pulumi-gcp 7.30.0__py3-none-any.whl → 7.30.0a1719470057__py3-none-any.whl

pulumi_gcp/storage/managed_folder_iam_member.py

@@ -1,947 +0,0 @@
-# coding=utf-8
-# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
-# *** Do not edit by hand unless you're certain you know what you are doing! ***
-
-import copy
-import warnings
-import sys
-import pulumi
-import pulumi.runtime
-from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
-from .. import _utilities
-from . import outputs
-from ._inputs import *
-
-__all__ = ['ManagedFolderIamMemberArgs', 'ManagedFolderIamMember']
-
-@pulumi.input_type
-class ManagedFolderIamMemberArgs:
-    def __init__(__self__, *,
-                 bucket: pulumi.Input[str],
-                 managed_folder: pulumi.Input[str],
-                 member: pulumi.Input[str],
-                 role: pulumi.Input[str],
-                 condition: Optional[pulumi.Input['ManagedFolderIamMemberConditionArgs']] = None):
-        """
-        The set of arguments for constructing a ManagedFolderIamMember resource.
-        :param pulumi.Input[str] bucket: The name of the bucket that contains the managed folder. Used to find the parent resource to bind the IAM policy to
-        :param pulumi.Input[str] managed_folder: Used to find the parent resource to bind the IAM policy to
-        :param pulumi.Input[str] member: Identities that will be granted the privilege in `role`.
-               Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-               * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-               * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-               * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-               * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-               * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
-        :param pulumi.Input[str] role: The role that should be applied. Only one
-               `storage.ManagedFolderIamBinding` can be used per role. Note that custom roles must be of the format
-               `[projects|organizations]/{parent-name}/roles/{role-name}`.
-        :param pulumi.Input['ManagedFolderIamMemberConditionArgs'] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
-               Structure is documented below.
-        """
-        pulumi.set(__self__, "bucket", bucket)
-        pulumi.set(__self__, "managed_folder", managed_folder)
-        pulumi.set(__self__, "member", member)
-        pulumi.set(__self__, "role", role)
-        if condition is not None:
-            pulumi.set(__self__, "condition", condition)
-
-    @property
-    @pulumi.getter
-    def bucket(self) -> pulumi.Input[str]:
-        """
-        The name of the bucket that contains the managed folder. Used to find the parent resource to bind the IAM policy to
-        """
-        return pulumi.get(self, "bucket")
-
-    @bucket.setter
-    def bucket(self, value: pulumi.Input[str]):
-        pulumi.set(self, "bucket", value)
-
-    @property
-    @pulumi.getter(name="managedFolder")
-    def managed_folder(self) -> pulumi.Input[str]:
-        """
-        Used to find the parent resource to bind the IAM policy to
-        """
-        return pulumi.get(self, "managed_folder")
-
-    @managed_folder.setter
-    def managed_folder(self, value: pulumi.Input[str]):
-        pulumi.set(self, "managed_folder", value)
-
-    @property
-    @pulumi.getter
-    def member(self) -> pulumi.Input[str]:
-        """
-        Identities that will be granted the privilege in `role`.
-        Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-        * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-        * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-        * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
-        """
-        return pulumi.get(self, "member")
-
-    @member.setter
-    def member(self, value: pulumi.Input[str]):
-        pulumi.set(self, "member", value)
-
-    @property
-    @pulumi.getter
-    def role(self) -> pulumi.Input[str]:
-        """
-        The role that should be applied. Only one
-        `storage.ManagedFolderIamBinding` can be used per role. Note that custom roles must be of the format
-        `[projects|organizations]/{parent-name}/roles/{role-name}`.
-        """
-        return pulumi.get(self, "role")
-
-    @role.setter
-    def role(self, value: pulumi.Input[str]):
-        pulumi.set(self, "role", value)
-
-    @property
-    @pulumi.getter
-    def condition(self) -> Optional[pulumi.Input['ManagedFolderIamMemberConditionArgs']]:
-        """
-        An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
-        Structure is documented below.
-        """
-        return pulumi.get(self, "condition")
-
-    @condition.setter
-    def condition(self, value: Optional[pulumi.Input['ManagedFolderIamMemberConditionArgs']]):
-        pulumi.set(self, "condition", value)
-
-
-@pulumi.input_type
-class _ManagedFolderIamMemberState:
-    def __init__(__self__, *,
-                 bucket: Optional[pulumi.Input[str]] = None,
-                 condition: Optional[pulumi.Input['ManagedFolderIamMemberConditionArgs']] = None,
-                 etag: Optional[pulumi.Input[str]] = None,
-                 managed_folder: Optional[pulumi.Input[str]] = None,
-                 member: Optional[pulumi.Input[str]] = None,
-                 role: Optional[pulumi.Input[str]] = None):
-        """
-        Input properties used for looking up and filtering ManagedFolderIamMember resources.
-        :param pulumi.Input[str] bucket: The name of the bucket that contains the managed folder. Used to find the parent resource to bind the IAM policy to
-        :param pulumi.Input['ManagedFolderIamMemberConditionArgs'] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
-               Structure is documented below.
-        :param pulumi.Input[str] etag: (Computed) The etag of the IAM policy.
-        :param pulumi.Input[str] managed_folder: Used to find the parent resource to bind the IAM policy to
-        :param pulumi.Input[str] member: Identities that will be granted the privilege in `role`.
-               Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-               * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-               * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-               * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-               * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-               * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
-        :param pulumi.Input[str] role: The role that should be applied. Only one
-               `storage.ManagedFolderIamBinding` can be used per role. Note that custom roles must be of the format
-               `[projects|organizations]/{parent-name}/roles/{role-name}`.
-        """
-        if bucket is not None:
-            pulumi.set(__self__, "bucket", bucket)
-        if condition is not None:
-            pulumi.set(__self__, "condition", condition)
-        if etag is not None:
-            pulumi.set(__self__, "etag", etag)
-        if managed_folder is not None:
-            pulumi.set(__self__, "managed_folder", managed_folder)
-        if member is not None:
-            pulumi.set(__self__, "member", member)
-        if role is not None:
-            pulumi.set(__self__, "role", role)
-
-    @property
-    @pulumi.getter
-    def bucket(self) -> Optional[pulumi.Input[str]]:
-        """
-        The name of the bucket that contains the managed folder. Used to find the parent resource to bind the IAM policy to
-        """
-        return pulumi.get(self, "bucket")
-
-    @bucket.setter
-    def bucket(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "bucket", value)
-
-    @property
-    @pulumi.getter
-    def condition(self) -> Optional[pulumi.Input['ManagedFolderIamMemberConditionArgs']]:
-        """
-        An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
-        Structure is documented below.
-        """
-        return pulumi.get(self, "condition")
-
-    @condition.setter
-    def condition(self, value: Optional[pulumi.Input['ManagedFolderIamMemberConditionArgs']]):
-        pulumi.set(self, "condition", value)
-
-    @property
-    @pulumi.getter
-    def etag(self) -> Optional[pulumi.Input[str]]:
-        """
-        (Computed) The etag of the IAM policy.
-        """
-        return pulumi.get(self, "etag")
-
-    @etag.setter
-    def etag(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "etag", value)
-
-    @property
-    @pulumi.getter(name="managedFolder")
-    def managed_folder(self) -> Optional[pulumi.Input[str]]:
-        """
-        Used to find the parent resource to bind the IAM policy to
-        """
-        return pulumi.get(self, "managed_folder")
-
-    @managed_folder.setter
-    def managed_folder(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "managed_folder", value)
-
-    @property
-    @pulumi.getter
-    def member(self) -> Optional[pulumi.Input[str]]:
-        """
-        Identities that will be granted the privilege in `role`.
-        Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-        * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-        * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-        * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
-        """
-        return pulumi.get(self, "member")
-
-    @member.setter
-    def member(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "member", value)
-
-    @property
-    @pulumi.getter
-    def role(self) -> Optional[pulumi.Input[str]]:
-        """
-        The role that should be applied. Only one
-        `storage.ManagedFolderIamBinding` can be used per role. Note that custom roles must be of the format
-        `[projects|organizations]/{parent-name}/roles/{role-name}`.
-        """
-        return pulumi.get(self, "role")
-
-    @role.setter
-    def role(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "role", value)
-
-
-class ManagedFolderIamMember(pulumi.CustomResource):
-    @overload
-    def __init__(__self__,
-                 resource_name: str,
-                 opts: Optional[pulumi.ResourceOptions] = None,
-                 bucket: Optional[pulumi.Input[str]] = None,
-                 condition: Optional[pulumi.Input[Union['ManagedFolderIamMemberConditionArgs', 'ManagedFolderIamMemberConditionArgsDict']]] = None,
-                 managed_folder: Optional[pulumi.Input[str]] = None,
-                 member: Optional[pulumi.Input[str]] = None,
-                 role: Optional[pulumi.Input[str]] = None,
-                 __props__=None):
-        """
-        Three different resources help you manage your IAM policy for Cloud Storage ManagedFolder. Each of these resources serves a different use case:
-
-        * `storage.ManagedFolderIamPolicy`: Authoritative. Sets the IAM policy for the managedfolder and replaces any existing policy already attached.
-        * `storage.ManagedFolderIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the managedfolder are preserved.
-        * `storage.ManagedFolderIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the managedfolder are preserved.
-
-        A data source can be used to retrieve policy data in advent you do not need creation
-
-        * `storage.ManagedFolderIamPolicy`: Retrieves the IAM policy for the managedfolder
-
-        > **Note:** `storage.ManagedFolderIamPolicy` **cannot** be used in conjunction with `storage.ManagedFolderIamBinding` and `storage.ManagedFolderIamMember` or they will fight over what your policy should be.
-
-        > **Note:** `storage.ManagedFolderIamBinding` resources **can be** used in conjunction with `storage.ManagedFolderIamMember` resources **only if** they do not grant privilege to the same role.
-
-        > **Note:**  This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
-
-        ## storage.ManagedFolderIamPolicy
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[{
-            "role": "roles/storage.admin",
-            "members": ["user:jane@example.com"],
-        }])
-        policy = gcp.storage.ManagedFolderIamPolicy("policy",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            policy_data=admin.policy_data)
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[{
-            "role": "roles/storage.admin",
-            "members": ["user:jane@example.com"],
-            "condition": {
-                "title": "expires_after_2019_12_31",
-                "description": "Expiring at midnight of 2019-12-31",
-                "expression": "request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            },
-        }])
-        policy = gcp.storage.ManagedFolderIamPolicy("policy",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            policy_data=admin.policy_data)
-        ```
-        ## storage.ManagedFolderIamBinding
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        binding = gcp.storage.ManagedFolderIamBinding("binding",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            role="roles/storage.admin",
-            members=["user:jane@example.com"])
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        binding = gcp.storage.ManagedFolderIamBinding("binding",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            role="roles/storage.admin",
-            members=["user:jane@example.com"],
-            condition={
-                "title": "expires_after_2019_12_31",
-                "description": "Expiring at midnight of 2019-12-31",
-                "expression": "request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            })
-        ```
-        ## storage.ManagedFolderIamMember
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        member = gcp.storage.ManagedFolderIamMember("member",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            role="roles/storage.admin",
-            member="user:jane@example.com")
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        member = gcp.storage.ManagedFolderIamMember("member",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            role="roles/storage.admin",
-            member="user:jane@example.com",
-            condition={
-                "title": "expires_after_2019_12_31",
-                "description": "Expiring at midnight of 2019-12-31",
-                "expression": "request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            })
-        ```
-
-        ## storage.ManagedFolderIamPolicy
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[{
-            "role": "roles/storage.admin",
-            "members": ["user:jane@example.com"],
-        }])
-        policy = gcp.storage.ManagedFolderIamPolicy("policy",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            policy_data=admin.policy_data)
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[{
-            "role": "roles/storage.admin",
-            "members": ["user:jane@example.com"],
-            "condition": {
-                "title": "expires_after_2019_12_31",
-                "description": "Expiring at midnight of 2019-12-31",
-                "expression": "request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            },
-        }])
-        policy = gcp.storage.ManagedFolderIamPolicy("policy",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            policy_data=admin.policy_data)
-        ```
-        ## storage.ManagedFolderIamBinding
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        binding = gcp.storage.ManagedFolderIamBinding("binding",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            role="roles/storage.admin",
-            members=["user:jane@example.com"])
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        binding = gcp.storage.ManagedFolderIamBinding("binding",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            role="roles/storage.admin",
-            members=["user:jane@example.com"],
-            condition={
-                "title": "expires_after_2019_12_31",
-                "description": "Expiring at midnight of 2019-12-31",
-                "expression": "request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            })
-        ```
-        ## storage.ManagedFolderIamMember
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        member = gcp.storage.ManagedFolderIamMember("member",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            role="roles/storage.admin",
-            member="user:jane@example.com")
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        member = gcp.storage.ManagedFolderIamMember("member",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            role="roles/storage.admin",
-            member="user:jane@example.com",
-            condition={
-                "title": "expires_after_2019_12_31",
-                "description": "Expiring at midnight of 2019-12-31",
-                "expression": "request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            })
-        ```
-
-        ## Import
-
-        For all import syntaxes, the "resource in question" can take any of the following forms:
-
-        * b/{{bucket}}/managedFolders/{{managed_folder}}
-
-        * {{bucket}}/{{managed_folder}}
-
-        Any variables not passed in the import command will be taken from the provider configuration.
-
-        Cloud Storage managedfolder IAM resources can be imported using the resource identifiers, role, and member.
-
-        IAM member imports use space-delimited identifiers: the resource in question, the role, and the member identity, e.g.
-
-        ```sh
-        $ pulumi import gcp:storage/managedFolderIamMember:ManagedFolderIamMember editor "b/{{bucket}}/managedFolders/{{managed_folder}} roles/storage.objectViewer user:jane@example.com"
-        ```
-
-        IAM binding imports use space-delimited identifiers: the resource in question and the role, e.g.
-
-        ```sh
-        $ pulumi import gcp:storage/managedFolderIamMember:ManagedFolderIamMember editor "b/{{bucket}}/managedFolders/{{managed_folder}} roles/storage.objectViewer"
-        ```
-
-        IAM policy imports use the identifier of the resource in question, e.g.
-
-        ```sh
-        $ pulumi import gcp:storage/managedFolderIamMember:ManagedFolderIamMember editor b/{{bucket}}/managedFolders/{{managed_folder}}
-        ```
-
-        -> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
-
-         full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
-
-        :param str resource_name: The name of the resource.
-        :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[str] bucket: The name of the bucket that contains the managed folder. Used to find the parent resource to bind the IAM policy to
-        :param pulumi.Input[Union['ManagedFolderIamMemberConditionArgs', 'ManagedFolderIamMemberConditionArgsDict']] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
-               Structure is documented below.
-        :param pulumi.Input[str] managed_folder: Used to find the parent resource to bind the IAM policy to
-        :param pulumi.Input[str] member: Identities that will be granted the privilege in `role`.
-               Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-               * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-               * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-               * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-               * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-               * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
-        :param pulumi.Input[str] role: The role that should be applied. Only one
-               `storage.ManagedFolderIamBinding` can be used per role. Note that custom roles must be of the format
-               `[projects|organizations]/{parent-name}/roles/{role-name}`.
-        """
-        ...
-    @overload
-    def __init__(__self__,
-                 resource_name: str,
-                 args: ManagedFolderIamMemberArgs,
-                 opts: Optional[pulumi.ResourceOptions] = None):
-        """
-        Three different resources help you manage your IAM policy for Cloud Storage ManagedFolder. Each of these resources serves a different use case:
-
-        * `storage.ManagedFolderIamPolicy`: Authoritative. Sets the IAM policy for the managedfolder and replaces any existing policy already attached.
-        * `storage.ManagedFolderIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the managedfolder are preserved.
-        * `storage.ManagedFolderIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the managedfolder are preserved.
-
-        A data source can be used to retrieve policy data in advent you do not need creation
-
-        * `storage.ManagedFolderIamPolicy`: Retrieves the IAM policy for the managedfolder
-
-        > **Note:** `storage.ManagedFolderIamPolicy` **cannot** be used in conjunction with `storage.ManagedFolderIamBinding` and `storage.ManagedFolderIamMember` or they will fight over what your policy should be.
-
-        > **Note:** `storage.ManagedFolderIamBinding` resources **can be** used in conjunction with `storage.ManagedFolderIamMember` resources **only if** they do not grant privilege to the same role.
-
-        > **Note:**  This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
-
-        ## storage.ManagedFolderIamPolicy
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[{
-            "role": "roles/storage.admin",
-            "members": ["user:jane@example.com"],
-        }])
-        policy = gcp.storage.ManagedFolderIamPolicy("policy",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            policy_data=admin.policy_data)
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[{
-            "role": "roles/storage.admin",
-            "members": ["user:jane@example.com"],
-            "condition": {
-                "title": "expires_after_2019_12_31",
-                "description": "Expiring at midnight of 2019-12-31",
-                "expression": "request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            },
-        }])
-        policy = gcp.storage.ManagedFolderIamPolicy("policy",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            policy_data=admin.policy_data)
-        ```
-        ## storage.ManagedFolderIamBinding
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        binding = gcp.storage.ManagedFolderIamBinding("binding",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            role="roles/storage.admin",
-            members=["user:jane@example.com"])
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        binding = gcp.storage.ManagedFolderIamBinding("binding",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            role="roles/storage.admin",
-            members=["user:jane@example.com"],
-            condition={
-                "title": "expires_after_2019_12_31",
-                "description": "Expiring at midnight of 2019-12-31",
-                "expression": "request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            })
-        ```
-        ## storage.ManagedFolderIamMember
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        member = gcp.storage.ManagedFolderIamMember("member",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            role="roles/storage.admin",
-            member="user:jane@example.com")
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        member = gcp.storage.ManagedFolderIamMember("member",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            role="roles/storage.admin",
-            member="user:jane@example.com",
-            condition={
-                "title": "expires_after_2019_12_31",
-                "description": "Expiring at midnight of 2019-12-31",
-                "expression": "request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            })
-        ```
-
-        ## storage.ManagedFolderIamPolicy
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[{
-            "role": "roles/storage.admin",
-            "members": ["user:jane@example.com"],
-        }])
-        policy = gcp.storage.ManagedFolderIamPolicy("policy",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            policy_data=admin.policy_data)
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[{
-            "role": "roles/storage.admin",
-            "members": ["user:jane@example.com"],
-            "condition": {
-                "title": "expires_after_2019_12_31",
-                "description": "Expiring at midnight of 2019-12-31",
-                "expression": "request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            },
-        }])
-        policy = gcp.storage.ManagedFolderIamPolicy("policy",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            policy_data=admin.policy_data)
-        ```
-        ## storage.ManagedFolderIamBinding
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        binding = gcp.storage.ManagedFolderIamBinding("binding",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            role="roles/storage.admin",
-            members=["user:jane@example.com"])
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        binding = gcp.storage.ManagedFolderIamBinding("binding",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            role="roles/storage.admin",
-            members=["user:jane@example.com"],
-            condition={
-                "title": "expires_after_2019_12_31",
-                "description": "Expiring at midnight of 2019-12-31",
-                "expression": "request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            })
-        ```
-        ## storage.ManagedFolderIamMember
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        member = gcp.storage.ManagedFolderIamMember("member",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            role="roles/storage.admin",
-            member="user:jane@example.com")
-        ```
-
-        With IAM Conditions:
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        member = gcp.storage.ManagedFolderIamMember("member",
-            bucket=folder["bucket"],
-            managed_folder=folder["name"],
-            role="roles/storage.admin",
-            member="user:jane@example.com",
-            condition={
-                "title": "expires_after_2019_12_31",
-                "description": "Expiring at midnight of 2019-12-31",
-                "expression": "request.time < timestamp(\\"2020-01-01T00:00:00Z\\")",
-            })
-        ```
-
-        ## Import
-
-        For all import syntaxes, the "resource in question" can take any of the following forms:
-
-        * b/{{bucket}}/managedFolders/{{managed_folder}}
-
-        * {{bucket}}/{{managed_folder}}
-
-        Any variables not passed in the import command will be taken from the provider configuration.
-
-        Cloud Storage managedfolder IAM resources can be imported using the resource identifiers, role, and member.
-
-        IAM member imports use space-delimited identifiers: the resource in question, the role, and the member identity, e.g.
-
-        ```sh
-        $ pulumi import gcp:storage/managedFolderIamMember:ManagedFolderIamMember editor "b/{{bucket}}/managedFolders/{{managed_folder}} roles/storage.objectViewer user:jane@example.com"
-        ```
-
-        IAM binding imports use space-delimited identifiers: the resource in question and the role, e.g.
-
-        ```sh
-        $ pulumi import gcp:storage/managedFolderIamMember:ManagedFolderIamMember editor "b/{{bucket}}/managedFolders/{{managed_folder}} roles/storage.objectViewer"
-        ```
-
-        IAM policy imports use the identifier of the resource in question, e.g.
-
-        ```sh
-        $ pulumi import gcp:storage/managedFolderIamMember:ManagedFolderIamMember editor b/{{bucket}}/managedFolders/{{managed_folder}}
-        ```
-
-        -> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
-
-         full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
-
-        :param str resource_name: The name of the resource.
-        :param ManagedFolderIamMemberArgs args: The arguments to use to populate this resource's properties.
-        :param pulumi.ResourceOptions opts: Options for the resource.
-        """
-        ...
-    def __init__(__self__, resource_name: str, *args, **kwargs):
-        resource_args, opts = _utilities.get_resource_args_opts(ManagedFolderIamMemberArgs, pulumi.ResourceOptions, *args, **kwargs)
-        if resource_args is not None:
-            __self__._internal_init(resource_name, opts, **resource_args.__dict__)
-        else:
-            __self__._internal_init(resource_name, *args, **kwargs)
-
-    def _internal_init(__self__,
-                 resource_name: str,
-                 opts: Optional[pulumi.ResourceOptions] = None,
-                 bucket: Optional[pulumi.Input[str]] = None,
-                 condition: Optional[pulumi.Input[Union['ManagedFolderIamMemberConditionArgs', 'ManagedFolderIamMemberConditionArgsDict']]] = None,
-                 managed_folder: Optional[pulumi.Input[str]] = None,
-                 member: Optional[pulumi.Input[str]] = None,
-                 role: Optional[pulumi.Input[str]] = None,
-                 __props__=None):
-        opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
-        if not isinstance(opts, pulumi.ResourceOptions):
-            raise TypeError('Expected resource options to be a ResourceOptions instance')
-        if opts.id is None:
-            if __props__ is not None:
-                raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
-            __props__ = ManagedFolderIamMemberArgs.__new__(ManagedFolderIamMemberArgs)
-
-            if bucket is None and not opts.urn:
-                raise TypeError("Missing required property 'bucket'")
-            __props__.__dict__["bucket"] = bucket
-            __props__.__dict__["condition"] = condition
-            if managed_folder is None and not opts.urn:
-                raise TypeError("Missing required property 'managed_folder'")
-            __props__.__dict__["managed_folder"] = managed_folder
-            if member is None and not opts.urn:
-                raise TypeError("Missing required property 'member'")
-            __props__.__dict__["member"] = member
-            if role is None and not opts.urn:
-                raise TypeError("Missing required property 'role'")
-            __props__.__dict__["role"] = role
-            __props__.__dict__["etag"] = None
-        super(ManagedFolderIamMember, __self__).__init__(
-            'gcp:storage/managedFolderIamMember:ManagedFolderIamMember',
-            resource_name,
-            __props__,
-            opts)
-
-    @staticmethod
-    def get(resource_name: str,
-            id: pulumi.Input[str],
-            opts: Optional[pulumi.ResourceOptions] = None,
-            bucket: Optional[pulumi.Input[str]] = None,
-            condition: Optional[pulumi.Input[Union['ManagedFolderIamMemberConditionArgs', 'ManagedFolderIamMemberConditionArgsDict']]] = None,
-            etag: Optional[pulumi.Input[str]] = None,
-            managed_folder: Optional[pulumi.Input[str]] = None,
-            member: Optional[pulumi.Input[str]] = None,
-            role: Optional[pulumi.Input[str]] = None) -> 'ManagedFolderIamMember':
-        """
-        Get an existing ManagedFolderIamMember resource's state with the given name, id, and optional extra
-        properties used to qualify the lookup.
-
-        :param str resource_name: The unique name of the resulting resource.
-        :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
-        :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[str] bucket: The name of the bucket that contains the managed folder. Used to find the parent resource to bind the IAM policy to
-        :param pulumi.Input[Union['ManagedFolderIamMemberConditionArgs', 'ManagedFolderIamMemberConditionArgsDict']] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
-               Structure is documented below.
-        :param pulumi.Input[str] etag: (Computed) The etag of the IAM policy.
-        :param pulumi.Input[str] managed_folder: Used to find the parent resource to bind the IAM policy to
-        :param pulumi.Input[str] member: Identities that will be granted the privilege in `role`.
-               Each entry can have one of the following values:
-               * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-               * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-               * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-               * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-               * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-               * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-               * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-               * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-               * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
-        :param pulumi.Input[str] role: The role that should be applied. Only one
-               `storage.ManagedFolderIamBinding` can be used per role. Note that custom roles must be of the format
-               `[projects|organizations]/{parent-name}/roles/{role-name}`.
-        """
-        opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
-
-        __props__ = _ManagedFolderIamMemberState.__new__(_ManagedFolderIamMemberState)
-
-        __props__.__dict__["bucket"] = bucket
-        __props__.__dict__["condition"] = condition
-        __props__.__dict__["etag"] = etag
-        __props__.__dict__["managed_folder"] = managed_folder
-        __props__.__dict__["member"] = member
-        __props__.__dict__["role"] = role
-        return ManagedFolderIamMember(resource_name, opts=opts, __props__=__props__)
-
-    @property
-    @pulumi.getter
-    def bucket(self) -> pulumi.Output[str]:
-        """
-        The name of the bucket that contains the managed folder. Used to find the parent resource to bind the IAM policy to
-        """
-        return pulumi.get(self, "bucket")
-
-    @property
-    @pulumi.getter
-    def condition(self) -> pulumi.Output[Optional['outputs.ManagedFolderIamMemberCondition']]:
-        """
-        An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
-        Structure is documented below.
-        """
-        return pulumi.get(self, "condition")
-
-    @property
-    @pulumi.getter
-    def etag(self) -> pulumi.Output[str]:
-        """
-        (Computed) The etag of the IAM policy.
-        """
-        return pulumi.get(self, "etag")
-
-    @property
-    @pulumi.getter(name="managedFolder")
-    def managed_folder(self) -> pulumi.Output[str]:
-        """
-        Used to find the parent resource to bind the IAM policy to
-        """
-        return pulumi.get(self, "managed_folder")
-
-    @property
-    @pulumi.getter
-    def member(self) -> pulumi.Output[str]:
-        """
-        Identities that will be granted the privilege in `role`.
-        Each entry can have one of the following values:
-        * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account.
-        * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account.
-        * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
-        * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
-        * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
-        * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-        * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
-        * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
-        * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
-        """
-        return pulumi.get(self, "member")
-
-    @property
-    @pulumi.getter
-    def role(self) -> pulumi.Output[str]:
-        """
-        The role that should be applied. Only one
-        `storage.ManagedFolderIamBinding` can be used per role. Note that custom roles must be of the format
-        `[projects|organizations]/{parent-name}/roles/{role-name}`.
-        """
-        return pulumi.get(self, "role")
-