pulumi-gcp 8.42.0a1758133038__py3-none-any.whl → 9.0.0__py3-none-any.whl

pulumi_gcp/sql/user.py

@@ -27,6 +27,7 @@ class UserArgs:
                  name: Optional[pulumi.Input[_builtins.str]] = None,
                  password: Optional[pulumi.Input[_builtins.str]] = None,
                  password_policy: Optional[pulumi.Input['UserPasswordPolicyArgs']] = None,
+                 password_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
                  type: Optional[pulumi.Input[_builtins.str]] = None):
         """
@@ -47,6 +48,9 @@ class UserArgs:
                instances this is a Required field, unless type is set to either CLOUD_IAM_USER
                or CLOUD_IAM_SERVICE_ACCOUNT. Don't set this field for CLOUD_IAM_USER
                and CLOUD_IAM_SERVICE_ACCOUNT user types for any Cloud SQL instance.
+        :param pulumi.Input[_builtins.int] password_wo_version: The version of the password_wo. For more info see [updating write-only attributes](https://www.terraform.io/docs/providers/google/guides/using_write_only_attributes.html#updating-write-only-attributes).
+               
+               - - -
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs. If it
                is not provided, the provider project is used.
         :param pulumi.Input[_builtins.str] type: The user type. It determines the method to authenticate the
@@ -67,6 +71,8 @@ class UserArgs:
             pulumi.set(__self__, "password", password)
         if password_policy is not None:
             pulumi.set(__self__, "password_policy", password_policy)
+        if password_wo_version is not None:
+            pulumi.set(__self__, "password_wo_version", password_wo_version)
         if project is not None:
             pulumi.set(__self__, "project", project)
         if type is not None:
@@ -152,6 +158,20 @@ class UserArgs:
     def password_policy(self, value: Optional[pulumi.Input['UserPasswordPolicyArgs']]):
         pulumi.set(self, "password_policy", value)
 
+    @_builtins.property
+    @pulumi.getter(name="passwordWoVersion")
+    def password_wo_version(self) -> Optional[pulumi.Input[_builtins.int]]:
+        """
+        The version of the password_wo. For more info see [updating write-only attributes](https://www.terraform.io/docs/providers/google/guides/using_write_only_attributes.html#updating-write-only-attributes).
+
+        - - -
+        """
+        return pulumi.get(self, "password_wo_version")
+
+    @password_wo_version.setter
+    def password_wo_version(self, value: Optional[pulumi.Input[_builtins.int]]):
+        pulumi.set(self, "password_wo_version", value)
+
     @_builtins.property
     @pulumi.getter
     def project(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -192,6 +212,7 @@ class _UserState:
                  name: Optional[pulumi.Input[_builtins.str]] = None,
                  password: Optional[pulumi.Input[_builtins.str]] = None,
                  password_policy: Optional[pulumi.Input['UserPasswordPolicyArgs']] = None,
+                 password_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
                  sql_server_user_details: Optional[pulumi.Input[Sequence[pulumi.Input['UserSqlServerUserDetailArgs']]]] = None,
                  type: Optional[pulumi.Input[_builtins.str]] = None):
@@ -213,6 +234,9 @@ class _UserState:
                instances this is a Required field, unless type is set to either CLOUD_IAM_USER
                or CLOUD_IAM_SERVICE_ACCOUNT. Don't set this field for CLOUD_IAM_USER
                and CLOUD_IAM_SERVICE_ACCOUNT user types for any Cloud SQL instance.
+        :param pulumi.Input[_builtins.int] password_wo_version: The version of the password_wo. For more info see [updating write-only attributes](https://www.terraform.io/docs/providers/google/guides/using_write_only_attributes.html#updating-write-only-attributes).
+               
+               - - -
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs. If it
                is not provided, the provider project is used.
         :param pulumi.Input[_builtins.str] type: The user type. It determines the method to authenticate the
@@ -234,6 +258,8 @@ class _UserState:
             pulumi.set(__self__, "password", password)
         if password_policy is not None:
             pulumi.set(__self__, "password_policy", password_policy)
+        if password_wo_version is not None:
+            pulumi.set(__self__, "password_wo_version", password_wo_version)
         if project is not None:
             pulumi.set(__self__, "project", project)
         if sql_server_user_details is not None:
@@ -321,6 +347,20 @@ class _UserState:
     def password_policy(self, value: Optional[pulumi.Input['UserPasswordPolicyArgs']]):
         pulumi.set(self, "password_policy", value)
 
+    @_builtins.property
+    @pulumi.getter(name="passwordWoVersion")
+    def password_wo_version(self) -> Optional[pulumi.Input[_builtins.int]]:
+        """
+        The version of the password_wo. For more info see [updating write-only attributes](https://www.terraform.io/docs/providers/google/guides/using_write_only_attributes.html#updating-write-only-attributes).
+
+        - - -
+        """
+        return pulumi.get(self, "password_wo_version")
+
+    @password_wo_version.setter
+    def password_wo_version(self, value: Optional[pulumi.Input[_builtins.int]]):
+        pulumi.set(self, "password_wo_version", value)
+
     @_builtins.property
     @pulumi.getter
     def project(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -373,6 +413,7 @@ class User(pulumi.CustomResource):
                  name: Optional[pulumi.Input[_builtins.str]] = None,
                  password: Optional[pulumi.Input[_builtins.str]] = None,
                  password_policy: Optional[pulumi.Input[Union['UserPasswordPolicyArgs', 'UserPasswordPolicyArgsDict']]] = None,
+                 password_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
                  type: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
@@ -508,6 +549,9 @@ class User(pulumi.CustomResource):
                instances this is a Required field, unless type is set to either CLOUD_IAM_USER
                or CLOUD_IAM_SERVICE_ACCOUNT. Don't set this field for CLOUD_IAM_USER
                and CLOUD_IAM_SERVICE_ACCOUNT user types for any Cloud SQL instance.
+        :param pulumi.Input[_builtins.int] password_wo_version: The version of the password_wo. For more info see [updating write-only attributes](https://www.terraform.io/docs/providers/google/guides/using_write_only_attributes.html#updating-write-only-attributes).
+               
+               - - -
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs. If it
                is not provided, the provider project is used.
         :param pulumi.Input[_builtins.str] type: The user type. It determines the method to authenticate the
@@ -658,6 +702,7 @@ class User(pulumi.CustomResource):
                  name: Optional[pulumi.Input[_builtins.str]] = None,
                  password: Optional[pulumi.Input[_builtins.str]] = None,
                  password_policy: Optional[pulumi.Input[Union['UserPasswordPolicyArgs', 'UserPasswordPolicyArgsDict']]] = None,
+                 password_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
                  type: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
@@ -677,6 +722,7 @@ class User(pulumi.CustomResource):
             __props__.__dict__["name"] = name
             __props__.__dict__["password"] = None if password is None else pulumi.Output.secret(password)
             __props__.__dict__["password_policy"] = password_policy
+            __props__.__dict__["password_wo_version"] = password_wo_version
             __props__.__dict__["project"] = project
             __props__.__dict__["type"] = type
             __props__.__dict__["sql_server_user_details"] = None
@@ -698,6 +744,7 @@ class User(pulumi.CustomResource):
             name: Optional[pulumi.Input[_builtins.str]] = None,
             password: Optional[pulumi.Input[_builtins.str]] = None,
             password_policy: Optional[pulumi.Input[Union['UserPasswordPolicyArgs', 'UserPasswordPolicyArgsDict']]] = None,
+            password_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
             project: Optional[pulumi.Input[_builtins.str]] = None,
             sql_server_user_details: Optional[pulumi.Input[Sequence[pulumi.Input[Union['UserSqlServerUserDetailArgs', 'UserSqlServerUserDetailArgsDict']]]]] = None,
             type: Optional[pulumi.Input[_builtins.str]] = None) -> 'User':
@@ -724,6 +771,9 @@ class User(pulumi.CustomResource):
                instances this is a Required field, unless type is set to either CLOUD_IAM_USER
                or CLOUD_IAM_SERVICE_ACCOUNT. Don't set this field for CLOUD_IAM_USER
                and CLOUD_IAM_SERVICE_ACCOUNT user types for any Cloud SQL instance.
+        :param pulumi.Input[_builtins.int] password_wo_version: The version of the password_wo. For more info see [updating write-only attributes](https://www.terraform.io/docs/providers/google/guides/using_write_only_attributes.html#updating-write-only-attributes).
+               
+               - - -
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs. If it
                is not provided, the provider project is used.
         :param pulumi.Input[_builtins.str] type: The user type. It determines the method to authenticate the
@@ -743,6 +793,7 @@ class User(pulumi.CustomResource):
         __props__.__dict__["name"] = name
         __props__.__dict__["password"] = password
         __props__.__dict__["password_policy"] = password_policy
+        __props__.__dict__["password_wo_version"] = password_wo_version
         __props__.__dict__["project"] = project
         __props__.__dict__["sql_server_user_details"] = sql_server_user_details
         __props__.__dict__["type"] = type
@@ -804,6 +855,16 @@ class User(pulumi.CustomResource):
     def password_policy(self) -> pulumi.Output[Optional['outputs.UserPasswordPolicy']]:
         return pulumi.get(self, "password_policy")
 
+    @_builtins.property
+    @pulumi.getter(name="passwordWoVersion")
+    def password_wo_version(self) -> pulumi.Output[Optional[_builtins.int]]:
+        """
+        The version of the password_wo. For more info see [updating write-only attributes](https://www.terraform.io/docs/providers/google/guides/using_write_only_attributes.html#updating-write-only-attributes).
+
+        - - -
+        """
+        return pulumi.get(self, "password_wo_version")
+
     @_builtins.property
     @pulumi.getter
     def project(self) -> pulumi.Output[_builtins.str]:

pulumi_gcp/storage/_inputs.py

@@ -187,6 +187,10 @@ __all__ = [
     'TransferJobScheduleStartTimeOfDayArgsDict',
     'TransferJobTransferSpecArgs',
     'TransferJobTransferSpecArgsDict',
+    'TransferJobTransferSpecAwsS3CompatibleDataSourceArgs',
+    'TransferJobTransferSpecAwsS3CompatibleDataSourceArgsDict',
+    'TransferJobTransferSpecAwsS3CompatibleDataSourceS3MetadataArgs',
+    'TransferJobTransferSpecAwsS3CompatibleDataSourceS3MetadataArgsDict',
     'TransferJobTransferSpecAwsS3DataSourceArgs',
     'TransferJobTransferSpecAwsS3DataSourceArgsDict',
     'TransferJobTransferSpecAwsS3DataSourceAwsAccessKeyArgs',
@@ -1870,9 +1874,9 @@ class BucketObjectRetentionArgs:
 
 if not MYPY:
     class BucketRetentionPolicyArgsDict(TypedDict):
-        retention_period: pulumi.Input[_builtins.int]
+        retention_period: pulumi.Input[_builtins.str]
         """
-        The period of time, in seconds, that objects in the bucket must be retained and cannot be deleted, overwritten, or archived. The value must be less than 2,147,483,647 seconds.
+        The period of time, in seconds, that objects in the bucket must be retained and cannot be deleted, overwritten, or archived. The value must be less than 3,155,760,000 seconds.
         """
         is_locked: NotRequired[pulumi.Input[_builtins.bool]]
         """
@@ -1884,10 +1888,10 @@ elif False:
 @pulumi.input_type
 class BucketRetentionPolicyArgs:
     def __init__(__self__, *,
-                 retention_period: pulumi.Input[_builtins.int],
+                 retention_period: pulumi.Input[_builtins.str],
                  is_locked: Optional[pulumi.Input[_builtins.bool]] = None):
         """
-        :param pulumi.Input[_builtins.int] retention_period: The period of time, in seconds, that objects in the bucket must be retained and cannot be deleted, overwritten, or archived. The value must be less than 2,147,483,647 seconds.
+        :param pulumi.Input[_builtins.str] retention_period: The period of time, in seconds, that objects in the bucket must be retained and cannot be deleted, overwritten, or archived. The value must be less than 3,155,760,000 seconds.
         :param pulumi.Input[_builtins.bool] is_locked: If set to `true`, the bucket will be [locked](https://cloud.google.com/storage/docs/using-bucket-lock#lock-bucket) and permanently restrict edits to the bucket's retention policy.  Caution: Locking a bucket is an irreversible action.
         """
         pulumi.set(__self__, "retention_period", retention_period)
@@ -1896,14 +1900,14 @@ class BucketRetentionPolicyArgs:
 
     @_builtins.property
     @pulumi.getter(name="retentionPeriod")
-    def retention_period(self) -> pulumi.Input[_builtins.int]:
+    def retention_period(self) -> pulumi.Input[_builtins.str]:
         """
-        The period of time, in seconds, that objects in the bucket must be retained and cannot be deleted, overwritten, or archived. The value must be less than 2,147,483,647 seconds.
+        The period of time, in seconds, that objects in the bucket must be retained and cannot be deleted, overwritten, or archived. The value must be less than 3,155,760,000 seconds.
         """
         return pulumi.get(self, "retention_period")
 
     @retention_period.setter
-    def retention_period(self, value: pulumi.Input[_builtins.int]):
+    def retention_period(self, value: pulumi.Input[_builtins.str]):
         pulumi.set(self, "retention_period", value)
 
     @_builtins.property
@@ -5345,6 +5349,10 @@ class TransferJobScheduleStartTimeOfDayArgs:
 
 if not MYPY:
     class TransferJobTransferSpecArgsDict(TypedDict):
+        aws_s3_compatible_data_source: NotRequired[pulumi.Input['TransferJobTransferSpecAwsS3CompatibleDataSourceArgsDict']]
+        """
+        An AWS S3 Compatible data source. Structure documented below.
+        """
         aws_s3_data_source: NotRequired[pulumi.Input['TransferJobTransferSpecAwsS3DataSourceArgsDict']]
         """
         An AWS S3 data source. Structure documented below.
@@ -5399,6 +5407,7 @@ elif False:
 @pulumi.input_type
 class TransferJobTransferSpecArgs:
     def __init__(__self__, *,
+                 aws_s3_compatible_data_source: Optional[pulumi.Input['TransferJobTransferSpecAwsS3CompatibleDataSourceArgs']] = None,
                  aws_s3_data_source: Optional[pulumi.Input['TransferJobTransferSpecAwsS3DataSourceArgs']] = None,
                  azure_blob_storage_data_source: Optional[pulumi.Input['TransferJobTransferSpecAzureBlobStorageDataSourceArgs']] = None,
                  gcs_data_sink: Optional[pulumi.Input['TransferJobTransferSpecGcsDataSinkArgs']] = None,
@@ -5412,6 +5421,7 @@ class TransferJobTransferSpecArgs:
                  source_agent_pool_name: Optional[pulumi.Input[_builtins.str]] = None,
                  transfer_options: Optional[pulumi.Input['TransferJobTransferSpecTransferOptionsArgs']] = None):
         """
+        :param pulumi.Input['TransferJobTransferSpecAwsS3CompatibleDataSourceArgs'] aws_s3_compatible_data_source: An AWS S3 Compatible data source. Structure documented below.
         :param pulumi.Input['TransferJobTransferSpecAwsS3DataSourceArgs'] aws_s3_data_source: An AWS S3 data source. Structure documented below.
         :param pulumi.Input['TransferJobTransferSpecAzureBlobStorageDataSourceArgs'] azure_blob_storage_data_source: An Azure Blob Storage data source. Structure documented below.
         :param pulumi.Input['TransferJobTransferSpecGcsDataSinkArgs'] gcs_data_sink: A Google Cloud Storage data sink. Structure documented below.
@@ -5425,6 +5435,8 @@ class TransferJobTransferSpecArgs:
         :param pulumi.Input[_builtins.str] source_agent_pool_name: Specifies the agent pool name associated with the posix data source. When unspecified, the default name is used.
         :param pulumi.Input['TransferJobTransferSpecTransferOptionsArgs'] transfer_options: Characteristics of how to treat files from datasource and sink during job. If the option `delete_objects_unique_in_sink` is true, object conditions based on objects' `last_modification_time` are ignored and do not exclude objects in a data source or a data sink. Structure documented below.
         """
+        if aws_s3_compatible_data_source is not None:
+            pulumi.set(__self__, "aws_s3_compatible_data_source", aws_s3_compatible_data_source)
         if aws_s3_data_source is not None:
             pulumi.set(__self__, "aws_s3_data_source", aws_s3_data_source)
         if azure_blob_storage_data_source is not None:
@@ -5450,6 +5462,18 @@ class TransferJobTransferSpecArgs:
         if transfer_options is not None:
             pulumi.set(__self__, "transfer_options", transfer_options)
 
+    @_builtins.property
+    @pulumi.getter(name="awsS3CompatibleDataSource")
+    def aws_s3_compatible_data_source(self) -> Optional[pulumi.Input['TransferJobTransferSpecAwsS3CompatibleDataSourceArgs']]:
+        """
+        An AWS S3 Compatible data source. Structure documented below.
+        """
+        return pulumi.get(self, "aws_s3_compatible_data_source")
+
+    @aws_s3_compatible_data_source.setter
+    def aws_s3_compatible_data_source(self, value: Optional[pulumi.Input['TransferJobTransferSpecAwsS3CompatibleDataSourceArgs']]):
+        pulumi.set(self, "aws_s3_compatible_data_source", value)
+
     @_builtins.property
     @pulumi.getter(name="awsS3DataSource")
     def aws_s3_data_source(self) -> Optional[pulumi.Input['TransferJobTransferSpecAwsS3DataSourceArgs']]:
@@ -5595,6 +5619,208 @@ class TransferJobTransferSpecArgs:
         pulumi.set(self, "transfer_options", value)
 
 
+if not MYPY:
+    class TransferJobTransferSpecAwsS3CompatibleDataSourceArgsDict(TypedDict):
+        bucket_name: pulumi.Input[_builtins.str]
+        """
+        Name of the bucket.
+        """
+        endpoint: pulumi.Input[_builtins.str]
+        """
+        Endpoint of the storage service.
+        """
+        path: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        Specifies the path to transfer objects.
+        """
+        region: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        Specifies the region to sign requests with. This can be left blank if requests should be signed with an empty region.
+        """
+        s3_metadata: NotRequired[pulumi.Input['TransferJobTransferSpecAwsS3CompatibleDataSourceS3MetadataArgsDict']]
+        """
+        S3 compatible metadata.
+        """
+elif False:
+    TransferJobTransferSpecAwsS3CompatibleDataSourceArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class TransferJobTransferSpecAwsS3CompatibleDataSourceArgs:
+    def __init__(__self__, *,
+                 bucket_name: pulumi.Input[_builtins.str],
+                 endpoint: pulumi.Input[_builtins.str],
+                 path: Optional[pulumi.Input[_builtins.str]] = None,
+                 region: Optional[pulumi.Input[_builtins.str]] = None,
+                 s3_metadata: Optional[pulumi.Input['TransferJobTransferSpecAwsS3CompatibleDataSourceS3MetadataArgs']] = None):
+        """
+        :param pulumi.Input[_builtins.str] bucket_name: Name of the bucket.
+        :param pulumi.Input[_builtins.str] endpoint: Endpoint of the storage service.
+        :param pulumi.Input[_builtins.str] path: Specifies the path to transfer objects.
+        :param pulumi.Input[_builtins.str] region: Specifies the region to sign requests with. This can be left blank if requests should be signed with an empty region.
+        :param pulumi.Input['TransferJobTransferSpecAwsS3CompatibleDataSourceS3MetadataArgs'] s3_metadata: S3 compatible metadata.
+        """
+        pulumi.set(__self__, "bucket_name", bucket_name)
+        pulumi.set(__self__, "endpoint", endpoint)
+        if path is not None:
+            pulumi.set(__self__, "path", path)
+        if region is not None:
+            pulumi.set(__self__, "region", region)
+        if s3_metadata is not None:
+            pulumi.set(__self__, "s3_metadata", s3_metadata)
+
+    @_builtins.property
+    @pulumi.getter(name="bucketName")
+    def bucket_name(self) -> pulumi.Input[_builtins.str]:
+        """
+        Name of the bucket.
+        """
+        return pulumi.get(self, "bucket_name")
+
+    @bucket_name.setter
+    def bucket_name(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "bucket_name", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def endpoint(self) -> pulumi.Input[_builtins.str]:
+        """
+        Endpoint of the storage service.
+        """
+        return pulumi.get(self, "endpoint")
+
+    @endpoint.setter
+    def endpoint(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "endpoint", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def path(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Specifies the path to transfer objects.
+        """
+        return pulumi.get(self, "path")
+
+    @path.setter
+    def path(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "path", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def region(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Specifies the region to sign requests with. This can be left blank if requests should be signed with an empty region.
+        """
+        return pulumi.get(self, "region")
+
+    @region.setter
+    def region(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "region", value)
+
+    @_builtins.property
+    @pulumi.getter(name="s3Metadata")
+    def s3_metadata(self) -> Optional[pulumi.Input['TransferJobTransferSpecAwsS3CompatibleDataSourceS3MetadataArgs']]:
+        """
+        S3 compatible metadata.
+        """
+        return pulumi.get(self, "s3_metadata")
+
+    @s3_metadata.setter
+    def s3_metadata(self, value: Optional[pulumi.Input['TransferJobTransferSpecAwsS3CompatibleDataSourceS3MetadataArgs']]):
+        pulumi.set(self, "s3_metadata", value)
+
+
+if not MYPY:
+    class TransferJobTransferSpecAwsS3CompatibleDataSourceS3MetadataArgsDict(TypedDict):
+        auth_method: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        Authentication and authorization method used by the storage service. When not specified, Transfer Service will attempt to determine right auth method to use.
+        """
+        list_api: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        The Listing API to use for discovering objects. When not specified, Transfer Service will attempt to determine the right API to use.
+        """
+        protocol: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        The network protocol of the agent. When not specified, the default value of NetworkProtocol NETWORK_PROTOCOL_HTTPS is used.
+        """
+        request_model: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        API request model used to call the storage service. When not specified, the default value of RequestModel REQUEST_MODEL_VIRTUAL_HOSTED_STYLE is used.
+        """
+elif False:
+    TransferJobTransferSpecAwsS3CompatibleDataSourceS3MetadataArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class TransferJobTransferSpecAwsS3CompatibleDataSourceS3MetadataArgs:
+    def __init__(__self__, *,
+                 auth_method: Optional[pulumi.Input[_builtins.str]] = None,
+                 list_api: Optional[pulumi.Input[_builtins.str]] = None,
+                 protocol: Optional[pulumi.Input[_builtins.str]] = None,
+                 request_model: Optional[pulumi.Input[_builtins.str]] = None):
+        """
+        :param pulumi.Input[_builtins.str] auth_method: Authentication and authorization method used by the storage service. When not specified, Transfer Service will attempt to determine right auth method to use.
+        :param pulumi.Input[_builtins.str] list_api: The Listing API to use for discovering objects. When not specified, Transfer Service will attempt to determine the right API to use.
+        :param pulumi.Input[_builtins.str] protocol: The network protocol of the agent. When not specified, the default value of NetworkProtocol NETWORK_PROTOCOL_HTTPS is used.
+        :param pulumi.Input[_builtins.str] request_model: API request model used to call the storage service. When not specified, the default value of RequestModel REQUEST_MODEL_VIRTUAL_HOSTED_STYLE is used.
+        """
+        if auth_method is not None:
+            pulumi.set(__self__, "auth_method", auth_method)
+        if list_api is not None:
+            pulumi.set(__self__, "list_api", list_api)
+        if protocol is not None:
+            pulumi.set(__self__, "protocol", protocol)
+        if request_model is not None:
+            pulumi.set(__self__, "request_model", request_model)
+
+    @_builtins.property
+    @pulumi.getter(name="authMethod")
+    def auth_method(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Authentication and authorization method used by the storage service. When not specified, Transfer Service will attempt to determine right auth method to use.
+        """
+        return pulumi.get(self, "auth_method")
+
+    @auth_method.setter
+    def auth_method(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "auth_method", value)
+
+    @_builtins.property
+    @pulumi.getter(name="listApi")
+    def list_api(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The Listing API to use for discovering objects. When not specified, Transfer Service will attempt to determine the right API to use.
+        """
+        return pulumi.get(self, "list_api")
+
+    @list_api.setter
+    def list_api(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "list_api", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def protocol(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The network protocol of the agent. When not specified, the default value of NetworkProtocol NETWORK_PROTOCOL_HTTPS is used.
+        """
+        return pulumi.get(self, "protocol")
+
+    @protocol.setter
+    def protocol(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "protocol", value)
+
+    @_builtins.property
+    @pulumi.getter(name="requestModel")
+    def request_model(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        API request model used to call the storage service. When not specified, the default value of RequestModel REQUEST_MODEL_VIRTUAL_HOSTED_STYLE is used.
+        """
+        return pulumi.get(self, "request_model")
+
+    @request_model.setter
+    def request_model(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "request_model", value)
+
+
 if not MYPY:
     class TransferJobTransferSpecAwsS3DataSourceArgsDict(TypedDict):
         bucket_name: pulumi.Input[_builtins.str]
@@ -5609,6 +5835,10 @@ if not MYPY:
         """
         The CloudFront distribution domain name pointing to this bucket, to use when fetching. See [Transfer from S3 via CloudFront](https://cloud.google.com/storage-transfer/docs/s3-cloudfront) for more information. Format: https://{id}.cloudfront.net or any valid custom domain. Must begin with https://.
         """
+        credentials_secret: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        The Resource name of a secret in Secret Manager. AWS credentials must be stored in Secret Manager in JSON format. If credentials_secret is specified, do not specify role_arn or aws_access_key. Format: projects/{projectNumber}/secrets/{secret_name}.
+        """
         managed_private_network: NotRequired[pulumi.Input[_builtins.bool]]
         """
         Egress bytes over a Google-managed private network. This network is shared between other users of Storage Transfer Service.
@@ -5630,6 +5860,7 @@ class TransferJobTransferSpecAwsS3DataSourceArgs:
                  bucket_name: pulumi.Input[_builtins.str],
                  aws_access_key: Optional[pulumi.Input['TransferJobTransferSpecAwsS3DataSourceAwsAccessKeyArgs']] = None,
                  cloudfront_domain: Optional[pulumi.Input[_builtins.str]] = None,
+                 credentials_secret: Optional[pulumi.Input[_builtins.str]] = None,
                  managed_private_network: Optional[pulumi.Input[_builtins.bool]] = None,
                  path: Optional[pulumi.Input[_builtins.str]] = None,
                  role_arn: Optional[pulumi.Input[_builtins.str]] = None):
@@ -5637,6 +5868,7 @@ class TransferJobTransferSpecAwsS3DataSourceArgs:
         :param pulumi.Input[_builtins.str] bucket_name: S3 Bucket name.
         :param pulumi.Input['TransferJobTransferSpecAwsS3DataSourceAwsAccessKeyArgs'] aws_access_key: AWS credentials block.
         :param pulumi.Input[_builtins.str] cloudfront_domain: The CloudFront distribution domain name pointing to this bucket, to use when fetching. See [Transfer from S3 via CloudFront](https://cloud.google.com/storage-transfer/docs/s3-cloudfront) for more information. Format: https://{id}.cloudfront.net or any valid custom domain. Must begin with https://.
+        :param pulumi.Input[_builtins.str] credentials_secret: The Resource name of a secret in Secret Manager. AWS credentials must be stored in Secret Manager in JSON format. If credentials_secret is specified, do not specify role_arn or aws_access_key. Format: projects/{projectNumber}/secrets/{secret_name}.
         :param pulumi.Input[_builtins.bool] managed_private_network: Egress bytes over a Google-managed private network. This network is shared between other users of Storage Transfer Service.
         :param pulumi.Input[_builtins.str] path: S3 Bucket path in bucket to transfer.
         :param pulumi.Input[_builtins.str] role_arn: The Amazon Resource Name (ARN) of the role to support temporary credentials via 'AssumeRoleWithWebIdentity'. For more information about ARNs, see [IAM ARNs](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns). When a role ARN is provided, Transfer Service fetches temporary credentials for the session using a 'AssumeRoleWithWebIdentity' call for the provided role using the [GoogleServiceAccount][] for this project.
@@ -5646,6 +5878,8 @@ class TransferJobTransferSpecAwsS3DataSourceArgs:
             pulumi.set(__self__, "aws_access_key", aws_access_key)
         if cloudfront_domain is not None:
             pulumi.set(__self__, "cloudfront_domain", cloudfront_domain)
+        if credentials_secret is not None:
+            pulumi.set(__self__, "credentials_secret", credentials_secret)
         if managed_private_network is not None:
             pulumi.set(__self__, "managed_private_network", managed_private_network)
         if path is not None:
@@ -5689,6 +5923,18 @@ class TransferJobTransferSpecAwsS3DataSourceArgs:
     def cloudfront_domain(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "cloudfront_domain", value)
 
+    @_builtins.property
+    @pulumi.getter(name="credentialsSecret")
+    def credentials_secret(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The Resource name of a secret in Secret Manager. AWS credentials must be stored in Secret Manager in JSON format. If credentials_secret is specified, do not specify role_arn or aws_access_key. Format: projects/{projectNumber}/secrets/{secret_name}.
+        """
+        return pulumi.get(self, "credentials_secret")
+
+    @credentials_secret.setter
+    def credentials_secret(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "credentials_secret", value)
+
     @_builtins.property
     @pulumi.getter(name="managedPrivateNetwork")
     def managed_private_network(self) -> Optional[pulumi.Input[_builtins.bool]]:

pulumi_gcp/storage/bucket_object.py

@@ -88,9 +88,6 @@ class BucketObjectArgs:
             pulumi.set(__self__, "customer_encryption", customer_encryption)
         if deletion_policy is not None:
             pulumi.set(__self__, "deletion_policy", deletion_policy)
-        if detect_md5hash is not None:
-            warnings.warn("""`detect_md5hash` is deprecated and will be removed in future release. Start using `source_md5hash` instead""", DeprecationWarning)
-            pulumi.log.warn("""detect_md5hash is deprecated: `detect_md5hash` is deprecated and will be removed in future release. Start using `source_md5hash` instead""")
         if detect_md5hash is not None:
             pulumi.set(__self__, "detect_md5hash", detect_md5hash)
         if event_based_hold is not None:
@@ -223,7 +220,6 @@ class BucketObjectArgs:
 
     @_builtins.property
     @pulumi.getter(name="detectMd5hash")
-    @_utilities.deprecated("""`detect_md5hash` is deprecated and will be removed in future release. Start using `source_md5hash` instead""")
     def detect_md5hash(self) -> Optional[pulumi.Input[_builtins.str]]:
         return pulumi.get(self, "detect_md5hash")
 
@@ -447,9 +443,6 @@ class _BucketObjectState:
             pulumi.set(__self__, "customer_encryption", customer_encryption)
         if deletion_policy is not None:
             pulumi.set(__self__, "deletion_policy", deletion_policy)
-        if detect_md5hash is not None:
-            warnings.warn("""`detect_md5hash` is deprecated and will be removed in future release. Start using `source_md5hash` instead""", DeprecationWarning)
-            pulumi.log.warn("""detect_md5hash is deprecated: `detect_md5hash` is deprecated and will be removed in future release. Start using `source_md5hash` instead""")
         if detect_md5hash is not None:
             pulumi.set(__self__, "detect_md5hash", detect_md5hash)
         if event_based_hold is not None:
@@ -606,7 +599,6 @@ class _BucketObjectState:
 
     @_builtins.property
     @pulumi.getter(name="detectMd5hash")
-    @_utilities.deprecated("""`detect_md5hash` is deprecated and will be removed in future release. Start using `source_md5hash` instead""")
     def detect_md5hash(self) -> Optional[pulumi.Input[_builtins.str]]:
         return pulumi.get(self, "detect_md5hash")
 
@@ -1231,7 +1223,6 @@ class BucketObject(pulumi.CustomResource):
 
     @_builtins.property
     @pulumi.getter(name="detectMd5hash")
-    @_utilities.deprecated("""`detect_md5hash` is deprecated and will be removed in future release. Start using `source_md5hash` instead""")
     def detect_md5hash(self) -> pulumi.Output[Optional[_builtins.str]]:
         return pulumi.get(self, "detect_md5hash")