pulumi-gcp 8.11.0a1734348982__py3-none-any.whl → 8.12.0__py3-none-any.whl

pulumi_gcp/gkehub/namespace.py

@@ -428,9 +428,9 @@ class Namespace(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_2605")
+        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_34535")
         namespace = gcp.gkehub.Namespace("namespace",
-            scope_namespace_id="tf-test-namespace_34535",
+            scope_namespace_id="tf-test-namespace_22375",
             scope_id=scope.scope_id,
             scope=scope.name,
             namespace_labels={
@@ -513,9 +513,9 @@ class Namespace(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_2605")
+        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_34535")
         namespace = gcp.gkehub.Namespace("namespace",
-            scope_namespace_id="tf-test-namespace_34535",
+            scope_namespace_id="tf-test-namespace_22375",
             scope_id=scope.scope_id,
             scope=scope.name,
             namespace_labels={

pulumi_gcp/gkehub/outputs.py

@@ -1146,7 +1146,7 @@ class FeatureFleetDefaultMemberConfigPolicycontrollerPolicyControllerHubConfigPo
                  installation: Optional[str] = None):
         """
         :param str installation: Configures the manner in which the template library is installed on the cluster.
-               Possible values are: `INSTALATION_UNSPECIFIED`, `NOT_INSTALLED`, `ALL`.
+               Possible values are: `INSTALLATION_UNSPECIFIED`, `NOT_INSTALLED`, `ALL`.
         """
         if installation is not None:
             pulumi.set(__self__, "installation", installation)
@@ -1156,7 +1156,7 @@ class FeatureFleetDefaultMemberConfigPolicycontrollerPolicyControllerHubConfigPo
     def installation(self) -> Optional[str]:
         """
         Configures the manner in which the template library is installed on the cluster.
-        Possible values are: `INSTALATION_UNSPECIFIED`, `NOT_INSTALLED`, `ALL`.
+        Possible values are: `INSTALLATION_UNSPECIFIED`, `NOT_INSTALLED`, `ALL`.
         """
         return pulumi.get(self, "installation")
 
@@ -1361,6 +1361,8 @@ class FeatureMembershipConfigmanagementConfigSync(dict):
             suggest = "prevent_drift"
         elif key == "sourceFormat":
             suggest = "source_format"
+        elif key == "stopSyncing":
+            suggest = "stop_syncing"
 
         if suggest:
             pulumi.log.warn(f"Key '{key}' not found in FeatureMembershipConfigmanagementConfigSync. Access the value via the '{suggest}' property getter instead.")
@@ -1379,16 +1381,18 @@ class FeatureMembershipConfigmanagementConfigSync(dict):
                  metrics_gcp_service_account_email: Optional[str] = None,
                  oci: Optional['outputs.FeatureMembershipConfigmanagementConfigSyncOci'] = None,
                  prevent_drift: Optional[bool] = None,
-                 source_format: Optional[str] = None):
+                 source_format: Optional[str] = None,
+                 stop_syncing: Optional[bool] = None):
         """
         :param bool enabled: Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. If omitted, ConfigSync resources will be managed depends on the presence of the git or oci field.
         :param 'FeatureMembershipConfigmanagementConfigSyncGitArgs' git: (Optional) Structure is documented below.
-        :param str metrics_gcp_service_account_email: The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring. The GSA should have the Monitoring Metric Writer(roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount `default` in the namespace `config-management-monitoring` should be bound to the GSA.
+        :param str metrics_gcp_service_account_email: Deprecated: If Workload Identity Federation for GKE is enabled, Google Cloud Service Account is no longer needed for exporting Config Sync metrics: https://cloud.google.com/kubernetes-engine/enterprise/config-sync/docs/how-to/monitor-config-sync-cloud-monitoring#custom-monitoring.
         :param 'FeatureMembershipConfigmanagementConfigSyncOciArgs' oci: (Optional) Supported from Config Sync versions 1.12.0 onwards. Structure is documented below.
                
                Use either `git` or `oci` config option.
-        :param bool prevent_drift: Supported from Config Sync versions 1.10.0 onwards. Set to true to enable the Config Sync admission webhook to prevent drifts. If set to "false", disables the Config Sync admission webhook and does not prevent drifts.
+        :param bool prevent_drift: Supported from Config Sync versions 1.10.0 onwards. Set to `true` to enable the Config Sync admission webhook to prevent drifts. If set to `false`, disables the Config Sync admission webhook and does not prevent drifts.
         :param str source_format: Specifies whether the Config Sync Repo is in "hierarchical" or "unstructured" mode.
+        :param bool stop_syncing: Set to `true` to stop syncing configurations for a single cluster. This field is only available on clusters using Config Sync [auto-upgrades](http://cloud/kubernetes-engine/enterprise/config-sync/docs/how-to/upgrade-config-sync#auto-upgrade-config) or on Config Sync version 1.20.0 or later. Defaults: `false`.
         """
         if enabled is not None:
             pulumi.set(__self__, "enabled", enabled)
@@ -1402,6 +1406,8 @@ class FeatureMembershipConfigmanagementConfigSync(dict):
             pulumi.set(__self__, "prevent_drift", prevent_drift)
         if source_format is not None:
             pulumi.set(__self__, "source_format", source_format)
+        if stop_syncing is not None:
+            pulumi.set(__self__, "stop_syncing", stop_syncing)
 
     @property
     @pulumi.getter
@@ -1423,7 +1429,7 @@ class FeatureMembershipConfigmanagementConfigSync(dict):
     @pulumi.getter(name="metricsGcpServiceAccountEmail")
     def metrics_gcp_service_account_email(self) -> Optional[str]:
         """
-        The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring. The GSA should have the Monitoring Metric Writer(roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount `default` in the namespace `config-management-monitoring` should be bound to the GSA.
+        Deprecated: If Workload Identity Federation for GKE is enabled, Google Cloud Service Account is no longer needed for exporting Config Sync metrics: https://cloud.google.com/kubernetes-engine/enterprise/config-sync/docs/how-to/monitor-config-sync-cloud-monitoring#custom-monitoring.
         """
         return pulumi.get(self, "metrics_gcp_service_account_email")
 
@@ -1441,7 +1447,7 @@ class FeatureMembershipConfigmanagementConfigSync(dict):
     @pulumi.getter(name="preventDrift")
     def prevent_drift(self) -> Optional[bool]:
         """
-        Supported from Config Sync versions 1.10.0 onwards. Set to true to enable the Config Sync admission webhook to prevent drifts. If set to "false", disables the Config Sync admission webhook and does not prevent drifts.
+        Supported from Config Sync versions 1.10.0 onwards. Set to `true` to enable the Config Sync admission webhook to prevent drifts. If set to `false`, disables the Config Sync admission webhook and does not prevent drifts.
         """
         return pulumi.get(self, "prevent_drift")
 
@@ -1453,6 +1459,14 @@ class FeatureMembershipConfigmanagementConfigSync(dict):
         """
         return pulumi.get(self, "source_format")
 
+    @property
+    @pulumi.getter(name="stopSyncing")
+    def stop_syncing(self) -> Optional[bool]:
+        """
+        Set to `true` to stop syncing configurations for a single cluster. This field is only available on clusters using Config Sync [auto-upgrades](http://cloud/kubernetes-engine/enterprise/config-sync/docs/how-to/upgrade-config-sync#auto-upgrade-config) or on Config Sync version 1.20.0 or later. Defaults: `false`.
+        """
+        return pulumi.get(self, "stop_syncing")
+
 
 @pulumi.output_type
 class FeatureMembershipConfigmanagementConfigSyncGit(dict):

pulumi_gcp/gkehub/scope_rbac_role_binding.py

@@ -429,9 +429,9 @@ class ScopeRbacRoleBinding(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_22375")
+        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_29439")
         scope_rbac_role_binding = gcp.gkehub.ScopeRbacRoleBinding("scope_rbac_role_binding",
-            scope_rbac_role_binding_id="tf-test-scope-rbac-role-binding_29439",
+            scope_rbac_role_binding_id="tf-test-scope-rbac-role-binding_87786",
             scope_id=scope.scope_id,
             user="test-email@gmail.com",
             role={
@@ -504,9 +504,9 @@ class ScopeRbacRoleBinding(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_22375")
+        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_29439")
         scope_rbac_role_binding = gcp.gkehub.ScopeRbacRoleBinding("scope_rbac_role_binding",
-            scope_rbac_role_binding_id="tf-test-scope-rbac-role-binding_29439",
+            scope_rbac_role_binding_id="tf-test-scope-rbac-role-binding_87786",
             scope_id=scope.scope_id,
             user="test-email@gmail.com",
             role={

pulumi_gcp/iam/__init__.py

@@ -14,6 +14,7 @@ from .get_workload_identity_pool import *
 from .get_workload_identity_pool_provider import *
 from .organizations_policy_binding import *
 from .principal_access_boundary_policy import *
+from .projects_policy_binding import *
 from .workforce_pool import *
 from .workforce_pool_provider import *
 from .workload_identity_pool import *

pulumi_gcp/iam/_inputs.py

@@ -39,6 +39,10 @@ __all__ = [
     'PrincipalAccessBoundaryPolicyDetailsArgsDict',
     'PrincipalAccessBoundaryPolicyDetailsRuleArgs',
     'PrincipalAccessBoundaryPolicyDetailsRuleArgsDict',
+    'ProjectsPolicyBindingConditionArgs',
+    'ProjectsPolicyBindingConditionArgsDict',
+    'ProjectsPolicyBindingTargetArgs',
+    'ProjectsPolicyBindingTargetArgsDict',
     'WorkforcePoolAccessRestrictionsArgs',
     'WorkforcePoolAccessRestrictionsArgsDict',
     'WorkforcePoolAccessRestrictionsAllowedServiceArgs',
@@ -1026,6 +1030,139 @@ class PrincipalAccessBoundaryPolicyDetailsRuleArgs:
         pulumi.set(self, "description", value)
 
 
+if not MYPY:
+    class ProjectsPolicyBindingConditionArgsDict(TypedDict):
+        description: NotRequired[pulumi.Input[str]]
+        """
+        Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
+        """
+        expression: NotRequired[pulumi.Input[str]]
+        """
+        Textual representation of an expression in Common Expression Language syntax.
+        """
+        location: NotRequired[pulumi.Input[str]]
+        """
+        Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
+        """
+        title: NotRequired[pulumi.Input[str]]
+        """
+        Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
+        """
+elif False:
+    ProjectsPolicyBindingConditionArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ProjectsPolicyBindingConditionArgs:
+    def __init__(__self__, *,
+                 description: Optional[pulumi.Input[str]] = None,
+                 expression: Optional[pulumi.Input[str]] = None,
+                 location: Optional[pulumi.Input[str]] = None,
+                 title: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] description: Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
+        :param pulumi.Input[str] expression: Textual representation of an expression in Common Expression Language syntax.
+        :param pulumi.Input[str] location: Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
+        :param pulumi.Input[str] title: Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
+        """
+        if description is not None:
+            pulumi.set(__self__, "description", description)
+        if expression is not None:
+            pulumi.set(__self__, "expression", expression)
+        if location is not None:
+            pulumi.set(__self__, "location", location)
+        if title is not None:
+            pulumi.set(__self__, "title", title)
+
+    @property
+    @pulumi.getter
+    def description(self) -> Optional[pulumi.Input[str]]:
+        """
+        Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
+        """
+        return pulumi.get(self, "description")
+
+    @description.setter
+    def description(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "description", value)
+
+    @property
+    @pulumi.getter
+    def expression(self) -> Optional[pulumi.Input[str]]:
+        """
+        Textual representation of an expression in Common Expression Language syntax.
+        """
+        return pulumi.get(self, "expression")
+
+    @expression.setter
+    def expression(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "expression", value)
+
+    @property
+    @pulumi.getter
+    def location(self) -> Optional[pulumi.Input[str]]:
+        """
+        Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
+        """
+        return pulumi.get(self, "location")
+
+    @location.setter
+    def location(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "location", value)
+
+    @property
+    @pulumi.getter
+    def title(self) -> Optional[pulumi.Input[str]]:
+        """
+        Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
+        """
+        return pulumi.get(self, "title")
+
+    @title.setter
+    def title(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "title", value)
+
+
+if not MYPY:
+    class ProjectsPolicyBindingTargetArgsDict(TypedDict):
+        principal_set: NotRequired[pulumi.Input[str]]
+        """
+        Required. Immutable. The resource name of the policy to be bound.
+        The binding parent and policy must belong to the same Organization (or Project).
+
+        - - -
+        """
+elif False:
+    ProjectsPolicyBindingTargetArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ProjectsPolicyBindingTargetArgs:
+    def __init__(__self__, *,
+                 principal_set: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] principal_set: Required. Immutable. The resource name of the policy to be bound.
+               The binding parent and policy must belong to the same Organization (or Project).
+               
+               - - -
+        """
+        if principal_set is not None:
+            pulumi.set(__self__, "principal_set", principal_set)
+
+    @property
+    @pulumi.getter(name="principalSet")
+    def principal_set(self) -> Optional[pulumi.Input[str]]:
+        """
+        Required. Immutable. The resource name of the policy to be bound.
+        The binding parent and policy must belong to the same Organization (or Project).
+
+        - - -
+        """
+        return pulumi.get(self, "principal_set")
+
+    @principal_set.setter
+    def principal_set(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "principal_set", value)
+
+
 if not MYPY:
     class WorkforcePoolAccessRestrictionsArgsDict(TypedDict):
         allowed_services: NotRequired[pulumi.Input[Sequence[pulumi.Input['WorkforcePoolAccessRestrictionsAllowedServiceArgsDict']]]]

pulumi_gcp/iam/folders_policy_binding.py

@@ -497,6 +497,14 @@ class FoldersPolicyBinding(pulumi.CustomResource):
                  target: Optional[pulumi.Input[Union['FoldersPolicyBindingTargetArgs', 'FoldersPolicyBindingTargetArgsDict']]] = None,
                  __props__=None):
         """
+        A policy binding to a folder
+
+        To get more information about FoldersPolicyBinding, see:
+
+        * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/folders.locations.policyBindings)
+        * How-to Guides
+            * [Apply a policy binding](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create#create_binding)
+
         ## Example Usage
 
         ### Iam Folders Policy Binding
@@ -581,6 +589,14 @@ class FoldersPolicyBinding(pulumi.CustomResource):
                  args: FoldersPolicyBindingArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        A policy binding to a folder
+
+        To get more information about FoldersPolicyBinding, see:
+
+        * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/folders.locations.policyBindings)
+        * How-to Guides
+            * [Apply a policy binding](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create#create_binding)
+
         ## Example Usage
 
         ### Iam Folders Policy Binding

pulumi_gcp/iam/organizations_policy_binding.py

@@ -497,6 +497,14 @@ class OrganizationsPolicyBinding(pulumi.CustomResource):
                  target: Optional[pulumi.Input[Union['OrganizationsPolicyBindingTargetArgs', 'OrganizationsPolicyBindingTargetArgsDict']]] = None,
                  __props__=None):
         """
+        A policy binding to an organizations
+
+        To get more information about OrganizationsPolicyBinding, see:
+
+        * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/organizations.locations.policyBindings)
+        * How-to Guides
+            * [Apply a policy binding](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create#create_binding)
+
         ## Example Usage
 
         ### Iam Organizations Policy Binding
@@ -573,6 +581,14 @@ class OrganizationsPolicyBinding(pulumi.CustomResource):
                  args: OrganizationsPolicyBindingArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        A policy binding to an organizations
+
+        To get more information about OrganizationsPolicyBinding, see:
+
+        * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/organizations.locations.policyBindings)
+        * How-to Guides
+            * [Apply a policy binding](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create#create_binding)
+
         ## Example Usage
 
         ### Iam Organizations Policy Binding

pulumi_gcp/iam/outputs.py

@@ -28,6 +28,8 @@ __all__ = [
     'OrganizationsPolicyBindingTarget',
     'PrincipalAccessBoundaryPolicyDetails',
     'PrincipalAccessBoundaryPolicyDetailsRule',
+    'ProjectsPolicyBindingCondition',
+    'ProjectsPolicyBindingTarget',
     'WorkforcePoolAccessRestrictions',
     'WorkforcePoolAccessRestrictionsAllowedService',
     'WorkforcePoolProviderExtraAttributesOauth2Client',
@@ -758,6 +760,103 @@ class PrincipalAccessBoundaryPolicyDetailsRule(dict):
         return pulumi.get(self, "description")
 
 
+@pulumi.output_type
+class ProjectsPolicyBindingCondition(dict):
+    def __init__(__self__, *,
+                 description: Optional[str] = None,
+                 expression: Optional[str] = None,
+                 location: Optional[str] = None,
+                 title: Optional[str] = None):
+        """
+        :param str description: Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
+        :param str expression: Textual representation of an expression in Common Expression Language syntax.
+        :param str location: Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
+        :param str title: Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
+        """
+        if description is not None:
+            pulumi.set(__self__, "description", description)
+        if expression is not None:
+            pulumi.set(__self__, "expression", expression)
+        if location is not None:
+            pulumi.set(__self__, "location", location)
+        if title is not None:
+            pulumi.set(__self__, "title", title)
+
+    @property
+    @pulumi.getter
+    def description(self) -> Optional[str]:
+        """
+        Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
+        """
+        return pulumi.get(self, "description")
+
+    @property
+    @pulumi.getter
+    def expression(self) -> Optional[str]:
+        """
+        Textual representation of an expression in Common Expression Language syntax.
+        """
+        return pulumi.get(self, "expression")
+
+    @property
+    @pulumi.getter
+    def location(self) -> Optional[str]:
+        """
+        Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
+        """
+        return pulumi.get(self, "location")
+
+    @property
+    @pulumi.getter
+    def title(self) -> Optional[str]:
+        """
+        Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
+        """
+        return pulumi.get(self, "title")
+
+
+@pulumi.output_type
+class ProjectsPolicyBindingTarget(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "principalSet":
+            suggest = "principal_set"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in ProjectsPolicyBindingTarget. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        ProjectsPolicyBindingTarget.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        ProjectsPolicyBindingTarget.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 principal_set: Optional[str] = None):
+        """
+        :param str principal_set: Required. Immutable. The resource name of the policy to be bound.
+               The binding parent and policy must belong to the same Organization (or Project).
+               
+               - - -
+        """
+        if principal_set is not None:
+            pulumi.set(__self__, "principal_set", principal_set)
+
+    @property
+    @pulumi.getter(name="principalSet")
+    def principal_set(self) -> Optional[str]:
+        """
+        Required. Immutable. The resource name of the policy to be bound.
+        The binding parent and policy must belong to the same Organization (or Project).
+
+        - - -
+        """
+        return pulumi.get(self, "principal_set")
+
+
 @pulumi.output_type
 class WorkforcePoolAccessRestrictions(dict):
     @staticmethod

pulumi_gcp/iam/principal_access_boundary_policy.py

@@ -366,6 +366,14 @@ class PrincipalAccessBoundaryPolicy(pulumi.CustomResource):
                  principal_access_boundary_policy_id: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
+        An IAM Principal Access Boundary Policy resource
+
+        To get more information about PrincipalAccessBoundaryPolicy, see:
+
+        * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/organizations.locations.principalAccessBoundaryPolicies)
+        * How-to Guides
+            * [Create and apply Principal Access Boundaries](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create)
+
         ## Example Usage
 
         ### Iam Principal Access Boundary Policy
@@ -424,6 +432,14 @@ class PrincipalAccessBoundaryPolicy(pulumi.CustomResource):
                  args: PrincipalAccessBoundaryPolicyArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        An IAM Principal Access Boundary Policy resource
+
+        To get more information about PrincipalAccessBoundaryPolicy, see:
+
+        * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/organizations.locations.principalAccessBoundaryPolicies)
+        * How-to Guides
+            * [Create and apply Principal Access Boundaries](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create)
+
         ## Example Usage
 
         ### Iam Principal Access Boundary Policy