pulumi-gcp 8.41.0a1755297349__py3-none-any.whl → 8.42.0a1756095712__py3-none-any.whl

pulumi_gcp/compute/region_backend_service.py

@@ -33,6 +33,7 @@ class RegionBackendServiceArgs:
                  dynamic_forwarding: Optional[pulumi.Input['RegionBackendServiceDynamicForwardingArgs']] = None,
                  enable_cdn: Optional[pulumi.Input[_builtins.bool]] = None,
                  failover_policy: Optional[pulumi.Input['RegionBackendServiceFailoverPolicyArgs']] = None,
+                 ha_policy: Optional[pulumi.Input['RegionBackendServiceHaPolicyArgs']] = None,
                  health_checks: Optional[pulumi.Input[_builtins.str]] = None,
                  iap: Optional[pulumi.Input['RegionBackendServiceIapArgs']] = None,
                  ip_address_selection_policy: Optional[pulumi.Input[_builtins.str]] = None,
@@ -88,6 +89,15 @@ class RegionBackendServiceArgs:
         :param pulumi.Input[_builtins.bool] enable_cdn: If true, enable Cloud CDN for this RegionBackendService.
         :param pulumi.Input['RegionBackendServiceFailoverPolicyArgs'] failover_policy: Policy for failovers.
                Structure is documented below.
+        :param pulumi.Input['RegionBackendServiceHaPolicyArgs'] ha_policy: Configures self-managed High Availability (HA) for External and Internal Protocol Forwarding.
+               The backends of this regional backend service must only specify zonal network endpoint groups
+               (NEGs) of type GCE_VM_IP. Note that haPolicy is not for load balancing, and therefore cannot
+               be specified with sessionAffinity, connectionTrackingPolicy, and failoverPolicy. haPolicy
+               requires customers to be responsible for tracking backend endpoint health and electing a
+               leader among the healthy endpoints. Therefore, haPolicy cannot be specified with healthChecks.
+               haPolicy can only be specified for External Passthrough Network Load Balancers and Internal
+               Passthrough Network Load Balancers.
+               Structure is documented below.
         :param pulumi.Input[_builtins.str] health_checks: The set of URLs to HealthCheck resources for health checking
                this RegionBackendService. Currently at most one health
                check can be specified.
@@ -225,6 +235,8 @@ class RegionBackendServiceArgs:
             pulumi.set(__self__, "enable_cdn", enable_cdn)
         if failover_policy is not None:
             pulumi.set(__self__, "failover_policy", failover_policy)
+        if ha_policy is not None:
+            pulumi.set(__self__, "ha_policy", ha_policy)
         if health_checks is not None:
             pulumi.set(__self__, "health_checks", health_checks)
         if iap is not None:
@@ -429,6 +441,26 @@ class RegionBackendServiceArgs:
     def failover_policy(self, value: Optional[pulumi.Input['RegionBackendServiceFailoverPolicyArgs']]):
         pulumi.set(self, "failover_policy", value)
 
+    @_builtins.property
+    @pulumi.getter(name="haPolicy")
+    def ha_policy(self) -> Optional[pulumi.Input['RegionBackendServiceHaPolicyArgs']]:
+        """
+        Configures self-managed High Availability (HA) for External and Internal Protocol Forwarding.
+        The backends of this regional backend service must only specify zonal network endpoint groups
+        (NEGs) of type GCE_VM_IP. Note that haPolicy is not for load balancing, and therefore cannot
+        be specified with sessionAffinity, connectionTrackingPolicy, and failoverPolicy. haPolicy
+        requires customers to be responsible for tracking backend endpoint health and electing a
+        leader among the healthy endpoints. Therefore, haPolicy cannot be specified with healthChecks.
+        haPolicy can only be specified for External Passthrough Network Load Balancers and Internal
+        Passthrough Network Load Balancers.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "ha_policy")
+
+    @ha_policy.setter
+    def ha_policy(self, value: Optional[pulumi.Input['RegionBackendServiceHaPolicyArgs']]):
+        pulumi.set(self, "ha_policy", value)
+
     @_builtins.property
     @pulumi.getter(name="healthChecks")
     def health_checks(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -758,6 +790,7 @@ class _RegionBackendServiceState:
                  failover_policy: Optional[pulumi.Input['RegionBackendServiceFailoverPolicyArgs']] = None,
                  fingerprint: Optional[pulumi.Input[_builtins.str]] = None,
                  generated_id: Optional[pulumi.Input[_builtins.int]] = None,
+                 ha_policy: Optional[pulumi.Input['RegionBackendServiceHaPolicyArgs']] = None,
                  health_checks: Optional[pulumi.Input[_builtins.str]] = None,
                  iap: Optional[pulumi.Input['RegionBackendServiceIapArgs']] = None,
                  ip_address_selection_policy: Optional[pulumi.Input[_builtins.str]] = None,
@@ -818,6 +851,15 @@ class _RegionBackendServiceState:
         :param pulumi.Input[_builtins.str] fingerprint: Fingerprint of this resource. A hash of the contents stored in this
                object. This field is used in optimistic locking.
         :param pulumi.Input[_builtins.int] generated_id: The unique identifier for the resource. This identifier is defined by the server.
+        :param pulumi.Input['RegionBackendServiceHaPolicyArgs'] ha_policy: Configures self-managed High Availability (HA) for External and Internal Protocol Forwarding.
+               The backends of this regional backend service must only specify zonal network endpoint groups
+               (NEGs) of type GCE_VM_IP. Note that haPolicy is not for load balancing, and therefore cannot
+               be specified with sessionAffinity, connectionTrackingPolicy, and failoverPolicy. haPolicy
+               requires customers to be responsible for tracking backend endpoint health and electing a
+               leader among the healthy endpoints. Therefore, haPolicy cannot be specified with healthChecks.
+               haPolicy can only be specified for External Passthrough Network Load Balancers and Internal
+               Passthrough Network Load Balancers.
+               Structure is documented below.
         :param pulumi.Input[_builtins.str] health_checks: The set of URLs to HealthCheck resources for health checking
                this RegionBackendService. Currently at most one health
                check can be specified.
@@ -962,6 +1004,8 @@ class _RegionBackendServiceState:
             pulumi.set(__self__, "fingerprint", fingerprint)
         if generated_id is not None:
             pulumi.set(__self__, "generated_id", generated_id)
+        if ha_policy is not None:
+            pulumi.set(__self__, "ha_policy", ha_policy)
         if health_checks is not None:
             pulumi.set(__self__, "health_checks", health_checks)
         if iap is not None:
@@ -1205,6 +1249,26 @@ class _RegionBackendServiceState:
     def generated_id(self, value: Optional[pulumi.Input[_builtins.int]]):
         pulumi.set(self, "generated_id", value)
 
+    @_builtins.property
+    @pulumi.getter(name="haPolicy")
+    def ha_policy(self) -> Optional[pulumi.Input['RegionBackendServiceHaPolicyArgs']]:
+        """
+        Configures self-managed High Availability (HA) for External and Internal Protocol Forwarding.
+        The backends of this regional backend service must only specify zonal network endpoint groups
+        (NEGs) of type GCE_VM_IP. Note that haPolicy is not for load balancing, and therefore cannot
+        be specified with sessionAffinity, connectionTrackingPolicy, and failoverPolicy. haPolicy
+        requires customers to be responsible for tracking backend endpoint health and electing a
+        leader among the healthy endpoints. Therefore, haPolicy cannot be specified with healthChecks.
+        haPolicy can only be specified for External Passthrough Network Load Balancers and Internal
+        Passthrough Network Load Balancers.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "ha_policy")
+
+    @ha_policy.setter
+    def ha_policy(self, value: Optional[pulumi.Input['RegionBackendServiceHaPolicyArgs']]):
+        pulumi.set(self, "ha_policy", value)
+
     @_builtins.property
     @pulumi.getter(name="healthChecks")
     def health_checks(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -1546,6 +1610,7 @@ class RegionBackendService(pulumi.CustomResource):
                  dynamic_forwarding: Optional[pulumi.Input[Union['RegionBackendServiceDynamicForwardingArgs', 'RegionBackendServiceDynamicForwardingArgsDict']]] = None,
                  enable_cdn: Optional[pulumi.Input[_builtins.bool]] = None,
                  failover_policy: Optional[pulumi.Input[Union['RegionBackendServiceFailoverPolicyArgs', 'RegionBackendServiceFailoverPolicyArgsDict']]] = None,
+                 ha_policy: Optional[pulumi.Input[Union['RegionBackendServiceHaPolicyArgs', 'RegionBackendServiceHaPolicyArgsDict']]] = None,
                  health_checks: Optional[pulumi.Input[_builtins.str]] = None,
                  iap: Optional[pulumi.Input[Union['RegionBackendServiceIapArgs', 'RegionBackendServiceIapArgsDict']]] = None,
                  ip_address_selection_policy: Optional[pulumi.Input[_builtins.str]] = None,
@@ -1934,6 +1999,83 @@ class RegionBackendService(pulumi.CustomResource):
                 },
             })
         ```
+        ### Region Backend Service Ha Policy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        default = gcp.compute.Network("default", name="rbs-net")
+        default_region_backend_service = gcp.compute.RegionBackendService("default",
+            region="us-central1",
+            name="region-service",
+            protocol="UDP",
+            load_balancing_scheme="EXTERNAL",
+            network=default.id,
+            ha_policy={
+                "fast_ip_move": "GARP_RA",
+            },
+            connection_draining_timeout_sec=0)
+        ```
+        ### Region Backend Service Ha Policy Manual Leader
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        default = gcp.compute.Network("default",
+            name="rbs-net",
+            auto_create_subnetworks=False)
+        default_subnetwork = gcp.compute.Subnetwork("default",
+            name="rbs-subnet",
+            ip_cidr_range="10.1.2.0/24",
+            region="us-central1",
+            network=default.id)
+        my_image = gcp.compute.get_image(family="debian-12",
+            project="debian-cloud")
+        endpoint_instance = gcp.compute.Instance("endpoint-instance",
+            network_interfaces=[{
+                "access_configs": [{}],
+                "subnetwork": default_subnetwork.id,
+            }],
+            name="rbs-instance",
+            machine_type="e2-medium",
+            boot_disk={
+                "initialize_params": {
+                    "image": my_image.self_link,
+                },
+            })
+        neg = gcp.compute.NetworkEndpointGroup("neg",
+            name="rbs-neg",
+            network_endpoint_type="GCE_VM_IP",
+            network=default.id,
+            subnetwork=default_subnetwork.id,
+            zone="us-central1-a")
+        endpoint = gcp.compute.NetworkEndpoint("endpoint",
+            network_endpoint_group=neg.name,
+            instance=endpoint_instance.name,
+            ip_address=endpoint_instance.network_interfaces[0].network_ip)
+        default_region_backend_service = gcp.compute.RegionBackendService("default",
+            region="us-central1",
+            name="region-service",
+            protocol="UDP",
+            load_balancing_scheme="EXTERNAL",
+            network=default.id,
+            backends=[{
+                "group": neg.self_link,
+                "balancing_mode": "CONNECTION",
+            }],
+            ha_policy={
+                "fast_ip_move": "GARP_RA",
+                "leader": {
+                    "backend_group": neg.self_link,
+                    "network_endpoint": {
+                        "instance": endpoint_instance.name,
+                    },
+                },
+            },
+            connection_draining_timeout_sec=0)
+        ```
 
