projects

package
v8.12.1 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Dec 21, 2024 License: Apache-2.0 Imports: 7 Imported by: 5

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type AccessApprovalSettings 

type AccessApprovalSettings struct {
	pulumi.CustomResourceState

	// The asymmetric crypto key version to use for signing approval requests. Empty activeKeyVersion indicates that a
	// Google-managed key should be used for signing. This property will be ignored if set by an ancestor of the resource, and
	// new non-empty values may not be set.
	ActiveKeyVersion pulumi.StringPtrOutput `pulumi:"activeKeyVersion"`
	// If the field is true, that indicates that an ancestor of this Project has set active_key_version.
	AncestorHasActiveKeyVersion pulumi.BoolOutput `pulumi:"ancestorHasActiveKeyVersion"`
	// If the field is true, that indicates that at least one service is enrolled for Access Approval in one or more ancestors of the Project.
	EnrolledAncestor pulumi.BoolOutput `pulumi:"enrolledAncestor"`
	// A list of Google Cloud Services for which the given resource has Access Approval enrolled.
	// Access requests for the resource given by name against any of these services contained here will be required
	// to have explicit approval. Enrollment can only be done on an all or nothing basis.
	// A maximum of 10 enrolled services will be enforced, to be expanded as the set of supported services is expanded.
	// Structure is documented below.
	EnrolledServices AccessApprovalSettingsEnrolledServiceArrayOutput `pulumi:"enrolledServices"`
	// If the field is true, that indicates that there is some configuration issue with the activeKeyVersion
	// configured on this Project (e.g. it doesn't exist or the Access Approval service account doesn't have the
	// correct permissions on it, etc.) This key version is not necessarily the effective key version at this level,
	// as key versions are inherited top-down.
	InvalidKeyVersion pulumi.BoolOutput `pulumi:"invalidKeyVersion"`
	// The resource name of the settings. Format is "projects/{project_id}/accessApprovalSettings"
	Name pulumi.StringOutput `pulumi:"name"`
	// A list of email addresses to which notifications relating to approval requests should be sent. Notifications relating to
	// a resource will be sent to all emails in the settings of ancestor resources of that resource. A maximum of 50 email
	// addresses are allowed.
	NotificationEmails pulumi.StringArrayOutput `pulumi:"notificationEmails"`
	// Project id.
	//
	// Deprecated: `project` is deprecated and will be removed in a future major release. Use `projectId` instead.
	Project pulumi.StringPtrOutput `pulumi:"project"`
	// ID of the project of the access approval settings.
	ProjectId pulumi.StringOutput `pulumi:"projectId"`
}

Access Approval enables you to require your explicit approval whenever Google support and engineering need to access your customer content.

To get more information about ProjectSettings, see:

* [API documentation](https://cloud.google.com/access-approval/docs/reference/rest/v1/projects)

## Example Usage

### Project Access Approval Full

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewAccessApprovalSettings(ctx, "project_access_approval", &projects.AccessApprovalSettingsArgs{
			ProjectId: pulumi.String("my-project-name"),
			NotificationEmails: pulumi.StringArray{
				pulumi.String("testuser@example.com"),
				pulumi.String("example.user@example.com"),
			},
			EnrolledServices: projects.AccessApprovalSettingsEnrolledServiceArray{
				&projects.AccessApprovalSettingsEnrolledServiceArgs{
					CloudProduct:    pulumi.String("all"),
					EnrollmentLevel: pulumi.String("BLOCK_ALL"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Project Access Approval Active Key Version

```go package main

import ( 

"fmt"

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accessapproval"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/kms"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		keyRing, err := kms.NewKeyRing(ctx, "key_ring", &kms.KeyRingArgs{
			Name:     pulumi.String("key-ring"),
			Location: pulumi.String("global"),
			Project:  pulumi.String("my-project-name"),
		})
		if err != nil {
			return err
		}
		cryptoKey, err := kms.NewCryptoKey(ctx, "crypto_key", &kms.CryptoKeyArgs{
			Name:    pulumi.String("crypto-key"),
			KeyRing: keyRing.ID(),
			Purpose: pulumi.String("ASYMMETRIC_SIGN"),
			VersionTemplate: &kms.CryptoKeyVersionTemplateArgs{
				Algorithm: pulumi.String("EC_SIGN_P384_SHA384"),
			},
		})
		if err != nil {
			return err
		}
		serviceAccount, err := accessapproval.GetProjectServiceAccount(ctx, &accessapproval.GetProjectServiceAccountArgs{
			ProjectId: "my-project-name",
		}, nil)
		if err != nil {
			return err
		}
		iam, err := kms.NewCryptoKeyIAMMember(ctx, "iam", &kms.CryptoKeyIAMMemberArgs{
			CryptoKeyId: cryptoKey.ID(),
			Role:        pulumi.String("roles/cloudkms.signerVerifier"),
			Member:      pulumi.Sprintf("serviceAccount:%v", serviceAccount.AccountEmail),
		})
		if err != nil {
			return err
		}
		cryptoKeyVersion := kms.GetKMSCryptoKeyVersionOutput(ctx, kms.GetKMSCryptoKeyVersionOutputArgs{
			CryptoKey: cryptoKey.ID(),
		}, nil)
		_, err = projects.NewAccessApprovalSettings(ctx, "project_access_approval", &projects.AccessApprovalSettingsArgs{
			ProjectId: pulumi.String("my-project-name"),
			ActiveKeyVersion: pulumi.String(cryptoKeyVersion.ApplyT(func(cryptoKeyVersion kms.GetKMSCryptoKeyVersionResult) (*string, error) {
				return &cryptoKeyVersion.Name, nil
			}).(pulumi.StringPtrOutput)),
			EnrolledServices: projects.AccessApprovalSettingsEnrolledServiceArray{
				&projects.AccessApprovalSettingsEnrolledServiceArgs{
					CloudProduct: pulumi.String("all"),
				},
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			iam,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

ProjectSettings can be imported using any of these accepted formats:

* `projects/{{project_id}}/accessApprovalSettings`

* `{{project_id}}`

When using the `pulumi import` command, ProjectSettings can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:projects/accessApprovalSettings:AccessApprovalSettings default projects/{{project_id}}/accessApprovalSettings ```

```sh $ pulumi import gcp:projects/accessApprovalSettings:AccessApprovalSettings default {{project_id}} ```

func GetAccessApprovalSettings 

func GetAccessApprovalSettings(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AccessApprovalSettingsState, opts ...pulumi.ResourceOption) (*AccessApprovalSettings, error)

GetAccessApprovalSettings gets an existing AccessApprovalSettings resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAccessApprovalSettings 

func NewAccessApprovalSettings(ctx *pulumi.Context,
	name string, args *AccessApprovalSettingsArgs, opts ...pulumi.ResourceOption) (*AccessApprovalSettings, error)

NewAccessApprovalSettings registers a new resource with the given unique name, arguments, and options.

func (*AccessApprovalSettings) ElementType 

func (*AccessApprovalSettings) ElementType() reflect.Type

func (*AccessApprovalSettings) ToAccessApprovalSettingsOutput 

func (i *AccessApprovalSettings) ToAccessApprovalSettingsOutput() AccessApprovalSettingsOutput

func (*AccessApprovalSettings) ToAccessApprovalSettingsOutputWithContext 

func (i *AccessApprovalSettings) ToAccessApprovalSettingsOutputWithContext(ctx context.Context) AccessApprovalSettingsOutput

type AccessApprovalSettingsArgs 

type AccessApprovalSettingsArgs struct {
	// The asymmetric crypto key version to use for signing approval requests. Empty activeKeyVersion indicates that a
	// Google-managed key should be used for signing. This property will be ignored if set by an ancestor of the resource, and
	// new non-empty values may not be set.
	ActiveKeyVersion pulumi.StringPtrInput
	// A list of Google Cloud Services for which the given resource has Access Approval enrolled.
	// Access requests for the resource given by name against any of these services contained here will be required
	// to have explicit approval. Enrollment can only be done on an all or nothing basis.
	// A maximum of 10 enrolled services will be enforced, to be expanded as the set of supported services is expanded.
	// Structure is documented below.
	EnrolledServices AccessApprovalSettingsEnrolledServiceArrayInput
	// A list of email addresses to which notifications relating to approval requests should be sent. Notifications relating to
	// a resource will be sent to all emails in the settings of ancestor resources of that resource. A maximum of 50 email
	// addresses are allowed.
	NotificationEmails pulumi.StringArrayInput
	// Project id.
	//
	// Deprecated: `project` is deprecated and will be removed in a future major release. Use `projectId` instead.
	Project pulumi.StringPtrInput
	// ID of the project of the access approval settings.
	ProjectId pulumi.StringInput
}

The set of arguments for constructing a AccessApprovalSettings resource.

func (AccessApprovalSettingsArgs) ElementType 

func (AccessApprovalSettingsArgs) ElementType() reflect.Type

type AccessApprovalSettingsArray 

type AccessApprovalSettingsArray []AccessApprovalSettingsInput

func (AccessApprovalSettingsArray) ElementType 

func (AccessApprovalSettingsArray) ElementType() reflect.Type

func (AccessApprovalSettingsArray) ToAccessApprovalSettingsArrayOutput 

func (i AccessApprovalSettingsArray) ToAccessApprovalSettingsArrayOutput() AccessApprovalSettingsArrayOutput

func (AccessApprovalSettingsArray) ToAccessApprovalSettingsArrayOutputWithContext 

func (i AccessApprovalSettingsArray) ToAccessApprovalSettingsArrayOutputWithContext(ctx context.Context) AccessApprovalSettingsArrayOutput

type AccessApprovalSettingsArrayInput 

type AccessApprovalSettingsArrayInput interface {
	pulumi.Input

	ToAccessApprovalSettingsArrayOutput() AccessApprovalSettingsArrayOutput
	ToAccessApprovalSettingsArrayOutputWithContext(context.Context) AccessApprovalSettingsArrayOutput
}

AccessApprovalSettingsArrayInput is an input type that accepts AccessApprovalSettingsArray and AccessApprovalSettingsArrayOutput values. You can construct a concrete instance of `AccessApprovalSettingsArrayInput` via: 

AccessApprovalSettingsArray{ AccessApprovalSettingsArgs{...} }

type AccessApprovalSettingsArrayOutput 

type AccessApprovalSettingsArrayOutput struct{ *pulumi.OutputState }

func (AccessApprovalSettingsArrayOutput) ElementType 

func (AccessApprovalSettingsArrayOutput) ElementType() reflect.Type

func (AccessApprovalSettingsArrayOutput) Index 

func (o AccessApprovalSettingsArrayOutput) Index(i pulumi.IntInput) AccessApprovalSettingsOutput

func (AccessApprovalSettingsArrayOutput) ToAccessApprovalSettingsArrayOutput 

func (o AccessApprovalSettingsArrayOutput) ToAccessApprovalSettingsArrayOutput() AccessApprovalSettingsArrayOutput

func (AccessApprovalSettingsArrayOutput) ToAccessApprovalSettingsArrayOutputWithContext 

func (o AccessApprovalSettingsArrayOutput) ToAccessApprovalSettingsArrayOutputWithContext(ctx context.Context) AccessApprovalSettingsArrayOutput

type AccessApprovalSettingsEnrolledService 

type AccessApprovalSettingsEnrolledService struct {
	// The product for which Access Approval will be enrolled. Allowed values are listed (case-sensitive):
	// all
	// appengine.googleapis.com
	// bigquery.googleapis.com
	// bigtable.googleapis.com
	// cloudkms.googleapis.com
	// compute.googleapis.com
	// dataflow.googleapis.com
	// iam.googleapis.com
	// pubsub.googleapis.com
	// storage.googleapis.com
	CloudProduct string `pulumi:"cloudProduct"`
	// The enrollment level of the service.
	// Default value is `BLOCK_ALL`.
	// Possible values are: `BLOCK_ALL`.
	//
	// ***
	EnrollmentLevel *string `pulumi:"enrollmentLevel"`
}

type AccessApprovalSettingsEnrolledServiceArgs 

type AccessApprovalSettingsEnrolledServiceArgs struct {
	// The product for which Access Approval will be enrolled. Allowed values are listed (case-sensitive):
	// all
	// appengine.googleapis.com
	// bigquery.googleapis.com
	// bigtable.googleapis.com
	// cloudkms.googleapis.com
	// compute.googleapis.com
	// dataflow.googleapis.com
	// iam.googleapis.com
	// pubsub.googleapis.com
	// storage.googleapis.com
	CloudProduct pulumi.StringInput `pulumi:"cloudProduct"`
	// The enrollment level of the service.
	// Default value is `BLOCK_ALL`.
	// Possible values are: `BLOCK_ALL`.
	//
	// ***
	EnrollmentLevel pulumi.StringPtrInput `pulumi:"enrollmentLevel"`
}

func (AccessApprovalSettingsEnrolledServiceArgs) ElementType 

func (AccessApprovalSettingsEnrolledServiceArgs) ElementType() reflect.Type

func (AccessApprovalSettingsEnrolledServiceArgs) ToAccessApprovalSettingsEnrolledServiceOutput 

func (i AccessApprovalSettingsEnrolledServiceArgs) ToAccessApprovalSettingsEnrolledServiceOutput() AccessApprovalSettingsEnrolledServiceOutput

func (AccessApprovalSettingsEnrolledServiceArgs) ToAccessApprovalSettingsEnrolledServiceOutputWithContext 

func (i AccessApprovalSettingsEnrolledServiceArgs) ToAccessApprovalSettingsEnrolledServiceOutputWithContext(ctx context.Context) AccessApprovalSettingsEnrolledServiceOutput

type AccessApprovalSettingsEnrolledServiceArray 

type AccessApprovalSettingsEnrolledServiceArray []AccessApprovalSettingsEnrolledServiceInput

func (AccessApprovalSettingsEnrolledServiceArray) ElementType 

func (AccessApprovalSettingsEnrolledServiceArray) ElementType() reflect.Type

func (AccessApprovalSettingsEnrolledServiceArray) ToAccessApprovalSettingsEnrolledServiceArrayOutput 

func (i AccessApprovalSettingsEnrolledServiceArray) ToAccessApprovalSettingsEnrolledServiceArrayOutput() AccessApprovalSettingsEnrolledServiceArrayOutput

func (AccessApprovalSettingsEnrolledServiceArray) ToAccessApprovalSettingsEnrolledServiceArrayOutputWithContext 

func (i AccessApprovalSettingsEnrolledServiceArray) ToAccessApprovalSettingsEnrolledServiceArrayOutputWithContext(ctx context.Context) AccessApprovalSettingsEnrolledServiceArrayOutput

type AccessApprovalSettingsEnrolledServiceArrayInput 

type AccessApprovalSettingsEnrolledServiceArrayInput interface {
	pulumi.Input

	ToAccessApprovalSettingsEnrolledServiceArrayOutput() AccessApprovalSettingsEnrolledServiceArrayOutput
	ToAccessApprovalSettingsEnrolledServiceArrayOutputWithContext(context.Context) AccessApprovalSettingsEnrolledServiceArrayOutput
}

AccessApprovalSettingsEnrolledServiceArrayInput is an input type that accepts AccessApprovalSettingsEnrolledServiceArray and AccessApprovalSettingsEnrolledServiceArrayOutput values. You can construct a concrete instance of `AccessApprovalSettingsEnrolledServiceArrayInput` via: 

AccessApprovalSettingsEnrolledServiceArray{ AccessApprovalSettingsEnrolledServiceArgs{...} }

type AccessApprovalSettingsEnrolledServiceArrayOutput 

type AccessApprovalSettingsEnrolledServiceArrayOutput struct{ *pulumi.OutputState }

func (AccessApprovalSettingsEnrolledServiceArrayOutput) ElementType 

func (AccessApprovalSettingsEnrolledServiceArrayOutput) ElementType() reflect.Type

func (AccessApprovalSettingsEnrolledServiceArrayOutput) Index 

func (o AccessApprovalSettingsEnrolledServiceArrayOutput) Index(i pulumi.IntInput) AccessApprovalSettingsEnrolledServiceOutput

func (AccessApprovalSettingsEnrolledServiceArrayOutput) ToAccessApprovalSettingsEnrolledServiceArrayOutput 

func (o AccessApprovalSettingsEnrolledServiceArrayOutput) ToAccessApprovalSettingsEnrolledServiceArrayOutput() AccessApprovalSettingsEnrolledServiceArrayOutput

func (AccessApprovalSettingsEnrolledServiceArrayOutput) ToAccessApprovalSettingsEnrolledServiceArrayOutputWithContext 

func (o AccessApprovalSettingsEnrolledServiceArrayOutput) ToAccessApprovalSettingsEnrolledServiceArrayOutputWithContext(ctx context.Context) AccessApprovalSettingsEnrolledServiceArrayOutput

type AccessApprovalSettingsEnrolledServiceInput 

type AccessApprovalSettingsEnrolledServiceInput interface {
	pulumi.Input

	ToAccessApprovalSettingsEnrolledServiceOutput() AccessApprovalSettingsEnrolledServiceOutput
	ToAccessApprovalSettingsEnrolledServiceOutputWithContext(context.Context) AccessApprovalSettingsEnrolledServiceOutput
}

AccessApprovalSettingsEnrolledServiceInput is an input type that accepts AccessApprovalSettingsEnrolledServiceArgs and AccessApprovalSettingsEnrolledServiceOutput values. You can construct a concrete instance of `AccessApprovalSettingsEnrolledServiceInput` via: 

AccessApprovalSettingsEnrolledServiceArgs{...}

type AccessApprovalSettingsEnrolledServiceOutput 

type AccessApprovalSettingsEnrolledServiceOutput struct{ *pulumi.OutputState }

func (AccessApprovalSettingsEnrolledServiceOutput) CloudProduct 

func (o AccessApprovalSettingsEnrolledServiceOutput) CloudProduct() pulumi.StringOutput

The product for which Access Approval will be enrolled. Allowed values are listed (case-sensitive): all appengine.googleapis.com bigquery.googleapis.com bigtable.googleapis.com cloudkms.googleapis.com compute.googleapis.com dataflow.googleapis.com iam.googleapis.com pubsub.googleapis.com storage.googleapis.com

func (AccessApprovalSettingsEnrolledServiceOutput) ElementType 

func (AccessApprovalSettingsEnrolledServiceOutput) ElementType() reflect.Type

func (AccessApprovalSettingsEnrolledServiceOutput) EnrollmentLevel 

func (o AccessApprovalSettingsEnrolledServiceOutput) EnrollmentLevel() pulumi.StringPtrOutput

The enrollment level of the service. Default value is `BLOCK_ALL`. Possible values are: `BLOCK_ALL`.

***

func (AccessApprovalSettingsEnrolledServiceOutput) ToAccessApprovalSettingsEnrolledServiceOutput 

func (o AccessApprovalSettingsEnrolledServiceOutput) ToAccessApprovalSettingsEnrolledServiceOutput() AccessApprovalSettingsEnrolledServiceOutput

func (AccessApprovalSettingsEnrolledServiceOutput) ToAccessApprovalSettingsEnrolledServiceOutputWithContext 

func (o AccessApprovalSettingsEnrolledServiceOutput) ToAccessApprovalSettingsEnrolledServiceOutputWithContext(ctx context.Context) AccessApprovalSettingsEnrolledServiceOutput

type AccessApprovalSettingsInput 

type AccessApprovalSettingsInput interface {
	pulumi.Input

	ToAccessApprovalSettingsOutput() AccessApprovalSettingsOutput
	ToAccessApprovalSettingsOutputWithContext(ctx context.Context) AccessApprovalSettingsOutput
}

type AccessApprovalSettingsMap 

type AccessApprovalSettingsMap map[string]AccessApprovalSettingsInput

func (AccessApprovalSettingsMap) ElementType 

func (AccessApprovalSettingsMap) ElementType() reflect.Type

func (AccessApprovalSettingsMap) ToAccessApprovalSettingsMapOutput 

func (i AccessApprovalSettingsMap) ToAccessApprovalSettingsMapOutput() AccessApprovalSettingsMapOutput

func (AccessApprovalSettingsMap) ToAccessApprovalSettingsMapOutputWithContext 

func (i AccessApprovalSettingsMap) ToAccessApprovalSettingsMapOutputWithContext(ctx context.Context) AccessApprovalSettingsMapOutput

type AccessApprovalSettingsMapInput 

type AccessApprovalSettingsMapInput interface {
	pulumi.Input

	ToAccessApprovalSettingsMapOutput() AccessApprovalSettingsMapOutput
	ToAccessApprovalSettingsMapOutputWithContext(context.Context) AccessApprovalSettingsMapOutput
}

AccessApprovalSettingsMapInput is an input type that accepts AccessApprovalSettingsMap and AccessApprovalSettingsMapOutput values. You can construct a concrete instance of `AccessApprovalSettingsMapInput` via: 

AccessApprovalSettingsMap{ "key": AccessApprovalSettingsArgs{...} }

type AccessApprovalSettingsMapOutput 

type AccessApprovalSettingsMapOutput struct{ *pulumi.OutputState }

func (AccessApprovalSettingsMapOutput) ElementType 

func (AccessApprovalSettingsMapOutput) ElementType() reflect.Type

func (AccessApprovalSettingsMapOutput) MapIndex 

func (o AccessApprovalSettingsMapOutput) MapIndex(k pulumi.StringInput) AccessApprovalSettingsOutput

func (AccessApprovalSettingsMapOutput) ToAccessApprovalSettingsMapOutput 

func (o AccessApprovalSettingsMapOutput) ToAccessApprovalSettingsMapOutput() AccessApprovalSettingsMapOutput

func (AccessApprovalSettingsMapOutput) ToAccessApprovalSettingsMapOutputWithContext 

func (o AccessApprovalSettingsMapOutput) ToAccessApprovalSettingsMapOutputWithContext(ctx context.Context) AccessApprovalSettingsMapOutput

type AccessApprovalSettingsOutput 

type AccessApprovalSettingsOutput struct{ *pulumi.OutputState }

func (AccessApprovalSettingsOutput) ActiveKeyVersion 

func (o AccessApprovalSettingsOutput) ActiveKeyVersion() pulumi.StringPtrOutput

The asymmetric crypto key version to use for signing approval requests. Empty activeKeyVersion indicates that a Google-managed key should be used for signing. This property will be ignored if set by an ancestor of the resource, and new non-empty values may not be set.

func (AccessApprovalSettingsOutput) AncestorHasActiveKeyVersion 

func (o AccessApprovalSettingsOutput) AncestorHasActiveKeyVersion() pulumi.BoolOutput

If the field is true, that indicates that an ancestor of this Project has set active_key_version.

func (AccessApprovalSettingsOutput) ElementType 

func (AccessApprovalSettingsOutput) ElementType() reflect.Type

func (AccessApprovalSettingsOutput) EnrolledAncestor 

func (o AccessApprovalSettingsOutput) EnrolledAncestor() pulumi.BoolOutput

If the field is true, that indicates that at least one service is enrolled for Access Approval in one or more ancestors of the Project.

func (AccessApprovalSettingsOutput) EnrolledServices 

func (o AccessApprovalSettingsOutput) EnrolledServices() AccessApprovalSettingsEnrolledServiceArrayOutput

A list of Google Cloud Services for which the given resource has Access Approval enrolled. Access requests for the resource given by name against any of these services contained here will be required to have explicit approval. Enrollment can only be done on an all or nothing basis. A maximum of 10 enrolled services will be enforced, to be expanded as the set of supported services is expanded. Structure is documented below.

func (AccessApprovalSettingsOutput) InvalidKeyVersion 

func (o AccessApprovalSettingsOutput) InvalidKeyVersion() pulumi.BoolOutput

If the field is true, that indicates that there is some configuration issue with the activeKeyVersion configured on this Project (e.g. it doesn't exist or the Access Approval service account doesn't have the correct permissions on it, etc.) This key version is not necessarily the effective key version at this level, as key versions are inherited top-down.

func (AccessApprovalSettingsOutput) Name 

func (o AccessApprovalSettingsOutput) Name() pulumi.StringOutput

The resource name of the settings. Format is "projects/{project_id}/accessApprovalSettings"

func (AccessApprovalSettingsOutput) NotificationEmails 

func (o AccessApprovalSettingsOutput) NotificationEmails() pulumi.StringArrayOutput

A list of email addresses to which notifications relating to approval requests should be sent. Notifications relating to a resource will be sent to all emails in the settings of ancestor resources of that resource. A maximum of 50 email addresses are allowed.

func (AccessApprovalSettingsOutput) Project deprecated 

func (o AccessApprovalSettingsOutput) Project() pulumi.StringPtrOutput

Project id.

Deprecated: `project` is deprecated and will be removed in a future major release. Use `projectId` instead.

func (AccessApprovalSettingsOutput) ProjectId 

func (o AccessApprovalSettingsOutput) ProjectId() pulumi.StringOutput

ID of the project of the access approval settings.

func (AccessApprovalSettingsOutput) ToAccessApprovalSettingsOutput 

func (o AccessApprovalSettingsOutput) ToAccessApprovalSettingsOutput() AccessApprovalSettingsOutput

func (AccessApprovalSettingsOutput) ToAccessApprovalSettingsOutputWithContext 

func (o AccessApprovalSettingsOutput) ToAccessApprovalSettingsOutputWithContext(ctx context.Context) AccessApprovalSettingsOutput

type AccessApprovalSettingsState 

type AccessApprovalSettingsState struct {
	// The asymmetric crypto key version to use for signing approval requests. Empty activeKeyVersion indicates that a
	// Google-managed key should be used for signing. This property will be ignored if set by an ancestor of the resource, and
	// new non-empty values may not be set.
	ActiveKeyVersion pulumi.StringPtrInput
	// If the field is true, that indicates that an ancestor of this Project has set active_key_version.
	AncestorHasActiveKeyVersion pulumi.BoolPtrInput
	// If the field is true, that indicates that at least one service is enrolled for Access Approval in one or more ancestors of the Project.
	EnrolledAncestor pulumi.BoolPtrInput
	// A list of Google Cloud Services for which the given resource has Access Approval enrolled.
	// Access requests for the resource given by name against any of these services contained here will be required
	// to have explicit approval. Enrollment can only be done on an all or nothing basis.
	// A maximum of 10 enrolled services will be enforced, to be expanded as the set of supported services is expanded.
	// Structure is documented below.
	EnrolledServices AccessApprovalSettingsEnrolledServiceArrayInput
	// If the field is true, that indicates that there is some configuration issue with the activeKeyVersion
	// configured on this Project (e.g. it doesn't exist or the Access Approval service account doesn't have the
	// correct permissions on it, etc.) This key version is not necessarily the effective key version at this level,
	// as key versions are inherited top-down.
	InvalidKeyVersion pulumi.BoolPtrInput
	// The resource name of the settings. Format is "projects/{project_id}/accessApprovalSettings"
	Name pulumi.StringPtrInput
	// A list of email addresses to which notifications relating to approval requests should be sent. Notifications relating to
	// a resource will be sent to all emails in the settings of ancestor resources of that resource. A maximum of 50 email
	// addresses are allowed.
	NotificationEmails pulumi.StringArrayInput
	// Project id.
	//
	// Deprecated: `project` is deprecated and will be removed in a future major release. Use `projectId` instead.
	Project pulumi.StringPtrInput
	// ID of the project of the access approval settings.
	ProjectId pulumi.StringPtrInput
}

func (AccessApprovalSettingsState) ElementType 

func (AccessApprovalSettingsState) ElementType() reflect.Type

type ApiKey 

type ApiKey struct {
	pulumi.CustomResourceState

	// Human-readable display name of this API key. Modifiable by user.
	DisplayName pulumi.StringPtrOutput `pulumi:"displayName"`
	// Output only. An encrypted and signed value held by this key. This field can be accessed only through the `GetKeyString` method.
	KeyString pulumi.StringOutput `pulumi:"keyString"`
	// The resource name of the key. The name must be unique within the project, must conform with RFC-1034, is restricted to lower-cased letters, and has a maximum length of 63 characters. In another word, the name must match the regular expression: `a-z?`.
	Name pulumi.StringOutput `pulumi:"name"`
	// The project for the resource
	Project pulumi.StringOutput `pulumi:"project"`
	// Key restrictions.
	Restrictions ApiKeyRestrictionsPtrOutput `pulumi:"restrictions"`
	// Output only. Unique id in UUID4 format.
	Uid pulumi.StringOutput `pulumi:"uid"`
}

The Apikeys Key resource

## Example Usage

### Android_key A basic example of a android api keys key ```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewApiKey(ctx, "primary", &projects.ApiKeyArgs{
			Name:        pulumi.String("key"),
			DisplayName: pulumi.String("sample-key"),
			Restrictions: &projects.ApiKeyRestrictionsArgs{
				AndroidKeyRestrictions: &projects.ApiKeyRestrictionsAndroidKeyRestrictionsArgs{
					AllowedApplications: projects.ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArray{
						&projects.ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArgs{
							PackageName:     pulumi.String("com.example.app123"),
							Sha1Fingerprint: pulumi.String("1699466a142d4682a5f91b50fdf400f2358e2b0b"),
						},
					},
				},
				ApiTargets: projects.ApiKeyRestrictionsApiTargetArray{
					&projects.ApiKeyRestrictionsApiTargetArgs{
						Service: pulumi.String("translate.googleapis.com"),
						Methods: pulumi.StringArray{
							pulumi.String("GET*"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Basic_key A basic example of a api keys key ```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewApiKey(ctx, "primary", &projects.ApiKeyArgs{
			Name:        pulumi.String("key"),
			DisplayName: pulumi.String("sample-key"),
			Restrictions: &projects.ApiKeyRestrictionsArgs{
				ApiTargets: projects.ApiKeyRestrictionsApiTargetArray{
					&projects.ApiKeyRestrictionsApiTargetArgs{
						Service: pulumi.String("translate.googleapis.com"),
						Methods: pulumi.StringArray{
							pulumi.String("GET*"),
						},
					},
				},
				BrowserKeyRestrictions: &projects.ApiKeyRestrictionsBrowserKeyRestrictionsArgs{
					AllowedReferrers: pulumi.StringArray{
						pulumi.String(".*"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Ios_key A basic example of a ios api keys key ```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewApiKey(ctx, "primary", &projects.ApiKeyArgs{
			Name:        pulumi.String("key"),
			DisplayName: pulumi.String("sample-key"),
			Restrictions: &projects.ApiKeyRestrictionsArgs{
				ApiTargets: projects.ApiKeyRestrictionsApiTargetArray{
					&projects.ApiKeyRestrictionsApiTargetArgs{
						Service: pulumi.String("translate.googleapis.com"),
						Methods: pulumi.StringArray{
							pulumi.String("GET*"),
						},
					},
				},
				IosKeyRestrictions: &projects.ApiKeyRestrictionsIosKeyRestrictionsArgs{
					AllowedBundleIds: pulumi.StringArray{
						pulumi.String("com.google.app.macos"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Minimal_key A minimal example of a api keys key ```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewApiKey(ctx, "primary", &projects.ApiKeyArgs{
			Name:        pulumi.String("key"),
			DisplayName: pulumi.String("sample-key"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

``` ### Server_key A basic example of a server api keys key ```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewApiKey(ctx, "primary", &projects.ApiKeyArgs{
			Name:        pulumi.String("key"),
			DisplayName: pulumi.String("sample-key"),
			Restrictions: &projects.ApiKeyRestrictionsArgs{
				ApiTargets: projects.ApiKeyRestrictionsApiTargetArray{
					&projects.ApiKeyRestrictionsApiTargetArgs{
						Service: pulumi.String("translate.googleapis.com"),
						Methods: pulumi.StringArray{
							pulumi.String("GET*"),
						},
					},
				},
				ServerKeyRestrictions: &projects.ApiKeyRestrictionsServerKeyRestrictionsArgs{
					AllowedIps: pulumi.StringArray{
						pulumi.String("127.0.0.1"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Key can be imported using any of these accepted formats:

* `projects/{{project}}/locations/global/keys/{{name}}`

* `{{project}}/{{name}}`

* `{{name}}`

When using the `pulumi import` command, Key can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:projects/apiKey:ApiKey default projects/{{project}}/locations/global/keys/{{name}} ```

```sh $ pulumi import gcp:projects/apiKey:ApiKey default {{project}}/{{name}} ```

```sh $ pulumi import gcp:projects/apiKey:ApiKey default {{name}} ```

func GetApiKey 

func GetApiKey(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApiKeyState, opts ...pulumi.ResourceOption) (*ApiKey, error)

GetApiKey gets an existing ApiKey resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApiKey 

func NewApiKey(ctx *pulumi.Context,
	name string, args *ApiKeyArgs, opts ...pulumi.ResourceOption) (*ApiKey, error)

NewApiKey registers a new resource with the given unique name, arguments, and options.

func (*ApiKey) ElementType 

func (*ApiKey) ElementType() reflect.Type

func (*ApiKey) ToApiKeyOutput 

func (i *ApiKey) ToApiKeyOutput() ApiKeyOutput

func (*ApiKey) ToApiKeyOutputWithContext 

func (i *ApiKey) ToApiKeyOutputWithContext(ctx context.Context) ApiKeyOutput

type ApiKeyArgs 

type ApiKeyArgs struct {
	// Human-readable display name of this API key. Modifiable by user.
	DisplayName pulumi.StringPtrInput
	// The resource name of the key. The name must be unique within the project, must conform with RFC-1034, is restricted to lower-cased letters, and has a maximum length of 63 characters. In another word, the name must match the regular expression: `a-z?`.
	Name pulumi.StringPtrInput
	// The project for the resource
	Project pulumi.StringPtrInput
	// Key restrictions.
	Restrictions ApiKeyRestrictionsPtrInput
}

The set of arguments for constructing a ApiKey resource.

func (ApiKeyArgs) ElementType 

func (ApiKeyArgs) ElementType() reflect.Type

type ApiKeyArray 

type ApiKeyArray []ApiKeyInput

func (ApiKeyArray) ElementType 

func (ApiKeyArray) ElementType() reflect.Type

func (ApiKeyArray) ToApiKeyArrayOutput 

func (i ApiKeyArray) ToApiKeyArrayOutput() ApiKeyArrayOutput

func (ApiKeyArray) ToApiKeyArrayOutputWithContext 

func (i ApiKeyArray) ToApiKeyArrayOutputWithContext(ctx context.Context) ApiKeyArrayOutput

type ApiKeyArrayInput 

type ApiKeyArrayInput interface {
	pulumi.Input

	ToApiKeyArrayOutput() ApiKeyArrayOutput
	ToApiKeyArrayOutputWithContext(context.Context) ApiKeyArrayOutput
}

ApiKeyArrayInput is an input type that accepts ApiKeyArray and ApiKeyArrayOutput values. You can construct a concrete instance of `ApiKeyArrayInput` via: 

ApiKeyArray{ ApiKeyArgs{...} }

type ApiKeyArrayOutput 

type ApiKeyArrayOutput struct{ *pulumi.OutputState }

func (ApiKeyArrayOutput) ElementType 

func (ApiKeyArrayOutput) ElementType() reflect.Type

func (ApiKeyArrayOutput) Index 

func (o ApiKeyArrayOutput) Index(i pulumi.IntInput) ApiKeyOutput

func (ApiKeyArrayOutput) ToApiKeyArrayOutput 

func (o ApiKeyArrayOutput) ToApiKeyArrayOutput() ApiKeyArrayOutput

func (ApiKeyArrayOutput) ToApiKeyArrayOutputWithContext 

func (o ApiKeyArrayOutput) ToApiKeyArrayOutputWithContext(ctx context.Context) ApiKeyArrayOutput

type ApiKeyInput 

type ApiKeyInput interface {
	pulumi.Input

	ToApiKeyOutput() ApiKeyOutput
	ToApiKeyOutputWithContext(ctx context.Context) ApiKeyOutput
}

type ApiKeyMap 

type ApiKeyMap map[string]ApiKeyInput

func (ApiKeyMap) ElementType 

func (ApiKeyMap) ElementType() reflect.Type

func (ApiKeyMap) ToApiKeyMapOutput 

func (i ApiKeyMap) ToApiKeyMapOutput() ApiKeyMapOutput

func (ApiKeyMap) ToApiKeyMapOutputWithContext 

func (i ApiKeyMap) ToApiKeyMapOutputWithContext(ctx context.Context) ApiKeyMapOutput

type ApiKeyMapInput 

type ApiKeyMapInput interface {
	pulumi.Input

	ToApiKeyMapOutput() ApiKeyMapOutput
	ToApiKeyMapOutputWithContext(context.Context) ApiKeyMapOutput
}

ApiKeyMapInput is an input type that accepts ApiKeyMap and ApiKeyMapOutput values. You can construct a concrete instance of `ApiKeyMapInput` via: 

ApiKeyMap{ "key": ApiKeyArgs{...} }

type ApiKeyMapOutput 

type ApiKeyMapOutput struct{ *pulumi.OutputState }

func (ApiKeyMapOutput) ElementType 

func (ApiKeyMapOutput) ElementType() reflect.Type

func (ApiKeyMapOutput) MapIndex 

func (o ApiKeyMapOutput) MapIndex(k pulumi.StringInput) ApiKeyOutput

func (ApiKeyMapOutput) ToApiKeyMapOutput 

func (o ApiKeyMapOutput) ToApiKeyMapOutput() ApiKeyMapOutput

func (ApiKeyMapOutput) ToApiKeyMapOutputWithContext 

func (o ApiKeyMapOutput) ToApiKeyMapOutputWithContext(ctx context.Context) ApiKeyMapOutput

type ApiKeyOutput 

type ApiKeyOutput struct{ *pulumi.OutputState }

func (ApiKeyOutput) DisplayName 

func (o ApiKeyOutput) DisplayName() pulumi.StringPtrOutput

Human-readable display name of this API key. Modifiable by user.

func (ApiKeyOutput) ElementType 

func (ApiKeyOutput) ElementType() reflect.Type

func (ApiKeyOutput) KeyString 

func (o ApiKeyOutput) KeyString() pulumi.StringOutput

Output only. An encrypted and signed value held by this key. This field can be accessed only through the `GetKeyString` method.

func (ApiKeyOutput) Name 

func (o ApiKeyOutput) Name() pulumi.StringOutput

The resource name of the key. The name must be unique within the project, must conform with RFC-1034, is restricted to lower-cased letters, and has a maximum length of 63 characters. In another word, the name must match the regular expression: `a-z?`.

func (ApiKeyOutput) Project 

func (o ApiKeyOutput) Project() pulumi.StringOutput

The project for the resource

func (ApiKeyOutput) Restrictions 

func (o ApiKeyOutput) Restrictions() ApiKeyRestrictionsPtrOutput

Key restrictions.

func (ApiKeyOutput) ToApiKeyOutput 

func (o ApiKeyOutput) ToApiKeyOutput() ApiKeyOutput

func (ApiKeyOutput) ToApiKeyOutputWithContext 

func (o ApiKeyOutput) ToApiKeyOutputWithContext(ctx context.Context) ApiKeyOutput

func (ApiKeyOutput) Uid 

func (o ApiKeyOutput) Uid() pulumi.StringOutput

Output only. Unique id in UUID4 format.

type ApiKeyRestrictions 

type ApiKeyRestrictions struct {
	// The Android apps that are allowed to use the key.
	AndroidKeyRestrictions *ApiKeyRestrictionsAndroidKeyRestrictions `pulumi:"androidKeyRestrictions"`
	// A restriction for a specific service and optionally one or more specific methods. Requests are allowed if they match any of these restrictions. If no restrictions are specified, all targets are allowed.
	ApiTargets []ApiKeyRestrictionsApiTarget `pulumi:"apiTargets"`
	// The HTTP referrers (websites) that are allowed to use the key.
	BrowserKeyRestrictions *ApiKeyRestrictionsBrowserKeyRestrictions `pulumi:"browserKeyRestrictions"`
	// The iOS apps that are allowed to use the key.
	IosKeyRestrictions *ApiKeyRestrictionsIosKeyRestrictions `pulumi:"iosKeyRestrictions"`
	// The IP addresses of callers that are allowed to use the key.
	ServerKeyRestrictions *ApiKeyRestrictionsServerKeyRestrictions `pulumi:"serverKeyRestrictions"`
}

type ApiKeyRestrictionsAndroidKeyRestrictions 

type ApiKeyRestrictionsAndroidKeyRestrictions struct {
	// A list of Android applications that are allowed to make API calls with this key.
	AllowedApplications []ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplication `pulumi:"allowedApplications"`
}

type ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplication 

type ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplication struct {
	// The package name of the application.
	PackageName string `pulumi:"packageName"`
	// The SHA1 fingerprint of the application. For example, both sha1 formats are acceptable : DA:39:A3:EE:5E:6B:4B:0D:32:55:BF:EF:95:60:18:90:AF:D8:07:09 or DA39A3EE5E6B4B0D3255BFEF95601890AFD80709. Output format is the latter.
	//
	// ***
	Sha1Fingerprint string `pulumi:"sha1Fingerprint"`
}

type ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArgs 

type ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArgs struct {
	// The package name of the application.
	PackageName pulumi.StringInput `pulumi:"packageName"`
	// The SHA1 fingerprint of the application. For example, both sha1 formats are acceptable : DA:39:A3:EE:5E:6B:4B:0D:32:55:BF:EF:95:60:18:90:AF:D8:07:09 or DA39A3EE5E6B4B0D3255BFEF95601890AFD80709. Output format is the latter.
	//
	// ***
	Sha1Fingerprint pulumi.StringInput `pulumi:"sha1Fingerprint"`
}

func (ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArgs) ElementType 

func (ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArgs) ElementType() reflect.Type

func (ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArgs) ToApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput 

func (i ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArgs) ToApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput() ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput

func (ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArgs) ToApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutputWithContext 

func (i ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArgs) ToApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutputWithContext(ctx context.Context) ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput

type ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArray 

type ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArray []ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationInput

func (ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArray) ElementType 

func (ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArray) ElementType() reflect.Type

func (ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArray) ToApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput 

func (i ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArray) ToApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput() ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput

func (ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArray) ToApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutputWithContext 

func (i ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArray) ToApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutputWithContext(ctx context.Context) ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput

type ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayInput 

type ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayInput interface {
	pulumi.Input

	ToApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput() ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput
	ToApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutputWithContext(context.Context) ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput
}

ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayInput is an input type that accepts ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArray and ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput values. You can construct a concrete instance of `ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayInput` via: 

ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArray{ ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArgs{...} }

type ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput 

type ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput struct{ *pulumi.OutputState }

func (ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput) ElementType 

func (ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput) ElementType() reflect.Type

func (ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput) Index 

func (o ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput) Index(i pulumi.IntInput) ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput

func (ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput) ToApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput 

func (o ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput) ToApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput() ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput

func (ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput) ToApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutputWithContext 

func (o ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput) ToApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutputWithContext(ctx context.Context) ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput

type ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationInput 

type ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationInput interface {
	pulumi.Input

	ToApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput() ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput
	ToApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutputWithContext(context.Context) ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput
}

ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationInput is an input type that accepts ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArgs and ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput values. You can construct a concrete instance of `ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationInput` via: 

ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArgs{...}

type ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput 

type ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput struct{ *pulumi.OutputState }

func (ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput) ElementType 

func (ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput) ElementType() reflect.Type

func (ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput) PackageName 

func (o ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput) PackageName() pulumi.StringOutput

The package name of the application.

func (ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput) Sha1Fingerprint 

func (o ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput) Sha1Fingerprint() pulumi.StringOutput

The SHA1 fingerprint of the application. For example, both sha1 formats are acceptable : DA:39:A3:EE:5E:6B:4B:0D:32:55:BF:EF:95:60:18:90:AF:D8:07:09 or DA39A3EE5E6B4B0D3255BFEF95601890AFD80709. Output format is the latter.

***

func (ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput) ToApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput 

func (o ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput) ToApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput() ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput

func (ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput) ToApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutputWithContext 

func (o ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput) ToApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutputWithContext(ctx context.Context) ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationOutput

type ApiKeyRestrictionsAndroidKeyRestrictionsArgs 

type ApiKeyRestrictionsAndroidKeyRestrictionsArgs struct {
	// A list of Android applications that are allowed to make API calls with this key.
	AllowedApplications ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayInput `pulumi:"allowedApplications"`
}

func (ApiKeyRestrictionsAndroidKeyRestrictionsArgs) ElementType 

func (ApiKeyRestrictionsAndroidKeyRestrictionsArgs) ElementType() reflect.Type

func (ApiKeyRestrictionsAndroidKeyRestrictionsArgs) ToApiKeyRestrictionsAndroidKeyRestrictionsOutput 

func (i ApiKeyRestrictionsAndroidKeyRestrictionsArgs) ToApiKeyRestrictionsAndroidKeyRestrictionsOutput() ApiKeyRestrictionsAndroidKeyRestrictionsOutput

func (ApiKeyRestrictionsAndroidKeyRestrictionsArgs) ToApiKeyRestrictionsAndroidKeyRestrictionsOutputWithContext 

func (i ApiKeyRestrictionsAndroidKeyRestrictionsArgs) ToApiKeyRestrictionsAndroidKeyRestrictionsOutputWithContext(ctx context.Context) ApiKeyRestrictionsAndroidKeyRestrictionsOutput

func (ApiKeyRestrictionsAndroidKeyRestrictionsArgs) ToApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput 

func (i ApiKeyRestrictionsAndroidKeyRestrictionsArgs) ToApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput() ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput

func (ApiKeyRestrictionsAndroidKeyRestrictionsArgs) ToApiKeyRestrictionsAndroidKeyRestrictionsPtrOutputWithContext 

func (i ApiKeyRestrictionsAndroidKeyRestrictionsArgs) ToApiKeyRestrictionsAndroidKeyRestrictionsPtrOutputWithContext(ctx context.Context) ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput

type ApiKeyRestrictionsAndroidKeyRestrictionsInput 

type ApiKeyRestrictionsAndroidKeyRestrictionsInput interface {
	pulumi.Input

	ToApiKeyRestrictionsAndroidKeyRestrictionsOutput() ApiKeyRestrictionsAndroidKeyRestrictionsOutput
	ToApiKeyRestrictionsAndroidKeyRestrictionsOutputWithContext(context.Context) ApiKeyRestrictionsAndroidKeyRestrictionsOutput
}

ApiKeyRestrictionsAndroidKeyRestrictionsInput is an input type that accepts ApiKeyRestrictionsAndroidKeyRestrictionsArgs and ApiKeyRestrictionsAndroidKeyRestrictionsOutput values. You can construct a concrete instance of `ApiKeyRestrictionsAndroidKeyRestrictionsInput` via: 

ApiKeyRestrictionsAndroidKeyRestrictionsArgs{...}

type ApiKeyRestrictionsAndroidKeyRestrictionsOutput 

type ApiKeyRestrictionsAndroidKeyRestrictionsOutput struct{ *pulumi.OutputState }

func (ApiKeyRestrictionsAndroidKeyRestrictionsOutput) AllowedApplications 

func (o ApiKeyRestrictionsAndroidKeyRestrictionsOutput) AllowedApplications() ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput

A list of Android applications that are allowed to make API calls with this key.

func (ApiKeyRestrictionsAndroidKeyRestrictionsOutput) ElementType 

func (ApiKeyRestrictionsAndroidKeyRestrictionsOutput) ElementType() reflect.Type

func (ApiKeyRestrictionsAndroidKeyRestrictionsOutput) ToApiKeyRestrictionsAndroidKeyRestrictionsOutput 

func (o ApiKeyRestrictionsAndroidKeyRestrictionsOutput) ToApiKeyRestrictionsAndroidKeyRestrictionsOutput() ApiKeyRestrictionsAndroidKeyRestrictionsOutput

func (ApiKeyRestrictionsAndroidKeyRestrictionsOutput) ToApiKeyRestrictionsAndroidKeyRestrictionsOutputWithContext 

func (o ApiKeyRestrictionsAndroidKeyRestrictionsOutput) ToApiKeyRestrictionsAndroidKeyRestrictionsOutputWithContext(ctx context.Context) ApiKeyRestrictionsAndroidKeyRestrictionsOutput

func (ApiKeyRestrictionsAndroidKeyRestrictionsOutput) ToApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput 

func (o ApiKeyRestrictionsAndroidKeyRestrictionsOutput) ToApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput() ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput

func (ApiKeyRestrictionsAndroidKeyRestrictionsOutput) ToApiKeyRestrictionsAndroidKeyRestrictionsPtrOutputWithContext 

func (o ApiKeyRestrictionsAndroidKeyRestrictionsOutput) ToApiKeyRestrictionsAndroidKeyRestrictionsPtrOutputWithContext(ctx context.Context) ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput

type ApiKeyRestrictionsAndroidKeyRestrictionsPtrInput 

type ApiKeyRestrictionsAndroidKeyRestrictionsPtrInput interface {
	pulumi.Input

	ToApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput() ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput
	ToApiKeyRestrictionsAndroidKeyRestrictionsPtrOutputWithContext(context.Context) ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput
}

ApiKeyRestrictionsAndroidKeyRestrictionsPtrInput is an input type that accepts ApiKeyRestrictionsAndroidKeyRestrictionsArgs, ApiKeyRestrictionsAndroidKeyRestrictionsPtr and ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput values. You can construct a concrete instance of `ApiKeyRestrictionsAndroidKeyRestrictionsPtrInput` via: 

        ApiKeyRestrictionsAndroidKeyRestrictionsArgs{...}

or:

        nil

func ApiKeyRestrictionsAndroidKeyRestrictionsPtr 

func ApiKeyRestrictionsAndroidKeyRestrictionsPtr(v *ApiKeyRestrictionsAndroidKeyRestrictionsArgs) ApiKeyRestrictionsAndroidKeyRestrictionsPtrInput

type ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput 

type ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput struct{ *pulumi.OutputState }

func (ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput) AllowedApplications 

func (o ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput) AllowedApplications() ApiKeyRestrictionsAndroidKeyRestrictionsAllowedApplicationArrayOutput

A list of Android applications that are allowed to make API calls with this key.

func (ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput) Elem 

func (o ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput) Elem() ApiKeyRestrictionsAndroidKeyRestrictionsOutput

func (ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput) ElementType 

func (ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput) ElementType() reflect.Type

func (ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput) ToApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput 

func (o ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput) ToApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput() ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput

func (ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput) ToApiKeyRestrictionsAndroidKeyRestrictionsPtrOutputWithContext 

func (o ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput) ToApiKeyRestrictionsAndroidKeyRestrictionsPtrOutputWithContext(ctx context.Context) ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput

type ApiKeyRestrictionsApiTarget 

type ApiKeyRestrictionsApiTarget struct {
	// Optional. List of one or more methods that can be called. If empty, all methods for the service are allowed. A wildcard (*) can be used as the last symbol. Valid examples: `google.cloud.translate.v2.TranslateService.GetSupportedLanguage` `TranslateText` `Get*` `translate.googleapis.com.Get*`
	Methods []string `pulumi:"methods"`
	// The service for this restriction. It should be the canonical service name, for example: `translate.googleapis.com`. You can use `gcloud services list` to get a list of services that are enabled in the project.
	Service string `pulumi:"service"`
}

type ApiKeyRestrictionsApiTargetArgs 

type ApiKeyRestrictionsApiTargetArgs struct {
	// Optional. List of one or more methods that can be called. If empty, all methods for the service are allowed. A wildcard (*) can be used as the last symbol. Valid examples: `google.cloud.translate.v2.TranslateService.GetSupportedLanguage` `TranslateText` `Get*` `translate.googleapis.com.Get*`
	Methods pulumi.StringArrayInput `pulumi:"methods"`
	// The service for this restriction. It should be the canonical service name, for example: `translate.googleapis.com`. You can use `gcloud services list` to get a list of services that are enabled in the project.
	Service pulumi.StringInput `pulumi:"service"`
}

func (ApiKeyRestrictionsApiTargetArgs) ElementType 

func (ApiKeyRestrictionsApiTargetArgs) ElementType() reflect.Type

func (ApiKeyRestrictionsApiTargetArgs) ToApiKeyRestrictionsApiTargetOutput 

func (i ApiKeyRestrictionsApiTargetArgs) ToApiKeyRestrictionsApiTargetOutput() ApiKeyRestrictionsApiTargetOutput

func (ApiKeyRestrictionsApiTargetArgs) ToApiKeyRestrictionsApiTargetOutputWithContext 

func (i ApiKeyRestrictionsApiTargetArgs) ToApiKeyRestrictionsApiTargetOutputWithContext(ctx context.Context) ApiKeyRestrictionsApiTargetOutput

type ApiKeyRestrictionsApiTargetArray 

type ApiKeyRestrictionsApiTargetArray []ApiKeyRestrictionsApiTargetInput

func (ApiKeyRestrictionsApiTargetArray) ElementType 

func (ApiKeyRestrictionsApiTargetArray) ElementType() reflect.Type

func (ApiKeyRestrictionsApiTargetArray) ToApiKeyRestrictionsApiTargetArrayOutput 

func (i ApiKeyRestrictionsApiTargetArray) ToApiKeyRestrictionsApiTargetArrayOutput() ApiKeyRestrictionsApiTargetArrayOutput

func (ApiKeyRestrictionsApiTargetArray) ToApiKeyRestrictionsApiTargetArrayOutputWithContext 

func (i ApiKeyRestrictionsApiTargetArray) ToApiKeyRestrictionsApiTargetArrayOutputWithContext(ctx context.Context) ApiKeyRestrictionsApiTargetArrayOutput

type ApiKeyRestrictionsApiTargetArrayInput 

type ApiKeyRestrictionsApiTargetArrayInput interface {
	pulumi.Input

	ToApiKeyRestrictionsApiTargetArrayOutput() ApiKeyRestrictionsApiTargetArrayOutput
	ToApiKeyRestrictionsApiTargetArrayOutputWithContext(context.Context) ApiKeyRestrictionsApiTargetArrayOutput
}

ApiKeyRestrictionsApiTargetArrayInput is an input type that accepts ApiKeyRestrictionsApiTargetArray and ApiKeyRestrictionsApiTargetArrayOutput values. You can construct a concrete instance of `ApiKeyRestrictionsApiTargetArrayInput` via: 

ApiKeyRestrictionsApiTargetArray{ ApiKeyRestrictionsApiTargetArgs{...} }

type ApiKeyRestrictionsApiTargetArrayOutput 

type ApiKeyRestrictionsApiTargetArrayOutput struct{ *pulumi.OutputState }

func (ApiKeyRestrictionsApiTargetArrayOutput) ElementType 

func (ApiKeyRestrictionsApiTargetArrayOutput) ElementType() reflect.Type

func (ApiKeyRestrictionsApiTargetArrayOutput) Index 

func (o ApiKeyRestrictionsApiTargetArrayOutput) Index(i pulumi.IntInput) ApiKeyRestrictionsApiTargetOutput

func (ApiKeyRestrictionsApiTargetArrayOutput) ToApiKeyRestrictionsApiTargetArrayOutput 

func (o ApiKeyRestrictionsApiTargetArrayOutput) ToApiKeyRestrictionsApiTargetArrayOutput() ApiKeyRestrictionsApiTargetArrayOutput

func (ApiKeyRestrictionsApiTargetArrayOutput) ToApiKeyRestrictionsApiTargetArrayOutputWithContext 

func (o ApiKeyRestrictionsApiTargetArrayOutput) ToApiKeyRestrictionsApiTargetArrayOutputWithContext(ctx context.Context) ApiKeyRestrictionsApiTargetArrayOutput

type ApiKeyRestrictionsApiTargetInput 

type ApiKeyRestrictionsApiTargetInput interface {
	pulumi.Input

	ToApiKeyRestrictionsApiTargetOutput() ApiKeyRestrictionsApiTargetOutput
	ToApiKeyRestrictionsApiTargetOutputWithContext(context.Context) ApiKeyRestrictionsApiTargetOutput
}

ApiKeyRestrictionsApiTargetInput is an input type that accepts ApiKeyRestrictionsApiTargetArgs and ApiKeyRestrictionsApiTargetOutput values. You can construct a concrete instance of `ApiKeyRestrictionsApiTargetInput` via: 

ApiKeyRestrictionsApiTargetArgs{...}

type ApiKeyRestrictionsApiTargetOutput 

type ApiKeyRestrictionsApiTargetOutput struct{ *pulumi.OutputState }

func (ApiKeyRestrictionsApiTargetOutput) ElementType 

func (ApiKeyRestrictionsApiTargetOutput) ElementType() reflect.Type

func (ApiKeyRestrictionsApiTargetOutput) Methods 

func (o ApiKeyRestrictionsApiTargetOutput) Methods() pulumi.StringArrayOutput

Optional. List of one or more methods that can be called. If empty, all methods for the service are allowed. A wildcard (*) can be used as the last symbol. Valid examples: `google.cloud.translate.v2.TranslateService.GetSupportedLanguage` `TranslateText` `Get*` `translate.googleapis.com.Get*`

func (ApiKeyRestrictionsApiTargetOutput) Service 

func (o ApiKeyRestrictionsApiTargetOutput) Service() pulumi.StringOutput

The service for this restriction. It should be the canonical service name, for example: `translate.googleapis.com`. You can use `gcloud services list` to get a list of services that are enabled in the project.

func (ApiKeyRestrictionsApiTargetOutput) ToApiKeyRestrictionsApiTargetOutput 

func (o ApiKeyRestrictionsApiTargetOutput) ToApiKeyRestrictionsApiTargetOutput() ApiKeyRestrictionsApiTargetOutput

func (ApiKeyRestrictionsApiTargetOutput) ToApiKeyRestrictionsApiTargetOutputWithContext 

func (o ApiKeyRestrictionsApiTargetOutput) ToApiKeyRestrictionsApiTargetOutputWithContext(ctx context.Context) ApiKeyRestrictionsApiTargetOutput

type ApiKeyRestrictionsArgs 

type ApiKeyRestrictionsArgs struct {
	// The Android apps that are allowed to use the key.
	AndroidKeyRestrictions ApiKeyRestrictionsAndroidKeyRestrictionsPtrInput `pulumi:"androidKeyRestrictions"`
	// A restriction for a specific service and optionally one or more specific methods. Requests are allowed if they match any of these restrictions. If no restrictions are specified, all targets are allowed.
	ApiTargets ApiKeyRestrictionsApiTargetArrayInput `pulumi:"apiTargets"`
	// The HTTP referrers (websites) that are allowed to use the key.
	BrowserKeyRestrictions ApiKeyRestrictionsBrowserKeyRestrictionsPtrInput `pulumi:"browserKeyRestrictions"`
	// The iOS apps that are allowed to use the key.
	IosKeyRestrictions ApiKeyRestrictionsIosKeyRestrictionsPtrInput `pulumi:"iosKeyRestrictions"`
	// The IP addresses of callers that are allowed to use the key.
	ServerKeyRestrictions ApiKeyRestrictionsServerKeyRestrictionsPtrInput `pulumi:"serverKeyRestrictions"`
}

func (ApiKeyRestrictionsArgs) ElementType 

func (ApiKeyRestrictionsArgs) ElementType() reflect.Type

func (ApiKeyRestrictionsArgs) ToApiKeyRestrictionsOutput 

func (i ApiKeyRestrictionsArgs) ToApiKeyRestrictionsOutput() ApiKeyRestrictionsOutput

func (ApiKeyRestrictionsArgs) ToApiKeyRestrictionsOutputWithContext 

func (i ApiKeyRestrictionsArgs) ToApiKeyRestrictionsOutputWithContext(ctx context.Context) ApiKeyRestrictionsOutput

func (ApiKeyRestrictionsArgs) ToApiKeyRestrictionsPtrOutput 

func (i ApiKeyRestrictionsArgs) ToApiKeyRestrictionsPtrOutput() ApiKeyRestrictionsPtrOutput

func (ApiKeyRestrictionsArgs) ToApiKeyRestrictionsPtrOutputWithContext 

func (i ApiKeyRestrictionsArgs) ToApiKeyRestrictionsPtrOutputWithContext(ctx context.Context) ApiKeyRestrictionsPtrOutput

type ApiKeyRestrictionsBrowserKeyRestrictions 

type ApiKeyRestrictionsBrowserKeyRestrictions struct {
	// A list of regular expressions for the referrer URLs that are allowed to make API calls with this key.
	AllowedReferrers []string `pulumi:"allowedReferrers"`
}

type ApiKeyRestrictionsBrowserKeyRestrictionsArgs 

type ApiKeyRestrictionsBrowserKeyRestrictionsArgs struct {
	// A list of regular expressions for the referrer URLs that are allowed to make API calls with this key.
	AllowedReferrers pulumi.StringArrayInput `pulumi:"allowedReferrers"`
}

func (ApiKeyRestrictionsBrowserKeyRestrictionsArgs) ElementType 

func (ApiKeyRestrictionsBrowserKeyRestrictionsArgs) ElementType() reflect.Type

func (ApiKeyRestrictionsBrowserKeyRestrictionsArgs) ToApiKeyRestrictionsBrowserKeyRestrictionsOutput 

func (i ApiKeyRestrictionsBrowserKeyRestrictionsArgs) ToApiKeyRestrictionsBrowserKeyRestrictionsOutput() ApiKeyRestrictionsBrowserKeyRestrictionsOutput

func (ApiKeyRestrictionsBrowserKeyRestrictionsArgs) ToApiKeyRestrictionsBrowserKeyRestrictionsOutputWithContext 

func (i ApiKeyRestrictionsBrowserKeyRestrictionsArgs) ToApiKeyRestrictionsBrowserKeyRestrictionsOutputWithContext(ctx context.Context) ApiKeyRestrictionsBrowserKeyRestrictionsOutput

func (ApiKeyRestrictionsBrowserKeyRestrictionsArgs) ToApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput 

func (i ApiKeyRestrictionsBrowserKeyRestrictionsArgs) ToApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput() ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput

func (ApiKeyRestrictionsBrowserKeyRestrictionsArgs) ToApiKeyRestrictionsBrowserKeyRestrictionsPtrOutputWithContext 

func (i ApiKeyRestrictionsBrowserKeyRestrictionsArgs) ToApiKeyRestrictionsBrowserKeyRestrictionsPtrOutputWithContext(ctx context.Context) ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput

type ApiKeyRestrictionsBrowserKeyRestrictionsInput 

type ApiKeyRestrictionsBrowserKeyRestrictionsInput interface {
	pulumi.Input

	ToApiKeyRestrictionsBrowserKeyRestrictionsOutput() ApiKeyRestrictionsBrowserKeyRestrictionsOutput
	ToApiKeyRestrictionsBrowserKeyRestrictionsOutputWithContext(context.Context) ApiKeyRestrictionsBrowserKeyRestrictionsOutput
}

ApiKeyRestrictionsBrowserKeyRestrictionsInput is an input type that accepts ApiKeyRestrictionsBrowserKeyRestrictionsArgs and ApiKeyRestrictionsBrowserKeyRestrictionsOutput values. You can construct a concrete instance of `ApiKeyRestrictionsBrowserKeyRestrictionsInput` via: 

ApiKeyRestrictionsBrowserKeyRestrictionsArgs{...}

type ApiKeyRestrictionsBrowserKeyRestrictionsOutput 

type ApiKeyRestrictionsBrowserKeyRestrictionsOutput struct{ *pulumi.OutputState }

func (ApiKeyRestrictionsBrowserKeyRestrictionsOutput) AllowedReferrers 

func (o ApiKeyRestrictionsBrowserKeyRestrictionsOutput) AllowedReferrers() pulumi.StringArrayOutput

A list of regular expressions for the referrer URLs that are allowed to make API calls with this key.

func (ApiKeyRestrictionsBrowserKeyRestrictionsOutput) ElementType 

func (ApiKeyRestrictionsBrowserKeyRestrictionsOutput) ElementType() reflect.Type

func (ApiKeyRestrictionsBrowserKeyRestrictionsOutput) ToApiKeyRestrictionsBrowserKeyRestrictionsOutput 

func (o ApiKeyRestrictionsBrowserKeyRestrictionsOutput) ToApiKeyRestrictionsBrowserKeyRestrictionsOutput() ApiKeyRestrictionsBrowserKeyRestrictionsOutput

func (ApiKeyRestrictionsBrowserKeyRestrictionsOutput) ToApiKeyRestrictionsBrowserKeyRestrictionsOutputWithContext 

func (o ApiKeyRestrictionsBrowserKeyRestrictionsOutput) ToApiKeyRestrictionsBrowserKeyRestrictionsOutputWithContext(ctx context.Context) ApiKeyRestrictionsBrowserKeyRestrictionsOutput

func (ApiKeyRestrictionsBrowserKeyRestrictionsOutput) ToApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput 

func (o ApiKeyRestrictionsBrowserKeyRestrictionsOutput) ToApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput() ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput

func (ApiKeyRestrictionsBrowserKeyRestrictionsOutput) ToApiKeyRestrictionsBrowserKeyRestrictionsPtrOutputWithContext 

func (o ApiKeyRestrictionsBrowserKeyRestrictionsOutput) ToApiKeyRestrictionsBrowserKeyRestrictionsPtrOutputWithContext(ctx context.Context) ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput

type ApiKeyRestrictionsBrowserKeyRestrictionsPtrInput 

type ApiKeyRestrictionsBrowserKeyRestrictionsPtrInput interface {
	pulumi.Input

	ToApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput() ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput
	ToApiKeyRestrictionsBrowserKeyRestrictionsPtrOutputWithContext(context.Context) ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput
}

ApiKeyRestrictionsBrowserKeyRestrictionsPtrInput is an input type that accepts ApiKeyRestrictionsBrowserKeyRestrictionsArgs, ApiKeyRestrictionsBrowserKeyRestrictionsPtr and ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput values. You can construct a concrete instance of `ApiKeyRestrictionsBrowserKeyRestrictionsPtrInput` via: 

        ApiKeyRestrictionsBrowserKeyRestrictionsArgs{...}

or:

        nil

func ApiKeyRestrictionsBrowserKeyRestrictionsPtr 

func ApiKeyRestrictionsBrowserKeyRestrictionsPtr(v *ApiKeyRestrictionsBrowserKeyRestrictionsArgs) ApiKeyRestrictionsBrowserKeyRestrictionsPtrInput

type ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput 

type ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput struct{ *pulumi.OutputState }

func (ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput) AllowedReferrers 

func (o ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput) AllowedReferrers() pulumi.StringArrayOutput

A list of regular expressions for the referrer URLs that are allowed to make API calls with this key.

func (ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput) Elem 

func (o ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput) Elem() ApiKeyRestrictionsBrowserKeyRestrictionsOutput

func (ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput) ElementType 

func (ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput) ElementType() reflect.Type

func (ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput) ToApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput 

func (o ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput) ToApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput() ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput

func (ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput) ToApiKeyRestrictionsBrowserKeyRestrictionsPtrOutputWithContext 

func (o ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput) ToApiKeyRestrictionsBrowserKeyRestrictionsPtrOutputWithContext(ctx context.Context) ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput

type ApiKeyRestrictionsInput 

type ApiKeyRestrictionsInput interface {
	pulumi.Input

	ToApiKeyRestrictionsOutput() ApiKeyRestrictionsOutput
	ToApiKeyRestrictionsOutputWithContext(context.Context) ApiKeyRestrictionsOutput
}

ApiKeyRestrictionsInput is an input type that accepts ApiKeyRestrictionsArgs and ApiKeyRestrictionsOutput values. You can construct a concrete instance of `ApiKeyRestrictionsInput` via: 

ApiKeyRestrictionsArgs{...}

type ApiKeyRestrictionsIosKeyRestrictions 

type ApiKeyRestrictionsIosKeyRestrictions struct {
	// A list of bundle IDs that are allowed when making API calls with this key.
	AllowedBundleIds []string `pulumi:"allowedBundleIds"`
}

type ApiKeyRestrictionsIosKeyRestrictionsArgs 

type ApiKeyRestrictionsIosKeyRestrictionsArgs struct {
	// A list of bundle IDs that are allowed when making API calls with this key.
	AllowedBundleIds pulumi.StringArrayInput `pulumi:"allowedBundleIds"`
}

func (ApiKeyRestrictionsIosKeyRestrictionsArgs) ElementType 

func (ApiKeyRestrictionsIosKeyRestrictionsArgs) ElementType() reflect.Type

func (ApiKeyRestrictionsIosKeyRestrictionsArgs) ToApiKeyRestrictionsIosKeyRestrictionsOutput 

func (i ApiKeyRestrictionsIosKeyRestrictionsArgs) ToApiKeyRestrictionsIosKeyRestrictionsOutput() ApiKeyRestrictionsIosKeyRestrictionsOutput

func (ApiKeyRestrictionsIosKeyRestrictionsArgs) ToApiKeyRestrictionsIosKeyRestrictionsOutputWithContext 

func (i ApiKeyRestrictionsIosKeyRestrictionsArgs) ToApiKeyRestrictionsIosKeyRestrictionsOutputWithContext(ctx context.Context) ApiKeyRestrictionsIosKeyRestrictionsOutput

func (ApiKeyRestrictionsIosKeyRestrictionsArgs) ToApiKeyRestrictionsIosKeyRestrictionsPtrOutput 

func (i ApiKeyRestrictionsIosKeyRestrictionsArgs) ToApiKeyRestrictionsIosKeyRestrictionsPtrOutput() ApiKeyRestrictionsIosKeyRestrictionsPtrOutput

func (ApiKeyRestrictionsIosKeyRestrictionsArgs) ToApiKeyRestrictionsIosKeyRestrictionsPtrOutputWithContext 

func (i ApiKeyRestrictionsIosKeyRestrictionsArgs) ToApiKeyRestrictionsIosKeyRestrictionsPtrOutputWithContext(ctx context.Context) ApiKeyRestrictionsIosKeyRestrictionsPtrOutput

type ApiKeyRestrictionsIosKeyRestrictionsInput 

type ApiKeyRestrictionsIosKeyRestrictionsInput interface {
	pulumi.Input

	ToApiKeyRestrictionsIosKeyRestrictionsOutput() ApiKeyRestrictionsIosKeyRestrictionsOutput
	ToApiKeyRestrictionsIosKeyRestrictionsOutputWithContext(context.Context) ApiKeyRestrictionsIosKeyRestrictionsOutput
}

ApiKeyRestrictionsIosKeyRestrictionsInput is an input type that accepts ApiKeyRestrictionsIosKeyRestrictionsArgs and ApiKeyRestrictionsIosKeyRestrictionsOutput values. You can construct a concrete instance of `ApiKeyRestrictionsIosKeyRestrictionsInput` via: 

ApiKeyRestrictionsIosKeyRestrictionsArgs{...}

type ApiKeyRestrictionsIosKeyRestrictionsOutput 

type ApiKeyRestrictionsIosKeyRestrictionsOutput struct{ *pulumi.OutputState }

func (ApiKeyRestrictionsIosKeyRestrictionsOutput) AllowedBundleIds 

func (o ApiKeyRestrictionsIosKeyRestrictionsOutput) AllowedBundleIds() pulumi.StringArrayOutput

A list of bundle IDs that are allowed when making API calls with this key.

func (ApiKeyRestrictionsIosKeyRestrictionsOutput) ElementType 

func (ApiKeyRestrictionsIosKeyRestrictionsOutput) ElementType() reflect.Type

func (ApiKeyRestrictionsIosKeyRestrictionsOutput) ToApiKeyRestrictionsIosKeyRestrictionsOutput 

func (o ApiKeyRestrictionsIosKeyRestrictionsOutput) ToApiKeyRestrictionsIosKeyRestrictionsOutput() ApiKeyRestrictionsIosKeyRestrictionsOutput

func (ApiKeyRestrictionsIosKeyRestrictionsOutput) ToApiKeyRestrictionsIosKeyRestrictionsOutputWithContext 

func (o ApiKeyRestrictionsIosKeyRestrictionsOutput) ToApiKeyRestrictionsIosKeyRestrictionsOutputWithContext(ctx context.Context) ApiKeyRestrictionsIosKeyRestrictionsOutput

func (ApiKeyRestrictionsIosKeyRestrictionsOutput) ToApiKeyRestrictionsIosKeyRestrictionsPtrOutput 

func (o ApiKeyRestrictionsIosKeyRestrictionsOutput) ToApiKeyRestrictionsIosKeyRestrictionsPtrOutput() ApiKeyRestrictionsIosKeyRestrictionsPtrOutput

func (ApiKeyRestrictionsIosKeyRestrictionsOutput) ToApiKeyRestrictionsIosKeyRestrictionsPtrOutputWithContext 

func (o ApiKeyRestrictionsIosKeyRestrictionsOutput) ToApiKeyRestrictionsIosKeyRestrictionsPtrOutputWithContext(ctx context.Context) ApiKeyRestrictionsIosKeyRestrictionsPtrOutput

type ApiKeyRestrictionsIosKeyRestrictionsPtrInput 

type ApiKeyRestrictionsIosKeyRestrictionsPtrInput interface {
	pulumi.Input

	ToApiKeyRestrictionsIosKeyRestrictionsPtrOutput() ApiKeyRestrictionsIosKeyRestrictionsPtrOutput
	ToApiKeyRestrictionsIosKeyRestrictionsPtrOutputWithContext(context.Context) ApiKeyRestrictionsIosKeyRestrictionsPtrOutput
}

ApiKeyRestrictionsIosKeyRestrictionsPtrInput is an input type that accepts ApiKeyRestrictionsIosKeyRestrictionsArgs, ApiKeyRestrictionsIosKeyRestrictionsPtr and ApiKeyRestrictionsIosKeyRestrictionsPtrOutput values. You can construct a concrete instance of `ApiKeyRestrictionsIosKeyRestrictionsPtrInput` via: 

        ApiKeyRestrictionsIosKeyRestrictionsArgs{...}

or:

        nil

func ApiKeyRestrictionsIosKeyRestrictionsPtr 

func ApiKeyRestrictionsIosKeyRestrictionsPtr(v *ApiKeyRestrictionsIosKeyRestrictionsArgs) ApiKeyRestrictionsIosKeyRestrictionsPtrInput

type ApiKeyRestrictionsIosKeyRestrictionsPtrOutput 

type ApiKeyRestrictionsIosKeyRestrictionsPtrOutput struct{ *pulumi.OutputState }

func (ApiKeyRestrictionsIosKeyRestrictionsPtrOutput) AllowedBundleIds 

func (o ApiKeyRestrictionsIosKeyRestrictionsPtrOutput) AllowedBundleIds() pulumi.StringArrayOutput

A list of bundle IDs that are allowed when making API calls with this key.

func (ApiKeyRestrictionsIosKeyRestrictionsPtrOutput) Elem 

func (o ApiKeyRestrictionsIosKeyRestrictionsPtrOutput) Elem() ApiKeyRestrictionsIosKeyRestrictionsOutput

func (ApiKeyRestrictionsIosKeyRestrictionsPtrOutput) ElementType 

func (ApiKeyRestrictionsIosKeyRestrictionsPtrOutput) ElementType() reflect.Type

func (ApiKeyRestrictionsIosKeyRestrictionsPtrOutput) ToApiKeyRestrictionsIosKeyRestrictionsPtrOutput 

func (o ApiKeyRestrictionsIosKeyRestrictionsPtrOutput) ToApiKeyRestrictionsIosKeyRestrictionsPtrOutput() ApiKeyRestrictionsIosKeyRestrictionsPtrOutput

func (ApiKeyRestrictionsIosKeyRestrictionsPtrOutput) ToApiKeyRestrictionsIosKeyRestrictionsPtrOutputWithContext 

func (o ApiKeyRestrictionsIosKeyRestrictionsPtrOutput) ToApiKeyRestrictionsIosKeyRestrictionsPtrOutputWithContext(ctx context.Context) ApiKeyRestrictionsIosKeyRestrictionsPtrOutput

type ApiKeyRestrictionsOutput 

type ApiKeyRestrictionsOutput struct{ *pulumi.OutputState }

func (ApiKeyRestrictionsOutput) AndroidKeyRestrictions 

func (o ApiKeyRestrictionsOutput) AndroidKeyRestrictions() ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput

The Android apps that are allowed to use the key.

func (ApiKeyRestrictionsOutput) ApiTargets 

func (o ApiKeyRestrictionsOutput) ApiTargets() ApiKeyRestrictionsApiTargetArrayOutput

A restriction for a specific service and optionally one or more specific methods. Requests are allowed if they match any of these restrictions. If no restrictions are specified, all targets are allowed.

func (ApiKeyRestrictionsOutput) BrowserKeyRestrictions 

func (o ApiKeyRestrictionsOutput) BrowserKeyRestrictions() ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput

The HTTP referrers (websites) that are allowed to use the key.

func (ApiKeyRestrictionsOutput) ElementType 

func (ApiKeyRestrictionsOutput) ElementType() reflect.Type

func (ApiKeyRestrictionsOutput) IosKeyRestrictions 

func (o ApiKeyRestrictionsOutput) IosKeyRestrictions() ApiKeyRestrictionsIosKeyRestrictionsPtrOutput

The iOS apps that are allowed to use the key.

func (ApiKeyRestrictionsOutput) ServerKeyRestrictions 

func (o ApiKeyRestrictionsOutput) ServerKeyRestrictions() ApiKeyRestrictionsServerKeyRestrictionsPtrOutput

The IP addresses of callers that are allowed to use the key.

func (ApiKeyRestrictionsOutput) ToApiKeyRestrictionsOutput 

func (o ApiKeyRestrictionsOutput) ToApiKeyRestrictionsOutput() ApiKeyRestrictionsOutput

func (ApiKeyRestrictionsOutput) ToApiKeyRestrictionsOutputWithContext 

func (o ApiKeyRestrictionsOutput) ToApiKeyRestrictionsOutputWithContext(ctx context.Context) ApiKeyRestrictionsOutput

func (ApiKeyRestrictionsOutput) ToApiKeyRestrictionsPtrOutput 

func (o ApiKeyRestrictionsOutput) ToApiKeyRestrictionsPtrOutput() ApiKeyRestrictionsPtrOutput

func (ApiKeyRestrictionsOutput) ToApiKeyRestrictionsPtrOutputWithContext 

func (o ApiKeyRestrictionsOutput) ToApiKeyRestrictionsPtrOutputWithContext(ctx context.Context) ApiKeyRestrictionsPtrOutput

type ApiKeyRestrictionsPtrInput 

type ApiKeyRestrictionsPtrInput interface {
	pulumi.Input

	ToApiKeyRestrictionsPtrOutput() ApiKeyRestrictionsPtrOutput
	ToApiKeyRestrictionsPtrOutputWithContext(context.Context) ApiKeyRestrictionsPtrOutput
}

ApiKeyRestrictionsPtrInput is an input type that accepts ApiKeyRestrictionsArgs, ApiKeyRestrictionsPtr and ApiKeyRestrictionsPtrOutput values. You can construct a concrete instance of `ApiKeyRestrictionsPtrInput` via: 

        ApiKeyRestrictionsArgs{...}

or:

        nil

func ApiKeyRestrictionsPtr 

func ApiKeyRestrictionsPtr(v *ApiKeyRestrictionsArgs) ApiKeyRestrictionsPtrInput

type ApiKeyRestrictionsPtrOutput 

type ApiKeyRestrictionsPtrOutput struct{ *pulumi.OutputState }

func (ApiKeyRestrictionsPtrOutput) AndroidKeyRestrictions 

func (o ApiKeyRestrictionsPtrOutput) AndroidKeyRestrictions() ApiKeyRestrictionsAndroidKeyRestrictionsPtrOutput

The Android apps that are allowed to use the key.

func (ApiKeyRestrictionsPtrOutput) ApiTargets 

func (o ApiKeyRestrictionsPtrOutput) ApiTargets() ApiKeyRestrictionsApiTargetArrayOutput

A restriction for a specific service and optionally one or more specific methods. Requests are allowed if they match any of these restrictions. If no restrictions are specified, all targets are allowed.

func (ApiKeyRestrictionsPtrOutput) BrowserKeyRestrictions 

func (o ApiKeyRestrictionsPtrOutput) BrowserKeyRestrictions() ApiKeyRestrictionsBrowserKeyRestrictionsPtrOutput

The HTTP referrers (websites) that are allowed to use the key.

func (ApiKeyRestrictionsPtrOutput) Elem 

func (o ApiKeyRestrictionsPtrOutput) Elem() ApiKeyRestrictionsOutput

func (ApiKeyRestrictionsPtrOutput) ElementType 

func (ApiKeyRestrictionsPtrOutput) ElementType() reflect.Type

func (ApiKeyRestrictionsPtrOutput) IosKeyRestrictions 

func (o ApiKeyRestrictionsPtrOutput) IosKeyRestrictions() ApiKeyRestrictionsIosKeyRestrictionsPtrOutput

The iOS apps that are allowed to use the key.

func (ApiKeyRestrictionsPtrOutput) ServerKeyRestrictions 

func (o ApiKeyRestrictionsPtrOutput) ServerKeyRestrictions() ApiKeyRestrictionsServerKeyRestrictionsPtrOutput

The IP addresses of callers that are allowed to use the key.

func (ApiKeyRestrictionsPtrOutput) ToApiKeyRestrictionsPtrOutput 

func (o ApiKeyRestrictionsPtrOutput) ToApiKeyRestrictionsPtrOutput() ApiKeyRestrictionsPtrOutput

func (ApiKeyRestrictionsPtrOutput) ToApiKeyRestrictionsPtrOutputWithContext 

func (o ApiKeyRestrictionsPtrOutput) ToApiKeyRestrictionsPtrOutputWithContext(ctx context.Context) ApiKeyRestrictionsPtrOutput

type ApiKeyRestrictionsServerKeyRestrictions 

type ApiKeyRestrictionsServerKeyRestrictions struct {
	// A list of the caller IP addresses that are allowed to make API calls with this key.
	AllowedIps []string `pulumi:"allowedIps"`
}

type ApiKeyRestrictionsServerKeyRestrictionsArgs 

type ApiKeyRestrictionsServerKeyRestrictionsArgs struct {
	// A list of the caller IP addresses that are allowed to make API calls with this key.
	AllowedIps pulumi.StringArrayInput `pulumi:"allowedIps"`
}

func (ApiKeyRestrictionsServerKeyRestrictionsArgs) ElementType 

func (ApiKeyRestrictionsServerKeyRestrictionsArgs) ElementType() reflect.Type

func (ApiKeyRestrictionsServerKeyRestrictionsArgs) ToApiKeyRestrictionsServerKeyRestrictionsOutput 

func (i ApiKeyRestrictionsServerKeyRestrictionsArgs) ToApiKeyRestrictionsServerKeyRestrictionsOutput() ApiKeyRestrictionsServerKeyRestrictionsOutput

func (ApiKeyRestrictionsServerKeyRestrictionsArgs) ToApiKeyRestrictionsServerKeyRestrictionsOutputWithContext 

func (i ApiKeyRestrictionsServerKeyRestrictionsArgs) ToApiKeyRestrictionsServerKeyRestrictionsOutputWithContext(ctx context.Context) ApiKeyRestrictionsServerKeyRestrictionsOutput

func (ApiKeyRestrictionsServerKeyRestrictionsArgs) ToApiKeyRestrictionsServerKeyRestrictionsPtrOutput 

func (i ApiKeyRestrictionsServerKeyRestrictionsArgs) ToApiKeyRestrictionsServerKeyRestrictionsPtrOutput() ApiKeyRestrictionsServerKeyRestrictionsPtrOutput

func (ApiKeyRestrictionsServerKeyRestrictionsArgs) ToApiKeyRestrictionsServerKeyRestrictionsPtrOutputWithContext 

func (i ApiKeyRestrictionsServerKeyRestrictionsArgs) ToApiKeyRestrictionsServerKeyRestrictionsPtrOutputWithContext(ctx context.Context) ApiKeyRestrictionsServerKeyRestrictionsPtrOutput

type ApiKeyRestrictionsServerKeyRestrictionsInput 

type ApiKeyRestrictionsServerKeyRestrictionsInput interface {
	pulumi.Input

	ToApiKeyRestrictionsServerKeyRestrictionsOutput() ApiKeyRestrictionsServerKeyRestrictionsOutput
	ToApiKeyRestrictionsServerKeyRestrictionsOutputWithContext(context.Context) ApiKeyRestrictionsServerKeyRestrictionsOutput
}

ApiKeyRestrictionsServerKeyRestrictionsInput is an input type that accepts ApiKeyRestrictionsServerKeyRestrictionsArgs and ApiKeyRestrictionsServerKeyRestrictionsOutput values. You can construct a concrete instance of `ApiKeyRestrictionsServerKeyRestrictionsInput` via: 

ApiKeyRestrictionsServerKeyRestrictionsArgs{...}

type ApiKeyRestrictionsServerKeyRestrictionsOutput 

type ApiKeyRestrictionsServerKeyRestrictionsOutput struct{ *pulumi.OutputState }

func (ApiKeyRestrictionsServerKeyRestrictionsOutput) AllowedIps 

func (o ApiKeyRestrictionsServerKeyRestrictionsOutput) AllowedIps() pulumi.StringArrayOutput

A list of the caller IP addresses that are allowed to make API calls with this key.

func (ApiKeyRestrictionsServerKeyRestrictionsOutput) ElementType 

func (ApiKeyRestrictionsServerKeyRestrictionsOutput) ElementType() reflect.Type

func (ApiKeyRestrictionsServerKeyRestrictionsOutput) ToApiKeyRestrictionsServerKeyRestrictionsOutput 

func (o ApiKeyRestrictionsServerKeyRestrictionsOutput) ToApiKeyRestrictionsServerKeyRestrictionsOutput() ApiKeyRestrictionsServerKeyRestrictionsOutput

func (ApiKeyRestrictionsServerKeyRestrictionsOutput) ToApiKeyRestrictionsServerKeyRestrictionsOutputWithContext 

func (o ApiKeyRestrictionsServerKeyRestrictionsOutput) ToApiKeyRestrictionsServerKeyRestrictionsOutputWithContext(ctx context.Context) ApiKeyRestrictionsServerKeyRestrictionsOutput

func (ApiKeyRestrictionsServerKeyRestrictionsOutput) ToApiKeyRestrictionsServerKeyRestrictionsPtrOutput 

func (o ApiKeyRestrictionsServerKeyRestrictionsOutput) ToApiKeyRestrictionsServerKeyRestrictionsPtrOutput() ApiKeyRestrictionsServerKeyRestrictionsPtrOutput

func (ApiKeyRestrictionsServerKeyRestrictionsOutput) ToApiKeyRestrictionsServerKeyRestrictionsPtrOutputWithContext 

func (o ApiKeyRestrictionsServerKeyRestrictionsOutput) ToApiKeyRestrictionsServerKeyRestrictionsPtrOutputWithContext(ctx context.Context) ApiKeyRestrictionsServerKeyRestrictionsPtrOutput

type ApiKeyRestrictionsServerKeyRestrictionsPtrInput 

type ApiKeyRestrictionsServerKeyRestrictionsPtrInput interface {
	pulumi.Input

	ToApiKeyRestrictionsServerKeyRestrictionsPtrOutput() ApiKeyRestrictionsServerKeyRestrictionsPtrOutput
	ToApiKeyRestrictionsServerKeyRestrictionsPtrOutputWithContext(context.Context) ApiKeyRestrictionsServerKeyRestrictionsPtrOutput
}

ApiKeyRestrictionsServerKeyRestrictionsPtrInput is an input type that accepts ApiKeyRestrictionsServerKeyRestrictionsArgs, ApiKeyRestrictionsServerKeyRestrictionsPtr and ApiKeyRestrictionsServerKeyRestrictionsPtrOutput values. You can construct a concrete instance of `ApiKeyRestrictionsServerKeyRestrictionsPtrInput` via: 

        ApiKeyRestrictionsServerKeyRestrictionsArgs{...}

or:

        nil

func ApiKeyRestrictionsServerKeyRestrictionsPtr 

func ApiKeyRestrictionsServerKeyRestrictionsPtr(v *ApiKeyRestrictionsServerKeyRestrictionsArgs) ApiKeyRestrictionsServerKeyRestrictionsPtrInput

type ApiKeyRestrictionsServerKeyRestrictionsPtrOutput 

type ApiKeyRestrictionsServerKeyRestrictionsPtrOutput struct{ *pulumi.OutputState }

func (ApiKeyRestrictionsServerKeyRestrictionsPtrOutput) AllowedIps 

func (o ApiKeyRestrictionsServerKeyRestrictionsPtrOutput) AllowedIps() pulumi.StringArrayOutput

A list of the caller IP addresses that are allowed to make API calls with this key.

func (ApiKeyRestrictionsServerKeyRestrictionsPtrOutput) Elem 

func (o ApiKeyRestrictionsServerKeyRestrictionsPtrOutput) Elem() ApiKeyRestrictionsServerKeyRestrictionsOutput

func (ApiKeyRestrictionsServerKeyRestrictionsPtrOutput) ElementType 

func (ApiKeyRestrictionsServerKeyRestrictionsPtrOutput) ElementType() reflect.Type

func (ApiKeyRestrictionsServerKeyRestrictionsPtrOutput) ToApiKeyRestrictionsServerKeyRestrictionsPtrOutput 

func (o ApiKeyRestrictionsServerKeyRestrictionsPtrOutput) ToApiKeyRestrictionsServerKeyRestrictionsPtrOutput() ApiKeyRestrictionsServerKeyRestrictionsPtrOutput

func (ApiKeyRestrictionsServerKeyRestrictionsPtrOutput) ToApiKeyRestrictionsServerKeyRestrictionsPtrOutputWithContext 

func (o ApiKeyRestrictionsServerKeyRestrictionsPtrOutput) ToApiKeyRestrictionsServerKeyRestrictionsPtrOutputWithContext(ctx context.Context) ApiKeyRestrictionsServerKeyRestrictionsPtrOutput

type ApiKeyState 

type ApiKeyState struct {
	// Human-readable display name of this API key. Modifiable by user.
	DisplayName pulumi.StringPtrInput
	// Output only. An encrypted and signed value held by this key. This field can be accessed only through the `GetKeyString` method.
	KeyString pulumi.StringPtrInput
	// The resource name of the key. The name must be unique within the project, must conform with RFC-1034, is restricted to lower-cased letters, and has a maximum length of 63 characters. In another word, the name must match the regular expression: `a-z?`.
	Name pulumi.StringPtrInput
	// The project for the resource
	Project pulumi.StringPtrInput
	// Key restrictions.
	Restrictions ApiKeyRestrictionsPtrInput
	// Output only. Unique id in UUID4 format.
	Uid pulumi.StringPtrInput
}

func (ApiKeyState) ElementType 

func (ApiKeyState) ElementType() reflect.Type

type DefaultServiceAccounts 

type DefaultServiceAccounts struct {
	pulumi.CustomResourceState

	// The action to be performed in the default service accounts. Valid values are: `DEPRIVILEGE`, `DELETE`, `DISABLE`. Note that `DEPRIVILEGE` action will ignore the REVERT configuration in the restore_policy
	Action pulumi.StringOutput `pulumi:"action"`
	// The project ID where service accounts are created.
	Project pulumi.StringOutput `pulumi:"project"`
	// The action to be performed in the default service accounts on the resource destroy.
	// Valid values are NONE, REVERT and REVERT_AND_IGNORE_FAILURE. It is applied for any action but in the DEPRIVILEGE.
	// If set to REVERT it attempts to restore all default SAs but the DEPRIVILEGE action.
	// If set to REVERT_AND_IGNORE_FAILURE it is the same behavior as REVERT but ignores errors returned by the API.
	RestorePolicy pulumi.StringPtrOutput `pulumi:"restorePolicy"`
	// The Service Accounts changed by this resource. It is used for `REVERT` the `action` on the destroy.
	ServiceAccounts pulumi.StringMapOutput `pulumi:"serviceAccounts"`
}

Allows management of Google Cloud Platform project default service accounts.

When certain service APIs are enabled, Google Cloud Platform automatically creates service accounts to help get started, but this is not recommended for production environments as per [Google's documentation](https://cloud.google.com/iam/docs/service-accounts#default). See the [Organization documentation](https://cloud.google.com/resource-manager/docs/quickstarts) for more details.

> **WARNING** Some Google Cloud products do not work if the default service accounts are deleted so it is better to `DEPRIVILEGE` as Google **CAN NOT** recover service accounts that have been deleted for more than 30 days. Also Google recommends using the `constraints/iam.automaticIamGrantsForDefaultServiceAccounts` [constraint](https://www.terraform.io/docs/providers/google/r/google_organization_policy.html) to disable automatic IAM Grants to default service accounts.

> This resource works on a best-effort basis, as no API formally describes the default service accounts and it is for users who are unable to use constraints. If the default service accounts change their name or additional service accounts are added, this resource will need to be updated.

## Example Usage

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewDefaultServiceAccounts(ctx, "my_project", &projects.DefaultServiceAccountsArgs{
			Project: pulumi.String("my-project-id"),
			Action:  pulumi.String("DELETE"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

To enable the default service accounts on the resource destroy:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewDefaultServiceAccounts(ctx, "my_project", &projects.DefaultServiceAccountsArgs{
			Project:       pulumi.String("my-project-id"),
			Action:        pulumi.String("DISABLE"),
			RestorePolicy: pulumi.String("REVERT"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

This resource does not support import

func GetDefaultServiceAccounts 

func GetDefaultServiceAccounts(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DefaultServiceAccountsState, opts ...pulumi.ResourceOption) (*DefaultServiceAccounts, error)

GetDefaultServiceAccounts gets an existing DefaultServiceAccounts resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDefaultServiceAccounts 

func NewDefaultServiceAccounts(ctx *pulumi.Context,
	name string, args *DefaultServiceAccountsArgs, opts ...pulumi.ResourceOption) (*DefaultServiceAccounts, error)

NewDefaultServiceAccounts registers a new resource with the given unique name, arguments, and options.

func (*DefaultServiceAccounts) ElementType 

func (*DefaultServiceAccounts) ElementType() reflect.Type

func (*DefaultServiceAccounts) ToDefaultServiceAccountsOutput 

func (i *DefaultServiceAccounts) ToDefaultServiceAccountsOutput() DefaultServiceAccountsOutput

func (*DefaultServiceAccounts) ToDefaultServiceAccountsOutputWithContext 

func (i *DefaultServiceAccounts) ToDefaultServiceAccountsOutputWithContext(ctx context.Context) DefaultServiceAccountsOutput

type DefaultServiceAccountsArgs 

type DefaultServiceAccountsArgs struct {
	// The action to be performed in the default service accounts. Valid values are: `DEPRIVILEGE`, `DELETE`, `DISABLE`. Note that `DEPRIVILEGE` action will ignore the REVERT configuration in the restore_policy
	Action pulumi.StringInput
	// The project ID where service accounts are created.
	Project pulumi.StringInput
	// The action to be performed in the default service accounts on the resource destroy.
	// Valid values are NONE, REVERT and REVERT_AND_IGNORE_FAILURE. It is applied for any action but in the DEPRIVILEGE.
	// If set to REVERT it attempts to restore all default SAs but the DEPRIVILEGE action.
	// If set to REVERT_AND_IGNORE_FAILURE it is the same behavior as REVERT but ignores errors returned by the API.
	RestorePolicy pulumi.StringPtrInput
}

The set of arguments for constructing a DefaultServiceAccounts resource.

func (DefaultServiceAccountsArgs) ElementType 

func (DefaultServiceAccountsArgs) ElementType() reflect.Type

type DefaultServiceAccountsArray 

type DefaultServiceAccountsArray []DefaultServiceAccountsInput

func (DefaultServiceAccountsArray) ElementType 

func (DefaultServiceAccountsArray) ElementType() reflect.Type

func (DefaultServiceAccountsArray) ToDefaultServiceAccountsArrayOutput 

func (i DefaultServiceAccountsArray) ToDefaultServiceAccountsArrayOutput() DefaultServiceAccountsArrayOutput

func (DefaultServiceAccountsArray) ToDefaultServiceAccountsArrayOutputWithContext 

func (i DefaultServiceAccountsArray) ToDefaultServiceAccountsArrayOutputWithContext(ctx context.Context) DefaultServiceAccountsArrayOutput

type DefaultServiceAccountsArrayInput 

type DefaultServiceAccountsArrayInput interface {
	pulumi.Input

	ToDefaultServiceAccountsArrayOutput() DefaultServiceAccountsArrayOutput
	ToDefaultServiceAccountsArrayOutputWithContext(context.Context) DefaultServiceAccountsArrayOutput
}

DefaultServiceAccountsArrayInput is an input type that accepts DefaultServiceAccountsArray and DefaultServiceAccountsArrayOutput values. You can construct a concrete instance of `DefaultServiceAccountsArrayInput` via: 

DefaultServiceAccountsArray{ DefaultServiceAccountsArgs{...} }

type DefaultServiceAccountsArrayOutput 

type DefaultServiceAccountsArrayOutput struct{ *pulumi.OutputState }

func (DefaultServiceAccountsArrayOutput) ElementType 

func (DefaultServiceAccountsArrayOutput) ElementType() reflect.Type

func (DefaultServiceAccountsArrayOutput) Index 

func (o DefaultServiceAccountsArrayOutput) Index(i pulumi.IntInput) DefaultServiceAccountsOutput

func (DefaultServiceAccountsArrayOutput) ToDefaultServiceAccountsArrayOutput 

func (o DefaultServiceAccountsArrayOutput) ToDefaultServiceAccountsArrayOutput() DefaultServiceAccountsArrayOutput

func (DefaultServiceAccountsArrayOutput) ToDefaultServiceAccountsArrayOutputWithContext 

func (o DefaultServiceAccountsArrayOutput) ToDefaultServiceAccountsArrayOutputWithContext(ctx context.Context) DefaultServiceAccountsArrayOutput

type DefaultServiceAccountsInput 

type DefaultServiceAccountsInput interface {
	pulumi.Input

	ToDefaultServiceAccountsOutput() DefaultServiceAccountsOutput
	ToDefaultServiceAccountsOutputWithContext(ctx context.Context) DefaultServiceAccountsOutput
}

type DefaultServiceAccountsMap 

type DefaultServiceAccountsMap map[string]DefaultServiceAccountsInput

func (DefaultServiceAccountsMap) ElementType 

func (DefaultServiceAccountsMap) ElementType() reflect.Type

func (DefaultServiceAccountsMap) ToDefaultServiceAccountsMapOutput 

func (i DefaultServiceAccountsMap) ToDefaultServiceAccountsMapOutput() DefaultServiceAccountsMapOutput

func (DefaultServiceAccountsMap) ToDefaultServiceAccountsMapOutputWithContext 

func (i DefaultServiceAccountsMap) ToDefaultServiceAccountsMapOutputWithContext(ctx context.Context) DefaultServiceAccountsMapOutput

type DefaultServiceAccountsMapInput 

type DefaultServiceAccountsMapInput interface {
	pulumi.Input

	ToDefaultServiceAccountsMapOutput() DefaultServiceAccountsMapOutput
	ToDefaultServiceAccountsMapOutputWithContext(context.Context) DefaultServiceAccountsMapOutput
}

DefaultServiceAccountsMapInput is an input type that accepts DefaultServiceAccountsMap and DefaultServiceAccountsMapOutput values. You can construct a concrete instance of `DefaultServiceAccountsMapInput` via: 

DefaultServiceAccountsMap{ "key": DefaultServiceAccountsArgs{...} }

type DefaultServiceAccountsMapOutput 

type DefaultServiceAccountsMapOutput struct{ *pulumi.OutputState }

func (DefaultServiceAccountsMapOutput) ElementType 

func (DefaultServiceAccountsMapOutput) ElementType() reflect.Type

func (DefaultServiceAccountsMapOutput) MapIndex 

func (o DefaultServiceAccountsMapOutput) MapIndex(k pulumi.StringInput) DefaultServiceAccountsOutput

func (DefaultServiceAccountsMapOutput) ToDefaultServiceAccountsMapOutput 

func (o DefaultServiceAccountsMapOutput) ToDefaultServiceAccountsMapOutput() DefaultServiceAccountsMapOutput

func (DefaultServiceAccountsMapOutput) ToDefaultServiceAccountsMapOutputWithContext 

func (o DefaultServiceAccountsMapOutput) ToDefaultServiceAccountsMapOutputWithContext(ctx context.Context) DefaultServiceAccountsMapOutput

type DefaultServiceAccountsOutput 

type DefaultServiceAccountsOutput struct{ *pulumi.OutputState }

func (DefaultServiceAccountsOutput) Action 

func (o DefaultServiceAccountsOutput) Action() pulumi.StringOutput

The action to be performed in the default service accounts. Valid values are: `DEPRIVILEGE`, `DELETE`, `DISABLE`. Note that `DEPRIVILEGE` action will ignore the REVERT configuration in the restore_policy

func (DefaultServiceAccountsOutput) ElementType 

func (DefaultServiceAccountsOutput) ElementType() reflect.Type

func (DefaultServiceAccountsOutput) Project 

func (o DefaultServiceAccountsOutput) Project() pulumi.StringOutput

The project ID where service accounts are created.

func (DefaultServiceAccountsOutput) RestorePolicy 

func (o DefaultServiceAccountsOutput) RestorePolicy() pulumi.StringPtrOutput

The action to be performed in the default service accounts on the resource destroy. Valid values are NONE, REVERT and REVERT_AND_IGNORE_FAILURE. It is applied for any action but in the DEPRIVILEGE. If set to REVERT it attempts to restore all default SAs but the DEPRIVILEGE action. If set to REVERT_AND_IGNORE_FAILURE it is the same behavior as REVERT but ignores errors returned by the API.

func (DefaultServiceAccountsOutput) ServiceAccounts 

func (o DefaultServiceAccountsOutput) ServiceAccounts() pulumi.StringMapOutput

The Service Accounts changed by this resource. It is used for `REVERT` the `action` on the destroy.

func (DefaultServiceAccountsOutput) ToDefaultServiceAccountsOutput 

func (o DefaultServiceAccountsOutput) ToDefaultServiceAccountsOutput() DefaultServiceAccountsOutput

func (DefaultServiceAccountsOutput) ToDefaultServiceAccountsOutputWithContext 

func (o DefaultServiceAccountsOutput) ToDefaultServiceAccountsOutputWithContext(ctx context.Context) DefaultServiceAccountsOutput

type DefaultServiceAccountsState 

type DefaultServiceAccountsState struct {
	// The action to be performed in the default service accounts. Valid values are: `DEPRIVILEGE`, `DELETE`, `DISABLE`. Note that `DEPRIVILEGE` action will ignore the REVERT configuration in the restore_policy
	Action pulumi.StringPtrInput
	// The project ID where service accounts are created.
	Project pulumi.StringPtrInput
	// The action to be performed in the default service accounts on the resource destroy.
	// Valid values are NONE, REVERT and REVERT_AND_IGNORE_FAILURE. It is applied for any action but in the DEPRIVILEGE.
	// If set to REVERT it attempts to restore all default SAs but the DEPRIVILEGE action.
	// If set to REVERT_AND_IGNORE_FAILURE it is the same behavior as REVERT but ignores errors returned by the API.
	RestorePolicy pulumi.StringPtrInput
	// The Service Accounts changed by this resource. It is used for `REVERT` the `action` on the destroy.
	ServiceAccounts pulumi.StringMapInput
}

func (DefaultServiceAccountsState) ElementType 

func (DefaultServiceAccountsState) ElementType() reflect.Type

type GetIamPolicyArgs 

type GetIamPolicyArgs struct {
	// The project id of the target project. This is not
	// inferred from the provider.
	Project string `pulumi:"project"`
}

A collection of arguments for invoking getIamPolicy.

type GetIamPolicyOutputArgs 

type GetIamPolicyOutputArgs struct {
	// The project id of the target project. This is not
	// inferred from the provider.
	Project pulumi.StringInput `pulumi:"project"`
}

A collection of arguments for invoking getIamPolicy.

func (GetIamPolicyOutputArgs) ElementType 

func (GetIamPolicyOutputArgs) ElementType() reflect.Type

type GetIamPolicyResult 

type GetIamPolicyResult struct {
	// (Computed) The etag of the IAM policy.
	Etag string `pulumi:"etag"`
	// The provider-assigned unique ID for this managed resource.
	Id string `pulumi:"id"`
	// (Computed) The policy data
	PolicyData string `pulumi:"policyData"`
	Project    string `pulumi:"project"`
}

A collection of values returned by getIamPolicy.

func GetIamPolicy 

func GetIamPolicy(ctx *pulumi.Context, args *GetIamPolicyArgs, opts ...pulumi.InvokeOption) (*GetIamPolicyResult, error)

Retrieves the current IAM policy data for a project.

## example

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.GetIamPolicy(ctx, &projects.GetIamPolicyArgs{
			Project: "myproject",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type GetIamPolicyResultOutput 

type GetIamPolicyResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getIamPolicy.

func GetIamPolicyOutput 

func GetIamPolicyOutput(ctx *pulumi.Context, args GetIamPolicyOutputArgs, opts ...pulumi.InvokeOption) GetIamPolicyResultOutput

func (GetIamPolicyResultOutput) ElementType 

func (GetIamPolicyResultOutput) ElementType() reflect.Type

func (GetIamPolicyResultOutput) Etag 

func (o GetIamPolicyResultOutput) Etag() pulumi.StringOutput

(Computed) The etag of the IAM policy.

func (GetIamPolicyResultOutput) Id 

func (o GetIamPolicyResultOutput) Id() pulumi.StringOutput

The provider-assigned unique ID for this managed resource.

func (GetIamPolicyResultOutput) PolicyData 

func (o GetIamPolicyResultOutput) PolicyData() pulumi.StringOutput

(Computed) The policy data

func (GetIamPolicyResultOutput) Project 

func (o GetIamPolicyResultOutput) Project() pulumi.StringOutput

func (GetIamPolicyResultOutput) ToGetIamPolicyResultOutput 

func (o GetIamPolicyResultOutput) ToGetIamPolicyResultOutput() GetIamPolicyResultOutput

func (GetIamPolicyResultOutput) ToGetIamPolicyResultOutputWithContext 

func (o GetIamPolicyResultOutput) ToGetIamPolicyResultOutputWithContext(ctx context.Context) GetIamPolicyResultOutput

type GetOrganizationPolicyBooleanPolicy 

type GetOrganizationPolicyBooleanPolicy struct {
	// If true, then the Policy is enforced. If false, then any configuration is acceptable.
	Enforced bool `pulumi:"enforced"`
}

type GetOrganizationPolicyBooleanPolicyArgs 

type GetOrganizationPolicyBooleanPolicyArgs struct {
	// If true, then the Policy is enforced. If false, then any configuration is acceptable.
	Enforced pulumi.BoolInput `pulumi:"enforced"`
}

func (GetOrganizationPolicyBooleanPolicyArgs) ElementType 

func (GetOrganizationPolicyBooleanPolicyArgs) ElementType() reflect.Type

func (GetOrganizationPolicyBooleanPolicyArgs) ToGetOrganizationPolicyBooleanPolicyOutput 

func (i GetOrganizationPolicyBooleanPolicyArgs) ToGetOrganizationPolicyBooleanPolicyOutput() GetOrganizationPolicyBooleanPolicyOutput

func (GetOrganizationPolicyBooleanPolicyArgs) ToGetOrganizationPolicyBooleanPolicyOutputWithContext 

func (i GetOrganizationPolicyBooleanPolicyArgs) ToGetOrganizationPolicyBooleanPolicyOutputWithContext(ctx context.Context) GetOrganizationPolicyBooleanPolicyOutput

type GetOrganizationPolicyBooleanPolicyArray 

type GetOrganizationPolicyBooleanPolicyArray []GetOrganizationPolicyBooleanPolicyInput

func (GetOrganizationPolicyBooleanPolicyArray) ElementType 

func (GetOrganizationPolicyBooleanPolicyArray) ElementType() reflect.Type

func (GetOrganizationPolicyBooleanPolicyArray) ToGetOrganizationPolicyBooleanPolicyArrayOutput 

func (i GetOrganizationPolicyBooleanPolicyArray) ToGetOrganizationPolicyBooleanPolicyArrayOutput() GetOrganizationPolicyBooleanPolicyArrayOutput

func (GetOrganizationPolicyBooleanPolicyArray) ToGetOrganizationPolicyBooleanPolicyArrayOutputWithContext 

func (i GetOrganizationPolicyBooleanPolicyArray) ToGetOrganizationPolicyBooleanPolicyArrayOutputWithContext(ctx context.Context) GetOrganizationPolicyBooleanPolicyArrayOutput

type GetOrganizationPolicyBooleanPolicyArrayInput 

type GetOrganizationPolicyBooleanPolicyArrayInput interface {
	pulumi.Input

	ToGetOrganizationPolicyBooleanPolicyArrayOutput() GetOrganizationPolicyBooleanPolicyArrayOutput
	ToGetOrganizationPolicyBooleanPolicyArrayOutputWithContext(context.Context) GetOrganizationPolicyBooleanPolicyArrayOutput
}

GetOrganizationPolicyBooleanPolicyArrayInput is an input type that accepts GetOrganizationPolicyBooleanPolicyArray and GetOrganizationPolicyBooleanPolicyArrayOutput values. You can construct a concrete instance of `GetOrganizationPolicyBooleanPolicyArrayInput` via: 

GetOrganizationPolicyBooleanPolicyArray{ GetOrganizationPolicyBooleanPolicyArgs{...} }

type GetOrganizationPolicyBooleanPolicyArrayOutput 

type GetOrganizationPolicyBooleanPolicyArrayOutput struct{ *pulumi.OutputState }

func (GetOrganizationPolicyBooleanPolicyArrayOutput) ElementType 

func (GetOrganizationPolicyBooleanPolicyArrayOutput) ElementType() reflect.Type

func (GetOrganizationPolicyBooleanPolicyArrayOutput) Index 

func (o GetOrganizationPolicyBooleanPolicyArrayOutput) Index(i pulumi.IntInput) GetOrganizationPolicyBooleanPolicyOutput

func (GetOrganizationPolicyBooleanPolicyArrayOutput) ToGetOrganizationPolicyBooleanPolicyArrayOutput 

func (o GetOrganizationPolicyBooleanPolicyArrayOutput) ToGetOrganizationPolicyBooleanPolicyArrayOutput() GetOrganizationPolicyBooleanPolicyArrayOutput

func (GetOrganizationPolicyBooleanPolicyArrayOutput) ToGetOrganizationPolicyBooleanPolicyArrayOutputWithContext 

func (o GetOrganizationPolicyBooleanPolicyArrayOutput) ToGetOrganizationPolicyBooleanPolicyArrayOutputWithContext(ctx context.Context) GetOrganizationPolicyBooleanPolicyArrayOutput

type GetOrganizationPolicyBooleanPolicyInput 

type GetOrganizationPolicyBooleanPolicyInput interface {
	pulumi.Input

	ToGetOrganizationPolicyBooleanPolicyOutput() GetOrganizationPolicyBooleanPolicyOutput
	ToGetOrganizationPolicyBooleanPolicyOutputWithContext(context.Context) GetOrganizationPolicyBooleanPolicyOutput
}

GetOrganizationPolicyBooleanPolicyInput is an input type that accepts GetOrganizationPolicyBooleanPolicyArgs and GetOrganizationPolicyBooleanPolicyOutput values. You can construct a concrete instance of `GetOrganizationPolicyBooleanPolicyInput` via: 

GetOrganizationPolicyBooleanPolicyArgs{...}

type GetOrganizationPolicyBooleanPolicyOutput 

type GetOrganizationPolicyBooleanPolicyOutput struct{ *pulumi.OutputState }

func (GetOrganizationPolicyBooleanPolicyOutput) ElementType 

func (GetOrganizationPolicyBooleanPolicyOutput) ElementType() reflect.Type

func (GetOrganizationPolicyBooleanPolicyOutput) Enforced 

func (o GetOrganizationPolicyBooleanPolicyOutput) Enforced() pulumi.BoolOutput

If true, then the Policy is enforced. If false, then any configuration is acceptable.

func (GetOrganizationPolicyBooleanPolicyOutput) ToGetOrganizationPolicyBooleanPolicyOutput 

func (o GetOrganizationPolicyBooleanPolicyOutput) ToGetOrganizationPolicyBooleanPolicyOutput() GetOrganizationPolicyBooleanPolicyOutput

func (GetOrganizationPolicyBooleanPolicyOutput) ToGetOrganizationPolicyBooleanPolicyOutputWithContext 

func (o GetOrganizationPolicyBooleanPolicyOutput) ToGetOrganizationPolicyBooleanPolicyOutputWithContext(ctx context.Context) GetOrganizationPolicyBooleanPolicyOutput

type GetOrganizationPolicyListPolicy 

type GetOrganizationPolicyListPolicy struct {
	// One or the other must be set.
	Allows []GetOrganizationPolicyListPolicyAllow `pulumi:"allows"`
	// One or the other must be set.
	Denies []GetOrganizationPolicyListPolicyDeny `pulumi:"denies"`
	// If set to true, the values from the effective Policy of the parent resource are inherited, meaning the values set in this Policy are added to the values inherited up the hierarchy.
	InheritFromParent bool `pulumi:"inheritFromParent"`
	// The Google Cloud Console will try to default to a configuration that matches the value specified in this field.
	SuggestedValue string `pulumi:"suggestedValue"`
}

type GetOrganizationPolicyListPolicyAllow 

type GetOrganizationPolicyListPolicyAllow struct {
	// The policy allows or denies all values.
	All bool `pulumi:"all"`
	// The policy can define specific values that are allowed or denied.
	Values []string `pulumi:"values"`
}

type GetOrganizationPolicyListPolicyAllowArgs 

type GetOrganizationPolicyListPolicyAllowArgs struct {
	// The policy allows or denies all values.
	All pulumi.BoolInput `pulumi:"all"`
	// The policy can define specific values that are allowed or denied.
	Values pulumi.StringArrayInput `pulumi:"values"`
}

func (GetOrganizationPolicyListPolicyAllowArgs) ElementType 

func (GetOrganizationPolicyListPolicyAllowArgs) ElementType() reflect.Type

func (GetOrganizationPolicyListPolicyAllowArgs) ToGetOrganizationPolicyListPolicyAllowOutput 

func (i GetOrganizationPolicyListPolicyAllowArgs) ToGetOrganizationPolicyListPolicyAllowOutput() GetOrganizationPolicyListPolicyAllowOutput

func (GetOrganizationPolicyListPolicyAllowArgs) ToGetOrganizationPolicyListPolicyAllowOutputWithContext 

func (i GetOrganizationPolicyListPolicyAllowArgs) ToGetOrganizationPolicyListPolicyAllowOutputWithContext(ctx context.Context) GetOrganizationPolicyListPolicyAllowOutput

type GetOrganizationPolicyListPolicyAllowArray 

type GetOrganizationPolicyListPolicyAllowArray []GetOrganizationPolicyListPolicyAllowInput

func (GetOrganizationPolicyListPolicyAllowArray) ElementType 

func (GetOrganizationPolicyListPolicyAllowArray) ElementType() reflect.Type

func (GetOrganizationPolicyListPolicyAllowArray) ToGetOrganizationPolicyListPolicyAllowArrayOutput 

func (i GetOrganizationPolicyListPolicyAllowArray) ToGetOrganizationPolicyListPolicyAllowArrayOutput() GetOrganizationPolicyListPolicyAllowArrayOutput

func (GetOrganizationPolicyListPolicyAllowArray) ToGetOrganizationPolicyListPolicyAllowArrayOutputWithContext 

func (i GetOrganizationPolicyListPolicyAllowArray) ToGetOrganizationPolicyListPolicyAllowArrayOutputWithContext(ctx context.Context) GetOrganizationPolicyListPolicyAllowArrayOutput

type GetOrganizationPolicyListPolicyAllowArrayInput 

type GetOrganizationPolicyListPolicyAllowArrayInput interface {
	pulumi.Input

	ToGetOrganizationPolicyListPolicyAllowArrayOutput() GetOrganizationPolicyListPolicyAllowArrayOutput
	ToGetOrganizationPolicyListPolicyAllowArrayOutputWithContext(context.Context) GetOrganizationPolicyListPolicyAllowArrayOutput
}

GetOrganizationPolicyListPolicyAllowArrayInput is an input type that accepts GetOrganizationPolicyListPolicyAllowArray and GetOrganizationPolicyListPolicyAllowArrayOutput values. You can construct a concrete instance of `GetOrganizationPolicyListPolicyAllowArrayInput` via: 

GetOrganizationPolicyListPolicyAllowArray{ GetOrganizationPolicyListPolicyAllowArgs{...} }

type GetOrganizationPolicyListPolicyAllowArrayOutput 

type GetOrganizationPolicyListPolicyAllowArrayOutput struct{ *pulumi.OutputState }

func (GetOrganizationPolicyListPolicyAllowArrayOutput) ElementType 

func (GetOrganizationPolicyListPolicyAllowArrayOutput) ElementType() reflect.Type

func (GetOrganizationPolicyListPolicyAllowArrayOutput) Index 

func (o GetOrganizationPolicyListPolicyAllowArrayOutput) Index(i pulumi.IntInput) GetOrganizationPolicyListPolicyAllowOutput

func (GetOrganizationPolicyListPolicyAllowArrayOutput) ToGetOrganizationPolicyListPolicyAllowArrayOutput 

func (o GetOrganizationPolicyListPolicyAllowArrayOutput) ToGetOrganizationPolicyListPolicyAllowArrayOutput() GetOrganizationPolicyListPolicyAllowArrayOutput

func (GetOrganizationPolicyListPolicyAllowArrayOutput) ToGetOrganizationPolicyListPolicyAllowArrayOutputWithContext 

func (o GetOrganizationPolicyListPolicyAllowArrayOutput) ToGetOrganizationPolicyListPolicyAllowArrayOutputWithContext(ctx context.Context) GetOrganizationPolicyListPolicyAllowArrayOutput

type GetOrganizationPolicyListPolicyAllowInput 

type GetOrganizationPolicyListPolicyAllowInput interface {
	pulumi.Input

	ToGetOrganizationPolicyListPolicyAllowOutput() GetOrganizationPolicyListPolicyAllowOutput
	ToGetOrganizationPolicyListPolicyAllowOutputWithContext(context.Context) GetOrganizationPolicyListPolicyAllowOutput
}

GetOrganizationPolicyListPolicyAllowInput is an input type that accepts GetOrganizationPolicyListPolicyAllowArgs and GetOrganizationPolicyListPolicyAllowOutput values. You can construct a concrete instance of `GetOrganizationPolicyListPolicyAllowInput` via: 

GetOrganizationPolicyListPolicyAllowArgs{...}

type GetOrganizationPolicyListPolicyAllowOutput 

type GetOrganizationPolicyListPolicyAllowOutput struct{ *pulumi.OutputState }

func (GetOrganizationPolicyListPolicyAllowOutput) All 

func (o GetOrganizationPolicyListPolicyAllowOutput) All() pulumi.BoolOutput

The policy allows or denies all values.

func (GetOrganizationPolicyListPolicyAllowOutput) ElementType 

func (GetOrganizationPolicyListPolicyAllowOutput) ElementType() reflect.Type

func (GetOrganizationPolicyListPolicyAllowOutput) ToGetOrganizationPolicyListPolicyAllowOutput 

func (o GetOrganizationPolicyListPolicyAllowOutput) ToGetOrganizationPolicyListPolicyAllowOutput() GetOrganizationPolicyListPolicyAllowOutput

func (GetOrganizationPolicyListPolicyAllowOutput) ToGetOrganizationPolicyListPolicyAllowOutputWithContext 

func (o GetOrganizationPolicyListPolicyAllowOutput) ToGetOrganizationPolicyListPolicyAllowOutputWithContext(ctx context.Context) GetOrganizationPolicyListPolicyAllowOutput

func (GetOrganizationPolicyListPolicyAllowOutput) Values 

func (o GetOrganizationPolicyListPolicyAllowOutput) Values() pulumi.StringArrayOutput

The policy can define specific values that are allowed or denied.

type GetOrganizationPolicyListPolicyArgs 

type GetOrganizationPolicyListPolicyArgs struct {
	// One or the other must be set.
	Allows GetOrganizationPolicyListPolicyAllowArrayInput `pulumi:"allows"`
	// One or the other must be set.
	Denies GetOrganizationPolicyListPolicyDenyArrayInput `pulumi:"denies"`
	// If set to true, the values from the effective Policy of the parent resource are inherited, meaning the values set in this Policy are added to the values inherited up the hierarchy.
	InheritFromParent pulumi.BoolInput `pulumi:"inheritFromParent"`
	// The Google Cloud Console will try to default to a configuration that matches the value specified in this field.
	SuggestedValue pulumi.StringInput `pulumi:"suggestedValue"`
}

func (GetOrganizationPolicyListPolicyArgs) ElementType 

func (GetOrganizationPolicyListPolicyArgs) ElementType() reflect.Type

func (GetOrganizationPolicyListPolicyArgs) ToGetOrganizationPolicyListPolicyOutput 

func (i GetOrganizationPolicyListPolicyArgs) ToGetOrganizationPolicyListPolicyOutput() GetOrganizationPolicyListPolicyOutput

func (GetOrganizationPolicyListPolicyArgs) ToGetOrganizationPolicyListPolicyOutputWithContext 

func (i GetOrganizationPolicyListPolicyArgs) ToGetOrganizationPolicyListPolicyOutputWithContext(ctx context.Context) GetOrganizationPolicyListPolicyOutput

type GetOrganizationPolicyListPolicyArray 

type GetOrganizationPolicyListPolicyArray []GetOrganizationPolicyListPolicyInput

func (GetOrganizationPolicyListPolicyArray) ElementType 

func (GetOrganizationPolicyListPolicyArray) ElementType() reflect.Type

func (GetOrganizationPolicyListPolicyArray) ToGetOrganizationPolicyListPolicyArrayOutput 

func (i GetOrganizationPolicyListPolicyArray) ToGetOrganizationPolicyListPolicyArrayOutput() GetOrganizationPolicyListPolicyArrayOutput

func (GetOrganizationPolicyListPolicyArray) ToGetOrganizationPolicyListPolicyArrayOutputWithContext 

func (i GetOrganizationPolicyListPolicyArray) ToGetOrganizationPolicyListPolicyArrayOutputWithContext(ctx context.Context) GetOrganizationPolicyListPolicyArrayOutput

type GetOrganizationPolicyListPolicyArrayInput 

type GetOrganizationPolicyListPolicyArrayInput interface {
	pulumi.Input

	ToGetOrganizationPolicyListPolicyArrayOutput() GetOrganizationPolicyListPolicyArrayOutput
	ToGetOrganizationPolicyListPolicyArrayOutputWithContext(context.Context) GetOrganizationPolicyListPolicyArrayOutput
}

GetOrganizationPolicyListPolicyArrayInput is an input type that accepts GetOrganizationPolicyListPolicyArray and GetOrganizationPolicyListPolicyArrayOutput values. You can construct a concrete instance of `GetOrganizationPolicyListPolicyArrayInput` via: 

GetOrganizationPolicyListPolicyArray{ GetOrganizationPolicyListPolicyArgs{...} }

type GetOrganizationPolicyListPolicyArrayOutput 

type GetOrganizationPolicyListPolicyArrayOutput struct{ *pulumi.OutputState }

func (GetOrganizationPolicyListPolicyArrayOutput) ElementType 

func (GetOrganizationPolicyListPolicyArrayOutput) ElementType() reflect.Type

func (GetOrganizationPolicyListPolicyArrayOutput) Index 

func (o GetOrganizationPolicyListPolicyArrayOutput) Index(i pulumi.IntInput) GetOrganizationPolicyListPolicyOutput

func (GetOrganizationPolicyListPolicyArrayOutput) ToGetOrganizationPolicyListPolicyArrayOutput 

func (o GetOrganizationPolicyListPolicyArrayOutput) ToGetOrganizationPolicyListPolicyArrayOutput() GetOrganizationPolicyListPolicyArrayOutput

func (GetOrganizationPolicyListPolicyArrayOutput) ToGetOrganizationPolicyListPolicyArrayOutputWithContext 

func (o GetOrganizationPolicyListPolicyArrayOutput) ToGetOrganizationPolicyListPolicyArrayOutputWithContext(ctx context.Context) GetOrganizationPolicyListPolicyArrayOutput

type GetOrganizationPolicyListPolicyDeny 

type GetOrganizationPolicyListPolicyDeny struct {
	// The policy allows or denies all values.
	All bool `pulumi:"all"`
	// The policy can define specific values that are allowed or denied.
	Values []string `pulumi:"values"`
}

type GetOrganizationPolicyListPolicyDenyArgs 

type GetOrganizationPolicyListPolicyDenyArgs struct {
	// The policy allows or denies all values.
	All pulumi.BoolInput `pulumi:"all"`
	// The policy can define specific values that are allowed or denied.
	Values pulumi.StringArrayInput `pulumi:"values"`
}

func (GetOrganizationPolicyListPolicyDenyArgs) ElementType 

func (GetOrganizationPolicyListPolicyDenyArgs) ElementType() reflect.Type

func (GetOrganizationPolicyListPolicyDenyArgs) ToGetOrganizationPolicyListPolicyDenyOutput 

func (i GetOrganizationPolicyListPolicyDenyArgs) ToGetOrganizationPolicyListPolicyDenyOutput() GetOrganizationPolicyListPolicyDenyOutput

func (GetOrganizationPolicyListPolicyDenyArgs) ToGetOrganizationPolicyListPolicyDenyOutputWithContext 

func (i GetOrganizationPolicyListPolicyDenyArgs) ToGetOrganizationPolicyListPolicyDenyOutputWithContext(ctx context.Context) GetOrganizationPolicyListPolicyDenyOutput

type GetOrganizationPolicyListPolicyDenyArray 

type GetOrganizationPolicyListPolicyDenyArray []GetOrganizationPolicyListPolicyDenyInput

func (GetOrganizationPolicyListPolicyDenyArray) ElementType 

func (GetOrganizationPolicyListPolicyDenyArray) ElementType() reflect.Type

func (GetOrganizationPolicyListPolicyDenyArray) ToGetOrganizationPolicyListPolicyDenyArrayOutput 

func (i GetOrganizationPolicyListPolicyDenyArray) ToGetOrganizationPolicyListPolicyDenyArrayOutput() GetOrganizationPolicyListPolicyDenyArrayOutput

func (GetOrganizationPolicyListPolicyDenyArray) ToGetOrganizationPolicyListPolicyDenyArrayOutputWithContext 

func (i GetOrganizationPolicyListPolicyDenyArray) ToGetOrganizationPolicyListPolicyDenyArrayOutputWithContext(ctx context.Context) GetOrganizationPolicyListPolicyDenyArrayOutput

type GetOrganizationPolicyListPolicyDenyArrayInput 

type GetOrganizationPolicyListPolicyDenyArrayInput interface {
	pulumi.Input

	ToGetOrganizationPolicyListPolicyDenyArrayOutput() GetOrganizationPolicyListPolicyDenyArrayOutput
	ToGetOrganizationPolicyListPolicyDenyArrayOutputWithContext(context.Context) GetOrganizationPolicyListPolicyDenyArrayOutput
}

GetOrganizationPolicyListPolicyDenyArrayInput is an input type that accepts GetOrganizationPolicyListPolicyDenyArray and GetOrganizationPolicyListPolicyDenyArrayOutput values. You can construct a concrete instance of `GetOrganizationPolicyListPolicyDenyArrayInput` via: 

GetOrganizationPolicyListPolicyDenyArray{ GetOrganizationPolicyListPolicyDenyArgs{...} }

type GetOrganizationPolicyListPolicyDenyArrayOutput 

type GetOrganizationPolicyListPolicyDenyArrayOutput struct{ *pulumi.OutputState }

func (GetOrganizationPolicyListPolicyDenyArrayOutput) ElementType 

func (GetOrganizationPolicyListPolicyDenyArrayOutput) ElementType() reflect.Type

func (GetOrganizationPolicyListPolicyDenyArrayOutput) Index 

func (o GetOrganizationPolicyListPolicyDenyArrayOutput) Index(i pulumi.IntInput) GetOrganizationPolicyListPolicyDenyOutput

func (GetOrganizationPolicyListPolicyDenyArrayOutput) ToGetOrganizationPolicyListPolicyDenyArrayOutput 

func (o GetOrganizationPolicyListPolicyDenyArrayOutput) ToGetOrganizationPolicyListPolicyDenyArrayOutput() GetOrganizationPolicyListPolicyDenyArrayOutput

func (GetOrganizationPolicyListPolicyDenyArrayOutput) ToGetOrganizationPolicyListPolicyDenyArrayOutputWithContext 

func (o GetOrganizationPolicyListPolicyDenyArrayOutput) ToGetOrganizationPolicyListPolicyDenyArrayOutputWithContext(ctx context.Context) GetOrganizationPolicyListPolicyDenyArrayOutput

type GetOrganizationPolicyListPolicyDenyInput 

type GetOrganizationPolicyListPolicyDenyInput interface {
	pulumi.Input

	ToGetOrganizationPolicyListPolicyDenyOutput() GetOrganizationPolicyListPolicyDenyOutput
	ToGetOrganizationPolicyListPolicyDenyOutputWithContext(context.Context) GetOrganizationPolicyListPolicyDenyOutput
}

GetOrganizationPolicyListPolicyDenyInput is an input type that accepts GetOrganizationPolicyListPolicyDenyArgs and GetOrganizationPolicyListPolicyDenyOutput values. You can construct a concrete instance of `GetOrganizationPolicyListPolicyDenyInput` via: 

GetOrganizationPolicyListPolicyDenyArgs{...}

type GetOrganizationPolicyListPolicyDenyOutput 

type GetOrganizationPolicyListPolicyDenyOutput struct{ *pulumi.OutputState }

func (GetOrganizationPolicyListPolicyDenyOutput) All 

func (o GetOrganizationPolicyListPolicyDenyOutput) All() pulumi.BoolOutput

The policy allows or denies all values.

func (GetOrganizationPolicyListPolicyDenyOutput) ElementType 

func (GetOrganizationPolicyListPolicyDenyOutput) ElementType() reflect.Type

func (GetOrganizationPolicyListPolicyDenyOutput) ToGetOrganizationPolicyListPolicyDenyOutput 

func (o GetOrganizationPolicyListPolicyDenyOutput) ToGetOrganizationPolicyListPolicyDenyOutput() GetOrganizationPolicyListPolicyDenyOutput

func (GetOrganizationPolicyListPolicyDenyOutput) ToGetOrganizationPolicyListPolicyDenyOutputWithContext 

func (o GetOrganizationPolicyListPolicyDenyOutput) ToGetOrganizationPolicyListPolicyDenyOutputWithContext(ctx context.Context) GetOrganizationPolicyListPolicyDenyOutput

func (GetOrganizationPolicyListPolicyDenyOutput) Values 

func (o GetOrganizationPolicyListPolicyDenyOutput) Values() pulumi.StringArrayOutput

The policy can define specific values that are allowed or denied.

type GetOrganizationPolicyListPolicyInput 

type GetOrganizationPolicyListPolicyInput interface {
	pulumi.Input

	ToGetOrganizationPolicyListPolicyOutput() GetOrganizationPolicyListPolicyOutput
	ToGetOrganizationPolicyListPolicyOutputWithContext(context.Context) GetOrganizationPolicyListPolicyOutput
}

GetOrganizationPolicyListPolicyInput is an input type that accepts GetOrganizationPolicyListPolicyArgs and GetOrganizationPolicyListPolicyOutput values. You can construct a concrete instance of `GetOrganizationPolicyListPolicyInput` via: 

GetOrganizationPolicyListPolicyArgs{...}

type GetOrganizationPolicyListPolicyOutput 

type GetOrganizationPolicyListPolicyOutput struct{ *pulumi.OutputState }

func (GetOrganizationPolicyListPolicyOutput) Allows 

func (o GetOrganizationPolicyListPolicyOutput) Allows() GetOrganizationPolicyListPolicyAllowArrayOutput

One or the other must be set.

func (GetOrganizationPolicyListPolicyOutput) Denies 

func (o GetOrganizationPolicyListPolicyOutput) Denies() GetOrganizationPolicyListPolicyDenyArrayOutput

One or the other must be set.

func (GetOrganizationPolicyListPolicyOutput) ElementType 

func (GetOrganizationPolicyListPolicyOutput) ElementType() reflect.Type

func (GetOrganizationPolicyListPolicyOutput) InheritFromParent 

func (o GetOrganizationPolicyListPolicyOutput) InheritFromParent() pulumi.BoolOutput

If set to true, the values from the effective Policy of the parent resource are inherited, meaning the values set in this Policy are added to the values inherited up the hierarchy.

func (GetOrganizationPolicyListPolicyOutput) SuggestedValue 

func (o GetOrganizationPolicyListPolicyOutput) SuggestedValue() pulumi.StringOutput

The Google Cloud Console will try to default to a configuration that matches the value specified in this field.

func (GetOrganizationPolicyListPolicyOutput) ToGetOrganizationPolicyListPolicyOutput 

func (o GetOrganizationPolicyListPolicyOutput) ToGetOrganizationPolicyListPolicyOutput() GetOrganizationPolicyListPolicyOutput

func (GetOrganizationPolicyListPolicyOutput) ToGetOrganizationPolicyListPolicyOutputWithContext 

func (o GetOrganizationPolicyListPolicyOutput) ToGetOrganizationPolicyListPolicyOutputWithContext(ctx context.Context) GetOrganizationPolicyListPolicyOutput

type GetOrganizationPolicyRestorePolicy 

type GetOrganizationPolicyRestorePolicy struct {
	// May only be set to true. If set, then the default Policy is restored.
	Default bool `pulumi:"default"`
}

type GetOrganizationPolicyRestorePolicyArgs 

type GetOrganizationPolicyRestorePolicyArgs struct {
	// May only be set to true. If set, then the default Policy is restored.
	Default pulumi.BoolInput `pulumi:"default"`
}

func (GetOrganizationPolicyRestorePolicyArgs) ElementType 

func (GetOrganizationPolicyRestorePolicyArgs) ElementType() reflect.Type

func (GetOrganizationPolicyRestorePolicyArgs) ToGetOrganizationPolicyRestorePolicyOutput 

func (i GetOrganizationPolicyRestorePolicyArgs) ToGetOrganizationPolicyRestorePolicyOutput() GetOrganizationPolicyRestorePolicyOutput

func (GetOrganizationPolicyRestorePolicyArgs) ToGetOrganizationPolicyRestorePolicyOutputWithContext 

func (i GetOrganizationPolicyRestorePolicyArgs) ToGetOrganizationPolicyRestorePolicyOutputWithContext(ctx context.Context) GetOrganizationPolicyRestorePolicyOutput

type GetOrganizationPolicyRestorePolicyArray 

type GetOrganizationPolicyRestorePolicyArray []GetOrganizationPolicyRestorePolicyInput

func (GetOrganizationPolicyRestorePolicyArray) ElementType 

func (GetOrganizationPolicyRestorePolicyArray) ElementType() reflect.Type

func (GetOrganizationPolicyRestorePolicyArray) ToGetOrganizationPolicyRestorePolicyArrayOutput 

func (i GetOrganizationPolicyRestorePolicyArray) ToGetOrganizationPolicyRestorePolicyArrayOutput() GetOrganizationPolicyRestorePolicyArrayOutput

func (GetOrganizationPolicyRestorePolicyArray) ToGetOrganizationPolicyRestorePolicyArrayOutputWithContext 

func (i GetOrganizationPolicyRestorePolicyArray) ToGetOrganizationPolicyRestorePolicyArrayOutputWithContext(ctx context.Context) GetOrganizationPolicyRestorePolicyArrayOutput

type GetOrganizationPolicyRestorePolicyArrayInput 

type GetOrganizationPolicyRestorePolicyArrayInput interface {
	pulumi.Input

	ToGetOrganizationPolicyRestorePolicyArrayOutput() GetOrganizationPolicyRestorePolicyArrayOutput
	ToGetOrganizationPolicyRestorePolicyArrayOutputWithContext(context.Context) GetOrganizationPolicyRestorePolicyArrayOutput
}

GetOrganizationPolicyRestorePolicyArrayInput is an input type that accepts GetOrganizationPolicyRestorePolicyArray and GetOrganizationPolicyRestorePolicyArrayOutput values. You can construct a concrete instance of `GetOrganizationPolicyRestorePolicyArrayInput` via: 

GetOrganizationPolicyRestorePolicyArray{ GetOrganizationPolicyRestorePolicyArgs{...} }

type GetOrganizationPolicyRestorePolicyArrayOutput 

type GetOrganizationPolicyRestorePolicyArrayOutput struct{ *pulumi.OutputState }

func (GetOrganizationPolicyRestorePolicyArrayOutput) ElementType 

func (GetOrganizationPolicyRestorePolicyArrayOutput) ElementType() reflect.Type

func (GetOrganizationPolicyRestorePolicyArrayOutput) Index 

func (o GetOrganizationPolicyRestorePolicyArrayOutput) Index(i pulumi.IntInput) GetOrganizationPolicyRestorePolicyOutput

func (GetOrganizationPolicyRestorePolicyArrayOutput) ToGetOrganizationPolicyRestorePolicyArrayOutput 

func (o GetOrganizationPolicyRestorePolicyArrayOutput) ToGetOrganizationPolicyRestorePolicyArrayOutput() GetOrganizationPolicyRestorePolicyArrayOutput

func (GetOrganizationPolicyRestorePolicyArrayOutput) ToGetOrganizationPolicyRestorePolicyArrayOutputWithContext 

func (o GetOrganizationPolicyRestorePolicyArrayOutput) ToGetOrganizationPolicyRestorePolicyArrayOutputWithContext(ctx context.Context) GetOrganizationPolicyRestorePolicyArrayOutput

type GetOrganizationPolicyRestorePolicyInput 

type GetOrganizationPolicyRestorePolicyInput interface {
	pulumi.Input

	ToGetOrganizationPolicyRestorePolicyOutput() GetOrganizationPolicyRestorePolicyOutput
	ToGetOrganizationPolicyRestorePolicyOutputWithContext(context.Context) GetOrganizationPolicyRestorePolicyOutput
}

GetOrganizationPolicyRestorePolicyInput is an input type that accepts GetOrganizationPolicyRestorePolicyArgs and GetOrganizationPolicyRestorePolicyOutput values. You can construct a concrete instance of `GetOrganizationPolicyRestorePolicyInput` via: 

GetOrganizationPolicyRestorePolicyArgs{...}

type GetOrganizationPolicyRestorePolicyOutput 

type GetOrganizationPolicyRestorePolicyOutput struct{ *pulumi.OutputState }

func (GetOrganizationPolicyRestorePolicyOutput) Default 

func (o GetOrganizationPolicyRestorePolicyOutput) Default() pulumi.BoolOutput

May only be set to true. If set, then the default Policy is restored.

func (GetOrganizationPolicyRestorePolicyOutput) ElementType 

func (GetOrganizationPolicyRestorePolicyOutput) ElementType() reflect.Type

func (GetOrganizationPolicyRestorePolicyOutput) ToGetOrganizationPolicyRestorePolicyOutput 

func (o GetOrganizationPolicyRestorePolicyOutput) ToGetOrganizationPolicyRestorePolicyOutput() GetOrganizationPolicyRestorePolicyOutput

func (GetOrganizationPolicyRestorePolicyOutput) ToGetOrganizationPolicyRestorePolicyOutputWithContext 

func (o GetOrganizationPolicyRestorePolicyOutput) ToGetOrganizationPolicyRestorePolicyOutputWithContext(ctx context.Context) GetOrganizationPolicyRestorePolicyOutput

type GetProjectArgs 

type GetProjectArgs struct {
	// A string filter as defined in the [REST API](https://cloud.google.com/resource-manager/reference/rest/v1/projects/list#query-parameters).
	Filter string `pulumi:"filter"`
}

A collection of arguments for invoking getProject.

type GetProjectOutputArgs 

type GetProjectOutputArgs struct {
	// A string filter as defined in the [REST API](https://cloud.google.com/resource-manager/reference/rest/v1/projects/list#query-parameters).
	Filter pulumi.StringInput `pulumi:"filter"`
}

A collection of arguments for invoking getProject.

func (GetProjectOutputArgs) ElementType 

func (GetProjectOutputArgs) ElementType() reflect.Type

type GetProjectProject 

type GetProjectProject struct {
	// Creation time in RFC3339 UTC "Zulu" format.
	CreateTime string `pulumi:"createTime"`
	// A set of key/value label pairs assigned on a project.
	Labels map[string]string `pulumi:"labels"`
	// The Project lifecycle state.
	LifecycleState string `pulumi:"lifecycleState"`
	// The optional user-assigned display name of the project.
	Name string `pulumi:"name"`
	// The numeric identifier of the project.
	Number string `pulumi:"number"`
	// An optional reference to a parent resource.
	Parent map[string]string `pulumi:"parent"`
	// The project id of the project.
	ProjectId string `pulumi:"projectId"`
}

type GetProjectProjectArgs 

type GetProjectProjectArgs struct {
	// Creation time in RFC3339 UTC "Zulu" format.
	CreateTime pulumi.StringInput `pulumi:"createTime"`
	// A set of key/value label pairs assigned on a project.
	Labels pulumi.StringMapInput `pulumi:"labels"`
	// The Project lifecycle state.
	LifecycleState pulumi.StringInput `pulumi:"lifecycleState"`
	// The optional user-assigned display name of the project.
	Name pulumi.StringInput `pulumi:"name"`
	// The numeric identifier of the project.
	Number pulumi.StringInput `pulumi:"number"`
	// An optional reference to a parent resource.
	Parent pulumi.StringMapInput `pulumi:"parent"`
	// The project id of the project.
	ProjectId pulumi.StringInput `pulumi:"projectId"`
}

func (GetProjectProjectArgs) ElementType 

func (GetProjectProjectArgs) ElementType() reflect.Type

func (GetProjectProjectArgs) ToGetProjectProjectOutput 

func (i GetProjectProjectArgs) ToGetProjectProjectOutput() GetProjectProjectOutput

func (GetProjectProjectArgs) ToGetProjectProjectOutputWithContext 

func (i GetProjectProjectArgs) ToGetProjectProjectOutputWithContext(ctx context.Context) GetProjectProjectOutput

type GetProjectProjectArray 

type GetProjectProjectArray []GetProjectProjectInput

func (GetProjectProjectArray) ElementType 

func (GetProjectProjectArray) ElementType() reflect.Type

func (GetProjectProjectArray) ToGetProjectProjectArrayOutput 

func (i GetProjectProjectArray) ToGetProjectProjectArrayOutput() GetProjectProjectArrayOutput

func (GetProjectProjectArray) ToGetProjectProjectArrayOutputWithContext 

func (i GetProjectProjectArray) ToGetProjectProjectArrayOutputWithContext(ctx context.Context) GetProjectProjectArrayOutput

type GetProjectProjectArrayInput 

type GetProjectProjectArrayInput interface {
	pulumi.Input

	ToGetProjectProjectArrayOutput() GetProjectProjectArrayOutput
	ToGetProjectProjectArrayOutputWithContext(context.Context) GetProjectProjectArrayOutput
}

GetProjectProjectArrayInput is an input type that accepts GetProjectProjectArray and GetProjectProjectArrayOutput values. You can construct a concrete instance of `GetProjectProjectArrayInput` via: 

GetProjectProjectArray{ GetProjectProjectArgs{...} }

type GetProjectProjectArrayOutput 

type GetProjectProjectArrayOutput struct{ *pulumi.OutputState }

func (GetProjectProjectArrayOutput) ElementType 

func (GetProjectProjectArrayOutput) ElementType() reflect.Type

func (GetProjectProjectArrayOutput) Index 

func (o GetProjectProjectArrayOutput) Index(i pulumi.IntInput) GetProjectProjectOutput

func (GetProjectProjectArrayOutput) ToGetProjectProjectArrayOutput 

func (o GetProjectProjectArrayOutput) ToGetProjectProjectArrayOutput() GetProjectProjectArrayOutput

func (GetProjectProjectArrayOutput) ToGetProjectProjectArrayOutputWithContext 

func (o GetProjectProjectArrayOutput) ToGetProjectProjectArrayOutputWithContext(ctx context.Context) GetProjectProjectArrayOutput

type GetProjectProjectInput 

type GetProjectProjectInput interface {
	pulumi.Input

	ToGetProjectProjectOutput() GetProjectProjectOutput
	ToGetProjectProjectOutputWithContext(context.Context) GetProjectProjectOutput
}

GetProjectProjectInput is an input type that accepts GetProjectProjectArgs and GetProjectProjectOutput values. You can construct a concrete instance of `GetProjectProjectInput` via: 

GetProjectProjectArgs{...}

type GetProjectProjectOutput 

type GetProjectProjectOutput struct{ *pulumi.OutputState }

func (GetProjectProjectOutput) CreateTime 

func (o GetProjectProjectOutput) CreateTime() pulumi.StringOutput

Creation time in RFC3339 UTC "Zulu" format.

func (GetProjectProjectOutput) ElementType 

func (GetProjectProjectOutput) ElementType() reflect.Type

func (GetProjectProjectOutput) Labels 

func (o GetProjectProjectOutput) Labels() pulumi.StringMapOutput

A set of key/value label pairs assigned on a project.

func (GetProjectProjectOutput) LifecycleState 

func (o GetProjectProjectOutput) LifecycleState() pulumi.StringOutput

The Project lifecycle state.

func (GetProjectProjectOutput) Name 

func (o GetProjectProjectOutput) Name() pulumi.StringOutput

The optional user-assigned display name of the project.

func (GetProjectProjectOutput) Number 

func (o GetProjectProjectOutput) Number() pulumi.StringOutput

The numeric identifier of the project.

func (GetProjectProjectOutput) Parent 

func (o GetProjectProjectOutput) Parent() pulumi.StringMapOutput

An optional reference to a parent resource.

func (GetProjectProjectOutput) ProjectId 

func (o GetProjectProjectOutput) ProjectId() pulumi.StringOutput

The project id of the project.

func (GetProjectProjectOutput) ToGetProjectProjectOutput 

func (o GetProjectProjectOutput) ToGetProjectProjectOutput() GetProjectProjectOutput

func (GetProjectProjectOutput) ToGetProjectProjectOutputWithContext 

func (o GetProjectProjectOutput) ToGetProjectProjectOutputWithContext(ctx context.Context) GetProjectProjectOutput

type GetProjectResult 

type GetProjectResult struct {
	Filter string `pulumi:"filter"`
	// The provider-assigned unique ID for this managed resource.
	Id string `pulumi:"id"`
	// A list of projects matching the provided filter. Structure is defined below.
	Projects []GetProjectProject `pulumi:"projects"`
}

A collection of values returned by getProject.

func GetProject 

func GetProject(ctx *pulumi.Context, args *GetProjectArgs, opts ...pulumi.InvokeOption) (*GetProjectResult, error)

Retrieve information about a set of projects based on a filter. See the [REST API](https://cloud.google.com/resource-manager/reference/rest/v1/projects/list) for more details.

## Example Usage

### Searching For Projects About To Be Deleted In An Org

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		my_org_projects, err := projects.GetProject(ctx, &projects.GetProjectArgs{
			Filter: "parent.id:012345678910 lifecycleState:DELETE_REQUESTED",
		}, nil)
		if err != nil {
			return err
		}
		_, err = organizations.LookupProject(ctx, &organizations.LookupProjectArgs{
			ProjectId: pulumi.StringRef(my_org_projects.Projects[0].ProjectId),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type GetProjectResultOutput 

type GetProjectResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getProject.

func GetProjectOutput 

func GetProjectOutput(ctx *pulumi.Context, args GetProjectOutputArgs, opts ...pulumi.InvokeOption) GetProjectResultOutput

func (GetProjectResultOutput) ElementType 

func (GetProjectResultOutput) ElementType() reflect.Type

func (GetProjectResultOutput) Filter 

func (o GetProjectResultOutput) Filter() pulumi.StringOutput

func (GetProjectResultOutput) Id 

func (o GetProjectResultOutput) Id() pulumi.StringOutput

The provider-assigned unique ID for this managed resource.

func (GetProjectResultOutput) Projects 

func (o GetProjectResultOutput) Projects() GetProjectProjectArrayOutput

A list of projects matching the provided filter. Structure is defined below.

func (GetProjectResultOutput) ToGetProjectResultOutput 

func (o GetProjectResultOutput) ToGetProjectResultOutput() GetProjectResultOutput

func (GetProjectResultOutput) ToGetProjectResultOutputWithContext 

func (o GetProjectResultOutput) ToGetProjectResultOutputWithContext(ctx context.Context) GetProjectResultOutput

type GetProjectServiceArgs 

type GetProjectServiceArgs struct {
	// The project in which the resource belongs. If it
	// is not provided, the provider project is used.
	Project *string `pulumi:"project"`
	// The name of the Google Platform project service.
	//
	// ***
	Service string `pulumi:"service"`
}

A collection of arguments for invoking getProjectService.

type GetProjectServiceOutputArgs 

type GetProjectServiceOutputArgs struct {
	// The project in which the resource belongs. If it
	// is not provided, the provider project is used.
	Project pulumi.StringPtrInput `pulumi:"project"`
	// The name of the Google Platform project service.
	//
	// ***
	Service pulumi.StringInput `pulumi:"service"`
}

A collection of arguments for invoking getProjectService.

func (GetProjectServiceOutputArgs) ElementType 

func (GetProjectServiceOutputArgs) ElementType() reflect.Type

type GetProjectServiceResult 

type GetProjectServiceResult struct {
	CheckIfServiceHasUsageOnDestroy bool `pulumi:"checkIfServiceHasUsageOnDestroy"`
	DisableDependentServices        bool `pulumi:"disableDependentServices"`
	DisableOnDestroy                bool `pulumi:"disableOnDestroy"`
	// The provider-assigned unique ID for this managed resource.
	Id      string  `pulumi:"id"`
	Project *string `pulumi:"project"`
	Service string  `pulumi:"service"`
}

A collection of values returned by getProjectService.

func GetProjectService 

func GetProjectService(ctx *pulumi.Context, args *GetProjectServiceArgs, opts ...pulumi.InvokeOption) (*GetProjectServiceResult, error)

Verify the API service for the Google Cloud Platform project to see if it is enabled or not.

For a list of services available, visit the [API library page](https://console.cloud.google.com/apis/library) or run `gcloud services list --available`.

This datasource requires the [Service Usage API](https://console.cloud.google.com/apis/library/serviceusage.googleapis.com) to use.

To get more information about `projects.Service`, see:

* [API documentation](https://cloud.google.com/service-usage/docs/reference/rest/v1/services) * How-to Guides

## Example Usage

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.GetProjectService(ctx, &projects.GetProjectServiceArgs{
			Service: "my-project-service",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type GetProjectServiceResultOutput 

type GetProjectServiceResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getProjectService.

func GetProjectServiceOutput 

func GetProjectServiceOutput(ctx *pulumi.Context, args GetProjectServiceOutputArgs, opts ...pulumi.InvokeOption) GetProjectServiceResultOutput

func (GetProjectServiceResultOutput) CheckIfServiceHasUsageOnDestroy 

func (o GetProjectServiceResultOutput) CheckIfServiceHasUsageOnDestroy() pulumi.BoolOutput

func (GetProjectServiceResultOutput) DisableDependentServices 

func (o GetProjectServiceResultOutput) DisableDependentServices() pulumi.BoolOutput

func (GetProjectServiceResultOutput) DisableOnDestroy 

func (o GetProjectServiceResultOutput) DisableOnDestroy() pulumi.BoolOutput

func (GetProjectServiceResultOutput) ElementType 

func (GetProjectServiceResultOutput) ElementType() reflect.Type

func (GetProjectServiceResultOutput) Id 

func (o GetProjectServiceResultOutput) Id() pulumi.StringOutput

The provider-assigned unique ID for this managed resource.

func (GetProjectServiceResultOutput) Project 

func (o GetProjectServiceResultOutput) Project() pulumi.StringPtrOutput

func (GetProjectServiceResultOutput) Service 

func (o GetProjectServiceResultOutput) Service() pulumi.StringOutput

func (GetProjectServiceResultOutput) ToGetProjectServiceResultOutput 

func (o GetProjectServiceResultOutput) ToGetProjectServiceResultOutput() GetProjectServiceResultOutput

func (GetProjectServiceResultOutput) ToGetProjectServiceResultOutputWithContext 

func (o GetProjectServiceResultOutput) ToGetProjectServiceResultOutputWithContext(ctx context.Context) GetProjectServiceResultOutput

type IAMAuditConfig 

type IAMAuditConfig struct {
	pulumi.CustomResourceState

	// The configuration for logging of each type of permission.  This can be specified multiple times.  Structure is documented below.
	AuditLogConfigs IAMAuditConfigAuditLogConfigArrayOutput `pulumi:"auditLogConfigs"`
	// (Computed) The etag of the project's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// The project id of the target project. This is not
	// inferred from the provider.
	Project pulumi.StringOutput `pulumi:"project"`
	// Service which will be enabled for audit logging.  The special value `allServices` covers all services.  Note that if there are projects.IAMAuditConfig resources covering both `allServices` and a specific service then the union of the two AuditConfigs is used for that service: the `logTypes` specified in each `auditLogConfig` are enabled, and the `exemptedMembers` in each `auditLogConfig` are exempted.
	Service pulumi.StringOutput `pulumi:"service"`
}

Four different resources help you manage your IAM policy for a project. Each of these resources serves a different use case:

* `projects.IAMPolicy`: Authoritative. Sets the IAM policy for the project and replaces any existing policy already attached. * `projects.IAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the project are preserved. * `projects.IAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the project are preserved. * `projects.IAMAuditConfig`: Authoritative for a given service. Updates the IAM policy to enable audit logging for the given service.

> **Note:** `projects.IAMPolicy` **cannot** be used in conjunction with `projects.IAMBinding`, `projects.IAMMember`, or `projects.IAMAuditConfig` or they will fight over what your policy should be.

> **Note:** `projects.IAMBinding` resources **can be** used in conjunction with `projects.IAMMember` resources **only if** they do not grant privilege to the same role.

> **Note:** The underlying API method `projects.setIamPolicy` has a lot of constraints which are documented [here](https://cloud.google.com/resource-manager/reference/rest/v1/projects/setIamPolicy). In addition to these constraints, 

IAM Conditions cannot be used with Basic Roles such as Owner. Violating these constraints will result in the API returning 400 error code so please review these if you encounter errors with this resource.

## projects.IAMPolicy

!> **Be careful!** You can accidentally lock yourself out of your project 

using this resource. Deleting a `projects.IAMPolicy` removes access
from anyone without organization-level access to the project. Proceed with caution.
It's not recommended to use `projects.IAMPolicy` with your provider project
to avoid locking yourself out, and it should generally only be used with projects
fully managed by this provider. If you do use this resource, it is recommended to **import** the policy before
applying the change.

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/editor",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = projects.NewIAMPolicy(ctx, "project", &projects.IAMPolicyArgs{
			Project:    pulumi.String("your-project-id"),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/compute.admin",
					Members: []string{
						"user:jane@example.com",
					},
					Condition: {
						Title:       "expires_after_2019_12_31",
						Description: pulumi.StringRef("Expiring at midnight of 2019-12-31"),
						Expression:  "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = projects.NewIAMPolicy(ctx, "project", &projects.IAMPolicyArgs{
			Project:    pulumi.String("your-project-id"),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMBinding

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMBinding(ctx, "project", &projects.IAMBindingArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/editor"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMBinding(ctx, "project", &projects.IAMBindingArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/container.admin"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
			Condition: &projects.IAMBindingConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMMember

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMMember(ctx, "project", &projects.IAMMemberArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/editor"),
			Member:  pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMMember(ctx, "project", &projects.IAMMemberArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/firebase.admin"),
			Member:  pulumi.String("user:jane@example.com"),
			Condition: &projects.IAMMemberConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMAuditConfig

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMAuditConfig(ctx, "project", &projects.IAMAuditConfigArgs{
			Project: pulumi.String("your-project-id"),
			Service: pulumi.String("allServices"),
			AuditLogConfigs: projects.IAMAuditConfigAuditLogConfigArray{
				&projects.IAMAuditConfigAuditLogConfigArgs{
					LogType: pulumi.String("ADMIN_READ"),
				},
				&projects.IAMAuditConfigAuditLogConfigArgs{
					LogType: pulumi.String("DATA_READ"),
					ExemptedMembers: pulumi.StringArray{
						pulumi.String("user:joebloggs@example.com"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMPolicy

!> **Be careful!** You can accidentally lock yourself out of your project 

using this resource. Deleting a `projects.IAMPolicy` removes access
from anyone without organization-level access to the project. Proceed with caution.
It's not recommended to use `projects.IAMPolicy` with your provider project
to avoid locking yourself out, and it should generally only be used with projects
fully managed by this provider. If you do use this resource, it is recommended to **import** the policy before
applying the change.

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/editor",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = projects.NewIAMPolicy(ctx, "project", &projects.IAMPolicyArgs{
			Project:    pulumi.String("your-project-id"),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/compute.admin",
					Members: []string{
						"user:jane@example.com",
					},
					Condition: {
						Title:       "expires_after_2019_12_31",
						Description: pulumi.StringRef("Expiring at midnight of 2019-12-31"),
						Expression:  "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = projects.NewIAMPolicy(ctx, "project", &projects.IAMPolicyArgs{
			Project:    pulumi.String("your-project-id"),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMBinding

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMBinding(ctx, "project", &projects.IAMBindingArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/editor"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMBinding(ctx, "project", &projects.IAMBindingArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/container.admin"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
			Condition: &projects.IAMBindingConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMMember

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMMember(ctx, "project", &projects.IAMMemberArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/editor"),
			Member:  pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMMember(ctx, "project", &projects.IAMMemberArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/firebase.admin"),
			Member:  pulumi.String("user:jane@example.com"),
			Condition: &projects.IAMMemberConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMAuditConfig

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMAuditConfig(ctx, "project", &projects.IAMAuditConfigArgs{
			Project: pulumi.String("your-project-id"),
			Service: pulumi.String("allServices"),
			AuditLogConfigs: projects.IAMAuditConfigAuditLogConfigArray{
				&projects.IAMAuditConfigAuditLogConfigArgs{
					LogType: pulumi.String("ADMIN_READ"),
				},
				&projects.IAMAuditConfigAuditLogConfigArgs{
					LogType: pulumi.String("DATA_READ"),
					ExemptedMembers: pulumi.StringArray{
						pulumi.String("user:joebloggs@example.com"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

### Importing Audit Configs

An audit config can be imported into a `google_project_iam_audit_config` resource using the resource's `project_id` and the `service`, e.g:

* `"{{project_id}} foo.googleapis.com"`

An `import` block (Terraform v1.5.0 and later) can be used to import audit configs:

tf

import { 

id = "{{project_id}} foo.googleapis.com"

to = google_project_iam_audit_config.default

}

The `pulumi import` command can also be used:

```sh $ pulumi import gcp:projects/iAMAuditConfig:IAMAuditConfig default "{{project_id}} foo.googleapis.com" ```

func GetIAMAuditConfig 

func GetIAMAuditConfig(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *IAMAuditConfigState, opts ...pulumi.ResourceOption) (*IAMAuditConfig, error)

GetIAMAuditConfig gets an existing IAMAuditConfig resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewIAMAuditConfig 

func NewIAMAuditConfig(ctx *pulumi.Context,
	name string, args *IAMAuditConfigArgs, opts ...pulumi.ResourceOption) (*IAMAuditConfig, error)

NewIAMAuditConfig registers a new resource with the given unique name, arguments, and options.

func (*IAMAuditConfig) ElementType 

func (*IAMAuditConfig) ElementType() reflect.Type

func (*IAMAuditConfig) ToIAMAuditConfigOutput 

func (i *IAMAuditConfig) ToIAMAuditConfigOutput() IAMAuditConfigOutput

func (*IAMAuditConfig) ToIAMAuditConfigOutputWithContext 

func (i *IAMAuditConfig) ToIAMAuditConfigOutputWithContext(ctx context.Context) IAMAuditConfigOutput

type IAMAuditConfigArgs 

type IAMAuditConfigArgs struct {
	// The configuration for logging of each type of permission.  This can be specified multiple times.  Structure is documented below.
	AuditLogConfigs IAMAuditConfigAuditLogConfigArrayInput
	// The project id of the target project. This is not
	// inferred from the provider.
	Project pulumi.StringInput
	// Service which will be enabled for audit logging.  The special value `allServices` covers all services.  Note that if there are projects.IAMAuditConfig resources covering both `allServices` and a specific service then the union of the two AuditConfigs is used for that service: the `logTypes` specified in each `auditLogConfig` are enabled, and the `exemptedMembers` in each `auditLogConfig` are exempted.
	Service pulumi.StringInput
}

The set of arguments for constructing a IAMAuditConfig resource.

func (IAMAuditConfigArgs) ElementType 

func (IAMAuditConfigArgs) ElementType() reflect.Type

type IAMAuditConfigArray 

type IAMAuditConfigArray []IAMAuditConfigInput

func (IAMAuditConfigArray) ElementType 

func (IAMAuditConfigArray) ElementType() reflect.Type

func (IAMAuditConfigArray) ToIAMAuditConfigArrayOutput 

func (i IAMAuditConfigArray) ToIAMAuditConfigArrayOutput() IAMAuditConfigArrayOutput

func (IAMAuditConfigArray) ToIAMAuditConfigArrayOutputWithContext 

func (i IAMAuditConfigArray) ToIAMAuditConfigArrayOutputWithContext(ctx context.Context) IAMAuditConfigArrayOutput

type IAMAuditConfigArrayInput 

type IAMAuditConfigArrayInput interface {
	pulumi.Input

	ToIAMAuditConfigArrayOutput() IAMAuditConfigArrayOutput
	ToIAMAuditConfigArrayOutputWithContext(context.Context) IAMAuditConfigArrayOutput
}

IAMAuditConfigArrayInput is an input type that accepts IAMAuditConfigArray and IAMAuditConfigArrayOutput values. You can construct a concrete instance of `IAMAuditConfigArrayInput` via: 

IAMAuditConfigArray{ IAMAuditConfigArgs{...} }

type IAMAuditConfigArrayOutput 

type IAMAuditConfigArrayOutput struct{ *pulumi.OutputState }

func (IAMAuditConfigArrayOutput) ElementType 

func (IAMAuditConfigArrayOutput) ElementType() reflect.Type

func (IAMAuditConfigArrayOutput) Index 

func (o IAMAuditConfigArrayOutput) Index(i pulumi.IntInput) IAMAuditConfigOutput

func (IAMAuditConfigArrayOutput) ToIAMAuditConfigArrayOutput 

func (o IAMAuditConfigArrayOutput) ToIAMAuditConfigArrayOutput() IAMAuditConfigArrayOutput

func (IAMAuditConfigArrayOutput) ToIAMAuditConfigArrayOutputWithContext 

func (o IAMAuditConfigArrayOutput) ToIAMAuditConfigArrayOutputWithContext(ctx context.Context) IAMAuditConfigArrayOutput

type IAMAuditConfigAuditLogConfig 

type IAMAuditConfigAuditLogConfig struct {
	// Identities that do not cause logging for this type of permission.  The format is the same as that for `members`.
	ExemptedMembers []string `pulumi:"exemptedMembers"`
	// Permission type for which logging is to be configured.  Must be one of `DATA_READ`, `DATA_WRITE`, or `ADMIN_READ`.
	LogType string `pulumi:"logType"`
}

type IAMAuditConfigAuditLogConfigArgs 

type IAMAuditConfigAuditLogConfigArgs struct {
	// Identities that do not cause logging for this type of permission.  The format is the same as that for `members`.
	ExemptedMembers pulumi.StringArrayInput `pulumi:"exemptedMembers"`
	// Permission type for which logging is to be configured.  Must be one of `DATA_READ`, `DATA_WRITE`, or `ADMIN_READ`.
	LogType pulumi.StringInput `pulumi:"logType"`
}

func (IAMAuditConfigAuditLogConfigArgs) ElementType 

func (IAMAuditConfigAuditLogConfigArgs) ElementType() reflect.Type

func (IAMAuditConfigAuditLogConfigArgs) ToIAMAuditConfigAuditLogConfigOutput 

func (i IAMAuditConfigAuditLogConfigArgs) ToIAMAuditConfigAuditLogConfigOutput() IAMAuditConfigAuditLogConfigOutput

func (IAMAuditConfigAuditLogConfigArgs) ToIAMAuditConfigAuditLogConfigOutputWithContext 

func (i IAMAuditConfigAuditLogConfigArgs) ToIAMAuditConfigAuditLogConfigOutputWithContext(ctx context.Context) IAMAuditConfigAuditLogConfigOutput

type IAMAuditConfigAuditLogConfigArray 

type IAMAuditConfigAuditLogConfigArray []IAMAuditConfigAuditLogConfigInput

func (IAMAuditConfigAuditLogConfigArray) ElementType 

func (IAMAuditConfigAuditLogConfigArray) ElementType() reflect.Type

func (IAMAuditConfigAuditLogConfigArray) ToIAMAuditConfigAuditLogConfigArrayOutput 

func (i IAMAuditConfigAuditLogConfigArray) ToIAMAuditConfigAuditLogConfigArrayOutput() IAMAuditConfigAuditLogConfigArrayOutput

func (IAMAuditConfigAuditLogConfigArray) ToIAMAuditConfigAuditLogConfigArrayOutputWithContext 

func (i IAMAuditConfigAuditLogConfigArray) ToIAMAuditConfigAuditLogConfigArrayOutputWithContext(ctx context.Context) IAMAuditConfigAuditLogConfigArrayOutput

type IAMAuditConfigAuditLogConfigArrayInput 

type IAMAuditConfigAuditLogConfigArrayInput interface {
	pulumi.Input

	ToIAMAuditConfigAuditLogConfigArrayOutput() IAMAuditConfigAuditLogConfigArrayOutput
	ToIAMAuditConfigAuditLogConfigArrayOutputWithContext(context.Context) IAMAuditConfigAuditLogConfigArrayOutput
}

IAMAuditConfigAuditLogConfigArrayInput is an input type that accepts IAMAuditConfigAuditLogConfigArray and IAMAuditConfigAuditLogConfigArrayOutput values. You can construct a concrete instance of `IAMAuditConfigAuditLogConfigArrayInput` via: 

IAMAuditConfigAuditLogConfigArray{ IAMAuditConfigAuditLogConfigArgs{...} }

type IAMAuditConfigAuditLogConfigArrayOutput 

type IAMAuditConfigAuditLogConfigArrayOutput struct{ *pulumi.OutputState }

func (IAMAuditConfigAuditLogConfigArrayOutput) ElementType 

func (IAMAuditConfigAuditLogConfigArrayOutput) ElementType() reflect.Type

func (IAMAuditConfigAuditLogConfigArrayOutput) Index 

func (o IAMAuditConfigAuditLogConfigArrayOutput) Index(i pulumi.IntInput) IAMAuditConfigAuditLogConfigOutput

func (IAMAuditConfigAuditLogConfigArrayOutput) ToIAMAuditConfigAuditLogConfigArrayOutput 

func (o IAMAuditConfigAuditLogConfigArrayOutput) ToIAMAuditConfigAuditLogConfigArrayOutput() IAMAuditConfigAuditLogConfigArrayOutput

func (IAMAuditConfigAuditLogConfigArrayOutput) ToIAMAuditConfigAuditLogConfigArrayOutputWithContext 

func (o IAMAuditConfigAuditLogConfigArrayOutput) ToIAMAuditConfigAuditLogConfigArrayOutputWithContext(ctx context.Context) IAMAuditConfigAuditLogConfigArrayOutput

type IAMAuditConfigAuditLogConfigInput 

type IAMAuditConfigAuditLogConfigInput interface {
	pulumi.Input

	ToIAMAuditConfigAuditLogConfigOutput() IAMAuditConfigAuditLogConfigOutput
	ToIAMAuditConfigAuditLogConfigOutputWithContext(context.Context) IAMAuditConfigAuditLogConfigOutput
}

IAMAuditConfigAuditLogConfigInput is an input type that accepts IAMAuditConfigAuditLogConfigArgs and IAMAuditConfigAuditLogConfigOutput values. You can construct a concrete instance of `IAMAuditConfigAuditLogConfigInput` via: 

IAMAuditConfigAuditLogConfigArgs{...}

type IAMAuditConfigAuditLogConfigOutput 

type IAMAuditConfigAuditLogConfigOutput struct{ *pulumi.OutputState }

func (IAMAuditConfigAuditLogConfigOutput) ElementType 

func (IAMAuditConfigAuditLogConfigOutput) ElementType() reflect.Type

func (IAMAuditConfigAuditLogConfigOutput) ExemptedMembers 

func (o IAMAuditConfigAuditLogConfigOutput) ExemptedMembers() pulumi.StringArrayOutput

Identities that do not cause logging for this type of permission. The format is the same as that for `members`.

func (IAMAuditConfigAuditLogConfigOutput) LogType 

func (o IAMAuditConfigAuditLogConfigOutput) LogType() pulumi.StringOutput

Permission type for which logging is to be configured. Must be one of `DATA_READ`, `DATA_WRITE`, or `ADMIN_READ`.

func (IAMAuditConfigAuditLogConfigOutput) ToIAMAuditConfigAuditLogConfigOutput 

func (o IAMAuditConfigAuditLogConfigOutput) ToIAMAuditConfigAuditLogConfigOutput() IAMAuditConfigAuditLogConfigOutput

func (IAMAuditConfigAuditLogConfigOutput) ToIAMAuditConfigAuditLogConfigOutputWithContext 

func (o IAMAuditConfigAuditLogConfigOutput) ToIAMAuditConfigAuditLogConfigOutputWithContext(ctx context.Context) IAMAuditConfigAuditLogConfigOutput

type IAMAuditConfigInput 

type IAMAuditConfigInput interface {
	pulumi.Input

	ToIAMAuditConfigOutput() IAMAuditConfigOutput
	ToIAMAuditConfigOutputWithContext(ctx context.Context) IAMAuditConfigOutput
}

type IAMAuditConfigMap 

type IAMAuditConfigMap map[string]IAMAuditConfigInput

func (IAMAuditConfigMap) ElementType 

func (IAMAuditConfigMap) ElementType() reflect.Type

func (IAMAuditConfigMap) ToIAMAuditConfigMapOutput 

func (i IAMAuditConfigMap) ToIAMAuditConfigMapOutput() IAMAuditConfigMapOutput

func (IAMAuditConfigMap) ToIAMAuditConfigMapOutputWithContext 

func (i IAMAuditConfigMap) ToIAMAuditConfigMapOutputWithContext(ctx context.Context) IAMAuditConfigMapOutput

type IAMAuditConfigMapInput 

type IAMAuditConfigMapInput interface {
	pulumi.Input

	ToIAMAuditConfigMapOutput() IAMAuditConfigMapOutput
	ToIAMAuditConfigMapOutputWithContext(context.Context) IAMAuditConfigMapOutput
}

IAMAuditConfigMapInput is an input type that accepts IAMAuditConfigMap and IAMAuditConfigMapOutput values. You can construct a concrete instance of `IAMAuditConfigMapInput` via: 

IAMAuditConfigMap{ "key": IAMAuditConfigArgs{...} }

type IAMAuditConfigMapOutput 

type IAMAuditConfigMapOutput struct{ *pulumi.OutputState }

func (IAMAuditConfigMapOutput) ElementType 

func (IAMAuditConfigMapOutput) ElementType() reflect.Type

func (IAMAuditConfigMapOutput) MapIndex 

func (o IAMAuditConfigMapOutput) MapIndex(k pulumi.StringInput) IAMAuditConfigOutput

func (IAMAuditConfigMapOutput) ToIAMAuditConfigMapOutput 

func (o IAMAuditConfigMapOutput) ToIAMAuditConfigMapOutput() IAMAuditConfigMapOutput

func (IAMAuditConfigMapOutput) ToIAMAuditConfigMapOutputWithContext 

func (o IAMAuditConfigMapOutput) ToIAMAuditConfigMapOutputWithContext(ctx context.Context) IAMAuditConfigMapOutput

type IAMAuditConfigOutput 

type IAMAuditConfigOutput struct{ *pulumi.OutputState }

func (IAMAuditConfigOutput) AuditLogConfigs 

func (o IAMAuditConfigOutput) AuditLogConfigs() IAMAuditConfigAuditLogConfigArrayOutput

The configuration for logging of each type of permission. This can be specified multiple times. Structure is documented below.

func (IAMAuditConfigOutput) ElementType 

func (IAMAuditConfigOutput) ElementType() reflect.Type

func (IAMAuditConfigOutput) Etag 

func (o IAMAuditConfigOutput) Etag() pulumi.StringOutput

(Computed) The etag of the project's IAM policy.

func (IAMAuditConfigOutput) Project 

func (o IAMAuditConfigOutput) Project() pulumi.StringOutput

The project id of the target project. This is not inferred from the provider.

func (IAMAuditConfigOutput) Service 

func (o IAMAuditConfigOutput) Service() pulumi.StringOutput

Service which will be enabled for audit logging. The special value `allServices` covers all services. Note that if there are projects.IAMAuditConfig resources covering both `allServices` and a specific service then the union of the two AuditConfigs is used for that service: the `logTypes` specified in each `auditLogConfig` are enabled, and the `exemptedMembers` in each `auditLogConfig` are exempted.

func (IAMAuditConfigOutput) ToIAMAuditConfigOutput 

func (o IAMAuditConfigOutput) ToIAMAuditConfigOutput() IAMAuditConfigOutput

func (IAMAuditConfigOutput) ToIAMAuditConfigOutputWithContext 

func (o IAMAuditConfigOutput) ToIAMAuditConfigOutputWithContext(ctx context.Context) IAMAuditConfigOutput

type IAMAuditConfigState 

type IAMAuditConfigState struct {
	// The configuration for logging of each type of permission.  This can be specified multiple times.  Structure is documented below.
	AuditLogConfigs IAMAuditConfigAuditLogConfigArrayInput
	// (Computed) The etag of the project's IAM policy.
	Etag pulumi.StringPtrInput
	// The project id of the target project. This is not
	// inferred from the provider.
	Project pulumi.StringPtrInput
	// Service which will be enabled for audit logging.  The special value `allServices` covers all services.  Note that if there are projects.IAMAuditConfig resources covering both `allServices` and a specific service then the union of the two AuditConfigs is used for that service: the `logTypes` specified in each `auditLogConfig` are enabled, and the `exemptedMembers` in each `auditLogConfig` are exempted.
	Service pulumi.StringPtrInput
}

func (IAMAuditConfigState) ElementType 

func (IAMAuditConfigState) ElementType() reflect.Type

type IAMBinding 

type IAMBinding struct {
	pulumi.CustomResourceState

	// An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
	// Structure is documented below.
	Condition IAMBindingConditionPtrOutput `pulumi:"condition"`
	// (Computed) The etag of the project's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Identities that will be granted the privilege in `role`. projects.IAMBinding expects `members` field while projects.IAMMember expects `member` field.
	// Each entry can have one of the following values:
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The project id of the target project. This is not
	// inferred from the provider.
	Project pulumi.StringOutput `pulumi:"project"`
	// The role that should be applied. Only one
	// `projects.IAMBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Four different resources help you manage your IAM policy for a project. Each of these resources serves a different use case:

* `projects.IAMPolicy`: Authoritative. Sets the IAM policy for the project and replaces any existing policy already attached. * `projects.IAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the project are preserved. * `projects.IAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the project are preserved. * `projects.IAMAuditConfig`: Authoritative for a given service. Updates the IAM policy to enable audit logging for the given service.

> **Note:** `projects.IAMPolicy` **cannot** be used in conjunction with `projects.IAMBinding`, `projects.IAMMember`, or `projects.IAMAuditConfig` or they will fight over what your policy should be.

> **Note:** `projects.IAMBinding` resources **can be** used in conjunction with `projects.IAMMember` resources **only if** they do not grant privilege to the same role.

> **Note:** The underlying API method `projects.setIamPolicy` has a lot of constraints which are documented [here](https://cloud.google.com/resource-manager/reference/rest/v1/projects/setIamPolicy). In addition to these constraints, 

IAM Conditions cannot be used with Basic Roles such as Owner. Violating these constraints will result in the API returning 400 error code so please review these if you encounter errors with this resource.

## projects.IAMPolicy

!> **Be careful!** You can accidentally lock yourself out of your project 

using this resource. Deleting a `projects.IAMPolicy` removes access
from anyone without organization-level access to the project. Proceed with caution.
It's not recommended to use `projects.IAMPolicy` with your provider project
to avoid locking yourself out, and it should generally only be used with projects
fully managed by this provider. If you do use this resource, it is recommended to **import** the policy before
applying the change.

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/editor",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = projects.NewIAMPolicy(ctx, "project", &projects.IAMPolicyArgs{
			Project:    pulumi.String("your-project-id"),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/compute.admin",
					Members: []string{
						"user:jane@example.com",
					},
					Condition: {
						Title:       "expires_after_2019_12_31",
						Description: pulumi.StringRef("Expiring at midnight of 2019-12-31"),
						Expression:  "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = projects.NewIAMPolicy(ctx, "project", &projects.IAMPolicyArgs{
			Project:    pulumi.String("your-project-id"),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMBinding

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMBinding(ctx, "project", &projects.IAMBindingArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/editor"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMBinding(ctx, "project", &projects.IAMBindingArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/container.admin"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
			Condition: &projects.IAMBindingConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMMember

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMMember(ctx, "project", &projects.IAMMemberArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/editor"),
			Member:  pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMMember(ctx, "project", &projects.IAMMemberArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/firebase.admin"),
			Member:  pulumi.String("user:jane@example.com"),
			Condition: &projects.IAMMemberConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMAuditConfig

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMAuditConfig(ctx, "project", &projects.IAMAuditConfigArgs{
			Project: pulumi.String("your-project-id"),
			Service: pulumi.String("allServices"),
			AuditLogConfigs: projects.IAMAuditConfigAuditLogConfigArray{
				&projects.IAMAuditConfigAuditLogConfigArgs{
					LogType: pulumi.String("ADMIN_READ"),
				},
				&projects.IAMAuditConfigAuditLogConfigArgs{
					LogType: pulumi.String("DATA_READ"),
					ExemptedMembers: pulumi.StringArray{
						pulumi.String("user:joebloggs@example.com"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMPolicy

!> **Be careful!** You can accidentally lock yourself out of your project 

using this resource. Deleting a `projects.IAMPolicy` removes access
from anyone without organization-level access to the project. Proceed with caution.
It's not recommended to use `projects.IAMPolicy` with your provider project
to avoid locking yourself out, and it should generally only be used with projects
fully managed by this provider. If you do use this resource, it is recommended to **import** the policy before
applying the change.

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/editor",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = projects.NewIAMPolicy(ctx, "project", &projects.IAMPolicyArgs{
			Project:    pulumi.String("your-project-id"),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/compute.admin",
					Members: []string{
						"user:jane@example.com",
					},
					Condition: {
						Title:       "expires_after_2019_12_31",
						Description: pulumi.StringRef("Expiring at midnight of 2019-12-31"),
						Expression:  "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = projects.NewIAMPolicy(ctx, "project", &projects.IAMPolicyArgs{
			Project:    pulumi.String("your-project-id"),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMBinding

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMBinding(ctx, "project", &projects.IAMBindingArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/editor"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMBinding(ctx, "project", &projects.IAMBindingArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/container.admin"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
			Condition: &projects.IAMBindingConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMMember

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMMember(ctx, "project", &projects.IAMMemberArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/editor"),
			Member:  pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMMember(ctx, "project", &projects.IAMMemberArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/firebase.admin"),
			Member:  pulumi.String("user:jane@example.com"),
			Condition: &projects.IAMMemberConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMAuditConfig

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMAuditConfig(ctx, "project", &projects.IAMAuditConfigArgs{
			Project: pulumi.String("your-project-id"),
			Service: pulumi.String("allServices"),
			AuditLogConfigs: projects.IAMAuditConfigAuditLogConfigArray{
				&projects.IAMAuditConfigAuditLogConfigArgs{
					LogType: pulumi.String("ADMIN_READ"),
				},
				&projects.IAMAuditConfigAuditLogConfigArgs{
					LogType: pulumi.String("DATA_READ"),
					ExemptedMembers: pulumi.StringArray{
						pulumi.String("user:joebloggs@example.com"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

### Importing Audit Configs

An audit config can be imported into a `google_project_iam_audit_config` resource using the resource's `project_id` and the `service`, e.g:

* `"{{project_id}} foo.googleapis.com"`

An `import` block (Terraform v1.5.0 and later) can be used to import audit configs:

tf

import { 

id = "{{project_id}} foo.googleapis.com"

to = google_project_iam_audit_config.default

}

The `pulumi import` command can also be used:

```sh $ pulumi import gcp:projects/iAMBinding:IAMBinding default "{{project_id}} foo.googleapis.com" ```

func GetIAMBinding 

func GetIAMBinding(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *IAMBindingState, opts ...pulumi.ResourceOption) (*IAMBinding, error)

GetIAMBinding gets an existing IAMBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewIAMBinding 

func NewIAMBinding(ctx *pulumi.Context,
	name string, args *IAMBindingArgs, opts ...pulumi.ResourceOption) (*IAMBinding, error)

NewIAMBinding registers a new resource with the given unique name, arguments, and options.

func (*IAMBinding) ElementType 

func (*IAMBinding) ElementType() reflect.Type

func (*IAMBinding) ToIAMBindingOutput 

func (i *IAMBinding) ToIAMBindingOutput() IAMBindingOutput

func (*IAMBinding) ToIAMBindingOutputWithContext 

func (i *IAMBinding) ToIAMBindingOutputWithContext(ctx context.Context) IAMBindingOutput

type IAMBindingArgs 

type IAMBindingArgs struct {
	// An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
	// Structure is documented below.
	Condition IAMBindingConditionPtrInput
	// Identities that will be granted the privilege in `role`. projects.IAMBinding expects `members` field while projects.IAMMember expects `member` field.
	// Each entry can have one of the following values:
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The project id of the target project. This is not
	// inferred from the provider.
	Project pulumi.StringInput
	// The role that should be applied. Only one
	// `projects.IAMBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringInput
}

The set of arguments for constructing a IAMBinding resource.

func (IAMBindingArgs) ElementType 

func (IAMBindingArgs) ElementType() reflect.Type

type IAMBindingArray 

type IAMBindingArray []IAMBindingInput

func (IAMBindingArray) ElementType 

func (IAMBindingArray) ElementType() reflect.Type

func (IAMBindingArray) ToIAMBindingArrayOutput 

func (i IAMBindingArray) ToIAMBindingArrayOutput() IAMBindingArrayOutput

func (IAMBindingArray) ToIAMBindingArrayOutputWithContext 

func (i IAMBindingArray) ToIAMBindingArrayOutputWithContext(ctx context.Context) IAMBindingArrayOutput

type IAMBindingArrayInput 

type IAMBindingArrayInput interface {
	pulumi.Input

	ToIAMBindingArrayOutput() IAMBindingArrayOutput
	ToIAMBindingArrayOutputWithContext(context.Context) IAMBindingArrayOutput
}

IAMBindingArrayInput is an input type that accepts IAMBindingArray and IAMBindingArrayOutput values. You can construct a concrete instance of `IAMBindingArrayInput` via: 

IAMBindingArray{ IAMBindingArgs{...} }

type IAMBindingArrayOutput 

type IAMBindingArrayOutput struct{ *pulumi.OutputState }

func (IAMBindingArrayOutput) ElementType 

func (IAMBindingArrayOutput) ElementType() reflect.Type

func (IAMBindingArrayOutput) Index 

func (o IAMBindingArrayOutput) Index(i pulumi.IntInput) IAMBindingOutput

func (IAMBindingArrayOutput) ToIAMBindingArrayOutput 

func (o IAMBindingArrayOutput) ToIAMBindingArrayOutput() IAMBindingArrayOutput

func (IAMBindingArrayOutput) ToIAMBindingArrayOutputWithContext 

func (o IAMBindingArrayOutput) ToIAMBindingArrayOutputWithContext(ctx context.Context) IAMBindingArrayOutput

type IAMBindingCondition 

type IAMBindingCondition struct {
	// An optional description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	//
	// > **Warning:** This provider considers the `role` and condition contents (`title`+`description`+`expression`) as the
	// identifier for the binding. This means that if any part of the condition is changed out-of-band, the provider will
	// consider it to be an entirely different resource and will treat it as such.
	Description *string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression string `pulumi:"expression"`
	// A title for the expression, i.e. a short string describing its purpose.
	Title string `pulumi:"title"`
}

type IAMBindingConditionArgs 

type IAMBindingConditionArgs struct {
	// An optional description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	//
	// > **Warning:** This provider considers the `role` and condition contents (`title`+`description`+`expression`) as the
	// identifier for the binding. This means that if any part of the condition is changed out-of-band, the provider will
	// consider it to be an entirely different resource and will treat it as such.
	Description pulumi.StringPtrInput `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression pulumi.StringInput `pulumi:"expression"`
	// A title for the expression, i.e. a short string describing its purpose.
	Title pulumi.StringInput `pulumi:"title"`
}

func (IAMBindingConditionArgs) ElementType 

func (IAMBindingConditionArgs) ElementType() reflect.Type

func (IAMBindingConditionArgs) ToIAMBindingConditionOutput 

func (i IAMBindingConditionArgs) ToIAMBindingConditionOutput() IAMBindingConditionOutput

func (IAMBindingConditionArgs) ToIAMBindingConditionOutputWithContext 

func (i IAMBindingConditionArgs) ToIAMBindingConditionOutputWithContext(ctx context.Context) IAMBindingConditionOutput

func (IAMBindingConditionArgs) ToIAMBindingConditionPtrOutput 

func (i IAMBindingConditionArgs) ToIAMBindingConditionPtrOutput() IAMBindingConditionPtrOutput

func (IAMBindingConditionArgs) ToIAMBindingConditionPtrOutputWithContext 

func (i IAMBindingConditionArgs) ToIAMBindingConditionPtrOutputWithContext(ctx context.Context) IAMBindingConditionPtrOutput

type IAMBindingConditionInput 

type IAMBindingConditionInput interface {
	pulumi.Input

	ToIAMBindingConditionOutput() IAMBindingConditionOutput
	ToIAMBindingConditionOutputWithContext(context.Context) IAMBindingConditionOutput
}

IAMBindingConditionInput is an input type that accepts IAMBindingConditionArgs and IAMBindingConditionOutput values. You can construct a concrete instance of `IAMBindingConditionInput` via: 

IAMBindingConditionArgs{...}

type IAMBindingConditionOutput 

type IAMBindingConditionOutput struct{ *pulumi.OutputState }

func (IAMBindingConditionOutput) Description 

func (o IAMBindingConditionOutput) Description() pulumi.StringPtrOutput

An optional description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

> **Warning:** This provider considers the `role` and condition contents (`title`+`description`+`expression`) as the identifier for the binding. This means that if any part of the condition is changed out-of-band, the provider will consider it to be an entirely different resource and will treat it as such.

func (IAMBindingConditionOutput) ElementType 

func (IAMBindingConditionOutput) ElementType() reflect.Type

func (IAMBindingConditionOutput) Expression 

func (o IAMBindingConditionOutput) Expression() pulumi.StringOutput

Textual representation of an expression in Common Expression Language syntax.

func (IAMBindingConditionOutput) Title 

func (o IAMBindingConditionOutput) Title() pulumi.StringOutput

A title for the expression, i.e. a short string describing its purpose.

func (IAMBindingConditionOutput) ToIAMBindingConditionOutput 

func (o IAMBindingConditionOutput) ToIAMBindingConditionOutput() IAMBindingConditionOutput

func (IAMBindingConditionOutput) ToIAMBindingConditionOutputWithContext 

func (o IAMBindingConditionOutput) ToIAMBindingConditionOutputWithContext(ctx context.Context) IAMBindingConditionOutput

func (IAMBindingConditionOutput) ToIAMBindingConditionPtrOutput 

func (o IAMBindingConditionOutput) ToIAMBindingConditionPtrOutput() IAMBindingConditionPtrOutput

func (IAMBindingConditionOutput) ToIAMBindingConditionPtrOutputWithContext 

func (o IAMBindingConditionOutput) ToIAMBindingConditionPtrOutputWithContext(ctx context.Context) IAMBindingConditionPtrOutput

type IAMBindingConditionPtrInput 

type IAMBindingConditionPtrInput interface {
	pulumi.Input

	ToIAMBindingConditionPtrOutput() IAMBindingConditionPtrOutput
	ToIAMBindingConditionPtrOutputWithContext(context.Context) IAMBindingConditionPtrOutput
}

IAMBindingConditionPtrInput is an input type that accepts IAMBindingConditionArgs, IAMBindingConditionPtr and IAMBindingConditionPtrOutput values. You can construct a concrete instance of `IAMBindingConditionPtrInput` via: 

        IAMBindingConditionArgs{...}

or:

        nil

func IAMBindingConditionPtr 

func IAMBindingConditionPtr(v *IAMBindingConditionArgs) IAMBindingConditionPtrInput

type IAMBindingConditionPtrOutput 

type IAMBindingConditionPtrOutput struct{ *pulumi.OutputState }

func (IAMBindingConditionPtrOutput) Description 

func (o IAMBindingConditionPtrOutput) Description() pulumi.StringPtrOutput

An optional description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

> **Warning:** This provider considers the `role` and condition contents (`title`+`description`+`expression`) as the identifier for the binding. This means that if any part of the condition is changed out-of-band, the provider will consider it to be an entirely different resource and will treat it as such.

func (IAMBindingConditionPtrOutput) Elem 

func (o IAMBindingConditionPtrOutput) Elem() IAMBindingConditionOutput

func (IAMBindingConditionPtrOutput) ElementType 

func (IAMBindingConditionPtrOutput) ElementType() reflect.Type

func (IAMBindingConditionPtrOutput) Expression 

func (o IAMBindingConditionPtrOutput) Expression() pulumi.StringPtrOutput

Textual representation of an expression in Common Expression Language syntax.

func (IAMBindingConditionPtrOutput) Title 

func (o IAMBindingConditionPtrOutput) Title() pulumi.StringPtrOutput

A title for the expression, i.e. a short string describing its purpose.

func (IAMBindingConditionPtrOutput) ToIAMBindingConditionPtrOutput 

func (o IAMBindingConditionPtrOutput) ToIAMBindingConditionPtrOutput() IAMBindingConditionPtrOutput

func (IAMBindingConditionPtrOutput) ToIAMBindingConditionPtrOutputWithContext 

func (o IAMBindingConditionPtrOutput) ToIAMBindingConditionPtrOutputWithContext(ctx context.Context) IAMBindingConditionPtrOutput

type IAMBindingInput 

type IAMBindingInput interface {
	pulumi.Input

	ToIAMBindingOutput() IAMBindingOutput
	ToIAMBindingOutputWithContext(ctx context.Context) IAMBindingOutput
}

type IAMBindingMap 

type IAMBindingMap map[string]IAMBindingInput

func (IAMBindingMap) ElementType 

func (IAMBindingMap) ElementType() reflect.Type

func (IAMBindingMap) ToIAMBindingMapOutput 

func (i IAMBindingMap) ToIAMBindingMapOutput() IAMBindingMapOutput

func (IAMBindingMap) ToIAMBindingMapOutputWithContext 

func (i IAMBindingMap) ToIAMBindingMapOutputWithContext(ctx context.Context) IAMBindingMapOutput

type IAMBindingMapInput 

type IAMBindingMapInput interface {
	pulumi.Input

	ToIAMBindingMapOutput() IAMBindingMapOutput
	ToIAMBindingMapOutputWithContext(context.Context) IAMBindingMapOutput
}

IAMBindingMapInput is an input type that accepts IAMBindingMap and IAMBindingMapOutput values. You can construct a concrete instance of `IAMBindingMapInput` via: 

IAMBindingMap{ "key": IAMBindingArgs{...} }

type IAMBindingMapOutput 

type IAMBindingMapOutput struct{ *pulumi.OutputState }

func (IAMBindingMapOutput) ElementType 

func (IAMBindingMapOutput) ElementType() reflect.Type

func (IAMBindingMapOutput) MapIndex 

func (o IAMBindingMapOutput) MapIndex(k pulumi.StringInput) IAMBindingOutput

func (IAMBindingMapOutput) ToIAMBindingMapOutput 

func (o IAMBindingMapOutput) ToIAMBindingMapOutput() IAMBindingMapOutput

func (IAMBindingMapOutput) ToIAMBindingMapOutputWithContext 

func (o IAMBindingMapOutput) ToIAMBindingMapOutputWithContext(ctx context.Context) IAMBindingMapOutput

type IAMBindingOutput 

type IAMBindingOutput struct{ *pulumi.OutputState }

func (IAMBindingOutput) Condition 

func (o IAMBindingOutput) Condition() IAMBindingConditionPtrOutput

An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding. Structure is documented below.

func (IAMBindingOutput) ElementType 

func (IAMBindingOutput) ElementType() reflect.Type

func (IAMBindingOutput) Etag 

func (o IAMBindingOutput) Etag() pulumi.StringOutput

(Computed) The etag of the project's IAM policy.

func (IAMBindingOutput) Members 

func (o IAMBindingOutput) Members() pulumi.StringArrayOutput

Identities that will be granted the privilege in `role`. projects.IAMBinding expects `members` field while projects.IAMMember expects `member` field. Each entry can have one of the following values: * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com. * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com. * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com. * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.

func (IAMBindingOutput) Project 

func (o IAMBindingOutput) Project() pulumi.StringOutput

The project id of the target project. This is not inferred from the provider.

func (IAMBindingOutput) Role 

func (o IAMBindingOutput) Role() pulumi.StringOutput

The role that should be applied. Only one `projects.IAMBinding` can be used per role. Note that custom roles must be of the format `[projects|organizations]/{parent-name}/roles/{role-name}`.

func (IAMBindingOutput) ToIAMBindingOutput 

func (o IAMBindingOutput) ToIAMBindingOutput() IAMBindingOutput

func (IAMBindingOutput) ToIAMBindingOutputWithContext 

func (o IAMBindingOutput) ToIAMBindingOutputWithContext(ctx context.Context) IAMBindingOutput

type IAMBindingState 

type IAMBindingState struct {
	// An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
	// Structure is documented below.
	Condition IAMBindingConditionPtrInput
	// (Computed) The etag of the project's IAM policy.
	Etag pulumi.StringPtrInput
	// Identities that will be granted the privilege in `role`. projects.IAMBinding expects `members` field while projects.IAMMember expects `member` field.
	// Each entry can have one of the following values:
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Members pulumi.StringArrayInput
	// The project id of the target project. This is not
	// inferred from the provider.
	Project pulumi.StringPtrInput
	// The role that should be applied. Only one
	// `projects.IAMBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringPtrInput
}

func (IAMBindingState) ElementType 

func (IAMBindingState) ElementType() reflect.Type

type IAMCustomRole 

type IAMCustomRole struct {
	pulumi.CustomResourceState

	// (Optional) The current deleted state of the role.
	Deleted pulumi.BoolOutput `pulumi:"deleted"`
	// A human-readable description for the role.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// The name of the role in the format `projects/{{project}}/roles/{{role_id}}`. Like `id`, this field can be used as a reference in other resources such as IAM role bindings.
	Name pulumi.StringOutput `pulumi:"name"`
	// The names of the permissions this role grants when bound in an IAM policy. At least one permission must be specified.
	Permissions pulumi.StringArrayOutput `pulumi:"permissions"`
	// The project that the custom role will be created in.
	// Defaults to the provider project configuration.
	Project pulumi.StringOutput `pulumi:"project"`
	// The camel case role id to use for this role. Cannot contain `-` characters.
	RoleId pulumi.StringOutput `pulumi:"roleId"`
	// The current launch stage of the role.
	// Defaults to `GA`.
	// List of possible stages is [here](https://cloud.google.com/iam/reference/rest/v1/organizations.roles#Role.RoleLaunchStage).
	Stage pulumi.StringPtrOutput `pulumi:"stage"`
	// A human-readable title for the role.
	Title pulumi.StringOutput `pulumi:"title"`
}

Allows management of a customized Cloud IAM project role. For more information see [the official documentation](https://cloud.google.com/iam/docs/understanding-custom-roles) and [API](https://cloud.google.com/iam/reference/rest/v1/projects.roles).

> **Warning:** Note that custom roles in GCP have the concept of a soft-delete. There are two issues that may arise 

from this and how roles are propagated. 1) creating a role may involve undeleting and then updating a role with the
same name, possibly causing confusing behavior between undelete and update. 2) A deleted role is permanently deleted
after 7 days, but it can take up to 30 more days (i.e. between 7 and 37 days after deletion) before the role name is
made available again. This means a deleted role that has been deleted for more than 7 days cannot be changed at all
by the provider, and new roles cannot share that name.

## Example Usage

This snippet creates a customized IAM role.

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMCustomRole(ctx, "my-custom-role", &projects.IAMCustomRoleArgs{
			RoleId:      pulumi.String("myCustomRole"),
			Title:       pulumi.String("My Custom Role"),
			Description: pulumi.String("A description"),
			Permissions: pulumi.StringArray{
				pulumi.String("iam.roles.list"),
				pulumi.String("iam.roles.create"),
				pulumi.String("iam.roles.delete"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Custom Roles can be imported using any of these accepted formats:

* `projects/{{project}}/roles/{{role_id}}`

* `{{project}}/{{role_id}}`

* `{{role_id}}`

When using the `pulumi import` command, Custom Roles can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:projects/iAMCustomRole:IAMCustomRole default projects/{{project}}/roles/{{role_id}} ```

```sh $ pulumi import gcp:projects/iAMCustomRole:IAMCustomRole default {{project}}/{{role_id}} ```

```sh $ pulumi import gcp:projects/iAMCustomRole:IAMCustomRole default {{role_id}} ```

func GetIAMCustomRole 

func GetIAMCustomRole(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *IAMCustomRoleState, opts ...pulumi.ResourceOption) (*IAMCustomRole, error)

GetIAMCustomRole gets an existing IAMCustomRole resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewIAMCustomRole 

func NewIAMCustomRole(ctx *pulumi.Context,
	name string, args *IAMCustomRoleArgs, opts ...pulumi.ResourceOption) (*IAMCustomRole, error)

NewIAMCustomRole registers a new resource with the given unique name, arguments, and options.

func (*IAMCustomRole) ElementType 

func (*IAMCustomRole) ElementType() reflect.Type

func (*IAMCustomRole) ToIAMCustomRoleOutput 

func (i *IAMCustomRole) ToIAMCustomRoleOutput() IAMCustomRoleOutput

func (*IAMCustomRole) ToIAMCustomRoleOutputWithContext 

func (i *IAMCustomRole) ToIAMCustomRoleOutputWithContext(ctx context.Context) IAMCustomRoleOutput

type IAMCustomRoleArgs 

type IAMCustomRoleArgs struct {
	// A human-readable description for the role.
	Description pulumi.StringPtrInput
	// The names of the permissions this role grants when bound in an IAM policy. At least one permission must be specified.
	Permissions pulumi.StringArrayInput
	// The project that the custom role will be created in.
	// Defaults to the provider project configuration.
	Project pulumi.StringPtrInput
	// The camel case role id to use for this role. Cannot contain `-` characters.
	RoleId pulumi.StringPtrInput
	// The current launch stage of the role.
	// Defaults to `GA`.
	// List of possible stages is [here](https://cloud.google.com/iam/reference/rest/v1/organizations.roles#Role.RoleLaunchStage).
	Stage pulumi.StringPtrInput
	// A human-readable title for the role.
	Title pulumi.StringInput
}

The set of arguments for constructing a IAMCustomRole resource.

func (IAMCustomRoleArgs) ElementType 

func (IAMCustomRoleArgs) ElementType() reflect.Type

type IAMCustomRoleArray 

type IAMCustomRoleArray []IAMCustomRoleInput

func (IAMCustomRoleArray) ElementType 

func (IAMCustomRoleArray) ElementType() reflect.Type

func (IAMCustomRoleArray) ToIAMCustomRoleArrayOutput 

func (i IAMCustomRoleArray) ToIAMCustomRoleArrayOutput() IAMCustomRoleArrayOutput

func (IAMCustomRoleArray) ToIAMCustomRoleArrayOutputWithContext 

func (i IAMCustomRoleArray) ToIAMCustomRoleArrayOutputWithContext(ctx context.Context) IAMCustomRoleArrayOutput

type IAMCustomRoleArrayInput 

type IAMCustomRoleArrayInput interface {
	pulumi.Input

	ToIAMCustomRoleArrayOutput() IAMCustomRoleArrayOutput
	ToIAMCustomRoleArrayOutputWithContext(context.Context) IAMCustomRoleArrayOutput
}

IAMCustomRoleArrayInput is an input type that accepts IAMCustomRoleArray and IAMCustomRoleArrayOutput values. You can construct a concrete instance of `IAMCustomRoleArrayInput` via: 

IAMCustomRoleArray{ IAMCustomRoleArgs{...} }

type IAMCustomRoleArrayOutput 

type IAMCustomRoleArrayOutput struct{ *pulumi.OutputState }

func (IAMCustomRoleArrayOutput) ElementType 

func (IAMCustomRoleArrayOutput) ElementType() reflect.Type

func (IAMCustomRoleArrayOutput) Index 

func (o IAMCustomRoleArrayOutput) Index(i pulumi.IntInput) IAMCustomRoleOutput

func (IAMCustomRoleArrayOutput) ToIAMCustomRoleArrayOutput 

func (o IAMCustomRoleArrayOutput) ToIAMCustomRoleArrayOutput() IAMCustomRoleArrayOutput

func (IAMCustomRoleArrayOutput) ToIAMCustomRoleArrayOutputWithContext 

func (o IAMCustomRoleArrayOutput) ToIAMCustomRoleArrayOutputWithContext(ctx context.Context) IAMCustomRoleArrayOutput

type IAMCustomRoleInput 

type IAMCustomRoleInput interface {
	pulumi.Input

	ToIAMCustomRoleOutput() IAMCustomRoleOutput
	ToIAMCustomRoleOutputWithContext(ctx context.Context) IAMCustomRoleOutput
}

type IAMCustomRoleMap 

type IAMCustomRoleMap map[string]IAMCustomRoleInput

func (IAMCustomRoleMap) ElementType 

func (IAMCustomRoleMap) ElementType() reflect.Type

func (IAMCustomRoleMap) ToIAMCustomRoleMapOutput 

func (i IAMCustomRoleMap) ToIAMCustomRoleMapOutput() IAMCustomRoleMapOutput

func (IAMCustomRoleMap) ToIAMCustomRoleMapOutputWithContext 

func (i IAMCustomRoleMap) ToIAMCustomRoleMapOutputWithContext(ctx context.Context) IAMCustomRoleMapOutput

type IAMCustomRoleMapInput 

type IAMCustomRoleMapInput interface {
	pulumi.Input

	ToIAMCustomRoleMapOutput() IAMCustomRoleMapOutput
	ToIAMCustomRoleMapOutputWithContext(context.Context) IAMCustomRoleMapOutput
}

IAMCustomRoleMapInput is an input type that accepts IAMCustomRoleMap and IAMCustomRoleMapOutput values. You can construct a concrete instance of `IAMCustomRoleMapInput` via: 

IAMCustomRoleMap{ "key": IAMCustomRoleArgs{...} }

type IAMCustomRoleMapOutput 

type IAMCustomRoleMapOutput struct{ *pulumi.OutputState }

func (IAMCustomRoleMapOutput) ElementType 

func (IAMCustomRoleMapOutput) ElementType() reflect.Type

func (IAMCustomRoleMapOutput) MapIndex 

func (o IAMCustomRoleMapOutput) MapIndex(k pulumi.StringInput) IAMCustomRoleOutput

func (IAMCustomRoleMapOutput) ToIAMCustomRoleMapOutput 

func (o IAMCustomRoleMapOutput) ToIAMCustomRoleMapOutput() IAMCustomRoleMapOutput

func (IAMCustomRoleMapOutput) ToIAMCustomRoleMapOutputWithContext 

func (o IAMCustomRoleMapOutput) ToIAMCustomRoleMapOutputWithContext(ctx context.Context) IAMCustomRoleMapOutput

type IAMCustomRoleOutput 

type IAMCustomRoleOutput struct{ *pulumi.OutputState }

func (IAMCustomRoleOutput) Deleted 

func (o IAMCustomRoleOutput) Deleted() pulumi.BoolOutput

(Optional) The current deleted state of the role.

func (IAMCustomRoleOutput) Description 

func (o IAMCustomRoleOutput) Description() pulumi.StringPtrOutput

A human-readable description for the role.

func (IAMCustomRoleOutput) ElementType 

func (IAMCustomRoleOutput) ElementType() reflect.Type

func (IAMCustomRoleOutput) Name 

func (o IAMCustomRoleOutput) Name() pulumi.StringOutput

The name of the role in the format `projects/{{project}}/roles/{{role_id}}`. Like `id`, this field can be used as a reference in other resources such as IAM role bindings.

func (IAMCustomRoleOutput) Permissions 

func (o IAMCustomRoleOutput) Permissions() pulumi.StringArrayOutput

The names of the permissions this role grants when bound in an IAM policy. At least one permission must be specified.

func (IAMCustomRoleOutput) Project 

func (o IAMCustomRoleOutput) Project() pulumi.StringOutput

The project that the custom role will be created in. Defaults to the provider project configuration.

func (IAMCustomRoleOutput) RoleId 

func (o IAMCustomRoleOutput) RoleId() pulumi.StringOutput

The camel case role id to use for this role. Cannot contain `-` characters.

func (IAMCustomRoleOutput) Stage 

func (o IAMCustomRoleOutput) Stage() pulumi.StringPtrOutput

The current launch stage of the role. Defaults to `GA`. List of possible stages is [here](https://cloud.google.com/iam/reference/rest/v1/organizations.roles#Role.RoleLaunchStage).

func (IAMCustomRoleOutput) Title 

func (o IAMCustomRoleOutput) Title() pulumi.StringOutput

A human-readable title for the role.

func (IAMCustomRoleOutput) ToIAMCustomRoleOutput 

func (o IAMCustomRoleOutput) ToIAMCustomRoleOutput() IAMCustomRoleOutput

func (IAMCustomRoleOutput) ToIAMCustomRoleOutputWithContext 

func (o IAMCustomRoleOutput) ToIAMCustomRoleOutputWithContext(ctx context.Context) IAMCustomRoleOutput

type IAMCustomRoleState 

type IAMCustomRoleState struct {
	// (Optional) The current deleted state of the role.
	Deleted pulumi.BoolPtrInput
	// A human-readable description for the role.
	Description pulumi.StringPtrInput
	// The name of the role in the format `projects/{{project}}/roles/{{role_id}}`. Like `id`, this field can be used as a reference in other resources such as IAM role bindings.
	Name pulumi.StringPtrInput
	// The names of the permissions this role grants when bound in an IAM policy. At least one permission must be specified.
	Permissions pulumi.StringArrayInput
	// The project that the custom role will be created in.
	// Defaults to the provider project configuration.
	Project pulumi.StringPtrInput
	// The camel case role id to use for this role. Cannot contain `-` characters.
	RoleId pulumi.StringPtrInput
	// The current launch stage of the role.
	// Defaults to `GA`.
	// List of possible stages is [here](https://cloud.google.com/iam/reference/rest/v1/organizations.roles#Role.RoleLaunchStage).
	Stage pulumi.StringPtrInput
	// A human-readable title for the role.
	Title pulumi.StringPtrInput
}

func (IAMCustomRoleState) ElementType 

func (IAMCustomRoleState) ElementType() reflect.Type

type IAMMember 

type IAMMember struct {
	pulumi.CustomResourceState

	// An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
	// Structure is documented below.
	Condition IAMMemberConditionPtrOutput `pulumi:"condition"`
	// (Computed) The etag of the project's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// Identities that will be granted the privilege in `role`. projects.IAMBinding expects `members` field while projects.IAMMember expects `member` field.
	// Each entry can have one of the following values:
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringOutput `pulumi:"member"`
	// The project id of the target project. This is not
	// inferred from the provider.
	Project pulumi.StringOutput `pulumi:"project"`
	// The role that should be applied. Only one
	// `projects.IAMBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringOutput `pulumi:"role"`
}

Four different resources help you manage your IAM policy for a project. Each of these resources serves a different use case:

* `projects.IAMPolicy`: Authoritative. Sets the IAM policy for the project and replaces any existing policy already attached. * `projects.IAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the project are preserved. * `projects.IAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the project are preserved. * `projects.IAMAuditConfig`: Authoritative for a given service. Updates the IAM policy to enable audit logging for the given service.

> **Note:** `projects.IAMPolicy` **cannot** be used in conjunction with `projects.IAMBinding`, `projects.IAMMember`, or `projects.IAMAuditConfig` or they will fight over what your policy should be.

> **Note:** `projects.IAMBinding` resources **can be** used in conjunction with `projects.IAMMember` resources **only if** they do not grant privilege to the same role.

> **Note:** The underlying API method `projects.setIamPolicy` has a lot of constraints which are documented [here](https://cloud.google.com/resource-manager/reference/rest/v1/projects/setIamPolicy). In addition to these constraints, 

IAM Conditions cannot be used with Basic Roles such as Owner. Violating these constraints will result in the API returning 400 error code so please review these if you encounter errors with this resource.

## projects.IAMPolicy

!> **Be careful!** You can accidentally lock yourself out of your project 

using this resource. Deleting a `projects.IAMPolicy` removes access
from anyone without organization-level access to the project. Proceed with caution.
It's not recommended to use `projects.IAMPolicy` with your provider project
to avoid locking yourself out, and it should generally only be used with projects
fully managed by this provider. If you do use this resource, it is recommended to **import** the policy before
applying the change.

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/editor",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = projects.NewIAMPolicy(ctx, "project", &projects.IAMPolicyArgs{
			Project:    pulumi.String("your-project-id"),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/compute.admin",
					Members: []string{
						"user:jane@example.com",
					},
					Condition: {
						Title:       "expires_after_2019_12_31",
						Description: pulumi.StringRef("Expiring at midnight of 2019-12-31"),
						Expression:  "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = projects.NewIAMPolicy(ctx, "project", &projects.IAMPolicyArgs{
			Project:    pulumi.String("your-project-id"),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMBinding

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMBinding(ctx, "project", &projects.IAMBindingArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/editor"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMBinding(ctx, "project", &projects.IAMBindingArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/container.admin"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
			Condition: &projects.IAMBindingConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMMember

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMMember(ctx, "project", &projects.IAMMemberArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/editor"),
			Member:  pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMMember(ctx, "project", &projects.IAMMemberArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/firebase.admin"),
			Member:  pulumi.String("user:jane@example.com"),
			Condition: &projects.IAMMemberConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMAuditConfig

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMAuditConfig(ctx, "project", &projects.IAMAuditConfigArgs{
			Project: pulumi.String("your-project-id"),
			Service: pulumi.String("allServices"),
			AuditLogConfigs: projects.IAMAuditConfigAuditLogConfigArray{
				&projects.IAMAuditConfigAuditLogConfigArgs{
					LogType: pulumi.String("ADMIN_READ"),
				},
				&projects.IAMAuditConfigAuditLogConfigArgs{
					LogType: pulumi.String("DATA_READ"),
					ExemptedMembers: pulumi.StringArray{
						pulumi.String("user:joebloggs@example.com"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMPolicy

!> **Be careful!** You can accidentally lock yourself out of your project 

using this resource. Deleting a `projects.IAMPolicy` removes access
from anyone without organization-level access to the project. Proceed with caution.
It's not recommended to use `projects.IAMPolicy` with your provider project
to avoid locking yourself out, and it should generally only be used with projects
fully managed by this provider. If you do use this resource, it is recommended to **import** the policy before
applying the change.

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/editor",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = projects.NewIAMPolicy(ctx, "project", &projects.IAMPolicyArgs{
			Project:    pulumi.String("your-project-id"),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/compute.admin",
					Members: []string{
						"user:jane@example.com",
					},
					Condition: {
						Title:       "expires_after_2019_12_31",
						Description: pulumi.StringRef("Expiring at midnight of 2019-12-31"),
						Expression:  "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = projects.NewIAMPolicy(ctx, "project", &projects.IAMPolicyArgs{
			Project:    pulumi.String("your-project-id"),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMBinding

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMBinding(ctx, "project", &projects.IAMBindingArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/editor"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMBinding(ctx, "project", &projects.IAMBindingArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/container.admin"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
			Condition: &projects.IAMBindingConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMMember

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMMember(ctx, "project", &projects.IAMMemberArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/editor"),
			Member:  pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMMember(ctx, "project", &projects.IAMMemberArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/firebase.admin"),
			Member:  pulumi.String("user:jane@example.com"),
			Condition: &projects.IAMMemberConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMAuditConfig

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMAuditConfig(ctx, "project", &projects.IAMAuditConfigArgs{
			Project: pulumi.String("your-project-id"),
			Service: pulumi.String("allServices"),
			AuditLogConfigs: projects.IAMAuditConfigAuditLogConfigArray{
				&projects.IAMAuditConfigAuditLogConfigArgs{
					LogType: pulumi.String("ADMIN_READ"),
				},
				&projects.IAMAuditConfigAuditLogConfigArgs{
					LogType: pulumi.String("DATA_READ"),
					ExemptedMembers: pulumi.StringArray{
						pulumi.String("user:joebloggs@example.com"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

### Importing Audit Configs

An audit config can be imported into a `google_project_iam_audit_config` resource using the resource's `project_id` and the `service`, e.g:

* `"{{project_id}} foo.googleapis.com"`

An `import` block (Terraform v1.5.0 and later) can be used to import audit configs:

tf

import { 

id = "{{project_id}} foo.googleapis.com"

to = google_project_iam_audit_config.default

}

The `pulumi import` command can also be used:

```sh $ pulumi import gcp:projects/iAMMember:IAMMember default "{{project_id}} foo.googleapis.com" ```

func GetIAMMember 

func GetIAMMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *IAMMemberState, opts ...pulumi.ResourceOption) (*IAMMember, error)

GetIAMMember gets an existing IAMMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewIAMMember 

func NewIAMMember(ctx *pulumi.Context,
	name string, args *IAMMemberArgs, opts ...pulumi.ResourceOption) (*IAMMember, error)

NewIAMMember registers a new resource with the given unique name, arguments, and options.

func (*IAMMember) ElementType 

func (*IAMMember) ElementType() reflect.Type

func (*IAMMember) ToIAMMemberOutput 

func (i *IAMMember) ToIAMMemberOutput() IAMMemberOutput

func (*IAMMember) ToIAMMemberOutputWithContext 

func (i *IAMMember) ToIAMMemberOutputWithContext(ctx context.Context) IAMMemberOutput

type IAMMemberArgs 

type IAMMemberArgs struct {
	// An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
	// Structure is documented below.
	Condition IAMMemberConditionPtrInput
	// Identities that will be granted the privilege in `role`. projects.IAMBinding expects `members` field while projects.IAMMember expects `member` field.
	// Each entry can have one of the following values:
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The project id of the target project. This is not
	// inferred from the provider.
	Project pulumi.StringInput
	// The role that should be applied. Only one
	// `projects.IAMBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringInput
}

The set of arguments for constructing a IAMMember resource.

func (IAMMemberArgs) ElementType 

func (IAMMemberArgs) ElementType() reflect.Type

type IAMMemberArray 

type IAMMemberArray []IAMMemberInput

func (IAMMemberArray) ElementType 

func (IAMMemberArray) ElementType() reflect.Type

func (IAMMemberArray) ToIAMMemberArrayOutput 

func (i IAMMemberArray) ToIAMMemberArrayOutput() IAMMemberArrayOutput

func (IAMMemberArray) ToIAMMemberArrayOutputWithContext 

func (i IAMMemberArray) ToIAMMemberArrayOutputWithContext(ctx context.Context) IAMMemberArrayOutput

type IAMMemberArrayInput 

type IAMMemberArrayInput interface {
	pulumi.Input

	ToIAMMemberArrayOutput() IAMMemberArrayOutput
	ToIAMMemberArrayOutputWithContext(context.Context) IAMMemberArrayOutput
}

IAMMemberArrayInput is an input type that accepts IAMMemberArray and IAMMemberArrayOutput values. You can construct a concrete instance of `IAMMemberArrayInput` via: 

IAMMemberArray{ IAMMemberArgs{...} }

type IAMMemberArrayOutput 

type IAMMemberArrayOutput struct{ *pulumi.OutputState }

func (IAMMemberArrayOutput) ElementType 

func (IAMMemberArrayOutput) ElementType() reflect.Type

func (IAMMemberArrayOutput) Index 

func (o IAMMemberArrayOutput) Index(i pulumi.IntInput) IAMMemberOutput

func (IAMMemberArrayOutput) ToIAMMemberArrayOutput 

func (o IAMMemberArrayOutput) ToIAMMemberArrayOutput() IAMMemberArrayOutput

func (IAMMemberArrayOutput) ToIAMMemberArrayOutputWithContext 

func (o IAMMemberArrayOutput) ToIAMMemberArrayOutputWithContext(ctx context.Context) IAMMemberArrayOutput

type IAMMemberCondition 

type IAMMemberCondition struct {
	// An optional description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	//
	// > **Warning:** This provider considers the `role` and condition contents (`title`+`description`+`expression`) as the
	// identifier for the binding. This means that if any part of the condition is changed out-of-band, the provider will
	// consider it to be an entirely different resource and will treat it as such.
	Description *string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression string `pulumi:"expression"`
	// A title for the expression, i.e. a short string describing its purpose.
	Title string `pulumi:"title"`
}

type IAMMemberConditionArgs 

type IAMMemberConditionArgs struct {
	// An optional description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	//
	// > **Warning:** This provider considers the `role` and condition contents (`title`+`description`+`expression`) as the
	// identifier for the binding. This means that if any part of the condition is changed out-of-band, the provider will
	// consider it to be an entirely different resource and will treat it as such.
	Description pulumi.StringPtrInput `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression pulumi.StringInput `pulumi:"expression"`
	// A title for the expression, i.e. a short string describing its purpose.
	Title pulumi.StringInput `pulumi:"title"`
}

func (IAMMemberConditionArgs) ElementType 

func (IAMMemberConditionArgs) ElementType() reflect.Type

func (IAMMemberConditionArgs) ToIAMMemberConditionOutput 

func (i IAMMemberConditionArgs) ToIAMMemberConditionOutput() IAMMemberConditionOutput

func (IAMMemberConditionArgs) ToIAMMemberConditionOutputWithContext 

func (i IAMMemberConditionArgs) ToIAMMemberConditionOutputWithContext(ctx context.Context) IAMMemberConditionOutput

func (IAMMemberConditionArgs) ToIAMMemberConditionPtrOutput 

func (i IAMMemberConditionArgs) ToIAMMemberConditionPtrOutput() IAMMemberConditionPtrOutput

func (IAMMemberConditionArgs) ToIAMMemberConditionPtrOutputWithContext 

func (i IAMMemberConditionArgs) ToIAMMemberConditionPtrOutputWithContext(ctx context.Context) IAMMemberConditionPtrOutput

type IAMMemberConditionInput 

type IAMMemberConditionInput interface {
	pulumi.Input

	ToIAMMemberConditionOutput() IAMMemberConditionOutput
	ToIAMMemberConditionOutputWithContext(context.Context) IAMMemberConditionOutput
}

IAMMemberConditionInput is an input type that accepts IAMMemberConditionArgs and IAMMemberConditionOutput values. You can construct a concrete instance of `IAMMemberConditionInput` via: 

IAMMemberConditionArgs{...}

type IAMMemberConditionOutput 

type IAMMemberConditionOutput struct{ *pulumi.OutputState }

func (IAMMemberConditionOutput) Description 

func (o IAMMemberConditionOutput) Description() pulumi.StringPtrOutput

An optional description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

> **Warning:** This provider considers the `role` and condition contents (`title`+`description`+`expression`) as the identifier for the binding. This means that if any part of the condition is changed out-of-band, the provider will consider it to be an entirely different resource and will treat it as such.

func (IAMMemberConditionOutput) ElementType 

func (IAMMemberConditionOutput) ElementType() reflect.Type

func (IAMMemberConditionOutput) Expression 

func (o IAMMemberConditionOutput) Expression() pulumi.StringOutput

Textual representation of an expression in Common Expression Language syntax.

func (IAMMemberConditionOutput) Title 

func (o IAMMemberConditionOutput) Title() pulumi.StringOutput

A title for the expression, i.e. a short string describing its purpose.

func (IAMMemberConditionOutput) ToIAMMemberConditionOutput 

func (o IAMMemberConditionOutput) ToIAMMemberConditionOutput() IAMMemberConditionOutput

func (IAMMemberConditionOutput) ToIAMMemberConditionOutputWithContext 

func (o IAMMemberConditionOutput) ToIAMMemberConditionOutputWithContext(ctx context.Context) IAMMemberConditionOutput

func (IAMMemberConditionOutput) ToIAMMemberConditionPtrOutput 

func (o IAMMemberConditionOutput) ToIAMMemberConditionPtrOutput() IAMMemberConditionPtrOutput

func (IAMMemberConditionOutput) ToIAMMemberConditionPtrOutputWithContext 

func (o IAMMemberConditionOutput) ToIAMMemberConditionPtrOutputWithContext(ctx context.Context) IAMMemberConditionPtrOutput

type IAMMemberConditionPtrInput 

type IAMMemberConditionPtrInput interface {
	pulumi.Input

	ToIAMMemberConditionPtrOutput() IAMMemberConditionPtrOutput
	ToIAMMemberConditionPtrOutputWithContext(context.Context) IAMMemberConditionPtrOutput
}

IAMMemberConditionPtrInput is an input type that accepts IAMMemberConditionArgs, IAMMemberConditionPtr and IAMMemberConditionPtrOutput values. You can construct a concrete instance of `IAMMemberConditionPtrInput` via: 

        IAMMemberConditionArgs{...}

or:

        nil

func IAMMemberConditionPtr 

func IAMMemberConditionPtr(v *IAMMemberConditionArgs) IAMMemberConditionPtrInput

type IAMMemberConditionPtrOutput 

type IAMMemberConditionPtrOutput struct{ *pulumi.OutputState }

func (IAMMemberConditionPtrOutput) Description 

func (o IAMMemberConditionPtrOutput) Description() pulumi.StringPtrOutput

An optional description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

> **Warning:** This provider considers the `role` and condition contents (`title`+`description`+`expression`) as the identifier for the binding. This means that if any part of the condition is changed out-of-band, the provider will consider it to be an entirely different resource and will treat it as such.

func (IAMMemberConditionPtrOutput) Elem 

func (o IAMMemberConditionPtrOutput) Elem() IAMMemberConditionOutput

func (IAMMemberConditionPtrOutput) ElementType 

func (IAMMemberConditionPtrOutput) ElementType() reflect.Type

func (IAMMemberConditionPtrOutput) Expression 

func (o IAMMemberConditionPtrOutput) Expression() pulumi.StringPtrOutput

Textual representation of an expression in Common Expression Language syntax.

func (IAMMemberConditionPtrOutput) Title 

func (o IAMMemberConditionPtrOutput) Title() pulumi.StringPtrOutput

A title for the expression, i.e. a short string describing its purpose.

func (IAMMemberConditionPtrOutput) ToIAMMemberConditionPtrOutput 

func (o IAMMemberConditionPtrOutput) ToIAMMemberConditionPtrOutput() IAMMemberConditionPtrOutput

func (IAMMemberConditionPtrOutput) ToIAMMemberConditionPtrOutputWithContext 

func (o IAMMemberConditionPtrOutput) ToIAMMemberConditionPtrOutputWithContext(ctx context.Context) IAMMemberConditionPtrOutput

type IAMMemberInput 

type IAMMemberInput interface {
	pulumi.Input

	ToIAMMemberOutput() IAMMemberOutput
	ToIAMMemberOutputWithContext(ctx context.Context) IAMMemberOutput
}

type IAMMemberMap 

type IAMMemberMap map[string]IAMMemberInput

func (IAMMemberMap) ElementType 

func (IAMMemberMap) ElementType() reflect.Type

func (IAMMemberMap) ToIAMMemberMapOutput 

func (i IAMMemberMap) ToIAMMemberMapOutput() IAMMemberMapOutput

func (IAMMemberMap) ToIAMMemberMapOutputWithContext 

func (i IAMMemberMap) ToIAMMemberMapOutputWithContext(ctx context.Context) IAMMemberMapOutput

type IAMMemberMapInput 

type IAMMemberMapInput interface {
	pulumi.Input

	ToIAMMemberMapOutput() IAMMemberMapOutput
	ToIAMMemberMapOutputWithContext(context.Context) IAMMemberMapOutput
}

IAMMemberMapInput is an input type that accepts IAMMemberMap and IAMMemberMapOutput values. You can construct a concrete instance of `IAMMemberMapInput` via: 

IAMMemberMap{ "key": IAMMemberArgs{...} }

type IAMMemberMapOutput 

type IAMMemberMapOutput struct{ *pulumi.OutputState }

func (IAMMemberMapOutput) ElementType 

func (IAMMemberMapOutput) ElementType() reflect.Type

func (IAMMemberMapOutput) MapIndex 

func (o IAMMemberMapOutput) MapIndex(k pulumi.StringInput) IAMMemberOutput

func (IAMMemberMapOutput) ToIAMMemberMapOutput 

func (o IAMMemberMapOutput) ToIAMMemberMapOutput() IAMMemberMapOutput

func (IAMMemberMapOutput) ToIAMMemberMapOutputWithContext 

func (o IAMMemberMapOutput) ToIAMMemberMapOutputWithContext(ctx context.Context) IAMMemberMapOutput

type IAMMemberOutput 

type IAMMemberOutput struct{ *pulumi.OutputState }

func (IAMMemberOutput) Condition 

func (o IAMMemberOutput) Condition() IAMMemberConditionPtrOutput

An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding. Structure is documented below.

func (IAMMemberOutput) ElementType 

func (IAMMemberOutput) ElementType() reflect.Type

func (IAMMemberOutput) Etag 

func (o IAMMemberOutput) Etag() pulumi.StringOutput

(Computed) The etag of the project's IAM policy.

func (IAMMemberOutput) Member 

func (o IAMMemberOutput) Member() pulumi.StringOutput

Identities that will be granted the privilege in `role`. projects.IAMBinding expects `members` field while projects.IAMMember expects `member` field. Each entry can have one of the following values: * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com. * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com. * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com. * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.

func (IAMMemberOutput) Project 

func (o IAMMemberOutput) Project() pulumi.StringOutput

The project id of the target project. This is not inferred from the provider.

func (IAMMemberOutput) Role 

func (o IAMMemberOutput) Role() pulumi.StringOutput

The role that should be applied. Only one `projects.IAMBinding` can be used per role. Note that custom roles must be of the format `[projects|organizations]/{parent-name}/roles/{role-name}`.

func (IAMMemberOutput) ToIAMMemberOutput 

func (o IAMMemberOutput) ToIAMMemberOutput() IAMMemberOutput

func (IAMMemberOutput) ToIAMMemberOutputWithContext 

func (o IAMMemberOutput) ToIAMMemberOutputWithContext(ctx context.Context) IAMMemberOutput

type IAMMemberState 

type IAMMemberState struct {
	// An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
	// Structure is documented below.
	Condition IAMMemberConditionPtrInput
	// (Computed) The etag of the project's IAM policy.
	Etag pulumi.StringPtrInput
	// Identities that will be granted the privilege in `role`. projects.IAMBinding expects `members` field while projects.IAMMember expects `member` field.
	// Each entry can have one of the following values:
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringPtrInput
	// The project id of the target project. This is not
	// inferred from the provider.
	Project pulumi.StringPtrInput
	// The role that should be applied. Only one
	// `projects.IAMBinding` can be used per role. Note that custom roles must be of the format
	// `[projects|organizations]/{parent-name}/roles/{role-name}`.
	Role pulumi.StringPtrInput
}

func (IAMMemberState) ElementType 

func (IAMMemberState) ElementType() reflect.Type

type IAMPolicy 

type IAMPolicy struct {
	pulumi.CustomResourceState

	// (Computed) The etag of the project's IAM policy.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// The `organizations.getIAMPolicy` data source that represents
	// the IAM policy that will be applied to the project. The policy will be
	// merged with any existing policy applied to the project.
	//
	// Changing this updates the policy.
	//
	// Deleting this removes all policies from the project, locking out users without
	// organization-level access.
	PolicyData pulumi.StringOutput `pulumi:"policyData"`
	// The project id of the target project. This is not
	// inferred from the provider.
	Project pulumi.StringOutput `pulumi:"project"`
}

Four different resources help you manage your IAM policy for a project. Each of these resources serves a different use case:

* `projects.IAMPolicy`: Authoritative. Sets the IAM policy for the project and replaces any existing policy already attached. * `projects.IAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the project are preserved. * `projects.IAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the project are preserved. * `projects.IAMAuditConfig`: Authoritative for a given service. Updates the IAM policy to enable audit logging for the given service.

> **Note:** `projects.IAMPolicy` **cannot** be used in conjunction with `projects.IAMBinding`, `projects.IAMMember`, or `projects.IAMAuditConfig` or they will fight over what your policy should be.

> **Note:** `projects.IAMBinding` resources **can be** used in conjunction with `projects.IAMMember` resources **only if** they do not grant privilege to the same role.

> **Note:** The underlying API method `projects.setIamPolicy` has a lot of constraints which are documented [here](https://cloud.google.com/resource-manager/reference/rest/v1/projects/setIamPolicy). In addition to these constraints, 

IAM Conditions cannot be used with Basic Roles such as Owner. Violating these constraints will result in the API returning 400 error code so please review these if you encounter errors with this resource.

## projects.IAMPolicy

!> **Be careful!** You can accidentally lock yourself out of your project 

using this resource. Deleting a `projects.IAMPolicy` removes access
from anyone without organization-level access to the project. Proceed with caution.
It's not recommended to use `projects.IAMPolicy` with your provider project
to avoid locking yourself out, and it should generally only be used with projects
fully managed by this provider. If you do use this resource, it is recommended to **import** the policy before
applying the change.

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/editor",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = projects.NewIAMPolicy(ctx, "project", &projects.IAMPolicyArgs{
			Project:    pulumi.String("your-project-id"),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/compute.admin",
					Members: []string{
						"user:jane@example.com",
					},
					Condition: {
						Title:       "expires_after_2019_12_31",
						Description: pulumi.StringRef("Expiring at midnight of 2019-12-31"),
						Expression:  "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = projects.NewIAMPolicy(ctx, "project", &projects.IAMPolicyArgs{
			Project:    pulumi.String("your-project-id"),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMBinding

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMBinding(ctx, "project", &projects.IAMBindingArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/editor"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMBinding(ctx, "project", &projects.IAMBindingArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/container.admin"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
			Condition: &projects.IAMBindingConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMMember

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMMember(ctx, "project", &projects.IAMMemberArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/editor"),
			Member:  pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMMember(ctx, "project", &projects.IAMMemberArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/firebase.admin"),
			Member:  pulumi.String("user:jane@example.com"),
			Condition: &projects.IAMMemberConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMAuditConfig

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMAuditConfig(ctx, "project", &projects.IAMAuditConfigArgs{
			Project: pulumi.String("your-project-id"),
			Service: pulumi.String("allServices"),
			AuditLogConfigs: projects.IAMAuditConfigAuditLogConfigArray{
				&projects.IAMAuditConfigAuditLogConfigArgs{
					LogType: pulumi.String("ADMIN_READ"),
				},
				&projects.IAMAuditConfigAuditLogConfigArgs{
					LogType: pulumi.String("DATA_READ"),
					ExemptedMembers: pulumi.StringArray{
						pulumi.String("user:joebloggs@example.com"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMPolicy

!> **Be careful!** You can accidentally lock yourself out of your project 

using this resource. Deleting a `projects.IAMPolicy` removes access
from anyone without organization-level access to the project. Proceed with caution.
It's not recommended to use `projects.IAMPolicy` with your provider project
to avoid locking yourself out, and it should generally only be used with projects
fully managed by this provider. If you do use this resource, it is recommended to **import** the policy before
applying the change.

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/editor",
					Members: []string{
						"user:jane@example.com",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = projects.NewIAMPolicy(ctx, "project", &projects.IAMPolicyArgs{
			Project:    pulumi.String("your-project-id"),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{
				{
					Role: "roles/compute.admin",
					Members: []string{
						"user:jane@example.com",
					},
					Condition: {
						Title:       "expires_after_2019_12_31",
						Description: pulumi.StringRef("Expiring at midnight of 2019-12-31"),
						Expression:  "request.time < timestamp(\"2020-01-01T00:00:00Z\")",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		_, err = projects.NewIAMPolicy(ctx, "project", &projects.IAMPolicyArgs{
			Project:    pulumi.String("your-project-id"),
			PolicyData: pulumi.String(admin.PolicyData),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMBinding

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMBinding(ctx, "project", &projects.IAMBindingArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/editor"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMBinding(ctx, "project", &projects.IAMBindingArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/container.admin"),
			Members: pulumi.StringArray{
				pulumi.String("user:jane@example.com"),
			},
			Condition: &projects.IAMBindingConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMMember

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMMember(ctx, "project", &projects.IAMMemberArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/editor"),
			Member:  pulumi.String("user:jane@example.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

With IAM Conditions:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMMember(ctx, "project", &projects.IAMMemberArgs{
			Project: pulumi.String("your-project-id"),
			Role:    pulumi.String("roles/firebase.admin"),
			Member:  pulumi.String("user:jane@example.com"),
			Condition: &projects.IAMMemberConditionArgs{
				Title:       pulumi.String("expires_after_2019_12_31"),
				Description: pulumi.String("Expiring at midnight of 2019-12-31"),
				Expression:  pulumi.String("request.time < timestamp(\"2020-01-01T00:00:00Z\")"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## projects.IAMAuditConfig

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewIAMAuditConfig(ctx, "project", &projects.IAMAuditConfigArgs{
			Project: pulumi.String("your-project-id"),
			Service: pulumi.String("allServices"),
			AuditLogConfigs: projects.IAMAuditConfigAuditLogConfigArray{
				&projects.IAMAuditConfigAuditLogConfigArgs{
					LogType: pulumi.String("ADMIN_READ"),
				},
				&projects.IAMAuditConfigAuditLogConfigArgs{
					LogType: pulumi.String("DATA_READ"),
					ExemptedMembers: pulumi.StringArray{
						pulumi.String("user:joebloggs@example.com"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

### Importing Audit Configs

An audit config can be imported into a `google_project_iam_audit_config` resource using the resource's `project_id` and the `service`, e.g:

* `"{{project_id}} foo.googleapis.com"`

An `import` block (Terraform v1.5.0 and later) can be used to import audit configs:

tf

import { 

id = "{{project_id}} foo.googleapis.com"

to = google_project_iam_audit_config.default

}

The `pulumi import` command can also be used:

```sh $ pulumi import gcp:projects/iAMPolicy:IAMPolicy default "{{project_id}} foo.googleapis.com" ```

func GetIAMPolicy 

func GetIAMPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *IAMPolicyState, opts ...pulumi.ResourceOption) (*IAMPolicy, error)

GetIAMPolicy gets an existing IAMPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewIAMPolicy 

func NewIAMPolicy(ctx *pulumi.Context,
	name string, args *IAMPolicyArgs, opts ...pulumi.ResourceOption) (*IAMPolicy, error)

NewIAMPolicy registers a new resource with the given unique name, arguments, and options.

func (*IAMPolicy) ElementType 

func (*IAMPolicy) ElementType() reflect.Type

func (*IAMPolicy) ToIAMPolicyOutput 

func (i *IAMPolicy) ToIAMPolicyOutput() IAMPolicyOutput

func (*IAMPolicy) ToIAMPolicyOutputWithContext 

func (i *IAMPolicy) ToIAMPolicyOutputWithContext(ctx context.Context) IAMPolicyOutput

type IAMPolicyArgs 

type IAMPolicyArgs struct {
	// The `organizations.getIAMPolicy` data source that represents
	// the IAM policy that will be applied to the project. The policy will be
	// merged with any existing policy applied to the project.
	//
	// Changing this updates the policy.
	//
	// Deleting this removes all policies from the project, locking out users without
	// organization-level access.
	PolicyData pulumi.StringInput
	// The project id of the target project. This is not
	// inferred from the provider.
	Project pulumi.StringInput
}

The set of arguments for constructing a IAMPolicy resource.

func (IAMPolicyArgs) ElementType 

func (IAMPolicyArgs) ElementType() reflect.Type

type IAMPolicyArray 

type IAMPolicyArray []IAMPolicyInput

func (IAMPolicyArray) ElementType 

func (IAMPolicyArray) ElementType() reflect.Type

func (IAMPolicyArray) ToIAMPolicyArrayOutput 

func (i IAMPolicyArray) ToIAMPolicyArrayOutput() IAMPolicyArrayOutput

func (IAMPolicyArray) ToIAMPolicyArrayOutputWithContext 

func (i IAMPolicyArray) ToIAMPolicyArrayOutputWithContext(ctx context.Context) IAMPolicyArrayOutput

type IAMPolicyArrayInput 

type IAMPolicyArrayInput interface {
	pulumi.Input

	ToIAMPolicyArrayOutput() IAMPolicyArrayOutput
	ToIAMPolicyArrayOutputWithContext(context.Context) IAMPolicyArrayOutput
}

IAMPolicyArrayInput is an input type that accepts IAMPolicyArray and IAMPolicyArrayOutput values. You can construct a concrete instance of `IAMPolicyArrayInput` via: 

IAMPolicyArray{ IAMPolicyArgs{...} }

type IAMPolicyArrayOutput 

type IAMPolicyArrayOutput struct{ *pulumi.OutputState }

func (IAMPolicyArrayOutput) ElementType 

func (IAMPolicyArrayOutput) ElementType() reflect.Type

func (IAMPolicyArrayOutput) Index 

func (o IAMPolicyArrayOutput) Index(i pulumi.IntInput) IAMPolicyOutput

func (IAMPolicyArrayOutput) ToIAMPolicyArrayOutput 

func (o IAMPolicyArrayOutput) ToIAMPolicyArrayOutput() IAMPolicyArrayOutput

func (IAMPolicyArrayOutput) ToIAMPolicyArrayOutputWithContext 

func (o IAMPolicyArrayOutput) ToIAMPolicyArrayOutputWithContext(ctx context.Context) IAMPolicyArrayOutput

type IAMPolicyInput 

type IAMPolicyInput interface {
	pulumi.Input

	ToIAMPolicyOutput() IAMPolicyOutput
	ToIAMPolicyOutputWithContext(ctx context.Context) IAMPolicyOutput
}

type IAMPolicyMap 

type IAMPolicyMap map[string]IAMPolicyInput

func (IAMPolicyMap) ElementType 

func (IAMPolicyMap) ElementType() reflect.Type

func (IAMPolicyMap) ToIAMPolicyMapOutput 

func (i IAMPolicyMap) ToIAMPolicyMapOutput() IAMPolicyMapOutput

func (IAMPolicyMap) ToIAMPolicyMapOutputWithContext 

func (i IAMPolicyMap) ToIAMPolicyMapOutputWithContext(ctx context.Context) IAMPolicyMapOutput

type IAMPolicyMapInput 

type IAMPolicyMapInput interface {
	pulumi.Input

	ToIAMPolicyMapOutput() IAMPolicyMapOutput
	ToIAMPolicyMapOutputWithContext(context.Context) IAMPolicyMapOutput
}

IAMPolicyMapInput is an input type that accepts IAMPolicyMap and IAMPolicyMapOutput values. You can construct a concrete instance of `IAMPolicyMapInput` via: 

IAMPolicyMap{ "key": IAMPolicyArgs{...} }

type IAMPolicyMapOutput 

type IAMPolicyMapOutput struct{ *pulumi.OutputState }

func (IAMPolicyMapOutput) ElementType 

func (IAMPolicyMapOutput) ElementType() reflect.Type

func (IAMPolicyMapOutput) MapIndex 

func (o IAMPolicyMapOutput) MapIndex(k pulumi.StringInput) IAMPolicyOutput

func (IAMPolicyMapOutput) ToIAMPolicyMapOutput 

func (o IAMPolicyMapOutput) ToIAMPolicyMapOutput() IAMPolicyMapOutput

func (IAMPolicyMapOutput) ToIAMPolicyMapOutputWithContext 

func (o IAMPolicyMapOutput) ToIAMPolicyMapOutputWithContext(ctx context.Context) IAMPolicyMapOutput

type IAMPolicyOutput 

type IAMPolicyOutput struct{ *pulumi.OutputState }

func (IAMPolicyOutput) ElementType 

func (IAMPolicyOutput) ElementType() reflect.Type

func (IAMPolicyOutput) Etag 

func (o IAMPolicyOutput) Etag() pulumi.StringOutput

(Computed) The etag of the project's IAM policy.

func (IAMPolicyOutput) PolicyData 

func (o IAMPolicyOutput) PolicyData() pulumi.StringOutput

The `organizations.getIAMPolicy` data source that represents the IAM policy that will be applied to the project. The policy will be merged with any existing policy applied to the project.

Changing this updates the policy.

Deleting this removes all policies from the project, locking out users without organization-level access.

func (IAMPolicyOutput) Project 

func (o IAMPolicyOutput) Project() pulumi.StringOutput

The project id of the target project. This is not inferred from the provider.

func (IAMPolicyOutput) ToIAMPolicyOutput 

func (o IAMPolicyOutput) ToIAMPolicyOutput() IAMPolicyOutput

func (IAMPolicyOutput) ToIAMPolicyOutputWithContext 

func (o IAMPolicyOutput) ToIAMPolicyOutputWithContext(ctx context.Context) IAMPolicyOutput

type IAMPolicyState 

type IAMPolicyState struct {
	// (Computed) The etag of the project's IAM policy.
	Etag pulumi.StringPtrInput
	// The `organizations.getIAMPolicy` data source that represents
	// the IAM policy that will be applied to the project. The policy will be
	// merged with any existing policy applied to the project.
	//
	// Changing this updates the policy.
	//
	// Deleting this removes all policies from the project, locking out users without
	// organization-level access.
	PolicyData pulumi.StringPtrInput
	// The project id of the target project. This is not
	// inferred from the provider.
	Project pulumi.StringPtrInput
}

func (IAMPolicyState) ElementType 

func (IAMPolicyState) ElementType() reflect.Type

type IamMemberRemove 

type IamMemberRemove struct {
	pulumi.CustomResourceState

	// The IAM principal that should not have the target role.
	// Each entry can have one of the following values:
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringOutput `pulumi:"member"`
	// The project id of the target project.
	Project pulumi.StringOutput `pulumi:"project"`
	// The target role that should be removed.
	Role pulumi.StringOutput `pulumi:"role"`
}

Ensures that a member:role pairing does not exist in a project's IAM policy.

On create, this resource will modify the policy to remove the `member` from the `role`. If the membership is ever re-added, the next refresh will clear this resource from state, proposing re-adding it to correct the membership. Import is not supported- this resource will acquire the current policy and modify it as part of creating the resource.

This resource will conflict with `projects.IAMPolicy` and `projects.IAMBinding` resources that share a role, as well as `projects.IAMMember` resources that target the same membership. When multiple resources conflict the final state is not guaranteed to include or omit the membership. Subsequent `pulumi up` calls will always show a diff until the configuration is corrected.

For more information see [the official documentation](https://cloud.google.com/iam/docs/granting-changing-revoking-access) and [API reference](https://cloud.google.com/resource-manager/reference/rest/v1/projects/setIamPolicy).

## Example Usage

```go package main

import ( 

"fmt"

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := organizations.LookupProject(ctx, &organizations.LookupProjectArgs{}, nil)
		if err != nil {
			return err
		}
		_, err = projects.NewIamMemberRemove(ctx, "foo", &projects.IamMemberRemoveArgs{
			Role:    pulumi.String("roles/editor"),
			Project: pulumi.Any(targetProjectGoogleProject.ProjectId),
			Member:  pulumi.Sprintf("serviceAccount:%v-compute@developer.gserviceaccount.com", targetProjectGoogleProject.Number),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

func GetIamMemberRemove 

func GetIamMemberRemove(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *IamMemberRemoveState, opts ...pulumi.ResourceOption) (*IamMemberRemove, error)

GetIamMemberRemove gets an existing IamMemberRemove resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewIamMemberRemove 

func NewIamMemberRemove(ctx *pulumi.Context,
	name string, args *IamMemberRemoveArgs, opts ...pulumi.ResourceOption) (*IamMemberRemove, error)

NewIamMemberRemove registers a new resource with the given unique name, arguments, and options.

func (*IamMemberRemove) ElementType 

func (*IamMemberRemove) ElementType() reflect.Type

func (*IamMemberRemove) ToIamMemberRemoveOutput 

func (i *IamMemberRemove) ToIamMemberRemoveOutput() IamMemberRemoveOutput

func (*IamMemberRemove) ToIamMemberRemoveOutputWithContext 

func (i *IamMemberRemove) ToIamMemberRemoveOutputWithContext(ctx context.Context) IamMemberRemoveOutput

type IamMemberRemoveArgs 

type IamMemberRemoveArgs struct {
	// The IAM principal that should not have the target role.
	// Each entry can have one of the following values:
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringInput
	// The project id of the target project.
	Project pulumi.StringInput
	// The target role that should be removed.
	Role pulumi.StringInput
}

The set of arguments for constructing a IamMemberRemove resource.

func (IamMemberRemoveArgs) ElementType 

func (IamMemberRemoveArgs) ElementType() reflect.Type

type IamMemberRemoveArray 

type IamMemberRemoveArray []IamMemberRemoveInput

func (IamMemberRemoveArray) ElementType 

func (IamMemberRemoveArray) ElementType() reflect.Type

func (IamMemberRemoveArray) ToIamMemberRemoveArrayOutput 

func (i IamMemberRemoveArray) ToIamMemberRemoveArrayOutput() IamMemberRemoveArrayOutput

func (IamMemberRemoveArray) ToIamMemberRemoveArrayOutputWithContext 

func (i IamMemberRemoveArray) ToIamMemberRemoveArrayOutputWithContext(ctx context.Context) IamMemberRemoveArrayOutput

type IamMemberRemoveArrayInput 

type IamMemberRemoveArrayInput interface {
	pulumi.Input

	ToIamMemberRemoveArrayOutput() IamMemberRemoveArrayOutput
	ToIamMemberRemoveArrayOutputWithContext(context.Context) IamMemberRemoveArrayOutput
}

IamMemberRemoveArrayInput is an input type that accepts IamMemberRemoveArray and IamMemberRemoveArrayOutput values. You can construct a concrete instance of `IamMemberRemoveArrayInput` via: 

IamMemberRemoveArray{ IamMemberRemoveArgs{...} }

type IamMemberRemoveArrayOutput 

type IamMemberRemoveArrayOutput struct{ *pulumi.OutputState }

func (IamMemberRemoveArrayOutput) ElementType 

func (IamMemberRemoveArrayOutput) ElementType() reflect.Type

func (IamMemberRemoveArrayOutput) Index 

func (o IamMemberRemoveArrayOutput) Index(i pulumi.IntInput) IamMemberRemoveOutput

func (IamMemberRemoveArrayOutput) ToIamMemberRemoveArrayOutput 

func (o IamMemberRemoveArrayOutput) ToIamMemberRemoveArrayOutput() IamMemberRemoveArrayOutput

func (IamMemberRemoveArrayOutput) ToIamMemberRemoveArrayOutputWithContext 

func (o IamMemberRemoveArrayOutput) ToIamMemberRemoveArrayOutputWithContext(ctx context.Context) IamMemberRemoveArrayOutput

type IamMemberRemoveInput 

type IamMemberRemoveInput interface {
	pulumi.Input

	ToIamMemberRemoveOutput() IamMemberRemoveOutput
	ToIamMemberRemoveOutputWithContext(ctx context.Context) IamMemberRemoveOutput
}

type IamMemberRemoveMap 

type IamMemberRemoveMap map[string]IamMemberRemoveInput

func (IamMemberRemoveMap) ElementType 

func (IamMemberRemoveMap) ElementType() reflect.Type

func (IamMemberRemoveMap) ToIamMemberRemoveMapOutput 

func (i IamMemberRemoveMap) ToIamMemberRemoveMapOutput() IamMemberRemoveMapOutput

func (IamMemberRemoveMap) ToIamMemberRemoveMapOutputWithContext 

func (i IamMemberRemoveMap) ToIamMemberRemoveMapOutputWithContext(ctx context.Context) IamMemberRemoveMapOutput

type IamMemberRemoveMapInput 

type IamMemberRemoveMapInput interface {
	pulumi.Input

	ToIamMemberRemoveMapOutput() IamMemberRemoveMapOutput
	ToIamMemberRemoveMapOutputWithContext(context.Context) IamMemberRemoveMapOutput
}

IamMemberRemoveMapInput is an input type that accepts IamMemberRemoveMap and IamMemberRemoveMapOutput values. You can construct a concrete instance of `IamMemberRemoveMapInput` via: 

IamMemberRemoveMap{ "key": IamMemberRemoveArgs{...} }

type IamMemberRemoveMapOutput 

type IamMemberRemoveMapOutput struct{ *pulumi.OutputState }

func (IamMemberRemoveMapOutput) ElementType 

func (IamMemberRemoveMapOutput) ElementType() reflect.Type

func (IamMemberRemoveMapOutput) MapIndex 

func (o IamMemberRemoveMapOutput) MapIndex(k pulumi.StringInput) IamMemberRemoveOutput

func (IamMemberRemoveMapOutput) ToIamMemberRemoveMapOutput 

func (o IamMemberRemoveMapOutput) ToIamMemberRemoveMapOutput() IamMemberRemoveMapOutput

func (IamMemberRemoveMapOutput) ToIamMemberRemoveMapOutputWithContext 

func (o IamMemberRemoveMapOutput) ToIamMemberRemoveMapOutputWithContext(ctx context.Context) IamMemberRemoveMapOutput

type IamMemberRemoveOutput 

type IamMemberRemoveOutput struct{ *pulumi.OutputState }

func (IamMemberRemoveOutput) ElementType 

func (IamMemberRemoveOutput) ElementType() reflect.Type

func (IamMemberRemoveOutput) Member 

func (o IamMemberRemoveOutput) Member() pulumi.StringOutput

The IAM principal that should not have the target role. Each entry can have one of the following values: * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com. * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com. * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com. * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.

func (IamMemberRemoveOutput) Project 

func (o IamMemberRemoveOutput) Project() pulumi.StringOutput

The project id of the target project.

func (IamMemberRemoveOutput) Role 

func (o IamMemberRemoveOutput) Role() pulumi.StringOutput

The target role that should be removed.

func (IamMemberRemoveOutput) ToIamMemberRemoveOutput 

func (o IamMemberRemoveOutput) ToIamMemberRemoveOutput() IamMemberRemoveOutput

func (IamMemberRemoveOutput) ToIamMemberRemoveOutputWithContext 

func (o IamMemberRemoveOutput) ToIamMemberRemoveOutputWithContext(ctx context.Context) IamMemberRemoveOutput

type IamMemberRemoveState 

type IamMemberRemoveState struct {
	// The IAM principal that should not have the target role.
	// Each entry can have one of the following values:
	// * **user:{emailid}**: An email address that represents a specific Google account. For example, alice@gmail.com or joe@example.com.
	// * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
	// * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
	// * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
	Member pulumi.StringPtrInput
	// The project id of the target project.
	Project pulumi.StringPtrInput
	// The target role that should be removed.
	Role pulumi.StringPtrInput
}

func (IamMemberRemoveState) ElementType 

func (IamMemberRemoveState) ElementType() reflect.Type

type LookupOrganizationPolicyArgs 

type LookupOrganizationPolicyArgs struct {
	// (Required) The name of the Constraint the Policy is configuring, for example, `serviceuser.services`. Check out the [complete list of available constraints](https://cloud.google.com/resource-manager/docs/organization-policy/understanding-constraints#available_constraints).
	Constraint string `pulumi:"constraint"`
	// The project ID.
	Project string `pulumi:"project"`
}

A collection of arguments for invoking getOrganizationPolicy.

type LookupOrganizationPolicyOutputArgs 

type LookupOrganizationPolicyOutputArgs struct {
	// (Required) The name of the Constraint the Policy is configuring, for example, `serviceuser.services`. Check out the [complete list of available constraints](https://cloud.google.com/resource-manager/docs/organization-policy/understanding-constraints#available_constraints).
	Constraint pulumi.StringInput `pulumi:"constraint"`
	// The project ID.
	Project pulumi.StringInput `pulumi:"project"`
}

A collection of arguments for invoking getOrganizationPolicy.

func (LookupOrganizationPolicyOutputArgs) ElementType 

func (LookupOrganizationPolicyOutputArgs) ElementType() reflect.Type

type LookupOrganizationPolicyResult 

type LookupOrganizationPolicyResult struct {
	BooleanPolicies []GetOrganizationPolicyBooleanPolicy `pulumi:"booleanPolicies"`
	Constraint      string                               `pulumi:"constraint"`
	Etag            string                               `pulumi:"etag"`
	// The provider-assigned unique ID for this managed resource.
	Id              string                               `pulumi:"id"`
	ListPolicies    []GetOrganizationPolicyListPolicy    `pulumi:"listPolicies"`
	Project         string                               `pulumi:"project"`
	RestorePolicies []GetOrganizationPolicyRestorePolicy `pulumi:"restorePolicies"`
	UpdateTime      string                               `pulumi:"updateTime"`
	Version         int                                  `pulumi:"version"`
}

A collection of values returned by getOrganizationPolicy.

func LookupOrganizationPolicy 

func LookupOrganizationPolicy(ctx *pulumi.Context, args *LookupOrganizationPolicyArgs, opts ...pulumi.InvokeOption) (*LookupOrganizationPolicyResult, error)

Allows management of Organization policies for a Google Project. For more information see [the official documentation](https://cloud.google.com/resource-manager/docs/organization-policy/overview)

## Example Usage

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		policy, err := projects.LookupOrganizationPolicy(ctx, &projects.LookupOrganizationPolicyArgs{
			Project:    "project-id",
			Constraint: "constraints/serviceuser.services",
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("version", policy.Version)
		return nil
	})
}

```

type LookupOrganizationPolicyResultOutput 

type LookupOrganizationPolicyResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getOrganizationPolicy.

func LookupOrganizationPolicyOutput 

func LookupOrganizationPolicyOutput(ctx *pulumi.Context, args LookupOrganizationPolicyOutputArgs, opts ...pulumi.InvokeOption) LookupOrganizationPolicyResultOutput

func (LookupOrganizationPolicyResultOutput) BooleanPolicies 

func (o LookupOrganizationPolicyResultOutput) BooleanPolicies() GetOrganizationPolicyBooleanPolicyArrayOutput

func (LookupOrganizationPolicyResultOutput) Constraint 

func (o LookupOrganizationPolicyResultOutput) Constraint() pulumi.StringOutput

func (LookupOrganizationPolicyResultOutput) ElementType 

func (LookupOrganizationPolicyResultOutput) ElementType() reflect.Type

func (LookupOrganizationPolicyResultOutput) Etag 

func (o LookupOrganizationPolicyResultOutput) Etag() pulumi.StringOutput

func (LookupOrganizationPolicyResultOutput) Id 

func (o LookupOrganizationPolicyResultOutput) Id() pulumi.StringOutput

The provider-assigned unique ID for this managed resource.

func (LookupOrganizationPolicyResultOutput) ListPolicies 

func (o LookupOrganizationPolicyResultOutput) ListPolicies() GetOrganizationPolicyListPolicyArrayOutput

func (LookupOrganizationPolicyResultOutput) Project 

func (o LookupOrganizationPolicyResultOutput) Project() pulumi.StringOutput

func (LookupOrganizationPolicyResultOutput) RestorePolicies 

func (o LookupOrganizationPolicyResultOutput) RestorePolicies() GetOrganizationPolicyRestorePolicyArrayOutput

func (LookupOrganizationPolicyResultOutput) ToLookupOrganizationPolicyResultOutput 

func (o LookupOrganizationPolicyResultOutput) ToLookupOrganizationPolicyResultOutput() LookupOrganizationPolicyResultOutput

func (LookupOrganizationPolicyResultOutput) ToLookupOrganizationPolicyResultOutputWithContext 

func (o LookupOrganizationPolicyResultOutput) ToLookupOrganizationPolicyResultOutputWithContext(ctx context.Context) LookupOrganizationPolicyResultOutput

func (LookupOrganizationPolicyResultOutput) UpdateTime 

func (o LookupOrganizationPolicyResultOutput) UpdateTime() pulumi.StringOutput

func (LookupOrganizationPolicyResultOutput) Version 

func (o LookupOrganizationPolicyResultOutput) Version() pulumi.IntOutput

type OrganizationPolicy 

type OrganizationPolicy struct {
	pulumi.CustomResourceState

	// A boolean policy is a constraint that is either enforced or not. Structure is documented below.
	BooleanPolicy OrganizationPolicyBooleanPolicyPtrOutput `pulumi:"booleanPolicy"`
	// The name of the Constraint the Policy is configuring, for example, `serviceuser.services`. Check out the [complete list of available constraints](https://cloud.google.com/resource-manager/docs/organization-policy/understanding-constraints#available_constraints).
	//
	// ***
	Constraint pulumi.StringOutput `pulumi:"constraint"`
	// (Computed) The etag of the organization policy. `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other.
	Etag pulumi.StringOutput `pulumi:"etag"`
	// A policy that can define specific values that are allowed or denied for the given constraint. It can also be used to allow or deny all values. Structure is documented below.
	ListPolicy OrganizationPolicyListPolicyPtrOutput `pulumi:"listPolicy"`
	// The project id of the project to set the policy for.
	Project pulumi.StringOutput `pulumi:"project"`
	// A restore policy is a constraint to restore the default policy. Structure is documented below.
	//
	// > **Note:** If none of [`booleanPolicy`, `listPolicy`, `restorePolicy`] are defined the policy for a given constraint will
	// effectively be unset. This is represented in the UI as the constraint being 'Inherited'.
	//
	// ***
	RestorePolicy OrganizationPolicyRestorePolicyPtrOutput `pulumi:"restorePolicy"`
	// (Computed) The timestamp in RFC3339 UTC "Zulu" format, accurate to nanoseconds, representing when the variable was last updated. Example: "2016-10-09T12:33:37.578138407Z".
	UpdateTime pulumi.StringOutput `pulumi:"updateTime"`
	// Version of the Policy. Default version is 0.
	Version pulumi.IntOutput `pulumi:"version"`
}

Allows management of Organization Policies for a Google Cloud Project.

> **Warning:** This resource has been superseded by `orgpolicy.Policy`. `orgpolicy.Policy` uses Organization Policy API V2 instead of Cloud Resource Manager API V1 and it supports additional features such as tags and conditions.

To get more information about Organization Policies, see:

* [API documentation](https://cloud.google.com/resource-manager/reference/rest/v1/projects/setOrgPolicy) * How-to Guides

## Example Usage

To set policy with a [boolean constraint](https://cloud.google.com/resource-manager/docs/organization-policy/quickstart-boolean-constraints):

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewOrganizationPolicy(ctx, "serial_port_policy", &projects.OrganizationPolicyArgs{
			Project:    pulumi.String("your-project-id"),
			Constraint: pulumi.String("compute.disableSerialPortAccess"),
			BooleanPolicy: &projects.OrganizationPolicyBooleanPolicyArgs{
				Enforced: pulumi.Bool(true),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

To set a policy with a [list constraint](https://cloud.google.com/resource-manager/docs/organization-policy/quickstart-list-constraints):

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewOrganizationPolicy(ctx, "services_policy", &projects.OrganizationPolicyArgs{
			Project:    pulumi.String("your-project-id"),
			Constraint: pulumi.String("serviceuser.services"),
			ListPolicy: &projects.OrganizationPolicyListPolicyArgs{
				Allow: &projects.OrganizationPolicyListPolicyAllowArgs{
					All: pulumi.Bool(true),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

Or to deny some services, use the following instead:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewOrganizationPolicy(ctx, "services_policy", &projects.OrganizationPolicyArgs{
			Project:    pulumi.String("your-project-id"),
			Constraint: pulumi.String("serviceuser.services"),
			ListPolicy: &projects.OrganizationPolicyListPolicyArgs{
				SuggestedValue: pulumi.String("compute.googleapis.com"),
				Deny: &projects.OrganizationPolicyListPolicyDenyArgs{
					Values: pulumi.StringArray{
						pulumi.String("cloudresourcemanager.googleapis.com"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

To restore the default project organization policy, use the following instead:

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewOrganizationPolicy(ctx, "services_policy", &projects.OrganizationPolicyArgs{
			Project:    pulumi.String("your-project-id"),
			Constraint: pulumi.String("serviceuser.services"),
			RestorePolicy: &projects.OrganizationPolicyRestorePolicyArgs{
				Default: pulumi.Bool(true),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Project organization policies can be imported using any of the follow formats:

* `projects/{{project_id}}:constraints/{{constraint}}`

* `{{project_id}}:constraints/{{constraint}}`

* `{{project_id}}:{{constraint}}`

When using the `pulumi import` command, project organization policies can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:projects/organizationPolicy:OrganizationPolicy default projects/{{project_id}}:constraints/{{constraint}} ```

```sh $ pulumi import gcp:projects/organizationPolicy:OrganizationPolicy default {{project_id}}:constraints/{{constraint}} ```

```sh $ pulumi import gcp:projects/organizationPolicy:OrganizationPolicy default {{project_id}}:{{constraint}} ```

func GetOrganizationPolicy 

func GetOrganizationPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *OrganizationPolicyState, opts ...pulumi.ResourceOption) (*OrganizationPolicy, error)

GetOrganizationPolicy gets an existing OrganizationPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewOrganizationPolicy 

func NewOrganizationPolicy(ctx *pulumi.Context,
	name string, args *OrganizationPolicyArgs, opts ...pulumi.ResourceOption) (*OrganizationPolicy, error)

NewOrganizationPolicy registers a new resource with the given unique name, arguments, and options.

func (*OrganizationPolicy) ElementType 

func (*OrganizationPolicy) ElementType() reflect.Type

func (*OrganizationPolicy) ToOrganizationPolicyOutput 

func (i *OrganizationPolicy) ToOrganizationPolicyOutput() OrganizationPolicyOutput

func (*OrganizationPolicy) ToOrganizationPolicyOutputWithContext 

func (i *OrganizationPolicy) ToOrganizationPolicyOutputWithContext(ctx context.Context) OrganizationPolicyOutput

type OrganizationPolicyArgs 

type OrganizationPolicyArgs struct {
	// A boolean policy is a constraint that is either enforced or not. Structure is documented below.
	BooleanPolicy OrganizationPolicyBooleanPolicyPtrInput
	// The name of the Constraint the Policy is configuring, for example, `serviceuser.services`. Check out the [complete list of available constraints](https://cloud.google.com/resource-manager/docs/organization-policy/understanding-constraints#available_constraints).
	//
	// ***
	Constraint pulumi.StringInput
	// A policy that can define specific values that are allowed or denied for the given constraint. It can also be used to allow or deny all values. Structure is documented below.
	ListPolicy OrganizationPolicyListPolicyPtrInput
	// The project id of the project to set the policy for.
	Project pulumi.StringInput
	// A restore policy is a constraint to restore the default policy. Structure is documented below.
	//
	// > **Note:** If none of [`booleanPolicy`, `listPolicy`, `restorePolicy`] are defined the policy for a given constraint will
	// effectively be unset. This is represented in the UI as the constraint being 'Inherited'.
	//
	// ***
	RestorePolicy OrganizationPolicyRestorePolicyPtrInput
	// Version of the Policy. Default version is 0.
	Version pulumi.IntPtrInput
}

The set of arguments for constructing a OrganizationPolicy resource.

func (OrganizationPolicyArgs) ElementType 

func (OrganizationPolicyArgs) ElementType() reflect.Type

type OrganizationPolicyArray 

type OrganizationPolicyArray []OrganizationPolicyInput

func (OrganizationPolicyArray) ElementType 

func (OrganizationPolicyArray) ElementType() reflect.Type

func (OrganizationPolicyArray) ToOrganizationPolicyArrayOutput 

func (i OrganizationPolicyArray) ToOrganizationPolicyArrayOutput() OrganizationPolicyArrayOutput

func (OrganizationPolicyArray) ToOrganizationPolicyArrayOutputWithContext 

func (i OrganizationPolicyArray) ToOrganizationPolicyArrayOutputWithContext(ctx context.Context) OrganizationPolicyArrayOutput

type OrganizationPolicyArrayInput 

type OrganizationPolicyArrayInput interface {
	pulumi.Input

	ToOrganizationPolicyArrayOutput() OrganizationPolicyArrayOutput
	ToOrganizationPolicyArrayOutputWithContext(context.Context) OrganizationPolicyArrayOutput
}

OrganizationPolicyArrayInput is an input type that accepts OrganizationPolicyArray and OrganizationPolicyArrayOutput values. You can construct a concrete instance of `OrganizationPolicyArrayInput` via: 

OrganizationPolicyArray{ OrganizationPolicyArgs{...} }

type OrganizationPolicyArrayOutput 

type OrganizationPolicyArrayOutput struct{ *pulumi.OutputState }

func (OrganizationPolicyArrayOutput) ElementType 

func (OrganizationPolicyArrayOutput) ElementType() reflect.Type

func (OrganizationPolicyArrayOutput) Index 

func (o OrganizationPolicyArrayOutput) Index(i pulumi.IntInput) OrganizationPolicyOutput

func (OrganizationPolicyArrayOutput) ToOrganizationPolicyArrayOutput 

func (o OrganizationPolicyArrayOutput) ToOrganizationPolicyArrayOutput() OrganizationPolicyArrayOutput

func (OrganizationPolicyArrayOutput) ToOrganizationPolicyArrayOutputWithContext 

func (o OrganizationPolicyArrayOutput) ToOrganizationPolicyArrayOutputWithContext(ctx context.Context) OrganizationPolicyArrayOutput

type OrganizationPolicyBooleanPolicy 

type OrganizationPolicyBooleanPolicy struct {
	// If true, then the Policy is enforced. If false, then any configuration is acceptable.
	Enforced bool `pulumi:"enforced"`
}

type OrganizationPolicyBooleanPolicyArgs 

type OrganizationPolicyBooleanPolicyArgs struct {
	// If true, then the Policy is enforced. If false, then any configuration is acceptable.
	Enforced pulumi.BoolInput `pulumi:"enforced"`
}

func (OrganizationPolicyBooleanPolicyArgs) ElementType 

func (OrganizationPolicyBooleanPolicyArgs) ElementType() reflect.Type

func (OrganizationPolicyBooleanPolicyArgs) ToOrganizationPolicyBooleanPolicyOutput 

func (i OrganizationPolicyBooleanPolicyArgs) ToOrganizationPolicyBooleanPolicyOutput() OrganizationPolicyBooleanPolicyOutput

func (OrganizationPolicyBooleanPolicyArgs) ToOrganizationPolicyBooleanPolicyOutputWithContext 

func (i OrganizationPolicyBooleanPolicyArgs) ToOrganizationPolicyBooleanPolicyOutputWithContext(ctx context.Context) OrganizationPolicyBooleanPolicyOutput

func (OrganizationPolicyBooleanPolicyArgs) ToOrganizationPolicyBooleanPolicyPtrOutput 

func (i OrganizationPolicyBooleanPolicyArgs) ToOrganizationPolicyBooleanPolicyPtrOutput() OrganizationPolicyBooleanPolicyPtrOutput

func (OrganizationPolicyBooleanPolicyArgs) ToOrganizationPolicyBooleanPolicyPtrOutputWithContext 

func (i OrganizationPolicyBooleanPolicyArgs) ToOrganizationPolicyBooleanPolicyPtrOutputWithContext(ctx context.Context) OrganizationPolicyBooleanPolicyPtrOutput

type OrganizationPolicyBooleanPolicyInput 

type OrganizationPolicyBooleanPolicyInput interface {
	pulumi.Input

	ToOrganizationPolicyBooleanPolicyOutput() OrganizationPolicyBooleanPolicyOutput
	ToOrganizationPolicyBooleanPolicyOutputWithContext(context.Context) OrganizationPolicyBooleanPolicyOutput
}

OrganizationPolicyBooleanPolicyInput is an input type that accepts OrganizationPolicyBooleanPolicyArgs and OrganizationPolicyBooleanPolicyOutput values. You can construct a concrete instance of `OrganizationPolicyBooleanPolicyInput` via: 

OrganizationPolicyBooleanPolicyArgs{...}

type OrganizationPolicyBooleanPolicyOutput 

type OrganizationPolicyBooleanPolicyOutput struct{ *pulumi.OutputState }

func (OrganizationPolicyBooleanPolicyOutput) ElementType 

func (OrganizationPolicyBooleanPolicyOutput) ElementType() reflect.Type

func (OrganizationPolicyBooleanPolicyOutput) Enforced 

func (o OrganizationPolicyBooleanPolicyOutput) Enforced() pulumi.BoolOutput

If true, then the Policy is enforced. If false, then any configuration is acceptable.

func (OrganizationPolicyBooleanPolicyOutput) ToOrganizationPolicyBooleanPolicyOutput 

func (o OrganizationPolicyBooleanPolicyOutput) ToOrganizationPolicyBooleanPolicyOutput() OrganizationPolicyBooleanPolicyOutput

func (OrganizationPolicyBooleanPolicyOutput) ToOrganizationPolicyBooleanPolicyOutputWithContext 

func (o OrganizationPolicyBooleanPolicyOutput) ToOrganizationPolicyBooleanPolicyOutputWithContext(ctx context.Context) OrganizationPolicyBooleanPolicyOutput

func (OrganizationPolicyBooleanPolicyOutput) ToOrganizationPolicyBooleanPolicyPtrOutput 

func (o OrganizationPolicyBooleanPolicyOutput) ToOrganizationPolicyBooleanPolicyPtrOutput() OrganizationPolicyBooleanPolicyPtrOutput

func (OrganizationPolicyBooleanPolicyOutput) ToOrganizationPolicyBooleanPolicyPtrOutputWithContext 

func (o OrganizationPolicyBooleanPolicyOutput) ToOrganizationPolicyBooleanPolicyPtrOutputWithContext(ctx context.Context) OrganizationPolicyBooleanPolicyPtrOutput

type OrganizationPolicyBooleanPolicyPtrInput 

type OrganizationPolicyBooleanPolicyPtrInput interface {
	pulumi.Input

	ToOrganizationPolicyBooleanPolicyPtrOutput() OrganizationPolicyBooleanPolicyPtrOutput
	ToOrganizationPolicyBooleanPolicyPtrOutputWithContext(context.Context) OrganizationPolicyBooleanPolicyPtrOutput
}

OrganizationPolicyBooleanPolicyPtrInput is an input type that accepts OrganizationPolicyBooleanPolicyArgs, OrganizationPolicyBooleanPolicyPtr and OrganizationPolicyBooleanPolicyPtrOutput values. You can construct a concrete instance of `OrganizationPolicyBooleanPolicyPtrInput` via: 

        OrganizationPolicyBooleanPolicyArgs{...}

or:

        nil

func OrganizationPolicyBooleanPolicyPtr 

func OrganizationPolicyBooleanPolicyPtr(v *OrganizationPolicyBooleanPolicyArgs) OrganizationPolicyBooleanPolicyPtrInput

type OrganizationPolicyBooleanPolicyPtrOutput 

type OrganizationPolicyBooleanPolicyPtrOutput struct{ *pulumi.OutputState }

func (OrganizationPolicyBooleanPolicyPtrOutput) Elem 

func (o OrganizationPolicyBooleanPolicyPtrOutput) Elem() OrganizationPolicyBooleanPolicyOutput

func (OrganizationPolicyBooleanPolicyPtrOutput) ElementType 

func (OrganizationPolicyBooleanPolicyPtrOutput) ElementType() reflect.Type

func (OrganizationPolicyBooleanPolicyPtrOutput) Enforced 

func (o OrganizationPolicyBooleanPolicyPtrOutput) Enforced() pulumi.BoolPtrOutput

If true, then the Policy is enforced. If false, then any configuration is acceptable.

func (OrganizationPolicyBooleanPolicyPtrOutput) ToOrganizationPolicyBooleanPolicyPtrOutput 

func (o OrganizationPolicyBooleanPolicyPtrOutput) ToOrganizationPolicyBooleanPolicyPtrOutput() OrganizationPolicyBooleanPolicyPtrOutput

func (OrganizationPolicyBooleanPolicyPtrOutput) ToOrganizationPolicyBooleanPolicyPtrOutputWithContext 

func (o OrganizationPolicyBooleanPolicyPtrOutput) ToOrganizationPolicyBooleanPolicyPtrOutputWithContext(ctx context.Context) OrganizationPolicyBooleanPolicyPtrOutput

type OrganizationPolicyInput 

type OrganizationPolicyInput interface {
	pulumi.Input

	ToOrganizationPolicyOutput() OrganizationPolicyOutput
	ToOrganizationPolicyOutputWithContext(ctx context.Context) OrganizationPolicyOutput
}

type OrganizationPolicyListPolicy 

type OrganizationPolicyListPolicy struct {
	// or `deny` - (Optional) One or the other must be set.
	Allow *OrganizationPolicyListPolicyAllow `pulumi:"allow"`
	// One or the other must be set.
	Deny *OrganizationPolicyListPolicyDeny `pulumi:"deny"`
	// If set to true, the values from the effective Policy of the parent resource
	// are inherited, meaning the values set in this Policy are added to the values inherited up the hierarchy.
	//
	// The `allow` or `deny` blocks support:
	InheritFromParent *bool `pulumi:"inheritFromParent"`
	// The Google Cloud Console will try to default to a configuration that matches the value specified in this field.
	SuggestedValue *string `pulumi:"suggestedValue"`
}

type OrganizationPolicyListPolicyAllow 

type OrganizationPolicyListPolicyAllow struct {
	// The policy allows or denies all values.
	All *bool `pulumi:"all"`
	// The policy can define specific values that are allowed or denied.
	Values []string `pulumi:"values"`
}

type OrganizationPolicyListPolicyAllowArgs 

type OrganizationPolicyListPolicyAllowArgs struct {
	// The policy allows or denies all values.
	All pulumi.BoolPtrInput `pulumi:"all"`
	// The policy can define specific values that are allowed or denied.
	Values pulumi.StringArrayInput `pulumi:"values"`
}

func (OrganizationPolicyListPolicyAllowArgs) ElementType 

func (OrganizationPolicyListPolicyAllowArgs) ElementType() reflect.Type

func (OrganizationPolicyListPolicyAllowArgs) ToOrganizationPolicyListPolicyAllowOutput 

func (i OrganizationPolicyListPolicyAllowArgs) ToOrganizationPolicyListPolicyAllowOutput() OrganizationPolicyListPolicyAllowOutput

func (OrganizationPolicyListPolicyAllowArgs) ToOrganizationPolicyListPolicyAllowOutputWithContext 

func (i OrganizationPolicyListPolicyAllowArgs) ToOrganizationPolicyListPolicyAllowOutputWithContext(ctx context.Context) OrganizationPolicyListPolicyAllowOutput

func (OrganizationPolicyListPolicyAllowArgs) ToOrganizationPolicyListPolicyAllowPtrOutput 

func (i OrganizationPolicyListPolicyAllowArgs) ToOrganizationPolicyListPolicyAllowPtrOutput() OrganizationPolicyListPolicyAllowPtrOutput

func (OrganizationPolicyListPolicyAllowArgs) ToOrganizationPolicyListPolicyAllowPtrOutputWithContext 

func (i OrganizationPolicyListPolicyAllowArgs) ToOrganizationPolicyListPolicyAllowPtrOutputWithContext(ctx context.Context) OrganizationPolicyListPolicyAllowPtrOutput

type OrganizationPolicyListPolicyAllowInput 

type OrganizationPolicyListPolicyAllowInput interface {
	pulumi.Input

	ToOrganizationPolicyListPolicyAllowOutput() OrganizationPolicyListPolicyAllowOutput
	ToOrganizationPolicyListPolicyAllowOutputWithContext(context.Context) OrganizationPolicyListPolicyAllowOutput
}

OrganizationPolicyListPolicyAllowInput is an input type that accepts OrganizationPolicyListPolicyAllowArgs and OrganizationPolicyListPolicyAllowOutput values. You can construct a concrete instance of `OrganizationPolicyListPolicyAllowInput` via: 

OrganizationPolicyListPolicyAllowArgs{...}

type OrganizationPolicyListPolicyAllowOutput 

type OrganizationPolicyListPolicyAllowOutput struct{ *pulumi.OutputState }

func (OrganizationPolicyListPolicyAllowOutput) All 

func (o OrganizationPolicyListPolicyAllowOutput) All() pulumi.BoolPtrOutput

The policy allows or denies all values.

func (OrganizationPolicyListPolicyAllowOutput) ElementType 

func (OrganizationPolicyListPolicyAllowOutput) ElementType() reflect.Type

func (OrganizationPolicyListPolicyAllowOutput) ToOrganizationPolicyListPolicyAllowOutput 

func (o OrganizationPolicyListPolicyAllowOutput) ToOrganizationPolicyListPolicyAllowOutput() OrganizationPolicyListPolicyAllowOutput

func (OrganizationPolicyListPolicyAllowOutput) ToOrganizationPolicyListPolicyAllowOutputWithContext 

func (o OrganizationPolicyListPolicyAllowOutput) ToOrganizationPolicyListPolicyAllowOutputWithContext(ctx context.Context) OrganizationPolicyListPolicyAllowOutput

func (OrganizationPolicyListPolicyAllowOutput) ToOrganizationPolicyListPolicyAllowPtrOutput 

func (o OrganizationPolicyListPolicyAllowOutput) ToOrganizationPolicyListPolicyAllowPtrOutput() OrganizationPolicyListPolicyAllowPtrOutput

func (OrganizationPolicyListPolicyAllowOutput) ToOrganizationPolicyListPolicyAllowPtrOutputWithContext 

func (o OrganizationPolicyListPolicyAllowOutput) ToOrganizationPolicyListPolicyAllowPtrOutputWithContext(ctx context.Context) OrganizationPolicyListPolicyAllowPtrOutput

func (OrganizationPolicyListPolicyAllowOutput) Values 

func (o OrganizationPolicyListPolicyAllowOutput) Values() pulumi.StringArrayOutput

The policy can define specific values that are allowed or denied.

type OrganizationPolicyListPolicyAllowPtrInput 

type OrganizationPolicyListPolicyAllowPtrInput interface {
	pulumi.Input

	ToOrganizationPolicyListPolicyAllowPtrOutput() OrganizationPolicyListPolicyAllowPtrOutput
	ToOrganizationPolicyListPolicyAllowPtrOutputWithContext(context.Context) OrganizationPolicyListPolicyAllowPtrOutput
}

OrganizationPolicyListPolicyAllowPtrInput is an input type that accepts OrganizationPolicyListPolicyAllowArgs, OrganizationPolicyListPolicyAllowPtr and OrganizationPolicyListPolicyAllowPtrOutput values. You can construct a concrete instance of `OrganizationPolicyListPolicyAllowPtrInput` via: 

        OrganizationPolicyListPolicyAllowArgs{...}

or:

        nil

func OrganizationPolicyListPolicyAllowPtr 

func OrganizationPolicyListPolicyAllowPtr(v *OrganizationPolicyListPolicyAllowArgs) OrganizationPolicyListPolicyAllowPtrInput

type OrganizationPolicyListPolicyAllowPtrOutput 

type OrganizationPolicyListPolicyAllowPtrOutput struct{ *pulumi.OutputState }

func (OrganizationPolicyListPolicyAllowPtrOutput) All 

func (o OrganizationPolicyListPolicyAllowPtrOutput) All() pulumi.BoolPtrOutput

The policy allows or denies all values.

func (OrganizationPolicyListPolicyAllowPtrOutput) Elem 

func (o OrganizationPolicyListPolicyAllowPtrOutput) Elem() OrganizationPolicyListPolicyAllowOutput

func (OrganizationPolicyListPolicyAllowPtrOutput) ElementType 

func (OrganizationPolicyListPolicyAllowPtrOutput) ElementType() reflect.Type

func (OrganizationPolicyListPolicyAllowPtrOutput) ToOrganizationPolicyListPolicyAllowPtrOutput 

func (o OrganizationPolicyListPolicyAllowPtrOutput) ToOrganizationPolicyListPolicyAllowPtrOutput() OrganizationPolicyListPolicyAllowPtrOutput

func (OrganizationPolicyListPolicyAllowPtrOutput) ToOrganizationPolicyListPolicyAllowPtrOutputWithContext 

func (o OrganizationPolicyListPolicyAllowPtrOutput) ToOrganizationPolicyListPolicyAllowPtrOutputWithContext(ctx context.Context) OrganizationPolicyListPolicyAllowPtrOutput

func (OrganizationPolicyListPolicyAllowPtrOutput) Values 

func (o OrganizationPolicyListPolicyAllowPtrOutput) Values() pulumi.StringArrayOutput

The policy can define specific values that are allowed or denied.

type OrganizationPolicyListPolicyArgs 

type OrganizationPolicyListPolicyArgs struct {
	// or `deny` - (Optional) One or the other must be set.
	Allow OrganizationPolicyListPolicyAllowPtrInput `pulumi:"allow"`
	// One or the other must be set.
	Deny OrganizationPolicyListPolicyDenyPtrInput `pulumi:"deny"`
	// If set to true, the values from the effective Policy of the parent resource
	// are inherited, meaning the values set in this Policy are added to the values inherited up the hierarchy.
	//
	// The `allow` or `deny` blocks support:
	InheritFromParent pulumi.BoolPtrInput `pulumi:"inheritFromParent"`
	// The Google Cloud Console will try to default to a configuration that matches the value specified in this field.
	SuggestedValue pulumi.StringPtrInput `pulumi:"suggestedValue"`
}

func (OrganizationPolicyListPolicyArgs) ElementType 

func (OrganizationPolicyListPolicyArgs) ElementType() reflect.Type

func (OrganizationPolicyListPolicyArgs) ToOrganizationPolicyListPolicyOutput 

func (i OrganizationPolicyListPolicyArgs) ToOrganizationPolicyListPolicyOutput() OrganizationPolicyListPolicyOutput

func (OrganizationPolicyListPolicyArgs) ToOrganizationPolicyListPolicyOutputWithContext 

func (i OrganizationPolicyListPolicyArgs) ToOrganizationPolicyListPolicyOutputWithContext(ctx context.Context) OrganizationPolicyListPolicyOutput

func (OrganizationPolicyListPolicyArgs) ToOrganizationPolicyListPolicyPtrOutput 

func (i OrganizationPolicyListPolicyArgs) ToOrganizationPolicyListPolicyPtrOutput() OrganizationPolicyListPolicyPtrOutput

func (OrganizationPolicyListPolicyArgs) ToOrganizationPolicyListPolicyPtrOutputWithContext 

func (i OrganizationPolicyListPolicyArgs) ToOrganizationPolicyListPolicyPtrOutputWithContext(ctx context.Context) OrganizationPolicyListPolicyPtrOutput

type OrganizationPolicyListPolicyDeny 

type OrganizationPolicyListPolicyDeny struct {
	// The policy allows or denies all values.
	All *bool `pulumi:"all"`
	// The policy can define specific values that are allowed or denied.
	Values []string `pulumi:"values"`
}

type OrganizationPolicyListPolicyDenyArgs 

type OrganizationPolicyListPolicyDenyArgs struct {
	// The policy allows or denies all values.
	All pulumi.BoolPtrInput `pulumi:"all"`
	// The policy can define specific values that are allowed or denied.
	Values pulumi.StringArrayInput `pulumi:"values"`
}

func (OrganizationPolicyListPolicyDenyArgs) ElementType 

func (OrganizationPolicyListPolicyDenyArgs) ElementType() reflect.Type

func (OrganizationPolicyListPolicyDenyArgs) ToOrganizationPolicyListPolicyDenyOutput 

func (i OrganizationPolicyListPolicyDenyArgs) ToOrganizationPolicyListPolicyDenyOutput() OrganizationPolicyListPolicyDenyOutput

func (OrganizationPolicyListPolicyDenyArgs) ToOrganizationPolicyListPolicyDenyOutputWithContext 

func (i OrganizationPolicyListPolicyDenyArgs) ToOrganizationPolicyListPolicyDenyOutputWithContext(ctx context.Context) OrganizationPolicyListPolicyDenyOutput

func (OrganizationPolicyListPolicyDenyArgs) ToOrganizationPolicyListPolicyDenyPtrOutput 

func (i OrganizationPolicyListPolicyDenyArgs) ToOrganizationPolicyListPolicyDenyPtrOutput() OrganizationPolicyListPolicyDenyPtrOutput

func (OrganizationPolicyListPolicyDenyArgs) ToOrganizationPolicyListPolicyDenyPtrOutputWithContext 

func (i OrganizationPolicyListPolicyDenyArgs) ToOrganizationPolicyListPolicyDenyPtrOutputWithContext(ctx context.Context) OrganizationPolicyListPolicyDenyPtrOutput

type OrganizationPolicyListPolicyDenyInput 

type OrganizationPolicyListPolicyDenyInput interface {
	pulumi.Input

	ToOrganizationPolicyListPolicyDenyOutput() OrganizationPolicyListPolicyDenyOutput
	ToOrganizationPolicyListPolicyDenyOutputWithContext(context.Context) OrganizationPolicyListPolicyDenyOutput
}

OrganizationPolicyListPolicyDenyInput is an input type that accepts OrganizationPolicyListPolicyDenyArgs and OrganizationPolicyListPolicyDenyOutput values. You can construct a concrete instance of `OrganizationPolicyListPolicyDenyInput` via: 

OrganizationPolicyListPolicyDenyArgs{...}

type OrganizationPolicyListPolicyDenyOutput 

type OrganizationPolicyListPolicyDenyOutput struct{ *pulumi.OutputState }

func (OrganizationPolicyListPolicyDenyOutput) All 

func (o OrganizationPolicyListPolicyDenyOutput) All() pulumi.BoolPtrOutput

The policy allows or denies all values.

func (OrganizationPolicyListPolicyDenyOutput) ElementType 

func (OrganizationPolicyListPolicyDenyOutput) ElementType() reflect.Type

func (OrganizationPolicyListPolicyDenyOutput) ToOrganizationPolicyListPolicyDenyOutput 

func (o OrganizationPolicyListPolicyDenyOutput) ToOrganizationPolicyListPolicyDenyOutput() OrganizationPolicyListPolicyDenyOutput

func (OrganizationPolicyListPolicyDenyOutput) ToOrganizationPolicyListPolicyDenyOutputWithContext 

func (o OrganizationPolicyListPolicyDenyOutput) ToOrganizationPolicyListPolicyDenyOutputWithContext(ctx context.Context) OrganizationPolicyListPolicyDenyOutput

func (OrganizationPolicyListPolicyDenyOutput) ToOrganizationPolicyListPolicyDenyPtrOutput 

func (o OrganizationPolicyListPolicyDenyOutput) ToOrganizationPolicyListPolicyDenyPtrOutput() OrganizationPolicyListPolicyDenyPtrOutput

func (OrganizationPolicyListPolicyDenyOutput) ToOrganizationPolicyListPolicyDenyPtrOutputWithContext 

func (o OrganizationPolicyListPolicyDenyOutput) ToOrganizationPolicyListPolicyDenyPtrOutputWithContext(ctx context.Context) OrganizationPolicyListPolicyDenyPtrOutput

func (OrganizationPolicyListPolicyDenyOutput) Values 

func (o OrganizationPolicyListPolicyDenyOutput) Values() pulumi.StringArrayOutput

The policy can define specific values that are allowed or denied.

type OrganizationPolicyListPolicyDenyPtrInput 

type OrganizationPolicyListPolicyDenyPtrInput interface {
	pulumi.Input

	ToOrganizationPolicyListPolicyDenyPtrOutput() OrganizationPolicyListPolicyDenyPtrOutput
	ToOrganizationPolicyListPolicyDenyPtrOutputWithContext(context.Context) OrganizationPolicyListPolicyDenyPtrOutput
}

OrganizationPolicyListPolicyDenyPtrInput is an input type that accepts OrganizationPolicyListPolicyDenyArgs, OrganizationPolicyListPolicyDenyPtr and OrganizationPolicyListPolicyDenyPtrOutput values. You can construct a concrete instance of `OrganizationPolicyListPolicyDenyPtrInput` via: 

        OrganizationPolicyListPolicyDenyArgs{...}

or:

        nil

func OrganizationPolicyListPolicyDenyPtr 

func OrganizationPolicyListPolicyDenyPtr(v *OrganizationPolicyListPolicyDenyArgs) OrganizationPolicyListPolicyDenyPtrInput

type OrganizationPolicyListPolicyDenyPtrOutput 

type OrganizationPolicyListPolicyDenyPtrOutput struct{ *pulumi.OutputState }

func (OrganizationPolicyListPolicyDenyPtrOutput) All 

func (o OrganizationPolicyListPolicyDenyPtrOutput) All() pulumi.BoolPtrOutput

The policy allows or denies all values.

func (OrganizationPolicyListPolicyDenyPtrOutput) Elem 

func (o OrganizationPolicyListPolicyDenyPtrOutput) Elem() OrganizationPolicyListPolicyDenyOutput

func (OrganizationPolicyListPolicyDenyPtrOutput) ElementType 

func (OrganizationPolicyListPolicyDenyPtrOutput) ElementType() reflect.Type

func (OrganizationPolicyListPolicyDenyPtrOutput) ToOrganizationPolicyListPolicyDenyPtrOutput 

func (o OrganizationPolicyListPolicyDenyPtrOutput) ToOrganizationPolicyListPolicyDenyPtrOutput() OrganizationPolicyListPolicyDenyPtrOutput

func (OrganizationPolicyListPolicyDenyPtrOutput) ToOrganizationPolicyListPolicyDenyPtrOutputWithContext 

func (o OrganizationPolicyListPolicyDenyPtrOutput) ToOrganizationPolicyListPolicyDenyPtrOutputWithContext(ctx context.Context) OrganizationPolicyListPolicyDenyPtrOutput

func (OrganizationPolicyListPolicyDenyPtrOutput) Values 

func (o OrganizationPolicyListPolicyDenyPtrOutput) Values() pulumi.StringArrayOutput

The policy can define specific values that are allowed or denied.

type OrganizationPolicyListPolicyInput 

type OrganizationPolicyListPolicyInput interface {
	pulumi.Input

	ToOrganizationPolicyListPolicyOutput() OrganizationPolicyListPolicyOutput
	ToOrganizationPolicyListPolicyOutputWithContext(context.Context) OrganizationPolicyListPolicyOutput
}

OrganizationPolicyListPolicyInput is an input type that accepts OrganizationPolicyListPolicyArgs and OrganizationPolicyListPolicyOutput values. You can construct a concrete instance of `OrganizationPolicyListPolicyInput` via: 

OrganizationPolicyListPolicyArgs{...}

type OrganizationPolicyListPolicyOutput 

type OrganizationPolicyListPolicyOutput struct{ *pulumi.OutputState }

func (OrganizationPolicyListPolicyOutput) Allow 

func (o OrganizationPolicyListPolicyOutput) Allow() OrganizationPolicyListPolicyAllowPtrOutput

or `deny` - (Optional) One or the other must be set.

func (OrganizationPolicyListPolicyOutput) Deny 

func (o OrganizationPolicyListPolicyOutput) Deny() OrganizationPolicyListPolicyDenyPtrOutput

One or the other must be set.

func (OrganizationPolicyListPolicyOutput) ElementType 

func (OrganizationPolicyListPolicyOutput) ElementType() reflect.Type

func (OrganizationPolicyListPolicyOutput) InheritFromParent 

func (o OrganizationPolicyListPolicyOutput) InheritFromParent() pulumi.BoolPtrOutput

If set to true, the values from the effective Policy of the parent resource are inherited, meaning the values set in this Policy are added to the values inherited up the hierarchy.

The `allow` or `deny` blocks support:

func (OrganizationPolicyListPolicyOutput) SuggestedValue 

func (o OrganizationPolicyListPolicyOutput) SuggestedValue() pulumi.StringPtrOutput

The Google Cloud Console will try to default to a configuration that matches the value specified in this field.

func (OrganizationPolicyListPolicyOutput) ToOrganizationPolicyListPolicyOutput 

func (o OrganizationPolicyListPolicyOutput) ToOrganizationPolicyListPolicyOutput() OrganizationPolicyListPolicyOutput

func (OrganizationPolicyListPolicyOutput) ToOrganizationPolicyListPolicyOutputWithContext 

func (o OrganizationPolicyListPolicyOutput) ToOrganizationPolicyListPolicyOutputWithContext(ctx context.Context) OrganizationPolicyListPolicyOutput

func (OrganizationPolicyListPolicyOutput) ToOrganizationPolicyListPolicyPtrOutput 

func (o OrganizationPolicyListPolicyOutput) ToOrganizationPolicyListPolicyPtrOutput() OrganizationPolicyListPolicyPtrOutput

func (OrganizationPolicyListPolicyOutput) ToOrganizationPolicyListPolicyPtrOutputWithContext 

func (o OrganizationPolicyListPolicyOutput) ToOrganizationPolicyListPolicyPtrOutputWithContext(ctx context.Context) OrganizationPolicyListPolicyPtrOutput

type OrganizationPolicyListPolicyPtrInput 

type OrganizationPolicyListPolicyPtrInput interface {
	pulumi.Input

	ToOrganizationPolicyListPolicyPtrOutput() OrganizationPolicyListPolicyPtrOutput
	ToOrganizationPolicyListPolicyPtrOutputWithContext(context.Context) OrganizationPolicyListPolicyPtrOutput
}

OrganizationPolicyListPolicyPtrInput is an input type that accepts OrganizationPolicyListPolicyArgs, OrganizationPolicyListPolicyPtr and OrganizationPolicyListPolicyPtrOutput values. You can construct a concrete instance of `OrganizationPolicyListPolicyPtrInput` via: 

        OrganizationPolicyListPolicyArgs{...}

or:

        nil

func OrganizationPolicyListPolicyPtr 

func OrganizationPolicyListPolicyPtr(v *OrganizationPolicyListPolicyArgs) OrganizationPolicyListPolicyPtrInput

type OrganizationPolicyListPolicyPtrOutput 

type OrganizationPolicyListPolicyPtrOutput struct{ *pulumi.OutputState }

func (OrganizationPolicyListPolicyPtrOutput) Allow 

func (o OrganizationPolicyListPolicyPtrOutput) Allow() OrganizationPolicyListPolicyAllowPtrOutput

or `deny` - (Optional) One or the other must be set.

func (OrganizationPolicyListPolicyPtrOutput) Deny 

func (o OrganizationPolicyListPolicyPtrOutput) Deny() OrganizationPolicyListPolicyDenyPtrOutput

One or the other must be set.

func (OrganizationPolicyListPolicyPtrOutput) Elem 

func (o OrganizationPolicyListPolicyPtrOutput) Elem() OrganizationPolicyListPolicyOutput

func (OrganizationPolicyListPolicyPtrOutput) ElementType 

func (OrganizationPolicyListPolicyPtrOutput) ElementType() reflect.Type

func (OrganizationPolicyListPolicyPtrOutput) InheritFromParent 

func (o OrganizationPolicyListPolicyPtrOutput) InheritFromParent() pulumi.BoolPtrOutput

If set to true, the values from the effective Policy of the parent resource are inherited, meaning the values set in this Policy are added to the values inherited up the hierarchy.

The `allow` or `deny` blocks support:

func (OrganizationPolicyListPolicyPtrOutput) SuggestedValue 

func (o OrganizationPolicyListPolicyPtrOutput) SuggestedValue() pulumi.StringPtrOutput

The Google Cloud Console will try to default to a configuration that matches the value specified in this field.

func (OrganizationPolicyListPolicyPtrOutput) ToOrganizationPolicyListPolicyPtrOutput 

func (o OrganizationPolicyListPolicyPtrOutput) ToOrganizationPolicyListPolicyPtrOutput() OrganizationPolicyListPolicyPtrOutput

func (OrganizationPolicyListPolicyPtrOutput) ToOrganizationPolicyListPolicyPtrOutputWithContext 

func (o OrganizationPolicyListPolicyPtrOutput) ToOrganizationPolicyListPolicyPtrOutputWithContext(ctx context.Context) OrganizationPolicyListPolicyPtrOutput

type OrganizationPolicyMap 

type OrganizationPolicyMap map[string]OrganizationPolicyInput

func (OrganizationPolicyMap) ElementType 

func (OrganizationPolicyMap) ElementType() reflect.Type

func (OrganizationPolicyMap) ToOrganizationPolicyMapOutput 

func (i OrganizationPolicyMap) ToOrganizationPolicyMapOutput() OrganizationPolicyMapOutput

func (OrganizationPolicyMap) ToOrganizationPolicyMapOutputWithContext 

func (i OrganizationPolicyMap) ToOrganizationPolicyMapOutputWithContext(ctx context.Context) OrganizationPolicyMapOutput

type OrganizationPolicyMapInput 

type OrganizationPolicyMapInput interface {
	pulumi.Input

	ToOrganizationPolicyMapOutput() OrganizationPolicyMapOutput
	ToOrganizationPolicyMapOutputWithContext(context.Context) OrganizationPolicyMapOutput
}

OrganizationPolicyMapInput is an input type that accepts OrganizationPolicyMap and OrganizationPolicyMapOutput values. You can construct a concrete instance of `OrganizationPolicyMapInput` via: 

OrganizationPolicyMap{ "key": OrganizationPolicyArgs{...} }

type OrganizationPolicyMapOutput 

type OrganizationPolicyMapOutput struct{ *pulumi.OutputState }

func (OrganizationPolicyMapOutput) ElementType 

func (OrganizationPolicyMapOutput) ElementType() reflect.Type

func (OrganizationPolicyMapOutput) MapIndex 

func (o OrganizationPolicyMapOutput) MapIndex(k pulumi.StringInput) OrganizationPolicyOutput

func (OrganizationPolicyMapOutput) ToOrganizationPolicyMapOutput 

func (o OrganizationPolicyMapOutput) ToOrganizationPolicyMapOutput() OrganizationPolicyMapOutput

func (OrganizationPolicyMapOutput) ToOrganizationPolicyMapOutputWithContext 

func (o OrganizationPolicyMapOutput) ToOrganizationPolicyMapOutputWithContext(ctx context.Context) OrganizationPolicyMapOutput

type OrganizationPolicyOutput 

type OrganizationPolicyOutput struct{ *pulumi.OutputState }

func (OrganizationPolicyOutput) BooleanPolicy 

func (o OrganizationPolicyOutput) BooleanPolicy() OrganizationPolicyBooleanPolicyPtrOutput

A boolean policy is a constraint that is either enforced or not. Structure is documented below.

func (OrganizationPolicyOutput) Constraint 

func (o OrganizationPolicyOutput) Constraint() pulumi.StringOutput

The name of the Constraint the Policy is configuring, for example, `serviceuser.services`. Check out the [complete list of available constraints](https://cloud.google.com/resource-manager/docs/organization-policy/understanding-constraints#available_constraints).

***

func (OrganizationPolicyOutput) ElementType 

func (OrganizationPolicyOutput) ElementType() reflect.Type

func (OrganizationPolicyOutput) Etag 

func (o OrganizationPolicyOutput) Etag() pulumi.StringOutput

(Computed) The etag of the organization policy. `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other.

func (OrganizationPolicyOutput) ListPolicy 

func (o OrganizationPolicyOutput) ListPolicy() OrganizationPolicyListPolicyPtrOutput

A policy that can define specific values that are allowed or denied for the given constraint. It can also be used to allow or deny all values. Structure is documented below.

func (OrganizationPolicyOutput) Project 

func (o OrganizationPolicyOutput) Project() pulumi.StringOutput

The project id of the project to set the policy for.

func (OrganizationPolicyOutput) RestorePolicy 

func (o OrganizationPolicyOutput) RestorePolicy() OrganizationPolicyRestorePolicyPtrOutput

A restore policy is a constraint to restore the default policy. Structure is documented below.

> **Note:** If none of [`booleanPolicy`, `listPolicy`, `restorePolicy`] are defined the policy for a given constraint will effectively be unset. This is represented in the UI as the constraint being 'Inherited'.

***

func (OrganizationPolicyOutput) ToOrganizationPolicyOutput 

func (o OrganizationPolicyOutput) ToOrganizationPolicyOutput() OrganizationPolicyOutput

func (OrganizationPolicyOutput) ToOrganizationPolicyOutputWithContext 

func (o OrganizationPolicyOutput) ToOrganizationPolicyOutputWithContext(ctx context.Context) OrganizationPolicyOutput

func (OrganizationPolicyOutput) UpdateTime 

func (o OrganizationPolicyOutput) UpdateTime() pulumi.StringOutput

(Computed) The timestamp in RFC3339 UTC "Zulu" format, accurate to nanoseconds, representing when the variable was last updated. Example: "2016-10-09T12:33:37.578138407Z".

func (OrganizationPolicyOutput) Version 

func (o OrganizationPolicyOutput) Version() pulumi.IntOutput

Version of the Policy. Default version is 0.

type OrganizationPolicyRestorePolicy 

type OrganizationPolicyRestorePolicy struct {
	// May only be set to true. If set, then the default Policy is restored.
	Default bool `pulumi:"default"`
}

type OrganizationPolicyRestorePolicyArgs 

type OrganizationPolicyRestorePolicyArgs struct {
	// May only be set to true. If set, then the default Policy is restored.
	Default pulumi.BoolInput `pulumi:"default"`
}

func (OrganizationPolicyRestorePolicyArgs) ElementType 

func (OrganizationPolicyRestorePolicyArgs) ElementType() reflect.Type

func (OrganizationPolicyRestorePolicyArgs) ToOrganizationPolicyRestorePolicyOutput 

func (i OrganizationPolicyRestorePolicyArgs) ToOrganizationPolicyRestorePolicyOutput() OrganizationPolicyRestorePolicyOutput

func (OrganizationPolicyRestorePolicyArgs) ToOrganizationPolicyRestorePolicyOutputWithContext 

func (i OrganizationPolicyRestorePolicyArgs) ToOrganizationPolicyRestorePolicyOutputWithContext(ctx context.Context) OrganizationPolicyRestorePolicyOutput

func (OrganizationPolicyRestorePolicyArgs) ToOrganizationPolicyRestorePolicyPtrOutput 

func (i OrganizationPolicyRestorePolicyArgs) ToOrganizationPolicyRestorePolicyPtrOutput() OrganizationPolicyRestorePolicyPtrOutput

func (OrganizationPolicyRestorePolicyArgs) ToOrganizationPolicyRestorePolicyPtrOutputWithContext 

func (i OrganizationPolicyRestorePolicyArgs) ToOrganizationPolicyRestorePolicyPtrOutputWithContext(ctx context.Context) OrganizationPolicyRestorePolicyPtrOutput

type OrganizationPolicyRestorePolicyInput 

type OrganizationPolicyRestorePolicyInput interface {
	pulumi.Input

	ToOrganizationPolicyRestorePolicyOutput() OrganizationPolicyRestorePolicyOutput
	ToOrganizationPolicyRestorePolicyOutputWithContext(context.Context) OrganizationPolicyRestorePolicyOutput
}

OrganizationPolicyRestorePolicyInput is an input type that accepts OrganizationPolicyRestorePolicyArgs and OrganizationPolicyRestorePolicyOutput values. You can construct a concrete instance of `OrganizationPolicyRestorePolicyInput` via: 

OrganizationPolicyRestorePolicyArgs{...}

type OrganizationPolicyRestorePolicyOutput 

type OrganizationPolicyRestorePolicyOutput struct{ *pulumi.OutputState }

func (OrganizationPolicyRestorePolicyOutput) Default 

func (o OrganizationPolicyRestorePolicyOutput) Default() pulumi.BoolOutput

May only be set to true. If set, then the default Policy is restored.

func (OrganizationPolicyRestorePolicyOutput) ElementType 

func (OrganizationPolicyRestorePolicyOutput) ElementType() reflect.Type

func (OrganizationPolicyRestorePolicyOutput) ToOrganizationPolicyRestorePolicyOutput 

func (o OrganizationPolicyRestorePolicyOutput) ToOrganizationPolicyRestorePolicyOutput() OrganizationPolicyRestorePolicyOutput

func (OrganizationPolicyRestorePolicyOutput) ToOrganizationPolicyRestorePolicyOutputWithContext 

func (o OrganizationPolicyRestorePolicyOutput) ToOrganizationPolicyRestorePolicyOutputWithContext(ctx context.Context) OrganizationPolicyRestorePolicyOutput

func (OrganizationPolicyRestorePolicyOutput) ToOrganizationPolicyRestorePolicyPtrOutput 

func (o OrganizationPolicyRestorePolicyOutput) ToOrganizationPolicyRestorePolicyPtrOutput() OrganizationPolicyRestorePolicyPtrOutput

func (OrganizationPolicyRestorePolicyOutput) ToOrganizationPolicyRestorePolicyPtrOutputWithContext 

func (o OrganizationPolicyRestorePolicyOutput) ToOrganizationPolicyRestorePolicyPtrOutputWithContext(ctx context.Context) OrganizationPolicyRestorePolicyPtrOutput

type OrganizationPolicyRestorePolicyPtrInput 

type OrganizationPolicyRestorePolicyPtrInput interface {
	pulumi.Input

	ToOrganizationPolicyRestorePolicyPtrOutput() OrganizationPolicyRestorePolicyPtrOutput
	ToOrganizationPolicyRestorePolicyPtrOutputWithContext(context.Context) OrganizationPolicyRestorePolicyPtrOutput
}

OrganizationPolicyRestorePolicyPtrInput is an input type that accepts OrganizationPolicyRestorePolicyArgs, OrganizationPolicyRestorePolicyPtr and OrganizationPolicyRestorePolicyPtrOutput values. You can construct a concrete instance of `OrganizationPolicyRestorePolicyPtrInput` via: 

        OrganizationPolicyRestorePolicyArgs{...}

or:

        nil

func OrganizationPolicyRestorePolicyPtr 

func OrganizationPolicyRestorePolicyPtr(v *OrganizationPolicyRestorePolicyArgs) OrganizationPolicyRestorePolicyPtrInput

type OrganizationPolicyRestorePolicyPtrOutput 

type OrganizationPolicyRestorePolicyPtrOutput struct{ *pulumi.OutputState }

func (OrganizationPolicyRestorePolicyPtrOutput) Default 

func (o OrganizationPolicyRestorePolicyPtrOutput) Default() pulumi.BoolPtrOutput

May only be set to true. If set, then the default Policy is restored.

func (OrganizationPolicyRestorePolicyPtrOutput) Elem 

func (o OrganizationPolicyRestorePolicyPtrOutput) Elem() OrganizationPolicyRestorePolicyOutput

func (OrganizationPolicyRestorePolicyPtrOutput) ElementType 

func (OrganizationPolicyRestorePolicyPtrOutput) ElementType() reflect.Type

func (OrganizationPolicyRestorePolicyPtrOutput) ToOrganizationPolicyRestorePolicyPtrOutput 

func (o OrganizationPolicyRestorePolicyPtrOutput) ToOrganizationPolicyRestorePolicyPtrOutput() OrganizationPolicyRestorePolicyPtrOutput

func (OrganizationPolicyRestorePolicyPtrOutput) ToOrganizationPolicyRestorePolicyPtrOutputWithContext 

func (o OrganizationPolicyRestorePolicyPtrOutput) ToOrganizationPolicyRestorePolicyPtrOutputWithContext(ctx context.Context) OrganizationPolicyRestorePolicyPtrOutput

type OrganizationPolicyState 

type OrganizationPolicyState struct {
	// A boolean policy is a constraint that is either enforced or not. Structure is documented below.
	BooleanPolicy OrganizationPolicyBooleanPolicyPtrInput
	// The name of the Constraint the Policy is configuring, for example, `serviceuser.services`. Check out the [complete list of available constraints](https://cloud.google.com/resource-manager/docs/organization-policy/understanding-constraints#available_constraints).
	//
	// ***
	Constraint pulumi.StringPtrInput
	// (Computed) The etag of the organization policy. `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other.
	Etag pulumi.StringPtrInput
	// A policy that can define specific values that are allowed or denied for the given constraint. It can also be used to allow or deny all values. Structure is documented below.
	ListPolicy OrganizationPolicyListPolicyPtrInput
	// The project id of the project to set the policy for.
	Project pulumi.StringPtrInput
	// A restore policy is a constraint to restore the default policy. Structure is documented below.
	//
	// > **Note:** If none of [`booleanPolicy`, `listPolicy`, `restorePolicy`] are defined the policy for a given constraint will
	// effectively be unset. This is represented in the UI as the constraint being 'Inherited'.
	//
	// ***
	RestorePolicy OrganizationPolicyRestorePolicyPtrInput
	// (Computed) The timestamp in RFC3339 UTC "Zulu" format, accurate to nanoseconds, representing when the variable was last updated. Example: "2016-10-09T12:33:37.578138407Z".
	UpdateTime pulumi.StringPtrInput
	// Version of the Policy. Default version is 0.
	Version pulumi.IntPtrInput
}

func (OrganizationPolicyState) ElementType 

func (OrganizationPolicyState) ElementType() reflect.Type

type Service 

type Service struct {
	pulumi.CustomResourceState

	// Beta
	// If `true`, the usage of the service to be disabled will be checked and an error
	// will be returned if the service to be disabled has usage in last 30 days.
	// Defaults to `false`.
	CheckIfServiceHasUsageOnDestroy pulumi.BoolPtrOutput `pulumi:"checkIfServiceHasUsageOnDestroy"`
	// If `true`, services that are enabled
	// and which depend on this service should also be disabled when this service is
	// destroyed. If `false` or unset, an error will be generated if any enabled
	// services depend on this service when destroying it.
	DisableDependentServices pulumi.BoolPtrOutput `pulumi:"disableDependentServices"`
	DisableOnDestroy         pulumi.BoolPtrOutput `pulumi:"disableOnDestroy"`
	// The project ID. If not provided, the provider project
	// is used.
	Project pulumi.StringOutput `pulumi:"project"`
	// The service to enable.
	Service pulumi.StringOutput `pulumi:"service"`
}

## Example Usage

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := projects.NewService(ctx, "project", &projects.ServiceArgs{
			Project:          pulumi.String("your-project-id"),
			Service:          pulumi.String("iam.googleapis.com"),
			DisableOnDestroy: pulumi.Bool(false),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Project services can be imported using the `project_id` and `service`, e.g.

* `{{project_id}}/{{service}}`

When using the `pulumi import` command, project services can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:projects/service:Service default {{project_id}}/{{service}} ```

Note that unlike other resources that fail if they already exist,

`pulumi up` can be successfully used to verify already enabled services.

This means that when importing existing resources into Terraform, you can either

import the `google_project_service` resources or treat them as new

infrastructure and run `pulumi up` to add them to state.

func GetService 

func GetService(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ServiceState, opts ...pulumi.ResourceOption) (*Service, error)

GetService gets an existing Service resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewService 

func NewService(ctx *pulumi.Context,
	name string, args *ServiceArgs, opts ...pulumi.ResourceOption) (*Service, error)

NewService registers a new resource with the given unique name, arguments, and options.

func (*Service) ElementType 

func (*Service) ElementType() reflect.Type

func (*Service) ToServiceOutput 

func (i *Service) ToServiceOutput() ServiceOutput

func (*Service) ToServiceOutputWithContext 

func (i *Service) ToServiceOutputWithContext(ctx context.Context) ServiceOutput

type ServiceArgs 

type ServiceArgs struct {
	// Beta
	// If `true`, the usage of the service to be disabled will be checked and an error
	// will be returned if the service to be disabled has usage in last 30 days.
	// Defaults to `false`.
	CheckIfServiceHasUsageOnDestroy pulumi.BoolPtrInput
	// If `true`, services that are enabled
	// and which depend on this service should also be disabled when this service is
	// destroyed. If `false` or unset, an error will be generated if any enabled
	// services depend on this service when destroying it.
	DisableDependentServices pulumi.BoolPtrInput
	DisableOnDestroy         pulumi.BoolPtrInput
	// The project ID. If not provided, the provider project
	// is used.
	Project pulumi.StringPtrInput
	// The service to enable.
	Service pulumi.StringInput
}

The set of arguments for constructing a Service resource.

func (ServiceArgs) ElementType 

func (ServiceArgs) ElementType() reflect.Type

type ServiceArray 

type ServiceArray []ServiceInput

func (ServiceArray) ElementType 

func (ServiceArray) ElementType() reflect.Type

func (ServiceArray) ToServiceArrayOutput 

func (i ServiceArray) ToServiceArrayOutput() ServiceArrayOutput

func (ServiceArray) ToServiceArrayOutputWithContext 

func (i ServiceArray) ToServiceArrayOutputWithContext(ctx context.Context) ServiceArrayOutput

type ServiceArrayInput 

type ServiceArrayInput interface {
	pulumi.Input

	ToServiceArrayOutput() ServiceArrayOutput
	ToServiceArrayOutputWithContext(context.Context) ServiceArrayOutput
}

ServiceArrayInput is an input type that accepts ServiceArray and ServiceArrayOutput values. You can construct a concrete instance of `ServiceArrayInput` via: 

ServiceArray{ ServiceArgs{...} }

type ServiceArrayOutput 

type ServiceArrayOutput struct{ *pulumi.OutputState }

func (ServiceArrayOutput) ElementType 

func (ServiceArrayOutput) ElementType() reflect.Type

func (ServiceArrayOutput) Index 

func (o ServiceArrayOutput) Index(i pulumi.IntInput) ServiceOutput

func (ServiceArrayOutput) ToServiceArrayOutput 

func (o ServiceArrayOutput) ToServiceArrayOutput() ServiceArrayOutput

func (ServiceArrayOutput) ToServiceArrayOutputWithContext 

func (o ServiceArrayOutput) ToServiceArrayOutputWithContext(ctx context.Context) ServiceArrayOutput

type ServiceIdentity 

type ServiceIdentity struct {
	pulumi.CustomResourceState

	// The email address of the Google managed service account.
	Email pulumi.StringOutput `pulumi:"email"`
	// The Identity of the Google managed service account in the form 'serviceAccount:{email}'. This value is often used to refer to the service account in order to grant IAM permissions.
	Member pulumi.StringOutput `pulumi:"member"`
	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project pulumi.StringOutput `pulumi:"project"`
	// The service to generate identity for.
	//
	// ***
	Service pulumi.StringOutput `pulumi:"service"`
}

Generate service identity for a service.

> **Note:** Once created, this resource cannot be updated or destroyed. These actions are a no-op.

> **Note:** This resource can be used to retrieve the emails of the [Google-managed service accounts](https://cloud.google.com/iam/docs/service-agents) of the APIs that Google has configured with a Service Identity. You can run `gcloud beta services identity create --service SERVICE_NAME.googleapis.com` to verify if an API supports this.

To get more information about Service Identity, see:

* [API documentation](https://cloud.google.com/service-usage/docs/reference/rest/v1beta1/services/generateServiceIdentity)

## Example Usage

### Service Identity Basic

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		project, err := organizations.LookupProject(ctx, &organizations.LookupProjectArgs{}, nil)
		if err != nil {
			return err
		}
		hcSa, err := projects.NewServiceIdentity(ctx, "hc_sa", &projects.ServiceIdentityArgs{
			Project: pulumi.String(project.ProjectId),
			Service: pulumi.String("healthcare.googleapis.com"),
		})
		if err != nil {
			return err
		}
		_, err = projects.NewIAMMember(ctx, "hc_sa_bq_jobuser", &projects.IAMMemberArgs{
			Project: pulumi.String(project.ProjectId),
			Role:    pulumi.String("roles/bigquery.jobUser"),
			Member:  hcSa.Member,
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

This resource does not support import.

func GetServiceIdentity 

func GetServiceIdentity(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ServiceIdentityState, opts ...pulumi.ResourceOption) (*ServiceIdentity, error)

GetServiceIdentity gets an existing ServiceIdentity resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewServiceIdentity 

func NewServiceIdentity(ctx *pulumi.Context,
	name string, args *ServiceIdentityArgs, opts ...pulumi.ResourceOption) (*ServiceIdentity, error)

NewServiceIdentity registers a new resource with the given unique name, arguments, and options.

func (*ServiceIdentity) ElementType 

func (*ServiceIdentity) ElementType() reflect.Type

func (*ServiceIdentity) ToServiceIdentityOutput 

func (i *ServiceIdentity) ToServiceIdentityOutput() ServiceIdentityOutput

func (*ServiceIdentity) ToServiceIdentityOutputWithContext 

func (i *ServiceIdentity) ToServiceIdentityOutputWithContext(ctx context.Context) ServiceIdentityOutput

type ServiceIdentityArgs 

type ServiceIdentityArgs struct {
	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project pulumi.StringPtrInput
	// The service to generate identity for.
	//
	// ***
	Service pulumi.StringInput
}

The set of arguments for constructing a ServiceIdentity resource.

func (ServiceIdentityArgs) ElementType 

func (ServiceIdentityArgs) ElementType() reflect.Type

type ServiceIdentityArray 

type ServiceIdentityArray []ServiceIdentityInput

func (ServiceIdentityArray) ElementType 

func (ServiceIdentityArray) ElementType() reflect.Type

func (ServiceIdentityArray) ToServiceIdentityArrayOutput 

func (i ServiceIdentityArray) ToServiceIdentityArrayOutput() ServiceIdentityArrayOutput

func (ServiceIdentityArray) ToServiceIdentityArrayOutputWithContext 

func (i ServiceIdentityArray) ToServiceIdentityArrayOutputWithContext(ctx context.Context) ServiceIdentityArrayOutput

type ServiceIdentityArrayInput 

type ServiceIdentityArrayInput interface {
	pulumi.Input

	ToServiceIdentityArrayOutput() ServiceIdentityArrayOutput
	ToServiceIdentityArrayOutputWithContext(context.Context) ServiceIdentityArrayOutput
}

ServiceIdentityArrayInput is an input type that accepts ServiceIdentityArray and ServiceIdentityArrayOutput values. You can construct a concrete instance of `ServiceIdentityArrayInput` via: 

ServiceIdentityArray{ ServiceIdentityArgs{...} }

type ServiceIdentityArrayOutput 

type ServiceIdentityArrayOutput struct{ *pulumi.OutputState }

func (ServiceIdentityArrayOutput) ElementType 

func (ServiceIdentityArrayOutput) ElementType() reflect.Type

func (ServiceIdentityArrayOutput) Index 

func (o ServiceIdentityArrayOutput) Index(i pulumi.IntInput) ServiceIdentityOutput

func (ServiceIdentityArrayOutput) ToServiceIdentityArrayOutput 

func (o ServiceIdentityArrayOutput) ToServiceIdentityArrayOutput() ServiceIdentityArrayOutput

func (ServiceIdentityArrayOutput) ToServiceIdentityArrayOutputWithContext 

func (o ServiceIdentityArrayOutput) ToServiceIdentityArrayOutputWithContext(ctx context.Context) ServiceIdentityArrayOutput

type ServiceIdentityInput 

type ServiceIdentityInput interface {
	pulumi.Input

	ToServiceIdentityOutput() ServiceIdentityOutput
	ToServiceIdentityOutputWithContext(ctx context.Context) ServiceIdentityOutput
}

type ServiceIdentityMap 

type ServiceIdentityMap map[string]ServiceIdentityInput

func (ServiceIdentityMap) ElementType 

func (ServiceIdentityMap) ElementType() reflect.Type

func (ServiceIdentityMap) ToServiceIdentityMapOutput 

func (i ServiceIdentityMap) ToServiceIdentityMapOutput() ServiceIdentityMapOutput

func (ServiceIdentityMap) ToServiceIdentityMapOutputWithContext 

func (i ServiceIdentityMap) ToServiceIdentityMapOutputWithContext(ctx context.Context) ServiceIdentityMapOutput

type ServiceIdentityMapInput 

type ServiceIdentityMapInput interface {
	pulumi.Input

	ToServiceIdentityMapOutput() ServiceIdentityMapOutput
	ToServiceIdentityMapOutputWithContext(context.Context) ServiceIdentityMapOutput
}

ServiceIdentityMapInput is an input type that accepts ServiceIdentityMap and ServiceIdentityMapOutput values. You can construct a concrete instance of `ServiceIdentityMapInput` via: 

ServiceIdentityMap{ "key": ServiceIdentityArgs{...} }

type ServiceIdentityMapOutput 

type ServiceIdentityMapOutput struct{ *pulumi.OutputState }

func (ServiceIdentityMapOutput) ElementType 

func (ServiceIdentityMapOutput) ElementType() reflect.Type

func (ServiceIdentityMapOutput) MapIndex 

func (o ServiceIdentityMapOutput) MapIndex(k pulumi.StringInput) ServiceIdentityOutput

func (ServiceIdentityMapOutput) ToServiceIdentityMapOutput 

func (o ServiceIdentityMapOutput) ToServiceIdentityMapOutput() ServiceIdentityMapOutput

func (ServiceIdentityMapOutput) ToServiceIdentityMapOutputWithContext 

func (o ServiceIdentityMapOutput) ToServiceIdentityMapOutputWithContext(ctx context.Context) ServiceIdentityMapOutput

type ServiceIdentityOutput 

type ServiceIdentityOutput struct{ *pulumi.OutputState }

func (ServiceIdentityOutput) ElementType 

func (ServiceIdentityOutput) ElementType() reflect.Type

func (ServiceIdentityOutput) Email 

func (o ServiceIdentityOutput) Email() pulumi.StringOutput

The email address of the Google managed service account.

func (ServiceIdentityOutput) Member 

func (o ServiceIdentityOutput) Member() pulumi.StringOutput

The Identity of the Google managed service account in the form 'serviceAccount:{email}'. This value is often used to refer to the service account in order to grant IAM permissions.

func (ServiceIdentityOutput) Project 

func (o ServiceIdentityOutput) Project() pulumi.StringOutput

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

func (ServiceIdentityOutput) Service 

func (o ServiceIdentityOutput) Service() pulumi.StringOutput

The service to generate identity for.

***

func (ServiceIdentityOutput) ToServiceIdentityOutput 

func (o ServiceIdentityOutput) ToServiceIdentityOutput() ServiceIdentityOutput

func (ServiceIdentityOutput) ToServiceIdentityOutputWithContext 

func (o ServiceIdentityOutput) ToServiceIdentityOutputWithContext(ctx context.Context) ServiceIdentityOutput

type ServiceIdentityState 

type ServiceIdentityState struct {
	// The email address of the Google managed service account.
	Email pulumi.StringPtrInput
	// The Identity of the Google managed service account in the form 'serviceAccount:{email}'. This value is often used to refer to the service account in order to grant IAM permissions.
	Member pulumi.StringPtrInput
	// The ID of the project in which the resource belongs.
	// If it is not provided, the provider project is used.
	Project pulumi.StringPtrInput
	// The service to generate identity for.
	//
	// ***
	Service pulumi.StringPtrInput
}

func (ServiceIdentityState) ElementType 

func (ServiceIdentityState) ElementType() reflect.Type

type ServiceInput 

type ServiceInput interface {
	pulumi.Input

	ToServiceOutput() ServiceOutput
	ToServiceOutputWithContext(ctx context.Context) ServiceOutput
}

type ServiceMap 

type ServiceMap map[string]ServiceInput

func (ServiceMap) ElementType 

func (ServiceMap) ElementType() reflect.Type

func (ServiceMap) ToServiceMapOutput 

func (i ServiceMap) ToServiceMapOutput() ServiceMapOutput

func (ServiceMap) ToServiceMapOutputWithContext 

func (i ServiceMap) ToServiceMapOutputWithContext(ctx context.Context) ServiceMapOutput

type ServiceMapInput 

type ServiceMapInput interface {
	pulumi.Input

	ToServiceMapOutput() ServiceMapOutput
	ToServiceMapOutputWithContext(context.Context) ServiceMapOutput
}

ServiceMapInput is an input type that accepts ServiceMap and ServiceMapOutput values. You can construct a concrete instance of `ServiceMapInput` via: 

ServiceMap{ "key": ServiceArgs{...} }

type ServiceMapOutput 

type ServiceMapOutput struct{ *pulumi.OutputState }

func (ServiceMapOutput) ElementType 

func (ServiceMapOutput) ElementType() reflect.Type

func (ServiceMapOutput) MapIndex 

func (o ServiceMapOutput) MapIndex(k pulumi.StringInput) ServiceOutput

func (ServiceMapOutput) ToServiceMapOutput 

func (o ServiceMapOutput) ToServiceMapOutput() ServiceMapOutput

func (ServiceMapOutput) ToServiceMapOutputWithContext 

func (o ServiceMapOutput) ToServiceMapOutputWithContext(ctx context.Context) ServiceMapOutput

type ServiceOutput 

type ServiceOutput struct{ *pulumi.OutputState }

func (ServiceOutput) CheckIfServiceHasUsageOnDestroy 

func (o ServiceOutput) CheckIfServiceHasUsageOnDestroy() pulumi.BoolPtrOutput

Beta If `true`, the usage of the service to be disabled will be checked and an error will be returned if the service to be disabled has usage in last 30 days. Defaults to `false`.

func (ServiceOutput) DisableDependentServices 

func (o ServiceOutput) DisableDependentServices() pulumi.BoolPtrOutput

If `true`, services that are enabled and which depend on this service should also be disabled when this service is destroyed. If `false` or unset, an error will be generated if any enabled services depend on this service when destroying it.

func (ServiceOutput) DisableOnDestroy 

func (o ServiceOutput) DisableOnDestroy() pulumi.BoolPtrOutput

func (ServiceOutput) ElementType 

func (ServiceOutput) ElementType() reflect.Type

func (ServiceOutput) Project 

func (o ServiceOutput) Project() pulumi.StringOutput

The project ID. If not provided, the provider project is used.

func (ServiceOutput) Service 

func (o ServiceOutput) Service() pulumi.StringOutput

The service to enable.

func (ServiceOutput) ToServiceOutput 

func (o ServiceOutput) ToServiceOutput() ServiceOutput

func (ServiceOutput) ToServiceOutputWithContext 

func (o ServiceOutput) ToServiceOutputWithContext(ctx context.Context) ServiceOutput

type ServiceState 

type ServiceState struct {
	// Beta
	// If `true`, the usage of the service to be disabled will be checked and an error
	// will be returned if the service to be disabled has usage in last 30 days.
	// Defaults to `false`.
	CheckIfServiceHasUsageOnDestroy pulumi.BoolPtrInput
	// If `true`, services that are enabled
	// and which depend on this service should also be disabled when this service is
	// destroyed. If `false` or unset, an error will be generated if any enabled
	// services depend on this service when destroying it.
	DisableDependentServices pulumi.BoolPtrInput
	DisableOnDestroy         pulumi.BoolPtrInput
	// The project ID. If not provided, the provider project
	// is used.
	Project pulumi.StringPtrInput
	// The service to enable.
	Service pulumi.StringPtrInput
}

func (ServiceState) ElementType 

func (ServiceState) ElementType() reflect.Type

type UsageExportBucket 

type UsageExportBucket struct {
	pulumi.CustomResourceState

	// The bucket to store reports in.
	BucketName pulumi.StringOutput `pulumi:"bucketName"`
	// A prefix for the reports, for instance, the project name.
	Prefix pulumi.StringPtrOutput `pulumi:"prefix"`
	// The project to set the export bucket on. If it is not provided, the provider project is used.
	Project pulumi.StringOutput `pulumi:"project"`
}

Allows creation and management of a Google Cloud Platform project.

Projects created with this resource must be associated with an Organization. See the [Organization documentation](https://cloud.google.com/resource-manager/docs/quickstarts) for more details.

The user or service account that is running this provider when creating a `organizations.Project` resource must have `roles/resourcemanager.projectCreator` on the specified organization. See the [Access Control for Organizations Using IAM](https://cloud.google.com/resource-manager/docs/access-control-org) doc for more information.

> This resource reads the specified billing account on every pulumi up and plan operation so you must have permissions on the specified billing account.

> It is recommended to use the `constraints/compute.skipDefaultNetworkCreation` [constraint](https://www.terraform.io/docs/providers/google/r/google_organization_policy.html) to remove the default network instead of setting `autoCreateNetwork` to false, when possible.

> It may take a while for the attached tag bindings to be deleted after the project is scheduled to be deleted.

To get more information about projects, see:

* [API documentation](https://cloud.google.com/resource-manager/reference/rest/v1/projects) * How-to Guides

## Example Usage

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := organizations.NewProject(ctx, "my_project", &organizations.ProjectArgs{
			Name:      pulumi.String("My Project"),
			ProjectId: pulumi.String("your-project-id"),
			OrgId:     pulumi.String("1234567"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

To create a project under a specific folder

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		department1, err := organizations.NewFolder(ctx, "department1", &organizations.FolderArgs{
			DisplayName: pulumi.String("Department 1"),
			Parent:      pulumi.String("organizations/1234567"),
		})
		if err != nil {
			return err
		}
		_, err = organizations.NewProject(ctx, "my_project-in-a-folder", &organizations.ProjectArgs{
			Name:      pulumi.String("My Project"),
			ProjectId: pulumi.String("your-project-id"),
			FolderId:  department1.Name,
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

To create a project with a tag

```go package main

import ( 

"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := organizations.NewProject(ctx, "my_project", &organizations.ProjectArgs{
			Name:      pulumi.String("My Project"),
			ProjectId: pulumi.String("your-project-id"),
			OrgId:     pulumi.String("1234567"),
			Tags: pulumi.StringMap{
				"1234567/env": pulumi.String("staging"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Projects can be imported using the `project_id`, e.g.

* `{{project_id}}`

When using the `pulumi import` command, Projects can be imported using one of the formats above. For example:

```sh $ pulumi import gcp:projects/usageExportBucket:UsageExportBucket default {{project_id}} ```

func GetUsageExportBucket 

func GetUsageExportBucket(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *UsageExportBucketState, opts ...pulumi.ResourceOption) (*UsageExportBucket, error)

GetUsageExportBucket gets an existing UsageExportBucket resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewUsageExportBucket 

func NewUsageExportBucket(ctx *pulumi.Context,
	name string, args *UsageExportBucketArgs, opts ...pulumi.ResourceOption) (*UsageExportBucket, error)

NewUsageExportBucket registers a new resource with the given unique name, arguments, and options.

func (*UsageExportBucket) ElementType 

func (*UsageExportBucket) ElementType() reflect.Type

func (*UsageExportBucket) ToUsageExportBucketOutput 

func (i *UsageExportBucket) ToUsageExportBucketOutput() UsageExportBucketOutput

func (*UsageExportBucket) ToUsageExportBucketOutputWithContext 

func (i *UsageExportBucket) ToUsageExportBucketOutputWithContext(ctx context.Context) UsageExportBucketOutput

type UsageExportBucketArgs 

type UsageExportBucketArgs struct {
	// The bucket to store reports in.
	BucketName pulumi.StringInput
	// A prefix for the reports, for instance, the project name.
	Prefix pulumi.StringPtrInput
	// The project to set the export bucket on. If it is not provided, the provider project is used.
	Project pulumi.StringPtrInput
}

The set of arguments for constructing a UsageExportBucket resource.

func (UsageExportBucketArgs) ElementType 

func (UsageExportBucketArgs) ElementType() reflect.Type

type UsageExportBucketArray 

type UsageExportBucketArray []UsageExportBucketInput

func (UsageExportBucketArray) ElementType 

func (UsageExportBucketArray) ElementType() reflect.Type

func (UsageExportBucketArray) ToUsageExportBucketArrayOutput 

func (i UsageExportBucketArray) ToUsageExportBucketArrayOutput() UsageExportBucketArrayOutput

func (UsageExportBucketArray) ToUsageExportBucketArrayOutputWithContext 

func (i UsageExportBucketArray) ToUsageExportBucketArrayOutputWithContext(ctx context.Context) UsageExportBucketArrayOutput

type UsageExportBucketArrayInput 

type UsageExportBucketArrayInput interface {
	pulumi.Input

	ToUsageExportBucketArrayOutput() UsageExportBucketArrayOutput
	ToUsageExportBucketArrayOutputWithContext(context.Context) UsageExportBucketArrayOutput
}

UsageExportBucketArrayInput is an input type that accepts UsageExportBucketArray and UsageExportBucketArrayOutput values. You can construct a concrete instance of `UsageExportBucketArrayInput` via: 

UsageExportBucketArray{ UsageExportBucketArgs{...} }

type UsageExportBucketArrayOutput 

type UsageExportBucketArrayOutput struct{ *pulumi.OutputState }

func (UsageExportBucketArrayOutput) ElementType 

func (UsageExportBucketArrayOutput) ElementType() reflect.Type

func (UsageExportBucketArrayOutput) Index 

func (o UsageExportBucketArrayOutput) Index(i pulumi.IntInput) UsageExportBucketOutput

func (UsageExportBucketArrayOutput) ToUsageExportBucketArrayOutput 

func (o UsageExportBucketArrayOutput) ToUsageExportBucketArrayOutput() UsageExportBucketArrayOutput

func (UsageExportBucketArrayOutput) ToUsageExportBucketArrayOutputWithContext 

func (o UsageExportBucketArrayOutput) ToUsageExportBucketArrayOutputWithContext(ctx context.Context) UsageExportBucketArrayOutput

type UsageExportBucketInput 

type UsageExportBucketInput interface {
	pulumi.Input

	ToUsageExportBucketOutput() UsageExportBucketOutput
	ToUsageExportBucketOutputWithContext(ctx context.Context) UsageExportBucketOutput
}

type UsageExportBucketMap 

type UsageExportBucketMap map[string]UsageExportBucketInput

func (UsageExportBucketMap) ElementType 

func (UsageExportBucketMap) ElementType() reflect.Type

func (UsageExportBucketMap) ToUsageExportBucketMapOutput 

func (i UsageExportBucketMap) ToUsageExportBucketMapOutput() UsageExportBucketMapOutput

func (UsageExportBucketMap) ToUsageExportBucketMapOutputWithContext 

func (i UsageExportBucketMap) ToUsageExportBucketMapOutputWithContext(ctx context.Context) UsageExportBucketMapOutput

type UsageExportBucketMapInput 

type UsageExportBucketMapInput interface {
	pulumi.Input

	ToUsageExportBucketMapOutput() UsageExportBucketMapOutput
	ToUsageExportBucketMapOutputWithContext(context.Context) UsageExportBucketMapOutput
}

UsageExportBucketMapInput is an input type that accepts UsageExportBucketMap and UsageExportBucketMapOutput values. You can construct a concrete instance of `UsageExportBucketMapInput` via: 

UsageExportBucketMap{ "key": UsageExportBucketArgs{...} }

type UsageExportBucketMapOutput 

type UsageExportBucketMapOutput struct{ *pulumi.OutputState }

func (UsageExportBucketMapOutput) ElementType 

func (UsageExportBucketMapOutput) ElementType() reflect.Type

func (UsageExportBucketMapOutput) MapIndex 

func (o UsageExportBucketMapOutput) MapIndex(k pulumi.StringInput) UsageExportBucketOutput

func (UsageExportBucketMapOutput) ToUsageExportBucketMapOutput 

func (o UsageExportBucketMapOutput) ToUsageExportBucketMapOutput() UsageExportBucketMapOutput

func (UsageExportBucketMapOutput) ToUsageExportBucketMapOutputWithContext 

func (o UsageExportBucketMapOutput) ToUsageExportBucketMapOutputWithContext(ctx context.Context) UsageExportBucketMapOutput

type UsageExportBucketOutput 

type UsageExportBucketOutput struct{ *pulumi.OutputState }

func (UsageExportBucketOutput) BucketName 

func (o UsageExportBucketOutput) BucketName() pulumi.StringOutput

The bucket to store reports in.

func (UsageExportBucketOutput) ElementType 

func (UsageExportBucketOutput) ElementType() reflect.Type

func (UsageExportBucketOutput) Prefix 

func (o UsageExportBucketOutput) Prefix() pulumi.StringPtrOutput

A prefix for the reports, for instance, the project name.

func (UsageExportBucketOutput) Project 

func (o UsageExportBucketOutput) Project() pulumi.StringOutput

The project to set the export bucket on. If it is not provided, the provider project is used.

func (UsageExportBucketOutput) ToUsageExportBucketOutput 

func (o UsageExportBucketOutput) ToUsageExportBucketOutput() UsageExportBucketOutput

func (UsageExportBucketOutput) ToUsageExportBucketOutputWithContext 

func (o UsageExportBucketOutput) ToUsageExportBucketOutputWithContext(ctx context.Context) UsageExportBucketOutput

type UsageExportBucketState 

type UsageExportBucketState struct {
	// The bucket to store reports in.
	BucketName pulumi.StringPtrInput
	// A prefix for the reports, for instance, the project name.
	Prefix pulumi.StringPtrInput
	// The project to set the export bucket on. If it is not provided, the provider project is used.
	Project pulumi.StringPtrInput
}

func (UsageExportBucketState) ElementType 

func (UsageExportBucketState) ElementType() reflect.Type

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.