pulumi-gcp 7.36.0a1723105270__py3-none-any.whl → 7.36.0a1723631483__py3-none-any.whl

pulumi_gcp/compute/snapshot_iam_member.py

@@ -320,6 +320,25 @@ class SnapshotIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine Snapshot
+        Three different resources help you manage your IAM policy for Compute Engine Snapshot. Each of these resources serves a different use case:
+
+        * `compute.SnapshotIamPolicy`: Authoritative. Sets the IAM policy for the snapshot and replaces any existing policy already attached.
+        * `compute.SnapshotIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the snapshot are preserved.
+        * `compute.SnapshotIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the snapshot are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.SnapshotIamPolicy`: Retrieves the IAM policy for the snapshot
+
+        > **Note:** `compute.SnapshotIamPolicy` **cannot** be used in conjunction with `compute.SnapshotIamBinding` and `compute.SnapshotIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.SnapshotIamBinding` resources **can be** used in conjunction with `compute.SnapshotIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## compute.SnapshotIamPolicy
 
         ```python
@@ -481,6 +500,25 @@ class SnapshotIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine Snapshot
+        Three different resources help you manage your IAM policy for Compute Engine Snapshot. Each of these resources serves a different use case:
+
+        * `compute.SnapshotIamPolicy`: Authoritative. Sets the IAM policy for the snapshot and replaces any existing policy already attached.
+        * `compute.SnapshotIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the snapshot are preserved.
+        * `compute.SnapshotIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the snapshot are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.SnapshotIamPolicy`: Retrieves the IAM policy for the snapshot
+
+        > **Note:** `compute.SnapshotIamPolicy` **cannot** be used in conjunction with `compute.SnapshotIamBinding` and `compute.SnapshotIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.SnapshotIamBinding` resources **can be** used in conjunction with `compute.SnapshotIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## compute.SnapshotIamPolicy
 
         ```python

pulumi_gcp/compute/snapshot_iam_policy.py

@@ -217,6 +217,25 @@ class SnapshotIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine Snapshot
+        Three different resources help you manage your IAM policy for Compute Engine Snapshot. Each of these resources serves a different use case:
+
+        * `compute.SnapshotIamPolicy`: Authoritative. Sets the IAM policy for the snapshot and replaces any existing policy already attached.
+        * `compute.SnapshotIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the snapshot are preserved.
+        * `compute.SnapshotIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the snapshot are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.SnapshotIamPolicy`: Retrieves the IAM policy for the snapshot
+
+        > **Note:** `compute.SnapshotIamPolicy` **cannot** be used in conjunction with `compute.SnapshotIamBinding` and `compute.SnapshotIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.SnapshotIamBinding` resources **can be** used in conjunction with `compute.SnapshotIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## compute.SnapshotIamPolicy
 
         ```python
@@ -366,6 +385,25 @@ class SnapshotIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine Snapshot
+        Three different resources help you manage your IAM policy for Compute Engine Snapshot. Each of these resources serves a different use case:
+
+        * `compute.SnapshotIamPolicy`: Authoritative. Sets the IAM policy for the snapshot and replaces any existing policy already attached.
+        * `compute.SnapshotIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the snapshot are preserved.
+        * `compute.SnapshotIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the snapshot are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.SnapshotIamPolicy`: Retrieves the IAM policy for the snapshot
+
+        > **Note:** `compute.SnapshotIamPolicy` **cannot** be used in conjunction with `compute.SnapshotIamBinding` and `compute.SnapshotIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.SnapshotIamBinding` resources **can be** used in conjunction with `compute.SnapshotIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## compute.SnapshotIamPolicy
 
         ```python

pulumi_gcp/compute/subnetwork_iam_binding.py

@@ -439,6 +439,27 @@ class SubnetworkIAMBinding(pulumi.CustomResource):
             })
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine Subnetwork
+        Three different resources help you manage your IAM policy for Compute Engine Subnetwork. Each of these resources serves a different use case:
+
+        * `compute.SubnetworkIAMPolicy`: Authoritative. Sets the IAM policy for the subnetwork and replaces any existing policy already attached.
+        * `compute.SubnetworkIAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the subnetwork are preserved.
+        * `compute.SubnetworkIAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the subnetwork are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.SubnetworkIAMPolicy`: Retrieves the IAM policy for the subnetwork
+
+        > **Note:** `compute.SubnetworkIAMPolicy` **cannot** be used in conjunction with `compute.SubnetworkIAMBinding` and `compute.SubnetworkIAMMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.SubnetworkIAMBinding` resources **can be** used in conjunction with `compute.SubnetworkIAMMember` resources **only if** they do not grant privilege to the same role.
+
+        > **Note:**  This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
+
         ## compute.SubnetworkIAMPolicy
 
         ```python
@@ -732,6 +753,27 @@ class SubnetworkIAMBinding(pulumi.CustomResource):
             })
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine Subnetwork
+        Three different resources help you manage your IAM policy for Compute Engine Subnetwork. Each of these resources serves a different use case:
+
+        * `compute.SubnetworkIAMPolicy`: Authoritative. Sets the IAM policy for the subnetwork and replaces any existing policy already attached.
+        * `compute.SubnetworkIAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the subnetwork are preserved.
+        * `compute.SubnetworkIAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the subnetwork are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.SubnetworkIAMPolicy`: Retrieves the IAM policy for the subnetwork
+
+        > **Note:** `compute.SubnetworkIAMPolicy` **cannot** be used in conjunction with `compute.SubnetworkIAMBinding` and `compute.SubnetworkIAMMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.SubnetworkIAMBinding` resources **can be** used in conjunction with `compute.SubnetworkIAMMember` resources **only if** they do not grant privilege to the same role.
+
+        > **Note:**  This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
+
         ## compute.SubnetworkIAMPolicy
 
         ```python

pulumi_gcp/compute/subnetwork_iam_member.py

@@ -439,6 +439,27 @@ class SubnetworkIAMMember(pulumi.CustomResource):
             })
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine Subnetwork
+        Three different resources help you manage your IAM policy for Compute Engine Subnetwork. Each of these resources serves a different use case:
+
+        * `compute.SubnetworkIAMPolicy`: Authoritative. Sets the IAM policy for the subnetwork and replaces any existing policy already attached.
+        * `compute.SubnetworkIAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the subnetwork are preserved.
+        * `compute.SubnetworkIAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the subnetwork are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.SubnetworkIAMPolicy`: Retrieves the IAM policy for the subnetwork
+
+        > **Note:** `compute.SubnetworkIAMPolicy` **cannot** be used in conjunction with `compute.SubnetworkIAMBinding` and `compute.SubnetworkIAMMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.SubnetworkIAMBinding` resources **can be** used in conjunction with `compute.SubnetworkIAMMember` resources **only if** they do not grant privilege to the same role.
+
+        > **Note:**  This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
+
         ## compute.SubnetworkIAMPolicy
 
         ```python
@@ -732,6 +753,27 @@ class SubnetworkIAMMember(pulumi.CustomResource):
             })
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine Subnetwork
+        Three different resources help you manage your IAM policy for Compute Engine Subnetwork. Each of these resources serves a different use case:
+
+        * `compute.SubnetworkIAMPolicy`: Authoritative. Sets the IAM policy for the subnetwork and replaces any existing policy already attached.
+        * `compute.SubnetworkIAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the subnetwork are preserved.
+        * `compute.SubnetworkIAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the subnetwork are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.SubnetworkIAMPolicy`: Retrieves the IAM policy for the subnetwork
+
+        > **Note:** `compute.SubnetworkIAMPolicy` **cannot** be used in conjunction with `compute.SubnetworkIAMBinding` and `compute.SubnetworkIAMMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.SubnetworkIAMBinding` resources **can be** used in conjunction with `compute.SubnetworkIAMMember` resources **only if** they do not grant privilege to the same role.
+
+        > **Note:**  This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
+
         ## compute.SubnetworkIAMPolicy
 
         ```python

pulumi_gcp/compute/subnetwork_iam_policy.py

@@ -324,6 +324,27 @@ class SubnetworkIAMPolicy(pulumi.CustomResource):
             })
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine Subnetwork
+        Three different resources help you manage your IAM policy for Compute Engine Subnetwork. Each of these resources serves a different use case:
+
+        * `compute.SubnetworkIAMPolicy`: Authoritative. Sets the IAM policy for the subnetwork and replaces any existing policy already attached.
+        * `compute.SubnetworkIAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the subnetwork are preserved.
+        * `compute.SubnetworkIAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the subnetwork are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.SubnetworkIAMPolicy`: Retrieves the IAM policy for the subnetwork
+
+        > **Note:** `compute.SubnetworkIAMPolicy` **cannot** be used in conjunction with `compute.SubnetworkIAMBinding` and `compute.SubnetworkIAMMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.SubnetworkIAMBinding` resources **can be** used in conjunction with `compute.SubnetworkIAMMember` resources **only if** they do not grant privilege to the same role.
+
+        > **Note:**  This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
+
         ## compute.SubnetworkIAMPolicy
 
         ```python
@@ -603,6 +624,27 @@ class SubnetworkIAMPolicy(pulumi.CustomResource):
             })
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine Subnetwork
+        Three different resources help you manage your IAM policy for Compute Engine Subnetwork. Each of these resources serves a different use case:
+
+        * `compute.SubnetworkIAMPolicy`: Authoritative. Sets the IAM policy for the subnetwork and replaces any existing policy already attached.
+        * `compute.SubnetworkIAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the subnetwork are preserved.
+        * `compute.SubnetworkIAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the subnetwork are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.SubnetworkIAMPolicy`: Retrieves the IAM policy for the subnetwork
+
+        > **Note:** `compute.SubnetworkIAMPolicy` **cannot** be used in conjunction with `compute.SubnetworkIAMBinding` and `compute.SubnetworkIAMMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.SubnetworkIAMBinding` resources **can be** used in conjunction with `compute.SubnetworkIAMMember` resources **only if** they do not grant privilege to the same role.
+
+        > **Note:**  This resource supports IAM Conditions but they have some known limitations which can be found [here](https://cloud.google.com/iam/docs/conditions-overview#limitations). Please review this article if you are having issues with IAM Conditions.
+
         ## compute.SubnetworkIAMPolicy
 
         ```python

pulumi_gcp/containeranalysis/note_iam_binding.py

@@ -319,6 +319,25 @@ class NoteIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Container Registry Note
+        Three different resources help you manage your IAM policy for Container Registry Note. Each of these resources serves a different use case:
+
+        * `containeranalysis.NoteIamPolicy`: Authoritative. Sets the IAM policy for the note and replaces any existing policy already attached.
+        * `containeranalysis.NoteIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the note are preserved.
+        * `containeranalysis.NoteIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the note are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `containeranalysis.NoteIamPolicy`: Retrieves the IAM policy for the note
+
+        > **Note:** `containeranalysis.NoteIamPolicy` **cannot** be used in conjunction with `containeranalysis.NoteIamBinding` and `containeranalysis.NoteIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `containeranalysis.NoteIamBinding` resources **can be** used in conjunction with `containeranalysis.NoteIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## containeranalysis.NoteIamPolicy
 
         ```python
@@ -480,6 +499,25 @@ class NoteIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Container Registry Note
+        Three different resources help you manage your IAM policy for Container Registry Note. Each of these resources serves a different use case:
+
+        * `containeranalysis.NoteIamPolicy`: Authoritative. Sets the IAM policy for the note and replaces any existing policy already attached.
+        * `containeranalysis.NoteIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the note are preserved.
+        * `containeranalysis.NoteIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the note are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `containeranalysis.NoteIamPolicy`: Retrieves the IAM policy for the note
+
+        > **Note:** `containeranalysis.NoteIamPolicy` **cannot** be used in conjunction with `containeranalysis.NoteIamBinding` and `containeranalysis.NoteIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `containeranalysis.NoteIamBinding` resources **can be** used in conjunction with `containeranalysis.NoteIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## containeranalysis.NoteIamPolicy
 
         ```python

pulumi_gcp/containeranalysis/note_iam_member.py

@@ -319,6 +319,25 @@ class NoteIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Container Registry Note
+        Three different resources help you manage your IAM policy for Container Registry Note. Each of these resources serves a different use case:
+
+        * `containeranalysis.NoteIamPolicy`: Authoritative. Sets the IAM policy for the note and replaces any existing policy already attached.
+        * `containeranalysis.NoteIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the note are preserved.
+        * `containeranalysis.NoteIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the note are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `containeranalysis.NoteIamPolicy`: Retrieves the IAM policy for the note
+
+        > **Note:** `containeranalysis.NoteIamPolicy` **cannot** be used in conjunction with `containeranalysis.NoteIamBinding` and `containeranalysis.NoteIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `containeranalysis.NoteIamBinding` resources **can be** used in conjunction with `containeranalysis.NoteIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## containeranalysis.NoteIamPolicy
 
         ```python
@@ -480,6 +499,25 @@ class NoteIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Container Registry Note
+        Three different resources help you manage your IAM policy for Container Registry Note. Each of these resources serves a different use case:
+
+        * `containeranalysis.NoteIamPolicy`: Authoritative. Sets the IAM policy for the note and replaces any existing policy already attached.
+        * `containeranalysis.NoteIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the note are preserved.
+        * `containeranalysis.NoteIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the note are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `containeranalysis.NoteIamPolicy`: Retrieves the IAM policy for the note
+
+        > **Note:** `containeranalysis.NoteIamPolicy` **cannot** be used in conjunction with `containeranalysis.NoteIamBinding` and `containeranalysis.NoteIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `containeranalysis.NoteIamBinding` resources **can be** used in conjunction with `containeranalysis.NoteIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## containeranalysis.NoteIamPolicy
 
         ```python

pulumi_gcp/containeranalysis/note_iam_policy.py

@@ -216,6 +216,25 @@ class NoteIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Container Registry Note
+        Three different resources help you manage your IAM policy for Container Registry Note. Each of these resources serves a different use case:
+
+        * `containeranalysis.NoteIamPolicy`: Authoritative. Sets the IAM policy for the note and replaces any existing policy already attached.
+        * `containeranalysis.NoteIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the note are preserved.
+        * `containeranalysis.NoteIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the note are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `containeranalysis.NoteIamPolicy`: Retrieves the IAM policy for the note
+
+        > **Note:** `containeranalysis.NoteIamPolicy` **cannot** be used in conjunction with `containeranalysis.NoteIamBinding` and `containeranalysis.NoteIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `containeranalysis.NoteIamBinding` resources **can be** used in conjunction with `containeranalysis.NoteIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## containeranalysis.NoteIamPolicy
 
         ```python
@@ -365,6 +384,25 @@ class NoteIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Container Registry Note
+        Three different resources help you manage your IAM policy for Container Registry Note. Each of these resources serves a different use case:
+
+        * `containeranalysis.NoteIamPolicy`: Authoritative. Sets the IAM policy for the note and replaces any existing policy already attached.
+        * `containeranalysis.NoteIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the note are preserved.
+        * `containeranalysis.NoteIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the note are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `containeranalysis.NoteIamPolicy`: Retrieves the IAM policy for the note
+
+        > **Note:** `containeranalysis.NoteIamPolicy` **cannot** be used in conjunction with `containeranalysis.NoteIamBinding` and `containeranalysis.NoteIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `containeranalysis.NoteIamBinding` resources **can be** used in conjunction with `containeranalysis.NoteIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## containeranalysis.NoteIamPolicy
 
         ```python

pulumi_gcp/datacatalog/entry_group_iam_binding.py

@@ -341,6 +341,25 @@ class EntryGroupIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Data catalog EntryGroup
+        Three different resources help you manage your IAM policy for Data catalog EntryGroup. Each of these resources serves a different use case:
+
+        * `datacatalog.EntryGroupIamPolicy`: Authoritative. Sets the IAM policy for the entrygroup and replaces any existing policy already attached.
+        * `datacatalog.EntryGroupIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the entrygroup are preserved.
+        * `datacatalog.EntryGroupIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the entrygroup are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `datacatalog.EntryGroupIamPolicy`: Retrieves the IAM policy for the entrygroup
+
+        > **Note:** `datacatalog.EntryGroupIamPolicy` **cannot** be used in conjunction with `datacatalog.EntryGroupIamBinding` and `datacatalog.EntryGroupIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `datacatalog.EntryGroupIamBinding` resources **can be** used in conjunction with `datacatalog.EntryGroupIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## datacatalog.EntryGroupIamPolicy
 
         ```python
@@ -498,6 +517,25 @@ class EntryGroupIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Data catalog EntryGroup
+        Three different resources help you manage your IAM policy for Data catalog EntryGroup. Each of these resources serves a different use case:
+
+        * `datacatalog.EntryGroupIamPolicy`: Authoritative. Sets the IAM policy for the entrygroup and replaces any existing policy already attached.
+        * `datacatalog.EntryGroupIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the entrygroup are preserved.
+        * `datacatalog.EntryGroupIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the entrygroup are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `datacatalog.EntryGroupIamPolicy`: Retrieves the IAM policy for the entrygroup
+
+        > **Note:** `datacatalog.EntryGroupIamPolicy` **cannot** be used in conjunction with `datacatalog.EntryGroupIamBinding` and `datacatalog.EntryGroupIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `datacatalog.EntryGroupIamBinding` resources **can be** used in conjunction with `datacatalog.EntryGroupIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## datacatalog.EntryGroupIamPolicy
 
         ```python

pulumi_gcp/datacatalog/entry_group_iam_member.py

@@ -341,6 +341,25 @@ class EntryGroupIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Data catalog EntryGroup
+        Three different resources help you manage your IAM policy for Data catalog EntryGroup. Each of these resources serves a different use case:
+
+        * `datacatalog.EntryGroupIamPolicy`: Authoritative. Sets the IAM policy for the entrygroup and replaces any existing policy already attached.
+        * `datacatalog.EntryGroupIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the entrygroup are preserved.
+        * `datacatalog.EntryGroupIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the entrygroup are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `datacatalog.EntryGroupIamPolicy`: Retrieves the IAM policy for the entrygroup
+
+        > **Note:** `datacatalog.EntryGroupIamPolicy` **cannot** be used in conjunction with `datacatalog.EntryGroupIamBinding` and `datacatalog.EntryGroupIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `datacatalog.EntryGroupIamBinding` resources **can be** used in conjunction with `datacatalog.EntryGroupIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## datacatalog.EntryGroupIamPolicy
 
         ```python
@@ -498,6 +517,25 @@ class EntryGroupIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Data catalog EntryGroup
+        Three different resources help you manage your IAM policy for Data catalog EntryGroup. Each of these resources serves a different use case:
+
+        * `datacatalog.EntryGroupIamPolicy`: Authoritative. Sets the IAM policy for the entrygroup and replaces any existing policy already attached.
+        * `datacatalog.EntryGroupIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the entrygroup are preserved.
+        * `datacatalog.EntryGroupIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the entrygroup are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `datacatalog.EntryGroupIamPolicy`: Retrieves the IAM policy for the entrygroup
+
+        > **Note:** `datacatalog.EntryGroupIamPolicy` **cannot** be used in conjunction with `datacatalog.EntryGroupIamBinding` and `datacatalog.EntryGroupIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `datacatalog.EntryGroupIamBinding` resources **can be** used in conjunction with `datacatalog.EntryGroupIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## datacatalog.EntryGroupIamPolicy
 
         ```python

pulumi_gcp/datacatalog/entry_group_iam_policy.py

@@ -238,6 +238,25 @@ class EntryGroupIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Data catalog EntryGroup
+        Three different resources help you manage your IAM policy for Data catalog EntryGroup. Each of these resources serves a different use case:
+
+        * `datacatalog.EntryGroupIamPolicy`: Authoritative. Sets the IAM policy for the entrygroup and replaces any existing policy already attached.
+        * `datacatalog.EntryGroupIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the entrygroup are preserved.
+        * `datacatalog.EntryGroupIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the entrygroup are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `datacatalog.EntryGroupIamPolicy`: Retrieves the IAM policy for the entrygroup
+
+        > **Note:** `datacatalog.EntryGroupIamPolicy` **cannot** be used in conjunction with `datacatalog.EntryGroupIamBinding` and `datacatalog.EntryGroupIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `datacatalog.EntryGroupIamBinding` resources **can be** used in conjunction with `datacatalog.EntryGroupIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## datacatalog.EntryGroupIamPolicy
 
         ```python
@@ -383,6 +402,25 @@ class EntryGroupIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Data catalog EntryGroup
+        Three different resources help you manage your IAM policy for Data catalog EntryGroup. Each of these resources serves a different use case:
+
+        * `datacatalog.EntryGroupIamPolicy`: Authoritative. Sets the IAM policy for the entrygroup and replaces any existing policy already attached.
+        * `datacatalog.EntryGroupIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the entrygroup are preserved.
+        * `datacatalog.EntryGroupIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the entrygroup are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `datacatalog.EntryGroupIamPolicy`: Retrieves the IAM policy for the entrygroup
+
+        > **Note:** `datacatalog.EntryGroupIamPolicy` **cannot** be used in conjunction with `datacatalog.EntryGroupIamBinding` and `datacatalog.EntryGroupIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `datacatalog.EntryGroupIamBinding` resources **can be** used in conjunction with `datacatalog.EntryGroupIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## datacatalog.EntryGroupIamPolicy
 
         ```python

pulumi_gcp/datacatalog/policy_tag_iam_binding.py

@@ -279,6 +279,26 @@ class PolicyTagIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+
+        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
+        ---
+
+        # IAM policy for Data catalog PolicyTag
+        Three different resources help you manage your IAM policy for Data catalog PolicyTag. Each of these resources serves a different use case:
+
+        * `datacatalog.PolicyTagIamPolicy`: Authoritative. Sets the IAM policy for the policytag and replaces any existing policy already attached.
+        * `datacatalog.PolicyTagIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the policytag are preserved.
+        * `datacatalog.PolicyTagIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the policytag are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `datacatalog.PolicyTagIamPolicy`: Retrieves the IAM policy for the policytag
+
+        > **Note:** `datacatalog.PolicyTagIamPolicy` **cannot** be used in conjunction with `datacatalog.PolicyTagIamBinding` and `datacatalog.PolicyTagIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `datacatalog.PolicyTagIamBinding` resources **can be** used in conjunction with `datacatalog.PolicyTagIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## datacatalog.PolicyTagIamPolicy
 
         ```python
@@ -428,6 +448,26 @@ class PolicyTagIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+
+        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
+        ---
+
+        # IAM policy for Data catalog PolicyTag
+        Three different resources help you manage your IAM policy for Data catalog PolicyTag. Each of these resources serves a different use case:
+
+        * `datacatalog.PolicyTagIamPolicy`: Authoritative. Sets the IAM policy for the policytag and replaces any existing policy already attached.
+        * `datacatalog.PolicyTagIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the policytag are preserved.
+        * `datacatalog.PolicyTagIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the policytag are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `datacatalog.PolicyTagIamPolicy`: Retrieves the IAM policy for the policytag
+
+        > **Note:** `datacatalog.PolicyTagIamPolicy` **cannot** be used in conjunction with `datacatalog.PolicyTagIamBinding` and `datacatalog.PolicyTagIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `datacatalog.PolicyTagIamBinding` resources **can be** used in conjunction with `datacatalog.PolicyTagIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## datacatalog.PolicyTagIamPolicy
 
         ```python