pulumi-gcp 8.16.0a1738080576__py3-none-any.whl → 8.17.0__py3-none-any.whl

pulumi_gcp/gemini/repository_group_iam_policy.py

@@ -217,6 +217,135 @@ class RepositoryGroupIamPolicy(pulumi.CustomResource):
                  repository_group_id: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
+        Three different resources help you manage your IAM policy for Gemini for Google Cloud RepositoryGroup. Each of these resources serves a different use case:
+
+        * `gemini.RepositoryGroupIamPolicy`: Authoritative. Sets the IAM policy for the repositorygroup and replaces any existing policy already attached.
+        * `gemini.RepositoryGroupIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the repositorygroup are preserved.
+        * `gemini.RepositoryGroupIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the repositorygroup are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `gemini.RepositoryGroupIamPolicy`: Retrieves the IAM policy for the repositorygroup
+
+        > **Note:** `gemini.RepositoryGroupIamPolicy` **cannot** be used in conjunction with `gemini.RepositoryGroupIamBinding` and `gemini.RepositoryGroupIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `gemini.RepositoryGroupIamBinding` resources **can be** used in conjunction with `gemini.RepositoryGroupIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## gemini.RepositoryGroupIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/cloudaicompanion.repositoryGroupsUser",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.gemini.RepositoryGroupIamPolicy("policy",
+            project=example["project"],
+            location=example["location"],
+            code_repository_index=example["codeRepositoryIndex"],
+            repository_group_id=example["repositoryGroupId"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## gemini.RepositoryGroupIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.gemini.RepositoryGroupIamBinding("binding",
+            project=example["project"],
+            location=example["location"],
+            code_repository_index=example["codeRepositoryIndex"],
+            repository_group_id=example["repositoryGroupId"],
+            role="roles/cloudaicompanion.repositoryGroupsUser",
+            members=["user:jane@example.com"])
+        ```
+
+        ## gemini.RepositoryGroupIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.gemini.RepositoryGroupIamMember("member",
+            project=example["project"],
+            location=example["location"],
+            code_repository_index=example["codeRepositoryIndex"],
+            repository_group_id=example["repositoryGroupId"],
+            role="roles/cloudaicompanion.repositoryGroupsUser",
+            member="user:jane@example.com")
+        ```
+
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Gemini for Google Cloud RepositoryGroup
+        Three different resources help you manage your IAM policy for Gemini for Google Cloud RepositoryGroup. Each of these resources serves a different use case:
+
+        * `gemini.RepositoryGroupIamPolicy`: Authoritative. Sets the IAM policy for the repositorygroup and replaces any existing policy already attached.
+        * `gemini.RepositoryGroupIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the repositorygroup are preserved.
+        * `gemini.RepositoryGroupIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the repositorygroup are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `gemini.RepositoryGroupIamPolicy`: Retrieves the IAM policy for the repositorygroup
+
+        > **Note:** `gemini.RepositoryGroupIamPolicy` **cannot** be used in conjunction with `gemini.RepositoryGroupIamBinding` and `gemini.RepositoryGroupIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `gemini.RepositoryGroupIamBinding` resources **can be** used in conjunction with `gemini.RepositoryGroupIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## gemini.RepositoryGroupIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/cloudaicompanion.repositoryGroupsUser",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.gemini.RepositoryGroupIamPolicy("policy",
+            project=example["project"],
+            location=example["location"],
+            code_repository_index=example["codeRepositoryIndex"],
+            repository_group_id=example["repositoryGroupId"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## gemini.RepositoryGroupIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.gemini.RepositoryGroupIamBinding("binding",
+            project=example["project"],
+            location=example["location"],
+            code_repository_index=example["codeRepositoryIndex"],
+            repository_group_id=example["repositoryGroupId"],
+            role="roles/cloudaicompanion.repositoryGroupsUser",
+            members=["user:jane@example.com"])
+        ```
+
+        ## gemini.RepositoryGroupIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.gemini.RepositoryGroupIamMember("member",
+            project=example["project"],
+            location=example["location"],
+            code_repository_index=example["codeRepositoryIndex"],
+            repository_group_id=example["repositoryGroupId"],
+            role="roles/cloudaicompanion.repositoryGroupsUser",
+            member="user:jane@example.com")
+        ```
+
