pulumi-gcp 7.30.0a1720039709__py3-none-any.whl → 7.30.0a1720437548__py3-none-any.whl

pulumi_gcp/datafusion/_inputs.py

@@ -23,6 +23,8 @@ __all__ = [
     'InstanceEventPublishConfigArgsDict',
     'InstanceNetworkConfigArgs',
     'InstanceNetworkConfigArgsDict',
+    'InstanceNetworkConfigPrivateServiceConnectConfigArgs',
+    'InstanceNetworkConfigPrivateServiceConnectConfigArgsDict',
 ]
 
 MYPY = False
@@ -166,38 +168,81 @@ class InstanceEventPublishConfigArgs:
 
 if not MYPY:
     class InstanceNetworkConfigArgsDict(TypedDict):
-        ip_allocation: pulumi.Input[str]
+        connection_type: NotRequired[pulumi.Input[str]]
+        """
+        Optional. Type of connection for establishing private IP connectivity between the Data Fusion customer project VPC and
+        the corresponding tenant project from a predefined list of available connection modes.
+        If this field is unspecified for a private instance, VPC peering is used.
+        Possible values are: `VPC_PEERING`, `PRIVATE_SERVICE_CONNECT_INTERFACES`.
+        """
+        ip_allocation: NotRequired[pulumi.Input[str]]
         """
         The IP range in CIDR notation to use for the managed Data Fusion instance
         nodes. This range must not overlap with any other ranges used in the Data Fusion instance network.
         """
-        network: pulumi.Input[str]
+        network: NotRequired[pulumi.Input[str]]
         """
         Name of the network in the project with which the tenant project
         will be peered for executing pipelines. In case of shared VPC where the network resides in another host
         project the network should specified in the form of projects/{host-project-id}/global/networks/{network}
         """
+        private_service_connect_config: NotRequired[pulumi.Input['InstanceNetworkConfigPrivateServiceConnectConfigArgsDict']]
+        """
+        Optional. Configuration for Private Service Connect.
+        This is required only when using connection type PRIVATE_SERVICE_CONNECT_INTERFACES.
+        Structure is documented below.
+        """
 elif False:
     InstanceNetworkConfigArgsDict: TypeAlias = Mapping[str, Any]
 
 @pulumi.input_type
 class InstanceNetworkConfigArgs:
     def __init__(__self__, *,
-                 ip_allocation: pulumi.Input[str],
-                 network: pulumi.Input[str]):
-        """
+                 connection_type: Optional[pulumi.Input[str]] = None,
+                 ip_allocation: Optional[pulumi.Input[str]] = None,
+                 network: Optional[pulumi.Input[str]] = None,
+                 private_service_connect_config: Optional[pulumi.Input['InstanceNetworkConfigPrivateServiceConnectConfigArgs']] = None):
+        """
+        :param pulumi.Input[str] connection_type: Optional. Type of connection for establishing private IP connectivity between the Data Fusion customer project VPC and
+               the corresponding tenant project from a predefined list of available connection modes.
+               If this field is unspecified for a private instance, VPC peering is used.
+               Possible values are: `VPC_PEERING`, `PRIVATE_SERVICE_CONNECT_INTERFACES`.
         :param pulumi.Input[str] ip_allocation: The IP range in CIDR notation to use for the managed Data Fusion instance
                nodes. This range must not overlap with any other ranges used in the Data Fusion instance network.
         :param pulumi.Input[str] network: Name of the network in the project with which the tenant project
                will be peered for executing pipelines. In case of shared VPC where the network resides in another host
                project the network should specified in the form of projects/{host-project-id}/global/networks/{network}
+        :param pulumi.Input['InstanceNetworkConfigPrivateServiceConnectConfigArgs'] private_service_connect_config: Optional. Configuration for Private Service Connect.
+               This is required only when using connection type PRIVATE_SERVICE_CONNECT_INTERFACES.
+               Structure is documented below.
+        """
+        if connection_type is not None:
+            pulumi.set(__self__, "connection_type", connection_type)
+        if ip_allocation is not None:
+            pulumi.set(__self__, "ip_allocation", ip_allocation)
+        if network is not None:
+            pulumi.set(__self__, "network", network)
+        if private_service_connect_config is not None:
+            pulumi.set(__self__, "private_service_connect_config", private_service_connect_config)
+
+    @property
+    @pulumi.getter(name="connectionType")
+    def connection_type(self) -> Optional[pulumi.Input[str]]:
+        """
+        Optional. Type of connection for establishing private IP connectivity between the Data Fusion customer project VPC and
+        the corresponding tenant project from a predefined list of available connection modes.
+        If this field is unspecified for a private instance, VPC peering is used.
+        Possible values are: `VPC_PEERING`, `PRIVATE_SERVICE_CONNECT_INTERFACES`.
         """
-        pulumi.set(__self__, "ip_allocation", ip_allocation)
-        pulumi.set(__self__, "network", network)
+        return pulumi.get(self, "connection_type")
+
+    @connection_type.setter
+    def connection_type(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "connection_type", value)
 
     @property
     @pulumi.getter(name="ipAllocation")
-    def ip_allocation(self) -> pulumi.Input[str]:
+    def ip_allocation(self) -> Optional[pulumi.Input[str]]:
         """
         The IP range in CIDR notation to use for the managed Data Fusion instance
         nodes. This range must not overlap with any other ranges used in the Data Fusion instance network.
@@ -205,12 +250,12 @@ class InstanceNetworkConfigArgs:
         return pulumi.get(self, "ip_allocation")
 
     @ip_allocation.setter
-    def ip_allocation(self, value: pulumi.Input[str]):
+    def ip_allocation(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "ip_allocation", value)
 
     @property
     @pulumi.getter
-    def network(self) -> pulumi.Input[str]:
+    def network(self) -> Optional[pulumi.Input[str]]:
         """
         Name of the network in the project with which the tenant project
         will be peered for executing pipelines. In case of shared VPC where the network resides in another host
@@ -219,7 +264,114 @@ class InstanceNetworkConfigArgs:
         return pulumi.get(self, "network")
 
     @network.setter
-    def network(self, value: pulumi.Input[str]):
+    def network(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "network", value)
 
+    @property
+    @pulumi.getter(name="privateServiceConnectConfig")
+    def private_service_connect_config(self) -> Optional[pulumi.Input['InstanceNetworkConfigPrivateServiceConnectConfigArgs']]:
+        """
+        Optional. Configuration for Private Service Connect.
+        This is required only when using connection type PRIVATE_SERVICE_CONNECT_INTERFACES.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "private_service_connect_config")
+
+    @private_service_connect_config.setter
+    def private_service_connect_config(self, value: Optional[pulumi.Input['InstanceNetworkConfigPrivateServiceConnectConfigArgs']]):
+        pulumi.set(self, "private_service_connect_config", value)
+
+
+if not MYPY:
+    class InstanceNetworkConfigPrivateServiceConnectConfigArgsDict(TypedDict):
+        effective_unreachable_cidr_block: NotRequired[pulumi.Input[str]]
+        """
+        (Output)
+        Output only. The CIDR block to which the CDF instance can't route traffic to in the consumer project VPC.
+        The size of this block is /25. The format of this field is governed by RFC 4632.
+        """
+        network_attachment: NotRequired[pulumi.Input[str]]
+        """
+        Optional. The reference to the network attachment used to establish private connectivity.
+        It will be of the form projects/{project-id}/regions/{region}/networkAttachments/{network-attachment-id}.
+        This is required only when using connection type PRIVATE_SERVICE_CONNECT_INTERFACES.
+        """
+        unreachable_cidr_block: NotRequired[pulumi.Input[str]]
+        """
+        Optional. Input only. The CIDR block to which the CDF instance can't route traffic to in the consumer project VPC.
+        The size of this block should be at least /25. This range should not overlap with the primary address range of any subnetwork used by the network attachment.
+        This range can be used for other purposes in the consumer VPC as long as there is no requirement for CDF to reach destinations using these addresses.
+        If this value is not provided, the server chooses a non RFC 1918 address range. The format of this field is governed by RFC 4632.
+        """
+elif False:
+    InstanceNetworkConfigPrivateServiceConnectConfigArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class InstanceNetworkConfigPrivateServiceConnectConfigArgs:
+    def __init__(__self__, *,
+                 effective_unreachable_cidr_block: Optional[pulumi.Input[str]] = None,
+                 network_attachment: Optional[pulumi.Input[str]] = None,
+                 unreachable_cidr_block: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] effective_unreachable_cidr_block: (Output)
+               Output only. The CIDR block to which the CDF instance can't route traffic to in the consumer project VPC.
+               The size of this block is /25. The format of this field is governed by RFC 4632.
+        :param pulumi.Input[str] network_attachment: Optional. The reference to the network attachment used to establish private connectivity.
+               It will be of the form projects/{project-id}/regions/{region}/networkAttachments/{network-attachment-id}.
+               This is required only when using connection type PRIVATE_SERVICE_CONNECT_INTERFACES.
+        :param pulumi.Input[str] unreachable_cidr_block: Optional. Input only. The CIDR block to which the CDF instance can't route traffic to in the consumer project VPC.
+               The size of this block should be at least /25. This range should not overlap with the primary address range of any subnetwork used by the network attachment.
+               This range can be used for other purposes in the consumer VPC as long as there is no requirement for CDF to reach destinations using these addresses.
+               If this value is not provided, the server chooses a non RFC 1918 address range. The format of this field is governed by RFC 4632.
+        """
+        if effective_unreachable_cidr_block is not None:
+            pulumi.set(__self__, "effective_unreachable_cidr_block", effective_unreachable_cidr_block)
+        if network_attachment is not None:
+            pulumi.set(__self__, "network_attachment", network_attachment)
+        if unreachable_cidr_block is not None:
+            pulumi.set(__self__, "unreachable_cidr_block", unreachable_cidr_block)
+
+    @property
+    @pulumi.getter(name="effectiveUnreachableCidrBlock")
+    def effective_unreachable_cidr_block(self) -> Optional[pulumi.Input[str]]:
+        """
+        (Output)
+        Output only. The CIDR block to which the CDF instance can't route traffic to in the consumer project VPC.
+        The size of this block is /25. The format of this field is governed by RFC 4632.
+        """
+        return pulumi.get(self, "effective_unreachable_cidr_block")
+
+    @effective_unreachable_cidr_block.setter
+    def effective_unreachable_cidr_block(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "effective_unreachable_cidr_block", value)
+
+    @property
+    @pulumi.getter(name="networkAttachment")
+    def network_attachment(self) -> Optional[pulumi.Input[str]]:
+        """
+        Optional. The reference to the network attachment used to establish private connectivity.
+        It will be of the form projects/{project-id}/regions/{region}/networkAttachments/{network-attachment-id}.
+        This is required only when using connection type PRIVATE_SERVICE_CONNECT_INTERFACES.
+        """
+        return pulumi.get(self, "network_attachment")
+
+    @network_attachment.setter
+    def network_attachment(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "network_attachment", value)
+
+    @property
+    @pulumi.getter(name="unreachableCidrBlock")
+    def unreachable_cidr_block(self) -> Optional[pulumi.Input[str]]:
+        """
+        Optional. Input only. The CIDR block to which the CDF instance can't route traffic to in the consumer project VPC.
+        The size of this block should be at least /25. This range should not overlap with the primary address range of any subnetwork used by the network attachment.
+        This range can be used for other purposes in the consumer VPC as long as there is no requirement for CDF to reach destinations using these addresses.
+        If this value is not provided, the server chooses a non RFC 1918 address range. The format of this field is governed by RFC 4632.
+        """
+        return pulumi.get(self, "unreachable_cidr_block")
+
+    @unreachable_cidr_block.setter
+    def unreachable_cidr_block(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "unreachable_cidr_block", value)
+
 

pulumi_gcp/datafusion/instance.py

@@ -1038,6 +1038,38 @@ class Instance(pulumi.CustomResource):
                 "state": "ENABLED",
             }])
         ```
+        ### Data Fusion Instance Psc
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        psc = gcp.compute.Network("psc",
+            name="datafusion-psc-network",
+            auto_create_subnetworks=False)
+        psc_subnetwork = gcp.compute.Subnetwork("psc",
+            name="datafusion-psc-subnet",
+            region="us-central1",
+            network=psc.id,
+            ip_cidr_range="10.0.0.0/16")
+        psc_network_attachment = gcp.compute.NetworkAttachment("psc",
+            name="datafusion-psc-attachment",
+            region="us-central1",
+            connection_preference="ACCEPT_AUTOMATIC",
+            subnetworks=[psc_subnetwork.self_link])
+        psc_instance = gcp.datafusion.Instance("psc_instance",
+            name="psc-instance",
+            region="us-central1",
+            type="BASIC",
+            private_instance=True,
+            network_config={
+                "connectionType": "PRIVATE_SERVICE_CONNECT_INTERFACES",
+                "privateServiceConnectConfig": {
+                    "networkAttachment": psc_network_attachment.id,
+                    "unreachableCidrBlock": "192.168.0.0/25",
+                },
+            })
+        ```
         ### Data Fusion Instance Cmek
 
         ```python
@@ -1247,6 +1279,38 @@ class Instance(pulumi.CustomResource):
                 "state": "ENABLED",
             }])
         ```
+        ### Data Fusion Instance Psc
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        psc = gcp.compute.Network("psc",
+            name="datafusion-psc-network",
+            auto_create_subnetworks=False)
+        psc_subnetwork = gcp.compute.Subnetwork("psc",
+            name="datafusion-psc-subnet",
+            region="us-central1",
+            network=psc.id,
+            ip_cidr_range="10.0.0.0/16")
+        psc_network_attachment = gcp.compute.NetworkAttachment("psc",
+            name="datafusion-psc-attachment",
+            region="us-central1",
+            connection_preference="ACCEPT_AUTOMATIC",
+            subnetworks=[psc_subnetwork.self_link])
+        psc_instance = gcp.datafusion.Instance("psc_instance",
+            name="psc-instance",
+            region="us-central1",
+            type="BASIC",
+            private_instance=True,
+            network_config={
+                "connectionType": "PRIVATE_SERVICE_CONNECT_INTERFACES",
+                "privateServiceConnectConfig": {
+                    "networkAttachment": psc_network_attachment.id,
+                    "unreachableCidrBlock": "192.168.0.0/25",
+                },
+            })
+        ```
         ### Data Fusion Instance Cmek
 
         ```python

pulumi_gcp/datafusion/outputs.py

@@ -13,12 +13,14 @@ if sys.version_info >= (3, 11):
 else:
     from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
+from . import outputs
 
 __all__ = [
     'InstanceAccelerator',
     'InstanceCryptoKeyConfig',
     'InstanceEventPublishConfig',
     'InstanceNetworkConfig',
+    'InstanceNetworkConfigPrivateServiceConnectConfig',
 ]
 
 @pulumi.output_type
@@ -140,8 +142,12 @@ class InstanceNetworkConfig(dict):
     @staticmethod
     def __key_warning(key: str):
         suggest = None
-        if key == "ipAllocation":
+        if key == "connectionType":
+            suggest = "connection_type"
+        elif key == "ipAllocation":
             suggest = "ip_allocation"
+        elif key == "privateServiceConnectConfig":
+            suggest = "private_service_connect_config"
 
         if suggest:
             pulumi.log.warn(f"Key '{key}' not found in InstanceNetworkConfig. Access the value via the '{suggest}' property getter instead.")
@@ -155,21 +161,47 @@ class InstanceNetworkConfig(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 ip_allocation: str,
-                 network: str):
+                 connection_type: Optional[str] = None,
+                 ip_allocation: Optional[str] = None,
+                 network: Optional[str] = None,
+                 private_service_connect_config: Optional['outputs.InstanceNetworkConfigPrivateServiceConnectConfig'] = None):
         """
+        :param str connection_type: Optional. Type of connection for establishing private IP connectivity between the Data Fusion customer project VPC and
+               the corresponding tenant project from a predefined list of available connection modes.
+               If this field is unspecified for a private instance, VPC peering is used.
+               Possible values are: `VPC_PEERING`, `PRIVATE_SERVICE_CONNECT_INTERFACES`.
         :param str ip_allocation: The IP range in CIDR notation to use for the managed Data Fusion instance
                nodes. This range must not overlap with any other ranges used in the Data Fusion instance network.
         :param str network: Name of the network in the project with which the tenant project
                will be peered for executing pipelines. In case of shared VPC where the network resides in another host
                project the network should specified in the form of projects/{host-project-id}/global/networks/{network}
+        :param 'InstanceNetworkConfigPrivateServiceConnectConfigArgs' private_service_connect_config: Optional. Configuration for Private Service Connect.
+               This is required only when using connection type PRIVATE_SERVICE_CONNECT_INTERFACES.
+               Structure is documented below.
         """
-        pulumi.set(__self__, "ip_allocation", ip_allocation)
-        pulumi.set(__self__, "network", network)
+        if connection_type is not None:
+            pulumi.set(__self__, "connection_type", connection_type)
+        if ip_allocation is not None:
+            pulumi.set(__self__, "ip_allocation", ip_allocation)
+        if network is not None:
+            pulumi.set(__self__, "network", network)
+        if private_service_connect_config is not None:
+            pulumi.set(__self__, "private_service_connect_config", private_service_connect_config)
+
+    @property
+    @pulumi.getter(name="connectionType")
+    def connection_type(self) -> Optional[str]:
+        """
+        Optional. Type of connection for establishing private IP connectivity between the Data Fusion customer project VPC and
+        the corresponding tenant project from a predefined list of available connection modes.
+        If this field is unspecified for a private instance, VPC peering is used.
+        Possible values are: `VPC_PEERING`, `PRIVATE_SERVICE_CONNECT_INTERFACES`.
+        """
+        return pulumi.get(self, "connection_type")
 
     @property
     @pulumi.getter(name="ipAllocation")
-    def ip_allocation(self) -> str:
+    def ip_allocation(self) -> Optional[str]:
         """
         The IP range in CIDR notation to use for the managed Data Fusion instance
         nodes. This range must not overlap with any other ranges used in the Data Fusion instance network.
@@ -178,7 +210,7 @@ class InstanceNetworkConfig(dict):
 
     @property
     @pulumi.getter
-    def network(self) -> str:
+    def network(self) -> Optional[str]:
         """
         Name of the network in the project with which the tenant project
         will be peered for executing pipelines. In case of shared VPC where the network resides in another host
@@ -186,4 +218,92 @@ class InstanceNetworkConfig(dict):
         """
         return pulumi.get(self, "network")
 
+    @property
+    @pulumi.getter(name="privateServiceConnectConfig")
+    def private_service_connect_config(self) -> Optional['outputs.InstanceNetworkConfigPrivateServiceConnectConfig']:
+        """
+        Optional. Configuration for Private Service Connect.
+        This is required only when using connection type PRIVATE_SERVICE_CONNECT_INTERFACES.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "private_service_connect_config")
+
+
+@pulumi.output_type
+class InstanceNetworkConfigPrivateServiceConnectConfig(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "effectiveUnreachableCidrBlock":
+            suggest = "effective_unreachable_cidr_block"
+        elif key == "networkAttachment":
+            suggest = "network_attachment"
+        elif key == "unreachableCidrBlock":
+            suggest = "unreachable_cidr_block"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in InstanceNetworkConfigPrivateServiceConnectConfig. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        InstanceNetworkConfigPrivateServiceConnectConfig.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        InstanceNetworkConfigPrivateServiceConnectConfig.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 effective_unreachable_cidr_block: Optional[str] = None,
+                 network_attachment: Optional[str] = None,
+                 unreachable_cidr_block: Optional[str] = None):
+        """
+        :param str effective_unreachable_cidr_block: (Output)
+               Output only. The CIDR block to which the CDF instance can't route traffic to in the consumer project VPC.
+               The size of this block is /25. The format of this field is governed by RFC 4632.
+        :param str network_attachment: Optional. The reference to the network attachment used to establish private connectivity.
+               It will be of the form projects/{project-id}/regions/{region}/networkAttachments/{network-attachment-id}.
+               This is required only when using connection type PRIVATE_SERVICE_CONNECT_INTERFACES.
+        :param str unreachable_cidr_block: Optional. Input only. The CIDR block to which the CDF instance can't route traffic to in the consumer project VPC.
+               The size of this block should be at least /25. This range should not overlap with the primary address range of any subnetwork used by the network attachment.
+               This range can be used for other purposes in the consumer VPC as long as there is no requirement for CDF to reach destinations using these addresses.
+               If this value is not provided, the server chooses a non RFC 1918 address range. The format of this field is governed by RFC 4632.
+        """
+        if effective_unreachable_cidr_block is not None:
+            pulumi.set(__self__, "effective_unreachable_cidr_block", effective_unreachable_cidr_block)
+        if network_attachment is not None:
+            pulumi.set(__self__, "network_attachment", network_attachment)
+        if unreachable_cidr_block is not None:
+            pulumi.set(__self__, "unreachable_cidr_block", unreachable_cidr_block)
+
+    @property
+    @pulumi.getter(name="effectiveUnreachableCidrBlock")
+    def effective_unreachable_cidr_block(self) -> Optional[str]:
+        """
+        (Output)
+        Output only. The CIDR block to which the CDF instance can't route traffic to in the consumer project VPC.
+        The size of this block is /25. The format of this field is governed by RFC 4632.
+        """
+        return pulumi.get(self, "effective_unreachable_cidr_block")
+
+    @property
+    @pulumi.getter(name="networkAttachment")
+    def network_attachment(self) -> Optional[str]:
+        """
+        Optional. The reference to the network attachment used to establish private connectivity.
+        It will be of the form projects/{project-id}/regions/{region}/networkAttachments/{network-attachment-id}.
+        This is required only when using connection type PRIVATE_SERVICE_CONNECT_INTERFACES.
+        """
+        return pulumi.get(self, "network_attachment")
+
+    @property
+    @pulumi.getter(name="unreachableCidrBlock")
+    def unreachable_cidr_block(self) -> Optional[str]:
+        """
+        Optional. Input only. The CIDR block to which the CDF instance can't route traffic to in the consumer project VPC.
+        The size of this block should be at least /25. This range should not overlap with the primary address range of any subnetwork used by the network attachment.
+        This range can be used for other purposes in the consumer VPC as long as there is no requirement for CDF to reach destinations using these addresses.
+        If this value is not provided, the server chooses a non RFC 1918 address range. The format of this field is governed by RFC 4632.
+        """
+        return pulumi.get(self, "unreachable_cidr_block")
+
 

pulumi_gcp/healthcare/_inputs.py

@@ -19,6 +19,8 @@ __all__ = [
     'ConsentStoreIamBindingConditionArgsDict',
     'ConsentStoreIamMemberConditionArgs',
     'ConsentStoreIamMemberConditionArgsDict',
+    'DatasetEncryptionSpecArgs',
+    'DatasetEncryptionSpecArgsDict',
     'DatasetIamBindingConditionArgs',
     'DatasetIamBindingConditionArgsDict',
     'DatasetIamMemberConditionArgs',
@@ -155,6 +157,47 @@ class ConsentStoreIamMemberConditionArgs:
         pulumi.set(self, "description", value)
 
 
+if not MYPY:
+    class DatasetEncryptionSpecArgsDict(TypedDict):
+        kms_key_name: NotRequired[pulumi.Input[str]]
+        """
+        KMS encryption key that is used to secure this dataset and its sub-resources. The key used for
+        encryption and the dataset must be in the same location. If empty, the default Google encryption
+        key will be used to secure this dataset. The format is
+        projects/{projectId}/locations/{locationId}/keyRings/{keyRingId}/cryptoKeys/{keyId}.
+        """
+elif False:
+    DatasetEncryptionSpecArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class DatasetEncryptionSpecArgs:
+    def __init__(__self__, *,
+                 kms_key_name: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] kms_key_name: KMS encryption key that is used to secure this dataset and its sub-resources. The key used for
+               encryption and the dataset must be in the same location. If empty, the default Google encryption
+               key will be used to secure this dataset. The format is
+               projects/{projectId}/locations/{locationId}/keyRings/{keyRingId}/cryptoKeys/{keyId}.
+        """
+        if kms_key_name is not None:
+            pulumi.set(__self__, "kms_key_name", kms_key_name)
+
+    @property
+    @pulumi.getter(name="kmsKeyName")
+    def kms_key_name(self) -> Optional[pulumi.Input[str]]:
+        """
+        KMS encryption key that is used to secure this dataset and its sub-resources. The key used for
+        encryption and the dataset must be in the same location. If empty, the default Google encryption
+        key will be used to secure this dataset. The format is
+        projects/{projectId}/locations/{locationId}/keyRings/{keyRingId}/cryptoKeys/{keyId}.
+        """
+        return pulumi.get(self, "kms_key_name")
+
+    @kms_key_name.setter
+    def kms_key_name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "kms_key_name", value)
+
+
 if not MYPY:
     class DatasetIamBindingConditionArgsDict(TypedDict):
         expression: pulumi.Input[str]