pulumi-gcp 8.37.0a1751903932__py3-none-any.whl → 8.39.0a1752699425__py3-none-any.whl

pulumi_gcp/certificateauthority/authority.py

@@ -51,30 +51,42 @@ class AuthorityArgs:
         :param pulumi.Input[builtins.str] location: Location of the CertificateAuthority. A full list of valid locations can be found by
                running `gcloud privateca locations list`.
         :param pulumi.Input[builtins.str] pool: The name of the CaPool this Certificate Authority belongs to.
-        :param pulumi.Input[builtins.str] desired_state: Desired state of the CertificateAuthority. Set this field to 'STAGED' to create a 'STAGED' root CA. Possible values:
-               ENABLED, DISABLED, STAGED.
-        :param pulumi.Input[builtins.str] gcs_bucket: The name of a Cloud Storage bucket where this CertificateAuthority will publish content, such as the CA certificate and
-               CRLs. This must be a bucket name, without any prefixes (such as 'gs://') or suffixes (such as '.googleapis.com'). For
-               example, to use a bucket named my-bucket, you would simply specify 'my-bucket'. If not specified, a managed bucket will
-               be created.
-        :param pulumi.Input[builtins.bool] ignore_active_certificates_on_deletion: This field allows the CA to be deleted even if the CA has active certs. Active certs include both unrevoked and
-               unexpired certs. Use with care. Defaults to 'false'.
-        :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] labels: Labels with user-defined metadata. An object containing a list of "key": value pairs. Example: { "name": "wrench",
-               "mass": "1.3kg", "count": "3" }. **Note**: This field is non-authoritative, and will only manage the labels present in
-               your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
-        :param pulumi.Input[builtins.str] lifetime: The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and "notAfterTime" fields inside an X.509
-               certificate. A duration in seconds with up to nine fractional digits, terminated by 's'. Example: "3.5s".
-        :param pulumi.Input[builtins.str] pem_ca_certificate: The signed CA certificate issued from the subordinated CA's CSR. This is needed when activating the subordiante CA with
-               a third party issuer.
-        :param pulumi.Input[builtins.bool] skip_grace_period: If this flag is set, the Certificate Authority will be deleted as soon as possible without a 30-day grace period where
-               undeletion would have been allowed. If you proceed, there will be no way to recover this CA. Use with care. Defaults to
-               'false'.
-        :param pulumi.Input['AuthoritySubordinateConfigArgs'] subordinate_config: If this is a subordinate CertificateAuthority, this field will be set with the subordinate configuration, which
-               describes its issuers.
-        :param pulumi.Input[builtins.str] type: The Type of this CertificateAuthority. > **Note:** For 'SUBORDINATE' Certificate Authorities, they need to be activated
-               before they can issue certificates. Default value: "SELF_SIGNED" Possible values: ["SELF_SIGNED", "SUBORDINATE"]
-        :param pulumi.Input['AuthorityUserDefinedAccessUrlsArgs'] user_defined_access_urls: Custom URLs for accessing content published by this CA, such as the CA certificate and CRLs, that can be specified by
-               users.
+        :param pulumi.Input[builtins.str] desired_state: Desired state of the CertificateAuthority. Set this field to `STAGED` to create a `STAGED` root CA.
+               Possible values: ENABLED, DISABLED, STAGED.
+        :param pulumi.Input[builtins.str] gcs_bucket: The name of a Cloud Storage bucket where this CertificateAuthority will publish content,
+               such as the CA certificate and CRLs. This must be a bucket name, without any prefixes
+               (such as `gs://`) or suffixes (such as `.googleapis.com`). For example, to use a bucket named
+               my-bucket, you would simply specify `my-bucket`. If not specified, a managed bucket will be
+               created.
+        :param pulumi.Input[builtins.bool] ignore_active_certificates_on_deletion: This field allows the CA to be deleted even if the CA has active certs. Active certs include both unrevoked and unexpired certs.
+               Use with care. Defaults to `false`.
+        :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] labels: Labels with user-defined metadata.
+               An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass":
+               "1.3kg", "count": "3" }.
+               
+               **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
+               Please refer to the field `effective_labels` for all of the labels present on the resource.
+        :param pulumi.Input[builtins.str] lifetime: The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and
+               "notAfterTime" fields inside an X.509 certificate. A duration in seconds with up to nine
+               fractional digits, terminated by 's'. Example: "3.5s".
+        :param pulumi.Input[builtins.str] pem_ca_certificate: The signed CA certificate issued from the subordinated CA's CSR. This is needed when activating the subordiante CA with a third party issuer.
+        :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the provider project is used.
+        :param pulumi.Input[builtins.bool] skip_grace_period: If this flag is set, the Certificate Authority will be deleted as soon as
+               possible without a 30-day grace period where undeletion would have been
+               allowed. If you proceed, there will be no way to recover this CA.
+               Use with care. Defaults to `false`.
+        :param pulumi.Input['AuthoritySubordinateConfigArgs'] subordinate_config: If this is a subordinate CertificateAuthority, this field will be set
+               with the subordinate configuration, which describes its issuers.
+               Structure is documented below.
+        :param pulumi.Input[builtins.str] type: The Type of this CertificateAuthority.
+               > **Note:** For `SUBORDINATE` Certificate Authorities, they need to
+               be activated before they can issue certificates.
+               Default value is `SELF_SIGNED`.
+               Possible values are: `SELF_SIGNED`, `SUBORDINATE`.
+        :param pulumi.Input['AuthorityUserDefinedAccessUrlsArgs'] user_defined_access_urls: Custom URLs for accessing content published by this CA, such as the CA certificate and CRLs,
+               that can be specified by users.
+               Structure is documented below.
         """
         pulumi.set(__self__, "certificate_authority_id", certificate_authority_id)
         pulumi.set(__self__, "config", config)
@@ -184,8 +196,8 @@ class AuthorityArgs:
     @pulumi.getter(name="desiredState")
     def desired_state(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        Desired state of the CertificateAuthority. Set this field to 'STAGED' to create a 'STAGED' root CA. Possible values:
-        ENABLED, DISABLED, STAGED.
+        Desired state of the CertificateAuthority. Set this field to `STAGED` to create a `STAGED` root CA.
+        Possible values: ENABLED, DISABLED, STAGED.
         """
         return pulumi.get(self, "desired_state")
 
@@ -197,10 +209,11 @@ class AuthorityArgs:
     @pulumi.getter(name="gcsBucket")
     def gcs_bucket(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        The name of a Cloud Storage bucket where this CertificateAuthority will publish content, such as the CA certificate and
-        CRLs. This must be a bucket name, without any prefixes (such as 'gs://') or suffixes (such as '.googleapis.com'). For
-        example, to use a bucket named my-bucket, you would simply specify 'my-bucket'. If not specified, a managed bucket will
-        be created.
+        The name of a Cloud Storage bucket where this CertificateAuthority will publish content,
+        such as the CA certificate and CRLs. This must be a bucket name, without any prefixes
+        (such as `gs://`) or suffixes (such as `.googleapis.com`). For example, to use a bucket named
+        my-bucket, you would simply specify `my-bucket`. If not specified, a managed bucket will be
+        created.
         """
         return pulumi.get(self, "gcs_bucket")
 
@@ -212,8 +225,8 @@ class AuthorityArgs:
     @pulumi.getter(name="ignoreActiveCertificatesOnDeletion")
     def ignore_active_certificates_on_deletion(self) -> Optional[pulumi.Input[builtins.bool]]:
         """
-        This field allows the CA to be deleted even if the CA has active certs. Active certs include both unrevoked and
-        unexpired certs. Use with care. Defaults to 'false'.
+        This field allows the CA to be deleted even if the CA has active certs. Active certs include both unrevoked and unexpired certs.
+        Use with care. Defaults to `false`.
         """
         return pulumi.get(self, "ignore_active_certificates_on_deletion")
 
@@ -225,9 +238,12 @@ class AuthorityArgs:
     @pulumi.getter
     def labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]]:
         """
-        Labels with user-defined metadata. An object containing a list of "key": value pairs. Example: { "name": "wrench",
-        "mass": "1.3kg", "count": "3" }. **Note**: This field is non-authoritative, and will only manage the labels present in
-        your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
+        Labels with user-defined metadata.
+        An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass":
+        "1.3kg", "count": "3" }.
+
+        **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
+        Please refer to the field `effective_labels` for all of the labels present on the resource.
         """
         return pulumi.get(self, "labels")
 
@@ -239,8 +255,9 @@ class AuthorityArgs:
     @pulumi.getter
     def lifetime(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and "notAfterTime" fields inside an X.509
-        certificate. A duration in seconds with up to nine fractional digits, terminated by 's'. Example: "3.5s".
+        The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and
+        "notAfterTime" fields inside an X.509 certificate. A duration in seconds with up to nine
+        fractional digits, terminated by 's'. Example: "3.5s".
         """
         return pulumi.get(self, "lifetime")
 
@@ -252,8 +269,7 @@ class AuthorityArgs:
     @pulumi.getter(name="pemCaCertificate")
     def pem_ca_certificate(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        The signed CA certificate issued from the subordinated CA's CSR. This is needed when activating the subordiante CA with
-        a third party issuer.
+        The signed CA certificate issued from the subordinated CA's CSR. This is needed when activating the subordiante CA with a third party issuer.
         """
         return pulumi.get(self, "pem_ca_certificate")
 
@@ -264,6 +280,10 @@ class AuthorityArgs:
     @property
     @pulumi.getter
     def project(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        The ID of the project in which the resource belongs.
+        If it is not provided, the provider project is used.
+        """
         return pulumi.get(self, "project")
 
     @project.setter
@@ -274,9 +294,10 @@ class AuthorityArgs:
     @pulumi.getter(name="skipGracePeriod")
     def skip_grace_period(self) -> Optional[pulumi.Input[builtins.bool]]:
         """
-        If this flag is set, the Certificate Authority will be deleted as soon as possible without a 30-day grace period where
-        undeletion would have been allowed. If you proceed, there will be no way to recover this CA. Use with care. Defaults to
-        'false'.
+        If this flag is set, the Certificate Authority will be deleted as soon as
+        possible without a 30-day grace period where undeletion would have been
+        allowed. If you proceed, there will be no way to recover this CA.
+        Use with care. Defaults to `false`.
         """
         return pulumi.get(self, "skip_grace_period")
 
@@ -288,8 +309,9 @@ class AuthorityArgs:
     @pulumi.getter(name="subordinateConfig")
     def subordinate_config(self) -> Optional[pulumi.Input['AuthoritySubordinateConfigArgs']]:
         """
-        If this is a subordinate CertificateAuthority, this field will be set with the subordinate configuration, which
-        describes its issuers.
+        If this is a subordinate CertificateAuthority, this field will be set
+        with the subordinate configuration, which describes its issuers.
+        Structure is documented below.
         """
         return pulumi.get(self, "subordinate_config")
 
@@ -301,8 +323,11 @@ class AuthorityArgs:
     @pulumi.getter
     def type(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        The Type of this CertificateAuthority. > **Note:** For 'SUBORDINATE' Certificate Authorities, they need to be activated
-        before they can issue certificates. Default value: "SELF_SIGNED" Possible values: ["SELF_SIGNED", "SUBORDINATE"]
+        The Type of this CertificateAuthority.
+        > **Note:** For `SUBORDINATE` Certificate Authorities, they need to
+        be activated before they can issue certificates.
+        Default value is `SELF_SIGNED`.
+        Possible values are: `SELF_SIGNED`, `SUBORDINATE`.
         """
         return pulumi.get(self, "type")
 
@@ -314,8 +339,9 @@ class AuthorityArgs:
     @pulumi.getter(name="userDefinedAccessUrls")
     def user_defined_access_urls(self) -> Optional[pulumi.Input['AuthorityUserDefinedAccessUrlsArgs']]:
         """
-        Custom URLs for accessing content published by this CA, such as the CA certificate and CRLs, that can be specified by
-        users.
+        Custom URLs for accessing content published by this CA, such as the CA certificate and CRLs,
+        that can be specified by users.
+        Structure is documented below.
         """
         return pulumi.get(self, "user_defined_access_urls")
 
@@ -362,50 +388,62 @@ class _AuthorityState:
         :param pulumi.Input[builtins.str] create_time: The time at which this CertificateAuthority was created.
                A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine
                fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
-        :param pulumi.Input[builtins.str] desired_state: Desired state of the CertificateAuthority. Set this field to 'STAGED' to create a 'STAGED' root CA. Possible values:
-               ENABLED, DISABLED, STAGED.
+        :param pulumi.Input[builtins.str] desired_state: Desired state of the CertificateAuthority. Set this field to `STAGED` to create a `STAGED` root CA.
+               Possible values: ENABLED, DISABLED, STAGED.
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
-        :param pulumi.Input[builtins.str] gcs_bucket: The name of a Cloud Storage bucket where this CertificateAuthority will publish content, such as the CA certificate and
-               CRLs. This must be a bucket name, without any prefixes (such as 'gs://') or suffixes (such as '.googleapis.com'). For
-               example, to use a bucket named my-bucket, you would simply specify 'my-bucket'. If not specified, a managed bucket will
-               be created.
-        :param pulumi.Input[builtins.bool] ignore_active_certificates_on_deletion: This field allows the CA to be deleted even if the CA has active certs. Active certs include both unrevoked and
-               unexpired certs. Use with care. Defaults to 'false'.
+        :param pulumi.Input[builtins.str] gcs_bucket: The name of a Cloud Storage bucket where this CertificateAuthority will publish content,
+               such as the CA certificate and CRLs. This must be a bucket name, without any prefixes
+               (such as `gs://`) or suffixes (such as `.googleapis.com`). For example, to use a bucket named
+               my-bucket, you would simply specify `my-bucket`. If not specified, a managed bucket will be
+               created.
+        :param pulumi.Input[builtins.bool] ignore_active_certificates_on_deletion: This field allows the CA to be deleted even if the CA has active certs. Active certs include both unrevoked and unexpired certs.
+               Use with care. Defaults to `false`.
         :param pulumi.Input['AuthorityKeySpecArgs'] key_spec: Used when issuing certificates for this CertificateAuthority. If this CertificateAuthority
                is a self-signed CertificateAuthority, this key is also used to sign the self-signed CA
                certificate. Otherwise, it is used to sign a CSR.
                Structure is documented below.
-        :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] labels: Labels with user-defined metadata. An object containing a list of "key": value pairs. Example: { "name": "wrench",
-               "mass": "1.3kg", "count": "3" }. **Note**: This field is non-authoritative, and will only manage the labels present in
-               your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
-        :param pulumi.Input[builtins.str] lifetime: The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and "notAfterTime" fields inside an X.509
-               certificate. A duration in seconds with up to nine fractional digits, terminated by 's'. Example: "3.5s".
+        :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] labels: Labels with user-defined metadata.
+               An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass":
+               "1.3kg", "count": "3" }.
+               
+               **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
+               Please refer to the field `effective_labels` for all of the labels present on the resource.
+        :param pulumi.Input[builtins.str] lifetime: The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and
+               "notAfterTime" fields inside an X.509 certificate. A duration in seconds with up to nine
+               fractional digits, terminated by 's'. Example: "3.5s".
         :param pulumi.Input[builtins.str] location: Location of the CertificateAuthority. A full list of valid locations can be found by
                running `gcloud privateca locations list`.
         :param pulumi.Input[builtins.str] name: The resource name for this CertificateAuthority in the format
                projects/*/locations/*/certificateAuthorities/*.
-        :param pulumi.Input[builtins.str] pem_ca_certificate: The signed CA certificate issued from the subordinated CA's CSR. This is needed when activating the subordiante CA with
-               a third party issuer.
+        :param pulumi.Input[builtins.str] pem_ca_certificate: The signed CA certificate issued from the subordinated CA's CSR. This is needed when activating the subordiante CA with a third party issuer.
         :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] pem_ca_certificates: This CertificateAuthority's certificate chain, including the current
                CertificateAuthority's certificate. Ordered such that the root issuer is the final
                element (consistent with RFC 5246). For a self-signed CA, this will only list the current
                CertificateAuthority's certificate.
         :param pulumi.Input[builtins.str] pool: The name of the CaPool this Certificate Authority belongs to.
+        :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the provider project is used.
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] pulumi_labels: The combination of labels configured directly on the resource
                and default labels configured on the provider.
-        :param pulumi.Input[builtins.bool] skip_grace_period: If this flag is set, the Certificate Authority will be deleted as soon as possible without a 30-day grace period where
-               undeletion would have been allowed. If you proceed, there will be no way to recover this CA. Use with care. Defaults to
-               'false'.
+        :param pulumi.Input[builtins.bool] skip_grace_period: If this flag is set, the Certificate Authority will be deleted as soon as
+               possible without a 30-day grace period where undeletion would have been
+               allowed. If you proceed, there will be no way to recover this CA.
+               Use with care. Defaults to `false`.
         :param pulumi.Input[builtins.str] state: The State for this CertificateAuthority.
-        :param pulumi.Input['AuthoritySubordinateConfigArgs'] subordinate_config: If this is a subordinate CertificateAuthority, this field will be set with the subordinate configuration, which
-               describes its issuers.
-        :param pulumi.Input[builtins.str] type: The Type of this CertificateAuthority. > **Note:** For 'SUBORDINATE' Certificate Authorities, they need to be activated
-               before they can issue certificates. Default value: "SELF_SIGNED" Possible values: ["SELF_SIGNED", "SUBORDINATE"]
+        :param pulumi.Input['AuthoritySubordinateConfigArgs'] subordinate_config: If this is a subordinate CertificateAuthority, this field will be set
+               with the subordinate configuration, which describes its issuers.
+               Structure is documented below.
+        :param pulumi.Input[builtins.str] type: The Type of this CertificateAuthority.
+               > **Note:** For `SUBORDINATE` Certificate Authorities, they need to
+               be activated before they can issue certificates.
+               Default value is `SELF_SIGNED`.
+               Possible values are: `SELF_SIGNED`, `SUBORDINATE`.
         :param pulumi.Input[builtins.str] update_time: The time at which this CertificateAuthority was updated.
                A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine
                fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
-        :param pulumi.Input['AuthorityUserDefinedAccessUrlsArgs'] user_defined_access_urls: Custom URLs for accessing content published by this CA, such as the CA certificate and CRLs, that can be specified by
-               users.
+        :param pulumi.Input['AuthorityUserDefinedAccessUrlsArgs'] user_defined_access_urls: Custom URLs for accessing content published by this CA, such as the CA certificate and CRLs,
+               that can be specified by users.
+               Structure is documented below.
         """
         if access_urls is not None:
             pulumi.set(__self__, "access_urls", access_urls)
@@ -523,8 +561,8 @@ class _AuthorityState:
     @pulumi.getter(name="desiredState")
     def desired_state(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        Desired state of the CertificateAuthority. Set this field to 'STAGED' to create a 'STAGED' root CA. Possible values:
-        ENABLED, DISABLED, STAGED.
+        Desired state of the CertificateAuthority. Set this field to `STAGED` to create a `STAGED` root CA.
+        Possible values: ENABLED, DISABLED, STAGED.
         """
         return pulumi.get(self, "desired_state")
 
@@ -548,10 +586,11 @@ class _AuthorityState:
     @pulumi.getter(name="gcsBucket")
     def gcs_bucket(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        The name of a Cloud Storage bucket where this CertificateAuthority will publish content, such as the CA certificate and
-        CRLs. This must be a bucket name, without any prefixes (such as 'gs://') or suffixes (such as '.googleapis.com'). For
-        example, to use a bucket named my-bucket, you would simply specify 'my-bucket'. If not specified, a managed bucket will
-        be created.
+        The name of a Cloud Storage bucket where this CertificateAuthority will publish content,
+        such as the CA certificate and CRLs. This must be a bucket name, without any prefixes
+        (such as `gs://`) or suffixes (such as `.googleapis.com`). For example, to use a bucket named
+        my-bucket, you would simply specify `my-bucket`. If not specified, a managed bucket will be
+        created.
         """
         return pulumi.get(self, "gcs_bucket")
 
@@ -563,8 +602,8 @@ class _AuthorityState:
     @pulumi.getter(name="ignoreActiveCertificatesOnDeletion")
     def ignore_active_certificates_on_deletion(self) -> Optional[pulumi.Input[builtins.bool]]:
         """
-        This field allows the CA to be deleted even if the CA has active certs. Active certs include both unrevoked and
-        unexpired certs. Use with care. Defaults to 'false'.
+        This field allows the CA to be deleted even if the CA has active certs. Active certs include both unrevoked and unexpired certs.
+        Use with care. Defaults to `false`.
         """
         return pulumi.get(self, "ignore_active_certificates_on_deletion")
 
@@ -591,9 +630,12 @@ class _AuthorityState:
     @pulumi.getter
     def labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]]:
         """
-        Labels with user-defined metadata. An object containing a list of "key": value pairs. Example: { "name": "wrench",
-        "mass": "1.3kg", "count": "3" }. **Note**: This field is non-authoritative, and will only manage the labels present in
-        your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
+        Labels with user-defined metadata.
+        An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass":
+        "1.3kg", "count": "3" }.
+
+        **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
+        Please refer to the field `effective_labels` for all of the labels present on the resource.
         """
         return pulumi.get(self, "labels")
 
@@ -605,8 +647,9 @@ class _AuthorityState:
     @pulumi.getter
     def lifetime(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and "notAfterTime" fields inside an X.509
-        certificate. A duration in seconds with up to nine fractional digits, terminated by 's'. Example: "3.5s".
+        The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and
+        "notAfterTime" fields inside an X.509 certificate. A duration in seconds with up to nine
+        fractional digits, terminated by 's'. Example: "3.5s".
         """
         return pulumi.get(self, "lifetime")
 
@@ -644,8 +687,7 @@ class _AuthorityState:
     @pulumi.getter(name="pemCaCertificate")
     def pem_ca_certificate(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        The signed CA certificate issued from the subordinated CA's CSR. This is needed when activating the subordiante CA with
-        a third party issuer.
+        The signed CA certificate issued from the subordinated CA's CSR. This is needed when activating the subordiante CA with a third party issuer.
         """
         return pulumi.get(self, "pem_ca_certificate")
 
@@ -683,6 +725,10 @@ class _AuthorityState:
     @property
     @pulumi.getter
     def project(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        The ID of the project in which the resource belongs.
+        If it is not provided, the provider project is used.
+        """
         return pulumi.get(self, "project")
 
     @project.setter
@@ -706,9 +752,10 @@ class _AuthorityState:
     @pulumi.getter(name="skipGracePeriod")
     def skip_grace_period(self) -> Optional[pulumi.Input[builtins.bool]]:
         """
-        If this flag is set, the Certificate Authority will be deleted as soon as possible without a 30-day grace period where
-        undeletion would have been allowed. If you proceed, there will be no way to recover this CA. Use with care. Defaults to
-        'false'.
+        If this flag is set, the Certificate Authority will be deleted as soon as
+        possible without a 30-day grace period where undeletion would have been
+        allowed. If you proceed, there will be no way to recover this CA.
+        Use with care. Defaults to `false`.
         """
         return pulumi.get(self, "skip_grace_period")
 
@@ -732,8 +779,9 @@ class _AuthorityState:
     @pulumi.getter(name="subordinateConfig")
     def subordinate_config(self) -> Optional[pulumi.Input['AuthoritySubordinateConfigArgs']]:
         """
-        If this is a subordinate CertificateAuthority, this field will be set with the subordinate configuration, which
-        describes its issuers.
+        If this is a subordinate CertificateAuthority, this field will be set
+        with the subordinate configuration, which describes its issuers.
+        Structure is documented below.
         """
         return pulumi.get(self, "subordinate_config")
 
@@ -745,8 +793,11 @@ class _AuthorityState:
     @pulumi.getter
     def type(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        The Type of this CertificateAuthority. > **Note:** For 'SUBORDINATE' Certificate Authorities, they need to be activated
-        before they can issue certificates. Default value: "SELF_SIGNED" Possible values: ["SELF_SIGNED", "SUBORDINATE"]
+        The Type of this CertificateAuthority.
+        > **Note:** For `SUBORDINATE` Certificate Authorities, they need to
+        be activated before they can issue certificates.
+        Default value is `SELF_SIGNED`.
+        Possible values are: `SELF_SIGNED`, `SUBORDINATE`.
         """
         return pulumi.get(self, "type")
 
@@ -772,8 +823,9 @@ class _AuthorityState:
     @pulumi.getter(name="userDefinedAccessUrls")
     def user_defined_access_urls(self) -> Optional[pulumi.Input['AuthorityUserDefinedAccessUrlsArgs']]:
         """
-        Custom URLs for accessing content published by this CA, such as the CA certificate and CRLs, that can be specified by
-        users.
+        Custom URLs for accessing content published by this CA, such as the CA certificate and CRLs,
+        that can be specified by users.
+        Structure is documented below.
         """
         return pulumi.get(self, "user_defined_access_urls")
 
@@ -1138,37 +1190,49 @@ class Authority(pulumi.CustomResource):
         :param pulumi.Input[builtins.str] certificate_authority_id: The user provided Resource ID for this Certificate Authority.
         :param pulumi.Input[Union['AuthorityConfigArgs', 'AuthorityConfigArgsDict']] config: The config used to create a self-signed X.509 certificate or CSR.
                Structure is documented below.
-        :param pulumi.Input[builtins.str] desired_state: Desired state of the CertificateAuthority. Set this field to 'STAGED' to create a 'STAGED' root CA. Possible values:
-               ENABLED, DISABLED, STAGED.
-        :param pulumi.Input[builtins.str] gcs_bucket: The name of a Cloud Storage bucket where this CertificateAuthority will publish content, such as the CA certificate and
-               CRLs. This must be a bucket name, without any prefixes (such as 'gs://') or suffixes (such as '.googleapis.com'). For
-               example, to use a bucket named my-bucket, you would simply specify 'my-bucket'. If not specified, a managed bucket will
-               be created.
-        :param pulumi.Input[builtins.bool] ignore_active_certificates_on_deletion: This field allows the CA to be deleted even if the CA has active certs. Active certs include both unrevoked and
-               unexpired certs. Use with care. Defaults to 'false'.
+        :param pulumi.Input[builtins.str] desired_state: Desired state of the CertificateAuthority. Set this field to `STAGED` to create a `STAGED` root CA.
+               Possible values: ENABLED, DISABLED, STAGED.
+        :param pulumi.Input[builtins.str] gcs_bucket: The name of a Cloud Storage bucket where this CertificateAuthority will publish content,
+               such as the CA certificate and CRLs. This must be a bucket name, without any prefixes
+               (such as `gs://`) or suffixes (such as `.googleapis.com`). For example, to use a bucket named
+               my-bucket, you would simply specify `my-bucket`. If not specified, a managed bucket will be
+               created.
+        :param pulumi.Input[builtins.bool] ignore_active_certificates_on_deletion: This field allows the CA to be deleted even if the CA has active certs. Active certs include both unrevoked and unexpired certs.
+               Use with care. Defaults to `false`.
         :param pulumi.Input[Union['AuthorityKeySpecArgs', 'AuthorityKeySpecArgsDict']] key_spec: Used when issuing certificates for this CertificateAuthority. If this CertificateAuthority
                is a self-signed CertificateAuthority, this key is also used to sign the self-signed CA
                certificate. Otherwise, it is used to sign a CSR.
                Structure is documented below.
-        :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] labels: Labels with user-defined metadata. An object containing a list of "key": value pairs. Example: { "name": "wrench",
-               "mass": "1.3kg", "count": "3" }. **Note**: This field is non-authoritative, and will only manage the labels present in
-               your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
-        :param pulumi.Input[builtins.str] lifetime: The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and "notAfterTime" fields inside an X.509
-               certificate. A duration in seconds with up to nine fractional digits, terminated by 's'. Example: "3.5s".
+        :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] labels: Labels with user-defined metadata.
+               An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass":
+               "1.3kg", "count": "3" }.
+               
+               **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
+               Please refer to the field `effective_labels` for all of the labels present on the resource.
+        :param pulumi.Input[builtins.str] lifetime: The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and
+               "notAfterTime" fields inside an X.509 certificate. A duration in seconds with up to nine
+               fractional digits, terminated by 's'. Example: "3.5s".
         :param pulumi.Input[builtins.str] location: Location of the CertificateAuthority. A full list of valid locations can be found by
                running `gcloud privateca locations list`.
-        :param pulumi.Input[builtins.str] pem_ca_certificate: The signed CA certificate issued from the subordinated CA's CSR. This is needed when activating the subordiante CA with
-               a third party issuer.
+        :param pulumi.Input[builtins.str] pem_ca_certificate: The signed CA certificate issued from the subordinated CA's CSR. This is needed when activating the subordiante CA with a third party issuer.
         :param pulumi.Input[builtins.str] pool: The name of the CaPool this Certificate Authority belongs to.
-        :param pulumi.Input[builtins.bool] skip_grace_period: If this flag is set, the Certificate Authority will be deleted as soon as possible without a 30-day grace period where
-               undeletion would have been allowed. If you proceed, there will be no way to recover this CA. Use with care. Defaults to
-               'false'.
-        :param pulumi.Input[Union['AuthoritySubordinateConfigArgs', 'AuthoritySubordinateConfigArgsDict']] subordinate_config: If this is a subordinate CertificateAuthority, this field will be set with the subordinate configuration, which
-               describes its issuers.
-        :param pulumi.Input[builtins.str] type: The Type of this CertificateAuthority. > **Note:** For 'SUBORDINATE' Certificate Authorities, they need to be activated
-               before they can issue certificates. Default value: "SELF_SIGNED" Possible values: ["SELF_SIGNED", "SUBORDINATE"]
-        :param pulumi.Input[Union['AuthorityUserDefinedAccessUrlsArgs', 'AuthorityUserDefinedAccessUrlsArgsDict']] user_defined_access_urls: Custom URLs for accessing content published by this CA, such as the CA certificate and CRLs, that can be specified by
-               users.
+        :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the provider project is used.
+        :param pulumi.Input[builtins.bool] skip_grace_period: If this flag is set, the Certificate Authority will be deleted as soon as
+               possible without a 30-day grace period where undeletion would have been
+               allowed. If you proceed, there will be no way to recover this CA.
+               Use with care. Defaults to `false`.
+        :param pulumi.Input[Union['AuthoritySubordinateConfigArgs', 'AuthoritySubordinateConfigArgsDict']] subordinate_config: If this is a subordinate CertificateAuthority, this field will be set
+               with the subordinate configuration, which describes its issuers.
+               Structure is documented below.
+        :param pulumi.Input[builtins.str] type: The Type of this CertificateAuthority.
+               > **Note:** For `SUBORDINATE` Certificate Authorities, they need to
+               be activated before they can issue certificates.
+               Default value is `SELF_SIGNED`.
+               Possible values are: `SELF_SIGNED`, `SUBORDINATE`.
+        :param pulumi.Input[Union['AuthorityUserDefinedAccessUrlsArgs', 'AuthorityUserDefinedAccessUrlsArgsDict']] user_defined_access_urls: Custom URLs for accessing content published by this CA, such as the CA certificate and CRLs,
+               that can be specified by users.
+               Structure is documented below.
         """
         ...
     @overload
@@ -1631,50 +1695,62 @@ class Authority(pulumi.CustomResource):
         :param pulumi.Input[builtins.str] create_time: The time at which this CertificateAuthority was created.
                A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine
                fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
-        :param pulumi.Input[builtins.str] desired_state: Desired state of the CertificateAuthority. Set this field to 'STAGED' to create a 'STAGED' root CA. Possible values:
-               ENABLED, DISABLED, STAGED.
+        :param pulumi.Input[builtins.str] desired_state: Desired state of the CertificateAuthority. Set this field to `STAGED` to create a `STAGED` root CA.
+               Possible values: ENABLED, DISABLED, STAGED.
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
-        :param pulumi.Input[builtins.str] gcs_bucket: The name of a Cloud Storage bucket where this CertificateAuthority will publish content, such as the CA certificate and
-               CRLs. This must be a bucket name, without any prefixes (such as 'gs://') or suffixes (such as '.googleapis.com'). For
-               example, to use a bucket named my-bucket, you would simply specify 'my-bucket'. If not specified, a managed bucket will
-               be created.
-        :param pulumi.Input[builtins.bool] ignore_active_certificates_on_deletion: This field allows the CA to be deleted even if the CA has active certs. Active certs include both unrevoked and
-               unexpired certs. Use with care. Defaults to 'false'.
+        :param pulumi.Input[builtins.str] gcs_bucket: The name of a Cloud Storage bucket where this CertificateAuthority will publish content,
+               such as the CA certificate and CRLs. This must be a bucket name, without any prefixes
+               (such as `gs://`) or suffixes (such as `.googleapis.com`). For example, to use a bucket named
+               my-bucket, you would simply specify `my-bucket`. If not specified, a managed bucket will be
+               created.
+        :param pulumi.Input[builtins.bool] ignore_active_certificates_on_deletion: This field allows the CA to be deleted even if the CA has active certs. Active certs include both unrevoked and unexpired certs.
+               Use with care. Defaults to `false`.
         :param pulumi.Input[Union['AuthorityKeySpecArgs', 'AuthorityKeySpecArgsDict']] key_spec: Used when issuing certificates for this CertificateAuthority. If this CertificateAuthority
                is a self-signed CertificateAuthority, this key is also used to sign the self-signed CA
                certificate. Otherwise, it is used to sign a CSR.
                Structure is documented below.
-        :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] labels: Labels with user-defined metadata. An object containing a list of "key": value pairs. Example: { "name": "wrench",
-               "mass": "1.3kg", "count": "3" }. **Note**: This field is non-authoritative, and will only manage the labels present in
-               your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
-        :param pulumi.Input[builtins.str] lifetime: The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and "notAfterTime" fields inside an X.509
-               certificate. A duration in seconds with up to nine fractional digits, terminated by 's'. Example: "3.5s".
+        :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] labels: Labels with user-defined metadata.
+               An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass":
+               "1.3kg", "count": "3" }.
+               
+               **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
+               Please refer to the field `effective_labels` for all of the labels present on the resource.
+        :param pulumi.Input[builtins.str] lifetime: The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and
+               "notAfterTime" fields inside an X.509 certificate. A duration in seconds with up to nine
+               fractional digits, terminated by 's'. Example: "3.5s".
         :param pulumi.Input[builtins.str] location: Location of the CertificateAuthority. A full list of valid locations can be found by
                running `gcloud privateca locations list`.
         :param pulumi.Input[builtins.str] name: The resource name for this CertificateAuthority in the format
                projects/*/locations/*/certificateAuthorities/*.
-        :param pulumi.Input[builtins.str] pem_ca_certificate: The signed CA certificate issued from the subordinated CA's CSR. This is needed when activating the subordiante CA with
-               a third party issuer.
+        :param pulumi.Input[builtins.str] pem_ca_certificate: The signed CA certificate issued from the subordinated CA's CSR. This is needed when activating the subordiante CA with a third party issuer.
         :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] pem_ca_certificates: This CertificateAuthority's certificate chain, including the current
                CertificateAuthority's certificate. Ordered such that the root issuer is the final
                element (consistent with RFC 5246). For a self-signed CA, this will only list the current
                CertificateAuthority's certificate.
         :param pulumi.Input[builtins.str] pool: The name of the CaPool this Certificate Authority belongs to.
+        :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the provider project is used.
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] pulumi_labels: The combination of labels configured directly on the resource
                and default labels configured on the provider.
-        :param pulumi.Input[builtins.bool] skip_grace_period: If this flag is set, the Certificate Authority will be deleted as soon as possible without a 30-day grace period where
-               undeletion would have been allowed. If you proceed, there will be no way to recover this CA. Use with care. Defaults to
-               'false'.
+        :param pulumi.Input[builtins.bool] skip_grace_period: If this flag is set, the Certificate Authority will be deleted as soon as
+               possible without a 30-day grace period where undeletion would have been
+               allowed. If you proceed, there will be no way to recover this CA.
+               Use with care. Defaults to `false`.
         :param pulumi.Input[builtins.str] state: The State for this CertificateAuthority.
-        :param pulumi.Input[Union['AuthoritySubordinateConfigArgs', 'AuthoritySubordinateConfigArgsDict']] subordinate_config: If this is a subordinate CertificateAuthority, this field will be set with the subordinate configuration, which
-               describes its issuers.
-        :param pulumi.Input[builtins.str] type: The Type of this CertificateAuthority. > **Note:** For 'SUBORDINATE' Certificate Authorities, they need to be activated
-               before they can issue certificates. Default value: "SELF_SIGNED" Possible values: ["SELF_SIGNED", "SUBORDINATE"]
+        :param pulumi.Input[Union['AuthoritySubordinateConfigArgs', 'AuthoritySubordinateConfigArgsDict']] subordinate_config: If this is a subordinate CertificateAuthority, this field will be set
+               with the subordinate configuration, which describes its issuers.
+               Structure is documented below.
+        :param pulumi.Input[builtins.str] type: The Type of this CertificateAuthority.
+               > **Note:** For `SUBORDINATE` Certificate Authorities, they need to
+               be activated before they can issue certificates.
+               Default value is `SELF_SIGNED`.
+               Possible values are: `SELF_SIGNED`, `SUBORDINATE`.
         :param pulumi.Input[builtins.str] update_time: The time at which this CertificateAuthority was updated.
                A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine
                fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
-        :param pulumi.Input[Union['AuthorityUserDefinedAccessUrlsArgs', 'AuthorityUserDefinedAccessUrlsArgsDict']] user_defined_access_urls: Custom URLs for accessing content published by this CA, such as the CA certificate and CRLs, that can be specified by
-               users.
+        :param pulumi.Input[Union['AuthorityUserDefinedAccessUrlsArgs', 'AuthorityUserDefinedAccessUrlsArgsDict']] user_defined_access_urls: Custom URLs for accessing content published by this CA, such as the CA certificate and CRLs,
+               that can be specified by users.
+               Structure is documented below.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -1752,8 +1828,8 @@ class Authority(pulumi.CustomResource):
     @pulumi.getter(name="desiredState")
     def desired_state(self) -> pulumi.Output[Optional[builtins.str]]:
         """
-        Desired state of the CertificateAuthority. Set this field to 'STAGED' to create a 'STAGED' root CA. Possible values:
-        ENABLED, DISABLED, STAGED.
+        Desired state of the CertificateAuthority. Set this field to `STAGED` to create a `STAGED` root CA.
+        Possible values: ENABLED, DISABLED, STAGED.
         """
         return pulumi.get(self, "desired_state")
 
@@ -1769,10 +1845,11 @@ class Authority(pulumi.CustomResource):
     @pulumi.getter(name="gcsBucket")
     def gcs_bucket(self) -> pulumi.Output[Optional[builtins.str]]:
         """
-        The name of a Cloud Storage bucket where this CertificateAuthority will publish content, such as the CA certificate and
-        CRLs. This must be a bucket name, without any prefixes (such as 'gs://') or suffixes (such as '.googleapis.com'). For
-        example, to use a bucket named my-bucket, you would simply specify 'my-bucket'. If not specified, a managed bucket will
-        be created.
+        The name of a Cloud Storage bucket where this CertificateAuthority will publish content,
+        such as the CA certificate and CRLs. This must be a bucket name, without any prefixes
+        (such as `gs://`) or suffixes (such as `.googleapis.com`). For example, to use a bucket named
+        my-bucket, you would simply specify `my-bucket`. If not specified, a managed bucket will be
+        created.
         """
         return pulumi.get(self, "gcs_bucket")
 
@@ -1780,8 +1857,8 @@ class Authority(pulumi.CustomResource):
     @pulumi.getter(name="ignoreActiveCertificatesOnDeletion")
     def ignore_active_certificates_on_deletion(self) -> pulumi.Output[Optional[builtins.bool]]:
         """
-        This field allows the CA to be deleted even if the CA has active certs. Active certs include both unrevoked and
-        unexpired certs. Use with care. Defaults to 'false'.
+        This field allows the CA to be deleted even if the CA has active certs. Active certs include both unrevoked and unexpired certs.
+        Use with care. Defaults to `false`.
         """
         return pulumi.get(self, "ignore_active_certificates_on_deletion")
 
@@ -1800,9 +1877,12 @@ class Authority(pulumi.CustomResource):
     @pulumi.getter
     def labels(self) -> pulumi.Output[Optional[Mapping[str, builtins.str]]]:
         """
-        Labels with user-defined metadata. An object containing a list of "key": value pairs. Example: { "name": "wrench",
-        "mass": "1.3kg", "count": "3" }. **Note**: This field is non-authoritative, and will only manage the labels present in
-        your configuration. Please refer to the field 'effective_labels' for all of the labels present on the resource.
+        Labels with user-defined metadata.
+        An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass":
+        "1.3kg", "count": "3" }.
+
+        **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
+        Please refer to the field `effective_labels` for all of the labels present on the resource.
         """
         return pulumi.get(self, "labels")
 
@@ -1810,8 +1890,9 @@ class Authority(pulumi.CustomResource):
     @pulumi.getter
     def lifetime(self) -> pulumi.Output[Optional[builtins.str]]:
         """
-        The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and "notAfterTime" fields inside an X.509
-        certificate. A duration in seconds with up to nine fractional digits, terminated by 's'. Example: "3.5s".
+        The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and
+        "notAfterTime" fields inside an X.509 certificate. A duration in seconds with up to nine
+        fractional digits, terminated by 's'. Example: "3.5s".
         """
         return pulumi.get(self, "lifetime")
 
@@ -1837,8 +1918,7 @@ class Authority(pulumi.CustomResource):
     @pulumi.getter(name="pemCaCertificate")
     def pem_ca_certificate(self) -> pulumi.Output[Optional[builtins.str]]:
         """
-        The signed CA certificate issued from the subordinated CA's CSR. This is needed when activating the subordiante CA with
-        a third party issuer.
+        The signed CA certificate issued from the subordinated CA's CSR. This is needed when activating the subordiante CA with a third party issuer.
         """
         return pulumi.get(self, "pem_ca_certificate")
 
@@ -1864,6 +1944,10 @@ class Authority(pulumi.CustomResource):
     @property
     @pulumi.getter
     def project(self) -> pulumi.Output[builtins.str]:
+        """
+        The ID of the project in which the resource belongs.
+        If it is not provided, the provider project is used.
+        """
         return pulumi.get(self, "project")
 
     @property
@@ -1879,9 +1963,10 @@ class Authority(pulumi.CustomResource):
     @pulumi.getter(name="skipGracePeriod")
     def skip_grace_period(self) -> pulumi.Output[Optional[builtins.bool]]:
         """
-        If this flag is set, the Certificate Authority will be deleted as soon as possible without a 30-day grace period where
-        undeletion would have been allowed. If you proceed, there will be no way to recover this CA. Use with care. Defaults to
-        'false'.
+        If this flag is set, the Certificate Authority will be deleted as soon as
+        possible without a 30-day grace period where undeletion would have been
+        allowed. If you proceed, there will be no way to recover this CA.
+        Use with care. Defaults to `false`.
         """
         return pulumi.get(self, "skip_grace_period")
 
@@ -1897,8 +1982,9 @@ class Authority(pulumi.CustomResource):
     @pulumi.getter(name="subordinateConfig")
     def subordinate_config(self) -> pulumi.Output[Optional['outputs.AuthoritySubordinateConfig']]:
         """
-        If this is a subordinate CertificateAuthority, this field will be set with the subordinate configuration, which
-        describes its issuers.
+        If this is a subordinate CertificateAuthority, this field will be set
+        with the subordinate configuration, which describes its issuers.
+        Structure is documented below.
         """
         return pulumi.get(self, "subordinate_config")
 
@@ -1906,8 +1992,11 @@ class Authority(pulumi.CustomResource):
     @pulumi.getter
     def type(self) -> pulumi.Output[Optional[builtins.str]]:
         """
-        The Type of this CertificateAuthority. > **Note:** For 'SUBORDINATE' Certificate Authorities, they need to be activated
-        before they can issue certificates. Default value: "SELF_SIGNED" Possible values: ["SELF_SIGNED", "SUBORDINATE"]
+        The Type of this CertificateAuthority.
+        > **Note:** For `SUBORDINATE` Certificate Authorities, they need to
+        be activated before they can issue certificates.
+        Default value is `SELF_SIGNED`.
+        Possible values are: `SELF_SIGNED`, `SUBORDINATE`.
         """
         return pulumi.get(self, "type")
 
@@ -1925,8 +2014,9 @@ class Authority(pulumi.CustomResource):
     @pulumi.getter(name="userDefinedAccessUrls")
     def user_defined_access_urls(self) -> pulumi.Output[Optional['outputs.AuthorityUserDefinedAccessUrls']]:
         """
-        Custom URLs for accessing content published by this CA, such as the CA certificate and CRLs, that can be specified by
-        users.
+        Custom URLs for accessing content published by this CA, such as the CA certificate and CRLs,
+        that can be specified by users.
+        Structure is documented below.
         """
         return pulumi.get(self, "user_defined_access_urls")