pulumi-gcp 9.3.0a1759561069__py3-none-any.whl → 9.4.0a1759906655__py3-none-any.whl

pulumi_gcp/vertex/ai_endpoint_with_model_garden_deployment.py

@@ -531,6 +531,57 @@ class AiEndpointWithModelGardenDeployment(pulumi.CustomResource):
             },
             opts = pulumi.ResourceOptions(depends_on=[deploy_qwen3_06b]))
         ```
+        ### Vertex Ai Deploy Psc Endpoint
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        deploy = gcp.vertex.AiEndpointWithModelGardenDeployment("deploy",
+            publisher_model_name="publishers/google/models/paligemma@paligemma-224-float32",
+            location="us-central1",
+            model_config={
+                "accept_eula": True,
+            },
+            endpoint_config={
+                "private_service_connect_config": {
+                    "enable_private_service_connect": True,
+                    "project_allowlists": ["my-project-id"],
+                },
+            })
+        ```
+        ### Vertex Ai Deploy Psc Endpoint Automated
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        network = gcp.compute.Network("network",
+            name="network",
+            auto_create_subnetworks=False)
+        project = gcp.organizations.get_project()
+        deploy = gcp.vertex.AiEndpointWithModelGardenDeployment("deploy",
+            publisher_model_name="publishers/google/models/paligemma@paligemma-224-float32",
+            location="us-central1",
+            model_config={
+                "accept_eula": True,
+            },
+            endpoint_config={
+                "private_service_connect_config": {
+                    "enable_private_service_connect": True,
+                    "project_allowlists": [project.id],
+                    "psc_automation_configs": {
+                        "project_id": project.id,
+                        "network": network.id,
+                    },
+                },
+            })
+        subnetwork = gcp.compute.Subnetwork("subnetwork",
+            name="subnetwork",
+            ip_cidr_range="192.168.0.0/24",
+            region="us-central1",
+            network=network.id)
+        ```
 
         ## Import
 
@@ -734,6 +785,57 @@ class AiEndpointWithModelGardenDeployment(pulumi.CustomResource):
             },
             opts = pulumi.ResourceOptions(depends_on=[deploy_qwen3_06b]))
         ```
+        ### Vertex Ai Deploy Psc Endpoint
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        deploy = gcp.vertex.AiEndpointWithModelGardenDeployment("deploy",
+            publisher_model_name="publishers/google/models/paligemma@paligemma-224-float32",
+            location="us-central1",
+            model_config={
+                "accept_eula": True,
+            },
+            endpoint_config={
+                "private_service_connect_config": {
+                    "enable_private_service_connect": True,
+                    "project_allowlists": ["my-project-id"],
+                },
+            })
+        ```
+        ### Vertex Ai Deploy Psc Endpoint Automated
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        network = gcp.compute.Network("network",
+            name="network",
+            auto_create_subnetworks=False)
+        project = gcp.organizations.get_project()
+        deploy = gcp.vertex.AiEndpointWithModelGardenDeployment("deploy",
+            publisher_model_name="publishers/google/models/paligemma@paligemma-224-float32",
+            location="us-central1",
+            model_config={
+                "accept_eula": True,
+            },
+            endpoint_config={
+                "private_service_connect_config": {
+                    "enable_private_service_connect": True,
+                    "project_allowlists": [project.id],
+                    "psc_automation_configs": {
+                        "project_id": project.id,
+                        "network": network.id,
+                    },
+                },
+            })
+        subnetwork = gcp.compute.Subnetwork("subnetwork",
+            name="subnetwork",
+            ip_cidr_range="192.168.0.0/24",
+            region="us-central1",
+            network=network.id)
+        ```
 
         ## Import
 

pulumi_gcp/vertex/ai_feature_online_store_featureview.py

@@ -608,8 +608,8 @@ class AiFeatureOnlineStoreFeatureview(pulumi.CustomResource):
 
         test_project = gcp.organizations.get_project()
         project = gcp.organizations.Project("project",
-            project_id="tf-test_21563",
-            name="tf-test_25141",
+            project_id="tf-test_20665",
+            name="tf-test_85160",
             org_id="123456789",
             billing_account="000000-0000000-0000000-000000",
             deletion_policy="DELETE")
@@ -1043,8 +1043,8 @@ class AiFeatureOnlineStoreFeatureview(pulumi.CustomResource):
 
         test_project = gcp.organizations.get_project()
         project = gcp.organizations.Project("project",
-            project_id="tf-test_21563",
-            name="tf-test_25141",
+            project_id="tf-test_20665",
+            name="tf-test_85160",
             org_id="123456789",
             billing_account="000000-0000000-0000000-000000",
             deletion_policy="DELETE")

pulumi_gcp/vertex/ai_index.py

@@ -24,6 +24,7 @@ class AiIndexArgs:
                  display_name: pulumi.Input[_builtins.str],
                  metadata: pulumi.Input['AiIndexMetadataArgs'],
                  description: Optional[pulumi.Input[_builtins.str]] = None,
+                 encryption_spec: Optional[pulumi.Input['AiIndexEncryptionSpecArgs']] = None,
                  index_update_method: Optional[pulumi.Input[_builtins.str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
@@ -36,6 +37,8 @@ class AiIndexArgs:
                Attempts to create an Index without this field will result in an API error.
                Structure is documented below.
         :param pulumi.Input[_builtins.str] description: The description of the Index.
+        :param pulumi.Input['AiIndexEncryptionSpecArgs'] encryption_spec: Customer-managed encryption key spec for an Index. If set, this Index and all sub-resources of this Index will be secured by this key.
+               Structure is documented below.
         :param pulumi.Input[_builtins.str] index_update_method: The update method to use with this Index. The value must be the followings. If not set, BATCH_UPDATE will be used by default.
                * BATCH_UPDATE: user can call indexes.patch with files on Cloud Storage of datapoints to update.
                * STREAM_UPDATE: user can call indexes.upsertDatapoints/DeleteDatapoints to update the Index and the updates will be applied in corresponding DeployedIndexes in nearly real-time.
@@ -50,6 +53,8 @@ class AiIndexArgs:
         pulumi.set(__self__, "metadata", metadata)
         if description is not None:
             pulumi.set(__self__, "description", description)
+        if encryption_spec is not None:
+            pulumi.set(__self__, "encryption_spec", encryption_spec)
         if index_update_method is not None:
             pulumi.set(__self__, "index_update_method", index_update_method)
         if labels is not None:
@@ -98,6 +103,19 @@ class AiIndexArgs:
     def description(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "description", value)
 
+    @_builtins.property
+    @pulumi.getter(name="encryptionSpec")
+    def encryption_spec(self) -> Optional[pulumi.Input['AiIndexEncryptionSpecArgs']]:
+        """
+        Customer-managed encryption key spec for an Index. If set, this Index and all sub-resources of this Index will be secured by this key.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "encryption_spec")
+
+    @encryption_spec.setter
+    def encryption_spec(self, value: Optional[pulumi.Input['AiIndexEncryptionSpecArgs']]):
+        pulumi.set(self, "encryption_spec", value)
+
     @_builtins.property
     @pulumi.getter(name="indexUpdateMethod")
     def index_update_method(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -160,6 +178,7 @@ class _AiIndexState:
                  description: Optional[pulumi.Input[_builtins.str]] = None,
                  display_name: Optional[pulumi.Input[_builtins.str]] = None,
                  effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
+                 encryption_spec: Optional[pulumi.Input['AiIndexEncryptionSpecArgs']] = None,
                  etag: Optional[pulumi.Input[_builtins.str]] = None,
                  index_stats: Optional[pulumi.Input[Sequence[pulumi.Input['AiIndexIndexStatArgs']]]] = None,
                  index_update_method: Optional[pulumi.Input[_builtins.str]] = None,
@@ -179,6 +198,8 @@ class _AiIndexState:
         :param pulumi.Input[_builtins.str] description: The description of the Index.
         :param pulumi.Input[_builtins.str] display_name: The display name of the Index. The name can be up to 128 characters long and can consist of any UTF-8 characters.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
+        :param pulumi.Input['AiIndexEncryptionSpecArgs'] encryption_spec: Customer-managed encryption key spec for an Index. If set, this Index and all sub-resources of this Index will be secured by this key.
+               Structure is documented below.
         :param pulumi.Input[_builtins.str] etag: Used to perform consistent read-modify-write updates.
         :param pulumi.Input[Sequence[pulumi.Input['AiIndexIndexStatArgs']]] index_stats: Stats of the index resource.
                Structure is documented below.
@@ -211,6 +232,8 @@ class _AiIndexState:
             pulumi.set(__self__, "display_name", display_name)
         if effective_labels is not None:
             pulumi.set(__self__, "effective_labels", effective_labels)
+        if encryption_spec is not None:
+            pulumi.set(__self__, "encryption_spec", encryption_spec)
         if etag is not None:
             pulumi.set(__self__, "etag", etag)
         if index_stats is not None:
@@ -295,6 +318,19 @@ class _AiIndexState:
     def effective_labels(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]):
         pulumi.set(self, "effective_labels", value)
 
+    @_builtins.property
+    @pulumi.getter(name="encryptionSpec")
+    def encryption_spec(self) -> Optional[pulumi.Input['AiIndexEncryptionSpecArgs']]:
+        """
+        Customer-managed encryption key spec for an Index. If set, this Index and all sub-resources of this Index will be secured by this key.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "encryption_spec")
+
+    @encryption_spec.setter
+    def encryption_spec(self, value: Optional[pulumi.Input['AiIndexEncryptionSpecArgs']]):
+        pulumi.set(self, "encryption_spec", value)
+
     @_builtins.property
     @pulumi.getter
     def etag(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -446,6 +482,7 @@ class AiIndex(pulumi.CustomResource):
                  opts: Optional[pulumi.ResourceOptions] = None,
                  description: Optional[pulumi.Input[_builtins.str]] = None,
                  display_name: Optional[pulumi.Input[_builtins.str]] = None,
+                 encryption_spec: Optional[pulumi.Input[Union['AiIndexEncryptionSpecArgs', 'AiIndexEncryptionSpecArgsDict']]] = None,
                  index_update_method: Optional[pulumi.Input[_builtins.str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
                  metadata: Optional[pulumi.Input[Union['AiIndexMetadataArgs', 'AiIndexMetadataArgsDict']]] = None,
@@ -467,6 +504,7 @@ class AiIndex(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
+        vertexai_sa = gcp.projects.ServiceIdentity("vertexai_sa", service="aiplatform.googleapis.com")
         bucket = gcp.storage.Bucket("bucket",
             name="vertex-ai-index-test",
             location="us-central1",
@@ -479,6 +517,10 @@ class AiIndex(pulumi.CustomResource):
             content=\"\"\"{"id": "42", "embedding": [0.5, 1.0], "restricts": [{"namespace": "class", "allow": ["cat", "pet"]},{"namespace": "category", "allow": ["feline"]}]}
         {"id": "43", "embedding": [0.6, 1.0], "restricts": [{"namespace": "class", "allow": ["dog", "pet"]},{"namespace": "category", "allow": ["canine"]}]}
         \"\"\")
+        vertexai_encrypterdecrypter = gcp.kms.CryptoKeyIAMMember("vertexai_encrypterdecrypter",
+            crypto_key_id="kms-name",
+            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
+            member=vertexai_sa.member)
         index = gcp.vertex.AiIndex("index",
             labels={
                 "foo": "bar",
@@ -501,7 +543,11 @@ class AiIndex(pulumi.CustomResource):
                     },
                 },
             },
-            index_update_method="BATCH_UPDATE")
+            encryption_spec={
+                "kms_key_name": "kms-name",
+            },
+            index_update_method="BATCH_UPDATE",
+            opts = pulumi.ResourceOptions(depends_on=[vertexai_encrypterdecrypter]))
         ```
         ### Vertex Ai Index Streaming
 
@@ -577,6 +623,8 @@ class AiIndex(pulumi.CustomResource):
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[_builtins.str] description: The description of the Index.
         :param pulumi.Input[_builtins.str] display_name: The display name of the Index. The name can be up to 128 characters long and can consist of any UTF-8 characters.
+        :param pulumi.Input[Union['AiIndexEncryptionSpecArgs', 'AiIndexEncryptionSpecArgsDict']] encryption_spec: Customer-managed encryption key spec for an Index. If set, this Index and all sub-resources of this Index will be secured by this key.
+               Structure is documented below.
         :param pulumi.Input[_builtins.str] index_update_method: The update method to use with this Index. The value must be the followings. If not set, BATCH_UPDATE will be used by default.
                * BATCH_UPDATE: user can call indexes.patch with files on Cloud Storage of datapoints to update.
                * STREAM_UPDATE: user can call indexes.upsertDatapoints/DeleteDatapoints to update the Index and the updates will be applied in corresponding DeployedIndexes in nearly real-time.
@@ -612,6 +660,7 @@ class AiIndex(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
+        vertexai_sa = gcp.projects.ServiceIdentity("vertexai_sa", service="aiplatform.googleapis.com")
         bucket = gcp.storage.Bucket("bucket",
             name="vertex-ai-index-test",
             location="us-central1",
@@ -624,6 +673,10 @@ class AiIndex(pulumi.CustomResource):
             content=\"\"\"{"id": "42", "embedding": [0.5, 1.0], "restricts": [{"namespace": "class", "allow": ["cat", "pet"]},{"namespace": "category", "allow": ["feline"]}]}
         {"id": "43", "embedding": [0.6, 1.0], "restricts": [{"namespace": "class", "allow": ["dog", "pet"]},{"namespace": "category", "allow": ["canine"]}]}
         \"\"\")
+        vertexai_encrypterdecrypter = gcp.kms.CryptoKeyIAMMember("vertexai_encrypterdecrypter",
+            crypto_key_id="kms-name",
+            role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
+            member=vertexai_sa.member)
         index = gcp.vertex.AiIndex("index",
             labels={
                 "foo": "bar",
@@ -646,7 +699,11 @@ class AiIndex(pulumi.CustomResource):
                     },
                 },
             },
-            index_update_method="BATCH_UPDATE")
+            encryption_spec={
+                "kms_key_name": "kms-name",
+            },
+            index_update_method="BATCH_UPDATE",
+            opts = pulumi.ResourceOptions(depends_on=[vertexai_encrypterdecrypter]))
         ```
         ### Vertex Ai Index Streaming
 
@@ -735,6 +792,7 @@ class AiIndex(pulumi.CustomResource):
                  opts: Optional[pulumi.ResourceOptions] = None,
                  description: Optional[pulumi.Input[_builtins.str]] = None,
                  display_name: Optional[pulumi.Input[_builtins.str]] = None,
+                 encryption_spec: Optional[pulumi.Input[Union['AiIndexEncryptionSpecArgs', 'AiIndexEncryptionSpecArgsDict']]] = None,
                  index_update_method: Optional[pulumi.Input[_builtins.str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
                  metadata: Optional[pulumi.Input[Union['AiIndexMetadataArgs', 'AiIndexMetadataArgsDict']]] = None,
@@ -753,6 +811,7 @@ class AiIndex(pulumi.CustomResource):
             if display_name is None and not opts.urn:
                 raise TypeError("Missing required property 'display_name'")
             __props__.__dict__["display_name"] = display_name
+            __props__.__dict__["encryption_spec"] = encryption_spec
             __props__.__dict__["index_update_method"] = index_update_method
             __props__.__dict__["labels"] = labels
             if metadata is None and not opts.urn:
@@ -786,6 +845,7 @@ class AiIndex(pulumi.CustomResource):
             description: Optional[pulumi.Input[_builtins.str]] = None,
             display_name: Optional[pulumi.Input[_builtins.str]] = None,
             effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
+            encryption_spec: Optional[pulumi.Input[Union['AiIndexEncryptionSpecArgs', 'AiIndexEncryptionSpecArgsDict']]] = None,
             etag: Optional[pulumi.Input[_builtins.str]] = None,
             index_stats: Optional[pulumi.Input[Sequence[pulumi.Input[Union['AiIndexIndexStatArgs', 'AiIndexIndexStatArgsDict']]]]] = None,
             index_update_method: Optional[pulumi.Input[_builtins.str]] = None,
@@ -810,6 +870,8 @@ class AiIndex(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] description: The description of the Index.
         :param pulumi.Input[_builtins.str] display_name: The display name of the Index. The name can be up to 128 characters long and can consist of any UTF-8 characters.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
+        :param pulumi.Input[Union['AiIndexEncryptionSpecArgs', 'AiIndexEncryptionSpecArgsDict']] encryption_spec: Customer-managed encryption key spec for an Index. If set, this Index and all sub-resources of this Index will be secured by this key.
+               Structure is documented below.
         :param pulumi.Input[_builtins.str] etag: Used to perform consistent read-modify-write updates.
         :param pulumi.Input[Sequence[pulumi.Input[Union['AiIndexIndexStatArgs', 'AiIndexIndexStatArgsDict']]]] index_stats: Stats of the index resource.
                Structure is documented below.
@@ -841,6 +903,7 @@ class AiIndex(pulumi.CustomResource):
         __props__.__dict__["description"] = description
         __props__.__dict__["display_name"] = display_name
         __props__.__dict__["effective_labels"] = effective_labels
+        __props__.__dict__["encryption_spec"] = encryption_spec
         __props__.__dict__["etag"] = etag
         __props__.__dict__["index_stats"] = index_stats
         __props__.__dict__["index_update_method"] = index_update_method
@@ -895,6 +958,15 @@ class AiIndex(pulumi.CustomResource):
         """
         return pulumi.get(self, "effective_labels")
 
+    @_builtins.property
+    @pulumi.getter(name="encryptionSpec")
+    def encryption_spec(self) -> pulumi.Output[Optional['outputs.AiIndexEncryptionSpec']]:
+        """
+        Customer-managed encryption key spec for an Index. If set, this Index and all sub-resources of this Index will be secured by this key.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "encryption_spec")
+
     @_builtins.property
     @pulumi.getter
     def etag(self) -> pulumi.Output[_builtins.str]:

pulumi_gcp/vertex/ai_index_endpoint.py

@@ -23,6 +23,7 @@ class AiIndexEndpointArgs:
     def __init__(__self__, *,
                  display_name: pulumi.Input[_builtins.str],
                  description: Optional[pulumi.Input[_builtins.str]] = None,
+                 encryption_spec: Optional[pulumi.Input['AiIndexEndpointEncryptionSpecArgs']] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
                  network: Optional[pulumi.Input[_builtins.str]] = None,
                  private_service_connect_config: Optional[pulumi.Input['AiIndexEndpointPrivateServiceConnectConfigArgs']] = None,
@@ -33,6 +34,8 @@ class AiIndexEndpointArgs:
         The set of arguments for constructing a AiIndexEndpoint resource.
         :param pulumi.Input[_builtins.str] display_name: The display name of the Index. The name can be up to 128 characters long and can consist of any UTF-8 characters.
         :param pulumi.Input[_builtins.str] description: The description of the Index.
+        :param pulumi.Input['AiIndexEndpointEncryptionSpecArgs'] encryption_spec: Customer-managed encryption key spec for an IndexEndpoint. If set, this IndexEndpoint and all sub-resources of this IndexEndpoint will be secured by this key.
+               Structure is documented below.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] labels: The labels with user-defined metadata to organize your Indexes.
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
                Please refer to the field `effective_labels` for all of the labels present on the resource.
@@ -50,6 +53,8 @@ class AiIndexEndpointArgs:
         pulumi.set(__self__, "display_name", display_name)
         if description is not None:
             pulumi.set(__self__, "description", description)
+        if encryption_spec is not None:
+            pulumi.set(__self__, "encryption_spec", encryption_spec)
         if labels is not None:
             pulumi.set(__self__, "labels", labels)
         if network is not None:
@@ -87,6 +92,19 @@ class AiIndexEndpointArgs:
     def description(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "description", value)
 
+    @_builtins.property
+    @pulumi.getter(name="encryptionSpec")
+    def encryption_spec(self) -> Optional[pulumi.Input['AiIndexEndpointEncryptionSpecArgs']]:
+        """
+        Customer-managed encryption key spec for an IndexEndpoint. If set, this IndexEndpoint and all sub-resources of this IndexEndpoint will be secured by this key.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "encryption_spec")
+
+    @encryption_spec.setter
+    def encryption_spec(self, value: Optional[pulumi.Input['AiIndexEndpointEncryptionSpecArgs']]):
+        pulumi.set(self, "encryption_spec", value)
+
     @_builtins.property
     @pulumi.getter
     def labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]:
@@ -174,6 +192,7 @@ class _AiIndexEndpointState:
                  description: Optional[pulumi.Input[_builtins.str]] = None,
                  display_name: Optional[pulumi.Input[_builtins.str]] = None,
                  effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
+                 encryption_spec: Optional[pulumi.Input['AiIndexEndpointEncryptionSpecArgs']] = None,
                  etag: Optional[pulumi.Input[_builtins.str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
@@ -191,6 +210,8 @@ class _AiIndexEndpointState:
         :param pulumi.Input[_builtins.str] description: The description of the Index.
         :param pulumi.Input[_builtins.str] display_name: The display name of the Index. The name can be up to 128 characters long and can consist of any UTF-8 characters.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
+        :param pulumi.Input['AiIndexEndpointEncryptionSpecArgs'] encryption_spec: Customer-managed encryption key spec for an IndexEndpoint. If set, this IndexEndpoint and all sub-resources of this IndexEndpoint will be secured by this key.
+               Structure is documented below.
         :param pulumi.Input[_builtins.str] etag: Used to perform consistent read-modify-write updates.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] labels: The labels with user-defined metadata to organize your Indexes.
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
@@ -219,6 +240,8 @@ class _AiIndexEndpointState:
             pulumi.set(__self__, "display_name", display_name)
         if effective_labels is not None:
             pulumi.set(__self__, "effective_labels", effective_labels)
+        if encryption_spec is not None:
+            pulumi.set(__self__, "encryption_spec", encryption_spec)
         if etag is not None:
             pulumi.set(__self__, "etag", etag)
         if labels is not None:
@@ -290,6 +313,19 @@ class _AiIndexEndpointState:
     def effective_labels(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]):
         pulumi.set(self, "effective_labels", value)
 
+    @_builtins.property
+    @pulumi.getter(name="encryptionSpec")
+    def encryption_spec(self) -> Optional[pulumi.Input['AiIndexEndpointEncryptionSpecArgs']]:
+        """
+        Customer-managed encryption key spec for an IndexEndpoint. If set, this IndexEndpoint and all sub-resources of this IndexEndpoint will be secured by this key.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "encryption_spec")
+
+    @encryption_spec.setter
+    def encryption_spec(self, value: Optional[pulumi.Input['AiIndexEndpointEncryptionSpecArgs']]):
+        pulumi.set(self, "encryption_spec", value)
+
     @_builtins.property
     @pulumi.getter
     def etag(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -439,6 +475,7 @@ class AiIndexEndpoint(pulumi.CustomResource):
                  opts: Optional[pulumi.ResourceOptions] = None,
                  description: Optional[pulumi.Input[_builtins.str]] = None,
                  display_name: Optional[pulumi.Input[_builtins.str]] = None,
+                 encryption_spec: Optional[pulumi.Input[Union['AiIndexEndpointEncryptionSpecArgs', 'AiIndexEndpointEncryptionSpecArgsDict']]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
                  network: Optional[pulumi.Input[_builtins.str]] = None,
                  private_service_connect_config: Optional[pulumi.Input[Union['AiIndexEndpointPrivateServiceConnectConfigArgs', 'AiIndexEndpointPrivateServiceConnectConfigArgsDict']]] = None,
@@ -552,6 +589,8 @@ class AiIndexEndpoint(pulumi.CustomResource):
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[_builtins.str] description: The description of the Index.
         :param pulumi.Input[_builtins.str] display_name: The display name of the Index. The name can be up to 128 characters long and can consist of any UTF-8 characters.
+        :param pulumi.Input[Union['AiIndexEndpointEncryptionSpecArgs', 'AiIndexEndpointEncryptionSpecArgsDict']] encryption_spec: Customer-managed encryption key spec for an IndexEndpoint. If set, this IndexEndpoint and all sub-resources of this IndexEndpoint will be secured by this key.
+               Structure is documented below.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] labels: The labels with user-defined metadata to organize your Indexes.
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
                Please refer to the field `effective_labels` for all of the labels present on the resource.
@@ -691,6 +730,7 @@ class AiIndexEndpoint(pulumi.CustomResource):
                  opts: Optional[pulumi.ResourceOptions] = None,
                  description: Optional[pulumi.Input[_builtins.str]] = None,
                  display_name: Optional[pulumi.Input[_builtins.str]] = None,
+                 encryption_spec: Optional[pulumi.Input[Union['AiIndexEndpointEncryptionSpecArgs', 'AiIndexEndpointEncryptionSpecArgsDict']]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
                  network: Optional[pulumi.Input[_builtins.str]] = None,
                  private_service_connect_config: Optional[pulumi.Input[Union['AiIndexEndpointPrivateServiceConnectConfigArgs', 'AiIndexEndpointPrivateServiceConnectConfigArgsDict']]] = None,
@@ -710,6 +750,7 @@ class AiIndexEndpoint(pulumi.CustomResource):
             if display_name is None and not opts.urn:
                 raise TypeError("Missing required property 'display_name'")
             __props__.__dict__["display_name"] = display_name
+            __props__.__dict__["encryption_spec"] = encryption_spec
             __props__.__dict__["labels"] = labels
             __props__.__dict__["network"] = network
             __props__.__dict__["private_service_connect_config"] = private_service_connect_config
@@ -739,6 +780,7 @@ class AiIndexEndpoint(pulumi.CustomResource):
             description: Optional[pulumi.Input[_builtins.str]] = None,
             display_name: Optional[pulumi.Input[_builtins.str]] = None,
             effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
+            encryption_spec: Optional[pulumi.Input[Union['AiIndexEndpointEncryptionSpecArgs', 'AiIndexEndpointEncryptionSpecArgsDict']]] = None,
             etag: Optional[pulumi.Input[_builtins.str]] = None,
             labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
             name: Optional[pulumi.Input[_builtins.str]] = None,
@@ -761,6 +803,8 @@ class AiIndexEndpoint(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] description: The description of the Index.
         :param pulumi.Input[_builtins.str] display_name: The display name of the Index. The name can be up to 128 characters long and can consist of any UTF-8 characters.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
+        :param pulumi.Input[Union['AiIndexEndpointEncryptionSpecArgs', 'AiIndexEndpointEncryptionSpecArgsDict']] encryption_spec: Customer-managed encryption key spec for an IndexEndpoint. If set, this IndexEndpoint and all sub-resources of this IndexEndpoint will be secured by this key.
+               Structure is documented below.
         :param pulumi.Input[_builtins.str] etag: Used to perform consistent read-modify-write updates.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] labels: The labels with user-defined metadata to organize your Indexes.
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
@@ -789,6 +833,7 @@ class AiIndexEndpoint(pulumi.CustomResource):
         __props__.__dict__["description"] = description
         __props__.__dict__["display_name"] = display_name
         __props__.__dict__["effective_labels"] = effective_labels
+        __props__.__dict__["encryption_spec"] = encryption_spec
         __props__.__dict__["etag"] = etag
         __props__.__dict__["labels"] = labels
         __props__.__dict__["name"] = name
@@ -834,6 +879,15 @@ class AiIndexEndpoint(pulumi.CustomResource):
         """
         return pulumi.get(self, "effective_labels")
 
+    @_builtins.property
+    @pulumi.getter(name="encryptionSpec")
+    def encryption_spec(self) -> pulumi.Output[Optional['outputs.AiIndexEndpointEncryptionSpec']]:
+        """
+        Customer-managed encryption key spec for an IndexEndpoint. If set, this IndexEndpoint and all sub-resources of this IndexEndpoint will be secured by this key.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "encryption_spec")
+
     @_builtins.property
     @pulumi.getter
     def etag(self) -> pulumi.Output[_builtins.str]:

pulumi_gcp/vertex/get_ai_index.py

@@ -27,7 +27,7 @@ class GetAiIndexResult:
     """
     A collection of values returned by getAiIndex.
     """
-    def __init__(__self__, create_time=None, deployed_indexes=None, description=None, display_name=None, effective_labels=None, etag=None, id=None, index_stats=None, index_update_method=None, labels=None, metadata_schema_uri=None, metadatas=None, name=None, project=None, pulumi_labels=None, region=None, update_time=None):
+    def __init__(__self__, create_time=None, deployed_indexes=None, description=None, display_name=None, effective_labels=None, encryption_specs=None, etag=None, id=None, index_stats=None, index_update_method=None, labels=None, metadata_schema_uri=None, metadatas=None, name=None, project=None, pulumi_labels=None, region=None, update_time=None):
         if create_time and not isinstance(create_time, str):
             raise TypeError("Expected argument 'create_time' to be a str")
         pulumi.set(__self__, "create_time", create_time)
@@ -43,6 +43,9 @@ class GetAiIndexResult:
         if effective_labels and not isinstance(effective_labels, dict):
             raise TypeError("Expected argument 'effective_labels' to be a dict")
         pulumi.set(__self__, "effective_labels", effective_labels)
+        if encryption_specs and not isinstance(encryption_specs, list):
+            raise TypeError("Expected argument 'encryption_specs' to be a list")
+        pulumi.set(__self__, "encryption_specs", encryption_specs)
         if etag and not isinstance(etag, str):
             raise TypeError("Expected argument 'etag' to be a str")
         pulumi.set(__self__, "etag", etag)
@@ -105,6 +108,11 @@ class GetAiIndexResult:
     def effective_labels(self) -> Mapping[str, _builtins.str]:
         return pulumi.get(self, "effective_labels")
 
+    @_builtins.property
+    @pulumi.getter(name="encryptionSpecs")
+    def encryption_specs(self) -> Sequence['outputs.GetAiIndexEncryptionSpecResult']:
+        return pulumi.get(self, "encryption_specs")
+
     @_builtins.property
     @pulumi.getter
     def etag(self) -> _builtins.str:
@@ -180,6 +188,7 @@ class AwaitableGetAiIndexResult(GetAiIndexResult):
             description=self.description,
             display_name=self.display_name,
             effective_labels=self.effective_labels,
+            encryption_specs=self.encryption_specs,
             etag=self.etag,
             id=self.id,
             index_stats=self.index_stats,
@@ -221,6 +230,7 @@ def get_ai_index(name: Optional[_builtins.str] = None,
         description=pulumi.get(__ret__, 'description'),
         display_name=pulumi.get(__ret__, 'display_name'),
         effective_labels=pulumi.get(__ret__, 'effective_labels'),
+        encryption_specs=pulumi.get(__ret__, 'encryption_specs'),
         etag=pulumi.get(__ret__, 'etag'),
         id=pulumi.get(__ret__, 'id'),
         index_stats=pulumi.get(__ret__, 'index_stats'),
@@ -259,6 +269,7 @@ def get_ai_index_output(name: Optional[pulumi.Input[_builtins.str]] = None,
         description=pulumi.get(__response__, 'description'),
         display_name=pulumi.get(__response__, 'display_name'),
         effective_labels=pulumi.get(__response__, 'effective_labels'),
+        encryption_specs=pulumi.get(__response__, 'encryption_specs'),
         etag=pulumi.get(__response__, 'etag'),
         id=pulumi.get(__response__, 'id'),
         index_stats=pulumi.get(__response__, 'index_stats'),