pulumi-gcp 7.30.0__py3-none-any.whl → 7.30.0a1719470057__py3-none-any.whl

pulumi_gcp/iam/access_boundary_policy.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 from ._inputs import *
@@ -188,7 +183,7 @@ class AccessBoundaryPolicy(pulumi.CustomResource):
                  display_name: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  parent: Optional[pulumi.Input[str]] = None,
-                 rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['AccessBoundaryPolicyRuleArgs', 'AccessBoundaryPolicyRuleArgsDict']]]]] = None,
+                 rules: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['AccessBoundaryPolicyRuleArgs']]]]] = None,
                  __props__=None):
         """
         Represents a collection of access boundary policies to apply to a given resource.
@@ -216,36 +211,36 @@ class AccessBoundaryPolicy(pulumi.CustomResource):
             parent=access_policy.name.apply(lambda name: f"accessPolicies/{name}"),
             name=access_policy.name.apply(lambda name: f"accessPolicies/{name}/accessLevels/chromeos_no_lock"),
             title="chromeos_no_lock",
-            basic={
-                "conditions": [{
-                    "devicePolicy": {
-                        "requireScreenLock": True,
-                        "osConstraints": [{
-                            "osType": "DESKTOP_CHROME_OS",
-                        }],
-                    },
-                    "regions": [
+            basic=gcp.accesscontextmanager.AccessLevelBasicArgs(
+                conditions=[gcp.accesscontextmanager.AccessLevelBasicConditionArgs(
+                    device_policy=gcp.accesscontextmanager.AccessLevelBasicConditionDevicePolicyArgs(
+                        require_screen_lock=True,
+                        os_constraints=[gcp.accesscontextmanager.AccessLevelBasicConditionDevicePolicyOsConstraintArgs(
+                            os_type="DESKTOP_CHROME_OS",
+                        )],
+                    ),
+                    regions=[
                         "CH",
                         "IT",
                         "US",
                     ],
-                }],
-            })
+                )],
+            ))
         example = gcp.iam.AccessBoundaryPolicy("example",
             parent=std.urlencode_output(input=project.project_id.apply(lambda project_id: f"cloudresourcemanager.googleapis.com/projects/{project_id}")).apply(lambda invoke: invoke.result),
             name="my-ab-policy",
             display_name="My AB policy",
-            rules=[{
-                "description": "AB rule",
-                "accessBoundaryRule": {
-                    "availableResource": "*",
-                    "availablePermissions": ["*"],
-                    "availabilityCondition": {
-                        "title": "Access level expr",
-                        "expression": pulumi.Output.all(project.org_id, test_access.name).apply(lambda org_id, name: f"request.matchAccessLevels('{org_id}', ['{name}'])"),
-                    },
-                },
-            }])
+            rules=[gcp.iam.AccessBoundaryPolicyRuleArgs(
+                description="AB rule",
+                access_boundary_rule=gcp.iam.AccessBoundaryPolicyRuleAccessBoundaryRuleArgs(
+                    available_resource="*",
+                    available_permissions=["*"],
+                    availability_condition=gcp.iam.AccessBoundaryPolicyRuleAccessBoundaryRuleAvailabilityConditionArgs(
+                        title="Access level expr",
+                        expression=pulumi.Output.all(project.org_id, test_access.name).apply(lambda org_id, name: f"request.matchAccessLevels('{org_id}', ['{name}'])"),
+                    ),
+                ),
+            )])
         ```
 
         ## Import
@@ -265,7 +260,7 @@ class AccessBoundaryPolicy(pulumi.CustomResource):
         :param pulumi.Input[str] display_name: The display name of the rule.
         :param pulumi.Input[str] name: The name of the policy.
         :param pulumi.Input[str] parent: The attachment point is identified by its URL-encoded full resource name.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['AccessBoundaryPolicyRuleArgs', 'AccessBoundaryPolicyRuleArgsDict']]]] rules: Rules to be applied.
+        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['AccessBoundaryPolicyRuleArgs']]]] rules: Rules to be applied.
                Structure is documented below.
         """
         ...
@@ -300,36 +295,36 @@ class AccessBoundaryPolicy(pulumi.CustomResource):
             parent=access_policy.name.apply(lambda name: f"accessPolicies/{name}"),
             name=access_policy.name.apply(lambda name: f"accessPolicies/{name}/accessLevels/chromeos_no_lock"),
             title="chromeos_no_lock",
-            basic={
-                "conditions": [{
-                    "devicePolicy": {
-                        "requireScreenLock": True,
-                        "osConstraints": [{
-                            "osType": "DESKTOP_CHROME_OS",
-                        }],
-                    },
-                    "regions": [
+            basic=gcp.accesscontextmanager.AccessLevelBasicArgs(
+                conditions=[gcp.accesscontextmanager.AccessLevelBasicConditionArgs(
+                    device_policy=gcp.accesscontextmanager.AccessLevelBasicConditionDevicePolicyArgs(
+                        require_screen_lock=True,
+                        os_constraints=[gcp.accesscontextmanager.AccessLevelBasicConditionDevicePolicyOsConstraintArgs(
+                            os_type="DESKTOP_CHROME_OS",
+                        )],
+                    ),
+                    regions=[
                         "CH",
                         "IT",
                         "US",
                     ],
-                }],
-            })
+                )],
+            ))
         example = gcp.iam.AccessBoundaryPolicy("example",
             parent=std.urlencode_output(input=project.project_id.apply(lambda project_id: f"cloudresourcemanager.googleapis.com/projects/{project_id}")).apply(lambda invoke: invoke.result),
             name="my-ab-policy",
             display_name="My AB policy",
-            rules=[{
-                "description": "AB rule",
-                "accessBoundaryRule": {
-                    "availableResource": "*",
-                    "availablePermissions": ["*"],
-                    "availabilityCondition": {
-                        "title": "Access level expr",
-                        "expression": pulumi.Output.all(project.org_id, test_access.name).apply(lambda org_id, name: f"request.matchAccessLevels('{org_id}', ['{name}'])"),
-                    },
-                },
-            }])
+            rules=[gcp.iam.AccessBoundaryPolicyRuleArgs(
+                description="AB rule",
+                access_boundary_rule=gcp.iam.AccessBoundaryPolicyRuleAccessBoundaryRuleArgs(
+                    available_resource="*",
+                    available_permissions=["*"],
+                    availability_condition=gcp.iam.AccessBoundaryPolicyRuleAccessBoundaryRuleAvailabilityConditionArgs(
+                        title="Access level expr",
+                        expression=pulumi.Output.all(project.org_id, test_access.name).apply(lambda org_id, name: f"request.matchAccessLevels('{org_id}', ['{name}'])"),
+                    ),
+                ),
+            )])
         ```
 
         ## Import
@@ -362,7 +357,7 @@ class AccessBoundaryPolicy(pulumi.CustomResource):
                  display_name: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  parent: Optional[pulumi.Input[str]] = None,
-                 rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['AccessBoundaryPolicyRuleArgs', 'AccessBoundaryPolicyRuleArgsDict']]]]] = None,
+                 rules: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['AccessBoundaryPolicyRuleArgs']]]]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -395,7 +390,7 @@ class AccessBoundaryPolicy(pulumi.CustomResource):
             etag: Optional[pulumi.Input[str]] = None,
             name: Optional[pulumi.Input[str]] = None,
             parent: Optional[pulumi.Input[str]] = None,
-            rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['AccessBoundaryPolicyRuleArgs', 'AccessBoundaryPolicyRuleArgsDict']]]]] = None) -> 'AccessBoundaryPolicy':
+            rules: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['AccessBoundaryPolicyRuleArgs']]]]] = None) -> 'AccessBoundaryPolicy':
         """
         Get an existing AccessBoundaryPolicy resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -407,7 +402,7 @@ class AccessBoundaryPolicy(pulumi.CustomResource):
         :param pulumi.Input[str] etag: The hash of the resource. Used internally during updates.
         :param pulumi.Input[str] name: The name of the policy.
         :param pulumi.Input[str] parent: The attachment point is identified by its URL-encoded full resource name.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['AccessBoundaryPolicyRuleArgs', 'AccessBoundaryPolicyRuleArgsDict']]]] rules: Rules to be applied.
+        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['AccessBoundaryPolicyRuleArgs']]]] rules: Rules to be applied.
                Structure is documented below.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))

pulumi_gcp/iam/deny_policy.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 from ._inputs import *
@@ -188,7 +183,7 @@ class DenyPolicy(pulumi.CustomResource):
                  display_name: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  parent: Optional[pulumi.Input[str]] = None,
-                 rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['DenyPolicyRuleArgs', 'DenyPolicyRuleArgsDict']]]]] = None,
+                 rules: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['DenyPolicyRuleArgs']]]]] = None,
                  __props__=None):
         """
         Represents a collection of denial policies to apply to a given resource.
@@ -222,29 +217,29 @@ class DenyPolicy(pulumi.CustomResource):
             name="my-deny-policy",
             display_name="A deny rule",
             rules=[
-                {
-                    "description": "First rule",
-                    "denyRule": {
-                        "deniedPrincipals": ["principalSet://goog/public:all"],
-                        "denialCondition": {
-                            "title": "Some expr",
-                            "expression": "!resource.matchTag('12345678/env', 'test')",
-                        },
-                        "deniedPermissions": ["cloudresourcemanager.googleapis.com/projects.update"],
-                    },
-                },
-                {
-                    "description": "Second rule",
-                    "denyRule": {
-                        "deniedPrincipals": ["principalSet://goog/public:all"],
-                        "denialCondition": {
-                            "title": "Some expr",
-                            "expression": "!resource.matchTag('12345678/env', 'test')",
-                        },
-                        "deniedPermissions": ["cloudresourcemanager.googleapis.com/projects.update"],
-                        "exceptionPrincipals": [test_account.email.apply(lambda email: f"principal://iam.googleapis.com/projects/-/serviceAccounts/{email}")],
-                    },
-                },
+                gcp.iam.DenyPolicyRuleArgs(
+                    description="First rule",
+                    deny_rule=gcp.iam.DenyPolicyRuleDenyRuleArgs(
+                        denied_principals=["principalSet://goog/public:all"],
+                        denial_condition=gcp.iam.DenyPolicyRuleDenyRuleDenialConditionArgs(
+                            title="Some expr",
+                            expression="!resource.matchTag('12345678/env', 'test')",
+                        ),
+                        denied_permissions=["cloudresourcemanager.googleapis.com/projects.update"],
+                    ),
+                ),
+                gcp.iam.DenyPolicyRuleArgs(
+                    description="Second rule",
+                    deny_rule=gcp.iam.DenyPolicyRuleDenyRuleArgs(
+                        denied_principals=["principalSet://goog/public:all"],
+                        denial_condition=gcp.iam.DenyPolicyRuleDenyRuleDenialConditionArgs(
+                            title="Some expr",
+                            expression="!resource.matchTag('12345678/env', 'test')",
+                        ),
+                        denied_permissions=["cloudresourcemanager.googleapis.com/projects.update"],
+                        exception_principals=[test_account.email.apply(lambda email: f"principal://iam.googleapis.com/projects/-/serviceAccounts/{email}")],
+                    ),
+                ),
             ])
         ```
 
@@ -265,7 +260,7 @@ class DenyPolicy(pulumi.CustomResource):
         :param pulumi.Input[str] display_name: The display name of the rule.
         :param pulumi.Input[str] name: The name of the policy.
         :param pulumi.Input[str] parent: The attachment point is identified by its URL-encoded full resource name.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['DenyPolicyRuleArgs', 'DenyPolicyRuleArgsDict']]]] rules: Rules to be applied.
+        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['DenyPolicyRuleArgs']]]] rules: Rules to be applied.
                Structure is documented below.
         """
         ...
@@ -306,29 +301,29 @@ class DenyPolicy(pulumi.CustomResource):
             name="my-deny-policy",
             display_name="A deny rule",
             rules=[
-                {
-                    "description": "First rule",
-                    "denyRule": {
-                        "deniedPrincipals": ["principalSet://goog/public:all"],
-                        "denialCondition": {
-                            "title": "Some expr",
-                            "expression": "!resource.matchTag('12345678/env', 'test')",
-                        },
-                        "deniedPermissions": ["cloudresourcemanager.googleapis.com/projects.update"],
-                    },
-                },
-                {
-                    "description": "Second rule",
-                    "denyRule": {
-                        "deniedPrincipals": ["principalSet://goog/public:all"],
-                        "denialCondition": {
-                            "title": "Some expr",
-                            "expression": "!resource.matchTag('12345678/env', 'test')",
-                        },
-                        "deniedPermissions": ["cloudresourcemanager.googleapis.com/projects.update"],
-                        "exceptionPrincipals": [test_account.email.apply(lambda email: f"principal://iam.googleapis.com/projects/-/serviceAccounts/{email}")],
-                    },
-                },
+                gcp.iam.DenyPolicyRuleArgs(
+                    description="First rule",
+                    deny_rule=gcp.iam.DenyPolicyRuleDenyRuleArgs(
+                        denied_principals=["principalSet://goog/public:all"],
+                        denial_condition=gcp.iam.DenyPolicyRuleDenyRuleDenialConditionArgs(
+                            title="Some expr",
+                            expression="!resource.matchTag('12345678/env', 'test')",
+                        ),
+                        denied_permissions=["cloudresourcemanager.googleapis.com/projects.update"],
+                    ),
+                ),
+                gcp.iam.DenyPolicyRuleArgs(
+                    description="Second rule",
+                    deny_rule=gcp.iam.DenyPolicyRuleDenyRuleArgs(
+                        denied_principals=["principalSet://goog/public:all"],
+                        denial_condition=gcp.iam.DenyPolicyRuleDenyRuleDenialConditionArgs(
+                            title="Some expr",
+                            expression="!resource.matchTag('12345678/env', 'test')",
+                        ),
+                        denied_permissions=["cloudresourcemanager.googleapis.com/projects.update"],
+                        exception_principals=[test_account.email.apply(lambda email: f"principal://iam.googleapis.com/projects/-/serviceAccounts/{email}")],
+                    ),
+                ),
             ])
         ```
 
@@ -362,7 +357,7 @@ class DenyPolicy(pulumi.CustomResource):
                  display_name: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  parent: Optional[pulumi.Input[str]] = None,
-                 rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['DenyPolicyRuleArgs', 'DenyPolicyRuleArgsDict']]]]] = None,
+                 rules: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['DenyPolicyRuleArgs']]]]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -395,7 +390,7 @@ class DenyPolicy(pulumi.CustomResource):
             etag: Optional[pulumi.Input[str]] = None,
             name: Optional[pulumi.Input[str]] = None,
             parent: Optional[pulumi.Input[str]] = None,
-            rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['DenyPolicyRuleArgs', 'DenyPolicyRuleArgsDict']]]]] = None) -> 'DenyPolicy':
+            rules: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['DenyPolicyRuleArgs']]]]] = None) -> 'DenyPolicy':
         """
         Get an existing DenyPolicy resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -407,7 +402,7 @@ class DenyPolicy(pulumi.CustomResource):
         :param pulumi.Input[str] etag: The hash of the resource. Used internally during updates.
         :param pulumi.Input[str] name: The name of the policy.
         :param pulumi.Input[str] parent: The attachment point is identified by its URL-encoded full resource name.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['DenyPolicyRuleArgs', 'DenyPolicyRuleArgsDict']]]] rules: Rules to be applied.
+        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['DenyPolicyRuleArgs']]]] rules: Rules to be applied.
                Structure is documented below.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))

pulumi_gcp/iam/get_rule.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = [

pulumi_gcp/iam/get_testable_permissions.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 

pulumi_gcp/iam/get_workload_identity_pool.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = [

pulumi_gcp/iam/get_workload_identity_pool_provider.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 

pulumi_gcp/iam/outputs.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 

pulumi_gcp/iam/workforce_pool.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 from ._inputs import *
@@ -392,7 +387,7 @@ class WorkforcePool(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 access_restrictions: Optional[pulumi.Input[Union['WorkforcePoolAccessRestrictionsArgs', 'WorkforcePoolAccessRestrictionsArgsDict']]] = None,
+                 access_restrictions: Optional[pulumi.Input[pulumi.InputType['WorkforcePoolAccessRestrictionsArgs']]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  disabled: Optional[pulumi.Input[bool]] = None,
                  display_name: Optional[pulumi.Input[str]] = None,
@@ -441,12 +436,12 @@ class WorkforcePool(pulumi.CustomResource):
             description="A sample workforce pool.",
             disabled=False,
             session_duration="7200s",
-            access_restrictions={
-                "allowedServices": [{
-                    "domain": "backstory.chronicle.security",
-                }],
-                "disableProgrammaticSignin": False,
-            })
+            access_restrictions=gcp.iam.WorkforcePoolAccessRestrictionsArgs(
+                allowed_services=[gcp.iam.WorkforcePoolAccessRestrictionsAllowedServiceArgs(
+                    domain="backstory.chronicle.security",
+                )],
+                disable_programmatic_signin=False,
+            ))
         ```
 
         ## Import
@@ -469,7 +464,7 @@ class WorkforcePool(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[Union['WorkforcePoolAccessRestrictionsArgs', 'WorkforcePoolAccessRestrictionsArgsDict']] access_restrictions: Configure access restrictions on the workforce pool users. This is an optional field. If specified web
+        :param pulumi.Input[pulumi.InputType['WorkforcePoolAccessRestrictionsArgs']] access_restrictions: Configure access restrictions on the workforce pool users. This is an optional field. If specified web
                sign-in can be restricted to given set of services or programmatic sign-in can be disabled for pool users.
                Structure is documented below.
         :param pulumi.Input[str] description: A user-specified description of the pool. Cannot exceed 256 characters.
@@ -536,12 +531,12 @@ class WorkforcePool(pulumi.CustomResource):
             description="A sample workforce pool.",
             disabled=False,
             session_duration="7200s",
-            access_restrictions={
-                "allowedServices": [{
-                    "domain": "backstory.chronicle.security",
-                }],
-                "disableProgrammaticSignin": False,
-            })
+            access_restrictions=gcp.iam.WorkforcePoolAccessRestrictionsArgs(
+                allowed_services=[gcp.iam.WorkforcePoolAccessRestrictionsAllowedServiceArgs(
+                    domain="backstory.chronicle.security",
+                )],
+                disable_programmatic_signin=False,
+            ))
         ```
 
         ## Import
@@ -577,7 +572,7 @@ class WorkforcePool(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 access_restrictions: Optional[pulumi.Input[Union['WorkforcePoolAccessRestrictionsArgs', 'WorkforcePoolAccessRestrictionsArgsDict']]] = None,
+                 access_restrictions: Optional[pulumi.Input[pulumi.InputType['WorkforcePoolAccessRestrictionsArgs']]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  disabled: Optional[pulumi.Input[bool]] = None,
                  display_name: Optional[pulumi.Input[str]] = None,
@@ -620,7 +615,7 @@ class WorkforcePool(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
-            access_restrictions: Optional[pulumi.Input[Union['WorkforcePoolAccessRestrictionsArgs', 'WorkforcePoolAccessRestrictionsArgsDict']]] = None,
+            access_restrictions: Optional[pulumi.Input[pulumi.InputType['WorkforcePoolAccessRestrictionsArgs']]] = None,
             description: Optional[pulumi.Input[str]] = None,
             disabled: Optional[pulumi.Input[bool]] = None,
             display_name: Optional[pulumi.Input[str]] = None,
@@ -637,7 +632,7 @@ class WorkforcePool(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[Union['WorkforcePoolAccessRestrictionsArgs', 'WorkforcePoolAccessRestrictionsArgsDict']] access_restrictions: Configure access restrictions on the workforce pool users. This is an optional field. If specified web
+        :param pulumi.Input[pulumi.InputType['WorkforcePoolAccessRestrictionsArgs']] access_restrictions: Configure access restrictions on the workforce pool users. This is an optional field. If specified web
                sign-in can be restricted to given set of services or programmatic sign-in can be disabled for pool users.
                Structure is documented below.
         :param pulumi.Input[str] description: A user-specified description of the pool. Cannot exceed 256 characters.