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms:
@@ -272,6 +401,135 @@ class RepositoryGroupIamPolicy(pulumi.CustomResource):
                  args: RepositoryGroupIamPolicyArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        Three different resources help you manage your IAM policy for Gemini for Google Cloud RepositoryGroup. Each of these resources serves a different use case:
+
+        * `gemini.RepositoryGroupIamPolicy`: Authoritative. Sets the IAM policy for the repositorygroup and replaces any existing policy already attached.
+        * `gemini.RepositoryGroupIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the repositorygroup are preserved.
+        * `gemini.RepositoryGroupIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the repositorygroup are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `gemini.RepositoryGroupIamPolicy`: Retrieves the IAM policy for the repositorygroup
+
+        > **Note:** `gemini.RepositoryGroupIamPolicy` **cannot** be used in conjunction with `gemini.RepositoryGroupIamBinding` and `gemini.RepositoryGroupIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `gemini.RepositoryGroupIamBinding` resources **can be** used in conjunction with `gemini.RepositoryGroupIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## gemini.RepositoryGroupIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/cloudaicompanion.repositoryGroupsUser",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.gemini.RepositoryGroupIamPolicy("policy",
+            project=example["project"],
+            location=example["location"],
+            code_repository_index=example["codeRepositoryIndex"],
+            repository_group_id=example["repositoryGroupId"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## gemini.RepositoryGroupIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.gemini.RepositoryGroupIamBinding("binding",
+            project=example["project"],
+            location=example["location"],
+            code_repository_index=example["codeRepositoryIndex"],
+            repository_group_id=example["repositoryGroupId"],
+            role="roles/cloudaicompanion.repositoryGroupsUser",
+            members=["user:jane@example.com"])
+        ```
+
+        ## gemini.RepositoryGroupIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.gemini.RepositoryGroupIamMember("member",
+            project=example["project"],
+            location=example["location"],
+            code_repository_index=example["codeRepositoryIndex"],
+            repository_group_id=example["repositoryGroupId"],
+            role="roles/cloudaicompanion.repositoryGroupsUser",
+            member="user:jane@example.com")
+        ```
+
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Gemini for Google Cloud RepositoryGroup
+        Three different resources help you manage your IAM policy for Gemini for Google Cloud RepositoryGroup. Each of these resources serves a different use case:
+
+        * `gemini.RepositoryGroupIamPolicy`: Authoritative. Sets the IAM policy for the repositorygroup and replaces any existing policy already attached.
+        * `gemini.RepositoryGroupIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the repositorygroup are preserved.
+        * `gemini.RepositoryGroupIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the repositorygroup are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `gemini.RepositoryGroupIamPolicy`: Retrieves the IAM policy for the repositorygroup
+
+        > **Note:** `gemini.RepositoryGroupIamPolicy` **cannot** be used in conjunction with `gemini.RepositoryGroupIamBinding` and `gemini.RepositoryGroupIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `gemini.RepositoryGroupIamBinding` resources **can be** used in conjunction with `gemini.RepositoryGroupIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## gemini.RepositoryGroupIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/cloudaicompanion.repositoryGroupsUser",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.gemini.RepositoryGroupIamPolicy("policy",
+            project=example["project"],
+            location=example["location"],
+            code_repository_index=example["codeRepositoryIndex"],
+            repository_group_id=example["repositoryGroupId"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## gemini.RepositoryGroupIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.gemini.RepositoryGroupIamBinding("binding",
+            project=example["project"],
+            location=example["location"],
+            code_repository_index=example["codeRepositoryIndex"],
+            repository_group_id=example["repositoryGroupId"],
+            role="roles/cloudaicompanion.repositoryGroupsUser",
+            members=["user:jane@example.com"])
+        ```
+
+        ## gemini.RepositoryGroupIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.gemini.RepositoryGroupIamMember("member",
+            project=example["project"],
+            location=example["location"],
+            code_repository_index=example["codeRepositoryIndex"],
+            repository_group_id=example["repositoryGroupId"],
+            role="roles/cloudaicompanion.repositoryGroupsUser",
+            member="user:jane@example.com")
+        ```
+
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms:

pulumi_gcp/kms/__init__.py

@@ -22,6 +22,7 @@ from .get_crypto_key_versions import *
 from .get_crypto_keys import *
 from .get_ekm_connection_iam_policy import *
 from .get_key_handle import *
+from .get_key_handles import *
 from .get_key_ring_iam_policy import *
 from .get_key_rings import *
 from .get_kms_crypto_key import *

pulumi_gcp/kms/get_key_handles.py

@@ -0,0 +1,172 @@
+# coding=utf-8
+# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from .. import _utilities
+from . import outputs
+
+__all__ = [
+    'GetKeyHandlesResult',
+    'AwaitableGetKeyHandlesResult',
+    'get_key_handles',
+    'get_key_handles_output',
+]
+
+@pulumi.output_type
+class GetKeyHandlesResult:
+    """
+    A collection of values returned by getKeyHandles.
+    """
+    def __init__(__self__, id=None, key_handles=None, location=None, project=None, resource_type_selector=None):
+        if id and not isinstance(id, str):
+            raise TypeError("Expected argument 'id' to be a str")
+        pulumi.set(__self__, "id", id)
+        if key_handles and not isinstance(key_handles, list):
+            raise TypeError("Expected argument 'key_handles' to be a list")
+        pulumi.set(__self__, "key_handles", key_handles)
+        if location and not isinstance(location, str):
+            raise TypeError("Expected argument 'location' to be a str")
+        pulumi.set(__self__, "location", location)
+        if project and not isinstance(project, str):
+            raise TypeError("Expected argument 'project' to be a str")
+        pulumi.set(__self__, "project", project)
+        if resource_type_selector and not isinstance(resource_type_selector, str):
+            raise TypeError("Expected argument 'resource_type_selector' to be a str")
+        pulumi.set(__self__, "resource_type_selector", resource_type_selector)
+
+    @property
+    @pulumi.getter
+    def id(self) -> str:
+        """
+        The provider-assigned unique ID for this managed resource.
+        """
+        return pulumi.get(self, "id")
+
+    @property
+    @pulumi.getter(name="keyHandles")
+    def key_handles(self) -> Sequence['outputs.GetKeyHandlesKeyHandleResult']:
+        return pulumi.get(self, "key_handles")
+
+    @property
+    @pulumi.getter
+    def location(self) -> str:
+        """
+        The location of the KMS Key and KeyHandle.
+        """
+        return pulumi.get(self, "location")
+
+    @property
+    @pulumi.getter
+    def project(self) -> Optional[str]:
+        """
+        The identifier of the project where KMS KeyHandle is created.
+        """
+        return pulumi.get(self, "project")
+
+    @property
+    @pulumi.getter(name="resourceTypeSelector")
+    def resource_type_selector(self) -> str:
+        """
+        Indicates the resource type that the resulting CryptoKey is meant to protect, e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types.
+        """
+        return pulumi.get(self, "resource_type_selector")
+
+
+class AwaitableGetKeyHandlesResult(GetKeyHandlesResult):
+    # pylint: disable=using-constant-test
+    def __await__(self):
+        if False:
+            yield self
+        return GetKeyHandlesResult(
+            id=self.id,
+            key_handles=self.key_handles,
+            location=self.location,
+            project=self.project,
+            resource_type_selector=self.resource_type_selector)
+
+
+def get_key_handles(location: Optional[str] = None,
+                    project: Optional[str] = None,
+                    resource_type_selector: Optional[str] = None,
+                    opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetKeyHandlesResult:
+    """
+    ## Example Usage
+
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    my_key_handles = gcp.kms.get_key_handles(project="resource-project-id",
+        location="us-central1",
+        resource_type_selector="storage.googleapis.com/Bucket")
+    ```
+
+
+    :param str location: The Google Cloud Platform location for the KeyHandle.
+           A full list of valid locations can be found by running `gcloud kms locations list`.
+    :param str project: The project in which the resource belongs. If it
+           is not provided, the provider project is used.
+    :param str resource_type_selector: The resource type by which to filter KeyHandle e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types. 
+           
+           - - -
+    """
+    __args__ = dict()
+    __args__['location'] = location
+    __args__['project'] = project
+    __args__['resourceTypeSelector'] = resource_type_selector
+    opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke('gcp:kms/getKeyHandles:getKeyHandles', __args__, opts=opts, typ=GetKeyHandlesResult).value
+
+    return AwaitableGetKeyHandlesResult(
+        id=pulumi.get(__ret__, 'id'),
+        key_handles=pulumi.get(__ret__, 'key_handles'),
+        location=pulumi.get(__ret__, 'location'),
+        project=pulumi.get(__ret__, 'project'),
+        resource_type_selector=pulumi.get(__ret__, 'resource_type_selector'))
+def get_key_handles_output(location: Optional[pulumi.Input[str]] = None,
+                           project: Optional[pulumi.Input[Optional[str]]] = None,
+                           resource_type_selector: Optional[pulumi.Input[str]] = None,
+                           opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetKeyHandlesResult]:
+    """
+    ## Example Usage
+
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    my_key_handles = gcp.kms.get_key_handles(project="resource-project-id",
+        location="us-central1",
+        resource_type_selector="storage.googleapis.com/Bucket")
+    ```
+
+
+    :param str location: The Google Cloud Platform location for the KeyHandle.
+           A full list of valid locations can be found by running `gcloud kms locations list`.
+    :param str project: The project in which the resource belongs. If it
+           is not provided, the provider project is used.
+    :param str resource_type_selector: The resource type by which to filter KeyHandle e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types. 
+           
+           - - -
+    """
+    __args__ = dict()
+    __args__['location'] = location
+    __args__['project'] = project
+    __args__['resourceTypeSelector'] = resource_type_selector
+    opts = pulumi.InvokeOutputOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke_output('gcp:kms/getKeyHandles:getKeyHandles', __args__, opts=opts, typ=GetKeyHandlesResult)
+    return __ret__.apply(lambda __response__: GetKeyHandlesResult(
+        id=pulumi.get(__response__, 'id'),
+        key_handles=pulumi.get(__response__, 'key_handles'),
+        location=pulumi.get(__response__, 'location'),
+        project=pulumi.get(__response__, 'project'),
+        resource_type_selector=pulumi.get(__response__, 'resource_type_selector')))

pulumi_gcp/kms/outputs.py

@@ -45,6 +45,7 @@ __all__ = [
     'GetKMSCryptoKeyPrimaryResult',
     'GetKMSCryptoKeyVersionPublicKeyResult',
     'GetKMSCryptoKeyVersionTemplateResult',
+    'GetKeyHandlesKeyHandleResult',
     'GetKeyRingsKeyRingResult',
 ]
 
@@ -1554,6 +1555,50 @@ class GetKMSCryptoKeyVersionTemplateResult(dict):
         return pulumi.get(self, "protection_level")
 
 
+@pulumi.output_type
+class GetKeyHandlesKeyHandleResult(dict):
+    def __init__(__self__, *,
+                 kms_key: str,
+                 name: str,
+                 resource_type_selector: str):
+        """
+        :param str kms_key: The identifier of the KMS Key created for the KeyHandle. Its format is `projects/{projectId}/locations/{location}/keyRings/{keyRingName}/cryptoKeys/{cryptoKeyName}`.
+        :param str name: The name of the KeyHandle. Its format is `projects/{projectId}/locations/{location}/keyHandles/{keyHandleName}`.
+        :param str resource_type_selector: The resource type by which to filter KeyHandle e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types. 
+               
+               - - -
+        """
+        pulumi.set(__self__, "kms_key", kms_key)
+        pulumi.set(__self__, "name", name)
+        pulumi.set(__self__, "resource_type_selector", resource_type_selector)
+
+    @property
+    @pulumi.getter(name="kmsKey")
+    def kms_key(self) -> str:
+        """
+        The identifier of the KMS Key created for the KeyHandle. Its format is `projects/{projectId}/locations/{location}/keyRings/{keyRingName}/cryptoKeys/{cryptoKeyName}`.
+        """
+        return pulumi.get(self, "kms_key")
+
+    @property
+    @pulumi.getter
+    def name(self) -> str:
+        """
+        The name of the KeyHandle. Its format is `projects/{projectId}/locations/{location}/keyHandles/{keyHandleName}`.
+        """
+        return pulumi.get(self, "name")
+
+    @property
+    @pulumi.getter(name="resourceTypeSelector")
+    def resource_type_selector(self) -> str:
+        """
+        The resource type by which to filter KeyHandle e.g. {SERVICE}.googleapis.com/{TYPE}. See documentation for supported resource types. 
+
+        - - -
+        """
+        return pulumi.get(self, "resource_type_selector")
+
+
 @pulumi.output_type
 class GetKeyRingsKeyRingResult(dict):
     def __init__(__self__, *,

pulumi_gcp/networksecurity/_inputs.py

@@ -93,6 +93,10 @@ __all__ = [
     'MirroringDeploymentGroupConnectedEndpointGroupArgsDict',
     'MirroringEndpointGroupAssociationLocationsDetailArgs',
     'MirroringEndpointGroupAssociationLocationsDetailArgsDict',
+    'SecurityProfileCustomInterceptProfileArgs',
+    'SecurityProfileCustomInterceptProfileArgsDict',
+    'SecurityProfileCustomMirroringProfileArgs',
+    'SecurityProfileCustomMirroringProfileArgsDict',
     'SecurityProfileThreatPreventionProfileArgs',
     'SecurityProfileThreatPreventionProfileArgsDict',
     'SecurityProfileThreatPreventionProfileSeverityOverrideArgs',
@@ -2760,6 +2764,74 @@ class MirroringEndpointGroupAssociationLocationsDetailArgs:
         pulumi.set(self, "state", value)
 
 
+if not MYPY:
+    class SecurityProfileCustomInterceptProfileArgsDict(TypedDict):
+        intercept_endpoint_group: pulumi.Input[str]
+        """
+        The Intercept Endpoint Group to which matching traffic should be intercepted.
+        Format: projects/{project_id}/locations/global/interceptEndpointGroups/{endpoint_group_id}
+        """
+elif False:
+    SecurityProfileCustomInterceptProfileArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class SecurityProfileCustomInterceptProfileArgs:
+    def __init__(__self__, *,
+                 intercept_endpoint_group: pulumi.Input[str]):
+        """
+        :param pulumi.Input[str] intercept_endpoint_group: The Intercept Endpoint Group to which matching traffic should be intercepted.
+               Format: projects/{project_id}/locations/global/interceptEndpointGroups/{endpoint_group_id}
+        """
+        pulumi.set(__self__, "intercept_endpoint_group", intercept_endpoint_group)
+
+    @property
+    @pulumi.getter(name="interceptEndpointGroup")
+    def intercept_endpoint_group(self) -> pulumi.Input[str]:
+        """
+        The Intercept Endpoint Group to which matching traffic should be intercepted.
+        Format: projects/{project_id}/locations/global/interceptEndpointGroups/{endpoint_group_id}
+        """
+        return pulumi.get(self, "intercept_endpoint_group")
+
+    @intercept_endpoint_group.setter
+    def intercept_endpoint_group(self, value: pulumi.Input[str]):
+        pulumi.set(self, "intercept_endpoint_group", value)
+
+
+if not MYPY:
+    class SecurityProfileCustomMirroringProfileArgsDict(TypedDict):
+        mirroring_endpoint_group: pulumi.Input[str]
+        """
+        The Mirroring Endpoint Group to which matching traffic should be mirrored.
+        Format: projects/{project_id}/locations/global/mirroringEndpointGroups/{endpoint_group_id}
+        """
+elif False:
+    SecurityProfileCustomMirroringProfileArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class SecurityProfileCustomMirroringProfileArgs:
+    def __init__(__self__, *,
+                 mirroring_endpoint_group: pulumi.Input[str]):
+        """
+        :param pulumi.Input[str] mirroring_endpoint_group: The Mirroring Endpoint Group to which matching traffic should be mirrored.
+               Format: projects/{project_id}/locations/global/mirroringEndpointGroups/{endpoint_group_id}
+        """
+        pulumi.set(__self__, "mirroring_endpoint_group", mirroring_endpoint_group)
+
+    @property
+    @pulumi.getter(name="mirroringEndpointGroup")
+    def mirroring_endpoint_group(self) -> pulumi.Input[str]:
+        """
+        The Mirroring Endpoint Group to which matching traffic should be mirrored.
+        Format: projects/{project_id}/locations/global/mirroringEndpointGroups/{endpoint_group_id}
+        """
+        return pulumi.get(self, "mirroring_endpoint_group")
+
+    @mirroring_endpoint_group.setter
+    def mirroring_endpoint_group(self, value: pulumi.Input[str]):
+        pulumi.set(self, "mirroring_endpoint_group", value)
+
+
 if not MYPY:
     class SecurityProfileThreatPreventionProfileArgsDict(TypedDict):
         severity_overrides: NotRequired[pulumi.Input[Sequence[pulumi.Input['SecurityProfileThreatPreventionProfileSeverityOverrideArgsDict']]]]