pulumi-gcp 7.35.0a1722924350__py3-none-any.whl → 7.36.0__py3-none-any.whl

pulumi_gcp/compute/subnetwork_iam_binding.py

@@ -439,6 +439,27 @@ class SubnetworkIAMBinding(pulumi.CustomResource):
             })
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine Subnetwork
+        Three different resources help you manage your IAM policy for Compute Engine Subnetwork. Each of these resources serves a different use case:
+
+        * `compute.SubnetworkIAMPolicy`: Authoritative. Sets the IAM policy for the subnetwork and replaces any existing policy already attached.
+        * `compute.SubnetworkIAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the subnetwork are preserved.
+        * `compute.SubnetworkIAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the subnetwork are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.SubnetworkIAMPolicy`: Retrieves the IAM policy for the subnetwork
+
+        > **Note:** `compute.SubnetworkIAMPolicy` **cannot** be used in conjunction with `compute.SubnetworkIAMBinding` and `compute.SubnetworkIAMMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.SubnetworkIAMBinding` resources **can be** used in conjunction with `compute.SubnetworkIAMMember` resources **only if** they do not grant privilege to the same role.
+
+        > **Note:**  This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
+
         ## compute.SubnetworkIAMPolicy
 
         ```python
@@ -732,6 +753,27 @@ class SubnetworkIAMBinding(pulumi.CustomResource):
             })
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine Subnetwork
+        Three different resources help you manage your IAM policy for Compute Engine Subnetwork. Each of these resources serves a different use case:
+
+        * `compute.SubnetworkIAMPolicy`: Authoritative. Sets the IAM policy for the subnetwork and replaces any existing policy already attached.
+        * `compute.SubnetworkIAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the subnetwork are preserved.
+        * `compute.SubnetworkIAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the subnetwork are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.SubnetworkIAMPolicy`: Retrieves the IAM policy for the subnetwork
+
+        > **Note:** `compute.SubnetworkIAMPolicy` **cannot** be used in conjunction with `compute.SubnetworkIAMBinding` and `compute.SubnetworkIAMMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.SubnetworkIAMBinding` resources **can be** used in conjunction with `compute.SubnetworkIAMMember` resources **only if** they do not grant privilege to the same role.
+
+        > **Note:**  This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
+
         ## compute.SubnetworkIAMPolicy
 
         ```python

pulumi_gcp/compute/subnetwork_iam_member.py

@@ -439,6 +439,27 @@ class SubnetworkIAMMember(pulumi.CustomResource):
             })
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine Subnetwork
+        Three different resources help you manage your IAM policy for Compute Engine Subnetwork. Each of these resources serves a different use case:
+
+        * `compute.SubnetworkIAMPolicy`: Authoritative. Sets the IAM policy for the subnetwork and replaces any existing policy already attached.
+        * `compute.SubnetworkIAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the subnetwork are preserved.
+        * `compute.SubnetworkIAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the subnetwork are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.SubnetworkIAMPolicy`: Retrieves the IAM policy for the subnetwork
+
+        > **Note:** `compute.SubnetworkIAMPolicy` **cannot** be used in conjunction with `compute.SubnetworkIAMBinding` and `compute.SubnetworkIAMMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.SubnetworkIAMBinding` resources **can be** used in conjunction with `compute.SubnetworkIAMMember` resources **only if** they do not grant privilege to the same role.
+
+        > **Note:**  This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
+
         ## compute.SubnetworkIAMPolicy
 
         ```python
@@ -732,6 +753,27 @@ class SubnetworkIAMMember(pulumi.CustomResource):
             })
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine Subnetwork
+        Three different resources help you manage your IAM policy for Compute Engine Subnetwork. Each of these resources serves a different use case:
+
+        * `compute.SubnetworkIAMPolicy`: Authoritative. Sets the IAM policy for the subnetwork and replaces any existing policy already attached.
+        * `compute.SubnetworkIAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the subnetwork are preserved.
+        * `compute.SubnetworkIAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the subnetwork are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.SubnetworkIAMPolicy`: Retrieves the IAM policy for the subnetwork
+
+        > **Note:** `compute.SubnetworkIAMPolicy` **cannot** be used in conjunction with `compute.SubnetworkIAMBinding` and `compute.SubnetworkIAMMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.SubnetworkIAMBinding` resources **can be** used in conjunction with `compute.SubnetworkIAMMember` resources **only if** they do not grant privilege to the same role.
+
+        > **Note:**  This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
+
         ## compute.SubnetworkIAMPolicy
 
         ```python

pulumi_gcp/compute/subnetwork_iam_policy.py

@@ -324,6 +324,27 @@ class SubnetworkIAMPolicy(pulumi.CustomResource):
             })
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine Subnetwork
+        Three different resources help you manage your IAM policy for Compute Engine Subnetwork. Each of these resources serves a different use case:
+
+        * `compute.SubnetworkIAMPolicy`: Authoritative. Sets the IAM policy for the subnetwork and replaces any existing policy already attached.
+        * `compute.SubnetworkIAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the subnetwork are preserved.
+        * `compute.SubnetworkIAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the subnetwork are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.SubnetworkIAMPolicy`: Retrieves the IAM policy for the subnetwork
+
+        > **Note:** `compute.SubnetworkIAMPolicy` **cannot** be used in conjunction with `compute.SubnetworkIAMBinding` and `compute.SubnetworkIAMMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.SubnetworkIAMBinding` resources **can be** used in conjunction with `compute.SubnetworkIAMMember` resources **only if** they do not grant privilege to the same role.
+
+        > **Note:**  This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
+
         ## compute.SubnetworkIAMPolicy
 
         ```python
@@ -603,6 +624,27 @@ class SubnetworkIAMPolicy(pulumi.CustomResource):
             })
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine Subnetwork
+        Three different resources help you manage your IAM policy for Compute Engine Subnetwork. Each of these resources serves a different use case:
+
+        * `compute.SubnetworkIAMPolicy`: Authoritative. Sets the IAM policy for the subnetwork and replaces any existing policy already attached.
+        * `compute.SubnetworkIAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the subnetwork are preserved.
+        * `compute.SubnetworkIAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the subnetwork are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.SubnetworkIAMPolicy`: Retrieves the IAM policy for the subnetwork
+
+        > **Note:** `compute.SubnetworkIAMPolicy` **cannot** be used in conjunction with `compute.SubnetworkIAMBinding` and `compute.SubnetworkIAMMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.SubnetworkIAMBinding` resources **can be** used in conjunction with `compute.SubnetworkIAMMember` resources **only if** they do not grant privilege to the same role.
+
+        > **Note:**  This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
+
         ## compute.SubnetworkIAMPolicy
 
         ```python

pulumi_gcp/container/_inputs.py

@@ -7856,7 +7856,7 @@ if not MYPY:
         """
         relay_mode: NotRequired[pulumi.Input[str]]
         """
-        Mode used to make Relay available.
+        Mode used to make Relay available. Deprecated in favor of `enable_relay` field. Remove this attribute's configuration as this field will be removed in the next major release and `enable_relay` will become a required field.
         """
 elif False:
     ClusterMonitoringConfigAdvancedDatapathObservabilityConfigArgsDict: TypeAlias = Mapping[str, Any]
@@ -7870,7 +7870,7 @@ class ClusterMonitoringConfigAdvancedDatapathObservabilityConfigArgs:
         """
         :param pulumi.Input[bool] enable_metrics: Whether or not to enable advanced datapath metrics.
         :param pulumi.Input[bool] enable_relay: Whether or not Relay is enabled.
-        :param pulumi.Input[str] relay_mode: Mode used to make Relay available.
+        :param pulumi.Input[str] relay_mode: Mode used to make Relay available. Deprecated in favor of `enable_relay` field. Remove this attribute's configuration as this field will be removed in the next major release and `enable_relay` will become a required field.
         """
         pulumi.set(__self__, "enable_metrics", enable_metrics)
         if enable_relay is not None:
@@ -7910,7 +7910,7 @@ class ClusterMonitoringConfigAdvancedDatapathObservabilityConfigArgs:
     @_utilities.deprecated("""Deprecated in favor of enable_relay field. Remove this attribute's configuration as this field will be removed in the next major release and enable_relay will become a required field.""")
     def relay_mode(self) -> Optional[pulumi.Input[str]]:
         """
-        Mode used to make Relay available.
+        Mode used to make Relay available. Deprecated in favor of `enable_relay` field. Remove this attribute's configuration as this field will be removed in the next major release and `enable_relay` will become a required field.
         """
         return pulumi.get(self, "relay_mode")
 

