v1alpha

package
v0.0.1-alpha.100 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jan 25, 2025 License: Apache-2.0 Imports: 7 Imported by: 0

Documentation

Index

Constants

View Source
const (
	// An unspecified log source. If the log source is unspecified, the Replay defaults to using `RECENT_ACCESSES`.
	GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceLogSourceUnspecified = GoogleCloudPolicysimulatorV1alphaReplayConfigLogSource("LOG_SOURCE_UNSPECIFIED")
	// All access logs from the last 90 days. These logs may not include logs from the most recent 7 days.
	GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceRecentAccesses = GoogleCloudPolicysimulatorV1alphaReplayConfigLogSource("RECENT_ACCESSES")
)
View Source
const (
	// Default case. Should never be this.
	GoogleIamV1AuditLogConfigLogTypeLogTypeUnspecified = GoogleIamV1AuditLogConfigLogType("LOG_TYPE_UNSPECIFIED")
	// Admin reads. Example: CloudIAM getIamPolicy
	GoogleIamV1AuditLogConfigLogTypeAdminRead = GoogleIamV1AuditLogConfigLogType("ADMIN_READ")
	// Data writes. Example: CloudSQL Users create
	GoogleIamV1AuditLogConfigLogTypeDataWrite = GoogleIamV1AuditLogConfigLogType("DATA_WRITE")
	// Data reads. Example: CloudSQL Users list
	GoogleIamV1AuditLogConfigLogTypeDataRead = GoogleIamV1AuditLogConfigLogType("DATA_READ")
)

Variables

This section is empty.

Functions

This section is empty.

Types

type FolderReplay

type FolderReplay struct {
	pulumi.CustomResourceState

	// The configuration used for the `Replay`.
	Config   GoogleCloudPolicysimulatorV1alphaReplayConfigResponseOutput `pulumi:"config"`
	FolderId pulumi.StringOutput                                         `pulumi:"folderId"`
	Location pulumi.StringOutput                                         `pulumi:"location"`
	// The resource name of the `Replay`, which has the following format: `{projects|folders|organizations}/{resource-id}/locations/global/replays/{replay-id}`, where `{resource-id}` is the ID of the project, folder, or organization that owns the Replay. Example: `projects/my-example-project/locations/global/replays/506a5f7f-38ce-4d7d-8e03-479ce1833c36`
	Name pulumi.StringOutput `pulumi:"name"`
	// Summary statistics about the replayed log entries.
	ResultsSummary GoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponseOutput `pulumi:"resultsSummary"`
	// The current state of the `Replay`.
	State pulumi.StringOutput `pulumi:"state"`
}

Creates and starts a Replay using the given ReplayConfig. Auto-naming is currently not supported for this resource. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetFolderReplay

func GetFolderReplay(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *FolderReplayState, opts ...pulumi.ResourceOption) (*FolderReplay, error)

GetFolderReplay gets an existing FolderReplay resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewFolderReplay

func NewFolderReplay(ctx *pulumi.Context,
	name string, args *FolderReplayArgs, opts ...pulumi.ResourceOption) (*FolderReplay, error)

NewFolderReplay registers a new resource with the given unique name, arguments, and options.

func (*FolderReplay) ElementType

func (*FolderReplay) ElementType() reflect.Type

func (*FolderReplay) ToFolderReplayOutput

func (i *FolderReplay) ToFolderReplayOutput() FolderReplayOutput

func (*FolderReplay) ToFolderReplayOutputWithContext

func (i *FolderReplay) ToFolderReplayOutputWithContext(ctx context.Context) FolderReplayOutput

type FolderReplayArgs

type FolderReplayArgs struct {
	// The configuration used for the `Replay`.
	Config   GoogleCloudPolicysimulatorV1alphaReplayConfigInput
	FolderId pulumi.StringInput
	Location pulumi.StringPtrInput
}

The set of arguments for constructing a FolderReplay resource.

func (FolderReplayArgs) ElementType

func (FolderReplayArgs) ElementType() reflect.Type

type FolderReplayInput

type FolderReplayInput interface {
	pulumi.Input

	ToFolderReplayOutput() FolderReplayOutput
	ToFolderReplayOutputWithContext(ctx context.Context) FolderReplayOutput
}

type FolderReplayOutput

type FolderReplayOutput struct{ *pulumi.OutputState }

func (FolderReplayOutput) Config

The configuration used for the `Replay`.

func (FolderReplayOutput) ElementType

func (FolderReplayOutput) ElementType() reflect.Type

func (FolderReplayOutput) FolderId

func (o FolderReplayOutput) FolderId() pulumi.StringOutput

func (FolderReplayOutput) Location

func (o FolderReplayOutput) Location() pulumi.StringOutput

func (FolderReplayOutput) Name

The resource name of the `Replay`, which has the following format: `{projects|folders|organizations}/{resource-id}/locations/global/replays/{replay-id}`, where `{resource-id}` is the ID of the project, folder, or organization that owns the Replay. Example: `projects/my-example-project/locations/global/replays/506a5f7f-38ce-4d7d-8e03-479ce1833c36`

func (FolderReplayOutput) ResultsSummary

Summary statistics about the replayed log entries.

func (FolderReplayOutput) State

The current state of the `Replay`.

func (FolderReplayOutput) ToFolderReplayOutput

func (o FolderReplayOutput) ToFolderReplayOutput() FolderReplayOutput

func (FolderReplayOutput) ToFolderReplayOutputWithContext

func (o FolderReplayOutput) ToFolderReplayOutputWithContext(ctx context.Context) FolderReplayOutput

type FolderReplayState

type FolderReplayState struct {
}

func (FolderReplayState) ElementType

func (FolderReplayState) ElementType() reflect.Type

type GoogleCloudPolicysimulatorV1alphaReplayConfig

type GoogleCloudPolicysimulatorV1alphaReplayConfig struct {
	// The logs to use as input for the Replay.
	LogSource *GoogleCloudPolicysimulatorV1alphaReplayConfigLogSource `pulumi:"logSource"`
	// A mapping of the resources that you want to simulate policies for and the policies that you want to simulate. Keys are the full resource names for the resources. For example, `//cloudresourcemanager.googleapis.com/projects/my-project`. For examples of full resource names for Google Cloud services, see https://cloud.google.com/iam/help/troubleshooter/full-resource-names. Values are Policy objects representing the policies that you want to simulate. Replays automatically take into account any IAM policies inherited through the resource hierarchy, and any policies set on descendant resources. You do not need to include these policies in the policy overlay.
	PolicyOverlay map[string]GoogleIamV1Policy `pulumi:"policyOverlay"`
}

The configuration used for a Replay.

type GoogleCloudPolicysimulatorV1alphaReplayConfigArgs

type GoogleCloudPolicysimulatorV1alphaReplayConfigArgs struct {
	// The logs to use as input for the Replay.
	LogSource GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrInput `pulumi:"logSource"`
	// A mapping of the resources that you want to simulate policies for and the policies that you want to simulate. Keys are the full resource names for the resources. For example, `//cloudresourcemanager.googleapis.com/projects/my-project`. For examples of full resource names for Google Cloud services, see https://cloud.google.com/iam/help/troubleshooter/full-resource-names. Values are Policy objects representing the policies that you want to simulate. Replays automatically take into account any IAM policies inherited through the resource hierarchy, and any policies set on descendant resources. You do not need to include these policies in the policy overlay.
	PolicyOverlay GoogleIamV1PolicyMapInput `pulumi:"policyOverlay"`
}

The configuration used for a Replay.

func (GoogleCloudPolicysimulatorV1alphaReplayConfigArgs) ElementType

func (GoogleCloudPolicysimulatorV1alphaReplayConfigArgs) ToGoogleCloudPolicysimulatorV1alphaReplayConfigOutput

func (i GoogleCloudPolicysimulatorV1alphaReplayConfigArgs) ToGoogleCloudPolicysimulatorV1alphaReplayConfigOutput() GoogleCloudPolicysimulatorV1alphaReplayConfigOutput

func (GoogleCloudPolicysimulatorV1alphaReplayConfigArgs) ToGoogleCloudPolicysimulatorV1alphaReplayConfigOutputWithContext

func (i GoogleCloudPolicysimulatorV1alphaReplayConfigArgs) ToGoogleCloudPolicysimulatorV1alphaReplayConfigOutputWithContext(ctx context.Context) GoogleCloudPolicysimulatorV1alphaReplayConfigOutput

type GoogleCloudPolicysimulatorV1alphaReplayConfigInput

type GoogleCloudPolicysimulatorV1alphaReplayConfigInput interface {
	pulumi.Input

	ToGoogleCloudPolicysimulatorV1alphaReplayConfigOutput() GoogleCloudPolicysimulatorV1alphaReplayConfigOutput
	ToGoogleCloudPolicysimulatorV1alphaReplayConfigOutputWithContext(context.Context) GoogleCloudPolicysimulatorV1alphaReplayConfigOutput
}

GoogleCloudPolicysimulatorV1alphaReplayConfigInput is an input type that accepts GoogleCloudPolicysimulatorV1alphaReplayConfigArgs and GoogleCloudPolicysimulatorV1alphaReplayConfigOutput values. You can construct a concrete instance of `GoogleCloudPolicysimulatorV1alphaReplayConfigInput` via:

GoogleCloudPolicysimulatorV1alphaReplayConfigArgs{...}

type GoogleCloudPolicysimulatorV1alphaReplayConfigLogSource

type GoogleCloudPolicysimulatorV1alphaReplayConfigLogSource string

The logs to use as input for the Replay.

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSource) ElementType

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSource) ToGoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput

func (e GoogleCloudPolicysimulatorV1alphaReplayConfigLogSource) ToGoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput() GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSource) ToGoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutputWithContext

func (e GoogleCloudPolicysimulatorV1alphaReplayConfigLogSource) ToGoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutputWithContext(ctx context.Context) GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSource) ToGoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutput

func (e GoogleCloudPolicysimulatorV1alphaReplayConfigLogSource) ToGoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutput() GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutput

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSource) ToGoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutputWithContext

func (e GoogleCloudPolicysimulatorV1alphaReplayConfigLogSource) ToGoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutputWithContext(ctx context.Context) GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutput

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSource) ToStringOutput

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSource) ToStringOutputWithContext

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSource) ToStringPtrOutput

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSource) ToStringPtrOutputWithContext

type GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceInput

type GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceInput interface {
	pulumi.Input

	ToGoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput() GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput
	ToGoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutputWithContext(context.Context) GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput
}

GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceInput is an input type that accepts values of the GoogleCloudPolicysimulatorV1alphaReplayConfigLogSource enum A concrete instance of `GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceInput` can be one of the following:

GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceLogSourceUnspecified
GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceRecentAccesses

type GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput

type GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput struct{ *pulumi.OutputState }

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput) ElementType

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput) ToGoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput) ToGoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutputWithContext

func (o GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput) ToGoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutputWithContext(ctx context.Context) GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput) ToGoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutput

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput) ToGoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutputWithContext

func (o GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput) ToGoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutputWithContext(ctx context.Context) GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutput

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput) ToStringOutput

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput) ToStringOutputWithContext

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput) ToStringPtrOutput

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourceOutput) ToStringPtrOutputWithContext

type GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrInput

type GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrInput interface {
	pulumi.Input

	ToGoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutput() GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutput
	ToGoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutputWithContext(context.Context) GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutput
}

type GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutput

type GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutput struct{ *pulumi.OutputState }

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutput) Elem

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutput) ElementType

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutput) ToGoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutput

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutput) ToGoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutputWithContext

func (o GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutput) ToGoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutputWithContext(ctx context.Context) GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutput

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutput) ToStringPtrOutput

func (GoogleCloudPolicysimulatorV1alphaReplayConfigLogSourcePtrOutput) ToStringPtrOutputWithContext

type GoogleCloudPolicysimulatorV1alphaReplayConfigOutput

type GoogleCloudPolicysimulatorV1alphaReplayConfigOutput struct{ *pulumi.OutputState }

The configuration used for a Replay.

func (GoogleCloudPolicysimulatorV1alphaReplayConfigOutput) ElementType

func (GoogleCloudPolicysimulatorV1alphaReplayConfigOutput) LogSource

The logs to use as input for the Replay.

func (GoogleCloudPolicysimulatorV1alphaReplayConfigOutput) PolicyOverlay

A mapping of the resources that you want to simulate policies for and the policies that you want to simulate. Keys are the full resource names for the resources. For example, `//cloudresourcemanager.googleapis.com/projects/my-project`. For examples of full resource names for Google Cloud services, see https://cloud.google.com/iam/help/troubleshooter/full-resource-names. Values are Policy objects representing the policies that you want to simulate. Replays automatically take into account any IAM policies inherited through the resource hierarchy, and any policies set on descendant resources. You do not need to include these policies in the policy overlay.

func (GoogleCloudPolicysimulatorV1alphaReplayConfigOutput) ToGoogleCloudPolicysimulatorV1alphaReplayConfigOutput

func (o GoogleCloudPolicysimulatorV1alphaReplayConfigOutput) ToGoogleCloudPolicysimulatorV1alphaReplayConfigOutput() GoogleCloudPolicysimulatorV1alphaReplayConfigOutput

func (GoogleCloudPolicysimulatorV1alphaReplayConfigOutput) ToGoogleCloudPolicysimulatorV1alphaReplayConfigOutputWithContext

func (o GoogleCloudPolicysimulatorV1alphaReplayConfigOutput) ToGoogleCloudPolicysimulatorV1alphaReplayConfigOutputWithContext(ctx context.Context) GoogleCloudPolicysimulatorV1alphaReplayConfigOutput

type GoogleCloudPolicysimulatorV1alphaReplayConfigResponse

type GoogleCloudPolicysimulatorV1alphaReplayConfigResponse struct {
	// The logs to use as input for the Replay.
	LogSource string `pulumi:"logSource"`
	// A mapping of the resources that you want to simulate policies for and the policies that you want to simulate. Keys are the full resource names for the resources. For example, `//cloudresourcemanager.googleapis.com/projects/my-project`. For examples of full resource names for Google Cloud services, see https://cloud.google.com/iam/help/troubleshooter/full-resource-names. Values are Policy objects representing the policies that you want to simulate. Replays automatically take into account any IAM policies inherited through the resource hierarchy, and any policies set on descendant resources. You do not need to include these policies in the policy overlay.
	PolicyOverlay map[string]GoogleIamV1PolicyResponse `pulumi:"policyOverlay"`
}

The configuration used for a Replay.

type GoogleCloudPolicysimulatorV1alphaReplayConfigResponseOutput

type GoogleCloudPolicysimulatorV1alphaReplayConfigResponseOutput struct{ *pulumi.OutputState }

The configuration used for a Replay.

func (GoogleCloudPolicysimulatorV1alphaReplayConfigResponseOutput) ElementType

func (GoogleCloudPolicysimulatorV1alphaReplayConfigResponseOutput) LogSource

The logs to use as input for the Replay.

func (GoogleCloudPolicysimulatorV1alphaReplayConfigResponseOutput) PolicyOverlay

A mapping of the resources that you want to simulate policies for and the policies that you want to simulate. Keys are the full resource names for the resources. For example, `//cloudresourcemanager.googleapis.com/projects/my-project`. For examples of full resource names for Google Cloud services, see https://cloud.google.com/iam/help/troubleshooter/full-resource-names. Values are Policy objects representing the policies that you want to simulate. Replays automatically take into account any IAM policies inherited through the resource hierarchy, and any policies set on descendant resources. You do not need to include these policies in the policy overlay.

func (GoogleCloudPolicysimulatorV1alphaReplayConfigResponseOutput) ToGoogleCloudPolicysimulatorV1alphaReplayConfigResponseOutput

func (GoogleCloudPolicysimulatorV1alphaReplayConfigResponseOutput) ToGoogleCloudPolicysimulatorV1alphaReplayConfigResponseOutputWithContext

func (o GoogleCloudPolicysimulatorV1alphaReplayConfigResponseOutput) ToGoogleCloudPolicysimulatorV1alphaReplayConfigResponseOutputWithContext(ctx context.Context) GoogleCloudPolicysimulatorV1alphaReplayConfigResponseOutput

type GoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponse

type GoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponse struct {
	// The number of replayed log entries with a difference between baseline and simulated policies.
	DifferenceCount int `pulumi:"differenceCount"`
	// The number of log entries that could not be replayed.
	ErrorCount int `pulumi:"errorCount"`
	// The total number of log entries replayed.
	LogCount int `pulumi:"logCount"`
	// The date of the newest log entry replayed.
	NewestDate GoogleTypeDateResponse `pulumi:"newestDate"`
	// The date of the oldest log entry replayed.
	OldestDate GoogleTypeDateResponse `pulumi:"oldestDate"`
	// The number of replayed log entries with no difference between baseline and simulated policies.
	UnchangedCount int `pulumi:"unchangedCount"`
}

Summary statistics about the replayed log entries.

type GoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponseOutput

type GoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponseOutput struct{ *pulumi.OutputState }

Summary statistics about the replayed log entries.

func (GoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponseOutput) DifferenceCount

The number of replayed log entries with a difference between baseline and simulated policies.

func (GoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponseOutput) ElementType

func (GoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponseOutput) ErrorCount

The number of log entries that could not be replayed.

func (GoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponseOutput) LogCount

The total number of log entries replayed.

func (GoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponseOutput) NewestDate

The date of the newest log entry replayed.

func (GoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponseOutput) OldestDate

The date of the oldest log entry replayed.

func (GoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponseOutput) ToGoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponseOutput

func (GoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponseOutput) ToGoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponseOutputWithContext

func (o GoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponseOutput) ToGoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponseOutputWithContext(ctx context.Context) GoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponseOutput

func (GoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponseOutput) UnchangedCount

The number of replayed log entries with no difference between baseline and simulated policies.

type GoogleIamV1AuditConfig

type GoogleIamV1AuditConfig struct {
	// The configuration for logging of each type of permission.
	AuditLogConfigs []GoogleIamV1AuditLogConfig `pulumi:"auditLogConfigs"`
	// Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.
	Service *string `pulumi:"service"`
}

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

type GoogleIamV1AuditConfigArgs

type GoogleIamV1AuditConfigArgs struct {
	// The configuration for logging of each type of permission.
	AuditLogConfigs GoogleIamV1AuditLogConfigArrayInput `pulumi:"auditLogConfigs"`
	// Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.
	Service pulumi.StringPtrInput `pulumi:"service"`
}

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

func (GoogleIamV1AuditConfigArgs) ElementType

func (GoogleIamV1AuditConfigArgs) ElementType() reflect.Type

func (GoogleIamV1AuditConfigArgs) ToGoogleIamV1AuditConfigOutput

func (i GoogleIamV1AuditConfigArgs) ToGoogleIamV1AuditConfigOutput() GoogleIamV1AuditConfigOutput

func (GoogleIamV1AuditConfigArgs) ToGoogleIamV1AuditConfigOutputWithContext

func (i GoogleIamV1AuditConfigArgs) ToGoogleIamV1AuditConfigOutputWithContext(ctx context.Context) GoogleIamV1AuditConfigOutput

type GoogleIamV1AuditConfigArray

type GoogleIamV1AuditConfigArray []GoogleIamV1AuditConfigInput

func (GoogleIamV1AuditConfigArray) ElementType

func (GoogleIamV1AuditConfigArray) ToGoogleIamV1AuditConfigArrayOutput

func (i GoogleIamV1AuditConfigArray) ToGoogleIamV1AuditConfigArrayOutput() GoogleIamV1AuditConfigArrayOutput

func (GoogleIamV1AuditConfigArray) ToGoogleIamV1AuditConfigArrayOutputWithContext

func (i GoogleIamV1AuditConfigArray) ToGoogleIamV1AuditConfigArrayOutputWithContext(ctx context.Context) GoogleIamV1AuditConfigArrayOutput

type GoogleIamV1AuditConfigArrayInput

type GoogleIamV1AuditConfigArrayInput interface {
	pulumi.Input

	ToGoogleIamV1AuditConfigArrayOutput() GoogleIamV1AuditConfigArrayOutput
	ToGoogleIamV1AuditConfigArrayOutputWithContext(context.Context) GoogleIamV1AuditConfigArrayOutput
}

GoogleIamV1AuditConfigArrayInput is an input type that accepts GoogleIamV1AuditConfigArray and GoogleIamV1AuditConfigArrayOutput values. You can construct a concrete instance of `GoogleIamV1AuditConfigArrayInput` via:

GoogleIamV1AuditConfigArray{ GoogleIamV1AuditConfigArgs{...} }

type GoogleIamV1AuditConfigArrayOutput

type GoogleIamV1AuditConfigArrayOutput struct{ *pulumi.OutputState }

func (GoogleIamV1AuditConfigArrayOutput) ElementType

func (GoogleIamV1AuditConfigArrayOutput) Index

func (GoogleIamV1AuditConfigArrayOutput) ToGoogleIamV1AuditConfigArrayOutput

func (o GoogleIamV1AuditConfigArrayOutput) ToGoogleIamV1AuditConfigArrayOutput() GoogleIamV1AuditConfigArrayOutput

func (GoogleIamV1AuditConfigArrayOutput) ToGoogleIamV1AuditConfigArrayOutputWithContext

func (o GoogleIamV1AuditConfigArrayOutput) ToGoogleIamV1AuditConfigArrayOutputWithContext(ctx context.Context) GoogleIamV1AuditConfigArrayOutput

type GoogleIamV1AuditConfigInput

type GoogleIamV1AuditConfigInput interface {
	pulumi.Input

	ToGoogleIamV1AuditConfigOutput() GoogleIamV1AuditConfigOutput
	ToGoogleIamV1AuditConfigOutputWithContext(context.Context) GoogleIamV1AuditConfigOutput
}

GoogleIamV1AuditConfigInput is an input type that accepts GoogleIamV1AuditConfigArgs and GoogleIamV1AuditConfigOutput values. You can construct a concrete instance of `GoogleIamV1AuditConfigInput` via:

GoogleIamV1AuditConfigArgs{...}

type GoogleIamV1AuditConfigOutput

type GoogleIamV1AuditConfigOutput struct{ *pulumi.OutputState }

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

func (GoogleIamV1AuditConfigOutput) AuditLogConfigs

The configuration for logging of each type of permission.

func (GoogleIamV1AuditConfigOutput) ElementType

func (GoogleIamV1AuditConfigOutput) Service

Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.

func (GoogleIamV1AuditConfigOutput) ToGoogleIamV1AuditConfigOutput

func (o GoogleIamV1AuditConfigOutput) ToGoogleIamV1AuditConfigOutput() GoogleIamV1AuditConfigOutput

func (GoogleIamV1AuditConfigOutput) ToGoogleIamV1AuditConfigOutputWithContext

func (o GoogleIamV1AuditConfigOutput) ToGoogleIamV1AuditConfigOutputWithContext(ctx context.Context) GoogleIamV1AuditConfigOutput

type GoogleIamV1AuditConfigResponse

type GoogleIamV1AuditConfigResponse struct {
	// The configuration for logging of each type of permission.
	AuditLogConfigs []GoogleIamV1AuditLogConfigResponse `pulumi:"auditLogConfigs"`
	// Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.
	Service string `pulumi:"service"`
}

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

type GoogleIamV1AuditConfigResponseArrayOutput

type GoogleIamV1AuditConfigResponseArrayOutput struct{ *pulumi.OutputState }

func (GoogleIamV1AuditConfigResponseArrayOutput) ElementType

func (GoogleIamV1AuditConfigResponseArrayOutput) Index

func (GoogleIamV1AuditConfigResponseArrayOutput) ToGoogleIamV1AuditConfigResponseArrayOutput

func (o GoogleIamV1AuditConfigResponseArrayOutput) ToGoogleIamV1AuditConfigResponseArrayOutput() GoogleIamV1AuditConfigResponseArrayOutput

func (GoogleIamV1AuditConfigResponseArrayOutput) ToGoogleIamV1AuditConfigResponseArrayOutputWithContext

func (o GoogleIamV1AuditConfigResponseArrayOutput) ToGoogleIamV1AuditConfigResponseArrayOutputWithContext(ctx context.Context) GoogleIamV1AuditConfigResponseArrayOutput

type GoogleIamV1AuditConfigResponseOutput

type GoogleIamV1AuditConfigResponseOutput struct{ *pulumi.OutputState }

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both `allServices` and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": [ "user:aliya@example.com" ] } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts `jose@example.com` from DATA_READ logging, and `aliya@example.com` from DATA_WRITE logging.

func (GoogleIamV1AuditConfigResponseOutput) AuditLogConfigs

The configuration for logging of each type of permission.

func (GoogleIamV1AuditConfigResponseOutput) ElementType

func (GoogleIamV1AuditConfigResponseOutput) Service

Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services.

func (GoogleIamV1AuditConfigResponseOutput) ToGoogleIamV1AuditConfigResponseOutput

func (o GoogleIamV1AuditConfigResponseOutput) ToGoogleIamV1AuditConfigResponseOutput() GoogleIamV1AuditConfigResponseOutput

func (GoogleIamV1AuditConfigResponseOutput) ToGoogleIamV1AuditConfigResponseOutputWithContext

func (o GoogleIamV1AuditConfigResponseOutput) ToGoogleIamV1AuditConfigResponseOutputWithContext(ctx context.Context) GoogleIamV1AuditConfigResponseOutput

type GoogleIamV1AuditLogConfig

type GoogleIamV1AuditLogConfig struct {
	// Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
	ExemptedMembers []string `pulumi:"exemptedMembers"`
	// The log type that this config enables.
	LogType *GoogleIamV1AuditLogConfigLogType `pulumi:"logType"`
}

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

type GoogleIamV1AuditLogConfigArgs

type GoogleIamV1AuditLogConfigArgs struct {
	// Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
	ExemptedMembers pulumi.StringArrayInput `pulumi:"exemptedMembers"`
	// The log type that this config enables.
	LogType GoogleIamV1AuditLogConfigLogTypePtrInput `pulumi:"logType"`
}

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

func (GoogleIamV1AuditLogConfigArgs) ElementType

func (GoogleIamV1AuditLogConfigArgs) ToGoogleIamV1AuditLogConfigOutput

func (i GoogleIamV1AuditLogConfigArgs) ToGoogleIamV1AuditLogConfigOutput() GoogleIamV1AuditLogConfigOutput

func (GoogleIamV1AuditLogConfigArgs) ToGoogleIamV1AuditLogConfigOutputWithContext

func (i GoogleIamV1AuditLogConfigArgs) ToGoogleIamV1AuditLogConfigOutputWithContext(ctx context.Context) GoogleIamV1AuditLogConfigOutput

type GoogleIamV1AuditLogConfigArray

type GoogleIamV1AuditLogConfigArray []GoogleIamV1AuditLogConfigInput

func (GoogleIamV1AuditLogConfigArray) ElementType

func (GoogleIamV1AuditLogConfigArray) ToGoogleIamV1AuditLogConfigArrayOutput

func (i GoogleIamV1AuditLogConfigArray) ToGoogleIamV1AuditLogConfigArrayOutput() GoogleIamV1AuditLogConfigArrayOutput

func (GoogleIamV1AuditLogConfigArray) ToGoogleIamV1AuditLogConfigArrayOutputWithContext

func (i GoogleIamV1AuditLogConfigArray) ToGoogleIamV1AuditLogConfigArrayOutputWithContext(ctx context.Context) GoogleIamV1AuditLogConfigArrayOutput

type GoogleIamV1AuditLogConfigArrayInput

type GoogleIamV1AuditLogConfigArrayInput interface {
	pulumi.Input

	ToGoogleIamV1AuditLogConfigArrayOutput() GoogleIamV1AuditLogConfigArrayOutput
	ToGoogleIamV1AuditLogConfigArrayOutputWithContext(context.Context) GoogleIamV1AuditLogConfigArrayOutput
}

GoogleIamV1AuditLogConfigArrayInput is an input type that accepts GoogleIamV1AuditLogConfigArray and GoogleIamV1AuditLogConfigArrayOutput values. You can construct a concrete instance of `GoogleIamV1AuditLogConfigArrayInput` via:

GoogleIamV1AuditLogConfigArray{ GoogleIamV1AuditLogConfigArgs{...} }

type GoogleIamV1AuditLogConfigArrayOutput

type GoogleIamV1AuditLogConfigArrayOutput struct{ *pulumi.OutputState }

func (GoogleIamV1AuditLogConfigArrayOutput) ElementType

func (GoogleIamV1AuditLogConfigArrayOutput) Index

func (GoogleIamV1AuditLogConfigArrayOutput) ToGoogleIamV1AuditLogConfigArrayOutput

func (o GoogleIamV1AuditLogConfigArrayOutput) ToGoogleIamV1AuditLogConfigArrayOutput() GoogleIamV1AuditLogConfigArrayOutput

func (GoogleIamV1AuditLogConfigArrayOutput) ToGoogleIamV1AuditLogConfigArrayOutputWithContext

func (o GoogleIamV1AuditLogConfigArrayOutput) ToGoogleIamV1AuditLogConfigArrayOutputWithContext(ctx context.Context) GoogleIamV1AuditLogConfigArrayOutput

type GoogleIamV1AuditLogConfigInput

type GoogleIamV1AuditLogConfigInput interface {
	pulumi.Input

	ToGoogleIamV1AuditLogConfigOutput() GoogleIamV1AuditLogConfigOutput
	ToGoogleIamV1AuditLogConfigOutputWithContext(context.Context) GoogleIamV1AuditLogConfigOutput
}

GoogleIamV1AuditLogConfigInput is an input type that accepts GoogleIamV1AuditLogConfigArgs and GoogleIamV1AuditLogConfigOutput values. You can construct a concrete instance of `GoogleIamV1AuditLogConfigInput` via:

GoogleIamV1AuditLogConfigArgs{...}

type GoogleIamV1AuditLogConfigLogType

type GoogleIamV1AuditLogConfigLogType string

The log type that this config enables.

func (GoogleIamV1AuditLogConfigLogType) ElementType

func (GoogleIamV1AuditLogConfigLogType) ToGoogleIamV1AuditLogConfigLogTypeOutput

func (e GoogleIamV1AuditLogConfigLogType) ToGoogleIamV1AuditLogConfigLogTypeOutput() GoogleIamV1AuditLogConfigLogTypeOutput

func (GoogleIamV1AuditLogConfigLogType) ToGoogleIamV1AuditLogConfigLogTypeOutputWithContext

func (e GoogleIamV1AuditLogConfigLogType) ToGoogleIamV1AuditLogConfigLogTypeOutputWithContext(ctx context.Context) GoogleIamV1AuditLogConfigLogTypeOutput

func (GoogleIamV1AuditLogConfigLogType) ToGoogleIamV1AuditLogConfigLogTypePtrOutput

func (e GoogleIamV1AuditLogConfigLogType) ToGoogleIamV1AuditLogConfigLogTypePtrOutput() GoogleIamV1AuditLogConfigLogTypePtrOutput

func (GoogleIamV1AuditLogConfigLogType) ToGoogleIamV1AuditLogConfigLogTypePtrOutputWithContext

func (e GoogleIamV1AuditLogConfigLogType) ToGoogleIamV1AuditLogConfigLogTypePtrOutputWithContext(ctx context.Context) GoogleIamV1AuditLogConfigLogTypePtrOutput

func (GoogleIamV1AuditLogConfigLogType) ToStringOutput

func (GoogleIamV1AuditLogConfigLogType) ToStringOutputWithContext

func (e GoogleIamV1AuditLogConfigLogType) ToStringOutputWithContext(ctx context.Context) pulumi.StringOutput

func (GoogleIamV1AuditLogConfigLogType) ToStringPtrOutput

func (GoogleIamV1AuditLogConfigLogType) ToStringPtrOutputWithContext

func (e GoogleIamV1AuditLogConfigLogType) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type GoogleIamV1AuditLogConfigLogTypeInput

type GoogleIamV1AuditLogConfigLogTypeInput interface {
	pulumi.Input

	ToGoogleIamV1AuditLogConfigLogTypeOutput() GoogleIamV1AuditLogConfigLogTypeOutput
	ToGoogleIamV1AuditLogConfigLogTypeOutputWithContext(context.Context) GoogleIamV1AuditLogConfigLogTypeOutput
}

GoogleIamV1AuditLogConfigLogTypeInput is an input type that accepts values of the GoogleIamV1AuditLogConfigLogType enum A concrete instance of `GoogleIamV1AuditLogConfigLogTypeInput` can be one of the following:

GoogleIamV1AuditLogConfigLogTypeLogTypeUnspecified
GoogleIamV1AuditLogConfigLogTypeAdminRead
GoogleIamV1AuditLogConfigLogTypeDataWrite
GoogleIamV1AuditLogConfigLogTypeDataRead

type GoogleIamV1AuditLogConfigLogTypeOutput

type GoogleIamV1AuditLogConfigLogTypeOutput struct{ *pulumi.OutputState }

func (GoogleIamV1AuditLogConfigLogTypeOutput) ElementType

func (GoogleIamV1AuditLogConfigLogTypeOutput) ToGoogleIamV1AuditLogConfigLogTypeOutput

func (o GoogleIamV1AuditLogConfigLogTypeOutput) ToGoogleIamV1AuditLogConfigLogTypeOutput() GoogleIamV1AuditLogConfigLogTypeOutput

func (GoogleIamV1AuditLogConfigLogTypeOutput) ToGoogleIamV1AuditLogConfigLogTypeOutputWithContext

func (o GoogleIamV1AuditLogConfigLogTypeOutput) ToGoogleIamV1AuditLogConfigLogTypeOutputWithContext(ctx context.Context) GoogleIamV1AuditLogConfigLogTypeOutput

func (GoogleIamV1AuditLogConfigLogTypeOutput) ToGoogleIamV1AuditLogConfigLogTypePtrOutput

func (o GoogleIamV1AuditLogConfigLogTypeOutput) ToGoogleIamV1AuditLogConfigLogTypePtrOutput() GoogleIamV1AuditLogConfigLogTypePtrOutput

func (GoogleIamV1AuditLogConfigLogTypeOutput) ToGoogleIamV1AuditLogConfigLogTypePtrOutputWithContext

func (o GoogleIamV1AuditLogConfigLogTypeOutput) ToGoogleIamV1AuditLogConfigLogTypePtrOutputWithContext(ctx context.Context) GoogleIamV1AuditLogConfigLogTypePtrOutput

func (GoogleIamV1AuditLogConfigLogTypeOutput) ToStringOutput

func (GoogleIamV1AuditLogConfigLogTypeOutput) ToStringOutputWithContext

func (GoogleIamV1AuditLogConfigLogTypeOutput) ToStringPtrOutput

func (GoogleIamV1AuditLogConfigLogTypeOutput) ToStringPtrOutputWithContext

func (o GoogleIamV1AuditLogConfigLogTypeOutput) ToStringPtrOutputWithContext(ctx context.Context) pulumi.StringPtrOutput

type GoogleIamV1AuditLogConfigLogTypePtrInput

type GoogleIamV1AuditLogConfigLogTypePtrInput interface {
	pulumi.Input

	ToGoogleIamV1AuditLogConfigLogTypePtrOutput() GoogleIamV1AuditLogConfigLogTypePtrOutput
	ToGoogleIamV1AuditLogConfigLogTypePtrOutputWithContext(context.Context) GoogleIamV1AuditLogConfigLogTypePtrOutput
}

type GoogleIamV1AuditLogConfigLogTypePtrOutput

type GoogleIamV1AuditLogConfigLogTypePtrOutput struct{ *pulumi.OutputState }

func (GoogleIamV1AuditLogConfigLogTypePtrOutput) Elem

func (GoogleIamV1AuditLogConfigLogTypePtrOutput) ElementType

func (GoogleIamV1AuditLogConfigLogTypePtrOutput) ToGoogleIamV1AuditLogConfigLogTypePtrOutput

func (o GoogleIamV1AuditLogConfigLogTypePtrOutput) ToGoogleIamV1AuditLogConfigLogTypePtrOutput() GoogleIamV1AuditLogConfigLogTypePtrOutput

func (GoogleIamV1AuditLogConfigLogTypePtrOutput) ToGoogleIamV1AuditLogConfigLogTypePtrOutputWithContext

func (o GoogleIamV1AuditLogConfigLogTypePtrOutput) ToGoogleIamV1AuditLogConfigLogTypePtrOutputWithContext(ctx context.Context) GoogleIamV1AuditLogConfigLogTypePtrOutput

func (GoogleIamV1AuditLogConfigLogTypePtrOutput) ToStringPtrOutput

func (GoogleIamV1AuditLogConfigLogTypePtrOutput) ToStringPtrOutputWithContext

type GoogleIamV1AuditLogConfigOutput

type GoogleIamV1AuditLogConfigOutput struct{ *pulumi.OutputState }

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

func (GoogleIamV1AuditLogConfigOutput) ElementType

func (GoogleIamV1AuditLogConfigOutput) ExemptedMembers

Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.

func (GoogleIamV1AuditLogConfigOutput) LogType

The log type that this config enables.

func (GoogleIamV1AuditLogConfigOutput) ToGoogleIamV1AuditLogConfigOutput

func (o GoogleIamV1AuditLogConfigOutput) ToGoogleIamV1AuditLogConfigOutput() GoogleIamV1AuditLogConfigOutput

func (GoogleIamV1AuditLogConfigOutput) ToGoogleIamV1AuditLogConfigOutputWithContext

func (o GoogleIamV1AuditLogConfigOutput) ToGoogleIamV1AuditLogConfigOutputWithContext(ctx context.Context) GoogleIamV1AuditLogConfigOutput

type GoogleIamV1AuditLogConfigResponse

type GoogleIamV1AuditLogConfigResponse struct {
	// Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
	ExemptedMembers []string `pulumi:"exemptedMembers"`
	// The log type that this config enables.
	LogType string `pulumi:"logType"`
}

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

type GoogleIamV1AuditLogConfigResponseArrayOutput

type GoogleIamV1AuditLogConfigResponseArrayOutput struct{ *pulumi.OutputState }

func (GoogleIamV1AuditLogConfigResponseArrayOutput) ElementType

func (GoogleIamV1AuditLogConfigResponseArrayOutput) Index

func (GoogleIamV1AuditLogConfigResponseArrayOutput) ToGoogleIamV1AuditLogConfigResponseArrayOutput

func (o GoogleIamV1AuditLogConfigResponseArrayOutput) ToGoogleIamV1AuditLogConfigResponseArrayOutput() GoogleIamV1AuditLogConfigResponseArrayOutput

func (GoogleIamV1AuditLogConfigResponseArrayOutput) ToGoogleIamV1AuditLogConfigResponseArrayOutputWithContext

func (o GoogleIamV1AuditLogConfigResponseArrayOutput) ToGoogleIamV1AuditLogConfigResponseArrayOutputWithContext(ctx context.Context) GoogleIamV1AuditLogConfigResponseArrayOutput

type GoogleIamV1AuditLogConfigResponseOutput

type GoogleIamV1AuditLogConfigResponseOutput struct{ *pulumi.OutputState }

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": [ "user:jose@example.com" ] }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

func (GoogleIamV1AuditLogConfigResponseOutput) ElementType

func (GoogleIamV1AuditLogConfigResponseOutput) ExemptedMembers

Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.

func (GoogleIamV1AuditLogConfigResponseOutput) LogType

The log type that this config enables.

func (GoogleIamV1AuditLogConfigResponseOutput) ToGoogleIamV1AuditLogConfigResponseOutput

func (o GoogleIamV1AuditLogConfigResponseOutput) ToGoogleIamV1AuditLogConfigResponseOutput() GoogleIamV1AuditLogConfigResponseOutput

func (GoogleIamV1AuditLogConfigResponseOutput) ToGoogleIamV1AuditLogConfigResponseOutputWithContext

func (o GoogleIamV1AuditLogConfigResponseOutput) ToGoogleIamV1AuditLogConfigResponseOutputWithContext(ctx context.Context) GoogleIamV1AuditLogConfigResponseOutput

type GoogleIamV1Binding

type GoogleIamV1Binding struct {
	// The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Condition *GoogleTypeExpr `pulumi:"condition"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members []string `pulumi:"members"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role *string `pulumi:"role"`
}

Associates `members`, or principals, with a `role`.

type GoogleIamV1BindingArgs

type GoogleIamV1BindingArgs struct {
	// The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Condition GoogleTypeExprPtrInput `pulumi:"condition"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members pulumi.StringArrayInput `pulumi:"members"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role pulumi.StringPtrInput `pulumi:"role"`
}

Associates `members`, or principals, with a `role`.

func (GoogleIamV1BindingArgs) ElementType

func (GoogleIamV1BindingArgs) ElementType() reflect.Type

func (GoogleIamV1BindingArgs) ToGoogleIamV1BindingOutput

func (i GoogleIamV1BindingArgs) ToGoogleIamV1BindingOutput() GoogleIamV1BindingOutput

func (GoogleIamV1BindingArgs) ToGoogleIamV1BindingOutputWithContext

func (i GoogleIamV1BindingArgs) ToGoogleIamV1BindingOutputWithContext(ctx context.Context) GoogleIamV1BindingOutput

type GoogleIamV1BindingArray

type GoogleIamV1BindingArray []GoogleIamV1BindingInput

func (GoogleIamV1BindingArray) ElementType

func (GoogleIamV1BindingArray) ElementType() reflect.Type

func (GoogleIamV1BindingArray) ToGoogleIamV1BindingArrayOutput

func (i GoogleIamV1BindingArray) ToGoogleIamV1BindingArrayOutput() GoogleIamV1BindingArrayOutput

func (GoogleIamV1BindingArray) ToGoogleIamV1BindingArrayOutputWithContext

func (i GoogleIamV1BindingArray) ToGoogleIamV1BindingArrayOutputWithContext(ctx context.Context) GoogleIamV1BindingArrayOutput

type GoogleIamV1BindingArrayInput

type GoogleIamV1BindingArrayInput interface {
	pulumi.Input

	ToGoogleIamV1BindingArrayOutput() GoogleIamV1BindingArrayOutput
	ToGoogleIamV1BindingArrayOutputWithContext(context.Context) GoogleIamV1BindingArrayOutput
}

GoogleIamV1BindingArrayInput is an input type that accepts GoogleIamV1BindingArray and GoogleIamV1BindingArrayOutput values. You can construct a concrete instance of `GoogleIamV1BindingArrayInput` via:

GoogleIamV1BindingArray{ GoogleIamV1BindingArgs{...} }

type GoogleIamV1BindingArrayOutput

type GoogleIamV1BindingArrayOutput struct{ *pulumi.OutputState }

func (GoogleIamV1BindingArrayOutput) ElementType

func (GoogleIamV1BindingArrayOutput) Index

func (GoogleIamV1BindingArrayOutput) ToGoogleIamV1BindingArrayOutput

func (o GoogleIamV1BindingArrayOutput) ToGoogleIamV1BindingArrayOutput() GoogleIamV1BindingArrayOutput

func (GoogleIamV1BindingArrayOutput) ToGoogleIamV1BindingArrayOutputWithContext

func (o GoogleIamV1BindingArrayOutput) ToGoogleIamV1BindingArrayOutputWithContext(ctx context.Context) GoogleIamV1BindingArrayOutput

type GoogleIamV1BindingInput

type GoogleIamV1BindingInput interface {
	pulumi.Input

	ToGoogleIamV1BindingOutput() GoogleIamV1BindingOutput
	ToGoogleIamV1BindingOutputWithContext(context.Context) GoogleIamV1BindingOutput
}

GoogleIamV1BindingInput is an input type that accepts GoogleIamV1BindingArgs and GoogleIamV1BindingOutput values. You can construct a concrete instance of `GoogleIamV1BindingInput` via:

GoogleIamV1BindingArgs{...}

type GoogleIamV1BindingOutput

type GoogleIamV1BindingOutput struct{ *pulumi.OutputState }

Associates `members`, or principals, with a `role`.

func (GoogleIamV1BindingOutput) Condition

The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

func (GoogleIamV1BindingOutput) ElementType

func (GoogleIamV1BindingOutput) ElementType() reflect.Type

func (GoogleIamV1BindingOutput) Members

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (GoogleIamV1BindingOutput) Role

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (GoogleIamV1BindingOutput) ToGoogleIamV1BindingOutput

func (o GoogleIamV1BindingOutput) ToGoogleIamV1BindingOutput() GoogleIamV1BindingOutput

func (GoogleIamV1BindingOutput) ToGoogleIamV1BindingOutputWithContext

func (o GoogleIamV1BindingOutput) ToGoogleIamV1BindingOutputWithContext(ctx context.Context) GoogleIamV1BindingOutput

type GoogleIamV1BindingResponse

type GoogleIamV1BindingResponse struct {
	// The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Condition GoogleTypeExprResponse `pulumi:"condition"`
	// Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.
	Members []string `pulumi:"members"`
	// Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
	Role string `pulumi:"role"`
}

Associates `members`, or principals, with a `role`.

type GoogleIamV1BindingResponseArrayOutput

type GoogleIamV1BindingResponseArrayOutput struct{ *pulumi.OutputState }

func (GoogleIamV1BindingResponseArrayOutput) ElementType

func (GoogleIamV1BindingResponseArrayOutput) Index

func (GoogleIamV1BindingResponseArrayOutput) ToGoogleIamV1BindingResponseArrayOutput

func (o GoogleIamV1BindingResponseArrayOutput) ToGoogleIamV1BindingResponseArrayOutput() GoogleIamV1BindingResponseArrayOutput

func (GoogleIamV1BindingResponseArrayOutput) ToGoogleIamV1BindingResponseArrayOutputWithContext

func (o GoogleIamV1BindingResponseArrayOutput) ToGoogleIamV1BindingResponseArrayOutputWithContext(ctx context.Context) GoogleIamV1BindingResponseArrayOutput

type GoogleIamV1BindingResponseOutput

type GoogleIamV1BindingResponseOutput struct{ *pulumi.OutputState }

Associates `members`, or principals, with a `role`.

func (GoogleIamV1BindingResponseOutput) Condition

The condition that is associated with this binding. If the condition evaluates to `true`, then this binding applies to the current request. If the condition evaluates to `false`, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

func (GoogleIamV1BindingResponseOutput) ElementType

func (GoogleIamV1BindingResponseOutput) Members

Specifies the principals requesting access for a Google Cloud resource. `members` can have the following values: * `allUsers`: A special identifier that represents anyone who is on the internet; with or without a Google account. * `allAuthenticatedUsers`: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * `user:{emailid}`: An email address that represents a specific Google account. For example, `alice@example.com` . * `serviceAccount:{emailid}`: An email address that represents a Google service account. For example, `my-other-app@appspot.gserviceaccount.com`. * `serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]`: An identifier for a [Kubernetes service account](https://cloud.google.com/kubernetes-engine/docs/how-to/kubernetes-service-accounts). For example, `my-project.svc.id.goog[my-namespace/my-kubernetes-sa]`. * `group:{emailid}`: An email address that represents a Google group. For example, `admins@example.com`. * `domain:{domain}`: The G Suite domain (primary) that represents all the users of that domain. For example, `google.com` or `example.com`. * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a user that has been recently deleted. For example, `alice@example.com?uid=123456789012345678901`. If the user is recovered, this value reverts to `user:{emailid}` and the recovered user retains the role in the binding. * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`. If the service account is undeleted, this value reverts to `serviceAccount:{emailid}` and the undeleted service account retains the role in the binding. * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, `admins@example.com?uid=123456789012345678901`. If the group is recovered, this value reverts to `group:{emailid}` and the recovered group retains the role in the binding.

func (GoogleIamV1BindingResponseOutput) Role

Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

func (GoogleIamV1BindingResponseOutput) ToGoogleIamV1BindingResponseOutput

func (o GoogleIamV1BindingResponseOutput) ToGoogleIamV1BindingResponseOutput() GoogleIamV1BindingResponseOutput

func (GoogleIamV1BindingResponseOutput) ToGoogleIamV1BindingResponseOutputWithContext

func (o GoogleIamV1BindingResponseOutput) ToGoogleIamV1BindingResponseOutputWithContext(ctx context.Context) GoogleIamV1BindingResponseOutput

type GoogleIamV1Policy

type GoogleIamV1Policy struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs []GoogleIamV1AuditConfig `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []GoogleIamV1Binding `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag *string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version *int `pulumi:"version"`
}

An Identity and Access Management (IAM) policy, which specifies access controls for Google Cloud resources. A `Policy` is a collection of `bindings`. A `binding` binds one or more `members`, or principals, to a single `role`. Principals can be user accounts, service accounts, Google groups, and domains (such as G Suite). A `role` is a named list of permissions; each `role` can be an IAM predefined role or a user-created custom role. For some types of Google Cloud resources, a `binding` can also specify a `condition`, which is a logical expression that allows access to a resource only if the expression evaluates to `true`. A condition can add constraints based on attributes of the request, the resource, or both. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). **JSON example:** ```{ "bindings": [ { "role": "roles/resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "group:admins@example.com", "domain:google.com", "serviceAccount:my-project-id@appspot.gserviceaccount.com" ] }, { "role": "roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com" ], "condition": { "title": "expirable access", "description": "Does not grant access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", } } ], "etag": "BwWWja0YfJA=", "version": 3 }``` **YAML example:** ```bindings: - members: - user:mike@example.com - group:admins@example.com - domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.com role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3``` For a description of IAM and its features, see the [IAM documentation](https://cloud.google.com/iam/docs/).

type GoogleIamV1PolicyArgs

type GoogleIamV1PolicyArgs struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs GoogleIamV1AuditConfigArrayInput `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings GoogleIamV1BindingArrayInput `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag pulumi.StringPtrInput `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version pulumi.IntPtrInput `pulumi:"version"`
}

An Identity and Access Management (IAM) policy, which specifies access controls for Google Cloud resources. A `Policy` is a collection of `bindings`. A `binding` binds one or more `members`, or principals, to a single `role`. Principals can be user accounts, service accounts, Google groups, and domains (such as G Suite). A `role` is a named list of permissions; each `role` can be an IAM predefined role or a user-created custom role. For some types of Google Cloud resources, a `binding` can also specify a `condition`, which is a logical expression that allows access to a resource only if the expression evaluates to `true`. A condition can add constraints based on attributes of the request, the resource, or both. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). **JSON example:** ```{ "bindings": [ { "role": "roles/resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "group:admins@example.com", "domain:google.com", "serviceAccount:my-project-id@appspot.gserviceaccount.com" ] }, { "role": "roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com" ], "condition": { "title": "expirable access", "description": "Does not grant access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", } } ], "etag": "BwWWja0YfJA=", "version": 3 }``` **YAML example:** ```bindings: - members: - user:mike@example.com - group:admins@example.com - domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.com role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3``` For a description of IAM and its features, see the [IAM documentation](https://cloud.google.com/iam/docs/).

func (GoogleIamV1PolicyArgs) ElementType

func (GoogleIamV1PolicyArgs) ElementType() reflect.Type

func (GoogleIamV1PolicyArgs) ToGoogleIamV1PolicyOutput

func (i GoogleIamV1PolicyArgs) ToGoogleIamV1PolicyOutput() GoogleIamV1PolicyOutput

func (GoogleIamV1PolicyArgs) ToGoogleIamV1PolicyOutputWithContext

func (i GoogleIamV1PolicyArgs) ToGoogleIamV1PolicyOutputWithContext(ctx context.Context) GoogleIamV1PolicyOutput

type GoogleIamV1PolicyInput

type GoogleIamV1PolicyInput interface {
	pulumi.Input

	ToGoogleIamV1PolicyOutput() GoogleIamV1PolicyOutput
	ToGoogleIamV1PolicyOutputWithContext(context.Context) GoogleIamV1PolicyOutput
}

GoogleIamV1PolicyInput is an input type that accepts GoogleIamV1PolicyArgs and GoogleIamV1PolicyOutput values. You can construct a concrete instance of `GoogleIamV1PolicyInput` via:

GoogleIamV1PolicyArgs{...}

type GoogleIamV1PolicyMap

type GoogleIamV1PolicyMap map[string]GoogleIamV1PolicyInput

func (GoogleIamV1PolicyMap) ElementType

func (GoogleIamV1PolicyMap) ElementType() reflect.Type

func (GoogleIamV1PolicyMap) ToGoogleIamV1PolicyMapOutput

func (i GoogleIamV1PolicyMap) ToGoogleIamV1PolicyMapOutput() GoogleIamV1PolicyMapOutput

func (GoogleIamV1PolicyMap) ToGoogleIamV1PolicyMapOutputWithContext

func (i GoogleIamV1PolicyMap) ToGoogleIamV1PolicyMapOutputWithContext(ctx context.Context) GoogleIamV1PolicyMapOutput

type GoogleIamV1PolicyMapInput

type GoogleIamV1PolicyMapInput interface {
	pulumi.Input

	ToGoogleIamV1PolicyMapOutput() GoogleIamV1PolicyMapOutput
	ToGoogleIamV1PolicyMapOutputWithContext(context.Context) GoogleIamV1PolicyMapOutput
}

GoogleIamV1PolicyMapInput is an input type that accepts GoogleIamV1PolicyMap and GoogleIamV1PolicyMapOutput values. You can construct a concrete instance of `GoogleIamV1PolicyMapInput` via:

GoogleIamV1PolicyMap{ "key": GoogleIamV1PolicyArgs{...} }

type GoogleIamV1PolicyMapOutput

type GoogleIamV1PolicyMapOutput struct{ *pulumi.OutputState }

func (GoogleIamV1PolicyMapOutput) ElementType

func (GoogleIamV1PolicyMapOutput) ElementType() reflect.Type

func (GoogleIamV1PolicyMapOutput) MapIndex

func (GoogleIamV1PolicyMapOutput) ToGoogleIamV1PolicyMapOutput

func (o GoogleIamV1PolicyMapOutput) ToGoogleIamV1PolicyMapOutput() GoogleIamV1PolicyMapOutput

func (GoogleIamV1PolicyMapOutput) ToGoogleIamV1PolicyMapOutputWithContext

func (o GoogleIamV1PolicyMapOutput) ToGoogleIamV1PolicyMapOutputWithContext(ctx context.Context) GoogleIamV1PolicyMapOutput

type GoogleIamV1PolicyOutput

type GoogleIamV1PolicyOutput struct{ *pulumi.OutputState }

An Identity and Access Management (IAM) policy, which specifies access controls for Google Cloud resources. A `Policy` is a collection of `bindings`. A `binding` binds one or more `members`, or principals, to a single `role`. Principals can be user accounts, service accounts, Google groups, and domains (such as G Suite). A `role` is a named list of permissions; each `role` can be an IAM predefined role or a user-created custom role. For some types of Google Cloud resources, a `binding` can also specify a `condition`, which is a logical expression that allows access to a resource only if the expression evaluates to `true`. A condition can add constraints based on attributes of the request, the resource, or both. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). **JSON example:** ```{ "bindings": [ { "role": "roles/resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "group:admins@example.com", "domain:google.com", "serviceAccount:my-project-id@appspot.gserviceaccount.com" ] }, { "role": "roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com" ], "condition": { "title": "expirable access", "description": "Does not grant access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", } } ], "etag": "BwWWja0YfJA=", "version": 3 }``` **YAML example:** ```bindings: - members: - user:mike@example.com - group:admins@example.com - domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.com role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3``` For a description of IAM and its features, see the [IAM documentation](https://cloud.google.com/iam/docs/).

func (GoogleIamV1PolicyOutput) AuditConfigs

Specifies cloud audit logging configuration for this policy.

func (GoogleIamV1PolicyOutput) Bindings

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (GoogleIamV1PolicyOutput) ElementType

func (GoogleIamV1PolicyOutput) ElementType() reflect.Type

func (GoogleIamV1PolicyOutput) Etag

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (GoogleIamV1PolicyOutput) ToGoogleIamV1PolicyOutput

func (o GoogleIamV1PolicyOutput) ToGoogleIamV1PolicyOutput() GoogleIamV1PolicyOutput

func (GoogleIamV1PolicyOutput) ToGoogleIamV1PolicyOutputWithContext

func (o GoogleIamV1PolicyOutput) ToGoogleIamV1PolicyOutputWithContext(ctx context.Context) GoogleIamV1PolicyOutput

func (GoogleIamV1PolicyOutput) Version

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type GoogleIamV1PolicyResponse

type GoogleIamV1PolicyResponse struct {
	// Specifies cloud audit logging configuration for this policy.
	AuditConfigs []GoogleIamV1AuditConfigResponse `pulumi:"auditConfigs"`
	// Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.
	Bindings []GoogleIamV1BindingResponse `pulumi:"bindings"`
	// `etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.
	Etag string `pulumi:"etag"`
	// Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
	Version int `pulumi:"version"`
}

An Identity and Access Management (IAM) policy, which specifies access controls for Google Cloud resources. A `Policy` is a collection of `bindings`. A `binding` binds one or more `members`, or principals, to a single `role`. Principals can be user accounts, service accounts, Google groups, and domains (such as G Suite). A `role` is a named list of permissions; each `role` can be an IAM predefined role or a user-created custom role. For some types of Google Cloud resources, a `binding` can also specify a `condition`, which is a logical expression that allows access to a resource only if the expression evaluates to `true`. A condition can add constraints based on attributes of the request, the resource, or both. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). **JSON example:** ```{ "bindings": [ { "role": "roles/resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "group:admins@example.com", "domain:google.com", "serviceAccount:my-project-id@appspot.gserviceaccount.com" ] }, { "role": "roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com" ], "condition": { "title": "expirable access", "description": "Does not grant access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", } } ], "etag": "BwWWja0YfJA=", "version": 3 }``` **YAML example:** ```bindings: - members: - user:mike@example.com - group:admins@example.com - domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.com role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3``` For a description of IAM and its features, see the [IAM documentation](https://cloud.google.com/iam/docs/).

type GoogleIamV1PolicyResponseMapOutput

type GoogleIamV1PolicyResponseMapOutput struct{ *pulumi.OutputState }

func (GoogleIamV1PolicyResponseMapOutput) ElementType

func (GoogleIamV1PolicyResponseMapOutput) MapIndex

func (GoogleIamV1PolicyResponseMapOutput) ToGoogleIamV1PolicyResponseMapOutput

func (o GoogleIamV1PolicyResponseMapOutput) ToGoogleIamV1PolicyResponseMapOutput() GoogleIamV1PolicyResponseMapOutput

func (GoogleIamV1PolicyResponseMapOutput) ToGoogleIamV1PolicyResponseMapOutputWithContext

func (o GoogleIamV1PolicyResponseMapOutput) ToGoogleIamV1PolicyResponseMapOutputWithContext(ctx context.Context) GoogleIamV1PolicyResponseMapOutput

type GoogleIamV1PolicyResponseOutput

type GoogleIamV1PolicyResponseOutput struct{ *pulumi.OutputState }

An Identity and Access Management (IAM) policy, which specifies access controls for Google Cloud resources. A `Policy` is a collection of `bindings`. A `binding` binds one or more `members`, or principals, to a single `role`. Principals can be user accounts, service accounts, Google groups, and domains (such as G Suite). A `role` is a named list of permissions; each `role` can be an IAM predefined role or a user-created custom role. For some types of Google Cloud resources, a `binding` can also specify a `condition`, which is a logical expression that allows access to a resource only if the expression evaluates to `true`. A condition can add constraints based on attributes of the request, the resource, or both. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). **JSON example:** ```{ "bindings": [ { "role": "roles/resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "group:admins@example.com", "domain:google.com", "serviceAccount:my-project-id@appspot.gserviceaccount.com" ] }, { "role": "roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com" ], "condition": { "title": "expirable access", "description": "Does not grant access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", } } ], "etag": "BwWWja0YfJA=", "version": 3 }``` **YAML example:** ```bindings: - members: - user:mike@example.com - group:admins@example.com - domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.com role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3``` For a description of IAM and its features, see the [IAM documentation](https://cloud.google.com/iam/docs/).

func (GoogleIamV1PolicyResponseOutput) AuditConfigs

Specifies cloud audit logging configuration for this policy.

func (GoogleIamV1PolicyResponseOutput) Bindings

Associates a list of `members`, or principals, with a `role`. Optionally, may specify a `condition` that determines how and when the `bindings` are applied. Each of the `bindings` must contain at least one principal. The `bindings` in a `Policy` can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the `bindings` grant 50 different roles to `user:alice@example.com`, and not to any other principal, then you can add another 1,450 principals to the `bindings` in the `Policy`.

func (GoogleIamV1PolicyResponseOutput) ElementType

func (GoogleIamV1PolicyResponseOutput) Etag

`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.

func (GoogleIamV1PolicyResponseOutput) ToGoogleIamV1PolicyResponseOutput

func (o GoogleIamV1PolicyResponseOutput) ToGoogleIamV1PolicyResponseOutput() GoogleIamV1PolicyResponseOutput

func (GoogleIamV1PolicyResponseOutput) ToGoogleIamV1PolicyResponseOutputWithContext

func (o GoogleIamV1PolicyResponseOutput) ToGoogleIamV1PolicyResponseOutputWithContext(ctx context.Context) GoogleIamV1PolicyResponseOutput

func (GoogleIamV1PolicyResponseOutput) Version

Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).

type GoogleTypeDateResponse

type GoogleTypeDateResponse struct {
	// Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.
	Day int `pulumi:"day"`
	// Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.
	Month int `pulumi:"month"`
	// Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.
	Year int `pulumi:"year"`
}

Represents a whole or partial calendar date, such as a birthday. The time of day and time zone are either specified elsewhere or are insignificant. The date is relative to the Gregorian Calendar. This can represent one of the following: * A full date, with non-zero year, month, and day values. * A month and day, with a zero year (for example, an anniversary). * A year on its own, with a zero month and a zero day. * A year and month, with a zero day (for example, a credit card expiration date). Related types: * google.type.TimeOfDay * google.type.DateTime * google.protobuf.Timestamp

type GoogleTypeDateResponseOutput

type GoogleTypeDateResponseOutput struct{ *pulumi.OutputState }

Represents a whole or partial calendar date, such as a birthday. The time of day and time zone are either specified elsewhere or are insignificant. The date is relative to the Gregorian Calendar. This can represent one of the following: * A full date, with non-zero year, month, and day values. * A month and day, with a zero year (for example, an anniversary). * A year on its own, with a zero month and a zero day. * A year and month, with a zero day (for example, a credit card expiration date). Related types: * google.type.TimeOfDay * google.type.DateTime * google.protobuf.Timestamp

func (GoogleTypeDateResponseOutput) Day

Day of a month. Must be from 1 to 31 and valid for the year and month, or 0 to specify a year by itself or a year and month where the day isn't significant.

func (GoogleTypeDateResponseOutput) ElementType

func (GoogleTypeDateResponseOutput) Month

Month of a year. Must be from 1 to 12, or 0 to specify a year without a month and day.

func (GoogleTypeDateResponseOutput) ToGoogleTypeDateResponseOutput

func (o GoogleTypeDateResponseOutput) ToGoogleTypeDateResponseOutput() GoogleTypeDateResponseOutput

func (GoogleTypeDateResponseOutput) ToGoogleTypeDateResponseOutputWithContext

func (o GoogleTypeDateResponseOutput) ToGoogleTypeDateResponseOutputWithContext(ctx context.Context) GoogleTypeDateResponseOutput

func (GoogleTypeDateResponseOutput) Year

Year of the date. Must be from 1 to 9999, or 0 to specify a date without a year.

type GoogleTypeExpr

type GoogleTypeExpr struct {
	// Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description *string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression *string `pulumi:"expression"`
	// Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location *string `pulumi:"location"`
	// Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title *string `pulumi:"title"`
}

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

type GoogleTypeExprArgs

type GoogleTypeExprArgs struct {
	// Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description pulumi.StringPtrInput `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression pulumi.StringPtrInput `pulumi:"expression"`
	// Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location pulumi.StringPtrInput `pulumi:"location"`
	// Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title pulumi.StringPtrInput `pulumi:"title"`
}

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

func (GoogleTypeExprArgs) ElementType

func (GoogleTypeExprArgs) ElementType() reflect.Type

func (GoogleTypeExprArgs) ToGoogleTypeExprOutput

func (i GoogleTypeExprArgs) ToGoogleTypeExprOutput() GoogleTypeExprOutput

func (GoogleTypeExprArgs) ToGoogleTypeExprOutputWithContext

func (i GoogleTypeExprArgs) ToGoogleTypeExprOutputWithContext(ctx context.Context) GoogleTypeExprOutput

func (GoogleTypeExprArgs) ToGoogleTypeExprPtrOutput

func (i GoogleTypeExprArgs) ToGoogleTypeExprPtrOutput() GoogleTypeExprPtrOutput

func (GoogleTypeExprArgs) ToGoogleTypeExprPtrOutputWithContext

func (i GoogleTypeExprArgs) ToGoogleTypeExprPtrOutputWithContext(ctx context.Context) GoogleTypeExprPtrOutput

type GoogleTypeExprInput

type GoogleTypeExprInput interface {
	pulumi.Input

	ToGoogleTypeExprOutput() GoogleTypeExprOutput
	ToGoogleTypeExprOutputWithContext(context.Context) GoogleTypeExprOutput
}

GoogleTypeExprInput is an input type that accepts GoogleTypeExprArgs and GoogleTypeExprOutput values. You can construct a concrete instance of `GoogleTypeExprInput` via:

GoogleTypeExprArgs{...}

type GoogleTypeExprOutput

type GoogleTypeExprOutput struct{ *pulumi.OutputState }

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

func (GoogleTypeExprOutput) Description

Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (GoogleTypeExprOutput) ElementType

func (GoogleTypeExprOutput) ElementType() reflect.Type

func (GoogleTypeExprOutput) Expression

Textual representation of an expression in Common Expression Language syntax.

func (GoogleTypeExprOutput) Location

Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (GoogleTypeExprOutput) Title

Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (GoogleTypeExprOutput) ToGoogleTypeExprOutput

func (o GoogleTypeExprOutput) ToGoogleTypeExprOutput() GoogleTypeExprOutput

func (GoogleTypeExprOutput) ToGoogleTypeExprOutputWithContext

func (o GoogleTypeExprOutput) ToGoogleTypeExprOutputWithContext(ctx context.Context) GoogleTypeExprOutput

func (GoogleTypeExprOutput) ToGoogleTypeExprPtrOutput

func (o GoogleTypeExprOutput) ToGoogleTypeExprPtrOutput() GoogleTypeExprPtrOutput

func (GoogleTypeExprOutput) ToGoogleTypeExprPtrOutputWithContext

func (o GoogleTypeExprOutput) ToGoogleTypeExprPtrOutputWithContext(ctx context.Context) GoogleTypeExprPtrOutput

type GoogleTypeExprPtrInput

type GoogleTypeExprPtrInput interface {
	pulumi.Input

	ToGoogleTypeExprPtrOutput() GoogleTypeExprPtrOutput
	ToGoogleTypeExprPtrOutputWithContext(context.Context) GoogleTypeExprPtrOutput
}

GoogleTypeExprPtrInput is an input type that accepts GoogleTypeExprArgs, GoogleTypeExprPtr and GoogleTypeExprPtrOutput values. You can construct a concrete instance of `GoogleTypeExprPtrInput` via:

        GoogleTypeExprArgs{...}

or:

        nil

type GoogleTypeExprPtrOutput

type GoogleTypeExprPtrOutput struct{ *pulumi.OutputState }

func (GoogleTypeExprPtrOutput) Description

Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (GoogleTypeExprPtrOutput) Elem

func (GoogleTypeExprPtrOutput) ElementType

func (GoogleTypeExprPtrOutput) ElementType() reflect.Type

func (GoogleTypeExprPtrOutput) Expression

Textual representation of an expression in Common Expression Language syntax.

func (GoogleTypeExprPtrOutput) Location

Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (GoogleTypeExprPtrOutput) Title

Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (GoogleTypeExprPtrOutput) ToGoogleTypeExprPtrOutput

func (o GoogleTypeExprPtrOutput) ToGoogleTypeExprPtrOutput() GoogleTypeExprPtrOutput

func (GoogleTypeExprPtrOutput) ToGoogleTypeExprPtrOutputWithContext

func (o GoogleTypeExprPtrOutput) ToGoogleTypeExprPtrOutputWithContext(ctx context.Context) GoogleTypeExprPtrOutput

type GoogleTypeExprResponse

type GoogleTypeExprResponse struct {
	// Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
	Description string `pulumi:"description"`
	// Textual representation of an expression in Common Expression Language syntax.
	Expression string `pulumi:"expression"`
	// Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
	Location string `pulumi:"location"`
	// Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
	Title string `pulumi:"title"`
}

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

type GoogleTypeExprResponseOutput

type GoogleTypeExprResponseOutput struct{ *pulumi.OutputState }

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

func (GoogleTypeExprResponseOutput) Description

Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.

func (GoogleTypeExprResponseOutput) ElementType

func (GoogleTypeExprResponseOutput) Expression

Textual representation of an expression in Common Expression Language syntax.

func (GoogleTypeExprResponseOutput) Location

Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.

func (GoogleTypeExprResponseOutput) Title

Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

func (GoogleTypeExprResponseOutput) ToGoogleTypeExprResponseOutput

func (o GoogleTypeExprResponseOutput) ToGoogleTypeExprResponseOutput() GoogleTypeExprResponseOutput

func (GoogleTypeExprResponseOutput) ToGoogleTypeExprResponseOutputWithContext

func (o GoogleTypeExprResponseOutput) ToGoogleTypeExprResponseOutputWithContext(ctx context.Context) GoogleTypeExprResponseOutput

type LookupFolderReplayArgs

type LookupFolderReplayArgs struct {
	FolderId string `pulumi:"folderId"`
	Location string `pulumi:"location"`
	ReplayId string `pulumi:"replayId"`
}

type LookupFolderReplayOutputArgs

type LookupFolderReplayOutputArgs struct {
	FolderId pulumi.StringInput `pulumi:"folderId"`
	Location pulumi.StringInput `pulumi:"location"`
	ReplayId pulumi.StringInput `pulumi:"replayId"`
}

func (LookupFolderReplayOutputArgs) ElementType

type LookupFolderReplayResult

type LookupFolderReplayResult struct {
	// The configuration used for the `Replay`.
	Config GoogleCloudPolicysimulatorV1alphaReplayConfigResponse `pulumi:"config"`
	// The resource name of the `Replay`, which has the following format: `{projects|folders|organizations}/{resource-id}/locations/global/replays/{replay-id}`, where `{resource-id}` is the ID of the project, folder, or organization that owns the Replay. Example: `projects/my-example-project/locations/global/replays/506a5f7f-38ce-4d7d-8e03-479ce1833c36`
	Name string `pulumi:"name"`
	// Summary statistics about the replayed log entries.
	ResultsSummary GoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponse `pulumi:"resultsSummary"`
	// The current state of the `Replay`.
	State string `pulumi:"state"`
}

func LookupFolderReplay

func LookupFolderReplay(ctx *pulumi.Context, args *LookupFolderReplayArgs, opts ...pulumi.InvokeOption) (*LookupFolderReplayResult, error)

Gets the specified Replay. Each `Replay` is available for at least 7 days.

type LookupFolderReplayResultOutput

type LookupFolderReplayResultOutput struct{ *pulumi.OutputState }

func (LookupFolderReplayResultOutput) Config

The configuration used for the `Replay`.

func (LookupFolderReplayResultOutput) ElementType

func (LookupFolderReplayResultOutput) Name

The resource name of the `Replay`, which has the following format: `{projects|folders|organizations}/{resource-id}/locations/global/replays/{replay-id}`, where `{resource-id}` is the ID of the project, folder, or organization that owns the Replay. Example: `projects/my-example-project/locations/global/replays/506a5f7f-38ce-4d7d-8e03-479ce1833c36`

func (LookupFolderReplayResultOutput) ResultsSummary

Summary statistics about the replayed log entries.

func (LookupFolderReplayResultOutput) State

The current state of the `Replay`.

func (LookupFolderReplayResultOutput) ToLookupFolderReplayResultOutput

func (o LookupFolderReplayResultOutput) ToLookupFolderReplayResultOutput() LookupFolderReplayResultOutput

func (LookupFolderReplayResultOutput) ToLookupFolderReplayResultOutputWithContext

func (o LookupFolderReplayResultOutput) ToLookupFolderReplayResultOutputWithContext(ctx context.Context) LookupFolderReplayResultOutput

type LookupOrganizationReplayArgs

type LookupOrganizationReplayArgs struct {
	Location       string `pulumi:"location"`
	OrganizationId string `pulumi:"organizationId"`
	ReplayId       string `pulumi:"replayId"`
}

type LookupOrganizationReplayOutputArgs

type LookupOrganizationReplayOutputArgs struct {
	Location       pulumi.StringInput `pulumi:"location"`
	OrganizationId pulumi.StringInput `pulumi:"organizationId"`
	ReplayId       pulumi.StringInput `pulumi:"replayId"`
}

func (LookupOrganizationReplayOutputArgs) ElementType

type LookupOrganizationReplayResult

type LookupOrganizationReplayResult struct {
	// The configuration used for the `Replay`.
	Config GoogleCloudPolicysimulatorV1alphaReplayConfigResponse `pulumi:"config"`
	// The resource name of the `Replay`, which has the following format: `{projects|folders|organizations}/{resource-id}/locations/global/replays/{replay-id}`, where `{resource-id}` is the ID of the project, folder, or organization that owns the Replay. Example: `projects/my-example-project/locations/global/replays/506a5f7f-38ce-4d7d-8e03-479ce1833c36`
	Name string `pulumi:"name"`
	// Summary statistics about the replayed log entries.
	ResultsSummary GoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponse `pulumi:"resultsSummary"`
	// The current state of the `Replay`.
	State string `pulumi:"state"`
}

func LookupOrganizationReplay

func LookupOrganizationReplay(ctx *pulumi.Context, args *LookupOrganizationReplayArgs, opts ...pulumi.InvokeOption) (*LookupOrganizationReplayResult, error)

Gets the specified Replay. Each `Replay` is available for at least 7 days.

type LookupOrganizationReplayResultOutput

type LookupOrganizationReplayResultOutput struct{ *pulumi.OutputState }

func (LookupOrganizationReplayResultOutput) Config

The configuration used for the `Replay`.

func (LookupOrganizationReplayResultOutput) ElementType

func (LookupOrganizationReplayResultOutput) Name

The resource name of the `Replay`, which has the following format: `{projects|folders|organizations}/{resource-id}/locations/global/replays/{replay-id}`, where `{resource-id}` is the ID of the project, folder, or organization that owns the Replay. Example: `projects/my-example-project/locations/global/replays/506a5f7f-38ce-4d7d-8e03-479ce1833c36`

func (LookupOrganizationReplayResultOutput) ResultsSummary

Summary statistics about the replayed log entries.

func (LookupOrganizationReplayResultOutput) State

The current state of the `Replay`.

func (LookupOrganizationReplayResultOutput) ToLookupOrganizationReplayResultOutput

func (o LookupOrganizationReplayResultOutput) ToLookupOrganizationReplayResultOutput() LookupOrganizationReplayResultOutput

func (LookupOrganizationReplayResultOutput) ToLookupOrganizationReplayResultOutputWithContext

func (o LookupOrganizationReplayResultOutput) ToLookupOrganizationReplayResultOutputWithContext(ctx context.Context) LookupOrganizationReplayResultOutput

type LookupReplayArgs

type LookupReplayArgs struct {
	Location string  `pulumi:"location"`
	Project  *string `pulumi:"project"`
	ReplayId string  `pulumi:"replayId"`
}

type LookupReplayOutputArgs

type LookupReplayOutputArgs struct {
	Location pulumi.StringInput    `pulumi:"location"`
	Project  pulumi.StringPtrInput `pulumi:"project"`
	ReplayId pulumi.StringInput    `pulumi:"replayId"`
}

func (LookupReplayOutputArgs) ElementType

func (LookupReplayOutputArgs) ElementType() reflect.Type

type LookupReplayResult

type LookupReplayResult struct {
	// The configuration used for the `Replay`.
	Config GoogleCloudPolicysimulatorV1alphaReplayConfigResponse `pulumi:"config"`
	// The resource name of the `Replay`, which has the following format: `{projects|folders|organizations}/{resource-id}/locations/global/replays/{replay-id}`, where `{resource-id}` is the ID of the project, folder, or organization that owns the Replay. Example: `projects/my-example-project/locations/global/replays/506a5f7f-38ce-4d7d-8e03-479ce1833c36`
	Name string `pulumi:"name"`
	// Summary statistics about the replayed log entries.
	ResultsSummary GoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponse `pulumi:"resultsSummary"`
	// The current state of the `Replay`.
	State string `pulumi:"state"`
}

func LookupReplay

func LookupReplay(ctx *pulumi.Context, args *LookupReplayArgs, opts ...pulumi.InvokeOption) (*LookupReplayResult, error)

Gets the specified Replay. Each `Replay` is available for at least 7 days.

type LookupReplayResultOutput

type LookupReplayResultOutput struct{ *pulumi.OutputState }

func (LookupReplayResultOutput) Config

The configuration used for the `Replay`.

func (LookupReplayResultOutput) ElementType

func (LookupReplayResultOutput) ElementType() reflect.Type

func (LookupReplayResultOutput) Name

The resource name of the `Replay`, which has the following format: `{projects|folders|organizations}/{resource-id}/locations/global/replays/{replay-id}`, where `{resource-id}` is the ID of the project, folder, or organization that owns the Replay. Example: `projects/my-example-project/locations/global/replays/506a5f7f-38ce-4d7d-8e03-479ce1833c36`

func (LookupReplayResultOutput) ResultsSummary

Summary statistics about the replayed log entries.

func (LookupReplayResultOutput) State

The current state of the `Replay`.

func (LookupReplayResultOutput) ToLookupReplayResultOutput

func (o LookupReplayResultOutput) ToLookupReplayResultOutput() LookupReplayResultOutput

func (LookupReplayResultOutput) ToLookupReplayResultOutputWithContext

func (o LookupReplayResultOutput) ToLookupReplayResultOutputWithContext(ctx context.Context) LookupReplayResultOutput

type OrganizationReplay

type OrganizationReplay struct {
	pulumi.CustomResourceState

	// The configuration used for the `Replay`.
	Config   GoogleCloudPolicysimulatorV1alphaReplayConfigResponseOutput `pulumi:"config"`
	Location pulumi.StringOutput                                         `pulumi:"location"`
	// The resource name of the `Replay`, which has the following format: `{projects|folders|organizations}/{resource-id}/locations/global/replays/{replay-id}`, where `{resource-id}` is the ID of the project, folder, or organization that owns the Replay. Example: `projects/my-example-project/locations/global/replays/506a5f7f-38ce-4d7d-8e03-479ce1833c36`
	Name           pulumi.StringOutput `pulumi:"name"`
	OrganizationId pulumi.StringOutput `pulumi:"organizationId"`
	// Summary statistics about the replayed log entries.
	ResultsSummary GoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponseOutput `pulumi:"resultsSummary"`
	// The current state of the `Replay`.
	State pulumi.StringOutput `pulumi:"state"`
}

Creates and starts a Replay using the given ReplayConfig. Auto-naming is currently not supported for this resource. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetOrganizationReplay

func GetOrganizationReplay(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *OrganizationReplayState, opts ...pulumi.ResourceOption) (*OrganizationReplay, error)

GetOrganizationReplay gets an existing OrganizationReplay resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewOrganizationReplay

func NewOrganizationReplay(ctx *pulumi.Context,
	name string, args *OrganizationReplayArgs, opts ...pulumi.ResourceOption) (*OrganizationReplay, error)

NewOrganizationReplay registers a new resource with the given unique name, arguments, and options.

func (*OrganizationReplay) ElementType

func (*OrganizationReplay) ElementType() reflect.Type

func (*OrganizationReplay) ToOrganizationReplayOutput

func (i *OrganizationReplay) ToOrganizationReplayOutput() OrganizationReplayOutput

func (*OrganizationReplay) ToOrganizationReplayOutputWithContext

func (i *OrganizationReplay) ToOrganizationReplayOutputWithContext(ctx context.Context) OrganizationReplayOutput

type OrganizationReplayArgs

type OrganizationReplayArgs struct {
	// The configuration used for the `Replay`.
	Config         GoogleCloudPolicysimulatorV1alphaReplayConfigInput
	Location       pulumi.StringPtrInput
	OrganizationId pulumi.StringInput
}

The set of arguments for constructing a OrganizationReplay resource.

func (OrganizationReplayArgs) ElementType

func (OrganizationReplayArgs) ElementType() reflect.Type

type OrganizationReplayInput

type OrganizationReplayInput interface {
	pulumi.Input

	ToOrganizationReplayOutput() OrganizationReplayOutput
	ToOrganizationReplayOutputWithContext(ctx context.Context) OrganizationReplayOutput
}

type OrganizationReplayOutput

type OrganizationReplayOutput struct{ *pulumi.OutputState }

func (OrganizationReplayOutput) Config

The configuration used for the `Replay`.

func (OrganizationReplayOutput) ElementType

func (OrganizationReplayOutput) ElementType() reflect.Type

func (OrganizationReplayOutput) Location

func (OrganizationReplayOutput) Name

The resource name of the `Replay`, which has the following format: `{projects|folders|organizations}/{resource-id}/locations/global/replays/{replay-id}`, where `{resource-id}` is the ID of the project, folder, or organization that owns the Replay. Example: `projects/my-example-project/locations/global/replays/506a5f7f-38ce-4d7d-8e03-479ce1833c36`

func (OrganizationReplayOutput) OrganizationId

func (o OrganizationReplayOutput) OrganizationId() pulumi.StringOutput

func (OrganizationReplayOutput) ResultsSummary

Summary statistics about the replayed log entries.

func (OrganizationReplayOutput) State

The current state of the `Replay`.

func (OrganizationReplayOutput) ToOrganizationReplayOutput

func (o OrganizationReplayOutput) ToOrganizationReplayOutput() OrganizationReplayOutput

func (OrganizationReplayOutput) ToOrganizationReplayOutputWithContext

func (o OrganizationReplayOutput) ToOrganizationReplayOutputWithContext(ctx context.Context) OrganizationReplayOutput

type OrganizationReplayState

type OrganizationReplayState struct {
}

func (OrganizationReplayState) ElementType

func (OrganizationReplayState) ElementType() reflect.Type

type Replay

type Replay struct {
	pulumi.CustomResourceState

	// The configuration used for the `Replay`.
	Config   GoogleCloudPolicysimulatorV1alphaReplayConfigResponseOutput `pulumi:"config"`
	Location pulumi.StringOutput                                         `pulumi:"location"`
	// The resource name of the `Replay`, which has the following format: `{projects|folders|organizations}/{resource-id}/locations/global/replays/{replay-id}`, where `{resource-id}` is the ID of the project, folder, or organization that owns the Replay. Example: `projects/my-example-project/locations/global/replays/506a5f7f-38ce-4d7d-8e03-479ce1833c36`
	Name    pulumi.StringOutput `pulumi:"name"`
	Project pulumi.StringOutput `pulumi:"project"`
	// Summary statistics about the replayed log entries.
	ResultsSummary GoogleCloudPolicysimulatorV1alphaReplayResultsSummaryResponseOutput `pulumi:"resultsSummary"`
	// The current state of the `Replay`.
	State pulumi.StringOutput `pulumi:"state"`
}

Creates and starts a Replay using the given ReplayConfig. Auto-naming is currently not supported for this resource. Note - this resource's API doesn't support deletion. When deleted, the resource will persist on Google Cloud even though it will be deleted from Pulumi state.

func GetReplay

func GetReplay(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ReplayState, opts ...pulumi.ResourceOption) (*Replay, error)

GetReplay gets an existing Replay resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewReplay

func NewReplay(ctx *pulumi.Context,
	name string, args *ReplayArgs, opts ...pulumi.ResourceOption) (*Replay, error)

NewReplay registers a new resource with the given unique name, arguments, and options.

func (*Replay) ElementType

func (*Replay) ElementType() reflect.Type

func (*Replay) ToReplayOutput

func (i *Replay) ToReplayOutput() ReplayOutput

func (*Replay) ToReplayOutputWithContext

func (i *Replay) ToReplayOutputWithContext(ctx context.Context) ReplayOutput

type ReplayArgs

type ReplayArgs struct {
	// The configuration used for the `Replay`.
	Config   GoogleCloudPolicysimulatorV1alphaReplayConfigInput
	Location pulumi.StringPtrInput
	Project  pulumi.StringPtrInput
}

The set of arguments for constructing a Replay resource.

func (ReplayArgs) ElementType

func (ReplayArgs) ElementType() reflect.Type

type ReplayInput

type ReplayInput interface {
	pulumi.Input

	ToReplayOutput() ReplayOutput
	ToReplayOutputWithContext(ctx context.Context) ReplayOutput
}

type ReplayOutput

type ReplayOutput struct{ *pulumi.OutputState }

func (ReplayOutput) Config

The configuration used for the `Replay`.

func (ReplayOutput) ElementType

func (ReplayOutput) ElementType() reflect.Type

func (ReplayOutput) Location

func (o ReplayOutput) Location() pulumi.StringOutput

func (ReplayOutput) Name

func (o ReplayOutput) Name() pulumi.StringOutput

The resource name of the `Replay`, which has the following format: `{projects|folders|organizations}/{resource-id}/locations/global/replays/{replay-id}`, where `{resource-id}` is the ID of the project, folder, or organization that owns the Replay. Example: `projects/my-example-project/locations/global/replays/506a5f7f-38ce-4d7d-8e03-479ce1833c36`

func (ReplayOutput) Project

func (o ReplayOutput) Project() pulumi.StringOutput

func (ReplayOutput) ResultsSummary

Summary statistics about the replayed log entries.

func (ReplayOutput) State

func (o ReplayOutput) State() pulumi.StringOutput

The current state of the `Replay`.

func (ReplayOutput) ToReplayOutput

func (o ReplayOutput) ToReplayOutput() ReplayOutput

func (ReplayOutput) ToReplayOutputWithContext

func (o ReplayOutput) ToReplayOutputWithContext(ctx context.Context) ReplayOutput

type ReplayState

type ReplayState struct {
}

func (ReplayState) ElementType

func (ReplayState) ElementType() reflect.Type

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL