pulumi-gcp 8.17.0a1738274430__py3-none-any.whl → 8.18.0__py3-none-any.whl

pulumi_gcp/pubsub/_inputs.py

@@ -59,6 +59,10 @@ __all__ = [
     'TopicIngestionDataSourceSettingsArgsDict',
     'TopicIngestionDataSourceSettingsAwsKinesisArgs',
     'TopicIngestionDataSourceSettingsAwsKinesisArgsDict',
+    'TopicIngestionDataSourceSettingsAwsMskArgs',
+    'TopicIngestionDataSourceSettingsAwsMskArgsDict',
+    'TopicIngestionDataSourceSettingsAzureEventHubsArgs',
+    'TopicIngestionDataSourceSettingsAzureEventHubsArgsDict',
     'TopicIngestionDataSourceSettingsCloudStorageArgs',
     'TopicIngestionDataSourceSettingsCloudStorageArgsDict',
     'TopicIngestionDataSourceSettingsCloudStorageAvroFormatArgs',
@@ -67,6 +71,8 @@ __all__ = [
     'TopicIngestionDataSourceSettingsCloudStoragePubsubAvroFormatArgsDict',
     'TopicIngestionDataSourceSettingsCloudStorageTextFormatArgs',
     'TopicIngestionDataSourceSettingsCloudStorageTextFormatArgsDict',
+    'TopicIngestionDataSourceSettingsConfluentCloudArgs',
+    'TopicIngestionDataSourceSettingsConfluentCloudArgsDict',
     'TopicIngestionDataSourceSettingsPlatformLogsSettingsArgs',
     'TopicIngestionDataSourceSettingsPlatformLogsSettingsArgsDict',
     'TopicMessageStoragePolicyArgs',
@@ -1508,11 +1514,26 @@ if not MYPY:
         Settings for ingestion from Amazon Kinesis Data Streams.
         Structure is documented below.
         """
+        aws_msk: NotRequired[pulumi.Input['TopicIngestionDataSourceSettingsAwsMskArgsDict']]
+        """
+        Settings for ingestion from Amazon Managed Streaming for Apache Kafka.
+        Structure is documented below.
+        """
+        azure_event_hubs: NotRequired[pulumi.Input['TopicIngestionDataSourceSettingsAzureEventHubsArgsDict']]
+        """
+        Settings for ingestion from Azure Event Hubs.
+        Structure is documented below.
+        """
         cloud_storage: NotRequired[pulumi.Input['TopicIngestionDataSourceSettingsCloudStorageArgsDict']]
         """
         Settings for ingestion from Cloud Storage.
         Structure is documented below.
         """
+        confluent_cloud: NotRequired[pulumi.Input['TopicIngestionDataSourceSettingsConfluentCloudArgsDict']]
+        """
+        Settings for ingestion from Confluent Cloud.
+        Structure is documented below.
+        """
         platform_logs_settings: NotRequired[pulumi.Input['TopicIngestionDataSourceSettingsPlatformLogsSettingsArgsDict']]
         """
         Settings for Platform Logs regarding ingestion to Pub/Sub. If unset,
@@ -1526,21 +1547,36 @@ elif False:
 class TopicIngestionDataSourceSettingsArgs:
     def __init__(__self__, *,
                  aws_kinesis: Optional[pulumi.Input['TopicIngestionDataSourceSettingsAwsKinesisArgs']] = None,
+                 aws_msk: Optional[pulumi.Input['TopicIngestionDataSourceSettingsAwsMskArgs']] = None,
+                 azure_event_hubs: Optional[pulumi.Input['TopicIngestionDataSourceSettingsAzureEventHubsArgs']] = None,
                  cloud_storage: Optional[pulumi.Input['TopicIngestionDataSourceSettingsCloudStorageArgs']] = None,
+                 confluent_cloud: Optional[pulumi.Input['TopicIngestionDataSourceSettingsConfluentCloudArgs']] = None,
                  platform_logs_settings: Optional[pulumi.Input['TopicIngestionDataSourceSettingsPlatformLogsSettingsArgs']] = None):
         """
         :param pulumi.Input['TopicIngestionDataSourceSettingsAwsKinesisArgs'] aws_kinesis: Settings for ingestion from Amazon Kinesis Data Streams.
                Structure is documented below.
+        :param pulumi.Input['TopicIngestionDataSourceSettingsAwsMskArgs'] aws_msk: Settings for ingestion from Amazon Managed Streaming for Apache Kafka.
+               Structure is documented below.
+        :param pulumi.Input['TopicIngestionDataSourceSettingsAzureEventHubsArgs'] azure_event_hubs: Settings for ingestion from Azure Event Hubs.
+               Structure is documented below.
         :param pulumi.Input['TopicIngestionDataSourceSettingsCloudStorageArgs'] cloud_storage: Settings for ingestion from Cloud Storage.
                Structure is documented below.
+        :param pulumi.Input['TopicIngestionDataSourceSettingsConfluentCloudArgs'] confluent_cloud: Settings for ingestion from Confluent Cloud.
+               Structure is documented below.
         :param pulumi.Input['TopicIngestionDataSourceSettingsPlatformLogsSettingsArgs'] platform_logs_settings: Settings for Platform Logs regarding ingestion to Pub/Sub. If unset,
                no Platform Logs will be generated.'
                Structure is documented below.
         """
         if aws_kinesis is not None:
             pulumi.set(__self__, "aws_kinesis", aws_kinesis)
+        if aws_msk is not None:
+            pulumi.set(__self__, "aws_msk", aws_msk)
+        if azure_event_hubs is not None:
+            pulumi.set(__self__, "azure_event_hubs", azure_event_hubs)
         if cloud_storage is not None:
             pulumi.set(__self__, "cloud_storage", cloud_storage)
+        if confluent_cloud is not None:
+            pulumi.set(__self__, "confluent_cloud", confluent_cloud)
         if platform_logs_settings is not None:
             pulumi.set(__self__, "platform_logs_settings", platform_logs_settings)
 
@@ -1557,6 +1593,32 @@ class TopicIngestionDataSourceSettingsArgs:
     def aws_kinesis(self, value: Optional[pulumi.Input['TopicIngestionDataSourceSettingsAwsKinesisArgs']]):
         pulumi.set(self, "aws_kinesis", value)
 
+    @property
+    @pulumi.getter(name="awsMsk")
+    def aws_msk(self) -> Optional[pulumi.Input['TopicIngestionDataSourceSettingsAwsMskArgs']]:
+        """
+        Settings for ingestion from Amazon Managed Streaming for Apache Kafka.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "aws_msk")
+
+    @aws_msk.setter
+    def aws_msk(self, value: Optional[pulumi.Input['TopicIngestionDataSourceSettingsAwsMskArgs']]):
+        pulumi.set(self, "aws_msk", value)
+
+    @property
+    @pulumi.getter(name="azureEventHubs")
+    def azure_event_hubs(self) -> Optional[pulumi.Input['TopicIngestionDataSourceSettingsAzureEventHubsArgs']]:
+        """
+        Settings for ingestion from Azure Event Hubs.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "azure_event_hubs")
+
+    @azure_event_hubs.setter
+    def azure_event_hubs(self, value: Optional[pulumi.Input['TopicIngestionDataSourceSettingsAzureEventHubsArgs']]):
+        pulumi.set(self, "azure_event_hubs", value)
+
     @property
     @pulumi.getter(name="cloudStorage")
     def cloud_storage(self) -> Optional[pulumi.Input['TopicIngestionDataSourceSettingsCloudStorageArgs']]:
@@ -1570,6 +1632,19 @@ class TopicIngestionDataSourceSettingsArgs:
     def cloud_storage(self, value: Optional[pulumi.Input['TopicIngestionDataSourceSettingsCloudStorageArgs']]):
         pulumi.set(self, "cloud_storage", value)
 
+    @property
+    @pulumi.getter(name="confluentCloud")
+    def confluent_cloud(self) -> Optional[pulumi.Input['TopicIngestionDataSourceSettingsConfluentCloudArgs']]:
+        """
+        Settings for ingestion from Confluent Cloud.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "confluent_cloud")
+
+    @confluent_cloud.setter
+    def confluent_cloud(self, value: Optional[pulumi.Input['TopicIngestionDataSourceSettingsConfluentCloudArgs']]):
+        pulumi.set(self, "confluent_cloud", value)
+
     @property
     @pulumi.getter(name="platformLogsSettings")
     def platform_logs_settings(self) -> Optional[pulumi.Input['TopicIngestionDataSourceSettingsPlatformLogsSettingsArgs']]:
@@ -1694,6 +1769,267 @@ class TopicIngestionDataSourceSettingsAwsKinesisArgs:
         pulumi.set(self, "stream_arn", value)
 
 
+if not MYPY:
+    class TopicIngestionDataSourceSettingsAwsMskArgsDict(TypedDict):
+        aws_role_arn: pulumi.Input[str]
+        """
+        AWS role ARN to be used for Federated Identity authentication with
+        MSK. Check the Pub/Sub docs for how to set up this role and the
+        required permissions that need to be attached to it.
+        """
+        cluster_arn: pulumi.Input[str]
+        """
+        ARN that uniquely identifies the MSK cluster.
+        """
+        gcp_service_account: pulumi.Input[str]
+        """
+        The GCP service account to be used for Federated Identity authentication
+        with MSK (via a `AssumeRoleWithWebIdentity` call for the provided
+        role). The `awsRoleArn` must be set up with `accounts.google.com:sub`
+        equals to this service account number.
+        """
+        topic: pulumi.Input[str]
+        """
+        The name of the MSK topic that Pub/Sub will import from.
+        """
+elif False:
+    TopicIngestionDataSourceSettingsAwsMskArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class TopicIngestionDataSourceSettingsAwsMskArgs:
+    def __init__(__self__, *,
+                 aws_role_arn: pulumi.Input[str],
+                 cluster_arn: pulumi.Input[str],
+                 gcp_service_account: pulumi.Input[str],
+                 topic: pulumi.Input[str]):
+        """
+        :param pulumi.Input[str] aws_role_arn: AWS role ARN to be used for Federated Identity authentication with
+               MSK. Check the Pub/Sub docs for how to set up this role and the
+               required permissions that need to be attached to it.
+        :param pulumi.Input[str] cluster_arn: ARN that uniquely identifies the MSK cluster.
+        :param pulumi.Input[str] gcp_service_account: The GCP service account to be used for Federated Identity authentication
+               with MSK (via a `AssumeRoleWithWebIdentity` call for the provided
+               role). The `awsRoleArn` must be set up with `accounts.google.com:sub`
+               equals to this service account number.
+        :param pulumi.Input[str] topic: The name of the MSK topic that Pub/Sub will import from.
+        """
+        pulumi.set(__self__, "aws_role_arn", aws_role_arn)
+        pulumi.set(__self__, "cluster_arn", cluster_arn)
+        pulumi.set(__self__, "gcp_service_account", gcp_service_account)
+        pulumi.set(__self__, "topic", topic)
+
+    @property
+    @pulumi.getter(name="awsRoleArn")
+    def aws_role_arn(self) -> pulumi.Input[str]:
+        """
+        AWS role ARN to be used for Federated Identity authentication with
+        MSK. Check the Pub/Sub docs for how to set up this role and the
+        required permissions that need to be attached to it.
+        """
+        return pulumi.get(self, "aws_role_arn")
+
+    @aws_role_arn.setter
+    def aws_role_arn(self, value: pulumi.Input[str]):
+        pulumi.set(self, "aws_role_arn", value)
+
+    @property
+    @pulumi.getter(name="clusterArn")
+    def cluster_arn(self) -> pulumi.Input[str]:
+        """
+        ARN that uniquely identifies the MSK cluster.
+        """
+        return pulumi.get(self, "cluster_arn")
+
+    @cluster_arn.setter
+    def cluster_arn(self, value: pulumi.Input[str]):
+        pulumi.set(self, "cluster_arn", value)
+
+    @property
+    @pulumi.getter(name="gcpServiceAccount")
+    def gcp_service_account(self) -> pulumi.Input[str]:
+        """
+        The GCP service account to be used for Federated Identity authentication
+        with MSK (via a `AssumeRoleWithWebIdentity` call for the provided
+        role). The `awsRoleArn` must be set up with `accounts.google.com:sub`
+        equals to this service account number.
+        """
+        return pulumi.get(self, "gcp_service_account")
+
+    @gcp_service_account.setter
+    def gcp_service_account(self, value: pulumi.Input[str]):
+        pulumi.set(self, "gcp_service_account", value)
+
+    @property
+    @pulumi.getter
+    def topic(self) -> pulumi.Input[str]:
+        """
+        The name of the MSK topic that Pub/Sub will import from.
+        """
+        return pulumi.get(self, "topic")
+
+    @topic.setter
+    def topic(self, value: pulumi.Input[str]):
+        pulumi.set(self, "topic", value)
+
+
+if not MYPY:
+    class TopicIngestionDataSourceSettingsAzureEventHubsArgsDict(TypedDict):
+        client_id: NotRequired[pulumi.Input[str]]
+        """
+        The Azure event hub client ID to use for ingestion.
+        """
+        event_hub: NotRequired[pulumi.Input[str]]
+        """
+        The Azure event hub to ingest data from.
+        """
+        gcp_service_account: NotRequired[pulumi.Input[str]]
+        """
+        The GCP service account to be used for Federated Identity authentication
+        with Azure (via a `AssumeRoleWithWebIdentity` call for the provided
+        role).
+        """
+        namespace: NotRequired[pulumi.Input[str]]
+        """
+        The Azure event hub namespace to ingest data from.
+        """
+        resource_group: NotRequired[pulumi.Input[str]]
+        """
+        The name of the resource group within an Azure subscription.
+        """
+        subscription_id: NotRequired[pulumi.Input[str]]
+        """
+        The Azure event hub subscription ID to use for ingestion.
+        """
+        tenant_id: NotRequired[pulumi.Input[str]]
+        """
+        The Azure event hub tenant ID to use for ingestion.
+        """
+elif False:
+    TopicIngestionDataSourceSettingsAzureEventHubsArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class TopicIngestionDataSourceSettingsAzureEventHubsArgs:
+    def __init__(__self__, *,
+                 client_id: Optional[pulumi.Input[str]] = None,
+                 event_hub: Optional[pulumi.Input[str]] = None,
+                 gcp_service_account: Optional[pulumi.Input[str]] = None,
+                 namespace: Optional[pulumi.Input[str]] = None,
+                 resource_group: Optional[pulumi.Input[str]] = None,
+                 subscription_id: Optional[pulumi.Input[str]] = None,
+                 tenant_id: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] client_id: The Azure event hub client ID to use for ingestion.
+        :param pulumi.Input[str] event_hub: The Azure event hub to ingest data from.
+        :param pulumi.Input[str] gcp_service_account: The GCP service account to be used for Federated Identity authentication
+               with Azure (via a `AssumeRoleWithWebIdentity` call for the provided
+               role).
+        :param pulumi.Input[str] namespace: The Azure event hub namespace to ingest data from.
+        :param pulumi.Input[str] resource_group: The name of the resource group within an Azure subscription.
+        :param pulumi.Input[str] subscription_id: The Azure event hub subscription ID to use for ingestion.
+        :param pulumi.Input[str] tenant_id: The Azure event hub tenant ID to use for ingestion.
+        """
+        if client_id is not None:
+            pulumi.set(__self__, "client_id", client_id)
+        if event_hub is not None:
+            pulumi.set(__self__, "event_hub", event_hub)
+        if gcp_service_account is not None:
+            pulumi.set(__self__, "gcp_service_account", gcp_service_account)
+        if namespace is not None:
+            pulumi.set(__self__, "namespace", namespace)
+        if resource_group is not None:
+            pulumi.set(__self__, "resource_group", resource_group)
+        if subscription_id is not None:
+            pulumi.set(__self__, "subscription_id", subscription_id)
+        if tenant_id is not None:
+            pulumi.set(__self__, "tenant_id", tenant_id)
+
+    @property
+    @pulumi.getter(name="clientId")
+    def client_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        The Azure event hub client ID to use for ingestion.
+        """
+        return pulumi.get(self, "client_id")
+
+    @client_id.setter
+    def client_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "client_id", value)
+
+    @property
+    @pulumi.getter(name="eventHub")
+    def event_hub(self) -> Optional[pulumi.Input[str]]:
+        """
+        The Azure event hub to ingest data from.
+        """
+        return pulumi.get(self, "event_hub")
+
+    @event_hub.setter
+    def event_hub(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "event_hub", value)
+
+    @property
+    @pulumi.getter(name="gcpServiceAccount")
+    def gcp_service_account(self) -> Optional[pulumi.Input[str]]:
+        """
+        The GCP service account to be used for Federated Identity authentication
+        with Azure (via a `AssumeRoleWithWebIdentity` call for the provided
+        role).
+        """
+        return pulumi.get(self, "gcp_service_account")
+
+    @gcp_service_account.setter
+    def gcp_service_account(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "gcp_service_account", value)
+
+    @property
+    @pulumi.getter
+    def namespace(self) -> Optional[pulumi.Input[str]]:
+        """
+        The Azure event hub namespace to ingest data from.
+        """
+        return pulumi.get(self, "namespace")
+
+    @namespace.setter
+    def namespace(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "namespace", value)
+
+    @property
+    @pulumi.getter(name="resourceGroup")
+    def resource_group(self) -> Optional[pulumi.Input[str]]:
+        """
+        The name of the resource group within an Azure subscription.
+        """
+        return pulumi.get(self, "resource_group")
+
+    @resource_group.setter
+    def resource_group(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "resource_group", value)
+
+    @property
+    @pulumi.getter(name="subscriptionId")
+    def subscription_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        The Azure event hub subscription ID to use for ingestion.
+        """
+        return pulumi.get(self, "subscription_id")
+
+    @subscription_id.setter
+    def subscription_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "subscription_id", value)
+
+    @property
+    @pulumi.getter(name="tenantId")
+    def tenant_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        The Azure event hub tenant ID to use for ingestion.
+        """
+        return pulumi.get(self, "tenant_id")
+
+    @tenant_id.setter
+    def tenant_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "tenant_id", value)
+
+
 if not MYPY:
     class TopicIngestionDataSourceSettingsCloudStorageArgsDict(TypedDict):
         bucket: pulumi.Input[str]
@@ -1926,6 +2262,117 @@ class TopicIngestionDataSourceSettingsCloudStorageTextFormatArgs:
         pulumi.set(self, "delimiter", value)
 
 
+if not MYPY:
+    class TopicIngestionDataSourceSettingsConfluentCloudArgsDict(TypedDict):
+        bootstrap_server: pulumi.Input[str]
+        """
+        The Confluent Cloud bootstrap server. The format is url:port.
+        """
+        gcp_service_account: pulumi.Input[str]
+        """
+        The GCP service account to be used for Federated Identity authentication
+        with Confluent Cloud.
+        """
+        identity_pool_id: pulumi.Input[str]
+        """
+        Identity pool ID to be used for Federated Identity authentication with Confluent Cloud.
+        """
+        topic: pulumi.Input[str]
+        """
+        Name of the Confluent Cloud topic that Pub/Sub will import from.
+        """
+        cluster_id: NotRequired[pulumi.Input[str]]
+        """
+        The Confluent Cloud cluster ID.
+        """
+elif False:
+    TopicIngestionDataSourceSettingsConfluentCloudArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class TopicIngestionDataSourceSettingsConfluentCloudArgs:
+    def __init__(__self__, *,
+                 bootstrap_server: pulumi.Input[str],
+                 gcp_service_account: pulumi.Input[str],
+                 identity_pool_id: pulumi.Input[str],
+                 topic: pulumi.Input[str],
+                 cluster_id: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] bootstrap_server: The Confluent Cloud bootstrap server. The format is url:port.
+        :param pulumi.Input[str] gcp_service_account: The GCP service account to be used for Federated Identity authentication
+               with Confluent Cloud.
+        :param pulumi.Input[str] identity_pool_id: Identity pool ID to be used for Federated Identity authentication with Confluent Cloud.
+        :param pulumi.Input[str] topic: Name of the Confluent Cloud topic that Pub/Sub will import from.
+        :param pulumi.Input[str] cluster_id: The Confluent Cloud cluster ID.
+        """
+        pulumi.set(__self__, "bootstrap_server", bootstrap_server)
+        pulumi.set(__self__, "gcp_service_account", gcp_service_account)
+        pulumi.set(__self__, "identity_pool_id", identity_pool_id)
+        pulumi.set(__self__, "topic", topic)
+        if cluster_id is not None:
+            pulumi.set(__self__, "cluster_id", cluster_id)
+
+    @property
+    @pulumi.getter(name="bootstrapServer")
+    def bootstrap_server(self) -> pulumi.Input[str]:
+        """
+        The Confluent Cloud bootstrap server. The format is url:port.
+        """
+        return pulumi.get(self, "bootstrap_server")
+
+    @bootstrap_server.setter
+    def bootstrap_server(self, value: pulumi.Input[str]):
+        pulumi.set(self, "bootstrap_server", value)
+
+    @property
+    @pulumi.getter(name="gcpServiceAccount")
+    def gcp_service_account(self) -> pulumi.Input[str]:
+        """
+        The GCP service account to be used for Federated Identity authentication
+        with Confluent Cloud.
+        """
+        return pulumi.get(self, "gcp_service_account")
+
+    @gcp_service_account.setter
+    def gcp_service_account(self, value: pulumi.Input[str]):
+        pulumi.set(self, "gcp_service_account", value)
+
+    @property
+    @pulumi.getter(name="identityPoolId")
+    def identity_pool_id(self) -> pulumi.Input[str]:
+        """
+        Identity pool ID to be used for Federated Identity authentication with Confluent Cloud.
+        """
+        return pulumi.get(self, "identity_pool_id")
+
+    @identity_pool_id.setter
+    def identity_pool_id(self, value: pulumi.Input[str]):
+        pulumi.set(self, "identity_pool_id", value)
+
+    @property
+    @pulumi.getter
+    def topic(self) -> pulumi.Input[str]:
+        """
+        Name of the Confluent Cloud topic that Pub/Sub will import from.
+        """
+        return pulumi.get(self, "topic")
+
+    @topic.setter
+    def topic(self, value: pulumi.Input[str]):
+        pulumi.set(self, "topic", value)
+
+    @property
+    @pulumi.getter(name="clusterId")
+    def cluster_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        The Confluent Cloud cluster ID.
+        """
+        return pulumi.get(self, "cluster_id")
+
+    @cluster_id.setter
+    def cluster_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "cluster_id", value)
+
+
 if not MYPY:
     class TopicIngestionDataSourceSettingsPlatformLogsSettingsArgsDict(TypedDict):
         severity: NotRequired[pulumi.Input[str]]
@@ -1978,13 +2425,21 @@ if not MYPY:
         allowed regions. An empty list means that no regions are allowed,
         and is not a valid configuration.
         """
+        enforce_in_transit: NotRequired[pulumi.Input[bool]]
+        """
+        If true, `allowedPersistenceRegions` is also used to enforce in-transit
+        guarantees for messages. That is, Pub/Sub will fail topics.publish
+        operations on this topic and subscribe operations on any subscription
+        attached to this topic in any region that is not in `allowedPersistenceRegions`.
+        """
 elif False:
     TopicMessageStoragePolicyArgsDict: TypeAlias = Mapping[str, Any]
 
 @pulumi.input_type
 class TopicMessageStoragePolicyArgs:
     def __init__(__self__, *,
-                 allowed_persistence_regions: pulumi.Input[Sequence[pulumi.Input[str]]]):
+                 allowed_persistence_regions: pulumi.Input[Sequence[pulumi.Input[str]]],
+                 enforce_in_transit: Optional[pulumi.Input[bool]] = None):
         """
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_persistence_regions: A list of IDs of GCP regions where messages that are published to
                the topic may be persisted in storage. Messages published by
@@ -1992,8 +2447,14 @@ class TopicMessageStoragePolicyArgs:
                of GCP altogether) will be routed for storage in one of the
                allowed regions. An empty list means that no regions are allowed,
                and is not a valid configuration.
+        :param pulumi.Input[bool] enforce_in_transit: If true, `allowedPersistenceRegions` is also used to enforce in-transit
+               guarantees for messages. That is, Pub/Sub will fail topics.publish
+               operations on this topic and subscribe operations on any subscription
+               attached to this topic in any region that is not in `allowedPersistenceRegions`.
         """
         pulumi.set(__self__, "allowed_persistence_regions", allowed_persistence_regions)
+        if enforce_in_transit is not None:
+            pulumi.set(__self__, "enforce_in_transit", enforce_in_transit)
 
     @property
     @pulumi.getter(name="allowedPersistenceRegions")
@@ -2012,6 +2473,21 @@ class TopicMessageStoragePolicyArgs:
     def allowed_persistence_regions(self, value: pulumi.Input[Sequence[pulumi.Input[str]]]):
         pulumi.set(self, "allowed_persistence_regions", value)
 
+    @property
+    @pulumi.getter(name="enforceInTransit")
+    def enforce_in_transit(self) -> Optional[pulumi.Input[bool]]:
+        """
+        If true, `allowedPersistenceRegions` is also used to enforce in-transit
+        guarantees for messages. That is, Pub/Sub will fail topics.publish
+        operations on this topic and subscribe operations on any subscription
+        attached to this topic in any region that is not in `allowedPersistenceRegions`.
+        """
+        return pulumi.get(self, "enforce_in_transit")
+
+    @enforce_in_transit.setter
+    def enforce_in_transit(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "enforce_in_transit", value)
+
 
 if not MYPY:
     class TopicSchemaSettingsArgsDict(TypedDict):