pulumi-gcp 8.42.0a1758178363__py3-none-any.whl → 9.0.0__py3-none-any.whl

pulumi_gcp/compute/backend_bucket.py

@@ -30,6 +30,7 @@ class BackendBucketArgs:
                  enable_cdn: Optional[pulumi.Input[_builtins.bool]] = None,
                  load_balancing_scheme: Optional[pulumi.Input[_builtins.str]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
+                 params: Optional[pulumi.Input['BackendBucketParamsArgs']] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None):
         """
         The set of arguments for constructing a BackendBucket resource.
@@ -43,8 +44,10 @@ class BackendBucketArgs:
                client when the resource is created.
         :param pulumi.Input[_builtins.str] edge_security_policy: The security policy associated with this backend bucket.
         :param pulumi.Input[_builtins.bool] enable_cdn: If true, enable Cloud CDN for this BackendBucket.
+               Note: This cannot be set to true when loadBalancingScheme is set to INTERNAL_MANAGED.
         :param pulumi.Input[_builtins.str] load_balancing_scheme: The value can only be INTERNAL_MANAGED for cross-region internal layer 7 load balancer.
                If loadBalancingScheme is not specified, the backend bucket can be used by classic global external load balancers, or global application external load balancers, or both.
+               Important: CDN cannot be enabled (enableCdn cannot be set to true) when loadBalancingScheme is set to INTERNAL_MANAGED.
                Possible values are: `INTERNAL_MANAGED`.
         :param pulumi.Input[_builtins.str] name: Name of the resource. Provided by the client when the resource is
                created. The name must be 1-63 characters long, and comply with
@@ -53,6 +56,8 @@ class BackendBucketArgs:
                the first character must be a lowercase letter, and all following
                characters must be a dash, lowercase letter, or digit, except the
                last character, which cannot be a dash.
+        :param pulumi.Input['BackendBucketParamsArgs'] params: Additional params passed with the request, but not persisted as part of resource payload
+               Structure is documented below.
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         """
@@ -73,6 +78,8 @@ class BackendBucketArgs:
             pulumi.set(__self__, "load_balancing_scheme", load_balancing_scheme)
         if name is not None:
             pulumi.set(__self__, "name", name)
+        if params is not None:
+            pulumi.set(__self__, "params", params)
         if project is not None:
             pulumi.set(__self__, "project", project)
 
@@ -156,6 +163,7 @@ class BackendBucketArgs:
     def enable_cdn(self) -> Optional[pulumi.Input[_builtins.bool]]:
         """
         If true, enable Cloud CDN for this BackendBucket.
+        Note: This cannot be set to true when loadBalancingScheme is set to INTERNAL_MANAGED.
         """
         return pulumi.get(self, "enable_cdn")
 
@@ -169,6 +177,7 @@ class BackendBucketArgs:
         """
         The value can only be INTERNAL_MANAGED for cross-region internal layer 7 load balancer.
         If loadBalancingScheme is not specified, the backend bucket can be used by classic global external load balancers, or global application external load balancers, or both.
+        Important: CDN cannot be enabled (enableCdn cannot be set to true) when loadBalancingScheme is set to INTERNAL_MANAGED.
         Possible values are: `INTERNAL_MANAGED`.
         """
         return pulumi.get(self, "load_balancing_scheme")
@@ -195,6 +204,19 @@ class BackendBucketArgs:
     def name(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "name", value)
 
+    @_builtins.property
+    @pulumi.getter
+    def params(self) -> Optional[pulumi.Input['BackendBucketParamsArgs']]:
+        """
+        Additional params passed with the request, but not persisted as part of resource payload
+        Structure is documented below.
+        """
+        return pulumi.get(self, "params")
+
+    @params.setter
+    def params(self, value: Optional[pulumi.Input['BackendBucketParamsArgs']]):
+        pulumi.set(self, "params", value)
+
     @_builtins.property
     @pulumi.getter
     def project(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -222,6 +244,7 @@ class _BackendBucketState:
                  enable_cdn: Optional[pulumi.Input[_builtins.bool]] = None,
                  load_balancing_scheme: Optional[pulumi.Input[_builtins.str]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
+                 params: Optional[pulumi.Input['BackendBucketParamsArgs']] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
                  self_link: Optional[pulumi.Input[_builtins.str]] = None):
         """
@@ -237,8 +260,10 @@ class _BackendBucketState:
                client when the resource is created.
         :param pulumi.Input[_builtins.str] edge_security_policy: The security policy associated with this backend bucket.
         :param pulumi.Input[_builtins.bool] enable_cdn: If true, enable Cloud CDN for this BackendBucket.
+               Note: This cannot be set to true when loadBalancingScheme is set to INTERNAL_MANAGED.
         :param pulumi.Input[_builtins.str] load_balancing_scheme: The value can only be INTERNAL_MANAGED for cross-region internal layer 7 load balancer.
                If loadBalancingScheme is not specified, the backend bucket can be used by classic global external load balancers, or global application external load balancers, or both.
+               Important: CDN cannot be enabled (enableCdn cannot be set to true) when loadBalancingScheme is set to INTERNAL_MANAGED.
                Possible values are: `INTERNAL_MANAGED`.
         :param pulumi.Input[_builtins.str] name: Name of the resource. Provided by the client when the resource is
                created. The name must be 1-63 characters long, and comply with
@@ -247,6 +272,8 @@ class _BackendBucketState:
                the first character must be a lowercase letter, and all following
                characters must be a dash, lowercase letter, or digit, except the
                last character, which cannot be a dash.
+        :param pulumi.Input['BackendBucketParamsArgs'] params: Additional params passed with the request, but not persisted as part of resource payload
+               Structure is documented below.
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[_builtins.str] self_link: The URI of the created resource.
@@ -271,6 +298,8 @@ class _BackendBucketState:
             pulumi.set(__self__, "load_balancing_scheme", load_balancing_scheme)
         if name is not None:
             pulumi.set(__self__, "name", name)
+        if params is not None:
+            pulumi.set(__self__, "params", params)
         if project is not None:
             pulumi.set(__self__, "project", project)
         if self_link is not None:
@@ -368,6 +397,7 @@ class _BackendBucketState:
     def enable_cdn(self) -> Optional[pulumi.Input[_builtins.bool]]:
         """
         If true, enable Cloud CDN for this BackendBucket.
+        Note: This cannot be set to true when loadBalancingScheme is set to INTERNAL_MANAGED.
         """
         return pulumi.get(self, "enable_cdn")
 
@@ -381,6 +411,7 @@ class _BackendBucketState:
         """
         The value can only be INTERNAL_MANAGED for cross-region internal layer 7 load balancer.
         If loadBalancingScheme is not specified, the backend bucket can be used by classic global external load balancers, or global application external load balancers, or both.
+        Important: CDN cannot be enabled (enableCdn cannot be set to true) when loadBalancingScheme is set to INTERNAL_MANAGED.
         Possible values are: `INTERNAL_MANAGED`.
         """
         return pulumi.get(self, "load_balancing_scheme")
@@ -407,6 +438,19 @@ class _BackendBucketState:
     def name(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "name", value)
 
+    @_builtins.property
+    @pulumi.getter
+    def params(self) -> Optional[pulumi.Input['BackendBucketParamsArgs']]:
+        """
+        Additional params passed with the request, but not persisted as part of resource payload
+        Structure is documented below.
+        """
+        return pulumi.get(self, "params")
+
+    @params.setter
+    def params(self, value: Optional[pulumi.Input['BackendBucketParamsArgs']]):
+        pulumi.set(self, "params", value)
+
     @_builtins.property
     @pulumi.getter
     def project(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -448,6 +492,7 @@ class BackendBucket(pulumi.CustomResource):
                  enable_cdn: Optional[pulumi.Input[_builtins.bool]] = None,
                  load_balancing_scheme: Optional[pulumi.Input[_builtins.str]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
+                 params: Optional[pulumi.Input[Union['BackendBucketParamsArgs', 'BackendBucketParamsArgsDict']]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
         """
@@ -579,8 +624,10 @@ class BackendBucket(pulumi.CustomResource):
                client when the resource is created.
         :param pulumi.Input[_builtins.str] edge_security_policy: The security policy associated with this backend bucket.
         :param pulumi.Input[_builtins.bool] enable_cdn: If true, enable Cloud CDN for this BackendBucket.
+               Note: This cannot be set to true when loadBalancingScheme is set to INTERNAL_MANAGED.
         :param pulumi.Input[_builtins.str] load_balancing_scheme: The value can only be INTERNAL_MANAGED for cross-region internal layer 7 load balancer.
                If loadBalancingScheme is not specified, the backend bucket can be used by classic global external load balancers, or global application external load balancers, or both.
+               Important: CDN cannot be enabled (enableCdn cannot be set to true) when loadBalancingScheme is set to INTERNAL_MANAGED.
                Possible values are: `INTERNAL_MANAGED`.
         :param pulumi.Input[_builtins.str] name: Name of the resource. Provided by the client when the resource is
                created. The name must be 1-63 characters long, and comply with
@@ -589,6 +636,8 @@ class BackendBucket(pulumi.CustomResource):
                the first character must be a lowercase letter, and all following
                characters must be a dash, lowercase letter, or digit, except the
                last character, which cannot be a dash.
+        :param pulumi.Input[Union['BackendBucketParamsArgs', 'BackendBucketParamsArgsDict']] params: Additional params passed with the request, but not persisted as part of resource payload
+               Structure is documented below.
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         """
@@ -739,6 +788,7 @@ class BackendBucket(pulumi.CustomResource):
                  enable_cdn: Optional[pulumi.Input[_builtins.bool]] = None,
                  load_balancing_scheme: Optional[pulumi.Input[_builtins.str]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
+                 params: Optional[pulumi.Input[Union['BackendBucketParamsArgs', 'BackendBucketParamsArgsDict']]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
@@ -760,6 +810,7 @@ class BackendBucket(pulumi.CustomResource):
             __props__.__dict__["enable_cdn"] = enable_cdn
             __props__.__dict__["load_balancing_scheme"] = load_balancing_scheme
             __props__.__dict__["name"] = name
+            __props__.__dict__["params"] = params
             __props__.__dict__["project"] = project
             __props__.__dict__["creation_timestamp"] = None
             __props__.__dict__["self_link"] = None
@@ -783,6 +834,7 @@ class BackendBucket(pulumi.CustomResource):
             enable_cdn: Optional[pulumi.Input[_builtins.bool]] = None,
             load_balancing_scheme: Optional[pulumi.Input[_builtins.str]] = None,
             name: Optional[pulumi.Input[_builtins.str]] = None,
+            params: Optional[pulumi.Input[Union['BackendBucketParamsArgs', 'BackendBucketParamsArgsDict']]] = None,
             project: Optional[pulumi.Input[_builtins.str]] = None,
             self_link: Optional[pulumi.Input[_builtins.str]] = None) -> 'BackendBucket':
         """
@@ -803,8 +855,10 @@ class BackendBucket(pulumi.CustomResource):
                client when the resource is created.
         :param pulumi.Input[_builtins.str] edge_security_policy: The security policy associated with this backend bucket.
         :param pulumi.Input[_builtins.bool] enable_cdn: If true, enable Cloud CDN for this BackendBucket.
+               Note: This cannot be set to true when loadBalancingScheme is set to INTERNAL_MANAGED.
         :param pulumi.Input[_builtins.str] load_balancing_scheme: The value can only be INTERNAL_MANAGED for cross-region internal layer 7 load balancer.
                If loadBalancingScheme is not specified, the backend bucket can be used by classic global external load balancers, or global application external load balancers, or both.
+               Important: CDN cannot be enabled (enableCdn cannot be set to true) when loadBalancingScheme is set to INTERNAL_MANAGED.
                Possible values are: `INTERNAL_MANAGED`.
         :param pulumi.Input[_builtins.str] name: Name of the resource. Provided by the client when the resource is
                created. The name must be 1-63 characters long, and comply with
@@ -813,6 +867,8 @@ class BackendBucket(pulumi.CustomResource):
                the first character must be a lowercase letter, and all following
                characters must be a dash, lowercase letter, or digit, except the
                last character, which cannot be a dash.
+        :param pulumi.Input[Union['BackendBucketParamsArgs', 'BackendBucketParamsArgsDict']] params: Additional params passed with the request, but not persisted as part of resource payload
+               Structure is documented below.
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[_builtins.str] self_link: The URI of the created resource.
@@ -831,6 +887,7 @@ class BackendBucket(pulumi.CustomResource):
         __props__.__dict__["enable_cdn"] = enable_cdn
         __props__.__dict__["load_balancing_scheme"] = load_balancing_scheme
         __props__.__dict__["name"] = name
+        __props__.__dict__["params"] = params
         __props__.__dict__["project"] = project
         __props__.__dict__["self_link"] = self_link
         return BackendBucket(resource_name, opts=opts, __props__=__props__)
@@ -899,6 +956,7 @@ class BackendBucket(pulumi.CustomResource):
     def enable_cdn(self) -> pulumi.Output[Optional[_builtins.bool]]:
         """
         If true, enable Cloud CDN for this BackendBucket.
+        Note: This cannot be set to true when loadBalancingScheme is set to INTERNAL_MANAGED.
         """
         return pulumi.get(self, "enable_cdn")
 
@@ -908,6 +966,7 @@ class BackendBucket(pulumi.CustomResource):
         """
         The value can only be INTERNAL_MANAGED for cross-region internal layer 7 load balancer.
         If loadBalancingScheme is not specified, the backend bucket can be used by classic global external load balancers, or global application external load balancers, or both.
+        Important: CDN cannot be enabled (enableCdn cannot be set to true) when loadBalancingScheme is set to INTERNAL_MANAGED.
         Possible values are: `INTERNAL_MANAGED`.
         """
         return pulumi.get(self, "load_balancing_scheme")
@@ -926,6 +985,15 @@ class BackendBucket(pulumi.CustomResource):
         """
         return pulumi.get(self, "name")
 
+    @_builtins.property
+    @pulumi.getter
+    def params(self) -> pulumi.Output[Optional['outputs.BackendBucketParams']]:
+        """
+        Additional params passed with the request, but not persisted as part of resource payload
+        Structure is documented below.
+        """
+        return pulumi.get(self, "params")
+
     @_builtins.property
     @pulumi.getter
     def project(self) -> pulumi.Output[_builtins.str]:

pulumi_gcp/compute/backend_bucket_iam_binding.py

@@ -265,6 +265,124 @@ class BackendBucketIamBinding(pulumi.CustomResource):
                  role: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
         """
+        Three different resources help you manage your IAM policy for Compute Engine BackendBucket. Each of these resources serves a different use case:
+
+        * `compute.BackendBucketIamPolicy`: Authoritative. Sets the IAM policy for the backendbucket and replaces any existing policy already attached.
+        * `compute.BackendBucketIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the backendbucket are preserved.
+        * `compute.BackendBucketIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the backendbucket are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.BackendBucketIamPolicy`: Retrieves the IAM policy for the backendbucket
+
+        > **Note:** `compute.BackendBucketIamPolicy` **cannot** be used in conjunction with `compute.BackendBucketIamBinding` and `compute.BackendBucketIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.BackendBucketIamBinding` resources **can be** used in conjunction with `compute.BackendBucketIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## compute.BackendBucketIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.compute.BackendBucketIamPolicy("policy",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## compute.BackendBucketIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.compute.BackendBucketIamBinding("binding",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+
+        ## compute.BackendBucketIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.compute.BackendBucketIamMember("member",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine BackendBucket
+
+        Three different resources help you manage your IAM policy for Compute Engine BackendBucket. Each of these resources serves a different use case:
+
+        * `compute.BackendBucketIamPolicy`: Authoritative. Sets the IAM policy for the backendbucket and replaces any existing policy already attached.
+        * `compute.BackendBucketIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the backendbucket are preserved.
+        * `compute.BackendBucketIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the backendbucket are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.BackendBucketIamPolicy`: Retrieves the IAM policy for the backendbucket
+
+        > **Note:** `compute.BackendBucketIamPolicy` **cannot** be used in conjunction with `compute.BackendBucketIamBinding` and `compute.BackendBucketIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.BackendBucketIamBinding` resources **can be** used in conjunction with `compute.BackendBucketIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## compute.BackendBucketIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.compute.BackendBucketIamPolicy("policy",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## compute.BackendBucketIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.compute.BackendBucketIamBinding("binding",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+
+        ## compute.BackendBucketIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.compute.BackendBucketIamMember("member",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms:
@@ -328,6 +446,124 @@ class BackendBucketIamBinding(pulumi.CustomResource):
                  args: BackendBucketIamBindingArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        Three different resources help you manage your IAM policy for Compute Engine BackendBucket. Each of these resources serves a different use case:
+
+        * `compute.BackendBucketIamPolicy`: Authoritative. Sets the IAM policy for the backendbucket and replaces any existing policy already attached.
+        * `compute.BackendBucketIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the backendbucket are preserved.
+        * `compute.BackendBucketIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the backendbucket are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.BackendBucketIamPolicy`: Retrieves the IAM policy for the backendbucket
+
+        > **Note:** `compute.BackendBucketIamPolicy` **cannot** be used in conjunction with `compute.BackendBucketIamBinding` and `compute.BackendBucketIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.BackendBucketIamBinding` resources **can be** used in conjunction with `compute.BackendBucketIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## compute.BackendBucketIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.compute.BackendBucketIamPolicy("policy",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## compute.BackendBucketIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.compute.BackendBucketIamBinding("binding",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+
+        ## compute.BackendBucketIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.compute.BackendBucketIamMember("member",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine BackendBucket
+
+        Three different resources help you manage your IAM policy for Compute Engine BackendBucket. Each of these resources serves a different use case:
+
+        * `compute.BackendBucketIamPolicy`: Authoritative. Sets the IAM policy for the backendbucket and replaces any existing policy already attached.
+        * `compute.BackendBucketIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the backendbucket are preserved.
+        * `compute.BackendBucketIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the backendbucket are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.BackendBucketIamPolicy`: Retrieves the IAM policy for the backendbucket
+
+        > **Note:** `compute.BackendBucketIamPolicy` **cannot** be used in conjunction with `compute.BackendBucketIamBinding` and `compute.BackendBucketIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.BackendBucketIamBinding` resources **can be** used in conjunction with `compute.BackendBucketIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## compute.BackendBucketIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.compute.BackendBucketIamPolicy("policy",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## compute.BackendBucketIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.compute.BackendBucketIamBinding("binding",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+
+        ## compute.BackendBucketIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.compute.BackendBucketIamMember("member",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms: