the other must be set.
-        """
-        deny: NotRequired[pulumi.Input['OrganizationPolicyListPolicyDenyArgsDict']]
-        """
-        One or the other must be set.
-        """
-        inherit_from_parent: NotRequired[pulumi.Input[bool]]
-        """
-        If set to true, the values from the effective Policy of the parent resource
-        are inherited, meaning the values set in this Policy are added to the values inherited up the hierarchy.
-
-        The `allow` or `deny` blocks support:
-        """
-        suggested_value: NotRequired[pulumi.Input[str]]
-        """
-        The Google Cloud Console will try to default to a configuration that matches the value specified in this field.
-        """
-elif False:
-    OrganizationPolicyListPolicyArgsDict: TypeAlias = Mapping[str, Any]
-
 @pulumi.input_type
 class OrganizationPolicyListPolicyArgs:
     def __init__(__self__, *,
@@ -478,19 +348,6 @@ class OrganizationPolicyListPolicyArgs:
         pulumi.set(self, "suggested_value", value)
 
 
-if not MYPY:
-    class OrganizationPolicyListPolicyAllowArgsDict(TypedDict):
-        all: NotRequired[pulumi.Input[bool]]
-        """
-        The policy allows or denies all values.
-        """
-        values: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
-        """
-        The policy can define specific values that are allowed or denied.
-        """
-elif False:
-    OrganizationPolicyListPolicyAllowArgsDict: TypeAlias = Mapping[str, Any]
-
 @pulumi.input_type
 class OrganizationPolicyListPolicyAllowArgs:
     def __init__(__self__, *,
@@ -530,19 +387,6 @@ class OrganizationPolicyListPolicyAllowArgs:
         pulumi.set(self, "values", value)
 
 
-if not MYPY:
-    class OrganizationPolicyListPolicyDenyArgsDict(TypedDict):
-        all: NotRequired[pulumi.Input[bool]]
-        """
-        The policy allows or denies all values.
-        """
-        values: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
-        """
-        The policy can define specific values that are allowed or denied.
-        """
-elif False:
-    OrganizationPolicyListPolicyDenyArgsDict: TypeAlias = Mapping[str, Any]
-
 @pulumi.input_type
 class OrganizationPolicyListPolicyDenyArgs:
     def __init__(__self__, *,
@@ -582,15 +426,6 @@ class OrganizationPolicyListPolicyDenyArgs:
         pulumi.set(self, "values", value)
 
 
-if not MYPY:
-    class OrganizationPolicyRestorePolicyArgsDict(TypedDict):
-        default: pulumi.Input[bool]
-        """
-        May only be set to true. If set, then the default Policy is restored.
-        """
-elif False:
-    OrganizationPolicyRestorePolicyArgsDict: TypeAlias = Mapping[str, Any]
-
 @pulumi.input_type
 class OrganizationPolicyRestorePolicyArgs:
     def __init__(__self__, *,

pulumi_gcp/folder/access_approval_settings.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 from ._inputs import *
@@ -268,7 +263,7 @@ class AccessApprovalSettings(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  active_key_version: Optional[pulumi.Input[str]] = None,
-                 enrolled_services: Optional[pulumi.Input[Sequence[pulumi.Input[Union['AccessApprovalSettingsEnrolledServiceArgs', 'AccessApprovalSettingsEnrolledServiceArgsDict']]]]] = None,
+                 enrolled_services: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['AccessApprovalSettingsEnrolledServiceArgs']]]]] = None,
                  folder_id: Optional[pulumi.Input[str]] = None,
                  notification_emails: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  __props__=None):
@@ -296,9 +291,9 @@ class AccessApprovalSettings(pulumi.CustomResource):
                 "testuser@example.com",
                 "example.user@example.com",
             ],
-            enrolled_services=[{
-                "cloudProduct": "all",
-            }])
+            enrolled_services=[gcp.folder.AccessApprovalSettingsEnrolledServiceArgs(
+                cloud_product="all",
+            )])
         ```
         ### Folder Access Approval Active Key Version
 
@@ -321,9 +316,9 @@ class AccessApprovalSettings(pulumi.CustomResource):
             name="crypto-key",
             key_ring=key_ring.id,
             purpose="ASYMMETRIC_SIGN",
-            version_template={
-                "algorithm": "EC_SIGN_P384_SHA384",
-            })
+            version_template=gcp.kms.CryptoKeyVersionTemplateArgs(
+                algorithm="EC_SIGN_P384_SHA384",
+            ))
         service_account = gcp.accessapproval.get_folder_service_account_output(folder_id=my_folder.folder_id)
         iam = gcp.kms.CryptoKeyIAMMember("iam",
             crypto_key_id=crypto_key.id,
@@ -333,9 +328,9 @@ class AccessApprovalSettings(pulumi.CustomResource):
         folder_access_approval = gcp.folder.AccessApprovalSettings("folder_access_approval",
             folder_id=my_folder.folder_id,
             active_key_version=crypto_key_version.name,
-            enrolled_services=[{
-                "cloudProduct": "all",
-            }],
+            enrolled_services=[gcp.folder.AccessApprovalSettingsEnrolledServiceArgs(
+                cloud_product="all",
+            )],
             opts = pulumi.ResourceOptions(depends_on=[iam]))
         ```
 
@@ -362,7 +357,7 @@ class AccessApprovalSettings(pulumi.CustomResource):
         :param pulumi.Input[str] active_key_version: The asymmetric crypto key version to use for signing approval requests. Empty active_key_version indicates that a
                Google-managed key should be used for signing. This property will be ignored if set by an ancestor of the resource, and
                new non-empty values may not be set.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['AccessApprovalSettingsEnrolledServiceArgs', 'AccessApprovalSettingsEnrolledServiceArgsDict']]]] enrolled_services: A list of Google Cloud Services for which the given resource has Access Approval enrolled.
+        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['AccessApprovalSettingsEnrolledServiceArgs']]]] enrolled_services: A list of Google Cloud Services for which the given resource has Access Approval enrolled.
                Access requests for the resource given by name against any of these services contained here will be required
                to have explicit approval. Enrollment can only be done on an all or nothing basis.
                A maximum of 10 enrolled services will be enforced, to be expanded as the set of supported services is expanded.
@@ -402,9 +397,9 @@ class AccessApprovalSettings(pulumi.CustomResource):
                 "testuser@example.com",
                 "example.user@example.com",
             ],
-            enrolled_services=[{
-                "cloudProduct": "all",
-            }])
+            enrolled_services=[gcp.folder.AccessApprovalSettingsEnrolledServiceArgs(
+                cloud_product="all",
+            )])
         ```
         ### Folder Access Approval Active Key Version
 
@@ -427,9 +422,9 @@ class AccessApprovalSettings(pulumi.CustomResource):
             name="crypto-key",
             key_ring=key_ring.id,
             purpose="ASYMMETRIC_SIGN",
-            version_template={
-                "algorithm": "EC_SIGN_P384_SHA384",
-            })
+            version_template=gcp.kms.CryptoKeyVersionTemplateArgs(
+                algorithm="EC_SIGN_P384_SHA384",
+            ))
         service_account = gcp.accessapproval.get_folder_service_account_output(folder_id=my_folder.folder_id)
         iam = gcp.kms.CryptoKeyIAMMember("iam",
             crypto_key_id=crypto_key.id,
@@ -439,9 +434,9 @@ class AccessApprovalSettings(pulumi.CustomResource):
         folder_access_approval = gcp.folder.AccessApprovalSettings("folder_access_approval",
             folder_id=my_folder.folder_id,
             active_key_version=crypto_key_version.name,
-            enrolled_services=[{
-                "cloudProduct": "all",
-            }],
+            enrolled_services=[gcp.folder.AccessApprovalSettingsEnrolledServiceArgs(
+                cloud_product="all",
+            )],
             opts = pulumi.ResourceOptions(depends_on=[iam]))
         ```
 
@@ -479,7 +474,7 @@ class AccessApprovalSettings(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  active_key_version: Optional[pulumi.Input[str]] = None,
-                 enrolled_services: Optional[pulumi.Input[Sequence[pulumi.Input[Union['AccessApprovalSettingsEnrolledServiceArgs', 'AccessApprovalSettingsEnrolledServiceArgsDict']]]]] = None,
+                 enrolled_services: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['AccessApprovalSettingsEnrolledServiceArgs']]]]] = None,
                  folder_id: Optional[pulumi.Input[str]] = None,
                  notification_emails: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  __props__=None):
@@ -516,7 +511,7 @@ class AccessApprovalSettings(pulumi.CustomResource):
             active_key_version: Optional[pulumi.Input[str]] = None,
             ancestor_has_active_key_version: Optional[pulumi.Input[bool]] = None,
             enrolled_ancestor: Optional[pulumi.Input[bool]] = None,
-            enrolled_services: Optional[pulumi.Input[Sequence[pulumi.Input[Union['AccessApprovalSettingsEnrolledServiceArgs', 'AccessApprovalSettingsEnrolledServiceArgsDict']]]]] = None,
+            enrolled_services: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['AccessApprovalSettingsEnrolledServiceArgs']]]]] = None,
             folder_id: Optional[pulumi.Input[str]] = None,
             invalid_key_version: Optional[pulumi.Input[bool]] = None,
             name: Optional[pulumi.Input[str]] = None,
@@ -533,7 +528,7 @@ class AccessApprovalSettings(pulumi.CustomResource):
                new non-empty values may not be set.
         :param pulumi.Input[bool] ancestor_has_active_key_version: If the field is true, that indicates that an ancestor of this Folder has set active_key_version.
         :param pulumi.Input[bool] enrolled_ancestor: If the field is true, that indicates that at least one service is enrolled for Access Approval in one or more ancestors of the Folder.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['AccessApprovalSettingsEnrolledServiceArgs', 'AccessApprovalSettingsEnrolledServiceArgsDict']]]] enrolled_services: A list of Google Cloud Services for which the given resource has Access Approval enrolled.
+        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['AccessApprovalSettingsEnrolledServiceArgs']]]] enrolled_services: A list of Google Cloud Services for which the given resource has Access Approval enrolled.
                Access requests for the resource given by name against any of these services contained here will be required
                to have explicit approval. Enrollment can only be done on an all or nothing basis.
                A maximum of 10 enrolled services will be enforced, to be expanded as the set of supported services is expanded.

pulumi_gcp/folder/get_iam_policy.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = [

pulumi_gcp/folder/get_organization_policy.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs