pulumi-gcp 8.41.0a1755153849__py3-none-any.whl → 8.42.0a1756095712__py3-none-any.whl

pulumi_gcp/secretmanager/regional_secret_iam_member.py

@@ -445,6 +445,7 @@ class RegionalSecretIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Secret Manager RegionalSecret
+
         Three different resources help you manage your IAM policy for Secret Manager RegionalSecret. Each of these resources serves a different use case:
 
         * `secretmanager.RegionalSecretIamPolicy`: Authoritative. Sets the IAM policy for the regionalsecret and replaces any existing policy already attached.
@@ -759,6 +760,7 @@ class RegionalSecretIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Secret Manager RegionalSecret
+
         Three different resources help you manage your IAM policy for Secret Manager RegionalSecret. Each of these resources serves a different use case:
 
         * `secretmanager.RegionalSecretIamPolicy`: Authoritative. Sets the IAM policy for the regionalsecret and replaces any existing policy already attached.

pulumi_gcp/secretmanager/regional_secret_iam_policy.py

@@ -330,6 +330,7 @@ class RegionalSecretIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Secret Manager RegionalSecret
+
         Three different resources help you manage your IAM policy for Secret Manager RegionalSecret. Each of these resources serves a different use case:
 
         * `secretmanager.RegionalSecretIamPolicy`: Authoritative. Sets the IAM policy for the regionalsecret and replaces any existing policy already attached.
@@ -630,6 +631,7 @@ class RegionalSecretIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Secret Manager RegionalSecret
+
         Three different resources help you manage your IAM policy for Secret Manager RegionalSecret. Each of these resources serves a different use case:
 
         * `secretmanager.RegionalSecretIamPolicy`: Authoritative. Sets the IAM policy for the regionalsecret and replaces any existing policy already attached.

pulumi_gcp/secretmanager/secret_iam_binding.py

@@ -394,6 +394,7 @@ class SecretIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Secret Manager Secret
+
         Three different resources help you manage your IAM policy for Secret Manager Secret. Each of these resources serves a different use case:
 
         * `secretmanager.SecretIamPolicy`: Authoritative. Sets the IAM policy for the secret and replaces any existing policy already attached.
@@ -690,6 +691,7 @@ class SecretIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Secret Manager Secret
+
         Three different resources help you manage your IAM policy for Secret Manager Secret. Each of these resources serves a different use case:
 
         * `secretmanager.SecretIamPolicy`: Authoritative. Sets the IAM policy for the secret and replaces any existing policy already attached.

pulumi_gcp/secretmanager/secret_iam_member.py

@@ -394,6 +394,7 @@ class SecretIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Secret Manager Secret
+
         Three different resources help you manage your IAM policy for Secret Manager Secret. Each of these resources serves a different use case:
 
         * `secretmanager.SecretIamPolicy`: Authoritative. Sets the IAM policy for the secret and replaces any existing policy already attached.
@@ -690,6 +691,7 @@ class SecretIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Secret Manager Secret
+
         Three different resources help you manage your IAM policy for Secret Manager Secret. Each of these resources serves a different use case:
 
         * `secretmanager.SecretIamPolicy`: Authoritative. Sets the IAM policy for the secret and replaces any existing policy already attached.

pulumi_gcp/secretmanager/secret_iam_policy.py

@@ -279,6 +279,7 @@ class SecretIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Secret Manager Secret
+
         Three different resources help you manage your IAM policy for Secret Manager Secret. Each of these resources serves a different use case:
 
         * `secretmanager.SecretIamPolicy`: Authoritative. Sets the IAM policy for the secret and replaces any existing policy already attached.
@@ -561,6 +562,7 @@ class SecretIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Secret Manager Secret
+
         Three different resources help you manage your IAM policy for Secret Manager Secret. Each of these resources serves a different use case:
 
         * `secretmanager.SecretIamPolicy`: Authoritative. Sets the IAM policy for the secret and replaces any existing policy already attached.

pulumi_gcp/secretmanager/secret_version.py

@@ -23,8 +23,7 @@ class SecretVersionArgs:
                  deletion_policy: Optional[pulumi.Input[_builtins.str]] = None,
                  enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  is_secret_data_base64: Optional[pulumi.Input[_builtins.bool]] = None,
-                 secret_data: Optional[pulumi.Input[_builtins.str]] = None,
-                 secret_data_wo_version: Optional[pulumi.Input[_builtins.int]] = None):
+                 secret_data: Optional[pulumi.Input[_builtins.str]] = None):
         """
         The set of arguments for constructing a SecretVersion resource.
         :param pulumi.Input[_builtins.str] secret: Secret Manager secret resource
@@ -38,7 +37,6 @@ class SecretVersionArgs:
         :param pulumi.Input[_builtins.bool] is_secret_data_base64: If set to 'true', the secret data is expected to be base64-encoded string and would be sent as is.
         :param pulumi.Input[_builtins.str] secret_data: The secret data. Must be no larger than 64KiB.
                **Note**: This property is sensitive and will not be displayed in the plan.
-        :param pulumi.Input[_builtins.int] secret_data_wo_version: Triggers update of secret data write-only. For more info see [updating write-only attributes](https://www.terraform.io/docs/providers/google/guides/using_write_only_attributes.html#updating-write-only-attributes)
         """
         pulumi.set(__self__, "secret", secret)
         if deletion_policy is not None:
@@ -49,8 +47,6 @@ class SecretVersionArgs:
             pulumi.set(__self__, "is_secret_data_base64", is_secret_data_base64)
         if secret_data is not None:
             pulumi.set(__self__, "secret_data", secret_data)
-        if secret_data_wo_version is not None:
-            pulumi.set(__self__, "secret_data_wo_version", secret_data_wo_version)
 
     @_builtins.property
     @pulumi.getter
@@ -118,18 +114,6 @@ class SecretVersionArgs:
     def secret_data(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "secret_data", value)
 
-    @_builtins.property
-    @pulumi.getter(name="secretDataWoVersion")
-    def secret_data_wo_version(self) -> Optional[pulumi.Input[_builtins.int]]:
-        """
-        Triggers update of secret data write-only. For more info see [updating write-only attributes](https://www.terraform.io/docs/providers/google/guides/using_write_only_attributes.html#updating-write-only-attributes)
-        """
-        return pulumi.get(self, "secret_data_wo_version")
-
-    @secret_data_wo_version.setter
-    def secret_data_wo_version(self, value: Optional[pulumi.Input[_builtins.int]]):
-        pulumi.set(self, "secret_data_wo_version", value)
-
 
 @pulumi.input_type
 class _SecretVersionState:
@@ -142,7 +126,6 @@ class _SecretVersionState:
                  name: Optional[pulumi.Input[_builtins.str]] = None,
                  secret: Optional[pulumi.Input[_builtins.str]] = None,
                  secret_data: Optional[pulumi.Input[_builtins.str]] = None,
-                 secret_data_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
                  version: Optional[pulumi.Input[_builtins.str]] = None):
         """
         Input properties used for looking up and filtering SecretVersion resources.
@@ -161,7 +144,6 @@ class _SecretVersionState:
         :param pulumi.Input[_builtins.str] secret: Secret Manager secret resource
         :param pulumi.Input[_builtins.str] secret_data: The secret data. Must be no larger than 64KiB.
                **Note**: This property is sensitive and will not be displayed in the plan.
-        :param pulumi.Input[_builtins.int] secret_data_wo_version: Triggers update of secret data write-only. For more info see [updating write-only attributes](https://www.terraform.io/docs/providers/google/guides/using_write_only_attributes.html#updating-write-only-attributes)
         :param pulumi.Input[_builtins.str] version: The version of the Secret.
         """
         if create_time is not None:
@@ -180,8 +162,6 @@ class _SecretVersionState:
             pulumi.set(__self__, "secret", secret)
         if secret_data is not None:
             pulumi.set(__self__, "secret_data", secret_data)
-        if secret_data_wo_version is not None:
-            pulumi.set(__self__, "secret_data_wo_version", secret_data_wo_version)
         if version is not None:
             pulumi.set(__self__, "version", version)
 
@@ -288,18 +268,6 @@ class _SecretVersionState:
     def secret_data(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "secret_data", value)
 
-    @_builtins.property
-    @pulumi.getter(name="secretDataWoVersion")
-    def secret_data_wo_version(self) -> Optional[pulumi.Input[_builtins.int]]:
-        """
-        Triggers update of secret data write-only. For more info see [updating write-only attributes](https://www.terraform.io/docs/providers/google/guides/using_write_only_attributes.html#updating-write-only-attributes)
-        """
-        return pulumi.get(self, "secret_data_wo_version")
-
-    @secret_data_wo_version.setter
-    def secret_data_wo_version(self, value: Optional[pulumi.Input[_builtins.int]]):
-        pulumi.set(self, "secret_data_wo_version", value)
-
     @_builtins.property
     @pulumi.getter
     def version(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -324,7 +292,6 @@ class SecretVersion(pulumi.CustomResource):
                  is_secret_data_base64: Optional[pulumi.Input[_builtins.bool]] = None,
                  secret: Optional[pulumi.Input[_builtins.str]] = None,
                  secret_data: Optional[pulumi.Input[_builtins.str]] = None,
-                 secret_data_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
                  __props__=None):
         """
         A secret version resource.
@@ -444,7 +411,6 @@ class SecretVersion(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] secret: Secret Manager secret resource
         :param pulumi.Input[_builtins.str] secret_data: The secret data. Must be no larger than 64KiB.
                **Note**: This property is sensitive and will not be displayed in the plan.
-        :param pulumi.Input[_builtins.int] secret_data_wo_version: Triggers update of secret data write-only. For more info see [updating write-only attributes](https://www.terraform.io/docs/providers/google/guides/using_write_only_attributes.html#updating-write-only-attributes)
         """
         ...
     @overload
@@ -577,7 +543,6 @@ class SecretVersion(pulumi.CustomResource):
                  is_secret_data_base64: Optional[pulumi.Input[_builtins.bool]] = None,
                  secret: Optional[pulumi.Input[_builtins.str]] = None,
                  secret_data: Optional[pulumi.Input[_builtins.str]] = None,
-                 secret_data_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -594,7 +559,6 @@ class SecretVersion(pulumi.CustomResource):
                 raise TypeError("Missing required property 'secret'")
             __props__.__dict__["secret"] = secret
             __props__.__dict__["secret_data"] = None if secret_data is None else pulumi.Output.secret(secret_data)
-            __props__.__dict__["secret_data_wo_version"] = secret_data_wo_version
             __props__.__dict__["create_time"] = None
             __props__.__dict__["destroy_time"] = None
             __props__.__dict__["name"] = None
@@ -619,7 +583,6 @@ class SecretVersion(pulumi.CustomResource):
             name: Optional[pulumi.Input[_builtins.str]] = None,
             secret: Optional[pulumi.Input[_builtins.str]] = None,
             secret_data: Optional[pulumi.Input[_builtins.str]] = None,
-            secret_data_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
             version: Optional[pulumi.Input[_builtins.str]] = None) -> 'SecretVersion':
         """
         Get an existing SecretVersion resource's state with the given name, id, and optional extra
@@ -643,7 +606,6 @@ class SecretVersion(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] secret: Secret Manager secret resource
         :param pulumi.Input[_builtins.str] secret_data: The secret data. Must be no larger than 64KiB.
                **Note**: This property is sensitive and will not be displayed in the plan.
-        :param pulumi.Input[_builtins.int] secret_data_wo_version: Triggers update of secret data write-only. For more info see [updating write-only attributes](https://www.terraform.io/docs/providers/google/guides/using_write_only_attributes.html#updating-write-only-attributes)
         :param pulumi.Input[_builtins.str] version: The version of the Secret.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
@@ -658,7 +620,6 @@ class SecretVersion(pulumi.CustomResource):
         __props__.__dict__["name"] = name
         __props__.__dict__["secret"] = secret
         __props__.__dict__["secret_data"] = secret_data
-        __props__.__dict__["secret_data_wo_version"] = secret_data_wo_version
         __props__.__dict__["version"] = version
         return SecretVersion(resource_name, opts=opts, __props__=__props__)
 
@@ -733,14 +694,6 @@ class SecretVersion(pulumi.CustomResource):
         """
         return pulumi.get(self, "secret_data")
 
-    @_builtins.property
-    @pulumi.getter(name="secretDataWoVersion")
-    def secret_data_wo_version(self) -> pulumi.Output[Optional[_builtins.int]]:
-        """
-        Triggers update of secret data write-only. For more info see [updating write-only attributes](https://www.terraform.io/docs/providers/google/guides/using_write_only_attributes.html#updating-write-only-attributes)
-        """
-        return pulumi.get(self, "secret_data_wo_version")
-
     @_builtins.property
     @pulumi.getter
     def version(self) -> pulumi.Output[_builtins.str]:

pulumi_gcp/securesourcemanager/repository_iam_binding.py

@@ -373,6 +373,7 @@ class RepositoryIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Secure Source Manager Repository
+
         Three different resources help you manage your IAM policy for Secure Source Manager Repository. Each of these resources serves a different use case:
 
         * `securesourcemanager.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.
@@ -565,6 +566,7 @@ class RepositoryIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Secure Source Manager Repository
+
         Three different resources help you manage your IAM policy for Secure Source Manager Repository. Each of these resources serves a different use case:
 
         * `securesourcemanager.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.

pulumi_gcp/securesourcemanager/repository_iam_member.py

@@ -373,6 +373,7 @@ class RepositoryIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Secure Source Manager Repository
+
         Three different resources help you manage your IAM policy for Secure Source Manager Repository. Each of these resources serves a different use case:
 
         * `securesourcemanager.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.
@@ -565,6 +566,7 @@ class RepositoryIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Secure Source Manager Repository
+
         Three different resources help you manage your IAM policy for Secure Source Manager Repository. Each of these resources serves a different use case:
 
         * `securesourcemanager.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.

pulumi_gcp/securesourcemanager/repository_iam_policy.py

@@ -270,6 +270,7 @@ class RepositoryIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Secure Source Manager Repository
+
         Three different resources help you manage your IAM policy for Secure Source Manager Repository. Each of these resources serves a different use case:
 
         * `securesourcemanager.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.
@@ -450,6 +451,7 @@ class RepositoryIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Secure Source Manager Repository
+
         Three different resources help you manage your IAM policy for Secure Source Manager Repository. Each of these resources serves a different use case:
 
         * `securesourcemanager.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.

pulumi_gcp/securitycenter/instance_iam_binding.py

@@ -336,10 +336,14 @@ class InstanceIamBinding(pulumi.CustomResource):
             name="my-instance",
             key_ring=key_ring.id)
         project = gcp.organizations.get_project()
-        crypto_key_member = gcp.kms.CryptoKeyIAMMember("crypto_key_member",
+        crypto_key_member_cdf_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_cdf_sa",
             crypto_key_id=crypto_key.id,
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com")
+        crypto_key_member_gcs_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_gcs_sa",
+            crypto_key_id=crypto_key.id,
+            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
+            member=f"serviceAccount:service-{project.number}@gs-project-accounts.iam.gserviceaccount.com")
         cmek = gcp.datafusion.Instance("cmek",
             name="my-instance",
             region="us-central1",
@@ -347,7 +351,10 @@ class InstanceIamBinding(pulumi.CustomResource):
             crypto_key_config={
                 "key_reference": crypto_key.id,
             },
-            opts = pulumi.ResourceOptions(depends_on=[crypto_key_member]))
+            opts = pulumi.ResourceOptions(depends_on=[
+                    crypto_key_member_cdf_sa,
+                    crypto_key_member_gcs_sa,
+                ]))
         ```
         ### Data Fusion Instance Enterprise
 
@@ -540,10 +547,14 @@ class InstanceIamBinding(pulumi.CustomResource):
             name="my-instance",
             key_ring=key_ring.id)
         project = gcp.organizations.get_project()
-        crypto_key_member = gcp.kms.CryptoKeyIAMMember("crypto_key_member",
+        crypto_key_member_cdf_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_cdf_sa",
             crypto_key_id=crypto_key.id,
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com")
+        crypto_key_member_gcs_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_gcs_sa",
+            crypto_key_id=crypto_key.id,
+            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
+            member=f"serviceAccount:service-{project.number}@gs-project-accounts.iam.gserviceaccount.com")
         cmek = gcp.datafusion.Instance("cmek",
             name="my-instance",
             region="us-central1",
@@ -551,7 +562,10 @@ class InstanceIamBinding(pulumi.CustomResource):
             crypto_key_config={
                 "key_reference": crypto_key.id,
             },
-            opts = pulumi.ResourceOptions(depends_on=[crypto_key_member]))
+            opts = pulumi.ResourceOptions(depends_on=[
+                    crypto_key_member_cdf_sa,
+                    crypto_key_member_gcs_sa,
+                ]))
         ```
         ### Data Fusion Instance Enterprise
 

pulumi_gcp/securitycenter/instance_iam_member.py

@@ -336,10 +336,14 @@ class InstanceIamMember(pulumi.CustomResource):
             name="my-instance",
             key_ring=key_ring.id)
         project = gcp.organizations.get_project()
-        crypto_key_member = gcp.kms.CryptoKeyIAMMember("crypto_key_member",
+        crypto_key_member_cdf_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_cdf_sa",
             crypto_key_id=crypto_key.id,
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com")
+        crypto_key_member_gcs_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_gcs_sa",
+            crypto_key_id=crypto_key.id,
+            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
+            member=f"serviceAccount:service-{project.number}@gs-project-accounts.iam.gserviceaccount.com")
         cmek = gcp.datafusion.Instance("cmek",
             name="my-instance",
             region="us-central1",
@@ -347,7 +351,10 @@ class InstanceIamMember(pulumi.CustomResource):
             crypto_key_config={
                 "key_reference": crypto_key.id,
             },
-            opts = pulumi.ResourceOptions(depends_on=[crypto_key_member]))
+            opts = pulumi.ResourceOptions(depends_on=[
+                    crypto_key_member_cdf_sa,
+                    crypto_key_member_gcs_sa,
+                ]))
         ```
         ### Data Fusion Instance Enterprise
 
@@ -540,10 +547,14 @@ class InstanceIamMember(pulumi.CustomResource):
             name="my-instance",
             key_ring=key_ring.id)
         project = gcp.organizations.get_project()
-        crypto_key_member = gcp.kms.CryptoKeyIAMMember("crypto_key_member",
+        crypto_key_member_cdf_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_cdf_sa",
             crypto_key_id=crypto_key.id,
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com")
+        crypto_key_member_gcs_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_gcs_sa",
+            crypto_key_id=crypto_key.id,
+            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
+            member=f"serviceAccount:service-{project.number}@gs-project-accounts.iam.gserviceaccount.com")
         cmek = gcp.datafusion.Instance("cmek",
             name="my-instance",
             region="us-central1",
@@ -551,7 +562,10 @@ class InstanceIamMember(pulumi.CustomResource):
             crypto_key_config={
                 "key_reference": crypto_key.id,
             },
-            opts = pulumi.ResourceOptions(depends_on=[crypto_key_member]))
+            opts = pulumi.ResourceOptions(depends_on=[
+                    crypto_key_member_cdf_sa,
+                    crypto_key_member_gcs_sa,
+                ]))
         ```
         ### Data Fusion Instance Enterprise
 

pulumi_gcp/securitycenter/instance_iam_policy.py

@@ -285,10 +285,14 @@ class InstanceIamPolicy(pulumi.CustomResource):
             name="my-instance",
             key_ring=key_ring.id)
         project = gcp.organizations.get_project()
-        crypto_key_member = gcp.kms.CryptoKeyIAMMember("crypto_key_member",
+        crypto_key_member_cdf_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_cdf_sa",
             crypto_key_id=crypto_key.id,
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com")
+        crypto_key_member_gcs_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_gcs_sa",
+            crypto_key_id=crypto_key.id,
+            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
+            member=f"serviceAccount:service-{project.number}@gs-project-accounts.iam.gserviceaccount.com")
         cmek = gcp.datafusion.Instance("cmek",
             name="my-instance",
             region="us-central1",
@@ -296,7 +300,10 @@ class InstanceIamPolicy(pulumi.CustomResource):
             crypto_key_config={
                 "key_reference": crypto_key.id,
             },
-            opts = pulumi.ResourceOptions(depends_on=[crypto_key_member]))
+            opts = pulumi.ResourceOptions(depends_on=[
+                    crypto_key_member_cdf_sa,
+                    crypto_key_member_gcs_sa,
+                ]))
         ```
         ### Data Fusion Instance Enterprise
 
@@ -489,10 +496,14 @@ class InstanceIamPolicy(pulumi.CustomResource):
             name="my-instance",
             key_ring=key_ring.id)
         project = gcp.organizations.get_project()
-        crypto_key_member = gcp.kms.CryptoKeyIAMMember("crypto_key_member",
+        crypto_key_member_cdf_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_cdf_sa",
             crypto_key_id=crypto_key.id,
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com")
+        crypto_key_member_gcs_sa = gcp.kms.CryptoKeyIAMMember("crypto_key_member_gcs_sa",
+            crypto_key_id=crypto_key.id,
+            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
+            member=f"serviceAccount:service-{project.number}@gs-project-accounts.iam.gserviceaccount.com")
         cmek = gcp.datafusion.Instance("cmek",
             name="my-instance",
             region="us-central1",
@@ -500,7 +511,10 @@ class InstanceIamPolicy(pulumi.CustomResource):
             crypto_key_config={
                 "key_reference": crypto_key.id,
             },
-            opts = pulumi.ResourceOptions(depends_on=[crypto_key_member]))
+            opts = pulumi.ResourceOptions(depends_on=[
+                    crypto_key_member_cdf_sa,
+                    crypto_key_member_gcs_sa,
+                ]))
         ```
         ### Data Fusion Instance Enterprise
 

pulumi_gcp/securitycenter/v2_organization_source_iam_binding.py

@@ -310,6 +310,7 @@ class V2OrganizationSourceIamBinding(pulumi.CustomResource):
         ---
 
         # IAM policy for Security Command Center (SCC) v2 API OrganizationSource
+
         Three different resources help you manage your IAM policy for Security Command Center (SCC) v2 API OrganizationSource. Each of these resources serves a different use case:
 
         * `securitycenter.V2OrganizationSourceIamPolicy`: Authoritative. Sets the IAM policy for the organizationsource and replaces any existing policy already attached.
@@ -483,6 +484,7 @@ class V2OrganizationSourceIamBinding(pulumi.CustomResource):
         ---
 
         # IAM policy for Security Command Center (SCC) v2 API OrganizationSource
+
         Three different resources help you manage your IAM policy for Security Command Center (SCC) v2 API OrganizationSource. Each of these resources serves a different use case:
 
         * `securitycenter.V2OrganizationSourceIamPolicy`: Authoritative. Sets the IAM policy for the organizationsource and replaces any existing policy already attached.

pulumi_gcp/securitycenter/v2_organization_source_iam_member.py

@@ -310,6 +310,7 @@ class V2OrganizationSourceIamMember(pulumi.CustomResource):
         ---
 
         # IAM policy for Security Command Center (SCC) v2 API OrganizationSource
+
         Three different resources help you manage your IAM policy for Security Command Center (SCC) v2 API OrganizationSource. Each of these resources serves a different use case:
 
         * `securitycenter.V2OrganizationSourceIamPolicy`: Authoritative. Sets the IAM policy for the organizationsource and replaces any existing policy already attached.
@@ -483,6 +484,7 @@ class V2OrganizationSourceIamMember(pulumi.CustomResource):
         ---
 
         # IAM policy for Security Command Center (SCC) v2 API OrganizationSource
+
         Three different resources help you manage your IAM policy for Security Command Center (SCC) v2 API OrganizationSource. Each of these resources serves a different use case:
 
         * `securitycenter.V2OrganizationSourceIamPolicy`: Authoritative. Sets the IAM policy for the organizationsource and replaces any existing policy already attached.

pulumi_gcp/securitycenter/v2_organization_source_iam_policy.py

@@ -207,6 +207,7 @@ class V2OrganizationSourceIamPolicy(pulumi.CustomResource):
         ---
 
         # IAM policy for Security Command Center (SCC) v2 API OrganizationSource
+
         Three different resources help you manage your IAM policy for Security Command Center (SCC) v2 API OrganizationSource. Each of these resources serves a different use case:
 
         * `securitycenter.V2OrganizationSourceIamPolicy`: Authoritative. Sets the IAM policy for the organizationsource and replaces any existing policy already attached.
@@ -368,6 +369,7 @@ class V2OrganizationSourceIamPolicy(pulumi.CustomResource):
         ---
 
         # IAM policy for Security Command Center (SCC) v2 API OrganizationSource
+
         Three different resources help you manage your IAM policy for Security Command Center (SCC) v2 API OrganizationSource. Each of these resources serves a different use case:
 
         * `securitycenter.V2OrganizationSourceIamPolicy`: Authoritative. Sets the IAM policy for the organizationsource and replaces any existing policy already attached.

pulumi_gcp/servicedirectory/namespace_iam_binding.py

@@ -287,6 +287,7 @@ class NamespaceIamBinding(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Namespace
+
         Three different resources help you manage your IAM policy for Service Directory Namespace. Each of these resources serves a different use case:
 
         * `servicedirectory.NamespaceIamPolicy`: Authoritative. Sets the IAM policy for the namespace and replaces any existing policy already attached.
@@ -460,6 +461,7 @@ class NamespaceIamBinding(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Namespace
+
         Three different resources help you manage your IAM policy for Service Directory Namespace. Each of these resources serves a different use case:
 
         * `servicedirectory.NamespaceIamPolicy`: Authoritative. Sets the IAM policy for the namespace and replaces any existing policy already attached.

pulumi_gcp/servicedirectory/namespace_iam_member.py

@@ -287,6 +287,7 @@ class NamespaceIamMember(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Namespace
+
         Three different resources help you manage your IAM policy for Service Directory Namespace. Each of these resources serves a different use case:
 
         * `servicedirectory.NamespaceIamPolicy`: Authoritative. Sets the IAM policy for the namespace and replaces any existing policy already attached.
@@ -460,6 +461,7 @@ class NamespaceIamMember(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Namespace
+
         Three different resources help you manage your IAM policy for Service Directory Namespace. Each of these resources serves a different use case:
 
         * `servicedirectory.NamespaceIamPolicy`: Authoritative. Sets the IAM policy for the namespace and replaces any existing policy already attached.

pulumi_gcp/servicedirectory/namespace_iam_policy.py

@@ -184,6 +184,7 @@ class NamespaceIamPolicy(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Namespace
+
         Three different resources help you manage your IAM policy for Service Directory Namespace. Each of these resources serves a different use case:
 
         * `servicedirectory.NamespaceIamPolicy`: Authoritative. Sets the IAM policy for the namespace and replaces any existing policy already attached.
@@ -345,6 +346,7 @@ class NamespaceIamPolicy(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Namespace
+
         Three different resources help you manage your IAM policy for Service Directory Namespace. Each of these resources serves a different use case:
 
         * `servicedirectory.NamespaceIamPolicy`: Authoritative. Sets the IAM policy for the namespace and replaces any existing policy already attached.

pulumi_gcp/servicedirectory/service_iam_binding.py

@@ -287,6 +287,7 @@ class ServiceIamBinding(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Service
+
         Three different resources help you manage your IAM policy for Service Directory Service. Each of these resources serves a different use case:
 
         * `servicedirectory.ServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.
@@ -460,6 +461,7 @@ class ServiceIamBinding(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Service
+
         Three different resources help you manage your IAM policy for Service Directory Service. Each of these resources serves a different use case:
 
         * `servicedirectory.ServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.

pulumi_gcp/servicedirectory/service_iam_member.py

@@ -287,6 +287,7 @@ class ServiceIamMember(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Service
+
         Three different resources help you manage your IAM policy for Service Directory Service. Each of these resources serves a different use case:
 
         * `servicedirectory.ServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.
@@ -460,6 +461,7 @@ class ServiceIamMember(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Service
+
         Three different resources help you manage your IAM policy for Service Directory Service. Each of these resources serves a different use case:
 
         * `servicedirectory.ServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.

pulumi_gcp/servicedirectory/service_iam_policy.py

@@ -184,6 +184,7 @@ class ServiceIamPolicy(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Service
+
         Three different resources help you manage your IAM policy for Service Directory Service. Each of these resources serves a different use case:
 
         * `servicedirectory.ServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.
@@ -345,6 +346,7 @@ class ServiceIamPolicy(pulumi.CustomResource):
         ---
 
         # IAM policy for Service Directory Service
+
         Three different resources help you manage your IAM policy for Service Directory Service. Each of these resources serves a different use case:
 
         * `servicedirectory.ServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.

pulumi_gcp/sourcerepo/repository_iam_binding.py

@@ -325,6 +325,7 @@ class RepositoryIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Cloud Source Repositories Repository
+
         Three different resources help you manage your IAM policy for Cloud Source Repositories Repository. Each of these resources serves a different use case:
 
         * `sourcerepo.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.
@@ -503,6 +504,7 @@ class RepositoryIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Cloud Source Repositories Repository
+
         Three different resources help you manage your IAM policy for Cloud Source Repositories Repository. Each of these resources serves a different use case:
 
         * `sourcerepo.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.

pulumi_gcp/sourcerepo/repository_iam_member.py

@@ -325,6 +325,7 @@ class RepositoryIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Cloud Source Repositories Repository
+
         Three different resources help you manage your IAM policy for Cloud Source Repositories Repository. Each of these resources serves a different use case:
 
         * `sourcerepo.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.
@@ -503,6 +504,7 @@ class RepositoryIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Cloud Source Repositories Repository
+
         Three different resources help you manage your IAM policy for Cloud Source Repositories Repository. Each of these resources serves a different use case:
 
         * `sourcerepo.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.