pulumi-gcp 8.40.0a1754721948__py3-none-any.whl → 8.41.0__py3-none-any.whl

pulumi_gcp/securesourcemanager/repository.py

@@ -24,6 +24,7 @@ class RepositoryArgs:
                  instance: pulumi.Input[_builtins.str],
                  location: pulumi.Input[_builtins.str],
                  repository_id: pulumi.Input[_builtins.str],
+                 deletion_policy: Optional[pulumi.Input[_builtins.str]] = None,
                  description: Optional[pulumi.Input[_builtins.str]] = None,
                  initial_config: Optional[pulumi.Input['RepositoryInitialConfigArgs']] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None):
@@ -32,6 +33,14 @@ class RepositoryArgs:
         :param pulumi.Input[_builtins.str] instance: The name of the instance in which the repository is hosted.
         :param pulumi.Input[_builtins.str] location: The location for the Repository.
         :param pulumi.Input[_builtins.str] repository_id: The ID for the Repository.
+        :param pulumi.Input[_builtins.str] deletion_policy: The deletion policy for the repository. Setting `ABANDON` allows the resource
+               to be abandoned, rather than deleted. Setting `DELETE` deletes the resource
+               and all its contents. Setting `PREVENT` prevents the resource from accidental deletion
+               by erroring out during plan.
+               Default is `DELETE`.  Possible values are:
+               * DELETE
+               * PREVENT
+               * ABANDON
         :param pulumi.Input[_builtins.str] description: Description of the repository, which cannot exceed 500 characters.
         :param pulumi.Input['RepositoryInitialConfigArgs'] initial_config: Initial configurations for the repository.
                Structure is documented below.
@@ -41,6 +50,8 @@ class RepositoryArgs:
         pulumi.set(__self__, "instance", instance)
         pulumi.set(__self__, "location", location)
         pulumi.set(__self__, "repository_id", repository_id)
+        if deletion_policy is not None:
+            pulumi.set(__self__, "deletion_policy", deletion_policy)
         if description is not None:
             pulumi.set(__self__, "description", description)
         if initial_config is not None:
@@ -84,6 +95,25 @@ class RepositoryArgs:
     def repository_id(self, value: pulumi.Input[_builtins.str]):
         pulumi.set(self, "repository_id", value)
 
+    @_builtins.property
+    @pulumi.getter(name="deletionPolicy")
+    def deletion_policy(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The deletion policy for the repository. Setting `ABANDON` allows the resource
+        to be abandoned, rather than deleted. Setting `DELETE` deletes the resource
+        and all its contents. Setting `PREVENT` prevents the resource from accidental deletion
+        by erroring out during plan.
+        Default is `DELETE`.  Possible values are:
+        * DELETE
+        * PREVENT
+        * ABANDON
+        """
+        return pulumi.get(self, "deletion_policy")
+
+    @deletion_policy.setter
+    def deletion_policy(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "deletion_policy", value)
+
     @_builtins.property
     @pulumi.getter
     def description(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -127,6 +157,7 @@ class RepositoryArgs:
 class _RepositoryState:
     def __init__(__self__, *,
                  create_time: Optional[pulumi.Input[_builtins.str]] = None,
+                 deletion_policy: Optional[pulumi.Input[_builtins.str]] = None,
                  description: Optional[pulumi.Input[_builtins.str]] = None,
                  initial_config: Optional[pulumi.Input['RepositoryInitialConfigArgs']] = None,
                  instance: Optional[pulumi.Input[_builtins.str]] = None,
@@ -140,6 +171,14 @@ class _RepositoryState:
         """
         Input properties used for looking up and filtering Repository resources.
         :param pulumi.Input[_builtins.str] create_time: Time the repository was created in UTC.
+        :param pulumi.Input[_builtins.str] deletion_policy: The deletion policy for the repository. Setting `ABANDON` allows the resource
+               to be abandoned, rather than deleted. Setting `DELETE` deletes the resource
+               and all its contents. Setting `PREVENT` prevents the resource from accidental deletion
+               by erroring out during plan.
+               Default is `DELETE`.  Possible values are:
+               * DELETE
+               * PREVENT
+               * ABANDON
         :param pulumi.Input[_builtins.str] description: Description of the repository, which cannot exceed 500 characters.
         :param pulumi.Input['RepositoryInitialConfigArgs'] initial_config: Initial configurations for the repository.
                Structure is documented below.
@@ -156,6 +195,8 @@ class _RepositoryState:
         """
         if create_time is not None:
             pulumi.set(__self__, "create_time", create_time)
+        if deletion_policy is not None:
+            pulumi.set(__self__, "deletion_policy", deletion_policy)
         if description is not None:
             pulumi.set(__self__, "description", description)
         if initial_config is not None:
@@ -189,6 +230,25 @@ class _RepositoryState:
     def create_time(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "create_time", value)
 
+    @_builtins.property
+    @pulumi.getter(name="deletionPolicy")
+    def deletion_policy(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The deletion policy for the repository. Setting `ABANDON` allows the resource
+        to be abandoned, rather than deleted. Setting `DELETE` deletes the resource
+        and all its contents. Setting `PREVENT` prevents the resource from accidental deletion
+        by erroring out during plan.
+        Default is `DELETE`.  Possible values are:
+        * DELETE
+        * PREVENT
+        * ABANDON
+        """
+        return pulumi.get(self, "deletion_policy")
+
+    @deletion_policy.setter
+    def deletion_policy(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "deletion_policy", value)
+
     @_builtins.property
     @pulumi.getter
     def description(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -319,6 +379,7 @@ class Repository(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 deletion_policy: Optional[pulumi.Input[_builtins.str]] = None,
                  description: Optional[pulumi.Input[_builtins.str]] = None,
                  initial_config: Optional[pulumi.Input[Union['RepositoryInitialConfigArgs', 'RepositoryInitialConfigArgsDict']]] = None,
                  instance: Optional[pulumi.Input[_builtins.str]] = None,
@@ -345,11 +406,13 @@ class Repository(pulumi.CustomResource):
 
         instance = gcp.securesourcemanager.Instance("instance",
             location="us-central1",
-            instance_id="my-instance")
+            instance_id="my-instance",
+            deletion_policy="PREVENT")
         default = gcp.securesourcemanager.Repository("default",
             location="us-central1",
             repository_id="my-repository",
-            instance=instance.name)
+            instance=instance.name,
+            deletion_policy="PREVENT")
         ```
         ### Secure Source Manager Repository Initial Config
 
@@ -359,7 +422,8 @@ class Repository(pulumi.CustomResource):
 
         instance = gcp.securesourcemanager.Instance("instance",
             location="us-central1",
-            instance_id="my-instance")
+            instance_id="my-instance",
+            deletion_policy="PREVENT")
         default = gcp.securesourcemanager.Repository("default",
             location="us-central1",
             repository_id="my-repository",
@@ -370,7 +434,8 @@ class Repository(pulumi.CustomResource):
                 "gitignores": ["python"],
                 "license": "mit",
                 "readme": "default",
-            })
+            },
+            deletion_policy="PREVENT")
         ```
 
         ## Import
@@ -405,6 +470,14 @@ class Repository(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[_builtins.str] deletion_policy: The deletion policy for the repository. Setting `ABANDON` allows the resource
+               to be abandoned, rather than deleted. Setting `DELETE` deletes the resource
+               and all its contents. Setting `PREVENT` prevents the resource from accidental deletion
+               by erroring out during plan.
+               Default is `DELETE`.  Possible values are:
+               * DELETE
+               * PREVENT
+               * ABANDON
         :param pulumi.Input[_builtins.str] description: Description of the repository, which cannot exceed 500 characters.
         :param pulumi.Input[Union['RepositoryInitialConfigArgs', 'RepositoryInitialConfigArgsDict']] initial_config: Initial configurations for the repository.
                Structure is documented below.
@@ -439,11 +512,13 @@ class Repository(pulumi.CustomResource):
 
         instance = gcp.securesourcemanager.Instance("instance",
             location="us-central1",
-            instance_id="my-instance")
+            instance_id="my-instance",
+            deletion_policy="PREVENT")
         default = gcp.securesourcemanager.Repository("default",
             location="us-central1",
             repository_id="my-repository",
-            instance=instance.name)
+            instance=instance.name,
+            deletion_policy="PREVENT")
         ```
         ### Secure Source Manager Repository Initial Config
 
@@ -453,7 +528,8 @@ class Repository(pulumi.CustomResource):
 
         instance = gcp.securesourcemanager.Instance("instance",
             location="us-central1",
-            instance_id="my-instance")
+            instance_id="my-instance",
+            deletion_policy="PREVENT")
         default = gcp.securesourcemanager.Repository("default",
             location="us-central1",
             repository_id="my-repository",
@@ -464,7 +540,8 @@ class Repository(pulumi.CustomResource):
                 "gitignores": ["python"],
                 "license": "mit",
                 "readme": "default",
-            })
+            },
+            deletion_policy="PREVENT")
         ```
 
         ## Import
@@ -512,6 +589,7 @@ class Repository(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 deletion_policy: Optional[pulumi.Input[_builtins.str]] = None,
                  description: Optional[pulumi.Input[_builtins.str]] = None,
                  initial_config: Optional[pulumi.Input[Union['RepositoryInitialConfigArgs', 'RepositoryInitialConfigArgsDict']]] = None,
                  instance: Optional[pulumi.Input[_builtins.str]] = None,
@@ -527,6 +605,7 @@ class Repository(pulumi.CustomResource):
                 raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
             __props__ = RepositoryArgs.__new__(RepositoryArgs)
 
+            __props__.__dict__["deletion_policy"] = deletion_policy
             __props__.__dict__["description"] = description
             __props__.__dict__["initial_config"] = initial_config
             if instance is None and not opts.urn:
@@ -555,6 +634,7 @@ class Repository(pulumi.CustomResource):
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
             create_time: Optional[pulumi.Input[_builtins.str]] = None,
+            deletion_policy: Optional[pulumi.Input[_builtins.str]] = None,
             description: Optional[pulumi.Input[_builtins.str]] = None,
             initial_config: Optional[pulumi.Input[Union['RepositoryInitialConfigArgs', 'RepositoryInitialConfigArgsDict']]] = None,
             instance: Optional[pulumi.Input[_builtins.str]] = None,
@@ -573,6 +653,14 @@ class Repository(pulumi.CustomResource):
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[_builtins.str] create_time: Time the repository was created in UTC.
+        :param pulumi.Input[_builtins.str] deletion_policy: The deletion policy for the repository. Setting `ABANDON` allows the resource
+               to be abandoned, rather than deleted. Setting `DELETE` deletes the resource
+               and all its contents. Setting `PREVENT` prevents the resource from accidental deletion
+               by erroring out during plan.
+               Default is `DELETE`.  Possible values are:
+               * DELETE
+               * PREVENT
+               * ABANDON
         :param pulumi.Input[_builtins.str] description: Description of the repository, which cannot exceed 500 characters.
         :param pulumi.Input[Union['RepositoryInitialConfigArgs', 'RepositoryInitialConfigArgsDict']] initial_config: Initial configurations for the repository.
                Structure is documented below.
@@ -592,6 +680,7 @@ class Repository(pulumi.CustomResource):
         __props__ = _RepositoryState.__new__(_RepositoryState)
 
         __props__.__dict__["create_time"] = create_time
+        __props__.__dict__["deletion_policy"] = deletion_policy
         __props__.__dict__["description"] = description
         __props__.__dict__["initial_config"] = initial_config
         __props__.__dict__["instance"] = instance
@@ -612,6 +701,21 @@ class Repository(pulumi.CustomResource):
         """
         return pulumi.get(self, "create_time")
 
+    @_builtins.property
+    @pulumi.getter(name="deletionPolicy")
+    def deletion_policy(self) -> pulumi.Output[Optional[_builtins.str]]:
+        """
+        The deletion policy for the repository. Setting `ABANDON` allows the resource
+        to be abandoned, rather than deleted. Setting `DELETE` deletes the resource
+        and all its contents. Setting `PREVENT` prevents the resource from accidental deletion
+        by erroring out during plan.
+        Default is `DELETE`.  Possible values are:
+        * DELETE
+        * PREVENT
+        * ABANDON
+        """
+        return pulumi.get(self, "deletion_policy")
+
     @_builtins.property
     @pulumi.getter
     def description(self) -> pulumi.Output[Optional[_builtins.str]]:

pulumi_gcp/securesourcemanager/repository_iam_binding.py

@@ -373,6 +373,7 @@ class RepositoryIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Secure Source Manager Repository
+
         Three different resources help you manage your IAM policy for Secure Source Manager Repository. Each of these resources serves a different use case:
 
         * `securesourcemanager.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.
@@ -565,6 +566,7 @@ class RepositoryIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Secure Source Manager Repository
+
         Three different resources help you manage your IAM policy for Secure Source Manager Repository. Each of these resources serves a different use case:
 
         * `securesourcemanager.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.

pulumi_gcp/securesourcemanager/repository_iam_member.py

@@ -373,6 +373,7 @@ class RepositoryIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Secure Source Manager Repository
+
         Three different resources help you manage your IAM policy for Secure Source Manager Repository. Each of these resources serves a different use case:
 
         * `securesourcemanager.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.
@@ -565,6 +566,7 @@ class RepositoryIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Secure Source Manager Repository
+
         Three different resources help you manage your IAM policy for Secure Source Manager Repository. Each of these resources serves a different use case:
 
         * `securesourcemanager.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.

pulumi_gcp/securesourcemanager/repository_iam_policy.py

@@ -270,6 +270,7 @@ class RepositoryIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Secure Source Manager Repository
+
         Three different resources help you manage your IAM policy for Secure Source Manager Repository. Each of these resources serves a different use case:
 
         * `securesourcemanager.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.
@@ -450,6 +451,7 @@ class RepositoryIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Secure Source Manager Repository
+
         Three different resources help you manage your IAM policy for Secure Source Manager Repository. Each of these resources serves a different use case:
 
         * `securesourcemanager.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.

pulumi_gcp/securitycenter/instance_iam_binding.py

@@ -336,10 +336,14 @@ class InstanceIamBinding(pulumi.CustomResource):
             name="my-instance",
             key_ring=key_ring.id)
         project = gcp.organizations.get_project()
-        crypto_key_member = gcp.kms.CryptoKeyIAMMember("crypto_key_member",
+        crypto_key_member_cdf_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_cdf_sa",
             crypto_key_id=crypto_key.id,
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com")
+        crypto_key_member_gcs_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_gcs_sa",
+            crypto_key_id=crypto_key.id,
+            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
+            member=f"serviceAccount:service-{project.number}@gs-project-accounts.iam.gserviceaccount.com")
         cmek = gcp.datafusion.Instance("cmek",
             name="my-instance",
             region="us-central1",
@@ -347,7 +351,10 @@ class InstanceIamBinding(pulumi.CustomResource):
             crypto_key_config={
                 "key_reference": crypto_key.id,
             },
-            opts = pulumi.ResourceOptions(depends_on=[crypto_key_member]))
+            opts = pulumi.ResourceOptions(depends_on=[
+                    crypto_key_member_cdf_sa,
+                    crypto_key_member_gcs_sa,
+                ]))
         ```
         ### Data Fusion Instance Enterprise
 
@@ -540,10 +547,14 @@ class InstanceIamBinding(pulumi.CustomResource):
             name="my-instance",
             key_ring=key_ring.id)
         project = gcp.organizations.get_project()
-        crypto_key_member = gcp.kms.CryptoKeyIAMMember("crypto_key_member",
+        crypto_key_member_cdf_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_cdf_sa",
             crypto_key_id=crypto_key.id,
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com")
+        crypto_key_member_gcs_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_gcs_sa",
+            crypto_key_id=crypto_key.id,
+            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
+            member=f"serviceAccount:service-{project.number}@gs-project-accounts.iam.gserviceaccount.com")
         cmek = gcp.datafusion.Instance("cmek",
             name="my-instance",
             region="us-central1",
@@ -551,7 +562,10 @@ class InstanceIamBinding(pulumi.CustomResource):
             crypto_key_config={
                 "key_reference": crypto_key.id,
             },
-            opts = pulumi.ResourceOptions(depends_on=[crypto_key_member]))
+            opts = pulumi.ResourceOptions(depends_on=[
+                    crypto_key_member_cdf_sa,
+                    crypto_key_member_gcs_sa,
+                ]))
         ```
         ### Data Fusion Instance Enterprise
 

pulumi_gcp/securitycenter/instance_iam_member.py

@@ -336,10 +336,14 @@ class InstanceIamMember(pulumi.CustomResource):
             name="my-instance",
             key_ring=key_ring.id)
         project = gcp.organizations.get_project()
-        crypto_key_member = gcp.kms.CryptoKeyIAMMember("crypto_key_member",
+        crypto_key_member_cdf_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_cdf_sa",
             crypto_key_id=crypto_key.id,
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com")
+        crypto_key_member_gcs_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_gcs_sa",
+            crypto_key_id=crypto_key.id,
+            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
+            member=f"serviceAccount:service-{project.number}@gs-project-accounts.iam.gserviceaccount.com")
         cmek = gcp.datafusion.Instance("cmek",
             name="my-instance",
             region="us-central1",
@@ -347,7 +351,10 @@ class InstanceIamMember(pulumi.CustomResource):
             crypto_key_config={
                 "key_reference": crypto_key.id,
             },
-            opts = pulumi.ResourceOptions(depends_on=[crypto_key_member]))
+            opts = pulumi.ResourceOptions(depends_on=[
+                    crypto_key_member_cdf_sa,
+                    crypto_key_member_gcs_sa,
+                ]))
         ```
         ### Data Fusion Instance Enterprise
 
@@ -540,10 +547,14 @@ class InstanceIamMember(pulumi.CustomResource):
             name="my-instance",
             key_ring=key_ring.id)
         project = gcp.organizations.get_project()
-        crypto_key_member = gcp.kms.CryptoKeyIAMMember("crypto_key_member",
+        crypto_key_member_cdf_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_cdf_sa",
             crypto_key_id=crypto_key.id,
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com")
+        crypto_key_member_gcs_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_gcs_sa",
+            crypto_key_id=crypto_key.id,
+            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
+            member=f"serviceAccount:service-{project.number}@gs-project-accounts.iam.gserviceaccount.com")
         cmek = gcp.datafusion.Instance("cmek",
             name="my-instance",
             region="us-central1",
@@ -551,7 +562,10 @@ class InstanceIamMember(pulumi.CustomResource):
             crypto_key_config={
                 "key_reference": crypto_key.id,
             },
-            opts = pulumi.ResourceOptions(depends_on=[crypto_key_member]))
+            opts = pulumi.ResourceOptions(depends_on=[
+                    crypto_key_member_cdf_sa,
+                    crypto_key_member_gcs_sa,
+                ]))
         ```
         ### Data Fusion Instance Enterprise
 

pulumi_gcp/securitycenter/instance_iam_policy.py

@@ -285,10 +285,14 @@ class InstanceIamPolicy(pulumi.CustomResource):
             name="my-instance",
             key_ring=key_ring.id)
         project = gcp.organizations.get_project()
-        crypto_key_member = gcp.kms.CryptoKeyIAMMember("crypto_key_member",
+        crypto_key_member_cdf_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_cdf_sa",
             crypto_key_id=crypto_key.id,
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com")
+        crypto_key_member_gcs_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_gcs_sa",
+            crypto_key_id=crypto_key.id,
+            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
+            member=f"serviceAccount:service-{project.number}@gs-project-accounts.iam.gserviceaccount.com")
         cmek = gcp.datafusion.Instance("cmek",
             name="my-instance",
             region="us-central1",
@@ -296,7 +300,10 @@ class InstanceIamPolicy(pulumi.CustomResource):
             crypto_key_config={
                 "key_reference": crypto_key.id,
             },
-            opts = pulumi.ResourceOptions(depends_on=[crypto_key_member]))
+            opts = pulumi.ResourceOptions(depends_on=[
+                    crypto_key_member_cdf_sa,
+                    crypto_key_member_gcs_sa,
+                ]))
         ```
         ### Data Fusion Instance Enterprise
 
@@ -489,10 +496,14 @@ class InstanceIamPolicy(pulumi.CustomResource):
             name="my-instance",
             key_ring=key_ring.id)
         project = gcp.organizations.get_project()
-        crypto_key_member = gcp.kms.CryptoKeyIAMMember("crypto_key_member",
+        crypto_key_member_cdf_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_cdf_sa",
             crypto_key_id=crypto_key.id,
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com")
+        crypto_key_member_gcs_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_gcs_sa",
+            crypto_key_id=crypto_key.id,
+            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
+            member=f"serviceAccount:service-{project.number}@gs-project-accounts.iam.gserviceaccount.com")
         cmek = gcp.datafusion.Instance("cmek",
             name="my-instance",
             region="us-central1",
@@ -500,7 +511,10 @@ class InstanceIamPolicy(pulumi.CustomResource):
             crypto_key_config={
                 "key_reference": crypto_key.id,
             },
-            opts = pulumi.ResourceOptions(depends_on=[crypto_key_member]))
+            opts = pulumi.ResourceOptions(depends_on=[
+                    crypto_key_member_cdf_sa,
+                    crypto_key_member_gcs_sa,
+                ]))
         ```
         ### Data Fusion Instance Enterprise
 

pulumi_gcp/securitycenter/v2_organization_source_iam_binding.py

@@ -310,6 +310,7 @@ class V2OrganizationSourceIamBinding(pulumi.CustomResource):
         ---
 
         # IAM policy for Security Command Center (SCC) v2 API OrganizationSource
+
         Three different resources help you manage your IAM policy for Security Command Center (SCC) v2 API OrganizationSource. Each of these resources serves a different use case:
 
         * `securitycenter.V2OrganizationSourceIamPolicy`: Authoritative. Sets the IAM policy for the organizationsource and replaces any existing policy already attached.
@@ -483,6 +484,7 @@ class V2OrganizationSourceIamBinding(pulumi.CustomResource):
         ---
 
         # IAM policy for Security Command Center (SCC) v2 API OrganizationSource
+
         Three different resources help you manage your IAM policy for Security Command Center (SCC) v2 API OrganizationSource. Each of these resources serves a different use case:
 
         * `securitycenter.V2OrganizationSourceIamPolicy`: Authoritative. Sets the IAM policy for the organizationsource and replaces any existing policy already attached.

pulumi_gcp/securitycenter/v2_organization_source_iam_member.py

@@ -310,6 +310,7 @@ class V2OrganizationSourceIamMember(pulumi.CustomResource):
         ---
 
         # IAM policy for Security Command Center (SCC) v2 API OrganizationSource
+
         Three different resources help you manage your IAM policy for Security Command Center (SCC) v2 API OrganizationSource. Each of these resources serves a different use case:
 
         * `securitycenter.V2OrganizationSourceIamPolicy`: Authoritative. Sets the IAM policy for the organizationsource and replaces any existing policy already attached.
@@ -483,6 +484,7 @@ class V2OrganizationSourceIamMember(pulumi.CustomResource):
         ---
 
         # IAM policy for Security Command Center (SCC) v2 API OrganizationSource
+
         Three different resources help you manage your IAM policy for Security Command Center (SCC) v2 API OrganizationSource. Each of these resources serves a different use case:
 
         * `securitycenter.V2OrganizationSourceIamPolicy`: Authoritative. Sets the IAM policy for the organizationsource and replaces any existing policy already attached.

pulumi_gcp/securitycenter/v2_organization_source_iam_policy.py

@@ -207,6 +207,7 @@ class V2OrganizationSourceIamPolicy(pulumi.CustomResource):
         ---
 
         # IAM policy for Security Command Center (SCC) v2 API OrganizationSource
+
         Three different resources help you manage your IAM policy for Security Command Center (SCC) v2 API OrganizationSource. Each of these resources serves a different use case:
 
         * `securitycenter.V2OrganizationSourceIamPolicy`: Authoritative. Sets the IAM policy for the organizationsource and replaces any existing policy already attached.
@@ -368,6 +369,7 @@ class V2OrganizationSourceIamPolicy(pulumi.CustomResource):
         ---
 
         # IAM policy for Security Command Center (SCC) v2 API OrganizationSource
+
         Three different resources help you manage your IAM policy for Security Command Center (SCC) v2 API OrganizationSource. Each of these resources serves a different use case:
 
         * `securitycenter.V2OrganizationSourceIamPolicy`: Authoritative. Sets the IAM policy for the organizationsource and replaces any existing policy already attached.

pulumi_gcp/serviceaccount/get_account_key.py

@@ -66,6 +66,7 @@ class GetAccountKeyResult:
 
     @_builtins.property
     @pulumi.getter
+    @_utilities.deprecated("""`project` is deprecated and will be removed in a future major release. This field is non-functional and can be removed from your configuration safely.""")
     def project(self) -> Optional[_builtins.str]:
         return pulumi.get(self, "project")
 

pulumi_gcp/servicedirectory/namespace_iam_binding.py

@@ -287,6 +287,7 @@ class NamespaceIamBinding(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Namespace
+
         Three different resources help you manage your IAM policy for Service Directory Namespace. Each of these resources serves a different use case:
 
         * `servicedirectory.NamespaceIamPolicy`: Authoritative. Sets the IAM policy for the namespace and replaces any existing policy already attached.
@@ -460,6 +461,7 @@ class NamespaceIamBinding(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Namespace
+
         Three different resources help you manage your IAM policy for Service Directory Namespace. Each of these resources serves a different use case:
 
         * `servicedirectory.NamespaceIamPolicy`: Authoritative. Sets the IAM policy for the namespace and replaces any existing policy already attached.

pulumi_gcp/servicedirectory/namespace_iam_member.py

@@ -287,6 +287,7 @@ class NamespaceIamMember(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Namespace
+
         Three different resources help you manage your IAM policy for Service Directory Namespace. Each of these resources serves a different use case:
 
         * `servicedirectory.NamespaceIamPolicy`: Authoritative. Sets the IAM policy for the namespace and replaces any existing policy already attached.
@@ -460,6 +461,7 @@ class NamespaceIamMember(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Namespace
+
         Three different resources help you manage your IAM policy for Service Directory Namespace. Each of these resources serves a different use case:
 
         * `servicedirectory.NamespaceIamPolicy`: Authoritative. Sets the IAM policy for the namespace and replaces any existing policy already attached.

pulumi_gcp/servicedirectory/namespace_iam_policy.py

@@ -184,6 +184,7 @@ class NamespaceIamPolicy(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Namespace
+
         Three different resources help you manage your IAM policy for Service Directory Namespace. Each of these resources serves a different use case:
 
         * `servicedirectory.NamespaceIamPolicy`: Authoritative. Sets the IAM policy for the namespace and replaces any existing policy already attached.
@@ -345,6 +346,7 @@ class NamespaceIamPolicy(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Namespace
+
         Three different resources help you manage your IAM policy for Service Directory Namespace. Each of these resources serves a different use case:
 
         * `servicedirectory.NamespaceIamPolicy`: Authoritative. Sets the IAM policy for the namespace and replaces any existing policy already attached.

pulumi_gcp/servicedirectory/service_iam_binding.py

@@ -287,6 +287,7 @@ class ServiceIamBinding(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Service
+
         Three different resources help you manage your IAM policy for Service Directory Service. Each of these resources serves a different use case:
 
         * `servicedirectory.ServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.
@@ -460,6 +461,7 @@ class ServiceIamBinding(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Service
+
         Three different resources help you manage your IAM policy for Service Directory Service. Each of these resources serves a different use case:
 
         * `servicedirectory.ServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.

pulumi_gcp/servicedirectory/service_iam_member.py

@@ -287,6 +287,7 @@ class ServiceIamMember(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Service
+
         Three different resources help you manage your IAM policy for Service Directory Service. Each of these resources serves a different use case:
 
         * `servicedirectory.ServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.
@@ -460,6 +461,7 @@ class ServiceIamMember(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Service
+
         Three different resources help you manage your IAM policy for Service Directory Service. Each of these resources serves a different use case:
 
         * `servicedirectory.ServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.

pulumi_gcp/servicedirectory/service_iam_policy.py

@@ -184,6 +184,7 @@ class ServiceIamPolicy(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Service
+
         Three different resources help you manage your IAM policy for Service Directory Service. Each of these resources serves a different use case:
 
         * `servicedirectory.ServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.
@@ -345,6 +346,7 @@ class ServiceIamPolicy(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Service
+
         Three different resources help you manage your IAM policy for Service Directory Service. Each of these resources serves a different use case:
 
         * `servicedirectory.ServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.