pulumi-gcp 8.41.0a1755297349__py3-none-any.whl → 8.42.0a1756095712__py3-none-any.whl

pulumi_gcp/backupdisasterrecovery/backup_plan.py

@@ -27,6 +27,7 @@ class BackupPlanArgs:
                  location: pulumi.Input[_builtins.str],
                  resource_type: pulumi.Input[_builtins.str],
                  description: Optional[pulumi.Input[_builtins.str]] = None,
+                 log_retention_days: Optional[pulumi.Input[_builtins.int]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None):
         """
         The set of arguments for constructing a BackupPlan resource.
@@ -36,8 +37,9 @@ class BackupPlanArgs:
         :param pulumi.Input[_builtins.str] backup_vault: Backup vault where the backups gets stored using this Backup plan.
         :param pulumi.Input[_builtins.str] location: The location for the backup plan
         :param pulumi.Input[_builtins.str] resource_type: The resource type to which the `BackupPlan` will be applied.
-               Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", and "storage.googleapis.com/Bucket".
+               Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", "sqladmin.googleapis.com/Instance" and "storage.googleapis.com/Bucket".
         :param pulumi.Input[_builtins.str] description: The description allows for additional details about `BackupPlan` and its use cases to be provided.
+        :param pulumi.Input[_builtins.int] log_retention_days: This is only applicable for CloudSql resource. Days for which logs will be stored. This value should be greater than or equal to minimum enforced log retention duration of the backup vault.
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         """
@@ -48,6 +50,8 @@ class BackupPlanArgs:
         pulumi.set(__self__, "resource_type", resource_type)
         if description is not None:
             pulumi.set(__self__, "description", description)
+        if log_retention_days is not None:
+            pulumi.set(__self__, "log_retention_days", log_retention_days)
         if project is not None:
             pulumi.set(__self__, "project", project)
 
@@ -105,7 +109,7 @@ class BackupPlanArgs:
     def resource_type(self) -> pulumi.Input[_builtins.str]:
         """
         The resource type to which the `BackupPlan` will be applied.
-        Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", and "storage.googleapis.com/Bucket".
+        Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", "sqladmin.googleapis.com/Instance" and "storage.googleapis.com/Bucket".
         """
         return pulumi.get(self, "resource_type")
 
@@ -125,6 +129,18 @@ class BackupPlanArgs:
     def description(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "description", value)
 
+    @_builtins.property
+    @pulumi.getter(name="logRetentionDays")
+    def log_retention_days(self) -> Optional[pulumi.Input[_builtins.int]]:
+        """
+        This is only applicable for CloudSql resource. Days for which logs will be stored. This value should be greater than or equal to minimum enforced log retention duration of the backup vault.
+        """
+        return pulumi.get(self, "log_retention_days")
+
+    @log_retention_days.setter
+    def log_retention_days(self, value: Optional[pulumi.Input[_builtins.int]]):
+        pulumi.set(self, "log_retention_days", value)
+
     @_builtins.property
     @pulumi.getter
     def project(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -149,6 +165,7 @@ class _BackupPlanState:
                  create_time: Optional[pulumi.Input[_builtins.str]] = None,
                  description: Optional[pulumi.Input[_builtins.str]] = None,
                  location: Optional[pulumi.Input[_builtins.str]] = None,
+                 log_retention_days: Optional[pulumi.Input[_builtins.int]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
                  resource_type: Optional[pulumi.Input[_builtins.str]] = None,
@@ -164,11 +181,12 @@ class _BackupPlanState:
         :param pulumi.Input[_builtins.str] create_time: When the `BackupPlan` was created.
         :param pulumi.Input[_builtins.str] description: The description allows for additional details about `BackupPlan` and its use cases to be provided.
         :param pulumi.Input[_builtins.str] location: The location for the backup plan
+        :param pulumi.Input[_builtins.int] log_retention_days: This is only applicable for CloudSql resource. Days for which logs will be stored. This value should be greater than or equal to minimum enforced log retention duration of the backup vault.
         :param pulumi.Input[_builtins.str] name: The name of backup plan resource created
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[_builtins.str] resource_type: The resource type to which the `BackupPlan` will be applied.
-               Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", and "storage.googleapis.com/Bucket".
+               Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", "sqladmin.googleapis.com/Instance" and "storage.googleapis.com/Bucket".
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] supported_resource_types: The list of all resource types to which the 'BackupPlan' can be applied.
         :param pulumi.Input[_builtins.str] update_time: When the `BackupPlan` was last updated.
         """
@@ -186,6 +204,8 @@ class _BackupPlanState:
             pulumi.set(__self__, "description", description)
         if location is not None:
             pulumi.set(__self__, "location", location)
+        if log_retention_days is not None:
+            pulumi.set(__self__, "log_retention_days", log_retention_days)
         if name is not None:
             pulumi.set(__self__, "name", name)
         if project is not None:
@@ -282,6 +302,18 @@ class _BackupPlanState:
     def location(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "location", value)
 
+    @_builtins.property
+    @pulumi.getter(name="logRetentionDays")
+    def log_retention_days(self) -> Optional[pulumi.Input[_builtins.int]]:
+        """
+        This is only applicable for CloudSql resource. Days for which logs will be stored. This value should be greater than or equal to minimum enforced log retention duration of the backup vault.
+        """
+        return pulumi.get(self, "log_retention_days")
+
+    @log_retention_days.setter
+    def log_retention_days(self, value: Optional[pulumi.Input[_builtins.int]]):
+        pulumi.set(self, "log_retention_days", value)
+
     @_builtins.property
     @pulumi.getter
     def name(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -312,7 +344,7 @@ class _BackupPlanState:
     def resource_type(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
         The resource type to which the `BackupPlan` will be applied.
-        Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", and "storage.googleapis.com/Bucket".
+        Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", "sqladmin.googleapis.com/Instance" and "storage.googleapis.com/Bucket".
         """
         return pulumi.get(self, "resource_type")
 
@@ -356,6 +388,7 @@ class BackupPlan(pulumi.CustomResource):
                  backup_vault: Optional[pulumi.Input[_builtins.str]] = None,
                  description: Optional[pulumi.Input[_builtins.str]] = None,
                  location: Optional[pulumi.Input[_builtins.str]] = None,
+                 log_retention_days: Optional[pulumi.Input[_builtins.int]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
                  resource_type: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
@@ -428,6 +461,36 @@ class BackupPlan(pulumi.CustomResource):
                 },
             }])
         ```
+        ### Backup Dr Backup Plan For Csql Resource
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        my_backup_vault = gcp.backupdisasterrecovery.BackupVault("my_backup_vault",
+            location="us-central1",
+            backup_vault_id="backup-vault-csql-test",
+            backup_minimum_enforced_retention_duration="100000s")
+        my_csql_backup_plan_1 = gcp.backupdisasterrecovery.BackupPlan("my-csql-backup-plan-1",
+            location="us-central1",
+            backup_plan_id="backup-plan-csql-test",
+            resource_type="sqladmin.googleapis.com/Instance",
+            backup_vault=my_backup_vault.id,
+            backup_rules=[{
+                "rule_id": "rule-1",
+                "backup_retention_days": 5,
+                "standard_schedule": {
+                    "recurrence_type": "HOURLY",
+                    "hourly_frequency": 6,
+                    "time_zone": "UTC",
+                    "backup_window": {
+                        "start_hour_of_day": 0,
+                        "end_hour_of_day": 6,
+                    },
+                },
+            }],
+            log_retention_days=4)
+        ```
 
         ## Import
 
@@ -461,10 +524,11 @@ class BackupPlan(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] backup_vault: Backup vault where the backups gets stored using this Backup plan.
         :param pulumi.Input[_builtins.str] description: The description allows for additional details about `BackupPlan` and its use cases to be provided.
         :param pulumi.Input[_builtins.str] location: The location for the backup plan
+        :param pulumi.Input[_builtins.int] log_retention_days: This is only applicable for CloudSql resource. Days for which logs will be stored. This value should be greater than or equal to minimum enforced log retention duration of the backup vault.
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[_builtins.str] resource_type: The resource type to which the `BackupPlan` will be applied.
-               Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", and "storage.googleapis.com/Bucket".
+               Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", "sqladmin.googleapis.com/Instance" and "storage.googleapis.com/Bucket".
         """
         ...
     @overload
@@ -541,6 +605,36 @@ class BackupPlan(pulumi.CustomResource):
                 },
             }])
         ```
+        ### Backup Dr Backup Plan For Csql Resource
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        my_backup_vault = gcp.backupdisasterrecovery.BackupVault("my_backup_vault",
+            location="us-central1",
+            backup_vault_id="backup-vault-csql-test",
+            backup_minimum_enforced_retention_duration="100000s")
+        my_csql_backup_plan_1 = gcp.backupdisasterrecovery.BackupPlan("my-csql-backup-plan-1",
+            location="us-central1",
+            backup_plan_id="backup-plan-csql-test",
+            resource_type="sqladmin.googleapis.com/Instance",
+            backup_vault=my_backup_vault.id,
+            backup_rules=[{
+                "rule_id": "rule-1",
+                "backup_retention_days": 5,
+                "standard_schedule": {
+                    "recurrence_type": "HOURLY",
+                    "hourly_frequency": 6,
+                    "time_zone": "UTC",
+                    "backup_window": {
+                        "start_hour_of_day": 0,
+                        "end_hour_of_day": 6,
+                    },
+                },
+            }],
+            log_retention_days=4)
+        ```
 
         ## Import
 
@@ -586,6 +680,7 @@ class BackupPlan(pulumi.CustomResource):
                  backup_vault: Optional[pulumi.Input[_builtins.str]] = None,
                  description: Optional[pulumi.Input[_builtins.str]] = None,
                  location: Optional[pulumi.Input[_builtins.str]] = None,
+                 log_retention_days: Optional[pulumi.Input[_builtins.int]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
                  resource_type: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
@@ -610,6 +705,7 @@ class BackupPlan(pulumi.CustomResource):
             if location is None and not opts.urn:
                 raise TypeError("Missing required property 'location'")
             __props__.__dict__["location"] = location
+            __props__.__dict__["log_retention_days"] = log_retention_days
             __props__.__dict__["project"] = project
             if resource_type is None and not opts.urn:
                 raise TypeError("Missing required property 'resource_type'")
@@ -636,6 +732,7 @@ class BackupPlan(pulumi.CustomResource):
             create_time: Optional[pulumi.Input[_builtins.str]] = None,
             description: Optional[pulumi.Input[_builtins.str]] = None,
             location: Optional[pulumi.Input[_builtins.str]] = None,
+            log_retention_days: Optional[pulumi.Input[_builtins.int]] = None,
             name: Optional[pulumi.Input[_builtins.str]] = None,
             project: Optional[pulumi.Input[_builtins.str]] = None,
             resource_type: Optional[pulumi.Input[_builtins.str]] = None,
@@ -656,11 +753,12 @@ class BackupPlan(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] create_time: When the `BackupPlan` was created.
         :param pulumi.Input[_builtins.str] description: The description allows for additional details about `BackupPlan` and its use cases to be provided.
         :param pulumi.Input[_builtins.str] location: The location for the backup plan
+        :param pulumi.Input[_builtins.int] log_retention_days: This is only applicable for CloudSql resource. Days for which logs will be stored. This value should be greater than or equal to minimum enforced log retention duration of the backup vault.
         :param pulumi.Input[_builtins.str] name: The name of backup plan resource created
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[_builtins.str] resource_type: The resource type to which the `BackupPlan` will be applied.
-               Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", and "storage.googleapis.com/Bucket".
+               Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", "sqladmin.googleapis.com/Instance" and "storage.googleapis.com/Bucket".
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] supported_resource_types: The list of all resource types to which the 'BackupPlan' can be applied.
         :param pulumi.Input[_builtins.str] update_time: When the `BackupPlan` was last updated.
         """
@@ -675,6 +773,7 @@ class BackupPlan(pulumi.CustomResource):
         __props__.__dict__["create_time"] = create_time
         __props__.__dict__["description"] = description
         __props__.__dict__["location"] = location
+        __props__.__dict__["log_retention_days"] = log_retention_days
         __props__.__dict__["name"] = name
         __props__.__dict__["project"] = project
         __props__.__dict__["resource_type"] = resource_type
@@ -739,6 +838,14 @@ class BackupPlan(pulumi.CustomResource):
         """
         return pulumi.get(self, "location")
 
+    @_builtins.property
+    @pulumi.getter(name="logRetentionDays")
+    def log_retention_days(self) -> pulumi.Output[Optional[_builtins.int]]:
+        """
+        This is only applicable for CloudSql resource. Days for which logs will be stored. This value should be greater than or equal to minimum enforced log retention duration of the backup vault.
+        """
+        return pulumi.get(self, "log_retention_days")
+
     @_builtins.property
     @pulumi.getter
     def name(self) -> pulumi.Output[_builtins.str]:
@@ -761,7 +868,7 @@ class BackupPlan(pulumi.CustomResource):
     def resource_type(self) -> pulumi.Output[_builtins.str]:
         """
         The resource type to which the `BackupPlan` will be applied.
-        Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", and "storage.googleapis.com/Bucket".
+        Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", "sqladmin.googleapis.com/Instance" and "storage.googleapis.com/Bucket".
         """
         return pulumi.get(self, "resource_type")
 

pulumi_gcp/backupdisasterrecovery/get_backup_plan.py

@@ -27,7 +27,7 @@ class GetBackupPlanResult:
     """
     A collection of values returned by getBackupPlan.
     """
-    def __init__(__self__, backup_plan_id=None, backup_rules=None, backup_vault=None, backup_vault_service_account=None, create_time=None, description=None, id=None, location=None, name=None, project=None, resource_type=None, supported_resource_types=None, update_time=None):
+    def __init__(__self__, backup_plan_id=None, backup_rules=None, backup_vault=None, backup_vault_service_account=None, create_time=None, description=None, id=None, location=None, log_retention_days=None, name=None, project=None, resource_type=None, supported_resource_types=None, update_time=None):
         if backup_plan_id and not isinstance(backup_plan_id, str):
             raise TypeError("Expected argument 'backup_plan_id' to be a str")
         pulumi.set(__self__, "backup_plan_id", backup_plan_id)
@@ -52,6 +52,9 @@ class GetBackupPlanResult:
         if location and not isinstance(location, str):
             raise TypeError("Expected argument 'location' to be a str")
         pulumi.set(__self__, "location", location)
+        if log_retention_days and not isinstance(log_retention_days, int):
+            raise TypeError("Expected argument 'log_retention_days' to be a int")
+        pulumi.set(__self__, "log_retention_days", log_retention_days)
         if name and not isinstance(name, str):
             raise TypeError("Expected argument 'name' to be a str")
         pulumi.set(__self__, "name", name)
@@ -111,6 +114,11 @@ class GetBackupPlanResult:
     def location(self) -> _builtins.str:
         return pulumi.get(self, "location")
 
+    @_builtins.property
+    @pulumi.getter(name="logRetentionDays")
+    def log_retention_days(self) -> _builtins.int:
+        return pulumi.get(self, "log_retention_days")
+
     @_builtins.property
     @pulumi.getter
     def name(self) -> _builtins.str:
@@ -151,6 +159,7 @@ class AwaitableGetBackupPlanResult(GetBackupPlanResult):
             description=self.description,
             id=self.id,
             location=self.location,
+            log_retention_days=self.log_retention_days,
             name=self.name,
             project=self.project,
             resource_type=self.resource_type,
@@ -181,6 +190,7 @@ def get_backup_plan(backup_plan_id: Optional[_builtins.str] = None,
         description=pulumi.get(__ret__, 'description'),
         id=pulumi.get(__ret__, 'id'),
         location=pulumi.get(__ret__, 'location'),
+        log_retention_days=pulumi.get(__ret__, 'log_retention_days'),
         name=pulumi.get(__ret__, 'name'),
         project=pulumi.get(__ret__, 'project'),
         resource_type=pulumi.get(__ret__, 'resource_type'),
@@ -208,6 +218,7 @@ def get_backup_plan_output(backup_plan_id: Optional[pulumi.Input[_builtins.str]]
         description=pulumi.get(__response__, 'description'),
         id=pulumi.get(__response__, 'id'),
         location=pulumi.get(__response__, 'location'),
+        log_retention_days=pulumi.get(__response__, 'log_retention_days'),
         name=pulumi.get(__response__, 'name'),
         project=pulumi.get(__response__, 'project'),
         resource_type=pulumi.get(__response__, 'resource_type'),

pulumi_gcp/beyondcorp/application_iam_binding.py

@@ -308,6 +308,8 @@ class ApplicationIamBinding(pulumi.CustomResource):
                  security_gateways_id: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
         """
+        > **Warning:** `beyondcorp.Application` and associated IAM resources are deprecated. Use `beyondcorp.SecurityGatewayApplication` instead.
+
         Three different resources help you manage your IAM policy for BeyondCorp Application. Each of these resources serves a different use case:
 
         * `beyondcorp.ApplicationIamPolicy`: Authoritative. Sets the IAM policy for the application and replaces any existing policy already attached.
@@ -432,6 +434,8 @@ class ApplicationIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for BeyondCorp Application
+        > **Warning:** `beyondcorp.Application` and associated IAM resources are deprecated. Use `beyondcorp.SecurityGatewayApplication` instead.
+
         Three different resources help you manage your IAM policy for BeyondCorp Application. Each of these resources serves a different use case:
 
         * `beyondcorp.ApplicationIamPolicy`: Authoritative. Sets the IAM policy for the application and replaces any existing policy already attached.
@@ -619,6 +623,8 @@ class ApplicationIamBinding(pulumi.CustomResource):
                  args: ApplicationIamBindingArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        > **Warning:** `beyondcorp.Application` and associated IAM resources are deprecated. Use `beyondcorp.SecurityGatewayApplication` instead.
+
         Three different resources help you manage your IAM policy for BeyondCorp Application. Each of these resources serves a different use case:
 
         * `beyondcorp.ApplicationIamPolicy`: Authoritative. Sets the IAM policy for the application and replaces any existing policy already attached.
@@ -743,6 +749,8 @@ class ApplicationIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for BeyondCorp Application
+        > **Warning:** `beyondcorp.Application` and associated IAM resources are deprecated. Use `beyondcorp.SecurityGatewayApplication` instead.
+
         Three different resources help you manage your IAM policy for BeyondCorp Application. Each of these resources serves a different use case:
 
         * `beyondcorp.ApplicationIamPolicy`: Authoritative. Sets the IAM policy for the application and replaces any existing policy already attached.

pulumi_gcp/beyondcorp/application_iam_member.py

@@ -308,6 +308,8 @@ class ApplicationIamMember(pulumi.CustomResource):
                  security_gateways_id: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
         """
+        > **Warning:** `beyondcorp.Application` and associated IAM resources are deprecated. Use `beyondcorp.SecurityGatewayApplication` instead.
+
         Three different resources help you manage your IAM policy for BeyondCorp Application. Each of these resources serves a different use case:
 
         * `beyondcorp.ApplicationIamPolicy`: Authoritative. Sets the IAM policy for the application and replaces any existing policy already attached.
@@ -432,6 +434,8 @@ class ApplicationIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for BeyondCorp Application
+        > **Warning:** `beyondcorp.Application` and associated IAM resources are deprecated. Use `beyondcorp.SecurityGatewayApplication` instead.
+
         Three different resources help you manage your IAM policy for BeyondCorp Application. Each of these resources serves a different use case:
 
         * `beyondcorp.ApplicationIamPolicy`: Authoritative. Sets the IAM policy for the application and replaces any existing policy already attached.
@@ -619,6 +623,8 @@ class ApplicationIamMember(pulumi.CustomResource):
                  args: ApplicationIamMemberArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        > **Warning:** `beyondcorp.Application` and associated IAM resources are deprecated. Use `beyondcorp.SecurityGatewayApplication` instead.
+
         Three different resources help you manage your IAM policy for BeyondCorp Application. Each of these resources serves a different use case:
 
         * `beyondcorp.ApplicationIamPolicy`: Authoritative. Sets the IAM policy for the application and replaces any existing policy already attached.
@@ -743,6 +749,8 @@ class ApplicationIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for BeyondCorp Application
+        > **Warning:** `beyondcorp.Application` and associated IAM resources are deprecated. Use `beyondcorp.SecurityGatewayApplication` instead.
+
         Three different resources help you manage your IAM policy for BeyondCorp Application. Each of these resources serves a different use case:
 
         * `beyondcorp.ApplicationIamPolicy`: Authoritative. Sets the IAM policy for the application and replaces any existing policy already attached.

pulumi_gcp/beyondcorp/application_iam_policy.py

@@ -193,6 +193,8 @@ class ApplicationIamPolicy(pulumi.CustomResource):
                  security_gateways_id: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
         """
+        > **Warning:** `beyondcorp.Application` and associated IAM resources are deprecated. Use `beyondcorp.SecurityGatewayApplication` instead.
+
         Three different resources help you manage your IAM policy for BeyondCorp Application. Each of these resources serves a different use case:
 
         * `beyondcorp.ApplicationIamPolicy`: Authoritative. Sets the IAM policy for the application and replaces any existing policy already attached.
@@ -317,6 +319,8 @@ class ApplicationIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for BeyondCorp Application
+        > **Warning:** `beyondcorp.Application` and associated IAM resources are deprecated. Use `beyondcorp.SecurityGatewayApplication` instead.
+
         Three different resources help you manage your IAM policy for BeyondCorp Application. Each of these resources serves a different use case:
 
         * `beyondcorp.ApplicationIamPolicy`: Authoritative. Sets the IAM policy for the application and replaces any existing policy already attached.
@@ -490,6 +494,8 @@ class ApplicationIamPolicy(pulumi.CustomResource):
                  args: ApplicationIamPolicyArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        > **Warning:** `beyondcorp.Application` and associated IAM resources are deprecated. Use `beyondcorp.SecurityGatewayApplication` instead.
+
         Three different resources help you manage your IAM policy for BeyondCorp Application. Each of these resources serves a different use case:
 
         * `beyondcorp.ApplicationIamPolicy`: Authoritative. Sets the IAM policy for the application and replaces any existing policy already attached.
@@ -614,6 +620,8 @@ class ApplicationIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for BeyondCorp Application
+        > **Warning:** `beyondcorp.Application` and associated IAM resources are deprecated. Use `beyondcorp.SecurityGatewayApplication` instead.
+
         Three different resources help you manage your IAM policy for BeyondCorp Application. Each of these resources serves a different use case:
 
         * `beyondcorp.ApplicationIamPolicy`: Authoritative. Sets the IAM policy for the application and replaces any existing policy already attached.

pulumi_gcp/beyondcorp/get_application_iam_policy.py

@@ -106,6 +106,8 @@ def get_application_iam_policy(application_id: Optional[_builtins.str] = None,
                                security_gateways_id: Optional[_builtins.str] = None,
                                opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetApplicationIamPolicyResult:
     """
+    > **Warning:** `beyondcorp.Application` and associated IAM resources are deprecated. Use `beyondcorp.SecurityGatewayApplication` instead.
+
     Retrieves the current IAM policy data for application
 
     ## Example Usage
@@ -144,6 +146,8 @@ def get_application_iam_policy_output(application_id: Optional[pulumi.Input[_bui
                                       security_gateways_id: Optional[pulumi.Input[_builtins.str]] = None,
                                       opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetApplicationIamPolicyResult]:
     """
+    > **Warning:** `beyondcorp.Application` and associated IAM resources are deprecated. Use `beyondcorp.SecurityGatewayApplication` instead.
+
     Retrieves the current IAM policy data for application
 
     ## Example Usage

pulumi_gcp/beyondcorp/security_gateway_application_iam_binding.py

@@ -432,6 +432,7 @@ class SecurityGatewayApplicationIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for BeyondCorp SecurityGatewayApplication
+
         Three different resources help you manage your IAM policy for BeyondCorp SecurityGatewayApplication. Each of these resources serves a different use case:
 
         * `beyondcorp.SecurityGatewayApplicationIamPolicy`: Authoritative. Sets the IAM policy for the securitygatewayapplication and replaces any existing policy already attached.
@@ -743,6 +744,7 @@ class SecurityGatewayApplicationIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for BeyondCorp SecurityGatewayApplication
+
         Three different resources help you manage your IAM policy for BeyondCorp SecurityGatewayApplication. Each of these resources serves a different use case:
 
         * `beyondcorp.SecurityGatewayApplicationIamPolicy`: Authoritative. Sets the IAM policy for the securitygatewayapplication and replaces any existing policy already attached.

pulumi_gcp/beyondcorp/security_gateway_application_iam_member.py

@@ -432,6 +432,7 @@ class SecurityGatewayApplicationIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for BeyondCorp SecurityGatewayApplication
+
         Three different resources help you manage your IAM policy for BeyondCorp SecurityGatewayApplication. Each of these resources serves a different use case:
 
         * `beyondcorp.SecurityGatewayApplicationIamPolicy`: Authoritative. Sets the IAM policy for the securitygatewayapplication and replaces any existing policy already attached.
@@ -743,6 +744,7 @@ class SecurityGatewayApplicationIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for BeyondCorp SecurityGatewayApplication
+
         Three different resources help you manage your IAM policy for BeyondCorp SecurityGatewayApplication. Each of these resources serves a different use case:
 
         * `beyondcorp.SecurityGatewayApplicationIamPolicy`: Authoritative. Sets the IAM policy for the securitygatewayapplication and replaces any existing policy already attached.

pulumi_gcp/beyondcorp/security_gateway_application_iam_policy.py

@@ -317,6 +317,7 @@ class SecurityGatewayApplicationIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for BeyondCorp SecurityGatewayApplication
+
         Three different resources help you manage your IAM policy for BeyondCorp SecurityGatewayApplication. Each of these resources serves a different use case:
 
         * `beyondcorp.SecurityGatewayApplicationIamPolicy`: Authoritative. Sets the IAM policy for the securitygatewayapplication and replaces any existing policy already attached.
@@ -614,6 +615,7 @@ class SecurityGatewayApplicationIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for BeyondCorp SecurityGatewayApplication
+
         Three different resources help you manage your IAM policy for BeyondCorp SecurityGatewayApplication. Each of these resources serves a different use case:
 
         * `beyondcorp.SecurityGatewayApplicationIamPolicy`: Authoritative. Sets the IAM policy for the securitygatewayapplication and replaces any existing policy already attached.

pulumi_gcp/beyondcorp/security_gateway_iam_binding.py

@@ -441,6 +441,7 @@ class SecurityGatewayIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for BeyondCorp SecurityGateway
+
         Three different resources help you manage your IAM policy for BeyondCorp SecurityGateway. Each of these resources serves a different use case:
 
         * `beyondcorp.SecurityGatewayIamPolicy`: Authoritative. Sets the IAM policy for the securitygateway and replaces any existing policy already attached.
@@ -754,6 +755,7 @@ class SecurityGatewayIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for BeyondCorp SecurityGateway
+
         Three different resources help you manage your IAM policy for BeyondCorp SecurityGateway. Each of these resources serves a different use case:
 
         * `beyondcorp.SecurityGatewayIamPolicy`: Authoritative. Sets the IAM policy for the securitygateway and replaces any existing policy already attached.

pulumi_gcp/beyondcorp/security_gateway_iam_member.py

@@ -441,6 +441,7 @@ class SecurityGatewayIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for BeyondCorp SecurityGateway
+
         Three different resources help you manage your IAM policy for BeyondCorp SecurityGateway. Each of these resources serves a different use case:
 
         * `beyondcorp.SecurityGatewayIamPolicy`: Authoritative. Sets the IAM policy for the securitygateway and replaces any existing policy already attached.
@@ -754,6 +755,7 @@ class SecurityGatewayIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for BeyondCorp SecurityGateway
+
         Three different resources help you manage your IAM policy for BeyondCorp SecurityGateway. Each of these resources serves a different use case:
 
         * `beyondcorp.SecurityGatewayIamPolicy`: Authoritative. Sets the IAM policy for the securitygateway and replaces any existing policy already attached.

pulumi_gcp/beyondcorp/security_gateway_iam_policy.py

@@ -326,6 +326,7 @@ class SecurityGatewayIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for BeyondCorp SecurityGateway
+
         Three different resources help you manage your IAM policy for BeyondCorp SecurityGateway. Each of these resources serves a different use case:
 
         * `beyondcorp.SecurityGatewayIamPolicy`: Authoritative. Sets the IAM policy for the securitygateway and replaces any existing policy already attached.
@@ -625,6 +626,7 @@ class SecurityGatewayIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for BeyondCorp SecurityGateway
+
         Three different resources help you manage your IAM policy for BeyondCorp SecurityGateway. Each of these resources serves a different use case:
 
         * `beyondcorp.SecurityGatewayIamPolicy`: Authoritative. Sets the IAM policy for the securitygateway and replaces any existing policy already attached.

pulumi_gcp/bigquery/connection_iam_binding.py

@@ -393,6 +393,7 @@ class ConnectionIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for BigQuery Connection Connection
+
         Three different resources help you manage your IAM policy for BigQuery Connection Connection. Each of these resources serves a different use case:
 
         * `bigquery.ConnectionIamPolicy`: Authoritative. Sets the IAM policy for the connection and replaces any existing policy already attached.
@@ -590,6 +591,7 @@ class ConnectionIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for BigQuery Connection Connection
+
         Three different resources help you manage your IAM policy for BigQuery Connection Connection. Each of these resources serves a different use case:
 
         * `bigquery.ConnectionIamPolicy`: Authoritative. Sets the IAM policy for the connection and replaces any existing policy already attached.

pulumi_gcp/bigquery/connection_iam_member.py

@@ -393,6 +393,7 @@ class ConnectionIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for BigQuery Connection Connection
+
         Three different resources help you manage your IAM policy for BigQuery Connection Connection. Each of these resources serves a different use case:
 
         * `bigquery.ConnectionIamPolicy`: Authoritative. Sets the IAM policy for the connection and replaces any existing policy already attached.
@@ -590,6 +591,7 @@ class ConnectionIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for BigQuery Connection Connection
+
         Three different resources help you manage your IAM policy for BigQuery Connection Connection. Each of these resources serves a different use case:
 
         * `bigquery.ConnectionIamPolicy`: Authoritative. Sets the IAM policy for the connection and replaces any existing policy already attached.

pulumi_gcp/bigquery/connection_iam_policy.py

@@ -290,6 +290,7 @@ class ConnectionIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for BigQuery Connection Connection
+
         Three different resources help you manage your IAM policy for BigQuery Connection Connection. Each of these resources serves a different use case:
 
         * `bigquery.ConnectionIamPolicy`: Authoritative. Sets the IAM policy for the connection and replaces any existing policy already attached.
@@ -475,6 +476,7 @@ class ConnectionIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for BigQuery Connection Connection
+
         Three different resources help you manage your IAM policy for BigQuery Connection Connection. Each of these resources serves a different use case:
 
         * `bigquery.ConnectionIamPolicy`: Authoritative. Sets the IAM policy for the connection and replaces any existing policy already attached.

pulumi_gcp/bigquery/data_transfer_config.py

@@ -795,6 +795,7 @@ class DataTransferConfig(pulumi.CustomResource):
         * `secret_access_key_wo` -
           (Optional)
           The Secret Access Key of the AWS account transferring data from.
+           Note: This property is write-only and will not be read from the API. For more info see [updating write-only attributes](https://www.terraform.io/docs/providers/google/guides/using_write_only_attributes.html#updating-write-only-attributes)
           **Note**: This property is write-only and will not be read from the API.
 
         ## Import
@@ -993,6 +994,7 @@ class DataTransferConfig(pulumi.CustomResource):
         * `secret_access_key_wo` -
           (Optional)
           The Secret Access Key of the AWS account transferring data from.
+           Note: This property is write-only and will not be read from the API. For more info see [updating write-only attributes](https://www.terraform.io/docs/providers/google/guides/using_write_only_attributes.html#updating-write-only-attributes)
           **Note**: This property is write-only and will not be read from the API.
 
         ## Import

pulumi_gcp/bigquery/dataset.py

@@ -1005,7 +1005,7 @@ class Dataset(pulumi.CustomResource):
             },
             accesses=[
                 {
-                    "role": "OWNER",
+                    "role": "roles/bigquery.dataOwner",
                     "user_by_email": bqowner.email,
                 },
                 {
@@ -1308,7 +1308,7 @@ class Dataset(pulumi.CustomResource):
             },
             accesses=[
                 {
-                    "role": "OWNER",
+                    "role": "roles/bigquery.dataOwner",
                     "user_by_email": bqowner.email,
                 },
                 {