pulumi_gcp/container/outputs.py

@@ -6476,7 +6476,7 @@ class ClusterMonitoringConfigAdvancedDatapathObservabilityConfig(dict):
         """
         :param bool enable_metrics: Whether or not to enable advanced datapath metrics.
         :param bool enable_relay: Whether or not Relay is enabled.
-        :param str relay_mode: Mode used to make Relay available.
+        :param str relay_mode: Mode used to make Relay available. Deprecated in favor of `enable_relay` field. Remove this attribute's configuration as this field will be removed in the next major release and `enable_relay` will become a required field.
         """
         pulumi.set(__self__, "enable_metrics", enable_metrics)
         if enable_relay is not None:
@@ -6505,7 +6505,7 @@ class ClusterMonitoringConfigAdvancedDatapathObservabilityConfig(dict):
     @_utilities.deprecated("""Deprecated in favor of enable_relay field. Remove this attribute's configuration as this field will be removed in the next major release and enable_relay will become a required field.""")
     def relay_mode(self) -> Optional[str]:
         """
-        Mode used to make Relay available.
+        Mode used to make Relay available. Deprecated in favor of `enable_relay` field. Remove this attribute's configuration as this field will be removed in the next major release and `enable_relay` will become a required field.
         """
         return pulumi.get(self, "relay_mode")
 

pulumi_gcp/containeranalysis/note_iam_binding.py

@@ -319,6 +319,25 @@ class NoteIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Container Registry Note
+        Three different resources help you manage your IAM policy for Container Registry Note. Each of these resources serves a different use case:
+
+        * `containeranalysis.NoteIamPolicy`: Authoritative. Sets the IAM policy for the note and replaces any existing policy already attached.
+        * `containeranalysis.NoteIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the note are preserved.
+        * `containeranalysis.NoteIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the note are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `containeranalysis.NoteIamPolicy`: Retrieves the IAM policy for the note
+
+        > **Note:** `containeranalysis.NoteIamPolicy` **cannot** be used in conjunction with `containeranalysis.NoteIamBinding` and `containeranalysis.NoteIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `containeranalysis.NoteIamBinding` resources **can be** used in conjunction with `containeranalysis.NoteIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## containeranalysis.NoteIamPolicy
 
         ```python
@@ -480,6 +499,25 @@ class NoteIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Container Registry Note
+        Three different resources help you manage your IAM policy for Container Registry Note. Each of these resources serves a different use case:
+
+        * `containeranalysis.NoteIamPolicy`: Authoritative. Sets the IAM policy for the note and replaces any existing policy already attached.
+        * `containeranalysis.NoteIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the note are preserved.
+        * `containeranalysis.NoteIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the note are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `containeranalysis.NoteIamPolicy`: Retrieves the IAM policy for the note
+
+        > **Note:** `containeranalysis.NoteIamPolicy` **cannot** be used in conjunction with `containeranalysis.NoteIamBinding` and `containeranalysis.NoteIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `containeranalysis.NoteIamBinding` resources **can be** used in conjunction with `containeranalysis.NoteIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## containeranalysis.NoteIamPolicy
 
         ```python

pulumi_gcp/containeranalysis/note_iam_member.py

@@ -319,6 +319,25 @@ class NoteIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Container Registry Note
+        Three different resources help you manage your IAM policy for Container Registry Note. Each of these resources serves a different use case:
+
+        * `containeranalysis.NoteIamPolicy`: Authoritative. Sets the IAM policy for the note and replaces any existing policy already attached.
+        * `containeranalysis.NoteIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the note are preserved.
+        * `containeranalysis.NoteIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the note are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `containeranalysis.NoteIamPolicy`: Retrieves the IAM policy for the note
+
+        > **Note:** `containeranalysis.NoteIamPolicy` **cannot** be used in conjunction with `containeranalysis.NoteIamBinding` and `containeranalysis.NoteIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `containeranalysis.NoteIamBinding` resources **can be** used in conjunction with `containeranalysis.NoteIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## containeranalysis.NoteIamPolicy
 
         ```python
@@ -480,6 +499,25 @@ class NoteIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Container Registry Note
+        Three different resources help you manage your IAM policy for Container Registry Note. Each of these resources serves a different use case:
+
+        * `containeranalysis.NoteIamPolicy`: Authoritative. Sets the IAM policy for the note and replaces any existing policy already attached.
+        * `containeranalysis.NoteIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the note are preserved.
+        * `containeranalysis.NoteIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the note are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `containeranalysis.NoteIamPolicy`: Retrieves the IAM policy for the note
+
+        > **Note:** `containeranalysis.NoteIamPolicy` **cannot** be used in conjunction with `containeranalysis.NoteIamBinding` and `containeranalysis.NoteIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `containeranalysis.NoteIamBinding` resources **can be** used in conjunction with `containeranalysis.NoteIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## containeranalysis.NoteIamPolicy
 
         ```python

pulumi_gcp/containeranalysis/note_iam_policy.py

@@ -216,6 +216,25 @@ class NoteIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Container Registry Note
+        Three different resources help you manage your IAM policy for Container Registry Note. Each of these resources serves a different use case:
+
+        * `containeranalysis.NoteIamPolicy`: Authoritative. Sets the IAM policy for the note and replaces any existing policy already attached.
+        * `containeranalysis.NoteIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the note are preserved.
+        * `containeranalysis.NoteIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the note are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `containeranalysis.NoteIamPolicy`: Retrieves the IAM policy for the note
+
+        > **Note:** `containeranalysis.NoteIamPolicy` **cannot** be used in conjunction with `containeranalysis.NoteIamBinding` and `containeranalysis.NoteIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `containeranalysis.NoteIamBinding` resources **can be** used in conjunction with `containeranalysis.NoteIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## containeranalysis.NoteIamPolicy
 
         ```python
@@ -365,6 +384,25 @@ class NoteIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Container Registry Note
+        Three different resources help you manage your IAM policy for Container Registry Note. Each of these resources serves a different use case:
+
+        * `containeranalysis.NoteIamPolicy`: Authoritative. Sets the IAM policy for the note and replaces any existing policy already attached.
+        * `containeranalysis.NoteIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the note are preserved.
+        * `containeranalysis.NoteIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the note are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `containeranalysis.NoteIamPolicy`: Retrieves the IAM policy for the note
+
+        > **Note:** `containeranalysis.NoteIamPolicy` **cannot** be used in conjunction with `containeranalysis.NoteIamBinding` and `containeranalysis.NoteIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `containeranalysis.NoteIamBinding` resources **can be** used in conjunction with `containeranalysis.NoteIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## containeranalysis.NoteIamPolicy
 
         ```python

pulumi_gcp/datacatalog/entry_group_iam_binding.py

@@ -341,6 +341,25 @@ class EntryGroupIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Data catalog EntryGroup
+        Three different resources help you manage your IAM policy for Data catalog EntryGroup. Each of these resources serves a different use case:
+
+        * `datacatalog.EntryGroupIamPolicy`: Authoritative. Sets the IAM policy for the entrygroup and replaces any existing policy already attached.
+        * `datacatalog.EntryGroupIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the entrygroup are preserved.
+        * `datacatalog.EntryGroupIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the entrygroup are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `datacatalog.EntryGroupIamPolicy`: Retrieves the IAM policy for the entrygroup
+
+        > **Note:** `datacatalog.EntryGroupIamPolicy` **cannot** be used in conjunction with `datacatalog.EntryGroupIamBinding` and `datacatalog.EntryGroupIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `datacatalog.EntryGroupIamBinding` resources **can be** used in conjunction with `datacatalog.EntryGroupIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## datacatalog.EntryGroupIamPolicy
 
         ```python
@@ -498,6 +517,25 @@ class EntryGroupIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Data catalog EntryGroup
+        Three different resources help you manage your IAM policy for Data catalog EntryGroup. Each of these resources serves a different use case:
+
+        * `datacatalog.EntryGroupIamPolicy`: Authoritative. Sets the IAM policy for the entrygroup and replaces any existing policy already attached.
+        * `datacatalog.EntryGroupIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the entrygroup are preserved.
+        * `datacatalog.EntryGroupIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the entrygroup are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `datacatalog.EntryGroupIamPolicy`: Retrieves the IAM policy for the entrygroup
+
+        > **Note:** `datacatalog.EntryGroupIamPolicy` **cannot** be used in conjunction with `datacatalog.EntryGroupIamBinding` and `datacatalog.EntryGroupIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `datacatalog.EntryGroupIamBinding` resources **can be** used in conjunction with `datacatalog.EntryGroupIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## datacatalog.EntryGroupIamPolicy
 
         ```python

pulumi_gcp/datacatalog/entry_group_iam_member.py

@@ -341,6 +341,25 @@ class EntryGroupIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Data catalog EntryGroup
+        Three different resources help you manage your IAM policy for Data catalog EntryGroup. Each of these resources serves a different use case:
+
+        * `datacatalog.EntryGroupIamPolicy`: Authoritative. Sets the IAM policy for the entrygroup and replaces any existing policy already attached.
+        * `datacatalog.EntryGroupIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the entrygroup are preserved.
+        * `datacatalog.EntryGroupIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the entrygroup are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `datacatalog.EntryGroupIamPolicy`: Retrieves the IAM policy for the entrygroup
+
+        > **Note:** `datacatalog.EntryGroupIamPolicy` **cannot** be used in conjunction with `datacatalog.EntryGroupIamBinding` and `datacatalog.EntryGroupIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `datacatalog.EntryGroupIamBinding` resources **can be** used in conjunction with `datacatalog.EntryGroupIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## datacatalog.EntryGroupIamPolicy
 
         ```python
@@ -498,6 +517,25 @@ class EntryGroupIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Data catalog EntryGroup
+        Three different resources help you manage your IAM policy for Data catalog EntryGroup. Each of these resources serves a different use case:
+
+        * `datacatalog.EntryGroupIamPolicy`: Authoritative. Sets the IAM policy for the entrygroup and replaces any existing policy already attached.
+        * `datacatalog.EntryGroupIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the entrygroup are preserved.
+        * `datacatalog.EntryGroupIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the entrygroup are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `datacatalog.EntryGroupIamPolicy`: Retrieves the IAM policy for the entrygroup
+
+        > **Note:** `datacatalog.EntryGroupIamPolicy` **cannot** be used in conjunction with `datacatalog.EntryGroupIamBinding` and `datacatalog.EntryGroupIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `datacatalog.EntryGroupIamBinding` resources **can be** used in conjunction with `datacatalog.EntryGroupIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## datacatalog.EntryGroupIamPolicy
 
         ```python

pulumi_gcp/datacatalog/entry_group_iam_policy.py

@@ -238,6 +238,25 @@ class EntryGroupIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Data catalog EntryGroup
+        Three different resources help you manage your IAM policy for Data catalog EntryGroup. Each of these resources serves a different use case:
+
+        * `datacatalog.EntryGroupIamPolicy`: Authoritative. Sets the IAM policy for the entrygroup and replaces any existing policy already attached.
+        * `datacatalog.EntryGroupIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the entrygroup are preserved.
+        * `datacatalog.EntryGroupIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the entrygroup are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `datacatalog.EntryGroupIamPolicy`: Retrieves the IAM policy for the entrygroup
+
+        > **Note:** `datacatalog.EntryGroupIamPolicy` **cannot** be used in conjunction with `datacatalog.EntryGroupIamBinding` and `datacatalog.EntryGroupIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `datacatalog.EntryGroupIamBinding` resources **can be** used in conjunction with `datacatalog.EntryGroupIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## datacatalog.EntryGroupIamPolicy
 
         ```python
@@ -383,6 +402,25 @@ class EntryGroupIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Data catalog EntryGroup
+        Three different resources help you manage your IAM policy for Data catalog EntryGroup. Each of these resources serves a different use case:
+
+        * `datacatalog.EntryGroupIamPolicy`: Authoritative. Sets the IAM policy for the entrygroup and replaces any existing policy already attached.
+        * `datacatalog.EntryGroupIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the entrygroup are preserved.
+        * `datacatalog.EntryGroupIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the entrygroup are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `datacatalog.EntryGroupIamPolicy`: Retrieves the IAM policy for the entrygroup
+
+        > **Note:** `datacatalog.EntryGroupIamPolicy` **cannot** be used in conjunction with `datacatalog.EntryGroupIamBinding` and `datacatalog.EntryGroupIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `datacatalog.EntryGroupIamBinding` resources **can be** used in conjunction with `datacatalog.EntryGroupIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## datacatalog.EntryGroupIamPolicy
 
         ```python

pulumi_gcp/datacatalog/policy_tag_iam_binding.py

@@ -279,6 +279,26 @@ class PolicyTagIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+
+        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
+        ---
+
+        # IAM policy for Data catalog PolicyTag
+        Three different resources help you manage your IAM policy for Data catalog PolicyTag. Each of these resources serves a different use case:
+
+        * `datacatalog.PolicyTagIamPolicy`: Authoritative. Sets the IAM policy for the policytag and replaces any existing policy already attached.
+        * `datacatalog.PolicyTagIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the policytag are preserved.
+        * `datacatalog.PolicyTagIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the policytag are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `datacatalog.PolicyTagIamPolicy`: Retrieves the IAM policy for the policytag
+
+        > **Note:** `datacatalog.PolicyTagIamPolicy` **cannot** be used in conjunction with `datacatalog.PolicyTagIamBinding` and `datacatalog.PolicyTagIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `datacatalog.PolicyTagIamBinding` resources **can be** used in conjunction with `datacatalog.PolicyTagIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## datacatalog.PolicyTagIamPolicy
 
         ```python
@@ -428,6 +448,26 @@ class PolicyTagIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+
+        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
+        ---
+
+        # IAM policy for Data catalog PolicyTag
+        Three different resources help you manage your IAM policy for Data catalog PolicyTag. Each of these resources serves a different use case:
+
+        * `datacatalog.PolicyTagIamPolicy`: Authoritative. Sets the IAM policy for the policytag and replaces any existing policy already attached.
+        * `datacatalog.PolicyTagIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the policytag are preserved.
+        * `datacatalog.PolicyTagIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the policytag are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `datacatalog.PolicyTagIamPolicy`: Retrieves the IAM policy for the policytag
+
+        > **Note:** `datacatalog.PolicyTagIamPolicy` **cannot** be used in conjunction with `datacatalog.PolicyTagIamBinding` and `datacatalog.PolicyTagIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `datacatalog.PolicyTagIamBinding` resources **can be** used in conjunction with `datacatalog.PolicyTagIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## datacatalog.PolicyTagIamPolicy
 
         ```python

pulumi_gcp/datacatalog/policy_tag_iam_member.py

@@ -279,6 +279,26 @@ class PolicyTagIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+
+        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
+        ---
+
+        # IAM policy for Data catalog PolicyTag
+        Three different resources help you manage your IAM policy for Data catalog PolicyTag. Each of these resources serves a different use case:
+
+        * `datacatalog.PolicyTagIamPolicy`: Authoritative. Sets the IAM policy for the policytag and replaces any existing policy already attached.
+        * `datacatalog.PolicyTagIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the policytag are preserved.
+        * `datacatalog.PolicyTagIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the policytag are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `datacatalog.PolicyTagIamPolicy`: Retrieves the IAM policy for the policytag
+
+        > **Note:** `datacatalog.PolicyTagIamPolicy` **cannot** be used in conjunction with `datacatalog.PolicyTagIamBinding` and `datacatalog.PolicyTagIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `datacatalog.PolicyTagIamBinding` resources **can be** used in conjunction with `datacatalog.PolicyTagIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## datacatalog.PolicyTagIamPolicy
 
         ```python
@@ -428,6 +448,26 @@ class PolicyTagIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+
+        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
+        ---
+
+        # IAM policy for Data catalog PolicyTag
+        Three different resources help you manage your IAM policy for Data catalog PolicyTag. Each of these resources serves a different use case:
+
+        * `datacatalog.PolicyTagIamPolicy`: Authoritative. Sets the IAM policy for the policytag and replaces any existing policy already attached.
+        * `datacatalog.PolicyTagIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the policytag are preserved.
+        * `datacatalog.PolicyTagIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the policytag are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `datacatalog.PolicyTagIamPolicy`: Retrieves the IAM policy for the policytag
+
+        > **Note:** `datacatalog.PolicyTagIamPolicy` **cannot** be used in conjunction with `datacatalog.PolicyTagIamBinding` and `datacatalog.PolicyTagIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `datacatalog.PolicyTagIamBinding` resources **can be** used in conjunction with `datacatalog.PolicyTagIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## datacatalog.PolicyTagIamPolicy
 
         ```python