pulumi-mongodbatlas 3.37.0a1764050941__tar.gz → 3.38.0__tar.gz

{pulumi_mongodbatlas-3.37.0a1764050941 → pulumi_mongodbatlas-3.38.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pulumi_mongodbatlas
-Version: 3.37.0a1764050941
+Version: 3.38.0
 Summary: A Pulumi package for creating and managing mongodbatlas cloud resources.
 License: Apache-2.0
 Project-URL: Homepage, https://pulumi.io

{pulumi_mongodbatlas-3.37.0a1764050941 → pulumi_mongodbatlas-3.38.0}/pulumi_mongodbatlas/_inputs.py

@@ -93,10 +93,14 @@ __all__ = [
     'CloudProviderAccessAuthorizationAzureArgsDict',
     'CloudProviderAccessAuthorizationFeatureUsageArgs',
     'CloudProviderAccessAuthorizationFeatureUsageArgsDict',
+    'CloudProviderAccessAuthorizationGcpArgs',
+    'CloudProviderAccessAuthorizationGcpArgsDict',
     'CloudProviderAccessSetupAwsConfigArgs',
     'CloudProviderAccessSetupAwsConfigArgsDict',
     'CloudProviderAccessSetupAzureConfigArgs',
     'CloudProviderAccessSetupAzureConfigArgsDict',
+    'CloudProviderAccessSetupGcpConfigArgs',
+    'CloudProviderAccessSetupGcpConfigArgsDict',
     'ClusterAdvancedConfigurationArgs',
     'ClusterAdvancedConfigurationArgsDict',
     'ClusterBiConnectorConfigArgs',
@@ -4711,6 +4715,29 @@ class CloudProviderAccessAuthorizationFeatureUsageArgs:
         pulumi.set(self, "feature_type", value)
 
 
+if not MYPY:
+    class CloudProviderAccessAuthorizationGcpArgsDict(TypedDict):
+        service_account_for_atlas: NotRequired[pulumi.Input[_builtins.str]]
+elif False:
+    CloudProviderAccessAuthorizationGcpArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class CloudProviderAccessAuthorizationGcpArgs:
+    def __init__(__self__, *,
+                 service_account_for_atlas: Optional[pulumi.Input[_builtins.str]] = None):
+        if service_account_for_atlas is not None:
+            pulumi.set(__self__, "service_account_for_atlas", service_account_for_atlas)
+
+    @_builtins.property
+    @pulumi.getter(name="serviceAccountForAtlas")
+    def service_account_for_atlas(self) -> Optional[pulumi.Input[_builtins.str]]:
+        return pulumi.get(self, "service_account_for_atlas")
+
+    @service_account_for_atlas.setter
+    def service_account_for_atlas(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "service_account_for_atlas", value)
+
+
 if not MYPY:
     class CloudProviderAccessSetupAwsConfigArgsDict(TypedDict):
         atlas_assumed_role_external_id: NotRequired[pulumi.Input[_builtins.str]]
@@ -4793,6 +4820,42 @@ class CloudProviderAccessSetupAzureConfigArgs:
         pulumi.set(self, "tenant_id", value)
 
 
+if not MYPY:
+    class CloudProviderAccessSetupGcpConfigArgsDict(TypedDict):
+        service_account_for_atlas: NotRequired[pulumi.Input[_builtins.str]]
+        status: NotRequired[pulumi.Input[_builtins.str]]
+elif False:
+    CloudProviderAccessSetupGcpConfigArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class CloudProviderAccessSetupGcpConfigArgs:
+    def __init__(__self__, *,
+                 service_account_for_atlas: Optional[pulumi.Input[_builtins.str]] = None,
+                 status: Optional[pulumi.Input[_builtins.str]] = None):
+        if service_account_for_atlas is not None:
+            pulumi.set(__self__, "service_account_for_atlas", service_account_for_atlas)
+        if status is not None:
+            pulumi.set(__self__, "status", status)
+
+    @_builtins.property
+    @pulumi.getter(name="serviceAccountForAtlas")
+    def service_account_for_atlas(self) -> Optional[pulumi.Input[_builtins.str]]:
+        return pulumi.get(self, "service_account_for_atlas")
+
+    @service_account_for_atlas.setter
+    def service_account_for_atlas(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "service_account_for_atlas", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def status(self) -> Optional[pulumi.Input[_builtins.str]]:
+        return pulumi.get(self, "status")
+
+    @status.setter
+    def status(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "status", value)
+
+
 if not MYPY:
     class ClusterAdvancedConfigurationArgsDict(TypedDict):
         change_stream_options_pre_and_post_images_expire_after_seconds: NotRequired[pulumi.Input[_builtins.int]]
@@ -7613,6 +7676,10 @@ if not MYPY:
         """
         Resource path that displays the key version resource ID for your Google Cloud KMS.
         """
+        role_id: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        Unique 24-hexadecimal digit string that identifies the Google Cloud Provider Access Role that MongoDB Cloud uses to access the Google Cloud KMS.
+        """
         service_account_key: NotRequired[pulumi.Input[_builtins.str]]
         """
         JavaScript Object Notation (JSON) object that contains the Google Cloud Key Management Service (KMS). Format the JSON as a string and not as an object.
@@ -7629,11 +7696,13 @@ class EncryptionAtRestGoogleCloudKmsConfigArgs:
     def __init__(__self__, *,
                  enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  key_version_resource_id: Optional[pulumi.Input[_builtins.str]] = None,
+                 role_id: Optional[pulumi.Input[_builtins.str]] = None,
                  service_account_key: Optional[pulumi.Input[_builtins.str]] = None,
                  valid: Optional[pulumi.Input[_builtins.bool]] = None):
         """
         :param pulumi.Input[_builtins.bool] enabled: Flag that indicates whether someone enabled encryption at rest for the specified  project. To disable encryption at rest using customer key management and remove the configuration details, pass only this parameter with a value of `false`.
         :param pulumi.Input[_builtins.str] key_version_resource_id: Resource path that displays the key version resource ID for your Google Cloud KMS.
+        :param pulumi.Input[_builtins.str] role_id: Unique 24-hexadecimal digit string that identifies the Google Cloud Provider Access Role that MongoDB Cloud uses to access the Google Cloud KMS.
         :param pulumi.Input[_builtins.str] service_account_key: JavaScript Object Notation (JSON) object that contains the Google Cloud Key Management Service (KMS). Format the JSON as a string and not as an object.
         :param pulumi.Input[_builtins.bool] valid: Flag that indicates whether the Google Cloud Key Management Service (KMS) encryption key can encrypt and decrypt data.
         """
@@ -7641,6 +7710,8 @@ class EncryptionAtRestGoogleCloudKmsConfigArgs:
             pulumi.set(__self__, "enabled", enabled)
         if key_version_resource_id is not None:
             pulumi.set(__self__, "key_version_resource_id", key_version_resource_id)
+        if role_id is not None:
+            pulumi.set(__self__, "role_id", role_id)
         if service_account_key is not None:
             pulumi.set(__self__, "service_account_key", service_account_key)
         if valid is not None:
@@ -7670,6 +7741,18 @@ class EncryptionAtRestGoogleCloudKmsConfigArgs:
     def key_version_resource_id(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "key_version_resource_id", value)
 
+    @_builtins.property
+    @pulumi.getter(name="roleId")
+    def role_id(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Unique 24-hexadecimal digit string that identifies the Google Cloud Provider Access Role that MongoDB Cloud uses to access the Google Cloud KMS.
+        """
+        return pulumi.get(self, "role_id")
+
+    @role_id.setter
+    def role_id(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "role_id", value)
+
     @_builtins.property
     @pulumi.getter(name="serviceAccountKey")
     def service_account_key(self) -> Optional[pulumi.Input[_builtins.str]]:

{pulumi_mongodbatlas-3.37.0a1764050941 → pulumi_mongodbatlas-3.38.0}/pulumi_mongodbatlas/cloud_provider_access_authorization.py

@@ -79,6 +79,7 @@ class _CloudProviderAccessAuthorizationState:
                  aws: Optional[pulumi.Input['CloudProviderAccessAuthorizationAwsArgs']] = None,
                  azure: Optional[pulumi.Input['CloudProviderAccessAuthorizationAzureArgs']] = None,
                  feature_usages: Optional[pulumi.Input[Sequence[pulumi.Input['CloudProviderAccessAuthorizationFeatureUsageArgs']]]] = None,
+                 gcps: Optional[pulumi.Input[Sequence[pulumi.Input['CloudProviderAccessAuthorizationGcpArgs']]]] = None,
                  project_id: Optional[pulumi.Input[_builtins.str]] = None,
                  role_id: Optional[pulumi.Input[_builtins.str]] = None):
         """
@@ -92,6 +93,8 @@ class _CloudProviderAccessAuthorizationState:
             pulumi.set(__self__, "azure", azure)
         if feature_usages is not None:
             pulumi.set(__self__, "feature_usages", feature_usages)
+        if gcps is not None:
+            pulumi.set(__self__, "gcps", gcps)
         if project_id is not None:
             pulumi.set(__self__, "project_id", project_id)
         if role_id is not None:
@@ -133,6 +136,15 @@ class _CloudProviderAccessAuthorizationState:
     def feature_usages(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['CloudProviderAccessAuthorizationFeatureUsageArgs']]]]):
         pulumi.set(self, "feature_usages", value)
 
+    @_builtins.property
+    @pulumi.getter
+    def gcps(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['CloudProviderAccessAuthorizationGcpArgs']]]]:
+        return pulumi.get(self, "gcps")
+
+    @gcps.setter
+    def gcps(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['CloudProviderAccessAuthorizationGcpArgs']]]]):
+        pulumi.set(self, "gcps", value)
+
     @_builtins.property
     @pulumi.getter(name="projectId")
     def project_id(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -214,6 +226,7 @@ class CloudProviderAccessAuthorization(pulumi.CustomResource):
             __props__.__dict__["role_id"] = role_id
             __props__.__dict__["authorized_date"] = None
             __props__.__dict__["feature_usages"] = None
+            __props__.__dict__["gcps"] = None
         super(CloudProviderAccessAuthorization, __self__).__init__(
             'mongodbatlas:index/cloudProviderAccessAuthorization:CloudProviderAccessAuthorization',
             resource_name,
@@ -228,6 +241,7 @@ class CloudProviderAccessAuthorization(pulumi.CustomResource):
             aws: Optional[pulumi.Input[Union['CloudProviderAccessAuthorizationAwsArgs', 'CloudProviderAccessAuthorizationAwsArgsDict']]] = None,
             azure: Optional[pulumi.Input[Union['CloudProviderAccessAuthorizationAzureArgs', 'CloudProviderAccessAuthorizationAzureArgsDict']]] = None,
             feature_usages: Optional[pulumi.Input[Sequence[pulumi.Input[Union['CloudProviderAccessAuthorizationFeatureUsageArgs', 'CloudProviderAccessAuthorizationFeatureUsageArgsDict']]]]] = None,
+            gcps: Optional[pulumi.Input[Sequence[pulumi.Input[Union['CloudProviderAccessAuthorizationGcpArgs', 'CloudProviderAccessAuthorizationGcpArgsDict']]]]] = None,
             project_id: Optional[pulumi.Input[_builtins.str]] = None,
             role_id: Optional[pulumi.Input[_builtins.str]] = None) -> 'CloudProviderAccessAuthorization':
         """
@@ -246,6 +260,7 @@ class CloudProviderAccessAuthorization(pulumi.CustomResource):
         __props__.__dict__["aws"] = aws
         __props__.__dict__["azure"] = azure
         __props__.__dict__["feature_usages"] = feature_usages
+        __props__.__dict__["gcps"] = gcps
         __props__.__dict__["project_id"] = project_id
         __props__.__dict__["role_id"] = role_id
         return CloudProviderAccessAuthorization(resource_name, opts=opts, __props__=__props__)
@@ -270,6 +285,11 @@ class CloudProviderAccessAuthorization(pulumi.CustomResource):
     def feature_usages(self) -> pulumi.Output[Sequence['outputs.CloudProviderAccessAuthorizationFeatureUsage']]:
         return pulumi.get(self, "feature_usages")
 
+    @_builtins.property
+    @pulumi.getter
+    def gcps(self) -> pulumi.Output[Sequence['outputs.CloudProviderAccessAuthorizationGcp']]:
+        return pulumi.get(self, "gcps")
+
     @_builtins.property
     @pulumi.getter(name="projectId")
     def project_id(self) -> pulumi.Output[_builtins.str]:

{pulumi_mongodbatlas-3.37.0a1764050941 → pulumi_mongodbatlas-3.38.0}/pulumi_mongodbatlas/cloud_provider_access_setup.py

@@ -66,6 +66,7 @@ class _CloudProviderAccessSetupState:
                  aws_configs: Optional[pulumi.Input[Sequence[pulumi.Input['CloudProviderAccessSetupAwsConfigArgs']]]] = None,
                  azure_configs: Optional[pulumi.Input[Sequence[pulumi.Input['CloudProviderAccessSetupAzureConfigArgs']]]] = None,
                  created_date: Optional[pulumi.Input[_builtins.str]] = None,
+                 gcp_configs: Optional[pulumi.Input[Sequence[pulumi.Input['CloudProviderAccessSetupGcpConfigArgs']]]] = None,
                  last_updated_date: Optional[pulumi.Input[_builtins.str]] = None,
                  project_id: Optional[pulumi.Input[_builtins.str]] = None,
                  provider_name: Optional[pulumi.Input[_builtins.str]] = None,
@@ -79,6 +80,8 @@ class _CloudProviderAccessSetupState:
             pulumi.set(__self__, "azure_configs", azure_configs)
         if created_date is not None:
             pulumi.set(__self__, "created_date", created_date)
+        if gcp_configs is not None:
+            pulumi.set(__self__, "gcp_configs", gcp_configs)
         if last_updated_date is not None:
             pulumi.set(__self__, "last_updated_date", last_updated_date)
         if project_id is not None:
@@ -115,6 +118,15 @@ class _CloudProviderAccessSetupState:
     def created_date(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "created_date", value)
 
+    @_builtins.property
+    @pulumi.getter(name="gcpConfigs")
+    def gcp_configs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['CloudProviderAccessSetupGcpConfigArgs']]]]:
+        return pulumi.get(self, "gcp_configs")
+
+    @gcp_configs.setter
+    def gcp_configs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['CloudProviderAccessSetupGcpConfigArgs']]]]):
+        pulumi.set(self, "gcp_configs", value)
+
     @_builtins.property
     @pulumi.getter(name="lastUpdatedDate")
     def last_updated_date(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -211,6 +223,7 @@ class CloudProviderAccessSetup(pulumi.CustomResource):
             __props__.__dict__["provider_name"] = provider_name
             __props__.__dict__["aws_configs"] = None
             __props__.__dict__["created_date"] = None
+            __props__.__dict__["gcp_configs"] = None
             __props__.__dict__["last_updated_date"] = None
             __props__.__dict__["role_id"] = None
         super(CloudProviderAccessSetup, __self__).__init__(
@@ -226,6 +239,7 @@ class CloudProviderAccessSetup(pulumi.CustomResource):
             aws_configs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['CloudProviderAccessSetupAwsConfigArgs', 'CloudProviderAccessSetupAwsConfigArgsDict']]]]] = None,
             azure_configs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['CloudProviderAccessSetupAzureConfigArgs', 'CloudProviderAccessSetupAzureConfigArgsDict']]]]] = None,
             created_date: Optional[pulumi.Input[_builtins.str]] = None,
+            gcp_configs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['CloudProviderAccessSetupGcpConfigArgs', 'CloudProviderAccessSetupGcpConfigArgsDict']]]]] = None,
             last_updated_date: Optional[pulumi.Input[_builtins.str]] = None,
             project_id: Optional[pulumi.Input[_builtins.str]] = None,
             provider_name: Optional[pulumi.Input[_builtins.str]] = None,
@@ -245,6 +259,7 @@ class CloudProviderAccessSetup(pulumi.CustomResource):
         __props__.__dict__["aws_configs"] = aws_configs
         __props__.__dict__["azure_configs"] = azure_configs
         __props__.__dict__["created_date"] = created_date
+        __props__.__dict__["gcp_configs"] = gcp_configs
         __props__.__dict__["last_updated_date"] = last_updated_date
         __props__.__dict__["project_id"] = project_id
         __props__.__dict__["provider_name"] = provider_name
@@ -266,6 +281,11 @@ class CloudProviderAccessSetup(pulumi.CustomResource):
     def created_date(self) -> pulumi.Output[_builtins.str]:
         return pulumi.get(self, "created_date")
 
+    @_builtins.property
+    @pulumi.getter(name="gcpConfigs")
+    def gcp_configs(self) -> pulumi.Output[Sequence['outputs.CloudProviderAccessSetupGcpConfig']]:
+        return pulumi.get(self, "gcp_configs")
+
     @_builtins.property
     @pulumi.getter(name="lastUpdatedDate")
     def last_updated_date(self) -> pulumi.Output[_builtins.str]:

{pulumi_mongodbatlas-3.37.0a1764050941 → pulumi_mongodbatlas-3.38.0}/pulumi_mongodbatlas/get_cloud_provider_access_setup.py

@@ -28,7 +28,7 @@ class GetCloudProviderAccessSetupResult:
     """
     A collection of values returned by getCloudProviderAccessSetup.
     """
-    def __init__(__self__, aws=None, aws_configs=None, azure_configs=None, created_date=None, id=None, last_updated_date=None, project_id=None, provider_name=None, role_id=None):
+    def __init__(__self__, aws=None, aws_configs=None, azure_configs=None, created_date=None, gcp_configs=None, id=None, last_updated_date=None, project_id=None, provider_name=None, role_id=None):
         if aws and not isinstance(aws, dict):
             raise TypeError("Expected argument 'aws' to be a dict")
         pulumi.set(__self__, "aws", aws)
@@ -41,6 +41,9 @@ class GetCloudProviderAccessSetupResult:
         if created_date and not isinstance(created_date, str):
             raise TypeError("Expected argument 'created_date' to be a str")
         pulumi.set(__self__, "created_date", created_date)
+        if gcp_configs and not isinstance(gcp_configs, list):
+            raise TypeError("Expected argument 'gcp_configs' to be a list")
+        pulumi.set(__self__, "gcp_configs", gcp_configs)
         if id and not isinstance(id, str):
             raise TypeError("Expected argument 'id' to be a str")
         pulumi.set(__self__, "id", id)
@@ -60,9 +63,6 @@ class GetCloudProviderAccessSetupResult:
     @_builtins.property
     @pulumi.getter
     def aws(self) -> Mapping[str, _builtins.str]:
-        """
-        aws related role information
-        """
         return pulumi.get(self, "aws")
 
     @_builtins.property
@@ -89,6 +89,14 @@ class GetCloudProviderAccessSetupResult:
         """
         return pulumi.get(self, "created_date")
 
+    @_builtins.property
+    @pulumi.getter(name="gcpConfigs")
+    def gcp_configs(self) -> Sequence['outputs.GetCloudProviderAccessSetupGcpConfigResult']:
+        """
+        gcp related configurations
+        """
+        return pulumi.get(self, "gcp_configs")
+
     @_builtins.property
     @pulumi.getter
     def id(self) -> _builtins.str:
@@ -131,6 +139,7 @@ class AwaitableGetCloudProviderAccessSetupResult(GetCloudProviderAccessSetupResu
             aws_configs=self.aws_configs,
             azure_configs=self.azure_configs,
             created_date=self.created_date,
+            gcp_configs=self.gcp_configs,
             id=self.id,
             last_updated_date=self.last_updated_date,
             project_id=self.project_id,
@@ -146,7 +155,7 @@ def get_cloud_provider_access_setup(azure_configs: Optional[Sequence[Union['GetC
     """
     ## # Data Source: CloudProviderAccessSetup
 
-    `CloudProviderAccessSetup` allows you to get a single role for a provider access role setup, currently only AWS and Azure are supported.
+    `CloudProviderAccessSetup` allows you to get a single role for a provider access role setup. Supported providers: AWS, AZURE and GCP.
 
     > **NOTE:** Groups and projects are synonymous terms. You may find `groupId` in the official documentation.
 
@@ -183,11 +192,25 @@ def get_cloud_provider_access_setup(azure_configs: Optional[Sequence[Union['GetC
         role_id=test_role.role_id)
     ```
 
+    ### With GCP
+
+    ```python
+    import pulumi
+    import pulumi_mongodbatlas as mongodbatlas
+
+    test_role = mongodbatlas.CloudProviderAccessSetup("test_role",
+        project_id="64259ee860c43338194b0f8e",
+        provider_name="GCP")
+    single_setup = mongodbatlas.get_cloud_provider_access_setup_output(project_id=test_role.project_id,
+        provider_name=test_role.provider_name,
+        role_id=test_role.role_id)
+    ```
+
 
     :param Sequence[Union['GetCloudProviderAccessSetupAzureConfigArgs', 'GetCloudProviderAccessSetupAzureConfigArgsDict']] azure_configs: azure related configurations
     :param _builtins.str project_id: The unique ID for the project to get all Cloud Provider Access
-    :param _builtins.str provider_name: cloud provider name, currently only AWS is supported
-    :param _builtins.str role_id: unique role id among all the aws roles provided by mongodb atlas
+    :param _builtins.str provider_name: cloud provider name. Supported values: `AWS`, `AZURE`, and `GCP`.
+    :param _builtins.str role_id: unique role id among all the roles provided by MongoDB Atlas.
     """
     __args__ = dict()
     __args__['azureConfigs'] = azure_configs
@@ -202,6 +225,7 @@ def get_cloud_provider_access_setup(azure_configs: Optional[Sequence[Union['GetC
         aws_configs=pulumi.get(__ret__, 'aws_configs'),
         azure_configs=pulumi.get(__ret__, 'azure_configs'),
         created_date=pulumi.get(__ret__, 'created_date'),
+        gcp_configs=pulumi.get(__ret__, 'gcp_configs'),
         id=pulumi.get(__ret__, 'id'),
         last_updated_date=pulumi.get(__ret__, 'last_updated_date'),
         project_id=pulumi.get(__ret__, 'project_id'),
@@ -215,7 +239,7 @@ def get_cloud_provider_access_setup_output(azure_configs: Optional[pulumi.Input[
     """
     ## # Data Source: CloudProviderAccessSetup
 
-    `CloudProviderAccessSetup` allows you to get a single role for a provider access role setup, currently only AWS and Azure are supported.
+    `CloudProviderAccessSetup` allows you to get a single role for a provider access role setup. Supported providers: AWS, AZURE and GCP.
 
     > **NOTE:** Groups and projects are synonymous terms. You may find `groupId` in the official documentation.
 
@@ -252,11 +276,25 @@ def get_cloud_provider_access_setup_output(azure_configs: Optional[pulumi.Input[
         role_id=test_role.role_id)
     ```
 
+    ### With GCP
+
+    ```python
+    import pulumi
+    import pulumi_mongodbatlas as mongodbatlas
+
+    test_role = mongodbatlas.CloudProviderAccessSetup("test_role",
+        project_id="64259ee860c43338194b0f8e",
+        provider_name="GCP")
+    single_setup = mongodbatlas.get_cloud_provider_access_setup_output(project_id=test_role.project_id,
+        provider_name=test_role.provider_name,
+        role_id=test_role.role_id)
+    ```
+
 
     :param Sequence[Union['GetCloudProviderAccessSetupAzureConfigArgs', 'GetCloudProviderAccessSetupAzureConfigArgsDict']] azure_configs: azure related configurations
     :param _builtins.str project_id: The unique ID for the project to get all Cloud Provider Access
-    :param _builtins.str provider_name: cloud provider name, currently only AWS is supported
-    :param _builtins.str role_id: unique role id among all the aws roles provided by mongodb atlas
+    :param _builtins.str provider_name: cloud provider name. Supported values: `AWS`, `AZURE`, and `GCP`.
+    :param _builtins.str role_id: unique role id among all the roles provided by MongoDB Atlas.
     """
     __args__ = dict()
     __args__['azureConfigs'] = azure_configs
@@ -270,6 +308,7 @@ def get_cloud_provider_access_setup_output(azure_configs: Optional[pulumi.Input[
         aws_configs=pulumi.get(__response__, 'aws_configs'),
         azure_configs=pulumi.get(__response__, 'azure_configs'),
         created_date=pulumi.get(__response__, 'created_date'),
+        gcp_configs=pulumi.get(__response__, 'gcp_configs'),
         id=pulumi.get(__response__, 'id'),
         last_updated_date=pulumi.get(__response__, 'last_updated_date'),
         project_id=pulumi.get(__response__, 'project_id'),

{pulumi_mongodbatlas-3.37.0a1764050941 → pulumi_mongodbatlas-3.38.0}/pulumi_mongodbatlas/get_encryption_at_rest.py

@@ -200,6 +200,8 @@ def get_encryption_at_rest(project_id: Optional[_builtins.str] = None,
     > **NOTE:** It is possible to configure Atlas Encryption at Rest to communicate with Customer Managed Keys (Azure Key Vault or AWS KMS) over private network interfaces (Azure Private Link or AWS PrivateLink). This requires enabling the `azure_key_vault_config.require_private_networking` or the `aws_kms_config.require_private_networking` attribute, together with the configuration of the `EncryptionAtRestPrivateEndpoint` resource. Please review the `EncryptionAtRestPrivateEndpoint` resource for details.
 
     ### Configuring encryption at rest using customer key management in GCP
+    For authentication, you must provide either serviceAccountKey (static credentials) or roleId (service-account–based authentication). Once roleId is configured, serviceAccountKey is no longer supported.
+
     ```python
     import pulumi
     import pulumi_mongodbatlas as mongodbatlas
@@ -320,6 +322,8 @@ def get_encryption_at_rest_output(project_id: Optional[pulumi.Input[_builtins.st
     > **NOTE:** It is possible to configure Atlas Encryption at Rest to communicate with Customer Managed Keys (Azure Key Vault or AWS KMS) over private network interfaces (Azure Private Link or AWS PrivateLink). This requires enabling the `azure_key_vault_config.require_private_networking` or the `aws_kms_config.require_private_networking` attribute, together with the configuration of the `EncryptionAtRestPrivateEndpoint` resource. Please review the `EncryptionAtRestPrivateEndpoint` resource for details.
 
     ### Configuring encryption at rest using customer key management in GCP
+    For authentication, you must provide either serviceAccountKey (static credentials) or roleId (service-account–based authentication). Once roleId is configured, serviceAccountKey is no longer supported.
+
     ```python
     import pulumi
     import pulumi_mongodbatlas as mongodbatlas

{pulumi_mongodbatlas-3.37.0a1764050941 → pulumi_mongodbatlas-3.38.0}/pulumi_mongodbatlas/outputs.py

@@ -55,8 +55,10 @@ __all__ = [
     'CloudProviderAccessAuthorizationAws',
     'CloudProviderAccessAuthorizationAzure',
     'CloudProviderAccessAuthorizationFeatureUsage',
+    'CloudProviderAccessAuthorizationGcp',
     'CloudProviderAccessSetupAwsConfig',
     'CloudProviderAccessSetupAzureConfig',
+    'CloudProviderAccessSetupGcpConfig',
     'ClusterAdvancedConfiguration',
     'ClusterBiConnectorConfig',
     'ClusterConnectionString',
@@ -221,6 +223,7 @@ __all__ = [
     'GetCloudBackupSnapshotsResultMemberResult',
     'GetCloudProviderAccessSetupAwsConfigResult',
     'GetCloudProviderAccessSetupAzureConfigResult',
+    'GetCloudProviderAccessSetupGcpConfigResult',
     'GetClusterAdvancedConfigurationResult',
     'GetClusterBiConnectorConfigResult',
     'GetClusterConnectionStringResult',
@@ -3903,6 +3906,36 @@ class CloudProviderAccessAuthorizationFeatureUsage(dict):
         return pulumi.get(self, "feature_type")
 
 
+@pulumi.output_type
+class CloudProviderAccessAuthorizationGcp(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "serviceAccountForAtlas":
+            suggest = "service_account_for_atlas"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in CloudProviderAccessAuthorizationGcp. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        CloudProviderAccessAuthorizationGcp.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        CloudProviderAccessAuthorizationGcp.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 service_account_for_atlas: Optional[_builtins.str] = None):
+        if service_account_for_atlas is not None:
+            pulumi.set(__self__, "service_account_for_atlas", service_account_for_atlas)
+
+    @_builtins.property
+    @pulumi.getter(name="serviceAccountForAtlas")
+    def service_account_for_atlas(self) -> Optional[_builtins.str]:
+        return pulumi.get(self, "service_account_for_atlas")
+
+
 @pulumi.output_type
 class CloudProviderAccessSetupAwsConfig(dict):
     @staticmethod
@@ -3990,6 +4023,44 @@ class CloudProviderAccessSetupAzureConfig(dict):
         return pulumi.get(self, "tenant_id")
 
 
+@pulumi.output_type
+class CloudProviderAccessSetupGcpConfig(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "serviceAccountForAtlas":
+            suggest = "service_account_for_atlas"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in CloudProviderAccessSetupGcpConfig. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        CloudProviderAccessSetupGcpConfig.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        CloudProviderAccessSetupGcpConfig.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 service_account_for_atlas: Optional[_builtins.str] = None,
+                 status: Optional[_builtins.str] = None):
+        if service_account_for_atlas is not None:
+            pulumi.set(__self__, "service_account_for_atlas", service_account_for_atlas)
+        if status is not None:
+            pulumi.set(__self__, "status", status)
+
+    @_builtins.property
+    @pulumi.getter(name="serviceAccountForAtlas")
+    def service_account_for_atlas(self) -> Optional[_builtins.str]:
+        return pulumi.get(self, "service_account_for_atlas")
+
+    @_builtins.property
+    @pulumi.getter
+    def status(self) -> Optional[_builtins.str]:
+        return pulumi.get(self, "status")
+
+
 @pulumi.output_type
 class ClusterAdvancedConfiguration(dict):
     @staticmethod
@@ -6188,6 +6259,8 @@ class EncryptionAtRestGoogleCloudKmsConfig(dict):
         suggest = None
         if key == "keyVersionResourceId":
             suggest = "key_version_resource_id"
+        elif key == "roleId":
+            suggest = "role_id"
         elif key == "serviceAccountKey":
             suggest = "service_account_key"
 
@@ -6205,11 +6278,13 @@ class EncryptionAtRestGoogleCloudKmsConfig(dict):
     def __init__(__self__, *,
                  enabled: Optional[_builtins.bool] = None,
                  key_version_resource_id: Optional[_builtins.str] = None,
+                 role_id: Optional[_builtins.str] = None,
                  service_account_key: Optional[_builtins.str] = None,
                  valid: Optional[_builtins.bool] = None):
         """
         :param _builtins.bool enabled: Flag that indicates whether someone enabled encryption at rest for the specified  project. To disable encryption at rest using customer key management and remove the configuration details, pass only this parameter with a value of `false`.
         :param _builtins.str key_version_resource_id: Resource path that displays the key version resource ID for your Google Cloud KMS.
+        :param _builtins.str role_id: Unique 24-hexadecimal digit string that identifies the Google Cloud Provider Access Role that MongoDB Cloud uses to access the Google Cloud KMS.
         :param _builtins.str service_account_key: JavaScript Object Notation (JSON) object that contains the Google Cloud Key Management Service (KMS). Format the JSON as a string and not as an object.
         :param _builtins.bool valid: Flag that indicates whether the Google Cloud Key Management Service (KMS) encryption key can encrypt and decrypt data.
         """
@@ -6217,6 +6292,8 @@ class EncryptionAtRestGoogleCloudKmsConfig(dict):
             pulumi.set(__self__, "enabled", enabled)
         if key_version_resource_id is not None:
             pulumi.set(__self__, "key_version_resource_id", key_version_resource_id)
+        if role_id is not None:
+            pulumi.set(__self__, "role_id", role_id)
         if service_account_key is not None:
             pulumi.set(__self__, "service_account_key", service_account_key)
         if valid is not None:
@@ -6238,6 +6315,14 @@ class EncryptionAtRestGoogleCloudKmsConfig(dict):
         """
         return pulumi.get(self, "key_version_resource_id")
 
+    @_builtins.property
+    @pulumi.getter(name="roleId")
+    def role_id(self) -> Optional[_builtins.str]:
+        """
+        Unique 24-hexadecimal digit string that identifies the Google Cloud Provider Access Role that MongoDB Cloud uses to access the Google Cloud KMS.
+        """
+        return pulumi.get(self, "role_id")
+
     @_builtins.property
     @pulumi.getter(name="serviceAccountKey")
     def service_account_key(self) -> Optional[_builtins.str]:
@@ -14545,6 +14630,35 @@ class GetCloudProviderAccessSetupAzureConfigResult(dict):
         return pulumi.get(self, "tenant_id")
 
 
+@pulumi.output_type
+class GetCloudProviderAccessSetupGcpConfigResult(dict):
+    def __init__(__self__, *,
+                 service_account_for_atlas: _builtins.str,
+                 status: _builtins.str):
+        """
+        :param _builtins.str service_account_for_atlas: The GCP service account email that Atlas uses.
+        :param _builtins.str status: The status of the GCP cloud provider access setup. See [MongoDB Atlas API](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-getgroupcloudprovideraccess#operation-getgroupcloudprovideraccess-200-body-application-vnd-atlas-2023-01-01-json-gcp-object-status).
+        """
+        pulumi.set(__self__, "service_account_for_atlas", service_account_for_atlas)
+        pulumi.set(__self__, "status", status)
+
+    @_builtins.property
+    @pulumi.getter(name="serviceAccountForAtlas")
+    def service_account_for_atlas(self) -> _builtins.str:
+        """
+        The GCP service account email that Atlas uses.
+        """
+        return pulumi.get(self, "service_account_for_atlas")
+
+    @_builtins.property
+    @pulumi.getter
+    def status(self) -> _builtins.str:
+        """
+        The status of the GCP cloud provider access setup. See [MongoDB Atlas API](https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-getgroupcloudprovideraccess#operation-getgroupcloudprovideraccess-200-body-application-vnd-atlas-2023-01-01-json-gcp-object-status).
+        """
+        return pulumi.get(self, "status")
+
+
 @pulumi.output_type
 class GetClusterAdvancedConfigurationResult(dict):
     def __init__(__self__, *,
@@ -18068,16 +18182,19 @@ class GetEncryptionAtRestGoogleCloudKmsConfigResult(dict):
     def __init__(__self__, *,
                  enabled: _builtins.bool,
                  key_version_resource_id: _builtins.str,
+                 role_id: _builtins.str,
                  service_account_key: _builtins.str,
                  valid: _builtins.bool):
         """
         :param _builtins.bool enabled: Flag that indicates whether someone enabled encryption at rest for the specified  project. To disable encryption at rest using customer key management and remove the configuration details, pass only this parameter with a value of `false`.
         :param _builtins.str key_version_resource_id: Resource path that displays the key version resource ID for your Google Cloud KMS.
+        :param _builtins.str role_id: Unique 24-hexadecimal digit string that identifies the Google Cloud Provider Access Role that MongoDB Cloud uses to access the Google Cloud KMS.
         :param _builtins.str service_account_key: JavaScript Object Notation (JSON) object that contains the Google Cloud Key Management Service (KMS). Format the JSON as a string and not as an object.
         :param _builtins.bool valid: Flag that indicates whether the Google Cloud Key Management Service (KMS) encryption key can encrypt and decrypt data.
         """
         pulumi.set(__self__, "enabled", enabled)
         pulumi.set(__self__, "key_version_resource_id", key_version_resource_id)
+        pulumi.set(__self__, "role_id", role_id)
         pulumi.set(__self__, "service_account_key", service_account_key)
         pulumi.set(__self__, "valid", valid)
 
@@ -18097,6 +18214,14 @@ class GetEncryptionAtRestGoogleCloudKmsConfigResult(dict):
         """
         return pulumi.get(self, "key_version_resource_id")
 
+    @_builtins.property
+    @pulumi.getter(name="roleId")
+    def role_id(self) -> _builtins.str:
+        """
+        Unique 24-hexadecimal digit string that identifies the Google Cloud Provider Access Role that MongoDB Cloud uses to access the Google Cloud KMS.
+        """
+        return pulumi.get(self, "role_id")
+
     @_builtins.property
     @pulumi.getter(name="serviceAccountKey")
     def service_account_key(self) -> _builtins.str: