pulumi-gcp 7.39.0a1726207510__py3-none-any.whl → 8.0.0a1__py3-none-any.whl

pulumi_gcp/kms/get_ekm_connection_iam_policy.py

@@ -0,0 +1,177 @@
+# coding=utf-8
+# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from .. import _utilities
+
+__all__ = [
+    'GetEkmConnectionIamPolicyResult',
+    'AwaitableGetEkmConnectionIamPolicyResult',
+    'get_ekm_connection_iam_policy',
+    'get_ekm_connection_iam_policy_output',
+]
+
+@pulumi.output_type
+class GetEkmConnectionIamPolicyResult:
+    """
+    A collection of values returned by getEkmConnectionIamPolicy.
+    """
+    def __init__(__self__, etag=None, id=None, location=None, name=None, policy_data=None, project=None):
+        if etag and not isinstance(etag, str):
+            raise TypeError("Expected argument 'etag' to be a str")
+        pulumi.set(__self__, "etag", etag)
+        if id and not isinstance(id, str):
+            raise TypeError("Expected argument 'id' to be a str")
+        pulumi.set(__self__, "id", id)
+        if location and not isinstance(location, str):
+            raise TypeError("Expected argument 'location' to be a str")
+        pulumi.set(__self__, "location", location)
+        if name and not isinstance(name, str):
+            raise TypeError("Expected argument 'name' to be a str")
+        pulumi.set(__self__, "name", name)
+        if policy_data and not isinstance(policy_data, str):
+            raise TypeError("Expected argument 'policy_data' to be a str")
+        pulumi.set(__self__, "policy_data", policy_data)
+        if project and not isinstance(project, str):
+            raise TypeError("Expected argument 'project' to be a str")
+        pulumi.set(__self__, "project", project)
+
+    @property
+    @pulumi.getter
+    def etag(self) -> str:
+        """
+        (Computed) The etag of the IAM policy.
+        """
+        return pulumi.get(self, "etag")
+
+    @property
+    @pulumi.getter
+    def id(self) -> str:
+        """
+        The provider-assigned unique ID for this managed resource.
+        """
+        return pulumi.get(self, "id")
+
+    @property
+    @pulumi.getter
+    def location(self) -> str:
+        return pulumi.get(self, "location")
+
+    @property
+    @pulumi.getter
+    def name(self) -> str:
+        return pulumi.get(self, "name")
+
+    @property
+    @pulumi.getter(name="policyData")
+    def policy_data(self) -> str:
+        """
+        (Required only by `kms.EkmConnectionIamPolicy`) The policy data generated by
+        a `organizations_get_iam_policy` data source.
+        """
+        return pulumi.get(self, "policy_data")
+
+    @property
+    @pulumi.getter
+    def project(self) -> str:
+        return pulumi.get(self, "project")
+
+
+class AwaitableGetEkmConnectionIamPolicyResult(GetEkmConnectionIamPolicyResult):
+    # pylint: disable=using-constant-test
+    def __await__(self):
+        if False:
+            yield self
+        return GetEkmConnectionIamPolicyResult(
+            etag=self.etag,
+            id=self.id,
+            location=self.location,
+            name=self.name,
+            policy_data=self.policy_data,
+            project=self.project)
+
+
+def get_ekm_connection_iam_policy(location: Optional[str] = None,
+                                  name: Optional[str] = None,
+                                  project: Optional[str] = None,
+                                  opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetEkmConnectionIamPolicyResult:
+    """
+    Retrieves the current IAM policy data for ekmconnection
+
+    ## example
+
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    policy = gcp.kms.get_ekm_connection_iam_policy(project=example_ekmconnection["project"],
+        location=example_ekmconnection["location"],
+        name=example_ekmconnection["name"])
+    ```
+
+
+    :param str location: The location for the EkmConnection.
+           A full list of valid locations can be found by running `gcloud kms locations list`.
+           Used to find the parent resource to bind the IAM policy to. If not specified,
+           the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
+           location is specified, it is taken from the provider configuration.
+    :param str name: Used to find the parent resource to bind the IAM policy to
+    :param str project: The ID of the project in which the resource belongs.
+           If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+    """
+    __args__ = dict()
+    __args__['location'] = location
+    __args__['name'] = name
+    __args__['project'] = project
+    opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke('gcp:kms/getEkmConnectionIamPolicy:getEkmConnectionIamPolicy', __args__, opts=opts, typ=GetEkmConnectionIamPolicyResult).value
+
+    return AwaitableGetEkmConnectionIamPolicyResult(
+        etag=pulumi.get(__ret__, 'etag'),
+        id=pulumi.get(__ret__, 'id'),
+        location=pulumi.get(__ret__, 'location'),
+        name=pulumi.get(__ret__, 'name'),
+        policy_data=pulumi.get(__ret__, 'policy_data'),
+        project=pulumi.get(__ret__, 'project'))
+
+
+@_utilities.lift_output_func(get_ekm_connection_iam_policy)
+def get_ekm_connection_iam_policy_output(location: Optional[pulumi.Input[Optional[str]]] = None,
+                                         name: Optional[pulumi.Input[str]] = None,
+                                         project: Optional[pulumi.Input[Optional[str]]] = None,
+                                         opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetEkmConnectionIamPolicyResult]:
+    """
+    Retrieves the current IAM policy data for ekmconnection
+
+    ## example
+
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    policy = gcp.kms.get_ekm_connection_iam_policy(project=example_ekmconnection["project"],
+        location=example_ekmconnection["location"],
+        name=example_ekmconnection["name"])
+    ```
+
+
+    :param str location: The location for the EkmConnection.
+           A full list of valid locations can be found by running `gcloud kms locations list`.
+           Used to find the parent resource to bind the IAM policy to. If not specified,
+           the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
+           location is specified, it is taken from the provider configuration.
+    :param str name: Used to find the parent resource to bind the IAM policy to
+    :param str project: The ID of the project in which the resource belongs.
+           If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+    """
+    ...

pulumi_gcp/kms/key_handle.py

@@ -225,13 +225,15 @@ class KeyHandle(pulumi.CustomResource):
         # Create Folder in GCP Organization
         autokms_folder = gcp.organizations.Folder("autokms_folder",
             display_name="folder-example",
-            parent="organizations/123456789")
+            parent="organizations/123456789",
+            deletion_protection=False)
         # Create the key project
         key_project = gcp.organizations.Project("key_project",
             project_id="key-proj",
             name="key-proj",
             folder_id=autokms_folder.folder_id,
             billing_account="000000-0000000-0000000-000000",
+            deletion_policy="DELETE",
             opts = pulumi.ResourceOptions(depends_on=[autokms_folder]))
         # Create the resource project
         resource_project = gcp.organizations.Project("resource_project",
@@ -239,6 +241,7 @@ class KeyHandle(pulumi.CustomResource):
             name="resources",
             folder_id=autokms_folder.folder_id,
             billing_account="000000-0000000-0000000-000000",
+            deletion_policy="DELETE",
             opts = pulumi.ResourceOptions(depends_on=[autokms_folder]))
         # Enable the Cloud KMS API
         kms_api_service = gcp.projects.Service("kms_api_service",
@@ -338,13 +341,15 @@ class KeyHandle(pulumi.CustomResource):
         # Create Folder in GCP Organization
         autokms_folder = gcp.organizations.Folder("autokms_folder",
             display_name="folder-example",
-            parent="organizations/123456789")
+            parent="organizations/123456789",
+            deletion_protection=False)
         # Create the key project
         key_project = gcp.organizations.Project("key_project",
             project_id="key-proj",
             name="key-proj",
             folder_id=autokms_folder.folder_id,
             billing_account="000000-0000000-0000000-000000",
+            deletion_policy="DELETE",
             opts = pulumi.ResourceOptions(depends_on=[autokms_folder]))
         # Create the resource project
         resource_project = gcp.organizations.Project("resource_project",
@@ -352,6 +357,7 @@ class KeyHandle(pulumi.CustomResource):
             name="resources",
             folder_id=autokms_folder.folder_id,
             billing_account="000000-0000000-0000000-000000",
+            deletion_policy="DELETE",
             opts = pulumi.ResourceOptions(depends_on=[autokms_folder]))
         # Enable the Cloud KMS API
         kms_api_service = gcp.projects.Service("kms_api_service",

pulumi_gcp/kms/outputs.py

@@ -25,6 +25,8 @@ __all__ = [
     'CryptoKeyVersionAttestationExternalProtectionLevelOptions',
     'CryptoKeyVersionExternalProtectionLevelOptions',
     'CryptoKeyVersionTemplate',
+    'EkmConnectionIamBindingCondition',
+    'EkmConnectionIamMemberCondition',
     'EkmConnectionServiceResolver',
     'EkmConnectionServiceResolverServerCertificate',
     'KeyRingIAMBindingCondition',
@@ -509,6 +511,80 @@ class CryptoKeyVersionTemplate(dict):
         return pulumi.get(self, "protection_level")
 
 
+@pulumi.output_type
+class EkmConnectionIamBindingCondition(dict):
+    def __init__(__self__, *,
+                 expression: str,
+                 title: str,
+                 description: Optional[str] = None):
+        """
+        :param str expression: Textual representation of an expression in Common Expression Language syntax.
+        :param str title: A title for the expression, i.e. a short string describing its purpose.
+        """
+        pulumi.set(__self__, "expression", expression)
+        pulumi.set(__self__, "title", title)
+        if description is not None:
+            pulumi.set(__self__, "description", description)
+
+    @property
+    @pulumi.getter
+    def expression(self) -> str:
+        """
+        Textual representation of an expression in Common Expression Language syntax.
+        """
+        return pulumi.get(self, "expression")
+
+    @property
+    @pulumi.getter
+    def title(self) -> str:
+        """
+        A title for the expression, i.e. a short string describing its purpose.
+        """
+        return pulumi.get(self, "title")
+
+    @property
+    @pulumi.getter
+    def description(self) -> Optional[str]:
+        return pulumi.get(self, "description")
+
+
+@pulumi.output_type
+class EkmConnectionIamMemberCondition(dict):
+    def __init__(__self__, *,
+                 expression: str,
+                 title: str,
+                 description: Optional[str] = None):
+        """
+        :param str expression: Textual representation of an expression in Common Expression Language syntax.
+        :param str title: A title for the expression, i.e. a short string describing its purpose.
+        """
+        pulumi.set(__self__, "expression", expression)
+        pulumi.set(__self__, "title", title)
+        if description is not None:
+            pulumi.set(__self__, "description", description)
+
+    @property
+    @pulumi.getter
+    def expression(self) -> str:
+        """
+        Textual representation of an expression in Common Expression Language syntax.
+        """
+        return pulumi.get(self, "expression")
+
+    @property
+    @pulumi.getter
+    def title(self) -> str:
+        """
+        A title for the expression, i.e. a short string describing its purpose.
+        """
+        return pulumi.get(self, "title")
+
+    @property
+    @pulumi.getter
+    def description(self) -> Optional[str]:
+        return pulumi.get(self, "description")
+
+
 @pulumi.output_type
 class EkmConnectionServiceResolver(dict):
     @staticmethod

pulumi_gcp/logging/folder_settings.py

@@ -248,7 +248,8 @@ class FolderSettings(pulumi.CustomResource):
 
         my_folder = gcp.organizations.Folder("my_folder",
             display_name="folder-name",
-            parent="organizations/123456789")
+            parent="organizations/123456789",
+            deletion_protection=False)
         settings = gcp.logging.get_folder_settings_output(folder=my_folder.folder_id)
         iam = gcp.kms.CryptoKeyIAMMember("iam",
             crypto_key_id="kms-key",
@@ -315,7 +316,8 @@ class FolderSettings(pulumi.CustomResource):
 
         my_folder = gcp.organizations.Folder("my_folder",
             display_name="folder-name",
-            parent="organizations/123456789")
+            parent="organizations/123456789",
+            deletion_protection=False)
         settings = gcp.logging.get_folder_settings_output(folder=my_folder.folder_id)
         iam = gcp.kms.CryptoKeyIAMMember("iam",
             crypto_key_id="kms-key",

pulumi_gcp/monitoring/get_secret_version.py

@@ -144,7 +144,7 @@ def get_secret_version(project: Optional[str] = None,
                        version: Optional[str] = None,
                        opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetSecretVersionResult:
     """
-    Get the value and metadata from a Secret Manager secret version. For more information see the [official documentation](https://cloud.google.com/secret-manager/docs/) and [API](https://cloud.google.com/secret-manager/docs/reference/rest/v1/projects.secrets.versions). If you don't need the metadata (i.e., if you want to use a more limited role to access the secret version only), see also the secretmanager_get_secret_version_access datasource.
+    Get the value and metadata from a Secret Manager secret version. For more information see the official documentation datasource.
 
     ## Example Usage
 
@@ -188,7 +188,7 @@ def get_secret_version_output(project: Optional[pulumi.Input[Optional[str]]] = N
                               version: Optional[pulumi.Input[Optional[str]]] = None,
                               opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetSecretVersionResult]:
     """
-    Get the value and metadata from a Secret Manager secret version. For more information see the [official documentation](https://cloud.google.com/secret-manager/docs/) and [API](https://cloud.google.com/secret-manager/docs/reference/rest/v1/projects.secrets.versions). If you don't need the metadata (i.e., if you want to use a more limited role to access the secret version only), see also the secretmanager_get_secret_version_access datasource.
+    Get the value and metadata from a Secret Manager secret version. For more information see the official documentation datasource.
 
     ## Example Usage
 

pulumi_gcp/monitoring/monitored_project.py

@@ -151,7 +151,8 @@ class MonitoredProject(pulumi.CustomResource):
         basic = gcp.organizations.Project("basic",
             project_id="m-id",
             name="m-id-display",
-            org_id="123456789")
+            org_id="123456789",
+            deletion_policy="DELETE")
         primary = gcp.monitoring.MonitoredProject("primary",
             metrics_scope="my-project-name",
             name=basic.project_id)
@@ -209,7 +210,8 @@ class MonitoredProject(pulumi.CustomResource):
         basic = gcp.organizations.Project("basic",
             project_id="m-id",
             name="m-id-display",
-            org_id="123456789")
+            org_id="123456789",
+            deletion_policy="DELETE")
         primary = gcp.monitoring.MonitoredProject("primary",
             metrics_scope="my-project-name",
             name=basic.project_id)

pulumi_gcp/networksecurity/firewall_endpoint_association.py

@@ -462,29 +462,13 @@ class FirewallEndpointAssociation(pulumi.CustomResource):
             * [Create and associate firewall endpoints](https://cloud.google.com/firewall/docs/configure-firewall-endpoints)
             * [Firewall endpoint overview](https://cloud.google.com/firewall/docs/about-firewall-endpoints)
 
-        ## Example Usage
+        > **Warning:** If you are using User ADCs (Application Default Credentials) with this resource,
+        you must specify a `billing_project_id` and set `user_project_override` to true
+        in the provider configuration. Otherwise the ACM API will return a 403 error.
+        Your account must have the `serviceusage.services.use` permission on the
+        `billing_project_id` you defined.
 
-        ### Network Security Firewall Endpoint Association Basic
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        default = gcp.networksecurity.FirewallEndpoint("default",
-            name="my-firewall-endpoint",
-            parent="organizations/123456789",
-            location="us-central1-a",
-            labels={
-                "foo": "bar",
-            })
-        default_association = gcp.networksecurity.FirewallEndpointAssociation("default_association",
-            name="my-firewall-endpoint-association",
-            parent="projects/my-project-name",
-            location="us-central1-a",
-            labels={
-                "foo": "bar",
-            })
-        ```
+        ## Example Usage
 
         ## Import
 
@@ -537,29 +521,13 @@ class FirewallEndpointAssociation(pulumi.CustomResource):
             * [Create and associate firewall endpoints](https://cloud.google.com/firewall/docs/configure-firewall-endpoints)
             * [Firewall endpoint overview](https://cloud.google.com/firewall/docs/about-firewall-endpoints)
 
-        ## Example Usage
+        > **Warning:** If you are using User ADCs (Application Default Credentials) with this resource,
+        you must specify a `billing_project_id` and set `user_project_override` to true
+        in the provider configuration. Otherwise the ACM API will return a 403 error.
+        Your account must have the `serviceusage.services.use` permission on the
+        `billing_project_id` you defined.
 
-        ### Network Security Firewall Endpoint Association Basic
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        default = gcp.networksecurity.FirewallEndpoint("default",
-            name="my-firewall-endpoint",
-            parent="organizations/123456789",
-            location="us-central1-a",
-            labels={
-                "foo": "bar",
-            })
-        default_association = gcp.networksecurity.FirewallEndpointAssociation("default_association",
-            name="my-firewall-endpoint-association",
-            parent="projects/my-project-name",
-            location="us-central1-a",
-            labels={
-                "foo": "bar",
-            })
-        ```
+        ## Example Usage
 
         ## Import
 

pulumi_gcp/networkservices/_inputs.py

@@ -6476,6 +6476,11 @@ if not MYPY:
         The destination services to which traffic should be forwarded. At least one destination service is required.
         Structure is documented below.
         """
+        idle_timeout: NotRequired[pulumi.Input[str]]
+        """
+        Specifies the idle timeout for the selected route. The idle timeout is defined as the period in which there are no bytes sent or received on either the upstream or downstream connection. If not set, the default idle timeout is 30 seconds. If set to 0s, the timeout will be disabled.
+        A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
+        """
         original_destination: NotRequired[pulumi.Input[bool]]
         """
         If true, Router will use the destination IP and port of the original connection as the destination of the request.
@@ -6487,14 +6492,19 @@ elif False:
 class TcpRouteRuleActionArgs:
     def __init__(__self__, *,
                  destinations: Optional[pulumi.Input[Sequence[pulumi.Input['TcpRouteRuleActionDestinationArgs']]]] = None,
+                 idle_timeout: Optional[pulumi.Input[str]] = None,
                  original_destination: Optional[pulumi.Input[bool]] = None):
         """
         :param pulumi.Input[Sequence[pulumi.Input['TcpRouteRuleActionDestinationArgs']]] destinations: The destination services to which traffic should be forwarded. At least one destination service is required.
                Structure is documented below.
+        :param pulumi.Input[str] idle_timeout: Specifies the idle timeout for the selected route. The idle timeout is defined as the period in which there are no bytes sent or received on either the upstream or downstream connection. If not set, the default idle timeout is 30 seconds. If set to 0s, the timeout will be disabled.
+               A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
         :param pulumi.Input[bool] original_destination: If true, Router will use the destination IP and port of the original connection as the destination of the request.
         """
         if destinations is not None:
             pulumi.set(__self__, "destinations", destinations)
+        if idle_timeout is not None:
+            pulumi.set(__self__, "idle_timeout", idle_timeout)
         if original_destination is not None:
             pulumi.set(__self__, "original_destination", original_destination)
 
@@ -6511,6 +6521,19 @@ class TcpRouteRuleActionArgs:
     def destinations(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['TcpRouteRuleActionDestinationArgs']]]]):
         pulumi.set(self, "destinations", value)
 
+    @property
+    @pulumi.getter(name="idleTimeout")
+    def idle_timeout(self) -> Optional[pulumi.Input[str]]:
+        """
+        Specifies the idle timeout for the selected route. The idle timeout is defined as the period in which there are no bytes sent or received on either the upstream or downstream connection. If not set, the default idle timeout is 30 seconds. If set to 0s, the timeout will be disabled.
+        A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
+        """
+        return pulumi.get(self, "idle_timeout")
+
+    @idle_timeout.setter
+    def idle_timeout(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "idle_timeout", value)
+
     @property
     @pulumi.getter(name="originalDestination")
     def original_destination(self) -> Optional[pulumi.Input[bool]]:

pulumi_gcp/networkservices/outputs.py

@@ -5077,7 +5077,9 @@ class TcpRouteRuleAction(dict):
     @staticmethod
     def __key_warning(key: str):
         suggest = None
-        if key == "originalDestination":
+        if key == "idleTimeout":
+            suggest = "idle_timeout"
+        elif key == "originalDestination":
             suggest = "original_destination"
 
         if suggest:
@@ -5093,14 +5095,19 @@ class TcpRouteRuleAction(dict):
 
     def __init__(__self__, *,
                  destinations: Optional[Sequence['outputs.TcpRouteRuleActionDestination']] = None,
+                 idle_timeout: Optional[str] = None,
                  original_destination: Optional[bool] = None):
         """
         :param Sequence['TcpRouteRuleActionDestinationArgs'] destinations: The destination services to which traffic should be forwarded. At least one destination service is required.
                Structure is documented below.
+        :param str idle_timeout: Specifies the idle timeout for the selected route. The idle timeout is defined as the period in which there are no bytes sent or received on either the upstream or downstream connection. If not set, the default idle timeout is 30 seconds. If set to 0s, the timeout will be disabled.
+               A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
         :param bool original_destination: If true, Router will use the destination IP and port of the original connection as the destination of the request.
         """
         if destinations is not None:
             pulumi.set(__self__, "destinations", destinations)
+        if idle_timeout is not None:
+            pulumi.set(__self__, "idle_timeout", idle_timeout)
         if original_destination is not None:
             pulumi.set(__self__, "original_destination", original_destination)
 
@@ -5113,6 +5120,15 @@ class TcpRouteRuleAction(dict):
         """
         return pulumi.get(self, "destinations")
 
+    @property
+    @pulumi.getter(name="idleTimeout")
+    def idle_timeout(self) -> Optional[str]:
+        """
+        Specifies the idle timeout for the selected route. The idle timeout is defined as the period in which there are no bytes sent or received on either the upstream or downstream connection. If not set, the default idle timeout is 30 seconds. If set to 0s, the timeout will be disabled.
+        A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
+        """
+        return pulumi.get(self, "idle_timeout")
+
     @property
     @pulumi.getter(name="originalDestination")
     def original_destination(self) -> Optional[bool]:

pulumi_gcp/networkservices/tcp_route.py

@@ -440,6 +440,7 @@ class TcpRoute(pulumi.CustomResource):
                         "weight": 1,
                     }],
                     "original_destination": False,
+                    "idle_timeout": "60s",
                 },
             }])
         ```
@@ -640,6 +641,7 @@ class TcpRoute(pulumi.CustomResource):
                         "weight": 1,
                     }],
                     "original_destination": False,
+                    "idle_timeout": "60s",
                 },
             }])
         ```

pulumi_gcp/organizations/access_approval_settings.py

@@ -306,7 +306,8 @@ class AccessApprovalSettings(pulumi.CustomResource):
         my_project = gcp.organizations.Project("my_project",
             name="My Project",
             project_id="your-project-id",
-            org_id="123456789")
+            org_id="123456789",
+            deletion_policy="DELETE")
         key_ring = gcp.kms.KeyRing("key_ring",
             name="key-ring",
             location="global",
@@ -411,7 +412,8 @@ class AccessApprovalSettings(pulumi.CustomResource):
         my_project = gcp.organizations.Project("my_project",
             name="My Project",
             project_id="your-project-id",
-            org_id="123456789")
+            org_id="123456789",
+            deletion_policy="DELETE")
         key_ring = gcp.kms.KeyRing("key_ring",
             name="key-ring",
             location="global",