pulumi-gcp 9.0.0a1__py3-none-any.whl → 9.0.0a1758219982__py3-none-any.whl

pulumi_gcp/compute/backend_bucket.py

@@ -44,8 +44,10 @@ class BackendBucketArgs:
                client when the resource is created.
         :param pulumi.Input[_builtins.str] edge_security_policy: The security policy associated with this backend bucket.
         :param pulumi.Input[_builtins.bool] enable_cdn: If true, enable Cloud CDN for this BackendBucket.
+               Note: This cannot be set to true when loadBalancingScheme is set to INTERNAL_MANAGED.
         :param pulumi.Input[_builtins.str] load_balancing_scheme: The value can only be INTERNAL_MANAGED for cross-region internal layer 7 load balancer.
                If loadBalancingScheme is not specified, the backend bucket can be used by classic global external load balancers, or global application external load balancers, or both.
+               Important: CDN cannot be enabled (enableCdn cannot be set to true) when loadBalancingScheme is set to INTERNAL_MANAGED.
                Possible values are: `INTERNAL_MANAGED`.
         :param pulumi.Input[_builtins.str] name: Name of the resource. Provided by the client when the resource is
                created. The name must be 1-63 characters long, and comply with
@@ -161,6 +163,7 @@ class BackendBucketArgs:
     def enable_cdn(self) -> Optional[pulumi.Input[_builtins.bool]]:
         """
         If true, enable Cloud CDN for this BackendBucket.
+        Note: This cannot be set to true when loadBalancingScheme is set to INTERNAL_MANAGED.
         """
         return pulumi.get(self, "enable_cdn")
 
@@ -174,6 +177,7 @@ class BackendBucketArgs:
         """
         The value can only be INTERNAL_MANAGED for cross-region internal layer 7 load balancer.
         If loadBalancingScheme is not specified, the backend bucket can be used by classic global external load balancers, or global application external load balancers, or both.
+        Important: CDN cannot be enabled (enableCdn cannot be set to true) when loadBalancingScheme is set to INTERNAL_MANAGED.
         Possible values are: `INTERNAL_MANAGED`.
         """
         return pulumi.get(self, "load_balancing_scheme")
@@ -256,8 +260,10 @@ class _BackendBucketState:
                client when the resource is created.
         :param pulumi.Input[_builtins.str] edge_security_policy: The security policy associated with this backend bucket.
         :param pulumi.Input[_builtins.bool] enable_cdn: If true, enable Cloud CDN for this BackendBucket.
+               Note: This cannot be set to true when loadBalancingScheme is set to INTERNAL_MANAGED.
         :param pulumi.Input[_builtins.str] load_balancing_scheme: The value can only be INTERNAL_MANAGED for cross-region internal layer 7 load balancer.
                If loadBalancingScheme is not specified, the backend bucket can be used by classic global external load balancers, or global application external load balancers, or both.
+               Important: CDN cannot be enabled (enableCdn cannot be set to true) when loadBalancingScheme is set to INTERNAL_MANAGED.
                Possible values are: `INTERNAL_MANAGED`.
         :param pulumi.Input[_builtins.str] name: Name of the resource. Provided by the client when the resource is
                created. The name must be 1-63 characters long, and comply with
@@ -391,6 +397,7 @@ class _BackendBucketState:
     def enable_cdn(self) -> Optional[pulumi.Input[_builtins.bool]]:
         """
         If true, enable Cloud CDN for this BackendBucket.
+        Note: This cannot be set to true when loadBalancingScheme is set to INTERNAL_MANAGED.
         """
         return pulumi.get(self, "enable_cdn")
 
@@ -404,6 +411,7 @@ class _BackendBucketState:
         """
         The value can only be INTERNAL_MANAGED for cross-region internal layer 7 load balancer.
         If loadBalancingScheme is not specified, the backend bucket can be used by classic global external load balancers, or global application external load balancers, or both.
+        Important: CDN cannot be enabled (enableCdn cannot be set to true) when loadBalancingScheme is set to INTERNAL_MANAGED.
         Possible values are: `INTERNAL_MANAGED`.
         """
         return pulumi.get(self, "load_balancing_scheme")
@@ -616,8 +624,10 @@ class BackendBucket(pulumi.CustomResource):
                client when the resource is created.
         :param pulumi.Input[_builtins.str] edge_security_policy: The security policy associated with this backend bucket.
         :param pulumi.Input[_builtins.bool] enable_cdn: If true, enable Cloud CDN for this BackendBucket.
+               Note: This cannot be set to true when loadBalancingScheme is set to INTERNAL_MANAGED.
         :param pulumi.Input[_builtins.str] load_balancing_scheme: The value can only be INTERNAL_MANAGED for cross-region internal layer 7 load balancer.
                If loadBalancingScheme is not specified, the backend bucket can be used by classic global external load balancers, or global application external load balancers, or both.
+               Important: CDN cannot be enabled (enableCdn cannot be set to true) when loadBalancingScheme is set to INTERNAL_MANAGED.
                Possible values are: `INTERNAL_MANAGED`.
         :param pulumi.Input[_builtins.str] name: Name of the resource. Provided by the client when the resource is
                created. The name must be 1-63 characters long, and comply with
@@ -845,8 +855,10 @@ class BackendBucket(pulumi.CustomResource):
                client when the resource is created.
         :param pulumi.Input[_builtins.str] edge_security_policy: The security policy associated with this backend bucket.
         :param pulumi.Input[_builtins.bool] enable_cdn: If true, enable Cloud CDN for this BackendBucket.
+               Note: This cannot be set to true when loadBalancingScheme is set to INTERNAL_MANAGED.
         :param pulumi.Input[_builtins.str] load_balancing_scheme: The value can only be INTERNAL_MANAGED for cross-region internal layer 7 load balancer.
                If loadBalancingScheme is not specified, the backend bucket can be used by classic global external load balancers, or global application external load balancers, or both.
+               Important: CDN cannot be enabled (enableCdn cannot be set to true) when loadBalancingScheme is set to INTERNAL_MANAGED.
                Possible values are: `INTERNAL_MANAGED`.
         :param pulumi.Input[_builtins.str] name: Name of the resource. Provided by the client when the resource is
                created. The name must be 1-63 characters long, and comply with
@@ -944,6 +956,7 @@ class BackendBucket(pulumi.CustomResource):
     def enable_cdn(self) -> pulumi.Output[Optional[_builtins.bool]]:
         """
         If true, enable Cloud CDN for this BackendBucket.
+        Note: This cannot be set to true when loadBalancingScheme is set to INTERNAL_MANAGED.
         """
         return pulumi.get(self, "enable_cdn")
 
@@ -953,6 +966,7 @@ class BackendBucket(pulumi.CustomResource):
         """
         The value can only be INTERNAL_MANAGED for cross-region internal layer 7 load balancer.
         If loadBalancingScheme is not specified, the backend bucket can be used by classic global external load balancers, or global application external load balancers, or both.
+        Important: CDN cannot be enabled (enableCdn cannot be set to true) when loadBalancingScheme is set to INTERNAL_MANAGED.
         Possible values are: `INTERNAL_MANAGED`.
         """
         return pulumi.get(self, "load_balancing_scheme")

pulumi_gcp/compute/backend_bucket_iam_binding.py

@@ -265,6 +265,124 @@ class BackendBucketIamBinding(pulumi.CustomResource):
                  role: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
         """
+        Three different resources help you manage your IAM policy for Compute Engine BackendBucket. Each of these resources serves a different use case:
+
+        * `compute.BackendBucketIamPolicy`: Authoritative. Sets the IAM policy for the backendbucket and replaces any existing policy already attached.
+        * `compute.BackendBucketIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the backendbucket are preserved.
+        * `compute.BackendBucketIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the backendbucket are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.BackendBucketIamPolicy`: Retrieves the IAM policy for the backendbucket
+
+        > **Note:** `compute.BackendBucketIamPolicy` **cannot** be used in conjunction with `compute.BackendBucketIamBinding` and `compute.BackendBucketIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.BackendBucketIamBinding` resources **can be** used in conjunction with `compute.BackendBucketIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## compute.BackendBucketIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.compute.BackendBucketIamPolicy("policy",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## compute.BackendBucketIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.compute.BackendBucketIamBinding("binding",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+
+        ## compute.BackendBucketIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.compute.BackendBucketIamMember("member",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine BackendBucket
+
+        Three different resources help you manage your IAM policy for Compute Engine BackendBucket. Each of these resources serves a different use case:
+
+        * `compute.BackendBucketIamPolicy`: Authoritative. Sets the IAM policy for the backendbucket and replaces any existing policy already attached.
+        * `compute.BackendBucketIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the backendbucket are preserved.
+        * `compute.BackendBucketIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the backendbucket are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.BackendBucketIamPolicy`: Retrieves the IAM policy for the backendbucket
+
+        > **Note:** `compute.BackendBucketIamPolicy` **cannot** be used in conjunction with `compute.BackendBucketIamBinding` and `compute.BackendBucketIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.BackendBucketIamBinding` resources **can be** used in conjunction with `compute.BackendBucketIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## compute.BackendBucketIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.compute.BackendBucketIamPolicy("policy",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## compute.BackendBucketIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.compute.BackendBucketIamBinding("binding",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+
+        ## compute.BackendBucketIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.compute.BackendBucketIamMember("member",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms:
@@ -328,6 +446,124 @@ class BackendBucketIamBinding(pulumi.CustomResource):
                  args: BackendBucketIamBindingArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        Three different resources help you manage your IAM policy for Compute Engine BackendBucket. Each of these resources serves a different use case:
+
+        * `compute.BackendBucketIamPolicy`: Authoritative. Sets the IAM policy for the backendbucket and replaces any existing policy already attached.
+        * `compute.BackendBucketIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the backendbucket are preserved.
+        * `compute.BackendBucketIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the backendbucket are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.BackendBucketIamPolicy`: Retrieves the IAM policy for the backendbucket
+
+        > **Note:** `compute.BackendBucketIamPolicy` **cannot** be used in conjunction with `compute.BackendBucketIamBinding` and `compute.BackendBucketIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.BackendBucketIamBinding` resources **can be** used in conjunction with `compute.BackendBucketIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## compute.BackendBucketIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.compute.BackendBucketIamPolicy("policy",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## compute.BackendBucketIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.compute.BackendBucketIamBinding("binding",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+
+        ## compute.BackendBucketIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.compute.BackendBucketIamMember("member",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine BackendBucket
+
+        Three different resources help you manage your IAM policy for Compute Engine BackendBucket. Each of these resources serves a different use case:
+
+        * `compute.BackendBucketIamPolicy`: Authoritative. Sets the IAM policy for the backendbucket and replaces any existing policy already attached.
+        * `compute.BackendBucketIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the backendbucket are preserved.
+        * `compute.BackendBucketIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the backendbucket are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.BackendBucketIamPolicy`: Retrieves the IAM policy for the backendbucket
+
+        > **Note:** `compute.BackendBucketIamPolicy` **cannot** be used in conjunction with `compute.BackendBucketIamBinding` and `compute.BackendBucketIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.BackendBucketIamBinding` resources **can be** used in conjunction with `compute.BackendBucketIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## compute.BackendBucketIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.compute.BackendBucketIamPolicy("policy",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## compute.BackendBucketIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.compute.BackendBucketIamBinding("binding",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+
+        ## compute.BackendBucketIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.compute.BackendBucketIamMember("member",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms:

pulumi_gcp/compute/backend_bucket_iam_member.py

@@ -265,6 +265,124 @@ class BackendBucketIamMember(pulumi.CustomResource):
                  role: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
         """
+        Three different resources help you manage your IAM policy for Compute Engine BackendBucket. Each of these resources serves a different use case:
+
+        * `compute.BackendBucketIamPolicy`: Authoritative. Sets the IAM policy for the backendbucket and replaces any existing policy already attached.
+        * `compute.BackendBucketIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the backendbucket are preserved.
+        * `compute.BackendBucketIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the backendbucket are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.BackendBucketIamPolicy`: Retrieves the IAM policy for the backendbucket
+
+        > **Note:** `compute.BackendBucketIamPolicy` **cannot** be used in conjunction with `compute.BackendBucketIamBinding` and `compute.BackendBucketIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.BackendBucketIamBinding` resources **can be** used in conjunction with `compute.BackendBucketIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## compute.BackendBucketIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.compute.BackendBucketIamPolicy("policy",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## compute.BackendBucketIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.compute.BackendBucketIamBinding("binding",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+
+        ## compute.BackendBucketIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.compute.BackendBucketIamMember("member",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine BackendBucket
+
+        Three different resources help you manage your IAM policy for Compute Engine BackendBucket. Each of these resources serves a different use case:
+
+        * `compute.BackendBucketIamPolicy`: Authoritative. Sets the IAM policy for the backendbucket and replaces any existing policy already attached.
+        * `compute.BackendBucketIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the backendbucket are preserved.
+        * `compute.BackendBucketIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the backendbucket are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.BackendBucketIamPolicy`: Retrieves the IAM policy for the backendbucket
+
+        > **Note:** `compute.BackendBucketIamPolicy` **cannot** be used in conjunction with `compute.BackendBucketIamBinding` and `compute.BackendBucketIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.BackendBucketIamBinding` resources **can be** used in conjunction with `compute.BackendBucketIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## compute.BackendBucketIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.compute.BackendBucketIamPolicy("policy",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## compute.BackendBucketIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.compute.BackendBucketIamBinding("binding",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+
+        ## compute.BackendBucketIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.compute.BackendBucketIamMember("member",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms:
@@ -328,6 +446,124 @@ class BackendBucketIamMember(pulumi.CustomResource):
                  args: BackendBucketIamMemberArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        Three different resources help you manage your IAM policy for Compute Engine BackendBucket. Each of these resources serves a different use case:
+
+        * `compute.BackendBucketIamPolicy`: Authoritative. Sets the IAM policy for the backendbucket and replaces any existing policy already attached.
+        * `compute.BackendBucketIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the backendbucket are preserved.
+        * `compute.BackendBucketIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the backendbucket are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.BackendBucketIamPolicy`: Retrieves the IAM policy for the backendbucket
+
+        > **Note:** `compute.BackendBucketIamPolicy` **cannot** be used in conjunction with `compute.BackendBucketIamBinding` and `compute.BackendBucketIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.BackendBucketIamBinding` resources **can be** used in conjunction with `compute.BackendBucketIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## compute.BackendBucketIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.compute.BackendBucketIamPolicy("policy",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## compute.BackendBucketIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.compute.BackendBucketIamBinding("binding",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+
+        ## compute.BackendBucketIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.compute.BackendBucketIamMember("member",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for Compute Engine BackendBucket
+
+        Three different resources help you manage your IAM policy for Compute Engine BackendBucket. Each of these resources serves a different use case:
+
+        * `compute.BackendBucketIamPolicy`: Authoritative. Sets the IAM policy for the backendbucket and replaces any existing policy already attached.
+        * `compute.BackendBucketIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the backendbucket are preserved.
+        * `compute.BackendBucketIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the backendbucket are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `compute.BackendBucketIamPolicy`: Retrieves the IAM policy for the backendbucket
+
+        > **Note:** `compute.BackendBucketIamPolicy` **cannot** be used in conjunction with `compute.BackendBucketIamBinding` and `compute.BackendBucketIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `compute.BackendBucketIamBinding` resources **can be** used in conjunction with `compute.BackendBucketIamMember` resources **only if** they do not grant privilege to the same role.
+
+        ## compute.BackendBucketIamPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
+        policy = gcp.compute.BackendBucketIamPolicy("policy",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            policy_data=admin.policy_data)
+        ```
+
+        ## compute.BackendBucketIamBinding
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        binding = gcp.compute.BackendBucketIamBinding("binding",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            members=["user:jane@example.com"])
+        ```
+
+        ## compute.BackendBucketIamMember
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        member = gcp.compute.BackendBucketIamMember("member",
+            project=image_backend["project"],
+            name=image_backend["name"],
+            role="roles/viewer",
+            member="user:jane@example.com")
+        ```
+
         ## Import
 
         For all import syntaxes, the "resource in question" can take any of the following forms: