pulumi-gcp 8.1.0a1726293903__py3-none-any.whl → 8.2.0__py3-none-any.whl

pulumi_gcp/dataloss/outputs.py

@@ -221,6 +221,10 @@ __all__ = [
     'PreventionDiscoveryConfigActionPubSubNotificationPubsubCondition',
     'PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionExpressions',
     'PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionExpressionsCondition',
+    'PreventionDiscoveryConfigActionTagResources',
+    'PreventionDiscoveryConfigActionTagResourcesTagCondition',
+    'PreventionDiscoveryConfigActionTagResourcesTagConditionSensitivityScore',
+    'PreventionDiscoveryConfigActionTagResourcesTagConditionTag',
     'PreventionDiscoveryConfigError',
     'PreventionDiscoveryConfigErrorDetails',
     'PreventionDiscoveryConfigOrgConfig',
@@ -228,6 +232,7 @@ __all__ = [
     'PreventionDiscoveryConfigTarget',
     'PreventionDiscoveryConfigTargetBigQueryTarget',
     'PreventionDiscoveryConfigTargetBigQueryTargetCadence',
+    'PreventionDiscoveryConfigTargetBigQueryTargetCadenceInspectTemplateModifiedCadence',
     'PreventionDiscoveryConfigTargetBigQueryTargetCadenceSchemaModifiedCadence',
     'PreventionDiscoveryConfigTargetBigQueryTargetCadenceTableModifiedCadence',
     'PreventionDiscoveryConfigTargetBigQueryTargetConditions',
@@ -250,6 +255,7 @@ __all__ = [
     'PreventionDiscoveryConfigTargetCloudSqlTargetFilterDatabaseResourceReference',
     'PreventionDiscoveryConfigTargetCloudSqlTargetFilterOthers',
     'PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadence',
+    'PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceInspectTemplateModifiedCadence',
     'PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceSchemaModifiedCadence',
     'PreventionDiscoveryConfigTargetCloudStorageTarget',
     'PreventionDiscoveryConfigTargetCloudStorageTargetConditions',
@@ -11231,6 +11237,8 @@ class PreventionDiscoveryConfigAction(dict):
             suggest = "export_data"
         elif key == "pubSubNotification":
             suggest = "pub_sub_notification"
+        elif key == "tagResources":
+            suggest = "tag_resources"
 
         if suggest:
             pulumi.log.warn(f"Key '{key}' not found in PreventionDiscoveryConfigAction. Access the value via the '{suggest}' property getter instead.")
@@ -11245,17 +11253,22 @@ class PreventionDiscoveryConfigAction(dict):
 
     def __init__(__self__, *,
                  export_data: Optional['outputs.PreventionDiscoveryConfigActionExportData'] = None,
-                 pub_sub_notification: Optional['outputs.PreventionDiscoveryConfigActionPubSubNotification'] = None):
+                 pub_sub_notification: Optional['outputs.PreventionDiscoveryConfigActionPubSubNotification'] = None,
+                 tag_resources: Optional['outputs.PreventionDiscoveryConfigActionTagResources'] = None):
         """
         :param 'PreventionDiscoveryConfigActionExportDataArgs' export_data: Export data profiles into a provided location
                Structure is documented below.
         :param 'PreventionDiscoveryConfigActionPubSubNotificationArgs' pub_sub_notification: Publish a message into the Pub/Sub topic.
                Structure is documented below.
+        :param 'PreventionDiscoveryConfigActionTagResourcesArgs' tag_resources: Publish a message into the Pub/Sub topic.
+               Structure is documented below.
         """
         if export_data is not None:
             pulumi.set(__self__, "export_data", export_data)
         if pub_sub_notification is not None:
             pulumi.set(__self__, "pub_sub_notification", pub_sub_notification)
+        if tag_resources is not None:
+            pulumi.set(__self__, "tag_resources", tag_resources)
 
     @property
     @pulumi.getter(name="exportData")
@@ -11275,6 +11288,15 @@ class PreventionDiscoveryConfigAction(dict):
         """
         return pulumi.get(self, "pub_sub_notification")
 
+    @property
+    @pulumi.getter(name="tagResources")
+    def tag_resources(self) -> Optional['outputs.PreventionDiscoveryConfigActionTagResources']:
+        """
+        Publish a message into the Pub/Sub topic.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "tag_resources")
+
 
 @pulumi.output_type
 class PreventionDiscoveryConfigActionExportData(dict):
@@ -11585,6 +11607,182 @@ class PreventionDiscoveryConfigActionPubSubNotificationPubsubConditionExpression
         return pulumi.get(self, "minimum_sensitivity_score")
 
 
+@pulumi.output_type
+class PreventionDiscoveryConfigActionTagResources(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "lowerDataRiskToLow":
+            suggest = "lower_data_risk_to_low"
+        elif key == "profileGenerationsToTags":
+            suggest = "profile_generations_to_tags"
+        elif key == "tagConditions":
+            suggest = "tag_conditions"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in PreventionDiscoveryConfigActionTagResources. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        PreventionDiscoveryConfigActionTagResources.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        PreventionDiscoveryConfigActionTagResources.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 lower_data_risk_to_low: Optional[bool] = None,
+                 profile_generations_to_tags: Optional[Sequence[str]] = None,
+                 tag_conditions: Optional[Sequence['outputs.PreventionDiscoveryConfigActionTagResourcesTagCondition']] = None):
+        """
+        :param bool lower_data_risk_to_low: Whether applying a tag to a resource should lower the risk of the profile for that resource. For example, in conjunction with an [IAM deny policy](https://cloud.google.com/iam/docs/deny-overview), you can deny all principals a permission if a tag value is present, mitigating the risk of the resource. This also lowers the data risk of resources at the lower levels of the resource hierarchy. For example, reducing the data risk of a table data profile also reduces the data risk of the constituent column data profiles.
+        :param Sequence[str] profile_generations_to_tags: The profile generations for which the tag should be attached to resources. If you attach a tag to only new profiles, then if the sensitivity score of a profile subsequently changes, its tag doesn't change. By default, this field includes only new profiles. To include both new and updated profiles for tagging, this field should explicitly include both `PROFILE_GENERATION_NEW` and `PROFILE_GENERATION_UPDATE`.
+               Each value may be one of: `PROFILE_GENERATION_NEW`, `PROFILE_GENERATION_UPDATE`.
+        :param Sequence['PreventionDiscoveryConfigActionTagResourcesTagConditionArgs'] tag_conditions: The tags to associate with different conditions.
+               Structure is documented below.
+        """
+        if lower_data_risk_to_low is not None:
+            pulumi.set(__self__, "lower_data_risk_to_low", lower_data_risk_to_low)
+        if profile_generations_to_tags is not None:
+            pulumi.set(__self__, "profile_generations_to_tags", profile_generations_to_tags)
+        if tag_conditions is not None:
+            pulumi.set(__self__, "tag_conditions", tag_conditions)
+
+    @property
+    @pulumi.getter(name="lowerDataRiskToLow")
+    def lower_data_risk_to_low(self) -> Optional[bool]:
+        """
+        Whether applying a tag to a resource should lower the risk of the profile for that resource. For example, in conjunction with an [IAM deny policy](https://cloud.google.com/iam/docs/deny-overview), you can deny all principals a permission if a tag value is present, mitigating the risk of the resource. This also lowers the data risk of resources at the lower levels of the resource hierarchy. For example, reducing the data risk of a table data profile also reduces the data risk of the constituent column data profiles.
+        """
+        return pulumi.get(self, "lower_data_risk_to_low")
+
+    @property
+    @pulumi.getter(name="profileGenerationsToTags")
+    def profile_generations_to_tags(self) -> Optional[Sequence[str]]:
+        """
+        The profile generations for which the tag should be attached to resources. If you attach a tag to only new profiles, then if the sensitivity score of a profile subsequently changes, its tag doesn't change. By default, this field includes only new profiles. To include both new and updated profiles for tagging, this field should explicitly include both `PROFILE_GENERATION_NEW` and `PROFILE_GENERATION_UPDATE`.
+        Each value may be one of: `PROFILE_GENERATION_NEW`, `PROFILE_GENERATION_UPDATE`.
+        """
+        return pulumi.get(self, "profile_generations_to_tags")
+
+    @property
+    @pulumi.getter(name="tagConditions")
+    def tag_conditions(self) -> Optional[Sequence['outputs.PreventionDiscoveryConfigActionTagResourcesTagCondition']]:
+        """
+        The tags to associate with different conditions.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "tag_conditions")
+
+
+@pulumi.output_type
+class PreventionDiscoveryConfigActionTagResourcesTagCondition(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "sensitivityScore":
+            suggest = "sensitivity_score"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in PreventionDiscoveryConfigActionTagResourcesTagCondition. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        PreventionDiscoveryConfigActionTagResourcesTagCondition.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        PreventionDiscoveryConfigActionTagResourcesTagCondition.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 sensitivity_score: Optional['outputs.PreventionDiscoveryConfigActionTagResourcesTagConditionSensitivityScore'] = None,
+                 tag: Optional['outputs.PreventionDiscoveryConfigActionTagResourcesTagConditionTag'] = None):
+        """
+        :param 'PreventionDiscoveryConfigActionTagResourcesTagConditionSensitivityScoreArgs' sensitivity_score: Conditions attaching the tag to a resource on its profile having this sensitivity score.
+               Structure is documented below.
+        :param 'PreventionDiscoveryConfigActionTagResourcesTagConditionTagArgs' tag: The tag value to attach to resources.
+               Structure is documented below.
+        """
+        if sensitivity_score is not None:
+            pulumi.set(__self__, "sensitivity_score", sensitivity_score)
+        if tag is not None:
+            pulumi.set(__self__, "tag", tag)
+
+    @property
+    @pulumi.getter(name="sensitivityScore")
+    def sensitivity_score(self) -> Optional['outputs.PreventionDiscoveryConfigActionTagResourcesTagConditionSensitivityScore']:
+        """
+        Conditions attaching the tag to a resource on its profile having this sensitivity score.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "sensitivity_score")
+
+    @property
+    @pulumi.getter
+    def tag(self) -> Optional['outputs.PreventionDiscoveryConfigActionTagResourcesTagConditionTag']:
+        """
+        The tag value to attach to resources.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "tag")
+
+
+@pulumi.output_type
+class PreventionDiscoveryConfigActionTagResourcesTagConditionSensitivityScore(dict):
+    def __init__(__self__, *,
+                 score: str):
+        """
+        :param str score: The sensitivity score applied to the resource.
+               Possible values are: `SENSITIVITY_LOW`, `SENSITIVITY_MODERATE`, `SENSITIVITY_HIGH`.
+        """
+        pulumi.set(__self__, "score", score)
+
+    @property
+    @pulumi.getter
+    def score(self) -> str:
+        """
+        The sensitivity score applied to the resource.
+        Possible values are: `SENSITIVITY_LOW`, `SENSITIVITY_MODERATE`, `SENSITIVITY_HIGH`.
+        """
+        return pulumi.get(self, "score")
+
+
+@pulumi.output_type
+class PreventionDiscoveryConfigActionTagResourcesTagConditionTag(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "namespacedValue":
+            suggest = "namespaced_value"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in PreventionDiscoveryConfigActionTagResourcesTagConditionTag. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        PreventionDiscoveryConfigActionTagResourcesTagConditionTag.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        PreventionDiscoveryConfigActionTagResourcesTagConditionTag.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 namespaced_value: Optional[str] = None):
+        """
+        :param str namespaced_value: The namespaced name for the tag value to attach to resources. Must be in the format `{parent_id}/{tag_key_short_name}/{short_name}`, for example, "123456/environment/prod".
+        """
+        if namespaced_value is not None:
+            pulumi.set(__self__, "namespaced_value", namespaced_value)
+
+    @property
+    @pulumi.getter(name="namespacedValue")
+    def namespaced_value(self) -> Optional[str]:
+        """
+        The namespaced name for the tag value to attach to resources. Must be in the format `{parent_id}/{tag_key_short_name}/{short_name}`, for example, "123456/environment/prod".
+        """
+        return pulumi.get(self, "namespaced_value")
+
+
 @pulumi.output_type
 class PreventionDiscoveryConfigError(dict):
     def __init__(__self__, *,
@@ -11909,7 +12107,9 @@ class PreventionDiscoveryConfigTargetBigQueryTargetCadence(dict):
     @staticmethod
     def __key_warning(key: str):
         suggest = None
-        if key == "schemaModifiedCadence":
+        if key == "inspectTemplateModifiedCadence":
+            suggest = "inspect_template_modified_cadence"
+        elif key == "schemaModifiedCadence":
             suggest = "schema_modified_cadence"
         elif key == "tableModifiedCadence":
             suggest = "table_modified_cadence"
@@ -11926,19 +12126,33 @@ class PreventionDiscoveryConfigTargetBigQueryTargetCadence(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
+                 inspect_template_modified_cadence: Optional['outputs.PreventionDiscoveryConfigTargetBigQueryTargetCadenceInspectTemplateModifiedCadence'] = None,
                  schema_modified_cadence: Optional['outputs.PreventionDiscoveryConfigTargetBigQueryTargetCadenceSchemaModifiedCadence'] = None,
                  table_modified_cadence: Optional['outputs.PreventionDiscoveryConfigTargetBigQueryTargetCadenceTableModifiedCadence'] = None):
         """
+        :param 'PreventionDiscoveryConfigTargetBigQueryTargetCadenceInspectTemplateModifiedCadenceArgs' inspect_template_modified_cadence: Governs when to update data profiles when the inspection rules defined by the `InspectTemplate` change. If not set, changing the template will not cause a data profile to update.
+               Structure is documented below.
         :param 'PreventionDiscoveryConfigTargetBigQueryTargetCadenceSchemaModifiedCadenceArgs' schema_modified_cadence: Governs when to update data profiles when a schema is modified
                Structure is documented below.
         :param 'PreventionDiscoveryConfigTargetBigQueryTargetCadenceTableModifiedCadenceArgs' table_modified_cadence: Governs when to update profile when a table is modified.
                Structure is documented below.
         """
+        if inspect_template_modified_cadence is not None:
+            pulumi.set(__self__, "inspect_template_modified_cadence", inspect_template_modified_cadence)
         if schema_modified_cadence is not None:
             pulumi.set(__self__, "schema_modified_cadence", schema_modified_cadence)
         if table_modified_cadence is not None:
             pulumi.set(__self__, "table_modified_cadence", table_modified_cadence)
 
+    @property
+    @pulumi.getter(name="inspectTemplateModifiedCadence")
+    def inspect_template_modified_cadence(self) -> Optional['outputs.PreventionDiscoveryConfigTargetBigQueryTargetCadenceInspectTemplateModifiedCadence']:
+        """
+        Governs when to update data profiles when the inspection rules defined by the `InspectTemplate` change. If not set, changing the template will not cause a data profile to update.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "inspect_template_modified_cadence")
+
     @property
     @pulumi.getter(name="schemaModifiedCadence")
     def schema_modified_cadence(self) -> Optional['outputs.PreventionDiscoveryConfigTargetBigQueryTargetCadenceSchemaModifiedCadence']:
@@ -11958,6 +12172,27 @@ class PreventionDiscoveryConfigTargetBigQueryTargetCadence(dict):
         return pulumi.get(self, "table_modified_cadence")
 
 
+@pulumi.output_type
+class PreventionDiscoveryConfigTargetBigQueryTargetCadenceInspectTemplateModifiedCadence(dict):
+    def __init__(__self__, *,
+                 frequency: Optional[str] = None):
+        """
+        :param str frequency: How frequently data profiles can be updated when the template is modified. Defaults to never.
+               Possible values are: `UPDATE_FREQUENCY_NEVER`, `UPDATE_FREQUENCY_DAILY`, `UPDATE_FREQUENCY_MONTHLY`.
+        """
+        if frequency is not None:
+            pulumi.set(__self__, "frequency", frequency)
+
+    @property
+    @pulumi.getter
+    def frequency(self) -> Optional[str]:
+        """
+        How frequently data profiles can be updated when the template is modified. Defaults to never.
+        Possible values are: `UPDATE_FREQUENCY_NEVER`, `UPDATE_FREQUENCY_DAILY`, `UPDATE_FREQUENCY_MONTHLY`.
+        """
+        return pulumi.get(self, "frequency")
+
+
 @pulumi.output_type
 class PreventionDiscoveryConfigTargetBigQueryTargetCadenceSchemaModifiedCadence(dict):
     def __init__(__self__, *,
@@ -12847,7 +13082,9 @@ class PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadence(dict):
     @staticmethod
     def __key_warning(key: str):
         suggest = None
-        if key == "refreshFrequency":
+        if key == "inspectTemplateModifiedCadence":
+            suggest = "inspect_template_modified_cadence"
+        elif key == "refreshFrequency":
             suggest = "refresh_frequency"
         elif key == "schemaModifiedCadence":
             suggest = "schema_modified_cadence"
@@ -12864,19 +13101,33 @@ class PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadence(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
+                 inspect_template_modified_cadence: Optional['outputs.PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceInspectTemplateModifiedCadence'] = None,
                  refresh_frequency: Optional[str] = None,
                  schema_modified_cadence: Optional['outputs.PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceSchemaModifiedCadence'] = None):
         """
+        :param 'PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceInspectTemplateModifiedCadenceArgs' inspect_template_modified_cadence: Governs when to update data profiles when the inspection rules defined by the `InspectTemplate` change. If not set, changing the template will not cause a data profile to update.
+               Structure is documented below.
         :param str refresh_frequency: Data changes in Cloud Storage can't trigger reprofiling. If you set this field, profiles are refreshed at this frequency regardless of whether the underlying buckets have changes. Defaults to never.
                Possible values are: `UPDATE_FREQUENCY_NEVER`, `UPDATE_FREQUENCY_DAILY`, `UPDATE_FREQUENCY_MONTHLY`.
         :param 'PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceSchemaModifiedCadenceArgs' schema_modified_cadence: Governs when to update data profiles when a schema is modified
                Structure is documented below.
         """
+        if inspect_template_modified_cadence is not None:
+            pulumi.set(__self__, "inspect_template_modified_cadence", inspect_template_modified_cadence)
         if refresh_frequency is not None:
             pulumi.set(__self__, "refresh_frequency", refresh_frequency)
         if schema_modified_cadence is not None:
             pulumi.set(__self__, "schema_modified_cadence", schema_modified_cadence)
 
+    @property
+    @pulumi.getter(name="inspectTemplateModifiedCadence")
+    def inspect_template_modified_cadence(self) -> Optional['outputs.PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceInspectTemplateModifiedCadence']:
+        """
+        Governs when to update data profiles when the inspection rules defined by the `InspectTemplate` change. If not set, changing the template will not cause a data profile to update.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "inspect_template_modified_cadence")
+
     @property
     @pulumi.getter(name="refreshFrequency")
     def refresh_frequency(self) -> Optional[str]:
@@ -12896,6 +13147,26 @@ class PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadence(dict):
         return pulumi.get(self, "schema_modified_cadence")
 
 
+@pulumi.output_type
+class PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceInspectTemplateModifiedCadence(dict):
+    def __init__(__self__, *,
+                 frequency: str):
+        """
+        :param str frequency: How frequently data profiles can be updated when the template is modified. Defaults to never.
+               Possible values are: `UPDATE_FREQUENCY_NEVER`, `UPDATE_FREQUENCY_DAILY`, `UPDATE_FREQUENCY_MONTHLY`.
+        """
+        pulumi.set(__self__, "frequency", frequency)
+
+    @property
+    @pulumi.getter
+    def frequency(self) -> str:
+        """
+        How frequently data profiles can be updated when the template is modified. Defaults to never.
+        Possible values are: `UPDATE_FREQUENCY_NEVER`, `UPDATE_FREQUENCY_DAILY`, `UPDATE_FREQUENCY_MONTHLY`.
+        """
+        return pulumi.get(self, "frequency")
+
+
 @pulumi.output_type
 class PreventionDiscoveryConfigTargetCloudSqlTargetGenerationCadenceSchemaModifiedCadence(dict):
     def __init__(__self__, *,

pulumi_gcp/dataproc/_inputs.py

@@ -10288,7 +10288,7 @@ if not MYPY:
         """
         staging_bucket: NotRequired[pulumi.Input[str]]
         """
-        A Cloud Storage bucket used to stage job dependencies, config files, and job driver console output. If you do not specify a staging bucket, Cloud Dataproc will determine a Cloud Storage location (US, ASIA, or EU) for your cluster's staging bucket according to the Compute Engine zone where your cluster is deployed, and then create and manage this project-level, per-location bucket (see (https://cloud.google.com/dataproc/docs/concepts/configuring-clusters/staging-bucket)).
+        A Cloud Storage bucket used to stage job dependencies, config files, and job driver console output. If you do not specify a staging bucket, Cloud Dataproc will determine a Cloud Storage location (US, ASIA, or EU) for your cluster's staging bucket according to the Compute Engine zone where your cluster is deployed, and then create and manage this project-level, per-location bucket (see [Dataproc staging and temp buckets](https://cloud.google.com/dataproc/docs/concepts/configuring-clusters/staging-bucket)).
         """
         temp_bucket: NotRequired[pulumi.Input[str]]
         """
@@ -10334,7 +10334,7 @@ class WorkflowTemplatePlacementManagedClusterConfigArgs:
         :param pulumi.Input['WorkflowTemplatePlacementManagedClusterConfigSecondaryWorkerConfigArgs'] secondary_worker_config: The Compute Engine config settings for additional worker instances in a cluster.
         :param pulumi.Input['WorkflowTemplatePlacementManagedClusterConfigSecurityConfigArgs'] security_config: Security settings for the cluster.
         :param pulumi.Input['WorkflowTemplatePlacementManagedClusterConfigSoftwareConfigArgs'] software_config: The config settings for software inside the cluster.
-        :param pulumi.Input[str] staging_bucket: A Cloud Storage bucket used to stage job dependencies, config files, and job driver console output. If you do not specify a staging bucket, Cloud Dataproc will determine a Cloud Storage location (US, ASIA, or EU) for your cluster's staging bucket according to the Compute Engine zone where your cluster is deployed, and then create and manage this project-level, per-location bucket (see (https://cloud.google.com/dataproc/docs/concepts/configuring-clusters/staging-bucket)).
+        :param pulumi.Input[str] staging_bucket: A Cloud Storage bucket used to stage job dependencies, config files, and job driver console output. If you do not specify a staging bucket, Cloud Dataproc will determine a Cloud Storage location (US, ASIA, or EU) for your cluster's staging bucket according to the Compute Engine zone where your cluster is deployed, and then create and manage this project-level, per-location bucket (see [Dataproc staging and temp buckets](https://cloud.google.com/dataproc/docs/concepts/configuring-clusters/staging-bucket)).
         :param pulumi.Input[str] temp_bucket: A Cloud Storage bucket used to store ephemeral cluster and jobs data, such as Spark and MapReduce history files. If you do not specify a temp bucket, Dataproc will determine a Cloud Storage location (US, ASIA, or EU) for your cluster's temp bucket according to the Compute Engine zone where your cluster is deployed, and then create and manage this project-level, per-location bucket. The default bucket has a TTL of 90 days, but you can use any TTL (or none) if you specify a bucket.
         :param pulumi.Input['WorkflowTemplatePlacementManagedClusterConfigWorkerConfigArgs'] worker_config: The Compute Engine config settings for additional worker instances in a cluster.
                
@@ -10519,7 +10519,7 @@ class WorkflowTemplatePlacementManagedClusterConfigArgs:
     @pulumi.getter(name="stagingBucket")
     def staging_bucket(self) -> Optional[pulumi.Input[str]]:
         """
-        A Cloud Storage bucket used to stage job dependencies, config files, and job driver console output. If you do not specify a staging bucket, Cloud Dataproc will determine a Cloud Storage location (US, ASIA, or EU) for your cluster's staging bucket according to the Compute Engine zone where your cluster is deployed, and then create and manage this project-level, per-location bucket (see (https://cloud.google.com/dataproc/docs/concepts/configuring-clusters/staging-bucket)).
+        A Cloud Storage bucket used to stage job dependencies, config files, and job driver console output. If you do not specify a staging bucket, Cloud Dataproc will determine a Cloud Storage location (US, ASIA, or EU) for your cluster's staging bucket according to the Compute Engine zone where your cluster is deployed, and then create and manage this project-level, per-location bucket (see [Dataproc staging and temp buckets](https://cloud.google.com/dataproc/docs/concepts/configuring-clusters/staging-bucket)).
         """
         return pulumi.get(self, "staging_bucket")
 
@@ -10678,7 +10678,7 @@ if not MYPY:
         """
         metadata: NotRequired[pulumi.Input[Mapping[str, pulumi.Input[str]]]]
         """
-        The Compute Engine metadata entries to add to all instances (see (https://cloud.google.com/compute/docs/storing-retrieving-metadata#project_and_instance_metadata)).
+        The Compute Engine metadata entries to add to all instances (see [About VM metadata](https://cloud.google.com/compute/docs/metadata/overview)).
         """
         network: NotRequired[pulumi.Input[str]]
         """
@@ -10714,7 +10714,7 @@ if not MYPY:
         """
         tags: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
         """
-        The Compute Engine tags to add to all instances (see (https://cloud.google.com/compute/docs/label-or-tag-resources#tags)).
+        The Compute Engine tags to add to all instances (see [Manage tags for resources](https://cloud.google.com/compute/docs/tag-resources)).
         """
         zone: NotRequired[pulumi.Input[str]]
         """
@@ -10740,7 +10740,7 @@ class WorkflowTemplatePlacementManagedClusterConfigGceClusterConfigArgs:
                  zone: Optional[pulumi.Input[str]] = None):
         """
         :param pulumi.Input[bool] internal_ip_only: If true, all instances in the cluster will only have internal IP addresses. By default, clusters are not restricted to internal IP addresses, and will have ephemeral external IP addresses assigned to each instance. This `internal_ip_only` restriction can only be enabled for subnetwork enabled networks, and all off-cluster dependencies must be configured to be accessible without external IP addresses.
-        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] metadata: The Compute Engine metadata entries to add to all instances (see (https://cloud.google.com/compute/docs/storing-retrieving-metadata#project_and_instance_metadata)).
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] metadata: The Compute Engine metadata entries to add to all instances (see [About VM metadata](https://cloud.google.com/compute/docs/metadata/overview)).
         :param pulumi.Input[str] network: The Compute Engine network to be used for machine communications. Cannot be specified with subnetwork_uri. If neither `network_uri` nor `subnetwork_uri` is specified, the "default" network of the project is used, if it exists. Cannot be a "Custom Subnet Network" (see /regions/global/default` * `default`
         :param pulumi.Input['WorkflowTemplatePlacementManagedClusterConfigGceClusterConfigNodeGroupAffinityArgs'] node_group_affinity: Node Group Affinity for sole-tenant clusters.
         :param pulumi.Input[str] private_ipv6_google_access: The type of IPv6 access for a cluster. Possible values: PRIVATE_IPV6_GOOGLE_ACCESS_UNSPECIFIED, INHERIT_FROM_SUBNETWORK, OUTBOUND, BIDIRECTIONAL
@@ -10749,7 +10749,7 @@ class WorkflowTemplatePlacementManagedClusterConfigGceClusterConfigArgs:
         :param pulumi.Input[Sequence[pulumi.Input[str]]] service_account_scopes: The URIs of service account scopes to be included in Compute Engine instances. The following base set of scopes is always included: * https://www.googleapis.com/auth/cloud.useraccounts.readonly * https://www.googleapis.com/auth/devstorage.read_write * https://www.googleapis.com/auth/logging.write If no scopes are specified, the following defaults are also provided: * https://www.googleapis.com/auth/bigquery * https://www.googleapis.com/auth/bigtable.admin.table * https://www.googleapis.com/auth/bigtable.data * https://www.googleapis.com/auth/devstorage.full_control
         :param pulumi.Input['WorkflowTemplatePlacementManagedClusterConfigGceClusterConfigShieldedInstanceConfigArgs'] shielded_instance_config: Shielded Instance Config for clusters using [Compute Engine Shielded VMs](https://cloud.google.com/security/shielded-cloud/shielded-vm). Structure defined below.
         :param pulumi.Input[str] subnetwork: The Compute Engine subnetwork to be used for machine communications. Cannot be specified with network_uri. A full URL, partial URI, or short name are valid. Examples: * `https://www.googleapis.com/compute/v1/projects//regions/us-east1/subnetworks/sub0` * `sub0`
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] tags: The Compute Engine tags to add to all instances (see (https://cloud.google.com/compute/docs/label-or-tag-resources#tags)).
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] tags: The Compute Engine tags to add to all instances (see [Manage tags for resources](https://cloud.google.com/compute/docs/tag-resources)).
         :param pulumi.Input[str] zone: The zone where the Compute Engine cluster will be located. On a create request, it is required in the "global" region. If omitted in a non-global Dataproc region, the service will pick a zone in the corresponding Compute Engine region. On a get request, zone will always be present. A full URL, partial URI, or short name are valid. Examples: * `https://www.googleapis.com/compute/v1/projects/` * `us-central1-f`
         """
         if internal_ip_only is not None:
@@ -10793,7 +10793,7 @@ class WorkflowTemplatePlacementManagedClusterConfigGceClusterConfigArgs:
     @pulumi.getter
     def metadata(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
         """
-        The Compute Engine metadata entries to add to all instances (see (https://cloud.google.com/compute/docs/storing-retrieving-metadata#project_and_instance_metadata)).
+        The Compute Engine metadata entries to add to all instances (see [About VM metadata](https://cloud.google.com/compute/docs/metadata/overview)).
         """
         return pulumi.get(self, "metadata")
 
@@ -10901,7 +10901,7 @@ class WorkflowTemplatePlacementManagedClusterConfigGceClusterConfigArgs:
     @pulumi.getter
     def tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        The Compute Engine tags to add to all instances (see (https://cloud.google.com/compute/docs/label-or-tag-resources#tags)).
+        The Compute Engine tags to add to all instances (see [Manage tags for resources](https://cloud.google.com/compute/docs/tag-resources)).
         """
         return pulumi.get(self, "tags")
 
@@ -11189,7 +11189,7 @@ if not MYPY:
         """
         execution_timeout: NotRequired[pulumi.Input[str]]
         """
-        Amount of time executable has to complete. Default is 10 minutes (see JSON representation of (https://developers.google.com/protocol-buffers/docs/proto3#json)). Cluster creation fails with an explanatory error message (the name of the executable that caused the error and the exceeded timeout period) if the executable is not completed at end of the timeout period.
+        Amount of time executable has to complete. Default is 10 minutes (see JSON representation of [JSON Mapping - Language Guide (proto 3)](https://developers.google.com/protocol-buffers/docs/proto3#json)). Cluster creation fails with an explanatory error message (the name of the executable that caused the error and the exceeded timeout period) if the executable is not completed at end of the timeout period.
         """
 elif False:
     WorkflowTemplatePlacementManagedClusterConfigInitializationActionArgsDict: TypeAlias = Mapping[str, Any]
@@ -11201,7 +11201,7 @@ class WorkflowTemplatePlacementManagedClusterConfigInitializationActionArgs:
                  execution_timeout: Optional[pulumi.Input[str]] = None):
         """
         :param pulumi.Input[str] executable_file: Required. Cloud Storage URI of executable file.
-        :param pulumi.Input[str] execution_timeout: Amount of time executable has to complete. Default is 10 minutes (see JSON representation of (https://developers.google.com/protocol-buffers/docs/proto3#json)). Cluster creation fails with an explanatory error message (the name of the executable that caused the error and the exceeded timeout period) if the executable is not completed at end of the timeout period.
+        :param pulumi.Input[str] execution_timeout: Amount of time executable has to complete. Default is 10 minutes (see JSON representation of [JSON Mapping - Language Guide (proto 3)](https://developers.google.com/protocol-buffers/docs/proto3#json)). Cluster creation fails with an explanatory error message (the name of the executable that caused the error and the exceeded timeout period) if the executable is not completed at end of the timeout period.
         """
         if executable_file is not None:
             pulumi.set(__self__, "executable_file", executable_file)
@@ -11224,7 +11224,7 @@ class WorkflowTemplatePlacementManagedClusterConfigInitializationActionArgs:
     @pulumi.getter(name="executionTimeout")
     def execution_timeout(self) -> Optional[pulumi.Input[str]]:
         """
-        Amount of time executable has to complete. Default is 10 minutes (see JSON representation of (https://developers.google.com/protocol-buffers/docs/proto3#json)). Cluster creation fails with an explanatory error message (the name of the executable that caused the error and the exceeded timeout period) if the executable is not completed at end of the timeout period.
+        Amount of time executable has to complete. Default is 10 minutes (see JSON representation of [JSON Mapping - Language Guide (proto 3)](https://developers.google.com/protocol-buffers/docs/proto3#json)). Cluster creation fails with an explanatory error message (the name of the executable that caused the error and the exceeded timeout period) if the executable is not completed at end of the timeout period.
         """
         return pulumi.get(self, "execution_timeout")
 
@@ -11237,19 +11237,19 @@ if not MYPY:
     class WorkflowTemplatePlacementManagedClusterConfigLifecycleConfigArgsDict(TypedDict):
         auto_delete_time: NotRequired[pulumi.Input[str]]
         """
-        The time when cluster will be auto-deleted (see JSON representation of (https://developers.google.com/protocol-buffers/docs/proto3#json)).
+        The time when cluster will be auto-deleted (see JSON representation of [JSON Mapping - Language Guide (proto 3)](https://developers.google.com/protocol-buffers/docs/proto3#json)).
         """
         auto_delete_ttl: NotRequired[pulumi.Input[str]]
         """
-        The lifetime duration of cluster. The cluster will be auto-deleted at the end of this period. Minimum value is 10 minutes; maximum value is 14 days (see JSON representation of (https://developers.google.com/protocol-buffers/docs/proto3#json)).
+        The lifetime duration of cluster. The cluster will be auto-deleted at the end of this period. Minimum value is 10 minutes; maximum value is 14 days (see JSON representation of [JSON Mapping - Language Guide (proto 3)](https://developers.google.com/protocol-buffers/docs/proto3#json)).
         """
         idle_delete_ttl: NotRequired[pulumi.Input[str]]
         """
-        The duration to keep the cluster alive while idling (when no jobs are running). Passing this threshold will cause the cluster to be deleted. Minimum value is 5 minutes; maximum value is 14 days (see JSON representation of (https://developers.google.com/protocol-buffers/docs/proto3#json).
+        The duration to keep the cluster alive while idling (when no jobs are running). Passing this threshold will cause the cluster to be deleted. Minimum value is 5 minutes; maximum value is 14 days (see JSON representation of [JSON Mapping - Language Guide (proto 3)](https://developers.google.com/protocol-buffers/docs/proto3#json).
         """
         idle_start_time: NotRequired[pulumi.Input[str]]
         """
-        Output only. The time when cluster became idle (most recent job finished) and became eligible for deletion due to idleness (see JSON representation of (https://developers.google.com/protocol-buffers/docs/proto3#json)).
+        Output only. The time when cluster became idle (most recent job finished) and became eligible for deletion due to idleness (see JSON representation of [JSON Mapping - Language Guide (proto 3)](https://developers.google.com/protocol-buffers/docs/proto3#json)).
         """
 elif False:
     WorkflowTemplatePlacementManagedClusterConfigLifecycleConfigArgsDict: TypeAlias = Mapping[str, Any]
@@ -11262,10 +11262,10 @@ class WorkflowTemplatePlacementManagedClusterConfigLifecycleConfigArgs:
                  idle_delete_ttl: Optional[pulumi.Input[str]] = None,
                  idle_start_time: Optional[pulumi.Input[str]] = None):
         """
-        :param pulumi.Input[str] auto_delete_time: The time when cluster will be auto-deleted (see JSON representation of (https://developers.google.com/protocol-buffers/docs/proto3#json)).
-        :param pulumi.Input[str] auto_delete_ttl: The lifetime duration of cluster. The cluster will be auto-deleted at the end of this period. Minimum value is 10 minutes; maximum value is 14 days (see JSON representation of (https://developers.google.com/protocol-buffers/docs/proto3#json)).
-        :param pulumi.Input[str] idle_delete_ttl: The duration to keep the cluster alive while idling (when no jobs are running). Passing this threshold will cause the cluster to be deleted. Minimum value is 5 minutes; maximum value is 14 days (see JSON representation of (https://developers.google.com/protocol-buffers/docs/proto3#json).
-        :param pulumi.Input[str] idle_start_time: Output only. The time when cluster became idle (most recent job finished) and became eligible for deletion due to idleness (see JSON representation of (https://developers.google.com/protocol-buffers/docs/proto3#json)).
+        :param pulumi.Input[str] auto_delete_time: The time when cluster will be auto-deleted (see JSON representation of [JSON Mapping - Language Guide (proto 3)](https://developers.google.com/protocol-buffers/docs/proto3#json)).
+        :param pulumi.Input[str] auto_delete_ttl: The lifetime duration of cluster. The cluster will be auto-deleted at the end of this period. Minimum value is 10 minutes; maximum value is 14 days (see JSON representation of [JSON Mapping - Language Guide (proto 3)](https://developers.google.com/protocol-buffers/docs/proto3#json)).
+        :param pulumi.Input[str] idle_delete_ttl: The duration to keep the cluster alive while idling (when no jobs are running). Passing this threshold will cause the cluster to be deleted. Minimum value is 5 minutes; maximum value is 14 days (see JSON representation of [JSON Mapping - Language Guide (proto 3)](https://developers.google.com/protocol-buffers/docs/proto3#json).
+        :param pulumi.Input[str] idle_start_time: Output only. The time when cluster became idle (most recent job finished) and became eligible for deletion due to idleness (see JSON representation of [JSON Mapping - Language Guide (proto 3)](https://developers.google.com/protocol-buffers/docs/proto3#json)).
         """
         if auto_delete_time is not None:
             pulumi.set(__self__, "auto_delete_time", auto_delete_time)
@@ -11280,7 +11280,7 @@ class WorkflowTemplatePlacementManagedClusterConfigLifecycleConfigArgs:
     @pulumi.getter(name="autoDeleteTime")
     def auto_delete_time(self) -> Optional[pulumi.Input[str]]:
         """
-        The time when cluster will be auto-deleted (see JSON representation of (https://developers.google.com/protocol-buffers/docs/proto3#json)).
+        The time when cluster will be auto-deleted (see JSON representation of [JSON Mapping - Language Guide (proto 3)](https://developers.google.com/protocol-buffers/docs/proto3#json)).
         """
         return pulumi.get(self, "auto_delete_time")
 
@@ -11292,7 +11292,7 @@ class WorkflowTemplatePlacementManagedClusterConfigLifecycleConfigArgs:
     @pulumi.getter(name="autoDeleteTtl")
     def auto_delete_ttl(self) -> Optional[pulumi.Input[str]]:
         """
-        The lifetime duration of cluster. The cluster will be auto-deleted at the end of this period. Minimum value is 10 minutes; maximum value is 14 days (see JSON representation of (https://developers.google.com/protocol-buffers/docs/proto3#json)).
+        The lifetime duration of cluster. The cluster will be auto-deleted at the end of this period. Minimum value is 10 minutes; maximum value is 14 days (see JSON representation of [JSON Mapping - Language Guide (proto 3)](https://developers.google.com/protocol-buffers/docs/proto3#json)).
         """
         return pulumi.get(self, "auto_delete_ttl")
 
@@ -11304,7 +11304,7 @@ class WorkflowTemplatePlacementManagedClusterConfigLifecycleConfigArgs:
     @pulumi.getter(name="idleDeleteTtl")
     def idle_delete_ttl(self) -> Optional[pulumi.Input[str]]:
         """
-        The duration to keep the cluster alive while idling (when no jobs are running). Passing this threshold will cause the cluster to be deleted. Minimum value is 5 minutes; maximum value is 14 days (see JSON representation of (https://developers.google.com/protocol-buffers/docs/proto3#json).
+        The duration to keep the cluster alive while idling (when no jobs are running). Passing this threshold will cause the cluster to be deleted. Minimum value is 5 minutes; maximum value is 14 days (see JSON representation of [JSON Mapping - Language Guide (proto 3)](https://developers.google.com/protocol-buffers/docs/proto3#json).
         """
         return pulumi.get(self, "idle_delete_ttl")
 
@@ -11316,7 +11316,7 @@ class WorkflowTemplatePlacementManagedClusterConfigLifecycleConfigArgs:
     @pulumi.getter(name="idleStartTime")
     def idle_start_time(self) -> Optional[pulumi.Input[str]]:
         """
-        Output only. The time when cluster became idle (most recent job finished) and became eligible for deletion due to idleness (see JSON representation of (https://developers.google.com/protocol-buffers/docs/proto3#json)).
+        Output only. The time when cluster became idle (most recent job finished) and became eligible for deletion due to idleness (see JSON representation of [JSON Mapping - Language Guide (proto 3)](https://developers.google.com/protocol-buffers/docs/proto3#json)).
         """
         return pulumi.get(self, "idle_start_time")
 
@@ -11357,7 +11357,7 @@ if not MYPY:
         """
         min_cpu_platform: NotRequired[pulumi.Input[str]]
         """
-        Specifies the minimum cpu platform for the Instance Group. See (https://cloud.google.com/dataproc/docs/concepts/compute/dataproc-min-cpu).
+        Specifies the minimum cpu platform for the Instance Group. See [Minimum CPU platform](https://cloud.google.com/dataproc/docs/concepts/compute/dataproc-min-cpu).
         """
         num_instances: NotRequired[pulumi.Input[int]]
         """
@@ -11391,7 +11391,7 @@ class WorkflowTemplatePlacementManagedClusterConfigMasterConfigArgs:
         :param pulumi.Input[bool] is_preemptible: Output only. Specifies that this instance group contains preemptible instances.
         :param pulumi.Input[str] machine_type: The Compute Engine machine type used for cluster instances. A full URL, partial URI, or short name are valid. Examples: * `https://www.googleapis.com/compute/v1/projects/(https://cloud.google.com/dataproc/docs/concepts/configuring-clusters/auto-zone#using_auto_zone_placement) feature, you must use the short name of the machine type resource, for example, `n1-standard-2`.
         :param pulumi.Input[Sequence[pulumi.Input['WorkflowTemplatePlacementManagedClusterConfigMasterConfigManagedGroupConfigArgs']]] managed_group_configs: Output only. The config for Compute Engine Instance Group Manager that manages this group. This is only used for preemptible instance groups.
-        :param pulumi.Input[str] min_cpu_platform: Specifies the minimum cpu platform for the Instance Group. See (https://cloud.google.com/dataproc/docs/concepts/compute/dataproc-min-cpu).
+        :param pulumi.Input[str] min_cpu_platform: Specifies the minimum cpu platform for the Instance Group. See [Minimum CPU platform](https://cloud.google.com/dataproc/docs/concepts/compute/dataproc-min-cpu).
         :param pulumi.Input[int] num_instances: The number of VM instances in the instance group. For master instance groups, must be set to 1.
         :param pulumi.Input[str] preemptibility: Specifies the preemptibility of the instance group. The default value for master and worker groups is `NON_PREEMPTIBLE`. This default cannot be changed. The default value for secondary instances is `PREEMPTIBLE`. Possible values: PREEMPTIBILITY_UNSPECIFIED, NON_PREEMPTIBLE, PREEMPTIBLE
         """
@@ -11504,7 +11504,7 @@ class WorkflowTemplatePlacementManagedClusterConfigMasterConfigArgs:
     @pulumi.getter(name="minCpuPlatform")
     def min_cpu_platform(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies the minimum cpu platform for the Instance Group. See (https://cloud.google.com/dataproc/docs/concepts/compute/dataproc-min-cpu).
+        Specifies the minimum cpu platform for the Instance Group. See [Minimum CPU platform](https://cloud.google.com/dataproc/docs/concepts/compute/dataproc-min-cpu).
         """
         return pulumi.get(self, "min_cpu_platform")