         ## Import
 
@@ -2002,6 +2144,15 @@ class RegionBackendService(pulumi.CustomResource):
         :param pulumi.Input[_builtins.bool] enable_cdn: If true, enable Cloud CDN for this RegionBackendService.
         :param pulumi.Input[Union['RegionBackendServiceFailoverPolicyArgs', 'RegionBackendServiceFailoverPolicyArgsDict']] failover_policy: Policy for failovers.
                Structure is documented below.
+        :param pulumi.Input[Union['RegionBackendServiceHaPolicyArgs', 'RegionBackendServiceHaPolicyArgsDict']] ha_policy: Configures self-managed High Availability (HA) for External and Internal Protocol Forwarding.
+               The backends of this regional backend service must only specify zonal network endpoint groups
+               (NEGs) of type GCE_VM_IP. Note that haPolicy is not for load balancing, and therefore cannot
+               be specified with sessionAffinity, connectionTrackingPolicy, and failoverPolicy. haPolicy
+               requires customers to be responsible for tracking backend endpoint health and electing a
+               leader among the healthy endpoints. Therefore, haPolicy cannot be specified with healthChecks.
+               haPolicy can only be specified for External Passthrough Network Load Balancers and Internal
+               Passthrough Network Load Balancers.
+               Structure is documented below.
         :param pulumi.Input[_builtins.str] health_checks: The set of URLs to HealthCheck resources for health checking
                this RegionBackendService. Currently at most one health
                check can be specified.
@@ -2490,6 +2641,83 @@ class RegionBackendService(pulumi.CustomResource):
                 },
             })
         ```
+        ### Region Backend Service Ha Policy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        default = gcp.compute.Network("default", name="rbs-net")
+        default_region_backend_service = gcp.compute.RegionBackendService("default",
+            region="us-central1",
+            name="region-service",
+            protocol="UDP",
+            load_balancing_scheme="EXTERNAL",
+            network=default.id,
+            ha_policy={
+                "fast_ip_move": "GARP_RA",
+            },
+            connection_draining_timeout_sec=0)
+        ```
+        ### Region Backend Service Ha Policy Manual Leader
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        default = gcp.compute.Network("default",
+            name="rbs-net",
+            auto_create_subnetworks=False)
+        default_subnetwork = gcp.compute.Subnetwork("default",
+            name="rbs-subnet",
+            ip_cidr_range="10.1.2.0/24",
+            region="us-central1",
+            network=default.id)
+        my_image = gcp.compute.get_image(family="debian-12",
+            project="debian-cloud")
+        endpoint_instance = gcp.compute.Instance("endpoint-instance",
+            network_interfaces=[{
+                "access_configs": [{}],
+                "subnetwork": default_subnetwork.id,
+            }],
+            name="rbs-instance",
+            machine_type="e2-medium",
+            boot_disk={
+                "initialize_params": {
+                    "image": my_image.self_link,
+                },
+            })
+        neg = gcp.compute.NetworkEndpointGroup("neg",
+            name="rbs-neg",
+            network_endpoint_type="GCE_VM_IP",
+            network=default.id,
+            subnetwork=default_subnetwork.id,
+            zone="us-central1-a")
+        endpoint = gcp.compute.NetworkEndpoint("endpoint",
+            network_endpoint_group=neg.name,
+            instance=endpoint_instance.name,
+            ip_address=endpoint_instance.network_interfaces[0].network_ip)
+        default_region_backend_service = gcp.compute.RegionBackendService("default",
+            region="us-central1",
+            name="region-service",
+            protocol="UDP",
+            load_balancing_scheme="EXTERNAL",
+            network=default.id,
+            backends=[{
+                "group": neg.self_link,
+                "balancing_mode": "CONNECTION",
+            }],
+            ha_policy={
+                "fast_ip_move": "GARP_RA",
+                "leader": {
+                    "backend_group": neg.self_link,
+                    "network_endpoint": {
+                        "instance": endpoint_instance.name,
+                    },
+                },
+            },
+            connection_draining_timeout_sec=0)
+        ```
 
         ## Import
 
@@ -2548,6 +2776,7 @@ class RegionBackendService(pulumi.CustomResource):
                  dynamic_forwarding: Optional[pulumi.Input[Union['RegionBackendServiceDynamicForwardingArgs', 'RegionBackendServiceDynamicForwardingArgsDict']]] = None,
                  enable_cdn: Optional[pulumi.Input[_builtins.bool]] = None,
                  failover_policy: Optional[pulumi.Input[Union['RegionBackendServiceFailoverPolicyArgs', 'RegionBackendServiceFailoverPolicyArgsDict']]] = None,
+                 ha_policy: Optional[pulumi.Input[Union['RegionBackendServiceHaPolicyArgs', 'RegionBackendServiceHaPolicyArgsDict']]] = None,
                  health_checks: Optional[pulumi.Input[_builtins.str]] = None,
                  iap: Optional[pulumi.Input[Union['RegionBackendServiceIapArgs', 'RegionBackendServiceIapArgsDict']]] = None,
                  ip_address_selection_policy: Optional[pulumi.Input[_builtins.str]] = None,
@@ -2587,6 +2816,7 @@ class RegionBackendService(pulumi.CustomResource):
             __props__.__dict__["dynamic_forwarding"] = dynamic_forwarding
             __props__.__dict__["enable_cdn"] = enable_cdn
             __props__.__dict__["failover_policy"] = failover_policy
+            __props__.__dict__["ha_policy"] = ha_policy
             __props__.__dict__["health_checks"] = health_checks
             __props__.__dict__["iap"] = iap
             __props__.__dict__["ip_address_selection_policy"] = ip_address_selection_policy
@@ -2634,6 +2864,7 @@ class RegionBackendService(pulumi.CustomResource):
             failover_policy: Optional[pulumi.Input[Union['RegionBackendServiceFailoverPolicyArgs', 'RegionBackendServiceFailoverPolicyArgsDict']]] = None,
             fingerprint: Optional[pulumi.Input[_builtins.str]] = None,
             generated_id: Optional[pulumi.Input[_builtins.int]] = None,
+            ha_policy: Optional[pulumi.Input[Union['RegionBackendServiceHaPolicyArgs', 'RegionBackendServiceHaPolicyArgsDict']]] = None,
             health_checks: Optional[pulumi.Input[_builtins.str]] = None,
             iap: Optional[pulumi.Input[Union['RegionBackendServiceIapArgs', 'RegionBackendServiceIapArgsDict']]] = None,
             ip_address_selection_policy: Optional[pulumi.Input[_builtins.str]] = None,
@@ -2699,6 +2930,15 @@ class RegionBackendService(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] fingerprint: Fingerprint of this resource. A hash of the contents stored in this
                object. This field is used in optimistic locking.
         :param pulumi.Input[_builtins.int] generated_id: The unique identifier for the resource. This identifier is defined by the server.
+        :param pulumi.Input[Union['RegionBackendServiceHaPolicyArgs', 'RegionBackendServiceHaPolicyArgsDict']] ha_policy: Configures self-managed High Availability (HA) for External and Internal Protocol Forwarding.
+               The backends of this regional backend service must only specify zonal network endpoint groups
+               (NEGs) of type GCE_VM_IP. Note that haPolicy is not for load balancing, and therefore cannot
+               be specified with sessionAffinity, connectionTrackingPolicy, and failoverPolicy. haPolicy
+               requires customers to be responsible for tracking backend endpoint health and electing a
+               leader among the healthy endpoints. Therefore, haPolicy cannot be specified with healthChecks.
+               haPolicy can only be specified for External Passthrough Network Load Balancers and Internal
+               Passthrough Network Load Balancers.
+               Structure is documented below.
         :param pulumi.Input[_builtins.str] health_checks: The set of URLs to HealthCheck resources for health checking
                this RegionBackendService. Currently at most one health
                check can be specified.
@@ -2832,6 +3072,7 @@ class RegionBackendService(pulumi.CustomResource):
         __props__.__dict__["failover_policy"] = failover_policy
         __props__.__dict__["fingerprint"] = fingerprint
         __props__.__dict__["generated_id"] = generated_id
+        __props__.__dict__["ha_policy"] = ha_policy
         __props__.__dict__["health_checks"] = health_checks
         __props__.__dict__["iap"] = iap
         __props__.__dict__["ip_address_selection_policy"] = ip_address_selection_policy
@@ -2997,6 +3238,22 @@ class RegionBackendService(pulumi.CustomResource):
         """
         return pulumi.get(self, "generated_id")
 
+    @_builtins.property
+    @pulumi.getter(name="haPolicy")
+    def ha_policy(self) -> pulumi.Output[Optional['outputs.RegionBackendServiceHaPolicy']]:
+        """
+        Configures self-managed High Availability (HA) for External and Internal Protocol Forwarding.
+        The backends of this regional backend service must only specify zonal network endpoint groups
+        (NEGs) of type GCE_VM_IP. Note that haPolicy is not for load balancing, and therefore cannot
+        be specified with sessionAffinity, connectionTrackingPolicy, and failoverPolicy. haPolicy
+        requires customers to be responsible for tracking backend endpoint health and electing a
+        leader among the healthy endpoints. Therefore, haPolicy cannot be specified with healthChecks.
+        haPolicy can only be specified for External Passthrough Network Load Balancers and Internal
+        Passthrough Network Load Balancers.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "ha_policy")
+
     @_builtins.property
     @pulumi.getter(name="healthChecks")
     def health_checks(self) -> pulumi.Output[Optional[_builtins.str]]:

pulumi_gcp/compute/region_disk_iam_binding.py

@@ -370,6 +370,7 @@ class RegionDiskIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Compute Engine RegionDisk
+
         Three different resources help you manage your IAM policy for Compute Engine RegionDisk. Each of these resources serves a different use case:
 
         * `compute.RegionDiskIamPolicy`: Authoritative. Sets the IAM policy for the regiondisk and replaces any existing policy already attached.
@@ -561,6 +562,7 @@ class RegionDiskIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Compute Engine RegionDisk
+
         Three different resources help you manage your IAM policy for Compute Engine RegionDisk. Each of these resources serves a different use case:
 
         * `compute.RegionDiskIamPolicy`: Authoritative. Sets the IAM policy for the regiondisk and replaces any existing policy already attached.

pulumi_gcp/compute/region_disk_iam_member.py

@@ -370,6 +370,7 @@ class RegionDiskIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Compute Engine RegionDisk
+
         Three different resources help you manage your IAM policy for Compute Engine RegionDisk. Each of these resources serves a different use case:
 
         * `compute.RegionDiskIamPolicy`: Authoritative. Sets the IAM policy for the regiondisk and replaces any existing policy already attached.
@@ -561,6 +562,7 @@ class RegionDiskIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Compute Engine RegionDisk
+
         Three different resources help you manage your IAM policy for Compute Engine RegionDisk. Each of these resources serves a different use case:
 
         * `compute.RegionDiskIamPolicy`: Authoritative. Sets the IAM policy for the regiondisk and replaces any existing policy already attached.

pulumi_gcp/compute/region_disk_iam_policy.py

@@ -267,6 +267,7 @@ class RegionDiskIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Compute Engine RegionDisk
+
         Three different resources help you manage your IAM policy for Compute Engine RegionDisk. Each of these resources serves a different use case:
 
         * `compute.RegionDiskIamPolicy`: Authoritative. Sets the IAM policy for the regiondisk and replaces any existing policy already attached.
@@ -446,6 +447,7 @@ class RegionDiskIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Compute Engine RegionDisk
+
         Three different resources help you manage your IAM policy for Compute Engine RegionDisk. Each of these resources serves a different use case:
 
         * `compute.RegionDiskIamPolicy`: Authoritative. Sets the IAM policy for the regiondisk and replaces any existing policy already attached.

pulumi_gcp/compute/region_security_policy.py

@@ -21,6 +21,7 @@ __all__ = ['RegionSecurityPolicyArgs', 'RegionSecurityPolicy']
 @pulumi.input_type
 class RegionSecurityPolicyArgs:
     def __init__(__self__, *,
+                 advanced_options_config: Optional[pulumi.Input['RegionSecurityPolicyAdvancedOptionsConfigArgs']] = None,
                  ddos_protection_config: Optional[pulumi.Input['RegionSecurityPolicyDdosProtectionConfigArgs']] = None,
                  description: Optional[pulumi.Input[_builtins.str]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
@@ -31,6 +32,8 @@ class RegionSecurityPolicyArgs:
                  user_defined_fields: Optional[pulumi.Input[Sequence[pulumi.Input['RegionSecurityPolicyUserDefinedFieldArgs']]]] = None):
         """
         The set of arguments for constructing a RegionSecurityPolicy resource.
+        :param pulumi.Input['RegionSecurityPolicyAdvancedOptionsConfigArgs'] advanced_options_config: Advanced Options Config of this security policy.
+               Structure is documented below.
         :param pulumi.Input['RegionSecurityPolicyDdosProtectionConfigArgs'] ddos_protection_config: Configuration for Google Cloud Armor DDOS Proctection Config.
                Structure is documented below.
         :param pulumi.Input[_builtins.str] description: An optional description of this resource. Provide this property when you create the resource.
@@ -53,6 +56,8 @@ class RegionSecurityPolicyArgs:
                Rules may then specify matching values for these fields.
                Structure is documented below.
         """
+        if advanced_options_config is not None:
+            pulumi.set(__self__, "advanced_options_config", advanced_options_config)
         if ddos_protection_config is not None:
             pulumi.set(__self__, "ddos_protection_config", ddos_protection_config)
         if description is not None:
@@ -70,6 +75,19 @@ class RegionSecurityPolicyArgs:
         if user_defined_fields is not None:
             pulumi.set(__self__, "user_defined_fields", user_defined_fields)
 
+    @_builtins.property
+    @pulumi.getter(name="advancedOptionsConfig")
+    def advanced_options_config(self) -> Optional[pulumi.Input['RegionSecurityPolicyAdvancedOptionsConfigArgs']]:
+        """
+        Advanced Options Config of this security policy.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "advanced_options_config")
+
+    @advanced_options_config.setter
+    def advanced_options_config(self, value: Optional[pulumi.Input['RegionSecurityPolicyAdvancedOptionsConfigArgs']]):
+        pulumi.set(self, "advanced_options_config", value)
+
     @_builtins.property
     @pulumi.getter(name="ddosProtectionConfig")
     def ddos_protection_config(self) -> Optional[pulumi.Input['RegionSecurityPolicyDdosProtectionConfigArgs']]:
@@ -183,6 +201,7 @@ class RegionSecurityPolicyArgs:
 @pulumi.input_type
 class _RegionSecurityPolicyState:
     def __init__(__self__, *,
+                 advanced_options_config: Optional[pulumi.Input['RegionSecurityPolicyAdvancedOptionsConfigArgs']] = None,
                  ddos_protection_config: Optional[pulumi.Input['RegionSecurityPolicyDdosProtectionConfigArgs']] = None,
                  description: Optional[pulumi.Input[_builtins.str]] = None,
                  fingerprint: Optional[pulumi.Input[_builtins.str]] = None,
@@ -197,6 +216,8 @@ class _RegionSecurityPolicyState:
                  user_defined_fields: Optional[pulumi.Input[Sequence[pulumi.Input['RegionSecurityPolicyUserDefinedFieldArgs']]]] = None):
         """
         Input properties used for looking up and filtering RegionSecurityPolicy resources.
+        :param pulumi.Input['RegionSecurityPolicyAdvancedOptionsConfigArgs'] advanced_options_config: Advanced Options Config of this security policy.
+               Structure is documented below.
         :param pulumi.Input['RegionSecurityPolicyDdosProtectionConfigArgs'] ddos_protection_config: Configuration for Google Cloud Armor DDOS Proctection Config.
                Structure is documented below.
         :param pulumi.Input[_builtins.str] description: An optional description of this resource. Provide this property when you create the resource.
@@ -224,6 +245,8 @@ class _RegionSecurityPolicyState:
                Rules may then specify matching values for these fields.
                Structure is documented below.
         """
+        if advanced_options_config is not None:
+            pulumi.set(__self__, "advanced_options_config", advanced_options_config)
         if ddos_protection_config is not None:
             pulumi.set(__self__, "ddos_protection_config", ddos_protection_config)
         if description is not None:
@@ -249,6 +272,19 @@ class _RegionSecurityPolicyState:
         if user_defined_fields is not None:
             pulumi.set(__self__, "user_defined_fields", user_defined_fields)
 
+    @_builtins.property
+    @pulumi.getter(name="advancedOptionsConfig")
+    def advanced_options_config(self) -> Optional[pulumi.Input['RegionSecurityPolicyAdvancedOptionsConfigArgs']]:
+        """
+        Advanced Options Config of this security policy.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "advanced_options_config")
+
+    @advanced_options_config.setter
+    def advanced_options_config(self, value: Optional[pulumi.Input['RegionSecurityPolicyAdvancedOptionsConfigArgs']]):
+        pulumi.set(self, "advanced_options_config", value)
+
     @_builtins.property
     @pulumi.getter(name="ddosProtectionConfig")
     def ddos_protection_config(self) -> Optional[pulumi.Input['RegionSecurityPolicyDdosProtectionConfigArgs']]:
@@ -414,6 +450,7 @@ class RegionSecurityPolicy(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 advanced_options_config: Optional[pulumi.Input[Union['RegionSecurityPolicyAdvancedOptionsConfigArgs', 'RegionSecurityPolicyAdvancedOptionsConfigArgsDict']]] = None,
                  ddos_protection_config: Optional[pulumi.Input[Union['RegionSecurityPolicyDdosProtectionConfigArgs', 'RegionSecurityPolicyDdosProtectionConfigArgsDict']]] = None,
                  description: Optional[pulumi.Input[_builtins.str]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
@@ -552,6 +589,8 @@ class RegionSecurityPolicy(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[Union['RegionSecurityPolicyAdvancedOptionsConfigArgs', 'RegionSecurityPolicyAdvancedOptionsConfigArgsDict']] advanced_options_config: Advanced Options Config of this security policy.
+               Structure is documented below.
         :param pulumi.Input[Union['RegionSecurityPolicyDdosProtectionConfigArgs', 'RegionSecurityPolicyDdosProtectionConfigArgsDict']] ddos_protection_config: Configuration for Google Cloud Armor DDOS Proctection Config.
                Structure is documented below.
         :param pulumi.Input[_builtins.str] description: An optional description of this resource. Provide this property when you create the resource.
@@ -722,6 +761,7 @@ class RegionSecurityPolicy(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 advanced_options_config: Optional[pulumi.Input[Union['RegionSecurityPolicyAdvancedOptionsConfigArgs', 'RegionSecurityPolicyAdvancedOptionsConfigArgsDict']]] = None,
                  ddos_protection_config: Optional[pulumi.Input[Union['RegionSecurityPolicyDdosProtectionConfigArgs', 'RegionSecurityPolicyDdosProtectionConfigArgsDict']]] = None,
                  description: Optional[pulumi.Input[_builtins.str]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
@@ -739,6 +779,7 @@ class RegionSecurityPolicy(pulumi.CustomResource):
                 raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
             __props__ = RegionSecurityPolicyArgs.__new__(RegionSecurityPolicyArgs)
 
+            __props__.__dict__["advanced_options_config"] = advanced_options_config
             __props__.__dict__["ddos_protection_config"] = ddos_protection_config
             __props__.__dict__["description"] = description
             __props__.__dict__["name"] = name
@@ -761,6 +802,7 @@ class RegionSecurityPolicy(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
+            advanced_options_config: Optional[pulumi.Input[Union['RegionSecurityPolicyAdvancedOptionsConfigArgs', 'RegionSecurityPolicyAdvancedOptionsConfigArgsDict']]] = None,
             ddos_protection_config: Optional[pulumi.Input[Union['RegionSecurityPolicyDdosProtectionConfigArgs', 'RegionSecurityPolicyDdosProtectionConfigArgsDict']]] = None,
             description: Optional[pulumi.Input[_builtins.str]] = None,
             fingerprint: Optional[pulumi.Input[_builtins.str]] = None,
@@ -780,6 +822,8 @@ class RegionSecurityPolicy(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[Union['RegionSecurityPolicyAdvancedOptionsConfigArgs', 'RegionSecurityPolicyAdvancedOptionsConfigArgsDict']] advanced_options_config: Advanced Options Config of this security policy.
+               Structure is documented below.
         :param pulumi.Input[Union['RegionSecurityPolicyDdosProtectionConfigArgs', 'RegionSecurityPolicyDdosProtectionConfigArgsDict']] ddos_protection_config: Configuration for Google Cloud Armor DDOS Proctection Config.
                Structure is documented below.
         :param pulumi.Input[_builtins.str] description: An optional description of this resource. Provide this property when you create the resource.
@@ -811,6 +855,7 @@ class RegionSecurityPolicy(pulumi.CustomResource):
 
         __props__ = _RegionSecurityPolicyState.__new__(_RegionSecurityPolicyState)
 
+        __props__.__dict__["advanced_options_config"] = advanced_options_config
         __props__.__dict__["ddos_protection_config"] = ddos_protection_config
         __props__.__dict__["description"] = description
         __props__.__dict__["fingerprint"] = fingerprint
@@ -825,6 +870,15 @@ class RegionSecurityPolicy(pulumi.CustomResource):
         __props__.__dict__["user_defined_fields"] = user_defined_fields
         return RegionSecurityPolicy(resource_name, opts=opts, __props__=__props__)
 
+    @_builtins.property
+    @pulumi.getter(name="advancedOptionsConfig")
+    def advanced_options_config(self) -> pulumi.Output[Optional['outputs.RegionSecurityPolicyAdvancedOptionsConfig']]:
+        """
+        Advanced Options Config of this security policy.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "advanced_options_config")
+
     @_builtins.property
     @pulumi.getter(name="ddosProtectionConfig")
     def ddos_protection_config(self) -> pulumi.Output[Optional['outputs.RegionSecurityPolicyDdosProtectionConfig']]: