pulumi-gcp 8.24.0a1743057423__py3-none-any.whl → 8.25.0__py3-none-any.whl

pulumi_gcp/parametermanager/get_parameter.py

@@ -27,7 +27,7 @@ class GetParameterResult:
     """
     A collection of values returned by getParameter.
     """
-    def __init__(__self__, create_time=None, effective_labels=None, format=None, id=None, labels=None, name=None, parameter_id=None, policy_members=None, project=None, pulumi_labels=None, update_time=None):
+    def __init__(__self__, create_time=None, effective_labels=None, format=None, id=None, kms_key=None, labels=None, name=None, parameter_id=None, policy_members=None, project=None, pulumi_labels=None, update_time=None):
         if create_time and not isinstance(create_time, str):
             raise TypeError("Expected argument 'create_time' to be a str")
         pulumi.set(__self__, "create_time", create_time)
@@ -40,6 +40,9 @@ class GetParameterResult:
         if id and not isinstance(id, str):
             raise TypeError("Expected argument 'id' to be a str")
         pulumi.set(__self__, "id", id)
+        if kms_key and not isinstance(kms_key, str):
+            raise TypeError("Expected argument 'kms_key' to be a str")
+        pulumi.set(__self__, "kms_key", kms_key)
         if labels and not isinstance(labels, dict):
             raise TypeError("Expected argument 'labels' to be a dict")
         pulumi.set(__self__, "labels", labels)
@@ -85,6 +88,11 @@ class GetParameterResult:
         """
         return pulumi.get(self, "id")
 
+    @property
+    @pulumi.getter(name="kmsKey")
+    def kms_key(self) -> str:
+        return pulumi.get(self, "kms_key")
+
     @property
     @pulumi.getter
     def labels(self) -> Mapping[str, str]:
@@ -131,6 +139,7 @@ class AwaitableGetParameterResult(GetParameterResult):
             effective_labels=self.effective_labels,
             format=self.format,
             id=self.id,
+            kms_key=self.kms_key,
             labels=self.labels,
             name=self.name,
             parameter_id=self.parameter_id,
@@ -144,6 +153,8 @@ def get_parameter(parameter_id: Optional[str] = None,
                   project: Optional[str] = None,
                   opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetParameterResult:
     """
+    Use this data source to get information about a Parameter Manager Parameter.
+
     ## Example Usage
 
     ```python
@@ -168,6 +179,7 @@ def get_parameter(parameter_id: Optional[str] = None,
         effective_labels=pulumi.get(__ret__, 'effective_labels'),
         format=pulumi.get(__ret__, 'format'),
         id=pulumi.get(__ret__, 'id'),
+        kms_key=pulumi.get(__ret__, 'kms_key'),
         labels=pulumi.get(__ret__, 'labels'),
         name=pulumi.get(__ret__, 'name'),
         parameter_id=pulumi.get(__ret__, 'parameter_id'),
@@ -179,6 +191,8 @@ def get_parameter_output(parameter_id: Optional[pulumi.Input[str]] = None,
                          project: Optional[pulumi.Input[Optional[str]]] = None,
                          opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetParameterResult]:
     """
+    Use this data source to get information about a Parameter Manager Parameter.
+
     ## Example Usage
 
     ```python
@@ -202,6 +216,7 @@ def get_parameter_output(parameter_id: Optional[pulumi.Input[str]] = None,
         effective_labels=pulumi.get(__response__, 'effective_labels'),
         format=pulumi.get(__response__, 'format'),
         id=pulumi.get(__response__, 'id'),
+        kms_key=pulumi.get(__response__, 'kms_key'),
         labels=pulumi.get(__response__, 'labels'),
         name=pulumi.get(__response__, 'name'),
         parameter_id=pulumi.get(__response__, 'parameter_id'),

pulumi_gcp/parametermanager/get_parameter_version.py

@@ -26,7 +26,7 @@ class GetParameterVersionResult:
     """
     A collection of values returned by getParameterVersion.
     """
-    def __init__(__self__, create_time=None, disabled=None, id=None, name=None, parameter=None, parameter_data=None, parameter_version_id=None, project=None, update_time=None):
+    def __init__(__self__, create_time=None, disabled=None, id=None, kms_key_version=None, name=None, parameter=None, parameter_data=None, parameter_version_id=None, project=None, update_time=None):
         if create_time and not isinstance(create_time, str):
             raise TypeError("Expected argument 'create_time' to be a str")
         pulumi.set(__self__, "create_time", create_time)
@@ -36,6 +36,9 @@ class GetParameterVersionResult:
         if id and not isinstance(id, str):
             raise TypeError("Expected argument 'id' to be a str")
         pulumi.set(__self__, "id", id)
+        if kms_key_version and not isinstance(kms_key_version, str):
+            raise TypeError("Expected argument 'kms_key_version' to be a str")
+        pulumi.set(__self__, "kms_key_version", kms_key_version)
         if name and not isinstance(name, str):
             raise TypeError("Expected argument 'name' to be a str")
         pulumi.set(__self__, "name", name)
@@ -79,6 +82,14 @@ class GetParameterVersionResult:
         """
         return pulumi.get(self, "id")
 
+    @property
+    @pulumi.getter(name="kmsKeyVersion")
+    def kms_key_version(self) -> str:
+        """
+        The resource name of the Cloud KMS CryptoKeyVersion used to decrypt parameter version payload. Format `projects/{{project}}/locations/global/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}/cryptoKeyVersions/{{crypto_key_version}}`
+        """
+        return pulumi.get(self, "kms_key_version")
+
     @property
     @pulumi.getter
     def name(self) -> str:
@@ -129,6 +140,7 @@ class AwaitableGetParameterVersionResult(GetParameterVersionResult):
             create_time=self.create_time,
             disabled=self.disabled,
             id=self.id,
+            kms_key_version=self.kms_key_version,
             name=self.name,
             parameter=self.parameter,
             parameter_data=self.parameter_data,
@@ -142,6 +154,8 @@ def get_parameter_version(parameter: Optional[str] = None,
                           project: Optional[str] = None,
                           opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetParameterVersionResult:
     """
+    Get the value and metadata from a Parameter Manager Parameter version. For more information see the [official documentation](https://cloud.google.com/secret-manager/parameter-manager/docs/overview)  and [API](https://cloud.google.com/secret-manager/parameter-manager/docs/reference/rest/v1/projects.locations.parameters.versions).
+
     ## Example Usage
 
     ```python
@@ -170,6 +184,7 @@ def get_parameter_version(parameter: Optional[str] = None,
         create_time=pulumi.get(__ret__, 'create_time'),
         disabled=pulumi.get(__ret__, 'disabled'),
         id=pulumi.get(__ret__, 'id'),
+        kms_key_version=pulumi.get(__ret__, 'kms_key_version'),
         name=pulumi.get(__ret__, 'name'),
         parameter=pulumi.get(__ret__, 'parameter'),
         parameter_data=pulumi.get(__ret__, 'parameter_data'),
@@ -181,6 +196,8 @@ def get_parameter_version_output(parameter: Optional[pulumi.Input[str]] = None,
                                  project: Optional[pulumi.Input[Optional[str]]] = None,
                                  opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetParameterVersionResult]:
     """
+    Get the value and metadata from a Parameter Manager Parameter version. For more information see the [official documentation](https://cloud.google.com/secret-manager/parameter-manager/docs/overview)  and [API](https://cloud.google.com/secret-manager/parameter-manager/docs/reference/rest/v1/projects.locations.parameters.versions).
+
     ## Example Usage
 
     ```python
@@ -208,6 +225,7 @@ def get_parameter_version_output(parameter: Optional[pulumi.Input[str]] = None,
         create_time=pulumi.get(__response__, 'create_time'),
         disabled=pulumi.get(__response__, 'disabled'),
         id=pulumi.get(__response__, 'id'),
+        kms_key_version=pulumi.get(__response__, 'kms_key_version'),
         name=pulumi.get(__response__, 'name'),
         parameter=pulumi.get(__response__, 'parameter'),
         parameter_data=pulumi.get(__response__, 'parameter_data'),

pulumi_gcp/parametermanager/get_parameter_version_render.py

@@ -130,6 +130,8 @@ def get_parameter_version_render(parameter: Optional[str] = None,
                                  project: Optional[str] = None,
                                  opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetParameterVersionRenderResult:
     """
+    Get the value and metadata from a Parameter Manager Parameter version with render payload data. For this datasource to work as expected, the principal of the parameter must be provided with the [Secret Manager Secret Accessor](https://cloud.google.com/secret-manager/docs/access-control#secretmanager.secretAccessor) role. For more information see the [official documentation](https://cloud.google.com/secret-manager/parameter-manager/docs/overview)  and [API](https://cloud.google.com/secret-manager/parameter-manager/docs/reference/rest/v1/projects.locations.parameters.versions/render).
+
     ## Example Usage
 
     ```python
@@ -168,6 +170,8 @@ def get_parameter_version_render_output(parameter: Optional[pulumi.Input[str]] =
                                         project: Optional[pulumi.Input[Optional[str]]] = None,
                                         opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetParameterVersionRenderResult]:
     """
+    Get the value and metadata from a Parameter Manager Parameter version with render payload data. For this datasource to work as expected, the principal of the parameter must be provided with the [Secret Manager Secret Accessor](https://cloud.google.com/secret-manager/docs/access-control#secretmanager.secretAccessor) role. For more information see the [official documentation](https://cloud.google.com/secret-manager/parameter-manager/docs/overview)  and [API](https://cloud.google.com/secret-manager/parameter-manager/docs/reference/rest/v1/projects.locations.parameters.versions/render).
+
     ## Example Usage
 
     ```python

pulumi_gcp/parametermanager/get_parameters.py

@@ -87,6 +87,8 @@ def get_parameters(filter: Optional[str] = None,
                    project: Optional[str] = None,
                    opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetParametersResult:
     """
+    Use this data source to list the Parameter Manager Parameters.
+
     ## Example Usage
 
     ```python
@@ -115,6 +117,8 @@ def get_parameters_output(filter: Optional[pulumi.Input[Optional[str]]] = None,
                           project: Optional[pulumi.Input[Optional[str]]] = None,
                           opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetParametersResult]:
     """
+    Use this data source to list the Parameter Manager Parameters.
+
     ## Example Usage
 
     ```python

pulumi_gcp/parametermanager/get_regional_parameter.py

@@ -154,6 +154,8 @@ def get_regional_parameter(location: Optional[str] = None,
                            project: Optional[str] = None,
                            opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetRegionalParameterResult:
     """
+    Use this data source to get information about a Parameter Manager Regional Parameter.
+
     ## Example Usage
 
     ```python
@@ -194,6 +196,8 @@ def get_regional_parameter_output(location: Optional[pulumi.Input[str]] = None,
                                   project: Optional[pulumi.Input[Optional[str]]] = None,
                                   opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetRegionalParameterResult]:
     """
+    Use this data source to get information about a Parameter Manager Regional Parameter.
+
     ## Example Usage
 
     ```python

pulumi_gcp/parametermanager/get_regional_parameter_version.py

@@ -152,6 +152,8 @@ def get_regional_parameter_version(location: Optional[str] = None,
                                    project: Optional[str] = None,
                                    opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetRegionalParameterVersionResult:
     """
+    Get the value and metadata from a Parameter Manager Regional Parameter version. For more information see the [official documentation](https://cloud.google.com/secret-manager/parameter-manager/docs/overview) and [API](https://cloud.google.com/secret-manager/parameter-manager/docs/reference/rest/v1/projects.locations.parameters.versions).
+
     ## Example Usage
 
     ```python
@@ -196,6 +198,8 @@ def get_regional_parameter_version_output(location: Optional[pulumi.Input[Option
                                           project: Optional[pulumi.Input[Optional[str]]] = None,
                                           opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetRegionalParameterVersionResult]:
     """
+    Get the value and metadata from a Parameter Manager Regional Parameter version. For more information see the [official documentation](https://cloud.google.com/secret-manager/parameter-manager/docs/overview) and [API](https://cloud.google.com/secret-manager/parameter-manager/docs/reference/rest/v1/projects.locations.parameters.versions).
+
     ## Example Usage
 
     ```python

pulumi_gcp/parametermanager/get_regional_parameter_version_render.py

@@ -140,6 +140,10 @@ def get_regional_parameter_version_render(location: Optional[str] = None,
                                           project: Optional[str] = None,
                                           opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetRegionalParameterVersionRenderResult:
     """
+    Get the value and metadata from a Parameter Manager Regional Parameter version with rendered payload data. For this datasource to work as expected, the principal of the parameter must be provided with the [Secret Manager Secret Accessor](https://cloud.google.com/secret-manager/docs/access-control#secretmanager.secretAccessor) role. For more information see the [official documentation](https://cloud.google.com/secret-manager/parameter-manager/docs/overview)  and [API](https://cloud.google.com/secret-manager/parameter-manager/docs/reference/rest/v1/projects.locations.parameters.versions/render).
+
+    > **Warning:** To use this data source, we must grant the `Secret Manager Secret Accessor` role to the principal of the parameter. Please note that it can take up to 7 minutes for the role to take effect. Hence, we might need to wait approximately 7 minutes after granting  `Secret Manager Secret Accessor` role to the principal of the parameter. For more information see the [access change propagation documentation](https://cloud.google.com/iam/docs/access-change-propagation).
+
     ## Example Usage
 
     ```python
@@ -184,6 +188,10 @@ def get_regional_parameter_version_render_output(location: Optional[pulumi.Input
                                                  project: Optional[pulumi.Input[Optional[str]]] = None,
                                                  opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetRegionalParameterVersionRenderResult]:
     """
+    Get the value and metadata from a Parameter Manager Regional Parameter version with rendered payload data. For this datasource to work as expected, the principal of the parameter must be provided with the [Secret Manager Secret Accessor](https://cloud.google.com/secret-manager/docs/access-control#secretmanager.secretAccessor) role. For more information see the [official documentation](https://cloud.google.com/secret-manager/parameter-manager/docs/overview)  and [API](https://cloud.google.com/secret-manager/parameter-manager/docs/reference/rest/v1/projects.locations.parameters.versions/render).
+
+    > **Warning:** To use this data source, we must grant the `Secret Manager Secret Accessor` role to the principal of the parameter. Please note that it can take up to 7 minutes for the role to take effect. Hence, we might need to wait approximately 7 minutes after granting  `Secret Manager Secret Accessor` role to the principal of the parameter. For more information see the [access change propagation documentation](https://cloud.google.com/iam/docs/access-change-propagation).
+
     ## Example Usage
 
     ```python

pulumi_gcp/parametermanager/get_regional_parameters.py

@@ -97,6 +97,8 @@ def get_regional_parameters(filter: Optional[str] = None,
                             project: Optional[str] = None,
                             opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetRegionalParametersResult:
     """
+    Use this data source to list the Parameter Manager Regional Parameters.
+
     ## Example Usage
 
     ```python
@@ -129,6 +131,8 @@ def get_regional_parameters_output(filter: Optional[pulumi.Input[Optional[str]]]
                                    project: Optional[pulumi.Input[Optional[str]]] = None,
                                    opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetRegionalParametersResult]:
     """
+    Use this data source to list the Parameter Manager Regional Parameters.
+
     ## Example Usage
 
     ```python

pulumi_gcp/parametermanager/outputs.py

@@ -203,6 +203,7 @@ class GetParametersParameterResult(dict):
                  create_time: str,
                  effective_labels: Mapping[str, str],
                  format: str,
+                 kms_key: str,
                  labels: Mapping[str, str],
                  name: str,
                  parameter_id: str,
@@ -213,6 +214,7 @@ class GetParametersParameterResult(dict):
         """
         :param str create_time: The time at which the parameter was created.
         :param str format: The format type of the parameter.
+        :param str kms_key: The resource name of the Cloud KMS CryptoKey used to encrypt parameter version payload. Format `projects/{{project}}/locations/global/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}`
         :param Mapping[str, str] labels: The labels assigned to the parameter.
         :param str name: The resource name of the parameter. Format: `projects/{{project}}/locations/global/parameters/{{parameter_id}}`
         :param str parameter_id: The unique name of the resource.
@@ -225,6 +227,7 @@ class GetParametersParameterResult(dict):
         pulumi.set(__self__, "create_time", create_time)
         pulumi.set(__self__, "effective_labels", effective_labels)
         pulumi.set(__self__, "format", format)
+        pulumi.set(__self__, "kms_key", kms_key)
         pulumi.set(__self__, "labels", labels)
         pulumi.set(__self__, "name", name)
         pulumi.set(__self__, "parameter_id", parameter_id)
@@ -254,6 +257,14 @@ class GetParametersParameterResult(dict):
         """
         return pulumi.get(self, "format")
 
+    @property
+    @pulumi.getter(name="kmsKey")
+    def kms_key(self) -> str:
+        """
+        The resource name of the Cloud KMS CryptoKey used to encrypt parameter version payload. Format `projects/{{project}}/locations/global/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}`
+        """
+        return pulumi.get(self, "kms_key")
+
     @property
     @pulumi.getter
     def labels(self) -> Mapping[str, str]:

pulumi_gcp/parametermanager/parameter.py

@@ -23,6 +23,7 @@ class ParameterArgs:
     def __init__(__self__, *,
                  parameter_id: pulumi.Input[str],
                  format: Optional[pulumi.Input[str]] = None,
+                 kms_key: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  project: Optional[pulumi.Input[str]] = None):
         """
@@ -34,6 +35,8 @@ class ParameterArgs:
         :param pulumi.Input[str] format: The format type of the parameter resource.
                Default value is `UNFORMATTED`.
                Possible values are: `UNFORMATTED`, `YAML`, `JSON`.
+        :param pulumi.Input[str] kms_key: The resource name of the Cloud KMS CryptoKey used to encrypt parameter version payload. Format
+               `projects/{{project}}/locations/global/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}`
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: The labels assigned to this Parameter.
                Label keys must be between 1 and 63 characters long, have a UTF-8 encoding of maximum 128 bytes,
                and must conform to the following PCRE regular expression: [\\p{Ll}\\p{Lo}][\\p{Ll}\\p{Lo}\\p{N}_-]{0,62}
@@ -51,6 +54,8 @@ class ParameterArgs:
         pulumi.set(__self__, "parameter_id", parameter_id)
         if format is not None:
             pulumi.set(__self__, "format", format)
+        if kms_key is not None:
+            pulumi.set(__self__, "kms_key", kms_key)
         if labels is not None:
             pulumi.set(__self__, "labels", labels)
         if project is not None:
@@ -85,6 +90,19 @@ class ParameterArgs:
     def format(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "format", value)
 
+    @property
+    @pulumi.getter(name="kmsKey")
+    def kms_key(self) -> Optional[pulumi.Input[str]]:
+        """
+        The resource name of the Cloud KMS CryptoKey used to encrypt parameter version payload. Format
+        `projects/{{project}}/locations/global/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}`
+        """
+        return pulumi.get(self, "kms_key")
+
+    @kms_key.setter
+    def kms_key(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "kms_key", value)
+
     @property
     @pulumi.getter
     def labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
@@ -127,6 +145,7 @@ class _ParameterState:
                  create_time: Optional[pulumi.Input[str]] = None,
                  effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  format: Optional[pulumi.Input[str]] = None,
+                 kms_key: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  parameter_id: Optional[pulumi.Input[str]] = None,
@@ -141,6 +160,8 @@ class _ParameterState:
         :param pulumi.Input[str] format: The format type of the parameter resource.
                Default value is `UNFORMATTED`.
                Possible values are: `UNFORMATTED`, `YAML`, `JSON`.
+        :param pulumi.Input[str] kms_key: The resource name of the Cloud KMS CryptoKey used to encrypt parameter version payload. Format
+               `projects/{{project}}/locations/global/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}`
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: The labels assigned to this Parameter.
                Label keys must be between 1 and 63 characters long, have a UTF-8 encoding of maximum 128 bytes,
                and must conform to the following PCRE regular expression: [\\p{Ll}\\p{Lo}][\\p{Ll}\\p{Lo}\\p{N}_-]{0,62}
@@ -172,6 +193,8 @@ class _ParameterState:
             pulumi.set(__self__, "effective_labels", effective_labels)
         if format is not None:
             pulumi.set(__self__, "format", format)
+        if kms_key is not None:
+            pulumi.set(__self__, "kms_key", kms_key)
         if labels is not None:
             pulumi.set(__self__, "labels", labels)
         if name is not None:
@@ -225,6 +248,19 @@ class _ParameterState:
     def format(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "format", value)
 
+    @property
+    @pulumi.getter(name="kmsKey")
+    def kms_key(self) -> Optional[pulumi.Input[str]]:
+        """
+        The resource name of the Cloud KMS CryptoKey used to encrypt parameter version payload. Format
+        `projects/{{project}}/locations/global/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}`
+        """
+        return pulumi.get(self, "kms_key")
+
+    @kms_key.setter
+    def kms_key(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "kms_key", value)
+
     @property
     @pulumi.getter
     def labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
@@ -333,11 +369,18 @@ class Parameter(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  format: Optional[pulumi.Input[str]] = None,
+                 kms_key: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  parameter_id: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
+        A Parameter resource is a logical parameter.
+
+        To get more information about Parameter, see:
+
+        * [API documentation](https://cloud.google.com/secret-manager/parameter-manager/docs/reference/rest/v1/projects.locations.parameters)
+
         ## Example Usage
 
         ### Parameter Config Basic
@@ -374,6 +417,17 @@ class Parameter(pulumi.CustomResource):
                 "key5": "val5",
             })
         ```
+        ### Parameter With Kms Key
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        project = gcp.organizations.get_project()
+        parameter_with_kms_key = gcp.parametermanager.Parameter("parameter-with-kms-key",
+            parameter_id="parameter",
+            kms_key="kms-key")
+        ```
 
         ## Import
 
@@ -404,6 +458,8 @@ class Parameter(pulumi.CustomResource):
         :param pulumi.Input[str] format: The format type of the parameter resource.
                Default value is `UNFORMATTED`.
                Possible values are: `UNFORMATTED`, `YAML`, `JSON`.
+        :param pulumi.Input[str] kms_key: The resource name of the Cloud KMS CryptoKey used to encrypt parameter version payload. Format
+               `projects/{{project}}/locations/global/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}`
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: The labels assigned to this Parameter.
                Label keys must be between 1 and 63 characters long, have a UTF-8 encoding of maximum 128 bytes,
                and must conform to the following PCRE regular expression: [\\p{Ll}\\p{Lo}][\\p{Ll}\\p{Lo}\\p{N}_-]{0,62}
@@ -429,6 +485,12 @@ class Parameter(pulumi.CustomResource):
                  args: ParameterArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        A Parameter resource is a logical parameter.
+
+        To get more information about Parameter, see:
+
+        * [API documentation](https://cloud.google.com/secret-manager/parameter-manager/docs/reference/rest/v1/projects.locations.parameters)
+
         ## Example Usage
 
         ### Parameter Config Basic
@@ -465,6 +527,17 @@ class Parameter(pulumi.CustomResource):
                 "key5": "val5",
             })
         ```
+        ### Parameter With Kms Key
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        project = gcp.organizations.get_project()
+        parameter_with_kms_key = gcp.parametermanager.Parameter("parameter-with-kms-key",
+            parameter_id="parameter",
+            kms_key="kms-key")
+        ```
 
         ## Import
 
@@ -506,6 +579,7 @@ class Parameter(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  format: Optional[pulumi.Input[str]] = None,
+                 kms_key: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  parameter_id: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
@@ -519,6 +593,7 @@ class Parameter(pulumi.CustomResource):
             __props__ = ParameterArgs.__new__(ParameterArgs)
 
             __props__.__dict__["format"] = format
+            __props__.__dict__["kms_key"] = kms_key
             __props__.__dict__["labels"] = labels
             if parameter_id is None and not opts.urn:
                 raise TypeError("Missing required property 'parameter_id'")
@@ -545,6 +620,7 @@ class Parameter(pulumi.CustomResource):
             create_time: Optional[pulumi.Input[str]] = None,
             effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
             format: Optional[pulumi.Input[str]] = None,
+            kms_key: Optional[pulumi.Input[str]] = None,
             labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
             name: Optional[pulumi.Input[str]] = None,
             parameter_id: Optional[pulumi.Input[str]] = None,
@@ -564,6 +640,8 @@ class Parameter(pulumi.CustomResource):
         :param pulumi.Input[str] format: The format type of the parameter resource.
                Default value is `UNFORMATTED`.
                Possible values are: `UNFORMATTED`, `YAML`, `JSON`.
+        :param pulumi.Input[str] kms_key: The resource name of the Cloud KMS CryptoKey used to encrypt parameter version payload. Format
+               `projects/{{project}}/locations/global/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}`
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: The labels assigned to this Parameter.
                Label keys must be between 1 and 63 characters long, have a UTF-8 encoding of maximum 128 bytes,
                and must conform to the following PCRE regular expression: [\\p{Ll}\\p{Lo}][\\p{Ll}\\p{Lo}\\p{N}_-]{0,62}
@@ -596,6 +674,7 @@ class Parameter(pulumi.CustomResource):
         __props__.__dict__["create_time"] = create_time
         __props__.__dict__["effective_labels"] = effective_labels
         __props__.__dict__["format"] = format
+        __props__.__dict__["kms_key"] = kms_key
         __props__.__dict__["labels"] = labels
         __props__.__dict__["name"] = name
         __props__.__dict__["parameter_id"] = parameter_id
@@ -631,6 +710,15 @@ class Parameter(pulumi.CustomResource):
         """
         return pulumi.get(self, "format")
 
+    @property
+    @pulumi.getter(name="kmsKey")
+    def kms_key(self) -> pulumi.Output[Optional[str]]:
+        """
+        The resource name of the Cloud KMS CryptoKey used to encrypt parameter version payload. Format
+        `projects/{{project}}/locations/global/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}`
+        """
+        return pulumi.get(self, "kms_key")
+
     @property
     @pulumi.getter
     def labels(self) -> pulumi.Output[Optional[Mapping[str, str]]]: