pulumi-gcp 8.22.0a1741790977__py3-none-any.whl → 8.23.0a1741934088__py3-none-any.whl

pulumi_gcp/iam/organizations_policy_binding.py

@@ -497,14 +497,6 @@ class OrganizationsPolicyBinding(pulumi.CustomResource):
                  target: Optional[pulumi.Input[Union['OrganizationsPolicyBindingTargetArgs', 'OrganizationsPolicyBindingTargetArgsDict']]] = None,
                  __props__=None):
         """
-        A policy binding to an organizations
-
-        To get more information about OrganizationsPolicyBinding, see:
-
-        * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/organizations.locations.policyBindings)
-        * How-to Guides
-            * [Apply a policy binding](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create#create_binding)
-
         ## Example Usage
 
         ### Iam Organizations Policy Binding
@@ -517,16 +509,16 @@ class OrganizationsPolicyBinding(pulumi.CustomResource):
         pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("pab_policy",
             organization="123456789",
             location="global",
-            display_name="test org binding",
+            display_name="binding for all principals in the Organization",
             principal_access_boundary_policy_id="my-pab-policy")
         wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
         opts = pulumi.ResourceOptions(depends_on=[pab_policy]))
-        my_org_binding = gcp.iam.OrganizationsPolicyBinding("my-org-binding",
+        binding_for_all_org_principals = gcp.iam.OrganizationsPolicyBinding("binding-for-all-org-principals",
             organization="123456789",
             location="global",
-            display_name="test org binding",
+            display_name="binding for all principals in the Organization",
             policy_kind="PRINCIPAL_ACCESS_BOUNDARY",
-            policy_binding_id="test-org-binding",
+            policy_binding_id="binding-for-all-org-principals",
             policy=pab_policy.principal_access_boundary_policy_id.apply(lambda principal_access_boundary_policy_id: f"organizations/123456789/locations/global/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}"),
             target={
                 "principal_set": "//cloudresourcemanager.googleapis.com/organizations/123456789",
@@ -585,14 +577,6 @@ class OrganizationsPolicyBinding(pulumi.CustomResource):
                  args: OrganizationsPolicyBindingArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
-        A policy binding to an organizations
-
-        To get more information about OrganizationsPolicyBinding, see:
-
-        * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/organizations.locations.policyBindings)
-        * How-to Guides
-            * [Apply a policy binding](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create#create_binding)
-
         ## Example Usage
 
         ### Iam Organizations Policy Binding
@@ -605,16 +589,16 @@ class OrganizationsPolicyBinding(pulumi.CustomResource):
         pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("pab_policy",
             organization="123456789",
             location="global",
-            display_name="test org binding",
+            display_name="binding for all principals in the Organization",
             principal_access_boundary_policy_id="my-pab-policy")
         wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
         opts = pulumi.ResourceOptions(depends_on=[pab_policy]))
-        my_org_binding = gcp.iam.OrganizationsPolicyBinding("my-org-binding",
+        binding_for_all_org_principals = gcp.iam.OrganizationsPolicyBinding("binding-for-all-org-principals",
             organization="123456789",
             location="global",
-            display_name="test org binding",
+            display_name="binding for all principals in the Organization",
             policy_kind="PRINCIPAL_ACCESS_BOUNDARY",
-            policy_binding_id="test-org-binding",
+            policy_binding_id="binding-for-all-org-principals",
             policy=pab_policy.principal_access_boundary_policy_id.apply(lambda principal_access_boundary_policy_id: f"organizations/123456789/locations/global/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}"),
             target={
                 "principal_set": "//cloudresourcemanager.googleapis.com/organizations/123456789",

pulumi_gcp/iam/outputs.py

@@ -531,8 +531,10 @@ class FoldersPolicyBindingTarget(dict):
     def __init__(__self__, *,
                  principal_set: Optional[str] = None):
         """
-        :param str principal_set: Required. Immutable. The resource name of the policy to be bound.
-               The binding parent and policy must belong to the same Organization (or Project).
+        :param str principal_set: Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
+               Examples for each one of the following supported principal set types:
+               * Folder: `//cloudresourcemanager.googleapis.com/folders/FOLDER_ID`
+               It must be parent by the policy binding's parent (the folder).
                
                - - -
         """
@@ -543,8 +545,10 @@ class FoldersPolicyBindingTarget(dict):
     @pulumi.getter(name="principalSet")
     def principal_set(self) -> Optional[str]:
         """
-        Required. Immutable. The resource name of the policy to be bound.
-        The binding parent and policy must belong to the same Organization (or Project).
+        Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
+        Examples for each one of the following supported principal set types:
+        * Folder: `//cloudresourcemanager.googleapis.com/folders/FOLDER_ID`
+        It must be parent by the policy binding's parent (the folder).
 
         - - -
         """
@@ -628,8 +632,12 @@ class OrganizationsPolicyBindingTarget(dict):
     def __init__(__self__, *,
                  principal_set: Optional[str] = None):
         """
-        :param str principal_set: Required. Immutable. The resource name of the policy to be bound.
-               The binding parent and policy must belong to the same Organization (or Project).
+        :param str principal_set: Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
+               Examples for each one of the following supported principal set types:
+               * Organization `//cloudresourcemanager.googleapis.com/organizations/ORGANIZATION_ID`
+               * Workforce Identity: `//iam.googleapis.com/locations/global/workforcePools/WORKFORCE_POOL_ID`
+               * Workspace Identity: `//iam.googleapis.com/locations/global/workspace/WORKSPACE_ID`
+               It must be parent by the policy binding's parent (the organization).
                
                - - -
         """
@@ -640,8 +648,12 @@ class OrganizationsPolicyBindingTarget(dict):
     @pulumi.getter(name="principalSet")
     def principal_set(self) -> Optional[str]:
         """
-        Required. Immutable. The resource name of the policy to be bound.
-        The binding parent and policy must belong to the same Organization (or Project).
+        Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
+        Examples for each one of the following supported principal set types:
+        * Organization `//cloudresourcemanager.googleapis.com/organizations/ORGANIZATION_ID`
+        * Workforce Identity: `//iam.googleapis.com/locations/global/workforcePools/WORKFORCE_POOL_ID`
+        * Workspace Identity: `//iam.googleapis.com/locations/global/workspace/WORKSPACE_ID`
+        It must be parent by the policy binding's parent (the organization).
 
         - - -
         """
@@ -837,8 +849,13 @@ class ProjectsPolicyBindingTarget(dict):
     def __init__(__self__, *,
                  principal_set: Optional[str] = None):
         """
-        :param str principal_set: Required. Immutable. The resource name of the policy to be bound.
-               The binding parent and policy must belong to the same Organization (or Project).
+        :param str principal_set: Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
+               Examples for each one of the following supported principal set types:
+               * Project:
+               * `//cloudresourcemanager.googleapis.com/projects/PROJECT_NUMBER`
+               * `//cloudresourcemanager.googleapis.com/projects/PROJECT_ID`
+               * Workload Identity Pool: `//iam.googleapis.com/projects/PROJECT_NUMBER/locations/LOCATION/workloadIdentityPools/WORKLOAD_POOL_ID`
+               It must be parent by the policy binding's parent (the project).
                
                - - -
         """
@@ -849,8 +866,13 @@ class ProjectsPolicyBindingTarget(dict):
     @pulumi.getter(name="principalSet")
     def principal_set(self) -> Optional[str]:
         """
-        Required. Immutable. The resource name of the policy to be bound.
-        The binding parent and policy must belong to the same Organization (or Project).
+        Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
+        Examples for each one of the following supported principal set types:
+        * Project:
+        * `//cloudresourcemanager.googleapis.com/projects/PROJECT_NUMBER`
+        * `//cloudresourcemanager.googleapis.com/projects/PROJECT_ID`
+        * Workload Identity Pool: `//iam.googleapis.com/projects/PROJECT_NUMBER/locations/LOCATION/workloadIdentityPools/WORKLOAD_POOL_ID`
+        It must be parent by the policy binding's parent (the project).
 
         - - -
         """

pulumi_gcp/iam/principal_access_boundary_policy.py

@@ -366,14 +366,6 @@ class PrincipalAccessBoundaryPolicy(pulumi.CustomResource):
                  principal_access_boundary_policy_id: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
-        An IAM Principal Access Boundary Policy resource
-
-        To get more information about PrincipalAccessBoundaryPolicy, see:
-
-        * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/organizations.locations.principalAccessBoundaryPolicies)
-        * How-to Guides
-            * [Create and apply Principal Access Boundaries](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create)
-
         ## Example Usage
 
         ### Iam Principal Access Boundary Policy
@@ -382,11 +374,37 @@ class PrincipalAccessBoundaryPolicy(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        my_pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("my-pab-policy",
+        pab_policy_for_org = gcp.iam.PrincipalAccessBoundaryPolicy("pab-policy-for-org",
+            organization="123456789",
+            location="global",
+            display_name="PAB policy for Organization",
+            principal_access_boundary_policy_id="pab-policy-for-org")
+        ```
+        ### Iam Organizations Policy Binding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+        import pulumi_time as time
+
+        pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("pab_policy",
+            organization="123456789",
+            location="global",
+            display_name="Binding for all principals in the Organization",
+            principal_access_boundary_policy_id="my-pab-policy")
+        wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
+        opts = pulumi.ResourceOptions(depends_on=[pab_policy]))
+        my_pab_policy = gcp.iam.OrganizationsPolicyBinding("my-pab-policy",
             organization="123456789",
             location="global",
-            display_name="test pab policy",
-            principal_access_boundary_policy_id="test-pab-policy")
+            display_name="Binding for all principals in the Organization",
+            policy_kind="PRINCIPAL_ACCESS_BOUNDARY",
+            policy_binding_id="binding-for-all-org-principals",
+            policy=pab_policy.principal_access_boundary_policy_id.apply(lambda principal_access_boundary_policy_id: f"organizations/123456789/locations/global/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}"),
+            target={
+                "principal_set": "//cloudresourcemanager.googleapis.com/organizations/123456789",
+            },
+            opts = pulumi.ResourceOptions(depends_on=[wait60_seconds]))
         ```
 
         ## Import
@@ -432,14 +450,6 @@ class PrincipalAccessBoundaryPolicy(pulumi.CustomResource):
                  args: PrincipalAccessBoundaryPolicyArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
-        An IAM Principal Access Boundary Policy resource
-
-        To get more information about PrincipalAccessBoundaryPolicy, see:
-
-        * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/organizations.locations.principalAccessBoundaryPolicies)
-        * How-to Guides
-            * [Create and apply Principal Access Boundaries](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create)
-
         ## Example Usage
 
         ### Iam Principal Access Boundary Policy
@@ -448,11 +458,37 @@ class PrincipalAccessBoundaryPolicy(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        my_pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("my-pab-policy",
+        pab_policy_for_org = gcp.iam.PrincipalAccessBoundaryPolicy("pab-policy-for-org",
+            organization="123456789",
+            location="global",
+            display_name="PAB policy for Organization",
+            principal_access_boundary_policy_id="pab-policy-for-org")
+        ```
+        ### Iam Organizations Policy Binding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+        import pulumi_time as time
+
+        pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("pab_policy",
+            organization="123456789",
+            location="global",
+            display_name="Binding for all principals in the Organization",
+            principal_access_boundary_policy_id="my-pab-policy")
+        wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
+        opts = pulumi.ResourceOptions(depends_on=[pab_policy]))
+        my_pab_policy = gcp.iam.OrganizationsPolicyBinding("my-pab-policy",
             organization="123456789",
             location="global",
-            display_name="test pab policy",
-            principal_access_boundary_policy_id="test-pab-policy")
+            display_name="Binding for all principals in the Organization",
+            policy_kind="PRINCIPAL_ACCESS_BOUNDARY",
+            policy_binding_id="binding-for-all-org-principals",
+            policy=pab_policy.principal_access_boundary_policy_id.apply(lambda principal_access_boundary_policy_id: f"organizations/123456789/locations/global/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}"),
+            target={
+                "principal_set": "//cloudresourcemanager.googleapis.com/organizations/123456789",
+            },
+            opts = pulumi.ResourceOptions(depends_on=[wait60_seconds]))
         ```
 
         ## Import

pulumi_gcp/iam/projects_policy_binding.py

@@ -490,14 +490,6 @@ class ProjectsPolicyBinding(pulumi.CustomResource):
                  target: Optional[pulumi.Input[Union['ProjectsPolicyBindingTargetArgs', 'ProjectsPolicyBindingTargetArgsDict']]] = None,
                  __props__=None):
         """
-        A policy binding to a Project
-
-        To get more information about ProjectsPolicyBinding, see:
-
-        * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/projects.locations.policyBindings)
-        * How-to Guides
-            * [Apply a policy binding](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create#create_binding)
-
         ## Example Usage
 
         ### Iam Projects Policy Binding
@@ -511,16 +503,16 @@ class ProjectsPolicyBinding(pulumi.CustomResource):
         pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("pab_policy",
             organization="123456789",
             location="global",
-            display_name="test project binding",
+            display_name="binding for all principals in the project",
             principal_access_boundary_policy_id="my-pab-policy")
         wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
         opts = pulumi.ResourceOptions(depends_on=[pab_policy]))
-        my_project_binding = gcp.iam.ProjectsPolicyBinding("my-project-binding",
+        binding_for_all_project_principals = gcp.iam.ProjectsPolicyBinding("binding-for-all-project-principals",
             project=project.project_id,
             location="global",
-            display_name="test project binding",
+            display_name="binding for all principals in the project",
             policy_kind="PRINCIPAL_ACCESS_BOUNDARY",
-            policy_binding_id="test-project-binding",
+            policy_binding_id="binding-for-all-project-principals",
             policy=pab_policy.principal_access_boundary_policy_id.apply(lambda principal_access_boundary_policy_id: f"organizations/123456789/locations/global/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}"),
             target={
                 "principal_set": f"//cloudresourcemanager.googleapis.com/projects/{project.project_id}",
@@ -584,14 +576,6 @@ class ProjectsPolicyBinding(pulumi.CustomResource):
                  args: ProjectsPolicyBindingArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
-        A policy binding to a Project
-
-        To get more information about ProjectsPolicyBinding, see:
-
-        * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/projects.locations.policyBindings)
-        * How-to Guides
-            * [Apply a policy binding](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create#create_binding)
-
         ## Example Usage
 
         ### Iam Projects Policy Binding
@@ -605,16 +589,16 @@ class ProjectsPolicyBinding(pulumi.CustomResource):
         pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("pab_policy",
             organization="123456789",
             location="global",
-            display_name="test project binding",
+            display_name="binding for all principals in the project",
             principal_access_boundary_policy_id="my-pab-policy")
         wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
         opts = pulumi.ResourceOptions(depends_on=[pab_policy]))
-        my_project_binding = gcp.iam.ProjectsPolicyBinding("my-project-binding",
+        binding_for_all_project_principals = gcp.iam.ProjectsPolicyBinding("binding-for-all-project-principals",
             project=project.project_id,
             location="global",
-            display_name="test project binding",
+            display_name="binding for all principals in the project",
             policy_kind="PRINCIPAL_ACCESS_BOUNDARY",
-            policy_binding_id="test-project-binding",
+            policy_binding_id="binding-for-all-project-principals",
             policy=pab_policy.principal_access_boundary_policy_id.apply(lambda principal_access_boundary_policy_id: f"organizations/123456789/locations/global/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}"),
             target={
                 "principal_set": f"//cloudresourcemanager.googleapis.com/projects/{project.project_id}",

pulumi_gcp/kms/crypto_key_version.py

@@ -33,7 +33,8 @@ class CryptoKeyVersionArgs:
                - - -
         :param pulumi.Input['CryptoKeyVersionExternalProtectionLevelOptionsArgs'] external_protection_level_options: ExternalProtectionLevelOptions stores a group of additional fields for configuring a CryptoKeyVersion that are specific to the EXTERNAL protection level and EXTERNAL_VPC protection levels.
                Structure is documented below.
-        :param pulumi.Input[str] state: The current state of the CryptoKeyVersion.
+        :param pulumi.Input[str] state: The current state of the CryptoKeyVersion. Note: you can only specify this field to manually `ENABLE` or `DISABLE` the CryptoKeyVersion,
+               otherwise the value of this field is always retrieved automatically.
                Possible values are: `PENDING_GENERATION`, `ENABLED`, `DISABLED`, `DESTROYED`, `DESTROY_SCHEDULED`, `PENDING_IMPORT`, `IMPORT_FAILED`.
         """
         pulumi.set(__self__, "crypto_key", crypto_key)
@@ -75,7 +76,8 @@ class CryptoKeyVersionArgs:
     @pulumi.getter
     def state(self) -> Optional[pulumi.Input[str]]:
         """
-        The current state of the CryptoKeyVersion.
+        The current state of the CryptoKeyVersion. Note: you can only specify this field to manually `ENABLE` or `DISABLE` the CryptoKeyVersion,
+        otherwise the value of this field is always retrieved automatically.
         Possible values are: `PENDING_GENERATION`, `ENABLED`, `DISABLED`, `DESTROYED`, `DESTROY_SCHEDULED`, `PENDING_IMPORT`, `IMPORT_FAILED`.
         """
         return pulumi.get(self, "state")
@@ -112,7 +114,8 @@ class _CryptoKeyVersionState:
         :param pulumi.Input[str] generate_time: The time this CryptoKeyVersion key material was generated
         :param pulumi.Input[str] name: The resource name for this CryptoKeyVersion.
         :param pulumi.Input[str] protection_level: The ProtectionLevel describing how crypto operations are performed with this CryptoKeyVersion.
-        :param pulumi.Input[str] state: The current state of the CryptoKeyVersion.
+        :param pulumi.Input[str] state: The current state of the CryptoKeyVersion. Note: you can only specify this field to manually `ENABLE` or `DISABLE` the CryptoKeyVersion,
+               otherwise the value of this field is always retrieved automatically.
                Possible values are: `PENDING_GENERATION`, `ENABLED`, `DISABLED`, `DESTROYED`, `DESTROY_SCHEDULED`, `PENDING_IMPORT`, `IMPORT_FAILED`.
         """
         if algorithm is not None:
@@ -227,7 +230,8 @@ class _CryptoKeyVersionState:
     @pulumi.getter
     def state(self) -> Optional[pulumi.Input[str]]:
         """
-        The current state of the CryptoKeyVersion.
+        The current state of the CryptoKeyVersion. Note: you can only specify this field to manually `ENABLE` or `DISABLE` the CryptoKeyVersion,
+        otherwise the value of this field is always retrieved automatically.
         Possible values are: `PENDING_GENERATION`, `ENABLED`, `DISABLED`, `DESTROYED`, `DESTROY_SCHEDULED`, `PENDING_IMPORT`, `IMPORT_FAILED`.
         """
         return pulumi.get(self, "state")
@@ -296,7 +300,8 @@ class CryptoKeyVersion(pulumi.CustomResource):
                - - -
         :param pulumi.Input[Union['CryptoKeyVersionExternalProtectionLevelOptionsArgs', 'CryptoKeyVersionExternalProtectionLevelOptionsArgsDict']] external_protection_level_options: ExternalProtectionLevelOptions stores a group of additional fields for configuring a CryptoKeyVersion that are specific to the EXTERNAL protection level and EXTERNAL_VPC protection levels.
                Structure is documented below.
-        :param pulumi.Input[str] state: The current state of the CryptoKeyVersion.
+        :param pulumi.Input[str] state: The current state of the CryptoKeyVersion. Note: you can only specify this field to manually `ENABLE` or `DISABLE` the CryptoKeyVersion,
+               otherwise the value of this field is always retrieved automatically.
                Possible values are: `PENDING_GENERATION`, `ENABLED`, `DISABLED`, `DESTROYED`, `DESTROY_SCHEDULED`, `PENDING_IMPORT`, `IMPORT_FAILED`.
         """
         ...
@@ -422,7 +427,8 @@ class CryptoKeyVersion(pulumi.CustomResource):
         :param pulumi.Input[str] generate_time: The time this CryptoKeyVersion key material was generated
         :param pulumi.Input[str] name: The resource name for this CryptoKeyVersion.
         :param pulumi.Input[str] protection_level: The ProtectionLevel describing how crypto operations are performed with this CryptoKeyVersion.
-        :param pulumi.Input[str] state: The current state of the CryptoKeyVersion.
+        :param pulumi.Input[str] state: The current state of the CryptoKeyVersion. Note: you can only specify this field to manually `ENABLE` or `DISABLE` the CryptoKeyVersion,
+               otherwise the value of this field is always retrieved automatically.
                Possible values are: `PENDING_GENERATION`, `ENABLED`, `DISABLED`, `DESTROYED`, `DESTROY_SCHEDULED`, `PENDING_IMPORT`, `IMPORT_FAILED`.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
@@ -506,7 +512,8 @@ class CryptoKeyVersion(pulumi.CustomResource):
     @pulumi.getter
     def state(self) -> pulumi.Output[str]:
         """
-        The current state of the CryptoKeyVersion.
+        The current state of the CryptoKeyVersion. Note: you can only specify this field to manually `ENABLE` or `DISABLE` the CryptoKeyVersion,
+        otherwise the value of this field is always retrieved automatically.
         Possible values are: `PENDING_GENERATION`, `ENABLED`, `DISABLED`, `DESTROYED`, `DESTROY_SCHEDULED`, `PENDING_IMPORT`, `IMPORT_FAILED`.
         """
         return pulumi.get(self, "state")

pulumi_gcp/monitoring/_inputs.py

@@ -1686,8 +1686,7 @@ if not MYPY:
         """
         boolean_test: NotRequired[pulumi.Input['AlertPolicyConditionConditionSqlBooleanTestArgsDict']]
         """
-        The start date and time of the query. If left unspecified, then the
-        query will start immediately.
+        A test that uses an alerting result in a boolean column produced by the SQL query.
         Structure is documented below.
         """
         daily: NotRequired[pulumi.Input['AlertPolicyConditionConditionSqlDailyArgsDict']]
@@ -1707,7 +1706,7 @@ if not MYPY:
         """
         row_count_test: NotRequired[pulumi.Input['AlertPolicyConditionConditionSqlRowCountTestArgsDict']]
         """
-        Test the row count against a threshold.
+        A test that checks if the number of rows in the result set violates some threshold.
         Structure is documented below.
         """
 elif False:
@@ -1728,8 +1727,7 @@ class AlertPolicyConditionConditionSqlArgs:
                filter the input by time.  A filter will automatically be applied
                to filter the input so that the query receives all rows received
                since the last time the query was run.
-        :param pulumi.Input['AlertPolicyConditionConditionSqlBooleanTestArgs'] boolean_test: The start date and time of the query. If left unspecified, then the
-               query will start immediately.
+        :param pulumi.Input['AlertPolicyConditionConditionSqlBooleanTestArgs'] boolean_test: A test that uses an alerting result in a boolean column produced by the SQL query.
                Structure is documented below.
         :param pulumi.Input['AlertPolicyConditionConditionSqlDailyArgs'] daily: Used to schedule the query to run every so many days.
                Structure is documented below.
@@ -1737,7 +1735,7 @@ class AlertPolicyConditionConditionSqlArgs:
                Structure is documented below.
         :param pulumi.Input['AlertPolicyConditionConditionSqlMinutesArgs'] minutes: Used to schedule the query to run every so many minutes.
                Structure is documented below.
-        :param pulumi.Input['AlertPolicyConditionConditionSqlRowCountTestArgs'] row_count_test: Test the row count against a threshold.
+        :param pulumi.Input['AlertPolicyConditionConditionSqlRowCountTestArgs'] row_count_test: A test that checks if the number of rows in the result set violates some threshold.
                Structure is documented below.
         """
         pulumi.set(__self__, "query", query)
@@ -1772,8 +1770,7 @@ class AlertPolicyConditionConditionSqlArgs:
     @pulumi.getter(name="booleanTest")
     def boolean_test(self) -> Optional[pulumi.Input['AlertPolicyConditionConditionSqlBooleanTestArgs']]:
         """
-        The start date and time of the query. If left unspecified, then the
-        query will start immediately.
+        A test that uses an alerting result in a boolean column produced by the SQL query.
         Structure is documented below.
         """
         return pulumi.get(self, "boolean_test")
@@ -1825,7 +1822,7 @@ class AlertPolicyConditionConditionSqlArgs:
     @pulumi.getter(name="rowCountTest")
     def row_count_test(self) -> Optional[pulumi.Input['AlertPolicyConditionConditionSqlRowCountTestArgs']]:
         """
-        Test the row count against a threshold.
+        A test that checks if the number of rows in the result set violates some threshold.
         Structure is documented below.
         """
         return pulumi.get(self, "row_count_test")
@@ -1839,8 +1836,8 @@ if not MYPY:
     class AlertPolicyConditionConditionSqlBooleanTestArgsDict(TypedDict):
         column: pulumi.Input[str]
         """
-        The name of the column containing the boolean value. If the value
-        in a row is NULL, that row is ignored.
+        The name of the column containing the boolean value. If the value in a row is
+        NULL, that row is ignored.
 
         - - -
         """
@@ -1852,8 +1849,8 @@ class AlertPolicyConditionConditionSqlBooleanTestArgs:
     def __init__(__self__, *,
                  column: pulumi.Input[str]):
         """
-        :param pulumi.Input[str] column: The name of the column containing the boolean value. If the value
-               in a row is NULL, that row is ignored.
+        :param pulumi.Input[str] column: The name of the column containing the boolean value. If the value in a row is
+               NULL, that row is ignored.
                
                - - -
         """
@@ -1863,8 +1860,8 @@ class AlertPolicyConditionConditionSqlBooleanTestArgs:
     @pulumi.getter
     def column(self) -> pulumi.Input[str]:
         """
-        The name of the column containing the boolean value. If the value
-        in a row is NULL, that row is ignored.
+        The name of the column containing the boolean value. If the value in a row is
+        NULL, that row is ignored.
 
         - - -
         """
@@ -2161,7 +2158,7 @@ if not MYPY:
         """
         threshold: pulumi.Input[int]
         """
-        Test the boolean value in the indicated column.
+        The value against which to compare the row count.
         """
 elif False:
     AlertPolicyConditionConditionSqlRowCountTestArgsDict: TypeAlias = Mapping[str, Any]
@@ -2181,7 +2178,7 @@ class AlertPolicyConditionConditionSqlRowCountTestArgs:
                right-hand side. Only COMPARISON_LT and
                COMPARISON_GT are supported currently.
                Possible values are: `COMPARISON_GT`, `COMPARISON_GE`, `COMPARISON_LT`, `COMPARISON_LE`, `COMPARISON_EQ`, `COMPARISON_NE`.
-        :param pulumi.Input[int] threshold: Test the boolean value in the indicated column.
+        :param pulumi.Input[int] threshold: The value against which to compare the row count.
         """
         pulumi.set(__self__, "comparison", comparison)
         pulumi.set(__self__, "threshold", threshold)
@@ -2210,7 +2207,7 @@ class AlertPolicyConditionConditionSqlRowCountTestArgs:
     @pulumi.getter
     def threshold(self) -> pulumi.Input[int]:
         """
-        Test the boolean value in the indicated column.
+        The value against which to compare the row count.
         """
         return pulumi.get(self, "threshold")
 

pulumi_gcp/monitoring/alert_policy.py

@@ -586,6 +586,29 @@ class AlertPolicy(pulumi.CustomResource):
                 "auto_close": "1800s",
             })
         ```
+        ### Monitoring Alert Policy Sql Condition
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        alert_policy = gcp.monitoring.AlertPolicy("alert_policy",
+            display_name="My Alert Policy",
+            combiner="OR",
+            conditions=[{
+                "display_name": "minutes row count",
+                "condition_sql": {
+                    "query": "SELECT severity, resource FROM my_project.global._Default._AllLogs WHERE severity IS NOT NULL",
+                    "minutes": {
+                        "periodicity": 600,
+                    },
+                    "row_count_test": {
+                        "comparison": "COMPARISON_GT",
+                        "threshold": 0,
+                    },
+                },
+            }])
+        ```
 
         ## Import
 
@@ -762,6 +785,29 @@ class AlertPolicy(pulumi.CustomResource):
                 "auto_close": "1800s",
             })
         ```
+        ### Monitoring Alert Policy Sql Condition
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        alert_policy = gcp.monitoring.AlertPolicy("alert_policy",
+            display_name="My Alert Policy",
+            combiner="OR",
+            conditions=[{
+                "display_name": "minutes row count",
+                "condition_sql": {
+                    "query": "SELECT severity, resource FROM my_project.global._Default._AllLogs WHERE severity IS NOT NULL",
+                    "minutes": {
+                        "periodicity": 600,
+                    },
+                    "row_count_test": {
+                        "comparison": "COMPARISON_GT",
+                        "threshold": 0,
+                    },
+                },
+            }])
+        ```
 
         ## Import