pulumi-gcp 8.40.0a1754721948__py3-none-any.whl → 8.41.0__py3-none-any.whl

pulumi_gcp/storage/_inputs.py

@@ -115,6 +115,26 @@ __all__ = [
     'ControlProjectIntelligenceConfigTrialConfigArgsDict',
     'DefaultObjectAccessControlProjectTeamArgs',
     'DefaultObjectAccessControlProjectTeamArgsDict',
+    'InsightsDatasetConfigExcludeCloudStorageBucketsArgs',
+    'InsightsDatasetConfigExcludeCloudStorageBucketsArgsDict',
+    'InsightsDatasetConfigExcludeCloudStorageBucketsCloudStorageBucketArgs',
+    'InsightsDatasetConfigExcludeCloudStorageBucketsCloudStorageBucketArgsDict',
+    'InsightsDatasetConfigExcludeCloudStorageLocationsArgs',
+    'InsightsDatasetConfigExcludeCloudStorageLocationsArgsDict',
+    'InsightsDatasetConfigIdentityArgs',
+    'InsightsDatasetConfigIdentityArgsDict',
+    'InsightsDatasetConfigIncludeCloudStorageBucketsArgs',
+    'InsightsDatasetConfigIncludeCloudStorageBucketsArgsDict',
+    'InsightsDatasetConfigIncludeCloudStorageBucketsCloudStorageBucketArgs',
+    'InsightsDatasetConfigIncludeCloudStorageBucketsCloudStorageBucketArgsDict',
+    'InsightsDatasetConfigIncludeCloudStorageLocationsArgs',
+    'InsightsDatasetConfigIncludeCloudStorageLocationsArgsDict',
+    'InsightsDatasetConfigLinkArgs',
+    'InsightsDatasetConfigLinkArgsDict',
+    'InsightsDatasetConfigSourceFoldersArgs',
+    'InsightsDatasetConfigSourceFoldersArgsDict',
+    'InsightsDatasetConfigSourceProjectsArgs',
+    'InsightsDatasetConfigSourceProjectsArgsDict',
     'InsightsReportConfigCsvOptionsArgs',
     'InsightsReportConfigCsvOptionsArgsDict',
     'InsightsReportConfigFrequencyOptionsArgs',
@@ -175,6 +195,8 @@ __all__ = [
     'TransferJobTransferSpecAzureBlobStorageDataSourceArgsDict',
     'TransferJobTransferSpecAzureBlobStorageDataSourceAzureCredentialsArgs',
     'TransferJobTransferSpecAzureBlobStorageDataSourceAzureCredentialsArgsDict',
+    'TransferJobTransferSpecAzureBlobStorageDataSourceFederatedIdentityConfigArgs',
+    'TransferJobTransferSpecAzureBlobStorageDataSourceFederatedIdentityConfigArgsDict',
     'TransferJobTransferSpecGcsDataSinkArgs',
     'TransferJobTransferSpecGcsDataSinkArgsDict',
     'TransferJobTransferSpecGcsDataSourceArgs',
@@ -3056,6 +3078,437 @@ class DefaultObjectAccessControlProjectTeamArgs:
         pulumi.set(self, "team", value)
 
 
+if not MYPY:
+    class InsightsDatasetConfigExcludeCloudStorageBucketsArgsDict(TypedDict):
+        cloud_storage_buckets: pulumi.Input[Sequence[pulumi.Input['InsightsDatasetConfigExcludeCloudStorageBucketsCloudStorageBucketArgsDict']]]
+        """
+        The list of cloud storage buckets/bucket prefix regexes to exclude in the DatasetConfig.
+        Structure is documented below.
+        """
+elif False:
+    InsightsDatasetConfigExcludeCloudStorageBucketsArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class InsightsDatasetConfigExcludeCloudStorageBucketsArgs:
+    def __init__(__self__, *,
+                 cloud_storage_buckets: pulumi.Input[Sequence[pulumi.Input['InsightsDatasetConfigExcludeCloudStorageBucketsCloudStorageBucketArgs']]]):
+        """
+        :param pulumi.Input[Sequence[pulumi.Input['InsightsDatasetConfigExcludeCloudStorageBucketsCloudStorageBucketArgs']]] cloud_storage_buckets: The list of cloud storage buckets/bucket prefix regexes to exclude in the DatasetConfig.
+               Structure is documented below.
+        """
+        pulumi.set(__self__, "cloud_storage_buckets", cloud_storage_buckets)
+
+    @_builtins.property
+    @pulumi.getter(name="cloudStorageBuckets")
+    def cloud_storage_buckets(self) -> pulumi.Input[Sequence[pulumi.Input['InsightsDatasetConfigExcludeCloudStorageBucketsCloudStorageBucketArgs']]]:
+        """
+        The list of cloud storage buckets/bucket prefix regexes to exclude in the DatasetConfig.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "cloud_storage_buckets")
+
+    @cloud_storage_buckets.setter
+    def cloud_storage_buckets(self, value: pulumi.Input[Sequence[pulumi.Input['InsightsDatasetConfigExcludeCloudStorageBucketsCloudStorageBucketArgs']]]):
+        pulumi.set(self, "cloud_storage_buckets", value)
+
+
+if not MYPY:
+    class InsightsDatasetConfigExcludeCloudStorageBucketsCloudStorageBucketArgsDict(TypedDict):
+        bucket_name: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        The list of cloud storage bucket names to exclude in the DatasetConfig.
+        Exactly one of the bucket_name and bucket_prefix_regex should be specified.
+        """
+        bucket_prefix_regex: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        The list of regex patterns for bucket names matching the regex.
+        Regex should follow the syntax specified in google/re2 on GitHub.
+        Exactly one of the bucket_name and bucket_prefix_regex should be specified.
+        """
+elif False:
+    InsightsDatasetConfigExcludeCloudStorageBucketsCloudStorageBucketArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class InsightsDatasetConfigExcludeCloudStorageBucketsCloudStorageBucketArgs:
+    def __init__(__self__, *,
+                 bucket_name: Optional[pulumi.Input[_builtins.str]] = None,
+                 bucket_prefix_regex: Optional[pulumi.Input[_builtins.str]] = None):
+        """
+        :param pulumi.Input[_builtins.str] bucket_name: The list of cloud storage bucket names to exclude in the DatasetConfig.
+               Exactly one of the bucket_name and bucket_prefix_regex should be specified.
+        :param pulumi.Input[_builtins.str] bucket_prefix_regex: The list of regex patterns for bucket names matching the regex.
+               Regex should follow the syntax specified in google/re2 on GitHub.
+               Exactly one of the bucket_name and bucket_prefix_regex should be specified.
+        """
+        if bucket_name is not None:
+            pulumi.set(__self__, "bucket_name", bucket_name)
+        if bucket_prefix_regex is not None:
+            pulumi.set(__self__, "bucket_prefix_regex", bucket_prefix_regex)
+
+    @_builtins.property
+    @pulumi.getter(name="bucketName")
+    def bucket_name(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The list of cloud storage bucket names to exclude in the DatasetConfig.
+        Exactly one of the bucket_name and bucket_prefix_regex should be specified.
+        """
+        return pulumi.get(self, "bucket_name")
+
+    @bucket_name.setter
+    def bucket_name(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "bucket_name", value)
+
+    @_builtins.property
+    @pulumi.getter(name="bucketPrefixRegex")
+    def bucket_prefix_regex(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The list of regex patterns for bucket names matching the regex.
+        Regex should follow the syntax specified in google/re2 on GitHub.
+        Exactly one of the bucket_name and bucket_prefix_regex should be specified.
+        """
+        return pulumi.get(self, "bucket_prefix_regex")
+
+    @bucket_prefix_regex.setter
+    def bucket_prefix_regex(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "bucket_prefix_regex", value)
+
+
+if not MYPY:
+    class InsightsDatasetConfigExcludeCloudStorageLocationsArgsDict(TypedDict):
+        locations: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]
+        """
+        The list of cloud storage locations to exclude in the DatasetConfig.
+        """
+elif False:
+    InsightsDatasetConfigExcludeCloudStorageLocationsArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class InsightsDatasetConfigExcludeCloudStorageLocationsArgs:
+    def __init__(__self__, *,
+                 locations: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]):
+        """
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] locations: The list of cloud storage locations to exclude in the DatasetConfig.
+        """
+        pulumi.set(__self__, "locations", locations)
+
+    @_builtins.property
+    @pulumi.getter
+    def locations(self) -> pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]:
+        """
+        The list of cloud storage locations to exclude in the DatasetConfig.
+        """
+        return pulumi.get(self, "locations")
+
+    @locations.setter
+    def locations(self, value: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]):
+        pulumi.set(self, "locations", value)
+
+
+if not MYPY:
+    class InsightsDatasetConfigIdentityArgsDict(TypedDict):
+        type: pulumi.Input[_builtins.str]
+        """
+        Type of identity to use for the DatasetConfig.
+        Possible values are: `IDENTITY_TYPE_PER_CONFIG`, `IDENTITY_TYPE_PER_PROJECT`.
+        """
+        name: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        (Output)
+        Name of the identity.
+        """
+elif False:
+    InsightsDatasetConfigIdentityArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class InsightsDatasetConfigIdentityArgs:
+    def __init__(__self__, *,
+                 type: pulumi.Input[_builtins.str],
+                 name: Optional[pulumi.Input[_builtins.str]] = None):
+        """
+        :param pulumi.Input[_builtins.str] type: Type of identity to use for the DatasetConfig.
+               Possible values are: `IDENTITY_TYPE_PER_CONFIG`, `IDENTITY_TYPE_PER_PROJECT`.
+        :param pulumi.Input[_builtins.str] name: (Output)
+               Name of the identity.
+        """
+        pulumi.set(__self__, "type", type)
+        if name is not None:
+            pulumi.set(__self__, "name", name)
+
+    @_builtins.property
+    @pulumi.getter
+    def type(self) -> pulumi.Input[_builtins.str]:
+        """
+        Type of identity to use for the DatasetConfig.
+        Possible values are: `IDENTITY_TYPE_PER_CONFIG`, `IDENTITY_TYPE_PER_PROJECT`.
+        """
+        return pulumi.get(self, "type")
+
+    @type.setter
+    def type(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "type", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def name(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        (Output)
+        Name of the identity.
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "name", value)
+
+
+if not MYPY:
+    class InsightsDatasetConfigIncludeCloudStorageBucketsArgsDict(TypedDict):
+        cloud_storage_buckets: pulumi.Input[Sequence[pulumi.Input['InsightsDatasetConfigIncludeCloudStorageBucketsCloudStorageBucketArgsDict']]]
+        """
+        The list of cloud storage buckets/bucket prefix regexes to include in the DatasetConfig.
+        Structure is documented below.
+        """
+elif False:
+    InsightsDatasetConfigIncludeCloudStorageBucketsArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class InsightsDatasetConfigIncludeCloudStorageBucketsArgs:
+    def __init__(__self__, *,
+                 cloud_storage_buckets: pulumi.Input[Sequence[pulumi.Input['InsightsDatasetConfigIncludeCloudStorageBucketsCloudStorageBucketArgs']]]):
+        """
+        :param pulumi.Input[Sequence[pulumi.Input['InsightsDatasetConfigIncludeCloudStorageBucketsCloudStorageBucketArgs']]] cloud_storage_buckets: The list of cloud storage buckets/bucket prefix regexes to include in the DatasetConfig.
+               Structure is documented below.
+        """
+        pulumi.set(__self__, "cloud_storage_buckets", cloud_storage_buckets)
+
+    @_builtins.property
+    @pulumi.getter(name="cloudStorageBuckets")
+    def cloud_storage_buckets(self) -> pulumi.Input[Sequence[pulumi.Input['InsightsDatasetConfigIncludeCloudStorageBucketsCloudStorageBucketArgs']]]:
+        """
+        The list of cloud storage buckets/bucket prefix regexes to include in the DatasetConfig.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "cloud_storage_buckets")
+
+    @cloud_storage_buckets.setter
+    def cloud_storage_buckets(self, value: pulumi.Input[Sequence[pulumi.Input['InsightsDatasetConfigIncludeCloudStorageBucketsCloudStorageBucketArgs']]]):
+        pulumi.set(self, "cloud_storage_buckets", value)
+
+
+if not MYPY:
+    class InsightsDatasetConfigIncludeCloudStorageBucketsCloudStorageBucketArgsDict(TypedDict):
+        bucket_name: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        The list of cloud storage bucket names to exclude in the DatasetConfig.
+        Exactly one of the bucket_name and bucket_prefix_regex should be specified.
+        """
+        bucket_prefix_regex: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        The list of regex patterns for bucket names matching the regex.
+        Regex should follow the syntax specified in google/re2 on GitHub.
+        Exactly one of the bucket_name and bucket_prefix_regex should be specified.
+        """
+elif False:
+    InsightsDatasetConfigIncludeCloudStorageBucketsCloudStorageBucketArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class InsightsDatasetConfigIncludeCloudStorageBucketsCloudStorageBucketArgs:
+    def __init__(__self__, *,
+                 bucket_name: Optional[pulumi.Input[_builtins.str]] = None,
+                 bucket_prefix_regex: Optional[pulumi.Input[_builtins.str]] = None):
+        """
+        :param pulumi.Input[_builtins.str] bucket_name: The list of cloud storage bucket names to exclude in the DatasetConfig.
+               Exactly one of the bucket_name and bucket_prefix_regex should be specified.
+        :param pulumi.Input[_builtins.str] bucket_prefix_regex: The list of regex patterns for bucket names matching the regex.
+               Regex should follow the syntax specified in google/re2 on GitHub.
+               Exactly one of the bucket_name and bucket_prefix_regex should be specified.
+        """
+        if bucket_name is not None:
+            pulumi.set(__self__, "bucket_name", bucket_name)
+        if bucket_prefix_regex is not None:
+            pulumi.set(__self__, "bucket_prefix_regex", bucket_prefix_regex)
+
+    @_builtins.property
+    @pulumi.getter(name="bucketName")
+    def bucket_name(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The list of cloud storage bucket names to exclude in the DatasetConfig.
+        Exactly one of the bucket_name and bucket_prefix_regex should be specified.
+        """
+        return pulumi.get(self, "bucket_name")
+
+    @bucket_name.setter
+    def bucket_name(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "bucket_name", value)
+
+    @_builtins.property
+    @pulumi.getter(name="bucketPrefixRegex")
+    def bucket_prefix_regex(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The list of regex patterns for bucket names matching the regex.
+        Regex should follow the syntax specified in google/re2 on GitHub.
+        Exactly one of the bucket_name and bucket_prefix_regex should be specified.
+        """
+        return pulumi.get(self, "bucket_prefix_regex")
+
+    @bucket_prefix_regex.setter
+    def bucket_prefix_regex(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "bucket_prefix_regex", value)
+
+
+if not MYPY:
+    class InsightsDatasetConfigIncludeCloudStorageLocationsArgsDict(TypedDict):
+        locations: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]
+        """
+        The list of cloud storage locations to include in the DatasetConfig.
+        """
+elif False:
+    InsightsDatasetConfigIncludeCloudStorageLocationsArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class InsightsDatasetConfigIncludeCloudStorageLocationsArgs:
+    def __init__(__self__, *,
+                 locations: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]):
+        """
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] locations: The list of cloud storage locations to include in the DatasetConfig.
+        """
+        pulumi.set(__self__, "locations", locations)
+
+    @_builtins.property
+    @pulumi.getter
+    def locations(self) -> pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]:
+        """
+        The list of cloud storage locations to include in the DatasetConfig.
+        """
+        return pulumi.get(self, "locations")
+
+    @locations.setter
+    def locations(self, value: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]):
+        pulumi.set(self, "locations", value)
+
+
+if not MYPY:
+    class InsightsDatasetConfigLinkArgsDict(TypedDict):
+        dataset: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        (Output)
+        Dataset name for the linked DatasetConfig.
+        """
+        linked: NotRequired[pulumi.Input[_builtins.bool]]
+        """
+        (Output)
+        State of the linked DatasetConfig.
+        """
+elif False:
+    InsightsDatasetConfigLinkArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class InsightsDatasetConfigLinkArgs:
+    def __init__(__self__, *,
+                 dataset: Optional[pulumi.Input[_builtins.str]] = None,
+                 linked: Optional[pulumi.Input[_builtins.bool]] = None):
+        """
+        :param pulumi.Input[_builtins.str] dataset: (Output)
+               Dataset name for the linked DatasetConfig.
+        :param pulumi.Input[_builtins.bool] linked: (Output)
+               State of the linked DatasetConfig.
+        """
+        if dataset is not None:
+            pulumi.set(__self__, "dataset", dataset)
+        if linked is not None:
+            pulumi.set(__self__, "linked", linked)
+
+    @_builtins.property
+    @pulumi.getter
+    def dataset(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        (Output)
+        Dataset name for the linked DatasetConfig.
+        """
+        return pulumi.get(self, "dataset")
+
+    @dataset.setter
+    def dataset(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "dataset", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def linked(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        (Output)
+        State of the linked DatasetConfig.
+        """
+        return pulumi.get(self, "linked")
+
+    @linked.setter
+    def linked(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "linked", value)
+
+
+if not MYPY:
+    class InsightsDatasetConfigSourceFoldersArgsDict(TypedDict):
+        folder_numbers: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
+        """
+        The list of folder numbers to include in the DatasetConfig.
+        """
+elif False:
+    InsightsDatasetConfigSourceFoldersArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class InsightsDatasetConfigSourceFoldersArgs:
+    def __init__(__self__, *,
+                 folder_numbers: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
+        """
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] folder_numbers: The list of folder numbers to include in the DatasetConfig.
+        """
+        if folder_numbers is not None:
+            pulumi.set(__self__, "folder_numbers", folder_numbers)
+
+    @_builtins.property
+    @pulumi.getter(name="folderNumbers")
+    def folder_numbers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        The list of folder numbers to include in the DatasetConfig.
+        """
+        return pulumi.get(self, "folder_numbers")
+
+    @folder_numbers.setter
+    def folder_numbers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "folder_numbers", value)
+
+
+if not MYPY:
+    class InsightsDatasetConfigSourceProjectsArgsDict(TypedDict):
+        project_numbers: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
+        """
+        The list of project numbers to include in the DatasetConfig.
+        """
+elif False:
+    InsightsDatasetConfigSourceProjectsArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class InsightsDatasetConfigSourceProjectsArgs:
+    def __init__(__self__, *,
+                 project_numbers: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
+        """
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] project_numbers: The list of project numbers to include in the DatasetConfig.
+        """
+        if project_numbers is not None:
+            pulumi.set(__self__, "project_numbers", project_numbers)
+
+    @_builtins.property
+    @pulumi.getter(name="projectNumbers")
+    def project_numbers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        The list of project numbers to include in the DatasetConfig.
+        """
+        return pulumi.get(self, "project_numbers")
+
+    @project_numbers.setter
+    def project_numbers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "project_numbers", value)
+
+
 if not MYPY:
     class InsightsReportConfigCsvOptionsArgsDict(TypedDict):
         delimiter: NotRequired[pulumi.Input[_builtins.str]]
@@ -5152,6 +5605,10 @@ if not MYPY:
         """
         AWS credentials block.
         """
+        cloudfront_domain: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        The CloudFront distribution domain name pointing to this bucket, to use when fetching. See [Transfer from S3 via CloudFront](https://cloud.google.com/storage-transfer/docs/s3-cloudfront) for more information. Format: https://{id}.cloudfront.net or any valid custom domain. Must begin with https://.
+        """
         managed_private_network: NotRequired[pulumi.Input[_builtins.bool]]
         """
         Egress bytes over a Google-managed private network. This network is shared between other users of Storage Transfer Service.
@@ -5172,12 +5629,14 @@ class TransferJobTransferSpecAwsS3DataSourceArgs:
     def __init__(__self__, *,
                  bucket_name: pulumi.Input[_builtins.str],
                  aws_access_key: Optional[pulumi.Input['TransferJobTransferSpecAwsS3DataSourceAwsAccessKeyArgs']] = None,
+                 cloudfront_domain: Optional[pulumi.Input[_builtins.str]] = None,
                  managed_private_network: Optional[pulumi.Input[_builtins.bool]] = None,
                  path: Optional[pulumi.Input[_builtins.str]] = None,
                  role_arn: Optional[pulumi.Input[_builtins.str]] = None):
         """
         :param pulumi.Input[_builtins.str] bucket_name: S3 Bucket name.
         :param pulumi.Input['TransferJobTransferSpecAwsS3DataSourceAwsAccessKeyArgs'] aws_access_key: AWS credentials block.
+        :param pulumi.Input[_builtins.str] cloudfront_domain: The CloudFront distribution domain name pointing to this bucket, to use when fetching. See [Transfer from S3 via CloudFront](https://cloud.google.com/storage-transfer/docs/s3-cloudfront) for more information. Format: https://{id}.cloudfront.net or any valid custom domain. Must begin with https://.
         :param pulumi.Input[_builtins.bool] managed_private_network: Egress bytes over a Google-managed private network. This network is shared between other users of Storage Transfer Service.
         :param pulumi.Input[_builtins.str] path: S3 Bucket path in bucket to transfer.
         :param pulumi.Input[_builtins.str] role_arn: The Amazon Resource Name (ARN) of the role to support temporary credentials via 'AssumeRoleWithWebIdentity'. For more information about ARNs, see [IAM ARNs](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns). When a role ARN is provided, Transfer Service fetches temporary credentials for the session using a 'AssumeRoleWithWebIdentity' call for the provided role using the [GoogleServiceAccount][] for this project.
@@ -5185,6 +5644,8 @@ class TransferJobTransferSpecAwsS3DataSourceArgs:
         pulumi.set(__self__, "bucket_name", bucket_name)
         if aws_access_key is not None:
             pulumi.set(__self__, "aws_access_key", aws_access_key)
+        if cloudfront_domain is not None:
+            pulumi.set(__self__, "cloudfront_domain", cloudfront_domain)
         if managed_private_network is not None:
             pulumi.set(__self__, "managed_private_network", managed_private_network)
         if path is not None:
@@ -5216,6 +5677,18 @@ class TransferJobTransferSpecAwsS3DataSourceArgs:
     def aws_access_key(self, value: Optional[pulumi.Input['TransferJobTransferSpecAwsS3DataSourceAwsAccessKeyArgs']]):
         pulumi.set(self, "aws_access_key", value)
 
+    @_builtins.property
+    @pulumi.getter(name="cloudfrontDomain")
+    def cloudfront_domain(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The CloudFront distribution domain name pointing to this bucket, to use when fetching. See [Transfer from S3 via CloudFront](https://cloud.google.com/storage-transfer/docs/s3-cloudfront) for more information. Format: https://{id}.cloudfront.net or any valid custom domain. Must begin with https://.
+        """
+        return pulumi.get(self, "cloudfront_domain")
+
+    @cloudfront_domain.setter
+    def cloudfront_domain(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "cloudfront_domain", value)
+
     @_builtins.property
     @pulumi.getter(name="managedPrivateNetwork")
     def managed_private_network(self) -> Optional[pulumi.Input[_builtins.bool]]:
@@ -5315,11 +5788,15 @@ if not MYPY:
         """
         azure_credentials: NotRequired[pulumi.Input['TransferJobTransferSpecAzureBlobStorageDataSourceAzureCredentialsArgsDict']]
         """
-        Credentials used to authenticate API requests to Azure block.
+        ) Credentials used to authenticate API requests to Azure block.
         """
         credentials_secret: NotRequired[pulumi.Input[_builtins.str]]
         """
-        Full Resource name of a secret in Secret Manager containing [SAS Credentials in JSON form](https://cloud.google.com/storage-transfer/docs/reference/rest/v1/TransferSpec#azureblobstoragedata:~:text=begin%20with%20a%20%27/%27.-,credentialsSecret,-string). Service Agent for Storage Transfer must have permissions to access secret. If credentials_secret is specified, do not specify azure_credentials.`,
+        ) Full Resource name of a secret in Secret Manager containing [SAS Credentials in JSON form](https://cloud.google.com/storage-transfer/docs/reference/rest/v1/TransferSpec#azureblobstoragedata:~:text=begin%20with%20a%20%27/%27.-,credentialsSecret,-string). Service Agent for Storage Transfer must have permissions to access secret. If credentials_secret is specified, do not specify azure_credentials.`,
+        """
+        federated_identity_config: NotRequired[pulumi.Input['TransferJobTransferSpecAzureBlobStorageDataSourceFederatedIdentityConfigArgsDict']]
+        """
+        Federated identity config of a user registered Azure application. Structure documented below.
         """
         path: NotRequired[pulumi.Input[_builtins.str]]
         """
@@ -5335,12 +5812,14 @@ class TransferJobTransferSpecAzureBlobStorageDataSourceArgs:
                  storage_account: pulumi.Input[_builtins.str],
                  azure_credentials: Optional[pulumi.Input['TransferJobTransferSpecAzureBlobStorageDataSourceAzureCredentialsArgs']] = None,
                  credentials_secret: Optional[pulumi.Input[_builtins.str]] = None,
+                 federated_identity_config: Optional[pulumi.Input['TransferJobTransferSpecAzureBlobStorageDataSourceFederatedIdentityConfigArgs']] = None,
                  path: Optional[pulumi.Input[_builtins.str]] = None):
         """
         :param pulumi.Input[_builtins.str] container: The container to transfer from the Azure Storage account.`
         :param pulumi.Input[_builtins.str] storage_account: The name of the Azure Storage account.
-        :param pulumi.Input['TransferJobTransferSpecAzureBlobStorageDataSourceAzureCredentialsArgs'] azure_credentials: Credentials used to authenticate API requests to Azure block.
-        :param pulumi.Input[_builtins.str] credentials_secret: Full Resource name of a secret in Secret Manager containing [SAS Credentials in JSON form](https://cloud.google.com/storage-transfer/docs/reference/rest/v1/TransferSpec#azureblobstoragedata:~:text=begin%20with%20a%20%27/%27.-,credentialsSecret,-string). Service Agent for Storage Transfer must have permissions to access secret. If credentials_secret is specified, do not specify azure_credentials.`,
+        :param pulumi.Input['TransferJobTransferSpecAzureBlobStorageDataSourceAzureCredentialsArgs'] azure_credentials: ) Credentials used to authenticate API requests to Azure block.
+        :param pulumi.Input[_builtins.str] credentials_secret: ) Full Resource name of a secret in Secret Manager containing [SAS Credentials in JSON form](https://cloud.google.com/storage-transfer/docs/reference/rest/v1/TransferSpec#azureblobstoragedata:~:text=begin%20with%20a%20%27/%27.-,credentialsSecret,-string). Service Agent for Storage Transfer must have permissions to access secret. If credentials_secret is specified, do not specify azure_credentials.`,
+        :param pulumi.Input['TransferJobTransferSpecAzureBlobStorageDataSourceFederatedIdentityConfigArgs'] federated_identity_config: Federated identity config of a user registered Azure application. Structure documented below.
         :param pulumi.Input[_builtins.str] path: Root path to transfer objects. Must be an empty string or full path name that ends with a '/'. This field is treated as an object prefix. As such, it should generally not begin with a '/'.
         """
         pulumi.set(__self__, "container", container)
@@ -5349,6 +5828,8 @@ class TransferJobTransferSpecAzureBlobStorageDataSourceArgs:
             pulumi.set(__self__, "azure_credentials", azure_credentials)
         if credentials_secret is not None:
             pulumi.set(__self__, "credentials_secret", credentials_secret)
+        if federated_identity_config is not None:
+            pulumi.set(__self__, "federated_identity_config", federated_identity_config)
         if path is not None:
             pulumi.set(__self__, "path", path)
 
@@ -5380,7 +5861,7 @@ class TransferJobTransferSpecAzureBlobStorageDataSourceArgs:
     @pulumi.getter(name="azureCredentials")
     def azure_credentials(self) -> Optional[pulumi.Input['TransferJobTransferSpecAzureBlobStorageDataSourceAzureCredentialsArgs']]:
         """
-        Credentials used to authenticate API requests to Azure block.
+        ) Credentials used to authenticate API requests to Azure block.
         """
         return pulumi.get(self, "azure_credentials")
 
@@ -5392,7 +5873,7 @@ class TransferJobTransferSpecAzureBlobStorageDataSourceArgs:
     @pulumi.getter(name="credentialsSecret")
     def credentials_secret(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        Full Resource name of a secret in Secret Manager containing [SAS Credentials in JSON form](https://cloud.google.com/storage-transfer/docs/reference/rest/v1/TransferSpec#azureblobstoragedata:~:text=begin%20with%20a%20%27/%27.-,credentialsSecret,-string). Service Agent for Storage Transfer must have permissions to access secret. If credentials_secret is specified, do not specify azure_credentials.`,
+        ) Full Resource name of a secret in Secret Manager containing [SAS Credentials in JSON form](https://cloud.google.com/storage-transfer/docs/reference/rest/v1/TransferSpec#azureblobstoragedata:~:text=begin%20with%20a%20%27/%27.-,credentialsSecret,-string). Service Agent for Storage Transfer must have permissions to access secret. If credentials_secret is specified, do not specify azure_credentials.`,
         """
         return pulumi.get(self, "credentials_secret")
 
@@ -5400,6 +5881,18 @@ class TransferJobTransferSpecAzureBlobStorageDataSourceArgs:
     def credentials_secret(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "credentials_secret", value)
 
+    @_builtins.property
+    @pulumi.getter(name="federatedIdentityConfig")
+    def federated_identity_config(self) -> Optional[pulumi.Input['TransferJobTransferSpecAzureBlobStorageDataSourceFederatedIdentityConfigArgs']]:
+        """
+        Federated identity config of a user registered Azure application. Structure documented below.
+        """
+        return pulumi.get(self, "federated_identity_config")
+
+    @federated_identity_config.setter
+    def federated_identity_config(self, value: Optional[pulumi.Input['TransferJobTransferSpecAzureBlobStorageDataSourceFederatedIdentityConfigArgs']]):
+        pulumi.set(self, "federated_identity_config", value)
+
     @_builtins.property
     @pulumi.getter
     def path(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -5418,8 +5911,6 @@ if not MYPY:
         sas_token: pulumi.Input[_builtins.str]
         """
         Azure shared access signature. See [Grant limited access to Azure Storage resources using shared access signatures (SAS)](https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview).
-
-        <a name="nested_schedule_start_end_date"></a>The `schedule_start_date` and `schedule_end_date` blocks support:
         """
 elif False:
     TransferJobTransferSpecAzureBlobStorageDataSourceAzureCredentialsArgsDict: TypeAlias = Mapping[str, Any]
@@ -5430,8 +5921,6 @@ class TransferJobTransferSpecAzureBlobStorageDataSourceAzureCredentialsArgs:
                  sas_token: pulumi.Input[_builtins.str]):
         """
         :param pulumi.Input[_builtins.str] sas_token: Azure shared access signature. See [Grant limited access to Azure Storage resources using shared access signatures (SAS)](https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview).
-               
-               <a name="nested_schedule_start_end_date"></a>The `schedule_start_date` and `schedule_end_date` blocks support:
         """
         pulumi.set(__self__, "sas_token", sas_token)
 
@@ -5440,8 +5929,6 @@ class TransferJobTransferSpecAzureBlobStorageDataSourceAzureCredentialsArgs:
     def sas_token(self) -> pulumi.Input[_builtins.str]:
         """
         Azure shared access signature. See [Grant limited access to Azure Storage resources using shared access signatures (SAS)](https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview).
-
-        <a name="nested_schedule_start_end_date"></a>The `schedule_start_date` and `schedule_end_date` blocks support:
         """
         return pulumi.get(self, "sas_token")
 
@@ -5450,6 +5937,62 @@ class TransferJobTransferSpecAzureBlobStorageDataSourceAzureCredentialsArgs:
         pulumi.set(self, "sas_token", value)
 
 
+if not MYPY:
+    class TransferJobTransferSpecAzureBlobStorageDataSourceFederatedIdentityConfigArgsDict(TypedDict):
+        client_id: pulumi.Input[_builtins.str]
+        """
+        The client (application) ID of the application with federated credentials.
+        """
+        tenant_id: pulumi.Input[_builtins.str]
+        """
+        The client (directory) ID of the application with federated credentials.
+
+        <a name="nested_schedule_start_end_date"></a>The `schedule_start_date` and `schedule_end_date` blocks support:
+        """
+elif False:
+    TransferJobTransferSpecAzureBlobStorageDataSourceFederatedIdentityConfigArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class TransferJobTransferSpecAzureBlobStorageDataSourceFederatedIdentityConfigArgs:
+    def __init__(__self__, *,
+                 client_id: pulumi.Input[_builtins.str],
+                 tenant_id: pulumi.Input[_builtins.str]):
+        """
+        :param pulumi.Input[_builtins.str] client_id: The client (application) ID of the application with federated credentials.
+        :param pulumi.Input[_builtins.str] tenant_id: The client (directory) ID of the application with federated credentials.
+               
+               <a name="nested_schedule_start_end_date"></a>The `schedule_start_date` and `schedule_end_date` blocks support:
+        """
+        pulumi.set(__self__, "client_id", client_id)
+        pulumi.set(__self__, "tenant_id", tenant_id)
+
+    @_builtins.property
+    @pulumi.getter(name="clientId")
+    def client_id(self) -> pulumi.Input[_builtins.str]:
+        """
+        The client (application) ID of the application with federated credentials.
+        """
+        return pulumi.get(self, "client_id")
+
+    @client_id.setter
+    def client_id(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "client_id", value)
+
+    @_builtins.property
+    @pulumi.getter(name="tenantId")
+    def tenant_id(self) -> pulumi.Input[_builtins.str]:
+        """
+        The client (directory) ID of the application with federated credentials.
+
+        <a name="nested_schedule_start_end_date"></a>The `schedule_start_date` and `schedule_end_date` blocks support:
+        """
+        return pulumi.get(self, "tenant_id")
+
+    @tenant_id.setter
+    def tenant_id(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "tenant_id", value)
+
+
 if not MYPY:
     class TransferJobTransferSpecGcsDataSinkArgsDict(TypedDict):
         bucket_name: pulumi.Input[_builtins.str]