pulumi-gcp 8.42.0a1758133038__py3-none-any.whl → 9.0.0__py3-none-any.whl

pulumi_gcp/gkehub/membership.py

@@ -23,7 +23,6 @@ class MembershipArgs:
     def __init__(__self__, *,
                  membership_id: pulumi.Input[_builtins.str],
                  authority: Optional[pulumi.Input['MembershipAuthorityArgs']] = None,
-                 description: Optional[pulumi.Input[_builtins.str]] = None,
                  endpoint: Optional[pulumi.Input['MembershipEndpointArgs']] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
                  location: Optional[pulumi.Input[_builtins.str]] = None,
@@ -35,9 +34,6 @@ class MembershipArgs:
                See the workload identity documentation for more details:
                https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity
                Structure is documented below.
-        :param pulumi.Input[_builtins.str] description: The name of this entity type to be displayed on the console. This field is unavailable in v1 of the API.
-               
-               > **Warning:** `description` is deprecated and will be removed in a future major release.
         :param pulumi.Input['MembershipEndpointArgs'] endpoint: If this Membership is a Kubernetes API server hosted on GKE, this is a self link to its GCP resource.
                Structure is documented below.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] labels: Labels to apply to this membership.
@@ -52,11 +48,6 @@ class MembershipArgs:
         pulumi.set(__self__, "membership_id", membership_id)
         if authority is not None:
             pulumi.set(__self__, "authority", authority)
-        if description is not None:
-            warnings.warn("""`description` is deprecated and will be removed in a future major release.""", DeprecationWarning)
-            pulumi.log.warn("""description is deprecated: `description` is deprecated and will be removed in a future major release.""")
-        if description is not None:
-            pulumi.set(__self__, "description", description)
         if endpoint is not None:
             pulumi.set(__self__, "endpoint", endpoint)
         if labels is not None:
@@ -93,21 +84,6 @@ class MembershipArgs:
     def authority(self, value: Optional[pulumi.Input['MembershipAuthorityArgs']]):
         pulumi.set(self, "authority", value)
 
-    @_builtins.property
-    @pulumi.getter
-    @_utilities.deprecated("""`description` is deprecated and will be removed in a future major release.""")
-    def description(self) -> Optional[pulumi.Input[_builtins.str]]:
-        """
-        The name of this entity type to be displayed on the console. This field is unavailable in v1 of the API.
-
-        > **Warning:** `description` is deprecated and will be removed in a future major release.
-        """
-        return pulumi.get(self, "description")
-
-    @description.setter
-    def description(self, value: Optional[pulumi.Input[_builtins.str]]):
-        pulumi.set(self, "description", value)
-
     @_builtins.property
     @pulumi.getter
     def endpoint(self) -> Optional[pulumi.Input['MembershipEndpointArgs']]:
@@ -167,7 +143,6 @@ class MembershipArgs:
 class _MembershipState:
     def __init__(__self__, *,
                  authority: Optional[pulumi.Input['MembershipAuthorityArgs']] = None,
-                 description: Optional[pulumi.Input[_builtins.str]] = None,
                  effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
                  endpoint: Optional[pulumi.Input['MembershipEndpointArgs']] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
@@ -182,9 +157,6 @@ class _MembershipState:
                See the workload identity documentation for more details:
                https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity
                Structure is documented below.
-        :param pulumi.Input[_builtins.str] description: The name of this entity type to be displayed on the console. This field is unavailable in v1 of the API.
-               
-               > **Warning:** `description` is deprecated and will be removed in a future major release.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
         :param pulumi.Input['MembershipEndpointArgs'] endpoint: If this Membership is a Kubernetes API server hosted on GKE, this is a self link to its GCP resource.
                Structure is documented below.
@@ -203,11 +175,6 @@ class _MembershipState:
         """
         if authority is not None:
             pulumi.set(__self__, "authority", authority)
-        if description is not None:
-            warnings.warn("""`description` is deprecated and will be removed in a future major release.""", DeprecationWarning)
-            pulumi.log.warn("""description is deprecated: `description` is deprecated and will be removed in a future major release.""")
-        if description is not None:
-            pulumi.set(__self__, "description", description)
         if effective_labels is not None:
             pulumi.set(__self__, "effective_labels", effective_labels)
         if endpoint is not None:
@@ -240,21 +207,6 @@ class _MembershipState:
     def authority(self, value: Optional[pulumi.Input['MembershipAuthorityArgs']]):
         pulumi.set(self, "authority", value)
 
-    @_builtins.property
-    @pulumi.getter
-    @_utilities.deprecated("""`description` is deprecated and will be removed in a future major release.""")
-    def description(self) -> Optional[pulumi.Input[_builtins.str]]:
-        """
-        The name of this entity type to be displayed on the console. This field is unavailable in v1 of the API.
-
-        > **Warning:** `description` is deprecated and will be removed in a future major release.
-        """
-        return pulumi.get(self, "description")
-
-    @description.setter
-    def description(self, value: Optional[pulumi.Input[_builtins.str]]):
-        pulumi.set(self, "description", value)
-
     @_builtins.property
     @pulumi.getter(name="effectiveLabels")
     def effective_labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]:
@@ -366,7 +318,6 @@ class Membership(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  authority: Optional[pulumi.Input[Union['MembershipAuthorityArgs', 'MembershipAuthorityArgsDict']]] = None,
-                 description: Optional[pulumi.Input[_builtins.str]] = None,
                  endpoint: Optional[pulumi.Input[Union['MembershipEndpointArgs', 'MembershipEndpointArgsDict']]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
                  location: Optional[pulumi.Input[_builtins.str]] = None,
@@ -488,9 +439,6 @@ class Membership(pulumi.CustomResource):
                See the workload identity documentation for more details:
                https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity
                Structure is documented below.
-        :param pulumi.Input[_builtins.str] description: The name of this entity type to be displayed on the console. This field is unavailable in v1 of the API.
-               
-               > **Warning:** `description` is deprecated and will be removed in a future major release.
         :param pulumi.Input[Union['MembershipEndpointArgs', 'MembershipEndpointArgsDict']] endpoint: If this Membership is a Kubernetes API server hosted on GKE, this is a self link to its GCP resource.
                Structure is documented below.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] labels: Labels to apply to this membership.
@@ -634,7 +582,6 @@ class Membership(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  authority: Optional[pulumi.Input[Union['MembershipAuthorityArgs', 'MembershipAuthorityArgsDict']]] = None,
-                 description: Optional[pulumi.Input[_builtins.str]] = None,
                  endpoint: Optional[pulumi.Input[Union['MembershipEndpointArgs', 'MembershipEndpointArgsDict']]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
                  location: Optional[pulumi.Input[_builtins.str]] = None,
@@ -650,7 +597,6 @@ class Membership(pulumi.CustomResource):
             __props__ = MembershipArgs.__new__(MembershipArgs)
 
             __props__.__dict__["authority"] = authority
-            __props__.__dict__["description"] = description
             __props__.__dict__["endpoint"] = endpoint
             __props__.__dict__["labels"] = labels
             __props__.__dict__["location"] = location
@@ -674,7 +620,6 @@ class Membership(pulumi.CustomResource):
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
             authority: Optional[pulumi.Input[Union['MembershipAuthorityArgs', 'MembershipAuthorityArgsDict']]] = None,
-            description: Optional[pulumi.Input[_builtins.str]] = None,
             effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
             endpoint: Optional[pulumi.Input[Union['MembershipEndpointArgs', 'MembershipEndpointArgsDict']]] = None,
             labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
@@ -694,9 +639,6 @@ class Membership(pulumi.CustomResource):
                See the workload identity documentation for more details:
                https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity
                Structure is documented below.
-        :param pulumi.Input[_builtins.str] description: The name of this entity type to be displayed on the console. This field is unavailable in v1 of the API.
-               
-               > **Warning:** `description` is deprecated and will be removed in a future major release.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
         :param pulumi.Input[Union['MembershipEndpointArgs', 'MembershipEndpointArgsDict']] endpoint: If this Membership is a Kubernetes API server hosted on GKE, this is a self link to its GCP resource.
                Structure is documented below.
@@ -718,7 +660,6 @@ class Membership(pulumi.CustomResource):
         __props__ = _MembershipState.__new__(_MembershipState)
 
         __props__.__dict__["authority"] = authority
-        __props__.__dict__["description"] = description
         __props__.__dict__["effective_labels"] = effective_labels
         __props__.__dict__["endpoint"] = endpoint
         __props__.__dict__["labels"] = labels
@@ -740,17 +681,6 @@ class Membership(pulumi.CustomResource):
         """
         return pulumi.get(self, "authority")
 
-    @_builtins.property
-    @pulumi.getter
-    @_utilities.deprecated("""`description` is deprecated and will be removed in a future major release.""")
-    def description(self) -> pulumi.Output[Optional[_builtins.str]]:
-        """
-        The name of this entity type to be displayed on the console. This field is unavailable in v1 of the API.
-
-        > **Warning:** `description` is deprecated and will be removed in a future major release.
-        """
-        return pulumi.get(self, "description")
-
     @_builtins.property
     @pulumi.getter(name="effectiveLabels")
     def effective_labels(self) -> pulumi.Output[Mapping[str, _builtins.str]]:

pulumi_gcp/gkehub/membership_rbac_role_binding.py

@@ -353,6 +353,14 @@ class MembershipRbacRoleBinding(pulumi.CustomResource):
                  user: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
         """
+        RBACRoleBinding represents a rbacrolebinding across the Fleet.
+
+        To get more information about MembershipRBACRoleBinding, see:
+
+        * [API documentation](https://cloud.google.com/anthos/fleet-management/docs/reference/rest/v1/projects.locations.memberships)
+        * How-to Guides
+            * [Registering a Cluster](https://cloud.google.com/anthos/multicluster-management/connect/registering-a-cluster#register_cluster)
+
         ## Example Usage
 
         ### Gkehub Membership Rbac Role Binding Basic
@@ -433,6 +441,14 @@ class MembershipRbacRoleBinding(pulumi.CustomResource):
                  args: MembershipRbacRoleBindingArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        RBACRoleBinding represents a rbacrolebinding across the Fleet.
+
+        To get more information about MembershipRBACRoleBinding, see:
+
+        * [API documentation](https://cloud.google.com/anthos/fleet-management/docs/reference/rest/v1/projects.locations.memberships)
+        * How-to Guides
+            * [Registering a Cluster](https://cloud.google.com/anthos/multicluster-management/connect/registering-a-cluster#register_cluster)
+
         ## Example Usage
 
         ### Gkehub Membership Rbac Role Binding Basic

pulumi_gcp/gkehub/outputs.py

@@ -36,7 +36,6 @@ __all__ = [
     'FeatureIamBindingCondition',
     'FeatureIamMemberCondition',
     'FeatureMembershipConfigmanagement',
-    'FeatureMembershipConfigmanagementBinauthz',
     'FeatureMembershipConfigmanagementConfigSync',
     'FeatureMembershipConfigmanagementConfigSyncDeploymentOverride',
     'FeatureMembershipConfigmanagementConfigSyncDeploymentOverrideContainer',
@@ -1291,16 +1290,12 @@ class FeatureMembershipConfigmanagement(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 binauthz: Optional['outputs.FeatureMembershipConfigmanagementBinauthz'] = None,
                  config_sync: Optional['outputs.FeatureMembershipConfigmanagementConfigSync'] = None,
                  hierarchy_controller: Optional['outputs.FeatureMembershipConfigmanagementHierarchyController'] = None,
                  management: Optional[_builtins.str] = None,
                  policy_controller: Optional['outputs.FeatureMembershipConfigmanagementPolicyController'] = None,
                  version: Optional[_builtins.str] = None):
         """
-        :param 'FeatureMembershipConfigmanagementBinauthzArgs' binauthz: (Optional, Deprecated)
-               Binauthz configuration for the cluster. Structure is documented below.
-               This field will be ignored and should not be set.
         :param 'FeatureMembershipConfigmanagementConfigSyncArgs' config_sync: Config Sync configuration for the cluster. Structure is documented below.
         :param 'FeatureMembershipConfigmanagementHierarchyControllerArgs' hierarchy_controller: Hierarchy Controller configuration for the cluster. Structure is documented below.
                Configuring Hierarchy Controller through the configmanagement feature is no longer recommended.
@@ -1313,8 +1308,6 @@ class FeatureMembershipConfigmanagement(dict):
                Use the policycontroller feature instead.
         :param _builtins.str version: Version of Config Sync installed.
         """
-        if binauthz is not None:
-            pulumi.set(__self__, "binauthz", binauthz)
         if config_sync is not None:
             pulumi.set(__self__, "config_sync", config_sync)
         if hierarchy_controller is not None:
@@ -1326,16 +1319,6 @@ class FeatureMembershipConfigmanagement(dict):
         if version is not None:
             pulumi.set(__self__, "version", version)
 
-    @_builtins.property
-    @pulumi.getter
-    def binauthz(self) -> Optional['outputs.FeatureMembershipConfigmanagementBinauthz']:
-        """
-        (Optional, Deprecated)
-        Binauthz configuration for the cluster. Structure is documented below.
-        This field will be ignored and should not be set.
-        """
-        return pulumi.get(self, "binauthz")
-
     @_builtins.property
     @pulumi.getter(name="configSync")
     def config_sync(self) -> Optional['outputs.FeatureMembershipConfigmanagementConfigSync']:
@@ -1383,25 +1366,6 @@ class FeatureMembershipConfigmanagement(dict):
         return pulumi.get(self, "version")
 
 
-@pulumi.output_type
-class FeatureMembershipConfigmanagementBinauthz(dict):
-    def __init__(__self__, *,
-                 enabled: Optional[_builtins.bool] = None):
-        """
-        :param _builtins.bool enabled: Whether binauthz is enabled in this cluster.
-        """
-        if enabled is not None:
-            pulumi.set(__self__, "enabled", enabled)
-
-    @_builtins.property
-    @pulumi.getter
-    def enabled(self) -> Optional[_builtins.bool]:
-        """
-        Whether binauthz is enabled in this cluster.
-        """
-        return pulumi.get(self, "enabled")
-
-
 @pulumi.output_type
 class FeatureMembershipConfigmanagementConfigSync(dict):
     @staticmethod

pulumi_gcp/healthcare/_inputs.py

@@ -35,6 +35,12 @@ __all__ = [
     'DicomStoreStreamConfigArgsDict',
     'DicomStoreStreamConfigBigqueryDestinationArgs',
     'DicomStoreStreamConfigBigqueryDestinationArgsDict',
+    'FhirStoreConsentConfigArgs',
+    'FhirStoreConsentConfigArgsDict',
+    'FhirStoreConsentConfigAccessDeterminationLogConfigArgs',
+    'FhirStoreConsentConfigAccessDeterminationLogConfigArgsDict',
+    'FhirStoreConsentConfigConsentHeaderHandlingArgs',
+    'FhirStoreConsentConfigConsentHeaderHandlingArgsDict',
     'FhirStoreIamBindingConditionArgs',
     'FhirStoreIamBindingConditionArgsDict',
     'FhirStoreIamMemberConditionArgs',
@@ -535,6 +541,205 @@ class DicomStoreStreamConfigBigqueryDestinationArgs:
         pulumi.set(self, "table_uri", value)
 
 
+if not MYPY:
+    class FhirStoreConsentConfigArgsDict(TypedDict):
+        version: pulumi.Input[_builtins.str]
+        """
+        Specifies which consent enforcement version is being used for this FHIR store. This field can only be set once by either [fhirStores.create][] or [fhirStores.patch][]. After that, you must call [fhirStores.applyConsents][] to change the version.
+        Possible values are: `CONSENT_ENFORCEMENT_VERSION_UNSPECIFIED`, `V1`.
+        """
+        access_determination_log_config: NotRequired[pulumi.Input['FhirStoreConsentConfigAccessDeterminationLogConfigArgsDict']]
+        """
+        Specifies how the server logs the consent-aware requests. If not specified, the AccessDeterminationLogConfig.LogLevel.MINIMUM option is used.
+        Structure is documented below.
+        """
+        access_enforced: NotRequired[pulumi.Input[_builtins.bool]]
+        """
+        The default value is false. If set to true, when accessing FHIR resources, the consent headers will be verified against consents given by patients. See the ConsentEnforcementVersion for the supported consent headers.
+        """
+        consent_header_handling: NotRequired[pulumi.Input['FhirStoreConsentConfigConsentHeaderHandlingArgsDict']]
+        """
+        Different options to configure the behaviour of the server when handling the X-Consent-Scope header.
+        Structure is documented below.
+        """
+        enforced_admin_consents: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
+        """
+        (Output)
+        The versioned names of the enforced admin Consent resource(s), in the format projects/{projectId}/locations/{location}/datasets/{datasetId}/fhirStores/{fhirStoreId}/fhir/Consent/{resourceId}/_history/{version_id}. For FHIR stores with disableResourceVersioning=true, the format is projects/{projectId}/locations/{location}/datasets/{datasetId}/fhirStores/{fhirStoreId}/fhir/Consent/{resourceId}. This field can only be updated using [fhirStores.applyAdminConsents][].
+        """
+elif False:
+    FhirStoreConsentConfigArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class FhirStoreConsentConfigArgs:
+    def __init__(__self__, *,
+                 version: pulumi.Input[_builtins.str],
+                 access_determination_log_config: Optional[pulumi.Input['FhirStoreConsentConfigAccessDeterminationLogConfigArgs']] = None,
+                 access_enforced: Optional[pulumi.Input[_builtins.bool]] = None,
+                 consent_header_handling: Optional[pulumi.Input['FhirStoreConsentConfigConsentHeaderHandlingArgs']] = None,
+                 enforced_admin_consents: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
+        """
+        :param pulumi.Input[_builtins.str] version: Specifies which consent enforcement version is being used for this FHIR store. This field can only be set once by either [fhirStores.create][] or [fhirStores.patch][]. After that, you must call [fhirStores.applyConsents][] to change the version.
+               Possible values are: `CONSENT_ENFORCEMENT_VERSION_UNSPECIFIED`, `V1`.
+        :param pulumi.Input['FhirStoreConsentConfigAccessDeterminationLogConfigArgs'] access_determination_log_config: Specifies how the server logs the consent-aware requests. If not specified, the AccessDeterminationLogConfig.LogLevel.MINIMUM option is used.
+               Structure is documented below.
+        :param pulumi.Input[_builtins.bool] access_enforced: The default value is false. If set to true, when accessing FHIR resources, the consent headers will be verified against consents given by patients. See the ConsentEnforcementVersion for the supported consent headers.
+        :param pulumi.Input['FhirStoreConsentConfigConsentHeaderHandlingArgs'] consent_header_handling: Different options to configure the behaviour of the server when handling the X-Consent-Scope header.
+               Structure is documented below.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] enforced_admin_consents: (Output)
+               The versioned names of the enforced admin Consent resource(s), in the format projects/{projectId}/locations/{location}/datasets/{datasetId}/fhirStores/{fhirStoreId}/fhir/Consent/{resourceId}/_history/{version_id}. For FHIR stores with disableResourceVersioning=true, the format is projects/{projectId}/locations/{location}/datasets/{datasetId}/fhirStores/{fhirStoreId}/fhir/Consent/{resourceId}. This field can only be updated using [fhirStores.applyAdminConsents][].
+        """
+        pulumi.set(__self__, "version", version)
+        if access_determination_log_config is not None:
+            pulumi.set(__self__, "access_determination_log_config", access_determination_log_config)
+        if access_enforced is not None:
+            pulumi.set(__self__, "access_enforced", access_enforced)
+        if consent_header_handling is not None:
+            pulumi.set(__self__, "consent_header_handling", consent_header_handling)
+        if enforced_admin_consents is not None:
+            pulumi.set(__self__, "enforced_admin_consents", enforced_admin_consents)
+
+    @_builtins.property
+    @pulumi.getter
+    def version(self) -> pulumi.Input[_builtins.str]:
+        """
+        Specifies which consent enforcement version is being used for this FHIR store. This field can only be set once by either [fhirStores.create][] or [fhirStores.patch][]. After that, you must call [fhirStores.applyConsents][] to change the version.
+        Possible values are: `CONSENT_ENFORCEMENT_VERSION_UNSPECIFIED`, `V1`.
+        """
+        return pulumi.get(self, "version")
+
+    @version.setter
+    def version(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "version", value)
+
+    @_builtins.property
+    @pulumi.getter(name="accessDeterminationLogConfig")
+    def access_determination_log_config(self) -> Optional[pulumi.Input['FhirStoreConsentConfigAccessDeterminationLogConfigArgs']]:
+        """
+        Specifies how the server logs the consent-aware requests. If not specified, the AccessDeterminationLogConfig.LogLevel.MINIMUM option is used.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "access_determination_log_config")
+
+    @access_determination_log_config.setter
+    def access_determination_log_config(self, value: Optional[pulumi.Input['FhirStoreConsentConfigAccessDeterminationLogConfigArgs']]):
+        pulumi.set(self, "access_determination_log_config", value)
+
+    @_builtins.property
+    @pulumi.getter(name="accessEnforced")
+    def access_enforced(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        The default value is false. If set to true, when accessing FHIR resources, the consent headers will be verified against consents given by patients. See the ConsentEnforcementVersion for the supported consent headers.
+        """
+        return pulumi.get(self, "access_enforced")
+
+    @access_enforced.setter
+    def access_enforced(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "access_enforced", value)
+
+    @_builtins.property
+    @pulumi.getter(name="consentHeaderHandling")
+    def consent_header_handling(self) -> Optional[pulumi.Input['FhirStoreConsentConfigConsentHeaderHandlingArgs']]:
+        """
+        Different options to configure the behaviour of the server when handling the X-Consent-Scope header.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "consent_header_handling")
+
+    @consent_header_handling.setter
+    def consent_header_handling(self, value: Optional[pulumi.Input['FhirStoreConsentConfigConsentHeaderHandlingArgs']]):
+        pulumi.set(self, "consent_header_handling", value)
+
+    @_builtins.property
+    @pulumi.getter(name="enforcedAdminConsents")
+    def enforced_admin_consents(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        (Output)
+        The versioned names of the enforced admin Consent resource(s), in the format projects/{projectId}/locations/{location}/datasets/{datasetId}/fhirStores/{fhirStoreId}/fhir/Consent/{resourceId}/_history/{version_id}. For FHIR stores with disableResourceVersioning=true, the format is projects/{projectId}/locations/{location}/datasets/{datasetId}/fhirStores/{fhirStoreId}/fhir/Consent/{resourceId}. This field can only be updated using [fhirStores.applyAdminConsents][].
+        """
+        return pulumi.get(self, "enforced_admin_consents")
+
+    @enforced_admin_consents.setter
+    def enforced_admin_consents(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "enforced_admin_consents", value)
+
+
+if not MYPY:
+    class FhirStoreConsentConfigAccessDeterminationLogConfigArgsDict(TypedDict):
+        log_level: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        Controls the amount of detail to include as part of the audit logs.
+        Default value is `MINIMUM`.
+        Possible values are: `LOG_LEVEL_UNSPECIFIED`, `DISABLED`, `MINIMUM`, `VERBOSE`.
+        """
+elif False:
+    FhirStoreConsentConfigAccessDeterminationLogConfigArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class FhirStoreConsentConfigAccessDeterminationLogConfigArgs:
+    def __init__(__self__, *,
+                 log_level: Optional[pulumi.Input[_builtins.str]] = None):
+        """
+        :param pulumi.Input[_builtins.str] log_level: Controls the amount of detail to include as part of the audit logs.
+               Default value is `MINIMUM`.
+               Possible values are: `LOG_LEVEL_UNSPECIFIED`, `DISABLED`, `MINIMUM`, `VERBOSE`.
+        """
+        if log_level is not None:
+            pulumi.set(__self__, "log_level", log_level)
+
+    @_builtins.property
+    @pulumi.getter(name="logLevel")
+    def log_level(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Controls the amount of detail to include as part of the audit logs.
+        Default value is `MINIMUM`.
+        Possible values are: `LOG_LEVEL_UNSPECIFIED`, `DISABLED`, `MINIMUM`, `VERBOSE`.
+        """
+        return pulumi.get(self, "log_level")
+
+    @log_level.setter
+    def log_level(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "log_level", value)
+
+
+if not MYPY:
+    class FhirStoreConsentConfigConsentHeaderHandlingArgsDict(TypedDict):
+        profile: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        Specifies the default server behavior when the header is empty. If not specified, the ScopeProfile.PERMIT_EMPTY_SCOPE option is used.
+        Default value is `PERMIT_EMPTY_SCOPE`.
+        Possible values are: `SCOPE_PROFILE_UNSPECIFIED`, `PERMIT_EMPTY_SCOPE`, `REQUIRED_ON_READ`.
+        """
+elif False:
+    FhirStoreConsentConfigConsentHeaderHandlingArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class FhirStoreConsentConfigConsentHeaderHandlingArgs:
+    def __init__(__self__, *,
+                 profile: Optional[pulumi.Input[_builtins.str]] = None):
+        """
+        :param pulumi.Input[_builtins.str] profile: Specifies the default server behavior when the header is empty. If not specified, the ScopeProfile.PERMIT_EMPTY_SCOPE option is used.
+               Default value is `PERMIT_EMPTY_SCOPE`.
+               Possible values are: `SCOPE_PROFILE_UNSPECIFIED`, `PERMIT_EMPTY_SCOPE`, `REQUIRED_ON_READ`.
+        """
+        if profile is not None:
+            pulumi.set(__self__, "profile", profile)
+
+    @_builtins.property
+    @pulumi.getter
+    def profile(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Specifies the default server behavior when the header is empty. If not specified, the ScopeProfile.PERMIT_EMPTY_SCOPE option is used.
+        Default value is `PERMIT_EMPTY_SCOPE`.
+        Possible values are: `SCOPE_PROFILE_UNSPECIFIED`, `PERMIT_EMPTY_SCOPE`, `REQUIRED_ON_READ`.
+        """
+        return pulumi.get(self, "profile")
+
+    @profile.setter
+    def profile(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "profile", value)
+
+
 if not MYPY:
     class FhirStoreIamBindingConditionArgsDict(TypedDict):
         expression: pulumi.Input[_builtins.str]