pulumi-gcp 9.0.0a1__py3-none-any.whl → 9.0.0a1758219982__py3-none-any.whl

pulumi_gcp/vertex/ai_feature_store_iam_policy.py

@@ -202,6 +202,130 @@ class AiFeatureStoreIamPolicy(pulumi.CustomResource):
                  region: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
         """
+        Three different resources help you manage your IAM policy for Vertex AI Featurestore. Each of these resources serves a different use case:
+
+        * `vertex.AiFeatureStoreIamPolicy`: Authoritative. Sets the IAM policy for the featurestore and replaces any existing policy already attached.
+        * `vertex.AiFeatureStoreIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the featurestore are preserved.
+        * `vertex.AiFeatureStoreIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the featurestore are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `vertex.AiFeatureStoreIamPolicy`: Retrieves the IAM policy for the featurestore
+
+        > **Note:** `vertex.AiFeatureStoreIamPolicy` **cannot** be used in conjunction with `vertex.AiFeatureStoreIamBinding` and `vertex.AiFeatureStoreIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `vertex.AiFeatureStoreIamBinding` resources **can be** used in conjunction with `vertex.AiFeatureStoreIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## vertex.AiFeatureStoreIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.vertex.AiFeatureStoreIamPolicy("policy",
+            project=featurestore["project"],
+            region=featurestore["region"],
+            featurestore=featurestore["name"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## vertex.AiFeatureStoreIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.vertex.AiFeatureStoreIamBinding("binding",
+            project=featurestore["project"],
+            region=featurestore["region"],
+            featurestore=featurestore["name"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+
+        ## vertex.AiFeatureStoreIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.vertex.AiFeatureStoreIamMember("member",
+            project=featurestore["project"],
+            region=featurestore["region"],
+            featurestore=featurestore["name"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Vertex AI Featurestore
+
+        Three different resources help you manage your IAM policy for Vertex AI Featurestore. Each of these resources serves a different use case:
+
+        * `vertex.AiFeatureStoreIamPolicy`: Authoritative. Sets the IAM policy for the featurestore and replaces any existing policy already attached.
+        * `vertex.AiFeatureStoreIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the featurestore are preserved.
+        * `vertex.AiFeatureStoreIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the featurestore are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `vertex.AiFeatureStoreIamPolicy`: Retrieves the IAM policy for the featurestore
+
+        > **Note:** `vertex.AiFeatureStoreIamPolicy` **cannot** be used in conjunction with `vertex.AiFeatureStoreIamBinding` and `vertex.AiFeatureStoreIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `vertex.AiFeatureStoreIamBinding` resources **can be** used in conjunction with `vertex.AiFeatureStoreIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## vertex.AiFeatureStoreIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.vertex.AiFeatureStoreIamPolicy("policy",
+            project=featurestore["project"],
+            region=featurestore["region"],
+            featurestore=featurestore["name"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## vertex.AiFeatureStoreIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.vertex.AiFeatureStoreIamBinding("binding",
+            project=featurestore["project"],
+            region=featurestore["region"],
+            featurestore=featurestore["name"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+
+        ## vertex.AiFeatureStoreIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.vertex.AiFeatureStoreIamMember("member",
+            project=featurestore["project"],
+            region=featurestore["region"],
+            featurestore=featurestore["name"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms:
@@ -258,6 +382,130 @@ class AiFeatureStoreIamPolicy(pulumi.CustomResource):
                  args: AiFeatureStoreIamPolicyArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        Three different resources help you manage your IAM policy for Vertex AI Featurestore. Each of these resources serves a different use case:
+
+        * `vertex.AiFeatureStoreIamPolicy`: Authoritative. Sets the IAM policy for the featurestore and replaces any existing policy already attached.
+        * `vertex.AiFeatureStoreIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the featurestore are preserved.
+        * `vertex.AiFeatureStoreIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the featurestore are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `vertex.AiFeatureStoreIamPolicy`: Retrieves the IAM policy for the featurestore
+
+        > **Note:** `vertex.AiFeatureStoreIamPolicy` **cannot** be used in conjunction with `vertex.AiFeatureStoreIamBinding` and `vertex.AiFeatureStoreIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `vertex.AiFeatureStoreIamBinding` resources **can be** used in conjunction with `vertex.AiFeatureStoreIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## vertex.AiFeatureStoreIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.vertex.AiFeatureStoreIamPolicy("policy",
+            project=featurestore["project"],
+            region=featurestore["region"],
+            featurestore=featurestore["name"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## vertex.AiFeatureStoreIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.vertex.AiFeatureStoreIamBinding("binding",
+            project=featurestore["project"],
+            region=featurestore["region"],
+            featurestore=featurestore["name"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+
+        ## vertex.AiFeatureStoreIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.vertex.AiFeatureStoreIamMember("member",
+            project=featurestore["project"],
+            region=featurestore["region"],
+            featurestore=featurestore["name"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Vertex AI Featurestore
+
+        Three different resources help you manage your IAM policy for Vertex AI Featurestore. Each of these resources serves a different use case:
+
+        * `vertex.AiFeatureStoreIamPolicy`: Authoritative. Sets the IAM policy for the featurestore and replaces any existing policy already attached.
+        * `vertex.AiFeatureStoreIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the featurestore are preserved.
+        * `vertex.AiFeatureStoreIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the featurestore are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `vertex.AiFeatureStoreIamPolicy`: Retrieves the IAM policy for the featurestore
+
+        > **Note:** `vertex.AiFeatureStoreIamPolicy` **cannot** be used in conjunction with `vertex.AiFeatureStoreIamBinding` and `vertex.AiFeatureStoreIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `vertex.AiFeatureStoreIamBinding` resources **can be** used in conjunction with `vertex.AiFeatureStoreIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## vertex.AiFeatureStoreIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.vertex.AiFeatureStoreIamPolicy("policy",
+            project=featurestore["project"],
+            region=featurestore["region"],
+            featurestore=featurestore["name"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## vertex.AiFeatureStoreIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.vertex.AiFeatureStoreIamBinding("binding",
+            project=featurestore["project"],
+            region=featurestore["region"],
+            featurestore=featurestore["name"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+
+        ## vertex.AiFeatureStoreIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.vertex.AiFeatureStoreIamMember("member",
+            project=featurestore["project"],
+            region=featurestore["region"],
+            featurestore=featurestore["name"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms:

pulumi_gcp/vertex/ai_metadata_store.py

@@ -265,6 +265,14 @@ class AiMetadataStore(pulumi.CustomResource):
                  region: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
         """
+        Instance of a metadata store. Contains a set of metadata that can be queried.
+
+        To get more information about MetadataStore, see:
+
+        * [API documentation](https://cloud.google.com/vertex-ai/docs/reference/rest/v1/projects.locations.metadataStores)
+        * How-to Guides
+            * [Official Documentation](https://cloud.google.com/vertex-ai/docs)
+
         ## Example Usage
 
         ### Vertex Ai Metadata Store
@@ -326,6 +334,14 @@ class AiMetadataStore(pulumi.CustomResource):
                  args: Optional[AiMetadataStoreArgs] = None,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        Instance of a metadata store. Contains a set of metadata that can be queried.
+
+        To get more information about MetadataStore, see:
+
+        * [API documentation](https://cloud.google.com/vertex-ai/docs/reference/rest/v1/projects.locations.metadataStores)
+        * How-to Guides
+            * [Official Documentation](https://cloud.google.com/vertex-ai/docs)
+
         ## Example Usage
 
         ### Vertex Ai Metadata Store

pulumi_gcp/workstations/workstation.py

@@ -520,6 +520,14 @@ class Workstation(pulumi.CustomResource):
                  workstation_id: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
         """
+        A single instance of a developer workstation with its own persistent storage.
+
+        To get more information about Workstation, see:
+
+        * [API documentation](https://cloud.google.com/workstations/docs/reference/rest/v1beta/projects.locations.workstationClusters.workstationConfigs.workstations)
+        * How-to Guides
+            * [Workstations](https://cloud.google.com/workstations/docs/)
+
         ## Example Usage
 
         ### Workstation Basic
@@ -624,6 +632,14 @@ class Workstation(pulumi.CustomResource):
                  args: WorkstationArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        A single instance of a developer workstation with its own persistent storage.
+
+        To get more information about Workstation, see:
+
+        * [API documentation](https://cloud.google.com/workstations/docs/reference/rest/v1beta/projects.locations.workstationClusters.workstationConfigs.workstations)
+        * How-to Guides
+            * [Workstations](https://cloud.google.com/workstations/docs/)
+
         ## Example Usage
 
         ### Workstation Basic

pulumi_gcp/workstations/workstation_cluster.py

@@ -616,6 +616,14 @@ class WorkstationCluster(pulumi.CustomResource):
                  workstation_cluster_id: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
         """
+        A grouping of workstation configurations and the associated workstations in that region.
+
+        To get more information about WorkstationCluster, see:
+
+        * [API documentation](https://cloud.google.com/workstations/docs/reference/rest/v1beta/projects.locations.workstationClusters/create)
+        * How-to Guides
+            * [Workstations](https://cloud.google.com/workstations/docs/)
+
         ## Example Usage
 
         ### Workstation Cluster Basic
@@ -800,6 +808,14 @@ class WorkstationCluster(pulumi.CustomResource):
                  args: WorkstationClusterArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        A grouping of workstation configurations and the associated workstations in that region.
+
+        To get more information about WorkstationCluster, see:
+
+        * [API documentation](https://cloud.google.com/workstations/docs/reference/rest/v1beta/projects.locations.workstationClusters/create)
+        * How-to Guides
+            * [Workstations](https://cloud.google.com/workstations/docs/)
+
         ## Example Usage
 
         ### Workstation Cluster Basic

pulumi_gcp/workstations/workstation_config.py

@@ -917,6 +917,14 @@ class WorkstationConfig(pulumi.CustomResource):
                  workstation_config_id: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
         """
+        A set of configuration options describing how a workstation will be run. Workstation configurations are intended to be shared across multiple workstations.
+
+        To get more information about WorkstationConfig, see:
+
+        * [API documentation](https://cloud.google.com/workstations/docs/reference/rest/v1beta/projects.locations.workstationClusters.workstationConfigs/create)
+        * How-to Guides
+            * [Workstations](https://cloud.google.com/workstations/docs/)
+
         ## Example Usage
 
         ### Workstation Config Basic
@@ -1432,6 +1440,14 @@ class WorkstationConfig(pulumi.CustomResource):
                  args: WorkstationConfigArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        A set of configuration options describing how a workstation will be run. Workstation configurations are intended to be shared across multiple workstations.
+
+        To get more information about WorkstationConfig, see:
+
+        * [API documentation](https://cloud.google.com/workstations/docs/reference/rest/v1beta/projects.locations.workstationClusters.workstationConfigs/create)
+        * How-to Guides
+            * [Workstations](https://cloud.google.com/workstations/docs/)
+
         ## Example Usage
 
         ### Workstation Config Basic

pulumi_gcp/workstations/workstation_config_iam_binding.py

@@ -345,6 +345,136 @@ class WorkstationConfigIamBinding(pulumi.CustomResource):
                  workstation_config_id: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
         """
+        Three different resources help you manage your IAM policy for Cloud Workstations WorkstationConfig. Each of these resources serves a different use case:
+
+        * `workstations.WorkstationConfigIamPolicy`: Authoritative. Sets the IAM policy for the workstationconfig and replaces any existing policy already attached.
+        * `workstations.WorkstationConfigIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the workstationconfig are preserved.
+        * `workstations.WorkstationConfigIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the workstationconfig are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `workstations.WorkstationConfigIamPolicy`: Retrieves the IAM policy for the workstationconfig
+
+        > **Note:** `workstations.WorkstationConfigIamPolicy` **cannot** be used in conjunction with `workstations.WorkstationConfigIamBinding` and `workstations.WorkstationConfigIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `workstations.WorkstationConfigIamBinding` resources **can be** used in conjunction with `workstations.WorkstationConfigIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## workstations.WorkstationConfigIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.workstations.WorkstationConfigIamPolicy("policy",
+            project=default["project"],
+            location=default["location"],
+            workstation_cluster_id=default["workstationClusterId"],
+            workstation_config_id=default["workstationConfigId"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## workstations.WorkstationConfigIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.workstations.WorkstationConfigIamBinding("binding",
+            project=default["project"],
+            location=default["location"],
+            workstation_cluster_id=default["workstationClusterId"],
+            workstation_config_id=default["workstationConfigId"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+
+        ## workstations.WorkstationConfigIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.workstations.WorkstationConfigIamMember("member",
+            project=default["project"],
+            location=default["location"],
+            workstation_cluster_id=default["workstationClusterId"],
+            workstation_config_id=default["workstationConfigId"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Cloud Workstations WorkstationConfig
+
+        Three different resources help you manage your IAM policy for Cloud Workstations WorkstationConfig. Each of these resources serves a different use case:
+
+        * `workstations.WorkstationConfigIamPolicy`: Authoritative. Sets the IAM policy for the workstationconfig and replaces any existing policy already attached.
+        * `workstations.WorkstationConfigIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the workstationconfig are preserved.
+        * `workstations.WorkstationConfigIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the workstationconfig are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `workstations.WorkstationConfigIamPolicy`: Retrieves the IAM policy for the workstationconfig
+
+        > **Note:** `workstations.WorkstationConfigIamPolicy` **cannot** be used in conjunction with `workstations.WorkstationConfigIamBinding` and `workstations.WorkstationConfigIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `workstations.WorkstationConfigIamBinding` resources **can be** used in conjunction with `workstations.WorkstationConfigIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## workstations.WorkstationConfigIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.workstations.WorkstationConfigIamPolicy("policy",
+            project=default["project"],
+            location=default["location"],
+            workstation_cluster_id=default["workstationClusterId"],
+            workstation_config_id=default["workstationConfigId"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## workstations.WorkstationConfigIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.workstations.WorkstationConfigIamBinding("binding",
+            project=default["project"],
+            location=default["location"],
+            workstation_cluster_id=default["workstationClusterId"],
+            workstation_config_id=default["workstationConfigId"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+
+        ## workstations.WorkstationConfigIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.workstations.WorkstationConfigIamMember("member",
+            project=default["project"],
+            location=default["location"],
+            workstation_cluster_id=default["workstationClusterId"],
+            workstation_config_id=default["workstationConfigId"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms:
@@ -416,6 +546,136 @@ class WorkstationConfigIamBinding(pulumi.CustomResource):
                  args: WorkstationConfigIamBindingArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        Three different resources help you manage your IAM policy for Cloud Workstations WorkstationConfig. Each of these resources serves a different use case:
+
+        * `workstations.WorkstationConfigIamPolicy`: Authoritative. Sets the IAM policy for the workstationconfig and replaces any existing policy already attached.
+        * `workstations.WorkstationConfigIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the workstationconfig are preserved.
+        * `workstations.WorkstationConfigIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the workstationconfig are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `workstations.WorkstationConfigIamPolicy`: Retrieves the IAM policy for the workstationconfig
+
+        > **Note:** `workstations.WorkstationConfigIamPolicy` **cannot** be used in conjunction with `workstations.WorkstationConfigIamBinding` and `workstations.WorkstationConfigIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `workstations.WorkstationConfigIamBinding` resources **can be** used in conjunction with `workstations.WorkstationConfigIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## workstations.WorkstationConfigIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.workstations.WorkstationConfigIamPolicy("policy",
+            project=default["project"],
+            location=default["location"],
+            workstation_cluster_id=default["workstationClusterId"],
+            workstation_config_id=default["workstationConfigId"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## workstations.WorkstationConfigIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.workstations.WorkstationConfigIamBinding("binding",
+            project=default["project"],
+            location=default["location"],
+            workstation_cluster_id=default["workstationClusterId"],
+            workstation_config_id=default["workstationConfigId"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+
+        ## workstations.WorkstationConfigIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.workstations.WorkstationConfigIamMember("member",
+            project=default["project"],
+            location=default["location"],
+            workstation_cluster_id=default["workstationClusterId"],
+            workstation_config_id=default["workstationConfigId"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Cloud Workstations WorkstationConfig
+
+        Three different resources help you manage your IAM policy for Cloud Workstations WorkstationConfig. Each of these resources serves a different use case:
+
+        * `workstations.WorkstationConfigIamPolicy`: Authoritative. Sets the IAM policy for the workstationconfig and replaces any existing policy already attached.
+        * `workstations.WorkstationConfigIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the workstationconfig are preserved.
+        * `workstations.WorkstationConfigIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the workstationconfig are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `workstations.WorkstationConfigIamPolicy`: Retrieves the IAM policy for the workstationconfig
+
+        > **Note:** `workstations.WorkstationConfigIamPolicy` **cannot** be used in conjunction with `workstations.WorkstationConfigIamBinding` and `workstations.WorkstationConfigIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `workstations.WorkstationConfigIamBinding` resources **can be** used in conjunction with `workstations.WorkstationConfigIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## workstations.WorkstationConfigIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.workstations.WorkstationConfigIamPolicy("policy",
+            project=default["project"],
+            location=default["location"],
+            workstation_cluster_id=default["workstationClusterId"],
+            workstation_config_id=default["workstationConfigId"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## workstations.WorkstationConfigIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.workstations.WorkstationConfigIamBinding("binding",
+            project=default["project"],
+            location=default["location"],
+            workstation_cluster_id=default["workstationClusterId"],
+            workstation_config_id=default["workstationConfigId"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+
+        ## workstations.WorkstationConfigIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.workstations.WorkstationConfigIamMember("member",
+            project=default["project"],
+            location=default["location"],
+            workstation_cluster_id=default["workstationClusterId"],
+            workstation_config_id=default["workstationConfigId"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms: