Docs Packages
  1. Packages
  2. Google Cloud Native
  3. API Docs
  4. contentwarehouse
  5. contentwarehouse/v1
  6. RuleSet

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

google-native.contentwarehouse/v1.RuleSet

Explore with Pulumi AI

google-native logo

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

    Creates a ruleset.

    Create RuleSet Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new RuleSet(name: string, args?: RuleSetArgs, opts?: CustomResourceOptions);
    @overload
def RuleSet(resource_name: str,
            args: Optional[RuleSetArgs] = None,
            opts: Optional[ResourceOptions] = None)

@overload
def RuleSet(resource_name: str,
            opts: Optional[ResourceOptions] = None,
            description: Optional[str] = None,
            location: Optional[str] = None,
            name: Optional[str] = None,
            project: Optional[str] = None,
            rules: Optional[Sequence[GoogleCloudContentwarehouseV1RuleArgs]] = None,
            source: Optional[str] = None)
    func NewRuleSet(ctx *Context, name string, args *RuleSetArgs, opts ...ResourceOption) (*RuleSet, error)
    public RuleSet(string name, RuleSetArgs? args = null, CustomResourceOptions? opts = null)
    public RuleSet(String name, RuleSetArgs args)
public RuleSet(String name, RuleSetArgs args, CustomResourceOptions options)

    type: google-native:contentwarehouse/v1:RuleSet
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args RuleSetArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args RuleSetArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args RuleSetArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args RuleSetArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args RuleSetArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Example

    The following reference example uses placeholder values for all input properties.

    var ruleSetResource = new GoogleNative.Contentwarehouse.V1.RuleSet("ruleSetResource", new()
{
    Description = "string",
    Location = "string",
    Name = "string",
    Project = "string",
    Rules = new[]
    {
        new GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1RuleArgs
        {
            Actions = new[]
            {
                new GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1ActionArgs
                {
                    AccessControl = new GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1AccessControlActionArgs
                    {
                        OperationType = GoogleNative.Contentwarehouse.V1.GoogleCloudContentwarehouseV1AccessControlActionOperationType.Unknown,
                        Policy = new GoogleNative.Contentwarehouse.V1.Inputs.GoogleIamV1PolicyArgs
                        {
                            AuditConfigs = new[]
                            {
                                new GoogleNative.Contentwarehouse.V1.Inputs.GoogleIamV1AuditConfigArgs
                                {
                                    AuditLogConfigs = new[]
                                    {
                                        new GoogleNative.Contentwarehouse.V1.Inputs.GoogleIamV1AuditLogConfigArgs
                                        {
                                            ExemptedMembers = new[]
                                            {
                                                "string",
                                            },
                                            LogType = GoogleNative.Contentwarehouse.V1.GoogleIamV1AuditLogConfigLogType.LogTypeUnspecified,
                                        },
                                    },
                                    Service = "string",
                                },
                            },
                            Bindings = new[]
                            {
                                new GoogleNative.Contentwarehouse.V1.Inputs.GoogleIamV1BindingArgs
                                {
                                    Condition = new GoogleNative.Contentwarehouse.V1.Inputs.GoogleTypeExprArgs
                                    {
                                        Description = "string",
                                        Expression = "string",
                                        Location = "string",
                                        Title = "string",
                                    },
                                    Members = new[]
                                    {
                                        "string",
                                    },
                                    Role = "string",
                                },
                            },
                            Etag = "string",
                            Version = 0,
                        },
                    },
                    ActionId = "string",
                    AddToFolder = new GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1AddToFolderActionArgs
                    {
                        Folders = new[]
                        {
                            "string",
                        },
                    },
                    DataUpdate = new GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1DataUpdateActionArgs
                    {
                        Entries = 
                        {
                            { "string", "string" },
                        },
                    },
                    DataValidation = new GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1DataValidationActionArgs
                    {
                        Conditions = 
                        {
                            { "string", "string" },
                        },
                    },
                    DeleteDocumentAction = new GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1DeleteDocumentActionArgs
                    {
                        EnableHardDelete = false,
                    },
                    PublishToPubSub = new GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1PublishActionArgs
                    {
                        Messages = new[]
                        {
                            "string",
                        },
                        TopicId = "string",
                    },
                    RemoveFromFolderAction = new GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1RemoveFromFolderActionArgs
                    {
                        Condition = "string",
                        Folder = "string",
                    },
                },
            },
            Condition = "string",
            Description = "string",
            RuleId = "string",
            TriggerType = GoogleNative.Contentwarehouse.V1.GoogleCloudContentwarehouseV1RuleTriggerType.Unknown,
        },
    },
    Source = "string",
});

    example, err := contentwarehouse.NewRuleSet(ctx, "ruleSetResource", &contentwarehouse.RuleSetArgs{
Description: pulumi.String("string"),
Location: pulumi.String("string"),
Name: pulumi.String("string"),
Project: pulumi.String("string"),
Rules: contentwarehouse.GoogleCloudContentwarehouseV1RuleArray{
&contentwarehouse.GoogleCloudContentwarehouseV1RuleArgs{
Actions: contentwarehouse.GoogleCloudContentwarehouseV1ActionArray{
&contentwarehouse.GoogleCloudContentwarehouseV1ActionArgs{
AccessControl: &contentwarehouse.GoogleCloudContentwarehouseV1AccessControlActionArgs{
OperationType: contentwarehouse.GoogleCloudContentwarehouseV1AccessControlActionOperationTypeUnknown,
Policy: &contentwarehouse.GoogleIamV1PolicyArgs{
AuditConfigs: contentwarehouse.GoogleIamV1AuditConfigArray{
&contentwarehouse.GoogleIamV1AuditConfigArgs{
AuditLogConfigs: contentwarehouse.GoogleIamV1AuditLogConfigArray{
&contentwarehouse.GoogleIamV1AuditLogConfigArgs{
ExemptedMembers: pulumi.StringArray{
pulumi.String("string"),
},
LogType: contentwarehouse.GoogleIamV1AuditLogConfigLogTypeLogTypeUnspecified,
},
},
Service: pulumi.String("string"),
},
},
Bindings: contentwarehouse.GoogleIamV1BindingArray{
&contentwarehouse.GoogleIamV1BindingArgs{
Condition: &contentwarehouse.GoogleTypeExprArgs{
Description: pulumi.String("string"),
Expression: pulumi.String("string"),
Location: pulumi.String("string"),
Title: pulumi.String("string"),
},
Members: pulumi.StringArray{
pulumi.String("string"),
},
Role: pulumi.String("string"),
},
},
Etag: pulumi.String("string"),
Version: pulumi.Int(0),
},
},
ActionId: pulumi.String("string"),
AddToFolder: &contentwarehouse.GoogleCloudContentwarehouseV1AddToFolderActionArgs{
Folders: pulumi.StringArray{
pulumi.String("string"),
},
},
DataUpdate: &contentwarehouse.GoogleCloudContentwarehouseV1DataUpdateActionArgs{
Entries: pulumi.StringMap{
"string": pulumi.String("string"),
},
},
DataValidation: &contentwarehouse.GoogleCloudContentwarehouseV1DataValidationActionArgs{
Conditions: pulumi.StringMap{
"string": pulumi.String("string"),
},
},
DeleteDocumentAction: &contentwarehouse.GoogleCloudContentwarehouseV1DeleteDocumentActionArgs{
EnableHardDelete: pulumi.Bool(false),
},
PublishToPubSub: &contentwarehouse.GoogleCloudContentwarehouseV1PublishActionArgs{
Messages: pulumi.StringArray{
pulumi.String("string"),
},
TopicId: pulumi.String("string"),
},
RemoveFromFolderAction: &contentwarehouse.GoogleCloudContentwarehouseV1RemoveFromFolderActionArgs{
Condition: pulumi.String("string"),
Folder: pulumi.String("string"),
},
},
},
Condition: pulumi.String("string"),
Description: pulumi.String("string"),
RuleId: pulumi.String("string"),
TriggerType: contentwarehouse.GoogleCloudContentwarehouseV1RuleTriggerTypeUnknown,
},
},
Source: pulumi.String("string"),
})

    var ruleSetResource = new RuleSet("ruleSetResource", RuleSetArgs.builder()        
    .description("string")
    .location("string")
    .name("string")
    .project("string")
    .rules(GoogleCloudContentwarehouseV1RuleArgs.builder()
        .actions(GoogleCloudContentwarehouseV1ActionArgs.builder()
            .accessControl(GoogleCloudContentwarehouseV1AccessControlActionArgs.builder()
                .operationType("UNKNOWN")
                .policy(GoogleIamV1PolicyArgs.builder()
                    .auditConfigs(GoogleIamV1AuditConfigArgs.builder()
                        .auditLogConfigs(GoogleIamV1AuditLogConfigArgs.builder()
                            .exemptedMembers("string")
                            .logType("LOG_TYPE_UNSPECIFIED")
                            .build())
                        .service("string")
                        .build())
                    .bindings(GoogleIamV1BindingArgs.builder()
                        .condition(GoogleTypeExprArgs.builder()
                            .description("string")
                            .expression("string")
                            .location("string")
                            .title("string")
                            .build())
                        .members("string")
                        .role("string")
                        .build())
                    .etag("string")
                    .version(0)
                    .build())
                .build())
            .actionId("string")
            .addToFolder(GoogleCloudContentwarehouseV1AddToFolderActionArgs.builder()
                .folders("string")
                .build())
            .dataUpdate(GoogleCloudContentwarehouseV1DataUpdateActionArgs.builder()
                .entries(Map.of("string", "string"))
                .build())
            .dataValidation(GoogleCloudContentwarehouseV1DataValidationActionArgs.builder()
                .conditions(Map.of("string", "string"))
                .build())
            .deleteDocumentAction(GoogleCloudContentwarehouseV1DeleteDocumentActionArgs.builder()
                .enableHardDelete(false)
                .build())
            .publishToPubSub(GoogleCloudContentwarehouseV1PublishActionArgs.builder()
                .messages("string")
                .topicId("string")
                .build())
            .removeFromFolderAction(GoogleCloudContentwarehouseV1RemoveFromFolderActionArgs.builder()
                .condition("string")
                .folder("string")
                .build())
            .build())
        .condition("string")
        .description("string")
        .ruleId("string")
        .triggerType("UNKNOWN")
        .build())
    .source("string")
    .build());

    rule_set_resource = google_native.contentwarehouse.v1.RuleSet("ruleSetResource",
    description="string",
    location="string",
    name="string",
    project="string",
    rules=[google_native.contentwarehouse.v1.GoogleCloudContentwarehouseV1RuleArgs(
        actions=[google_native.contentwarehouse.v1.GoogleCloudContentwarehouseV1ActionArgs(
            access_control=google_native.contentwarehouse.v1.GoogleCloudContentwarehouseV1AccessControlActionArgs(
                operation_type=google_native.contentwarehouse.v1.GoogleCloudContentwarehouseV1AccessControlActionOperationType.UNKNOWN,
                policy=google_native.contentwarehouse.v1.GoogleIamV1PolicyArgs(
                    audit_configs=[google_native.contentwarehouse.v1.GoogleIamV1AuditConfigArgs(
                        audit_log_configs=[google_native.contentwarehouse.v1.GoogleIamV1AuditLogConfigArgs(
                            exempted_members=["string"],
                            log_type=google_native.contentwarehouse.v1.GoogleIamV1AuditLogConfigLogType.LOG_TYPE_UNSPECIFIED,
                        )],
                        service="string",
                    )],
                    bindings=[google_native.contentwarehouse.v1.GoogleIamV1BindingArgs(
                        condition=google_native.contentwarehouse.v1.GoogleTypeExprArgs(
                            description="string",
                            expression="string",
                            location="string",
                            title="string",
                        ),
                        members=["string"],
                        role="string",
                    )],
                    etag="string",
                    version=0,
                ),
            ),
            action_id="string",
            add_to_folder=google_native.contentwarehouse.v1.GoogleCloudContentwarehouseV1AddToFolderActionArgs(
                folders=["string"],
            ),
            data_update=google_native.contentwarehouse.v1.GoogleCloudContentwarehouseV1DataUpdateActionArgs(
                entries={
                    "string": "string",
                },
            ),
            data_validation=google_native.contentwarehouse.v1.GoogleCloudContentwarehouseV1DataValidationActionArgs(
                conditions={
                    "string": "string",
                },
            ),
            delete_document_action=google_native.contentwarehouse.v1.GoogleCloudContentwarehouseV1DeleteDocumentActionArgs(
                enable_hard_delete=False,
            ),
            publish_to_pub_sub=google_native.contentwarehouse.v1.GoogleCloudContentwarehouseV1PublishActionArgs(
                messages=["string"],
                topic_id="string",
            ),
            remove_from_folder_action=google_native.contentwarehouse.v1.GoogleCloudContentwarehouseV1RemoveFromFolderActionArgs(
                condition="string",
                folder="string",
            ),
        )],
        condition="string",
        description="string",
        rule_id="string",
        trigger_type=google_native.contentwarehouse.v1.GoogleCloudContentwarehouseV1RuleTriggerType.UNKNOWN,
    )],
    source="string")

    const ruleSetResource = new google_native.contentwarehouse.v1.RuleSet("ruleSetResource", {
    description: "string",
    location: "string",
    name: "string",
    project: "string",
    rules: [{
        actions: [{
            accessControl: {
                operationType: google_native.contentwarehouse.v1.GoogleCloudContentwarehouseV1AccessControlActionOperationType.Unknown,
                policy: {
                    auditConfigs: [{
                        auditLogConfigs: [{
                            exemptedMembers: ["string"],
                            logType: google_native.contentwarehouse.v1.GoogleIamV1AuditLogConfigLogType.LogTypeUnspecified,
                        }],
                        service: "string",
                    }],
                    bindings: [{
                        condition: {
                            description: "string",
                            expression: "string",
                            location: "string",
                            title: "string",
                        },
                        members: ["string"],
                        role: "string",
                    }],
                    etag: "string",
                    version: 0,
                },
            },
            actionId: "string",
            addToFolder: {
                folders: ["string"],
            },
            dataUpdate: {
                entries: {
                    string: "string",
                },
            },
            dataValidation: {
                conditions: {
                    string: "string",
                },
            },
            deleteDocumentAction: {
                enableHardDelete: false,
            },
            publishToPubSub: {
                messages: ["string"],
                topicId: "string",
            },
            removeFromFolderAction: {
                condition: "string",
                folder: "string",
            },
        }],
        condition: "string",
        description: "string",
        ruleId: "string",
        triggerType: google_native.contentwarehouse.v1.GoogleCloudContentwarehouseV1RuleTriggerType.Unknown,
    }],
    source: "string",
});

    type: google-native:contentwarehouse/v1:RuleSet
properties:
    description: string
    location: string
    name: string
    project: string
    rules:
        - actions:
            - accessControl:
                operationType: UNKNOWN
                policy:
                    auditConfigs:
                        - auditLogConfigs:
                            - exemptedMembers:
                                - string
                              logType: LOG_TYPE_UNSPECIFIED
                          service: string
                    bindings:
                        - condition:
                            description: string
                            expression: string
                            location: string
                            title: string
                          members:
                            - string
                          role: string
                    etag: string
                    version: 0
              actionId: string
              addToFolder:
                folders:
                    - string
              dataUpdate:
                entries:
                    string: string
              dataValidation:
                conditions:
                    string: string
              deleteDocumentAction:
                enableHardDelete: false
              publishToPubSub:
                messages:
                    - string
                topicId: string
              removeFromFolderAction:
                condition: string
                folder: string
          condition: string
          description: string
          ruleId: string
          triggerType: UNKNOWN
    source: string

    RuleSet Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The RuleSet resource accepts the following input properties:

    Description string
    Short description of the rule-set.
    Location string
    Name string
    The resource name of the rule set. Managed internally. Format: projects/{project_number}/locations/{location}/ruleSet/{rule_set_id}. The name is ignored when creating a rule set.
    Project string
    Rules List<Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1Rule>
    List of rules given by the customer.
    Source string
    Source of the rules i.e., customer name.
    Description string
    Short description of the rule-set.
    Location string
    Name string
    The resource name of the rule set. Managed internally. Format: projects/{project_number}/locations/{location}/ruleSet/{rule_set_id}. The name is ignored when creating a rule set.
    Project string
    Rules []GoogleCloudContentwarehouseV1RuleArgs
    List of rules given by the customer.
    Source string
    Source of the rules i.e., customer name.
    description String
    Short description of the rule-set.
    location String
    name String
    The resource name of the rule set. Managed internally. Format: projects/{project_number}/locations/{location}/ruleSet/{rule_set_id}. The name is ignored when creating a rule set.
    project String
    rules List<GoogleCloudContentwarehouseV1Rule>
    List of rules given by the customer.
    source String
    Source of the rules i.e., customer name.
    description string
    Short description of the rule-set.
    location string
    name string
    The resource name of the rule set. Managed internally. Format: projects/{project_number}/locations/{location}/ruleSet/{rule_set_id}. The name is ignored when creating a rule set.
    project string
    rules GoogleCloudContentwarehouseV1Rule[]
    List of rules given by the customer.
    source string
    Source of the rules i.e., customer name.
    description str
    Short description of the rule-set.
    location str
    name str
    The resource name of the rule set. Managed internally. Format: projects/{project_number}/locations/{location}/ruleSet/{rule_set_id}. The name is ignored when creating a rule set.
    project str
    rules Sequence[GoogleCloudContentwarehouseV1RuleArgs]
    List of rules given by the customer.
    source str
    Source of the rules i.e., customer name.
    description String
    Short description of the rule-set.
    location String
    name String
    The resource name of the rule set. Managed internally. Format: projects/{project_number}/locations/{location}/ruleSet/{rule_set_id}. The name is ignored when creating a rule set.
    project String
    rules List<Property Map>
    List of rules given by the customer.
    source String
    Source of the rules i.e., customer name.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the RuleSet resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Supporting Types

    GoogleCloudContentwarehouseV1AccessControlAction, GoogleCloudContentwarehouseV1AccessControlActionArgs

    OperationType Pulumi.GoogleNative.Contentwarehouse.V1.GoogleCloudContentwarehouseV1AccessControlActionOperationType
    Identifies the type of operation.
    Policy Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleIamV1Policy
    Represents the new policy from which bindings are added, removed or replaced based on the type of the operation. the policy is limited to a few 10s of KB.
    OperationType GoogleCloudContentwarehouseV1AccessControlActionOperationType
    Identifies the type of operation.
    Policy GoogleIamV1Policy
    Represents the new policy from which bindings are added, removed or replaced based on the type of the operation. the policy is limited to a few 10s of KB.
    operationType GoogleCloudContentwarehouseV1AccessControlActionOperationType
    Identifies the type of operation.
    policy GoogleIamV1Policy
    Represents the new policy from which bindings are added, removed or replaced based on the type of the operation. the policy is limited to a few 10s of KB.
    operationType GoogleCloudContentwarehouseV1AccessControlActionOperationType
    Identifies the type of operation.
    policy GoogleIamV1Policy
    Represents the new policy from which bindings are added, removed or replaced based on the type of the operation. the policy is limited to a few 10s of KB.
    operation_type GoogleCloudContentwarehouseV1AccessControlActionOperationType
    Identifies the type of operation.
    policy GoogleIamV1Policy
    Represents the new policy from which bindings are added, removed or replaced based on the type of the operation. the policy is limited to a few 10s of KB.
    operationType "UNKNOWN" | "ADD_POLICY_BINDING" | "REMOVE_POLICY_BINDING" | "REPLACE_POLICY_BINDING"
    Identifies the type of operation.
    policy Property Map
    Represents the new policy from which bindings are added, removed or replaced based on the type of the operation. the policy is limited to a few 10s of KB.

    GoogleCloudContentwarehouseV1AccessControlActionOperationType, GoogleCloudContentwarehouseV1AccessControlActionOperationTypeArgs

    Unknown
    UNKNOWNThe unknown operation type.
    AddPolicyBinding
    ADD_POLICY_BINDINGAdds newly given policy bindings in the existing bindings list.
    RemovePolicyBinding
    REMOVE_POLICY_BINDINGRemoves newly given policy bindings from the existing bindings list.
    ReplacePolicyBinding
    REPLACE_POLICY_BINDINGReplaces existing policy bindings with the given policy binding list
    GoogleCloudContentwarehouseV1AccessControlActionOperationTypeUnknown
    UNKNOWNThe unknown operation type.
    GoogleCloudContentwarehouseV1AccessControlActionOperationTypeAddPolicyBinding
    ADD_POLICY_BINDINGAdds newly given policy bindings in the existing bindings list.
    GoogleCloudContentwarehouseV1AccessControlActionOperationTypeRemovePolicyBinding
    REMOVE_POLICY_BINDINGRemoves newly given policy bindings from the existing bindings list.
    GoogleCloudContentwarehouseV1AccessControlActionOperationTypeReplacePolicyBinding
    REPLACE_POLICY_BINDINGReplaces existing policy bindings with the given policy binding list
    Unknown
    UNKNOWNThe unknown operation type.
    AddPolicyBinding
    ADD_POLICY_BINDINGAdds newly given policy bindings in the existing bindings list.
    RemovePolicyBinding
    REMOVE_POLICY_BINDINGRemoves newly given policy bindings from the existing bindings list.
    ReplacePolicyBinding
    REPLACE_POLICY_BINDINGReplaces existing policy bindings with the given policy binding list
    Unknown
    UNKNOWNThe unknown operation type.
    AddPolicyBinding
    ADD_POLICY_BINDINGAdds newly given policy bindings in the existing bindings list.
    RemovePolicyBinding
    REMOVE_POLICY_BINDINGRemoves newly given policy bindings from the existing bindings list.
    ReplacePolicyBinding
    REPLACE_POLICY_BINDINGReplaces existing policy bindings with the given policy binding list
    UNKNOWN
    UNKNOWNThe unknown operation type.
    ADD_POLICY_BINDING
    ADD_POLICY_BINDINGAdds newly given policy bindings in the existing bindings list.
    REMOVE_POLICY_BINDING
    REMOVE_POLICY_BINDINGRemoves newly given policy bindings from the existing bindings list.
    REPLACE_POLICY_BINDING
    REPLACE_POLICY_BINDINGReplaces existing policy bindings with the given policy binding list
    "UNKNOWN"
    UNKNOWNThe unknown operation type.
    "ADD_POLICY_BINDING"
    ADD_POLICY_BINDINGAdds newly given policy bindings in the existing bindings list.
    "REMOVE_POLICY_BINDING"
    REMOVE_POLICY_BINDINGRemoves newly given policy bindings from the existing bindings list.
    "REPLACE_POLICY_BINDING"
    REPLACE_POLICY_BINDINGReplaces existing policy bindings with the given policy binding list

    GoogleCloudContentwarehouseV1AccessControlActionResponse, GoogleCloudContentwarehouseV1AccessControlActionResponseArgs

    OperationType string
    Identifies the type of operation.
    Policy Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleIamV1PolicyResponse
    Represents the new policy from which bindings are added, removed or replaced based on the type of the operation. the policy is limited to a few 10s of KB.
    OperationType string
    Identifies the type of operation.
    Policy GoogleIamV1PolicyResponse
    Represents the new policy from which bindings are added, removed or replaced based on the type of the operation. the policy is limited to a few 10s of KB.
    operationType String
    Identifies the type of operation.
    policy GoogleIamV1PolicyResponse
    Represents the new policy from which bindings are added, removed or replaced based on the type of the operation. the policy is limited to a few 10s of KB.
    operationType string
    Identifies the type of operation.
    policy GoogleIamV1PolicyResponse
    Represents the new policy from which bindings are added, removed or replaced based on the type of the operation. the policy is limited to a few 10s of KB.
    operation_type str
    Identifies the type of operation.
    policy GoogleIamV1PolicyResponse
    Represents the new policy from which bindings are added, removed or replaced based on the type of the operation. the policy is limited to a few 10s of KB.
    operationType String
    Identifies the type of operation.
    policy Property Map
    Represents the new policy from which bindings are added, removed or replaced based on the type of the operation. the policy is limited to a few 10s of KB.

    GoogleCloudContentwarehouseV1Action, GoogleCloudContentwarehouseV1ActionArgs

    AccessControl Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1AccessControlAction
    Action triggering access control operations.
    ActionId string
    ID of the action. Managed internally.
    AddToFolder Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1AddToFolderAction
    Action triggering create document link operation.
    DataUpdate Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1DataUpdateAction
    Action triggering data update operations.
    DataValidation Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1DataValidationAction
    Action triggering data validation operations.
    DeleteDocumentAction Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1DeleteDocumentAction
    Action deleting the document.
    PublishToPubSub Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1PublishAction
    Action publish to Pub/Sub operation.
    RemoveFromFolderAction Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1RemoveFromFolderAction
    Action removing a document from a folder.
    AccessControl GoogleCloudContentwarehouseV1AccessControlAction
    Action triggering access control operations.
    ActionId string
    ID of the action. Managed internally.
    AddToFolder GoogleCloudContentwarehouseV1AddToFolderAction
    Action triggering create document link operation.
    DataUpdate GoogleCloudContentwarehouseV1DataUpdateAction
    Action triggering data update operations.
    DataValidation GoogleCloudContentwarehouseV1DataValidationAction
    Action triggering data validation operations.
    DeleteDocumentAction GoogleCloudContentwarehouseV1DeleteDocumentAction
    Action deleting the document.
    PublishToPubSub GoogleCloudContentwarehouseV1PublishAction
    Action publish to Pub/Sub operation.
    RemoveFromFolderAction GoogleCloudContentwarehouseV1RemoveFromFolderAction
    Action removing a document from a folder.
    accessControl GoogleCloudContentwarehouseV1AccessControlAction
    Action triggering access control operations.
    actionId String
    ID of the action. Managed internally.
    addToFolder GoogleCloudContentwarehouseV1AddToFolderAction
    Action triggering create document link operation.
    dataUpdate GoogleCloudContentwarehouseV1DataUpdateAction
    Action triggering data update operations.
    dataValidation GoogleCloudContentwarehouseV1DataValidationAction
    Action triggering data validation operations.
    deleteDocumentAction GoogleCloudContentwarehouseV1DeleteDocumentAction
    Action deleting the document.
    publishToPubSub GoogleCloudContentwarehouseV1PublishAction
    Action publish to Pub/Sub operation.
    removeFromFolderAction GoogleCloudContentwarehouseV1RemoveFromFolderAction
    Action removing a document from a folder.
    accessControl GoogleCloudContentwarehouseV1AccessControlAction
    Action triggering access control operations.
    actionId string
    ID of the action. Managed internally.
    addToFolder GoogleCloudContentwarehouseV1AddToFolderAction
    Action triggering create document link operation.
    dataUpdate GoogleCloudContentwarehouseV1DataUpdateAction
    Action triggering data update operations.
    dataValidation GoogleCloudContentwarehouseV1DataValidationAction
    Action triggering data validation operations.
    deleteDocumentAction GoogleCloudContentwarehouseV1DeleteDocumentAction
    Action deleting the document.
    publishToPubSub GoogleCloudContentwarehouseV1PublishAction
    Action publish to Pub/Sub operation.
    removeFromFolderAction GoogleCloudContentwarehouseV1RemoveFromFolderAction
    Action removing a document from a folder.
    access_control GoogleCloudContentwarehouseV1AccessControlAction
    Action triggering access control operations.
    action_id str
    ID of the action. Managed internally.
    add_to_folder GoogleCloudContentwarehouseV1AddToFolderAction
    Action triggering create document link operation.
    data_update GoogleCloudContentwarehouseV1DataUpdateAction
    Action triggering data update operations.
    data_validation GoogleCloudContentwarehouseV1DataValidationAction
    Action triggering data validation operations.
    delete_document_action GoogleCloudContentwarehouseV1DeleteDocumentAction
    Action deleting the document.
    publish_to_pub_sub GoogleCloudContentwarehouseV1PublishAction
    Action publish to Pub/Sub operation.
    remove_from_folder_action GoogleCloudContentwarehouseV1RemoveFromFolderAction
    Action removing a document from a folder.
    accessControl Property Map
    Action triggering access control operations.
    actionId String
    ID of the action. Managed internally.
    addToFolder Property Map
    Action triggering create document link operation.
    dataUpdate Property Map
    Action triggering data update operations.
    dataValidation Property Map
    Action triggering data validation operations.
    deleteDocumentAction Property Map
    Action deleting the document.
    publishToPubSub Property Map
    Action publish to Pub/Sub operation.
    removeFromFolderAction Property Map
    Action removing a document from a folder.

    GoogleCloudContentwarehouseV1ActionResponse, GoogleCloudContentwarehouseV1ActionResponseArgs

    AccessControl Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1AccessControlActionResponse
    Action triggering access control operations.
    ActionId string
    ID of the action. Managed internally.
    AddToFolder Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1AddToFolderActionResponse
    Action triggering create document link operation.
    DataUpdate Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1DataUpdateActionResponse
    Action triggering data update operations.
    DataValidation Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1DataValidationActionResponse
    Action triggering data validation operations.
    DeleteDocumentAction Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1DeleteDocumentActionResponse
    Action deleting the document.
    PublishToPubSub Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1PublishActionResponse
    Action publish to Pub/Sub operation.
    RemoveFromFolderAction Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1RemoveFromFolderActionResponse
    Action removing a document from a folder.
    AccessControl GoogleCloudContentwarehouseV1AccessControlActionResponse
    Action triggering access control operations.
    ActionId string
    ID of the action. Managed internally.
    AddToFolder GoogleCloudContentwarehouseV1AddToFolderActionResponse
    Action triggering create document link operation.
    DataUpdate GoogleCloudContentwarehouseV1DataUpdateActionResponse
    Action triggering data update operations.
    DataValidation GoogleCloudContentwarehouseV1DataValidationActionResponse
    Action triggering data validation operations.
    DeleteDocumentAction GoogleCloudContentwarehouseV1DeleteDocumentActionResponse
    Action deleting the document.
    PublishToPubSub GoogleCloudContentwarehouseV1PublishActionResponse
    Action publish to Pub/Sub operation.
    RemoveFromFolderAction GoogleCloudContentwarehouseV1RemoveFromFolderActionResponse
    Action removing a document from a folder.
    accessControl GoogleCloudContentwarehouseV1AccessControlActionResponse
    Action triggering access control operations.
    actionId String
    ID of the action. Managed internally.
    addToFolder GoogleCloudContentwarehouseV1AddToFolderActionResponse
    Action triggering create document link operation.
    dataUpdate GoogleCloudContentwarehouseV1DataUpdateActionResponse
    Action triggering data update operations.
    dataValidation GoogleCloudContentwarehouseV1DataValidationActionResponse
    Action triggering data validation operations.
    deleteDocumentAction GoogleCloudContentwarehouseV1DeleteDocumentActionResponse
    Action deleting the document.
    publishToPubSub GoogleCloudContentwarehouseV1PublishActionResponse
    Action publish to Pub/Sub operation.
    removeFromFolderAction GoogleCloudContentwarehouseV1RemoveFromFolderActionResponse
    Action removing a document from a folder.
    accessControl GoogleCloudContentwarehouseV1AccessControlActionResponse
    Action triggering access control operations.
    actionId string
    ID of the action. Managed internally.
    addToFolder GoogleCloudContentwarehouseV1AddToFolderActionResponse
    Action triggering create document link operation.
    dataUpdate GoogleCloudContentwarehouseV1DataUpdateActionResponse
    Action triggering data update operations.
    dataValidation GoogleCloudContentwarehouseV1DataValidationActionResponse
    Action triggering data validation operations.
    deleteDocumentAction GoogleCloudContentwarehouseV1DeleteDocumentActionResponse
    Action deleting the document.
    publishToPubSub GoogleCloudContentwarehouseV1PublishActionResponse
    Action publish to Pub/Sub operation.
    removeFromFolderAction GoogleCloudContentwarehouseV1RemoveFromFolderActionResponse
    Action removing a document from a folder.
    access_control GoogleCloudContentwarehouseV1AccessControlActionResponse
    Action triggering access control operations.
    action_id str
    ID of the action. Managed internally.
    add_to_folder GoogleCloudContentwarehouseV1AddToFolderActionResponse
    Action triggering create document link operation.
    data_update GoogleCloudContentwarehouseV1DataUpdateActionResponse
    Action triggering data update operations.
    data_validation GoogleCloudContentwarehouseV1DataValidationActionResponse
    Action triggering data validation operations.
    delete_document_action GoogleCloudContentwarehouseV1DeleteDocumentActionResponse
    Action deleting the document.
    publish_to_pub_sub GoogleCloudContentwarehouseV1PublishActionResponse
    Action publish to Pub/Sub operation.
    remove_from_folder_action GoogleCloudContentwarehouseV1RemoveFromFolderActionResponse
    Action removing a document from a folder.
    accessControl Property Map
    Action triggering access control operations.
    actionId String
    ID of the action. Managed internally.
    addToFolder Property Map
    Action triggering create document link operation.
    dataUpdate Property Map
    Action triggering data update operations.
    dataValidation Property Map
    Action triggering data validation operations.
    deleteDocumentAction Property Map
    Action deleting the document.
    publishToPubSub Property Map
    Action publish to Pub/Sub operation.
    removeFromFolderAction Property Map
    Action removing a document from a folder.

    GoogleCloudContentwarehouseV1AddToFolderAction, GoogleCloudContentwarehouseV1AddToFolderActionArgs

    Folders List<string>
    Names of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.
    Folders []string
    Names of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.
    folders List<String>
    Names of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.
    folders string[]
    Names of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.
    folders Sequence[str]
    Names of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.
    folders List<String>
    Names of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.

    GoogleCloudContentwarehouseV1AddToFolderActionResponse, GoogleCloudContentwarehouseV1AddToFolderActionResponseArgs

    Folders List<string>
    Names of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.
    Folders []string
    Names of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.
    folders List<String>
    Names of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.
    folders string[]
    Names of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.
    folders Sequence[str]
    Names of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.
    folders List<String>
    Names of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.

    GoogleCloudContentwarehouseV1DataUpdateAction, GoogleCloudContentwarehouseV1DataUpdateActionArgs

    Entries Dictionary<string, string>
    Map of (K, V) -> (valid name of the field, new value of the field) E.g., ("age", "60") entry triggers update of field age with a value of 60. If the field is not present then new entry is added. During update action execution, value strings will be casted to appropriate types.
    Entries map[string]string
    Map of (K, V) -> (valid name of the field, new value of the field) E.g., ("age", "60") entry triggers update of field age with a value of 60. If the field is not present then new entry is added. During update action execution, value strings will be casted to appropriate types.
    entries Map<String,String>
    Map of (K, V) -> (valid name of the field, new value of the field) E.g., ("age", "60") entry triggers update of field age with a value of 60. If the field is not present then new entry is added. During update action execution, value strings will be casted to appropriate types.
    entries {[key: string]: string}
    Map of (K, V) -> (valid name of the field, new value of the field) E.g., ("age", "60") entry triggers update of field age with a value of 60. If the field is not present then new entry is added. During update action execution, value strings will be casted to appropriate types.
    entries Mapping[str, str]
    Map of (K, V) -> (valid name of the field, new value of the field) E.g., ("age", "60") entry triggers update of field age with a value of 60. If the field is not present then new entry is added. During update action execution, value strings will be casted to appropriate types.
    entries Map<String>
    Map of (K, V) -> (valid name of the field, new value of the field) E.g., ("age", "60") entry triggers update of field age with a value of 60. If the field is not present then new entry is added. During update action execution, value strings will be casted to appropriate types.

    GoogleCloudContentwarehouseV1DataUpdateActionResponse, GoogleCloudContentwarehouseV1DataUpdateActionResponseArgs

    Entries Dictionary<string, string>
    Map of (K, V) -> (valid name of the field, new value of the field) E.g., ("age", "60") entry triggers update of field age with a value of 60. If the field is not present then new entry is added. During update action execution, value strings will be casted to appropriate types.
    Entries map[string]string
    Map of (K, V) -> (valid name of the field, new value of the field) E.g., ("age", "60") entry triggers update of field age with a value of 60. If the field is not present then new entry is added. During update action execution, value strings will be casted to appropriate types.
    entries Map<String,String>
    Map of (K, V) -> (valid name of the field, new value of the field) E.g., ("age", "60") entry triggers update of field age with a value of 60. If the field is not present then new entry is added. During update action execution, value strings will be casted to appropriate types.
    entries {[key: string]: string}
    Map of (K, V) -> (valid name of the field, new value of the field) E.g., ("age", "60") entry triggers update of field age with a value of 60. If the field is not present then new entry is added. During update action execution, value strings will be casted to appropriate types.
    entries Mapping[str, str]
    Map of (K, V) -> (valid name of the field, new value of the field) E.g., ("age", "60") entry triggers update of field age with a value of 60. If the field is not present then new entry is added. During update action execution, value strings will be casted to appropriate types.
    entries Map<String>
    Map of (K, V) -> (valid name of the field, new value of the field) E.g., ("age", "60") entry triggers update of field age with a value of 60. If the field is not present then new entry is added. During update action execution, value strings will be casted to appropriate types.

    GoogleCloudContentwarehouseV1DataValidationAction, GoogleCloudContentwarehouseV1DataValidationActionArgs

    Conditions Dictionary<string, string>
    Map of (K, V) -> (field, string condition to be evaluated on the field) E.g., ("age", "age > 18 && age < 60") entry triggers validation of field age with the given condition. Map entries will be ANDed during validation.
    Conditions map[string]string
    Map of (K, V) -> (field, string condition to be evaluated on the field) E.g., ("age", "age > 18 && age < 60") entry triggers validation of field age with the given condition. Map entries will be ANDed during validation.
    conditions Map<String,String>
    Map of (K, V) -> (field, string condition to be evaluated on the field) E.g., ("age", "age > 18 && age < 60") entry triggers validation of field age with the given condition. Map entries will be ANDed during validation.
    conditions {[key: string]: string}
    Map of (K, V) -> (field, string condition to be evaluated on the field) E.g., ("age", "age > 18 && age < 60") entry triggers validation of field age with the given condition. Map entries will be ANDed during validation.
    conditions Mapping[str, str]
    Map of (K, V) -> (field, string condition to be evaluated on the field) E.g., ("age", "age > 18 && age < 60") entry triggers validation of field age with the given condition. Map entries will be ANDed during validation.
    conditions Map<String>
    Map of (K, V) -> (field, string condition to be evaluated on the field) E.g., ("age", "age > 18 && age < 60") entry triggers validation of field age with the given condition. Map entries will be ANDed during validation.

    GoogleCloudContentwarehouseV1DataValidationActionResponse, GoogleCloudContentwarehouseV1DataValidationActionResponseArgs

    Conditions Dictionary<string, string>
    Map of (K, V) -> (field, string condition to be evaluated on the field) E.g., ("age", "age > 18 && age < 60") entry triggers validation of field age with the given condition. Map entries will be ANDed during validation.
    Conditions map[string]string
    Map of (K, V) -> (field, string condition to be evaluated on the field) E.g., ("age", "age > 18 && age < 60") entry triggers validation of field age with the given condition. Map entries will be ANDed during validation.
    conditions Map<String,String>
    Map of (K, V) -> (field, string condition to be evaluated on the field) E.g., ("age", "age > 18 && age < 60") entry triggers validation of field age with the given condition. Map entries will be ANDed during validation.
    conditions {[key: string]: string}
    Map of (K, V) -> (field, string condition to be evaluated on the field) E.g., ("age", "age > 18 && age < 60") entry triggers validation of field age with the given condition. Map entries will be ANDed during validation.
    conditions Mapping[str, str]
    Map of (K, V) -> (field, string condition to be evaluated on the field) E.g., ("age", "age > 18 && age < 60") entry triggers validation of field age with the given condition. Map entries will be ANDed during validation.
    conditions Map<String>
    Map of (K, V) -> (field, string condition to be evaluated on the field) E.g., ("age", "age > 18 && age < 60") entry triggers validation of field age with the given condition. Map entries will be ANDed during validation.

    GoogleCloudContentwarehouseV1DeleteDocumentAction, GoogleCloudContentwarehouseV1DeleteDocumentActionArgs

    EnableHardDelete bool
    Boolean field to select between hard vs soft delete options. Set 'true' for 'hard delete' and 'false' for 'soft delete'.
    EnableHardDelete bool
    Boolean field to select between hard vs soft delete options. Set 'true' for 'hard delete' and 'false' for 'soft delete'.
    enableHardDelete Boolean
    Boolean field to select between hard vs soft delete options. Set 'true' for 'hard delete' and 'false' for 'soft delete'.
    enableHardDelete boolean
    Boolean field to select between hard vs soft delete options. Set 'true' for 'hard delete' and 'false' for 'soft delete'.
    enable_hard_delete bool
    Boolean field to select between hard vs soft delete options. Set 'true' for 'hard delete' and 'false' for 'soft delete'.
    enableHardDelete Boolean
    Boolean field to select between hard vs soft delete options. Set 'true' for 'hard delete' and 'false' for 'soft delete'.

    GoogleCloudContentwarehouseV1DeleteDocumentActionResponse, GoogleCloudContentwarehouseV1DeleteDocumentActionResponseArgs

    EnableHardDelete bool
    Boolean field to select between hard vs soft delete options. Set 'true' for 'hard delete' and 'false' for 'soft delete'.
    EnableHardDelete bool
    Boolean field to select between hard vs soft delete options. Set 'true' for 'hard delete' and 'false' for 'soft delete'.
    enableHardDelete Boolean
    Boolean field to select between hard vs soft delete options. Set 'true' for 'hard delete' and 'false' for 'soft delete'.
    enableHardDelete boolean
    Boolean field to select between hard vs soft delete options. Set 'true' for 'hard delete' and 'false' for 'soft delete'.
    enable_hard_delete bool
    Boolean field to select between hard vs soft delete options. Set 'true' for 'hard delete' and 'false' for 'soft delete'.
    enableHardDelete Boolean
    Boolean field to select between hard vs soft delete options. Set 'true' for 'hard delete' and 'false' for 'soft delete'.

    GoogleCloudContentwarehouseV1PublishAction, GoogleCloudContentwarehouseV1PublishActionArgs

    Messages List<string>
    Messages to be published.
    TopicId string
    The topic id in the Pub/Sub service for which messages will be published to.
    Messages []string
    Messages to be published.
    TopicId string
    The topic id in the Pub/Sub service for which messages will be published to.
    messages List<String>
    Messages to be published.
    topicId String
    The topic id in the Pub/Sub service for which messages will be published to.
    messages string[]
    Messages to be published.
    topicId string
    The topic id in the Pub/Sub service for which messages will be published to.
    messages Sequence[str]
    Messages to be published.
    topic_id str
    The topic id in the Pub/Sub service for which messages will be published to.
    messages List<String>
    Messages to be published.
    topicId String
    The topic id in the Pub/Sub service for which messages will be published to.

    GoogleCloudContentwarehouseV1PublishActionResponse, GoogleCloudContentwarehouseV1PublishActionResponseArgs

    Messages List<string>
    Messages to be published.
    TopicId string
    The topic id in the Pub/Sub service for which messages will be published to.
    Messages []string
    Messages to be published.
    TopicId string
    The topic id in the Pub/Sub service for which messages will be published to.
    messages List<String>
    Messages to be published.
    topicId String
    The topic id in the Pub/Sub service for which messages will be published to.
    messages string[]
    Messages to be published.
    topicId string
    The topic id in the Pub/Sub service for which messages will be published to.
    messages Sequence[str]
    Messages to be published.
    topic_id str
    The topic id in the Pub/Sub service for which messages will be published to.
    messages List<String>
    Messages to be published.
    topicId String
    The topic id in the Pub/Sub service for which messages will be published to.

    GoogleCloudContentwarehouseV1RemoveFromFolderAction, GoogleCloudContentwarehouseV1RemoveFromFolderActionArgs

    Condition string
    Condition of the action to be executed.
    Folder string
    Name of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.
    Condition string
    Condition of the action to be executed.
    Folder string
    Name of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.
    condition String
    Condition of the action to be executed.
    folder String
    Name of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.
    condition string
    Condition of the action to be executed.
    folder string
    Name of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.
    condition str
    Condition of the action to be executed.
    folder str
    Name of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.
    condition String
    Condition of the action to be executed.
    folder String
    Name of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.

    GoogleCloudContentwarehouseV1RemoveFromFolderActionResponse, GoogleCloudContentwarehouseV1RemoveFromFolderActionResponseArgs

    Condition string
    Condition of the action to be executed.
    Folder string
    Name of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.
    Condition string
    Condition of the action to be executed.
    Folder string
    Name of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.
    condition String
    Condition of the action to be executed.
    folder String
    Name of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.
    condition string
    Condition of the action to be executed.
    folder string
    Name of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.
    condition str
    Condition of the action to be executed.
    folder str
    Name of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.
    condition String
    Condition of the action to be executed.
    folder String
    Name of the folder under which new document is to be added. Format: projects/{project_number}/locations/{location}/documents/{document_id}.

    GoogleCloudContentwarehouseV1Rule, GoogleCloudContentwarehouseV1RuleArgs

    Actions List<Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1Action>
    List of actions that are executed when the rule is satisfied.
    Condition string
    Represents the conditional expression to be evaluated. Expression should evaluate to a boolean result. When the condition is true actions are executed. Example: user_role = "hsbc_role_1" AND doc.salary > 20000
    Description string
    Short description of the rule and its context.
    RuleId string
    ID of the rule. It has to be unique across all the examples. This is managed internally.
    TriggerType Pulumi.GoogleNative.Contentwarehouse.V1.GoogleCloudContentwarehouseV1RuleTriggerType
    Identifies the trigger type for running the policy.
    Actions []GoogleCloudContentwarehouseV1Action
    List of actions that are executed when the rule is satisfied.
    Condition string
    Represents the conditional expression to be evaluated. Expression should evaluate to a boolean result. When the condition is true actions are executed. Example: user_role = "hsbc_role_1" AND doc.salary > 20000
    Description string
    Short description of the rule and its context.
    RuleId string
    ID of the rule. It has to be unique across all the examples. This is managed internally.
    TriggerType GoogleCloudContentwarehouseV1RuleTriggerType
    Identifies the trigger type for running the policy.
    actions List<GoogleCloudContentwarehouseV1Action>
    List of actions that are executed when the rule is satisfied.
    condition String
    Represents the conditional expression to be evaluated. Expression should evaluate to a boolean result. When the condition is true actions are executed. Example: user_role = "hsbc_role_1" AND doc.salary > 20000
    description String
    Short description of the rule and its context.
    ruleId String
    ID of the rule. It has to be unique across all the examples. This is managed internally.
    triggerType GoogleCloudContentwarehouseV1RuleTriggerType
    Identifies the trigger type for running the policy.
    actions GoogleCloudContentwarehouseV1Action[]
    List of actions that are executed when the rule is satisfied.
    condition string
    Represents the conditional expression to be evaluated. Expression should evaluate to a boolean result. When the condition is true actions are executed. Example: user_role = "hsbc_role_1" AND doc.salary > 20000
    description string
    Short description of the rule and its context.
    ruleId string
    ID of the rule. It has to be unique across all the examples. This is managed internally.
    triggerType GoogleCloudContentwarehouseV1RuleTriggerType
    Identifies the trigger type for running the policy.
    actions Sequence[GoogleCloudContentwarehouseV1Action]
    List of actions that are executed when the rule is satisfied.
    condition str
    Represents the conditional expression to be evaluated. Expression should evaluate to a boolean result. When the condition is true actions are executed. Example: user_role = "hsbc_role_1" AND doc.salary > 20000
    description str
    Short description of the rule and its context.
    rule_id str
    ID of the rule. It has to be unique across all the examples. This is managed internally.
    trigger_type GoogleCloudContentwarehouseV1RuleTriggerType
    Identifies the trigger type for running the policy.
    actions List<Property Map>
    List of actions that are executed when the rule is satisfied.
    condition String
    Represents the conditional expression to be evaluated. Expression should evaluate to a boolean result. When the condition is true actions are executed. Example: user_role = "hsbc_role_1" AND doc.salary > 20000
    description String
    Short description of the rule and its context.
    ruleId String
    ID of the rule. It has to be unique across all the examples. This is managed internally.
    triggerType "UNKNOWN" | "ON_CREATE" | "ON_UPDATE" | "ON_CREATE_LINK" | "ON_DELETE_LINK"
    Identifies the trigger type for running the policy.

    GoogleCloudContentwarehouseV1RuleResponse, GoogleCloudContentwarehouseV1RuleResponseArgs

    Actions List<Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleCloudContentwarehouseV1ActionResponse>
    List of actions that are executed when the rule is satisfied.
    Condition string
    Represents the conditional expression to be evaluated. Expression should evaluate to a boolean result. When the condition is true actions are executed. Example: user_role = "hsbc_role_1" AND doc.salary > 20000
    Description string
    Short description of the rule and its context.
    RuleId string
    ID of the rule. It has to be unique across all the examples. This is managed internally.
    TriggerType string
    Identifies the trigger type for running the policy.
    Actions []GoogleCloudContentwarehouseV1ActionResponse
    List of actions that are executed when the rule is satisfied.
    Condition string
    Represents the conditional expression to be evaluated. Expression should evaluate to a boolean result. When the condition is true actions are executed. Example: user_role = "hsbc_role_1" AND doc.salary > 20000
    Description string
    Short description of the rule and its context.
    RuleId string
    ID of the rule. It has to be unique across all the examples. This is managed internally.
    TriggerType string
    Identifies the trigger type for running the policy.
    actions List<GoogleCloudContentwarehouseV1ActionResponse>
    List of actions that are executed when the rule is satisfied.
    condition String
    Represents the conditional expression to be evaluated. Expression should evaluate to a boolean result. When the condition is true actions are executed. Example: user_role = "hsbc_role_1" AND doc.salary > 20000
    description String
    Short description of the rule and its context.
    ruleId String
    ID of the rule. It has to be unique across all the examples. This is managed internally.
    triggerType String
    Identifies the trigger type for running the policy.
    actions GoogleCloudContentwarehouseV1ActionResponse[]
    List of actions that are executed when the rule is satisfied.
    condition string
    Represents the conditional expression to be evaluated. Expression should evaluate to a boolean result. When the condition is true actions are executed. Example: user_role = "hsbc_role_1" AND doc.salary > 20000
    description string
    Short description of the rule and its context.
    ruleId string
    ID of the rule. It has to be unique across all the examples. This is managed internally.
    triggerType string
    Identifies the trigger type for running the policy.
    actions Sequence[GoogleCloudContentwarehouseV1ActionResponse]
    List of actions that are executed when the rule is satisfied.
    condition str
    Represents the conditional expression to be evaluated. Expression should evaluate to a boolean result. When the condition is true actions are executed. Example: user_role = "hsbc_role_1" AND doc.salary > 20000
    description str
    Short description of the rule and its context.
    rule_id str
    ID of the rule. It has to be unique across all the examples. This is managed internally.
    trigger_type str
    Identifies the trigger type for running the policy.
    actions List<Property Map>
    List of actions that are executed when the rule is satisfied.
    condition String
    Represents the conditional expression to be evaluated. Expression should evaluate to a boolean result. When the condition is true actions are executed. Example: user_role = "hsbc_role_1" AND doc.salary > 20000
    description String
    Short description of the rule and its context.
    ruleId String
    ID of the rule. It has to be unique across all the examples. This is managed internally.
    triggerType String
    Identifies the trigger type for running the policy.

    GoogleCloudContentwarehouseV1RuleTriggerType, GoogleCloudContentwarehouseV1RuleTriggerTypeArgs

    Unknown
    UNKNOWNTrigger for unknown action.
    OnCreate
    ON_CREATETrigger for create document action.
    OnUpdate
    ON_UPDATETrigger for update document action.
    OnCreateLink
    ON_CREATE_LINKTrigger for create link action.
    OnDeleteLink
    ON_DELETE_LINKTrigger for delete link action.
    GoogleCloudContentwarehouseV1RuleTriggerTypeUnknown
    UNKNOWNTrigger for unknown action.
    GoogleCloudContentwarehouseV1RuleTriggerTypeOnCreate
    ON_CREATETrigger for create document action.
    GoogleCloudContentwarehouseV1RuleTriggerTypeOnUpdate
    ON_UPDATETrigger for update document action.
    GoogleCloudContentwarehouseV1RuleTriggerTypeOnCreateLink
    ON_CREATE_LINKTrigger for create link action.
    GoogleCloudContentwarehouseV1RuleTriggerTypeOnDeleteLink
    ON_DELETE_LINKTrigger for delete link action.
    Unknown
    UNKNOWNTrigger for unknown action.
    OnCreate
    ON_CREATETrigger for create document action.
    OnUpdate
    ON_UPDATETrigger for update document action.
    OnCreateLink
    ON_CREATE_LINKTrigger for create link action.
    OnDeleteLink
    ON_DELETE_LINKTrigger for delete link action.
    Unknown
    UNKNOWNTrigger for unknown action.
    OnCreate
    ON_CREATETrigger for create document action.
    OnUpdate
    ON_UPDATETrigger for update document action.
    OnCreateLink
    ON_CREATE_LINKTrigger for create link action.
    OnDeleteLink
    ON_DELETE_LINKTrigger for delete link action.
    UNKNOWN
    UNKNOWNTrigger for unknown action.
    ON_CREATE
    ON_CREATETrigger for create document action.
    ON_UPDATE
    ON_UPDATETrigger for update document action.
    ON_CREATE_LINK
    ON_CREATE_LINKTrigger for create link action.
    ON_DELETE_LINK
    ON_DELETE_LINKTrigger for delete link action.
    "UNKNOWN"
    UNKNOWNTrigger for unknown action.
    "ON_CREATE"
    ON_CREATETrigger for create document action.
    "ON_UPDATE"
    ON_UPDATETrigger for update document action.
    "ON_CREATE_LINK"
    ON_CREATE_LINKTrigger for create link action.
    "ON_DELETE_LINK"
    ON_DELETE_LINKTrigger for delete link action.

    GoogleIamV1AuditConfig, GoogleIamV1AuditConfigArgs

    AuditLogConfigs List<Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleIamV1AuditLogConfig>
    The configuration for logging of each type of permission.
    Service string
    Specifies a service that will be enabled for audit logging. For example, storage.googleapis.com, cloudsql.googleapis.com. allServices is a special value that covers all services.
    AuditLogConfigs []GoogleIamV1AuditLogConfig
    The configuration for logging of each type of permission.
    Service string
    Specifies a service that will be enabled for audit logging. For example, storage.googleapis.com, cloudsql.googleapis.com. allServices is a special value that covers all services.
    auditLogConfigs List<GoogleIamV1AuditLogConfig>
    The configuration for logging of each type of permission.
    service String
    Specifies a service that will be enabled for audit logging. For example, storage.googleapis.com, cloudsql.googleapis.com. allServices is a special value that covers all services.
    auditLogConfigs GoogleIamV1AuditLogConfig[]
    The configuration for logging of each type of permission.
    service string
    Specifies a service that will be enabled for audit logging. For example, storage.googleapis.com, cloudsql.googleapis.com. allServices is a special value that covers all services.
    audit_log_configs Sequence[GoogleIamV1AuditLogConfig]
    The configuration for logging of each type of permission.
    service str
    Specifies a service that will be enabled for audit logging. For example, storage.googleapis.com, cloudsql.googleapis.com. allServices is a special value that covers all services.
    auditLogConfigs List<Property Map>
    The configuration for logging of each type of permission.
    service String
    Specifies a service that will be enabled for audit logging. For example, storage.googleapis.com, cloudsql.googleapis.com. allServices is a special value that covers all services.

    GoogleIamV1AuditConfigResponse, GoogleIamV1AuditConfigResponseArgs

    AuditLogConfigs List<Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleIamV1AuditLogConfigResponse>
    The configuration for logging of each type of permission.
    Service string
    Specifies a service that will be enabled for audit logging. For example, storage.googleapis.com, cloudsql.googleapis.com. allServices is a special value that covers all services.
    AuditLogConfigs []GoogleIamV1AuditLogConfigResponse
    The configuration for logging of each type of permission.
    Service string
    Specifies a service that will be enabled for audit logging. For example, storage.googleapis.com, cloudsql.googleapis.com. allServices is a special value that covers all services.
    auditLogConfigs List<GoogleIamV1AuditLogConfigResponse>
    The configuration for logging of each type of permission.
    service String
    Specifies a service that will be enabled for audit logging. For example, storage.googleapis.com, cloudsql.googleapis.com. allServices is a special value that covers all services.
    auditLogConfigs GoogleIamV1AuditLogConfigResponse[]
    The configuration for logging of each type of permission.
    service string
    Specifies a service that will be enabled for audit logging. For example, storage.googleapis.com, cloudsql.googleapis.com. allServices is a special value that covers all services.
    audit_log_configs Sequence[GoogleIamV1AuditLogConfigResponse]
    The configuration for logging of each type of permission.
    service str
    Specifies a service that will be enabled for audit logging. For example, storage.googleapis.com, cloudsql.googleapis.com. allServices is a special value that covers all services.
    auditLogConfigs List<Property Map>
    The configuration for logging of each type of permission.
    service String
    Specifies a service that will be enabled for audit logging. For example, storage.googleapis.com, cloudsql.googleapis.com. allServices is a special value that covers all services.

    GoogleIamV1AuditLogConfig, GoogleIamV1AuditLogConfigArgs

    ExemptedMembers List<string>
    Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
    LogType Pulumi.GoogleNative.Contentwarehouse.V1.GoogleIamV1AuditLogConfigLogType
    The log type that this config enables.
    ExemptedMembers []string
    Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
    LogType GoogleIamV1AuditLogConfigLogType
    The log type that this config enables.
    exemptedMembers List<String>
    Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
    logType GoogleIamV1AuditLogConfigLogType
    The log type that this config enables.
    exemptedMembers string[]
    Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
    logType GoogleIamV1AuditLogConfigLogType
    The log type that this config enables.
    exempted_members Sequence[str]
    Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
    log_type GoogleIamV1AuditLogConfigLogType
    The log type that this config enables.
    exemptedMembers List<String>
    Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
    logType "LOG_TYPE_UNSPECIFIED" | "ADMIN_READ" | "DATA_WRITE" | "DATA_READ"
    The log type that this config enables.

    GoogleIamV1AuditLogConfigLogType, GoogleIamV1AuditLogConfigLogTypeArgs

    LogTypeUnspecified
    LOG_TYPE_UNSPECIFIEDDefault case. Should never be this.
    AdminRead
    ADMIN_READAdmin reads. Example: CloudIAM getIamPolicy
    DataWrite
    DATA_WRITEData writes. Example: CloudSQL Users create
    DataRead
    DATA_READData reads. Example: CloudSQL Users list
    GoogleIamV1AuditLogConfigLogTypeLogTypeUnspecified
    LOG_TYPE_UNSPECIFIEDDefault case. Should never be this.
    GoogleIamV1AuditLogConfigLogTypeAdminRead
    ADMIN_READAdmin reads. Example: CloudIAM getIamPolicy
    GoogleIamV1AuditLogConfigLogTypeDataWrite
    DATA_WRITEData writes. Example: CloudSQL Users create
    GoogleIamV1AuditLogConfigLogTypeDataRead
    DATA_READData reads. Example: CloudSQL Users list
    LogTypeUnspecified
    LOG_TYPE_UNSPECIFIEDDefault case. Should never be this.
    AdminRead
    ADMIN_READAdmin reads. Example: CloudIAM getIamPolicy
    DataWrite
    DATA_WRITEData writes. Example: CloudSQL Users create
    DataRead
    DATA_READData reads. Example: CloudSQL Users list
    LogTypeUnspecified
    LOG_TYPE_UNSPECIFIEDDefault case. Should never be this.
    AdminRead
    ADMIN_READAdmin reads. Example: CloudIAM getIamPolicy
    DataWrite
    DATA_WRITEData writes. Example: CloudSQL Users create
    DataRead
    DATA_READData reads. Example: CloudSQL Users list
    LOG_TYPE_UNSPECIFIED
    LOG_TYPE_UNSPECIFIEDDefault case. Should never be this.
    ADMIN_READ
    ADMIN_READAdmin reads. Example: CloudIAM getIamPolicy
    DATA_WRITE
    DATA_WRITEData writes. Example: CloudSQL Users create
    DATA_READ
    DATA_READData reads. Example: CloudSQL Users list
    "LOG_TYPE_UNSPECIFIED"
    LOG_TYPE_UNSPECIFIEDDefault case. Should never be this.
    "ADMIN_READ"
    ADMIN_READAdmin reads. Example: CloudIAM getIamPolicy
    "DATA_WRITE"
    DATA_WRITEData writes. Example: CloudSQL Users create
    "DATA_READ"
    DATA_READData reads. Example: CloudSQL Users list

    GoogleIamV1AuditLogConfigResponse, GoogleIamV1AuditLogConfigResponseArgs

    ExemptedMembers List<string>
    Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
    LogType string
    The log type that this config enables.
    ExemptedMembers []string
    Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
    LogType string
    The log type that this config enables.
    exemptedMembers List<String>
    Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
    logType String
    The log type that this config enables.
    exemptedMembers string[]
    Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
    logType string
    The log type that this config enables.
    exempted_members Sequence[str]
    Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
    log_type str
    The log type that this config enables.
    exemptedMembers List<String>
    Specifies the identities that do not cause logging for this type of permission. Follows the same format of Binding.members.
    logType String
    The log type that this config enables.

    GoogleIamV1Binding, GoogleIamV1BindingArgs

    Condition Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleTypeExpr
    The condition that is associated with this binding. If the condition evaluates to true, then this binding applies to the current request. If the condition evaluates to false, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    Members List<string>
    Specifies the principals requesting access for a Google Cloud resource. members can have the following values: * allUsers: A special identifier that represents anyone who is on the internet; with or without a Google account. * allAuthenticatedUsers: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * user:{emailid}: An email address that represents a specific Google account. For example, alice@example.com . * serviceAccount:{emailid}: An email address that represents a Google service account. For example, my-other-app@appspot.gserviceaccount.com. * serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]: An identifier for a Kubernetes service account. For example, my-project.svc.id.goog[my-namespace/my-kubernetes-sa]. * group:{emailid}: An email address that represents a Google group. For example, admins@example.com. * domain:{domain}: The G Suite domain (primary) that represents all the users of that domain. For example, google.com or example.com. * deleted:user:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a user that has been recently deleted. For example, alice@example.com?uid=123456789012345678901. If the user is recovered, this value reverts to user:{emailid} and the recovered user retains the role in the binding. * deleted:serviceAccount:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901. If the service account is undeleted, this value reverts to serviceAccount:{emailid} and the undeleted service account retains the role in the binding. * deleted:group:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, admins@example.com?uid=123456789012345678901. If the group is recovered, this value reverts to group:{emailid} and the recovered group retains the role in the binding.
    Role string
    Role that is assigned to the list of members, or principals. For example, roles/viewer, roles/editor, or roles/owner.
    Condition GoogleTypeExpr
    The condition that is associated with this binding. If the condition evaluates to true, then this binding applies to the current request. If the condition evaluates to false, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    Members []string
    Specifies the principals requesting access for a Google Cloud resource. members can have the following values: * allUsers: A special identifier that represents anyone who is on the internet; with or without a Google account. * allAuthenticatedUsers: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * user:{emailid}: An email address that represents a specific Google account. For example, alice@example.com . * serviceAccount:{emailid}: An email address that represents a Google service account. For example, my-other-app@appspot.gserviceaccount.com. * serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]: An identifier for a Kubernetes service account. For example, my-project.svc.id.goog[my-namespace/my-kubernetes-sa]. * group:{emailid}: An email address that represents a Google group. For example, admins@example.com. * domain:{domain}: The G Suite domain (primary) that represents all the users of that domain. For example, google.com or example.com. * deleted:user:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a user that has been recently deleted. For example, alice@example.com?uid=123456789012345678901. If the user is recovered, this value reverts to user:{emailid} and the recovered user retains the role in the binding. * deleted:serviceAccount:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901. If the service account is undeleted, this value reverts to serviceAccount:{emailid} and the undeleted service account retains the role in the binding. * deleted:group:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, admins@example.com?uid=123456789012345678901. If the group is recovered, this value reverts to group:{emailid} and the recovered group retains the role in the binding.
    Role string
    Role that is assigned to the list of members, or principals. For example, roles/viewer, roles/editor, or roles/owner.
    condition GoogleTypeExpr
    The condition that is associated with this binding. If the condition evaluates to true, then this binding applies to the current request. If the condition evaluates to false, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    members List<String>
    Specifies the principals requesting access for a Google Cloud resource. members can have the following values: * allUsers: A special identifier that represents anyone who is on the internet; with or without a Google account. * allAuthenticatedUsers: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * user:{emailid}: An email address that represents a specific Google account. For example, alice@example.com . * serviceAccount:{emailid}: An email address that represents a Google service account. For example, my-other-app@appspot.gserviceaccount.com. * serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]: An identifier for a Kubernetes service account. For example, my-project.svc.id.goog[my-namespace/my-kubernetes-sa]. * group:{emailid}: An email address that represents a Google group. For example, admins@example.com. * domain:{domain}: The G Suite domain (primary) that represents all the users of that domain. For example, google.com or example.com. * deleted:user:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a user that has been recently deleted. For example, alice@example.com?uid=123456789012345678901. If the user is recovered, this value reverts to user:{emailid} and the recovered user retains the role in the binding. * deleted:serviceAccount:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901. If the service account is undeleted, this value reverts to serviceAccount:{emailid} and the undeleted service account retains the role in the binding. * deleted:group:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, admins@example.com?uid=123456789012345678901. If the group is recovered, this value reverts to group:{emailid} and the recovered group retains the role in the binding.
    role String
    Role that is assigned to the list of members, or principals. For example, roles/viewer, roles/editor, or roles/owner.
    condition GoogleTypeExpr
    The condition that is associated with this binding. If the condition evaluates to true, then this binding applies to the current request. If the condition evaluates to false, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    members string[]
    Specifies the principals requesting access for a Google Cloud resource. members can have the following values: * allUsers: A special identifier that represents anyone who is on the internet; with or without a Google account. * allAuthenticatedUsers: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * user:{emailid}: An email address that represents a specific Google account. For example, alice@example.com . * serviceAccount:{emailid}: An email address that represents a Google service account. For example, my-other-app@appspot.gserviceaccount.com. * serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]: An identifier for a Kubernetes service account. For example, my-project.svc.id.goog[my-namespace/my-kubernetes-sa]. * group:{emailid}: An email address that represents a Google group. For example, admins@example.com. * domain:{domain}: The G Suite domain (primary) that represents all the users of that domain. For example, google.com or example.com. * deleted:user:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a user that has been recently deleted. For example, alice@example.com?uid=123456789012345678901. If the user is recovered, this value reverts to user:{emailid} and the recovered user retains the role in the binding. * deleted:serviceAccount:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901. If the service account is undeleted, this value reverts to serviceAccount:{emailid} and the undeleted service account retains the role in the binding. * deleted:group:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, admins@example.com?uid=123456789012345678901. If the group is recovered, this value reverts to group:{emailid} and the recovered group retains the role in the binding.
    role string
    Role that is assigned to the list of members, or principals. For example, roles/viewer, roles/editor, or roles/owner.
    condition GoogleTypeExpr
    The condition that is associated with this binding. If the condition evaluates to true, then this binding applies to the current request. If the condition evaluates to false, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    members Sequence[str]
    Specifies the principals requesting access for a Google Cloud resource. members can have the following values: * allUsers: A special identifier that represents anyone who is on the internet; with or without a Google account. * allAuthenticatedUsers: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * user:{emailid}: An email address that represents a specific Google account. For example, alice@example.com . * serviceAccount:{emailid}: An email address that represents a Google service account. For example, my-other-app@appspot.gserviceaccount.com. * serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]: An identifier for a Kubernetes service account. For example, my-project.svc.id.goog[my-namespace/my-kubernetes-sa]. * group:{emailid}: An email address that represents a Google group. For example, admins@example.com. * domain:{domain}: The G Suite domain (primary) that represents all the users of that domain. For example, google.com or example.com. * deleted:user:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a user that has been recently deleted. For example, alice@example.com?uid=123456789012345678901. If the user is recovered, this value reverts to user:{emailid} and the recovered user retains the role in the binding. * deleted:serviceAccount:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901. If the service account is undeleted, this value reverts to serviceAccount:{emailid} and the undeleted service account retains the role in the binding. * deleted:group:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, admins@example.com?uid=123456789012345678901. If the group is recovered, this value reverts to group:{emailid} and the recovered group retains the role in the binding.
    role str
    Role that is assigned to the list of members, or principals. For example, roles/viewer, roles/editor, or roles/owner.
    condition Property Map
    The condition that is associated with this binding. If the condition evaluates to true, then this binding applies to the current request. If the condition evaluates to false, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    members List<String>
    Specifies the principals requesting access for a Google Cloud resource. members can have the following values: * allUsers: A special identifier that represents anyone who is on the internet; with or without a Google account. * allAuthenticatedUsers: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * user:{emailid}: An email address that represents a specific Google account. For example, alice@example.com . * serviceAccount:{emailid}: An email address that represents a Google service account. For example, my-other-app@appspot.gserviceaccount.com. * serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]: An identifier for a Kubernetes service account. For example, my-project.svc.id.goog[my-namespace/my-kubernetes-sa]. * group:{emailid}: An email address that represents a Google group. For example, admins@example.com. * domain:{domain}: The G Suite domain (primary) that represents all the users of that domain. For example, google.com or example.com. * deleted:user:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a user that has been recently deleted. For example, alice@example.com?uid=123456789012345678901. If the user is recovered, this value reverts to user:{emailid} and the recovered user retains the role in the binding. * deleted:serviceAccount:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901. If the service account is undeleted, this value reverts to serviceAccount:{emailid} and the undeleted service account retains the role in the binding. * deleted:group:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, admins@example.com?uid=123456789012345678901. If the group is recovered, this value reverts to group:{emailid} and the recovered group retains the role in the binding.
    role String
    Role that is assigned to the list of members, or principals. For example, roles/viewer, roles/editor, or roles/owner.

    GoogleIamV1BindingResponse, GoogleIamV1BindingResponseArgs

    Condition Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleTypeExprResponse
    The condition that is associated with this binding. If the condition evaluates to true, then this binding applies to the current request. If the condition evaluates to false, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    Members List<string>
    Specifies the principals requesting access for a Google Cloud resource. members can have the following values: * allUsers: A special identifier that represents anyone who is on the internet; with or without a Google account. * allAuthenticatedUsers: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * user:{emailid}: An email address that represents a specific Google account. For example, alice@example.com . * serviceAccount:{emailid}: An email address that represents a Google service account. For example, my-other-app@appspot.gserviceaccount.com. * serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]: An identifier for a Kubernetes service account. For example, my-project.svc.id.goog[my-namespace/my-kubernetes-sa]. * group:{emailid}: An email address that represents a Google group. For example, admins@example.com. * domain:{domain}: The G Suite domain (primary) that represents all the users of that domain. For example, google.com or example.com. * deleted:user:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a user that has been recently deleted. For example, alice@example.com?uid=123456789012345678901. If the user is recovered, this value reverts to user:{emailid} and the recovered user retains the role in the binding. * deleted:serviceAccount:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901. If the service account is undeleted, this value reverts to serviceAccount:{emailid} and the undeleted service account retains the role in the binding. * deleted:group:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, admins@example.com?uid=123456789012345678901. If the group is recovered, this value reverts to group:{emailid} and the recovered group retains the role in the binding.
    Role string
    Role that is assigned to the list of members, or principals. For example, roles/viewer, roles/editor, or roles/owner.
    Condition GoogleTypeExprResponse
    The condition that is associated with this binding. If the condition evaluates to true, then this binding applies to the current request. If the condition evaluates to false, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    Members []string
    Specifies the principals requesting access for a Google Cloud resource. members can have the following values: * allUsers: A special identifier that represents anyone who is on the internet; with or without a Google account. * allAuthenticatedUsers: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * user:{emailid}: An email address that represents a specific Google account. For example, alice@example.com . * serviceAccount:{emailid}: An email address that represents a Google service account. For example, my-other-app@appspot.gserviceaccount.com. * serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]: An identifier for a Kubernetes service account. For example, my-project.svc.id.goog[my-namespace/my-kubernetes-sa]. * group:{emailid}: An email address that represents a Google group. For example, admins@example.com. * domain:{domain}: The G Suite domain (primary) that represents all the users of that domain. For example, google.com or example.com. * deleted:user:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a user that has been recently deleted. For example, alice@example.com?uid=123456789012345678901. If the user is recovered, this value reverts to user:{emailid} and the recovered user retains the role in the binding. * deleted:serviceAccount:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901. If the service account is undeleted, this value reverts to serviceAccount:{emailid} and the undeleted service account retains the role in the binding. * deleted:group:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, admins@example.com?uid=123456789012345678901. If the group is recovered, this value reverts to group:{emailid} and the recovered group retains the role in the binding.
    Role string
    Role that is assigned to the list of members, or principals. For example, roles/viewer, roles/editor, or roles/owner.
    condition GoogleTypeExprResponse
    The condition that is associated with this binding. If the condition evaluates to true, then this binding applies to the current request. If the condition evaluates to false, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    members List<String>
    Specifies the principals requesting access for a Google Cloud resource. members can have the following values: * allUsers: A special identifier that represents anyone who is on the internet; with or without a Google account. * allAuthenticatedUsers: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * user:{emailid}: An email address that represents a specific Google account. For example, alice@example.com . * serviceAccount:{emailid}: An email address that represents a Google service account. For example, my-other-app@appspot.gserviceaccount.com. * serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]: An identifier for a Kubernetes service account. For example, my-project.svc.id.goog[my-namespace/my-kubernetes-sa]. * group:{emailid}: An email address that represents a Google group. For example, admins@example.com. * domain:{domain}: The G Suite domain (primary) that represents all the users of that domain. For example, google.com or example.com. * deleted:user:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a user that has been recently deleted. For example, alice@example.com?uid=123456789012345678901. If the user is recovered, this value reverts to user:{emailid} and the recovered user retains the role in the binding. * deleted:serviceAccount:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901. If the service account is undeleted, this value reverts to serviceAccount:{emailid} and the undeleted service account retains the role in the binding. * deleted:group:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, admins@example.com?uid=123456789012345678901. If the group is recovered, this value reverts to group:{emailid} and the recovered group retains the role in the binding.
    role String
    Role that is assigned to the list of members, or principals. For example, roles/viewer, roles/editor, or roles/owner.
    condition GoogleTypeExprResponse
    The condition that is associated with this binding. If the condition evaluates to true, then this binding applies to the current request. If the condition evaluates to false, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    members string[]
    Specifies the principals requesting access for a Google Cloud resource. members can have the following values: * allUsers: A special identifier that represents anyone who is on the internet; with or without a Google account. * allAuthenticatedUsers: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * user:{emailid}: An email address that represents a specific Google account. For example, alice@example.com . * serviceAccount:{emailid}: An email address that represents a Google service account. For example, my-other-app@appspot.gserviceaccount.com. * serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]: An identifier for a Kubernetes service account. For example, my-project.svc.id.goog[my-namespace/my-kubernetes-sa]. * group:{emailid}: An email address that represents a Google group. For example, admins@example.com. * domain:{domain}: The G Suite domain (primary) that represents all the users of that domain. For example, google.com or example.com. * deleted:user:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a user that has been recently deleted. For example, alice@example.com?uid=123456789012345678901. If the user is recovered, this value reverts to user:{emailid} and the recovered user retains the role in the binding. * deleted:serviceAccount:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901. If the service account is undeleted, this value reverts to serviceAccount:{emailid} and the undeleted service account retains the role in the binding. * deleted:group:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, admins@example.com?uid=123456789012345678901. If the group is recovered, this value reverts to group:{emailid} and the recovered group retains the role in the binding.
    role string
    Role that is assigned to the list of members, or principals. For example, roles/viewer, roles/editor, or roles/owner.
    condition GoogleTypeExprResponse
    The condition that is associated with this binding. If the condition evaluates to true, then this binding applies to the current request. If the condition evaluates to false, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    members Sequence[str]
    Specifies the principals requesting access for a Google Cloud resource. members can have the following values: * allUsers: A special identifier that represents anyone who is on the internet; with or without a Google account. * allAuthenticatedUsers: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * user:{emailid}: An email address that represents a specific Google account. For example, alice@example.com . * serviceAccount:{emailid}: An email address that represents a Google service account. For example, my-other-app@appspot.gserviceaccount.com. * serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]: An identifier for a Kubernetes service account. For example, my-project.svc.id.goog[my-namespace/my-kubernetes-sa]. * group:{emailid}: An email address that represents a Google group. For example, admins@example.com. * domain:{domain}: The G Suite domain (primary) that represents all the users of that domain. For example, google.com or example.com. * deleted:user:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a user that has been recently deleted. For example, alice@example.com?uid=123456789012345678901. If the user is recovered, this value reverts to user:{emailid} and the recovered user retains the role in the binding. * deleted:serviceAccount:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901. If the service account is undeleted, this value reverts to serviceAccount:{emailid} and the undeleted service account retains the role in the binding. * deleted:group:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, admins@example.com?uid=123456789012345678901. If the group is recovered, this value reverts to group:{emailid} and the recovered group retains the role in the binding.
    role str
    Role that is assigned to the list of members, or principals. For example, roles/viewer, roles/editor, or roles/owner.
    condition Property Map
    The condition that is associated with this binding. If the condition evaluates to true, then this binding applies to the current request. If the condition evaluates to false, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    members List<String>
    Specifies the principals requesting access for a Google Cloud resource. members can have the following values: * allUsers: A special identifier that represents anyone who is on the internet; with or without a Google account. * allAuthenticatedUsers: A special identifier that represents anyone who is authenticated with a Google account or a service account. Does not include identities that come from external identity providers (IdPs) through identity federation. * user:{emailid}: An email address that represents a specific Google account. For example, alice@example.com . * serviceAccount:{emailid}: An email address that represents a Google service account. For example, my-other-app@appspot.gserviceaccount.com. * serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]: An identifier for a Kubernetes service account. For example, my-project.svc.id.goog[my-namespace/my-kubernetes-sa]. * group:{emailid}: An email address that represents a Google group. For example, admins@example.com. * domain:{domain}: The G Suite domain (primary) that represents all the users of that domain. For example, google.com or example.com. * deleted:user:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a user that has been recently deleted. For example, alice@example.com?uid=123456789012345678901. If the user is recovered, this value reverts to user:{emailid} and the recovered user retains the role in the binding. * deleted:serviceAccount:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901. If the service account is undeleted, this value reverts to serviceAccount:{emailid} and the undeleted service account retains the role in the binding. * deleted:group:{emailid}?uid={uniqueid}: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, admins@example.com?uid=123456789012345678901. If the group is recovered, this value reverts to group:{emailid} and the recovered group retains the role in the binding.
    role String
    Role that is assigned to the list of members, or principals. For example, roles/viewer, roles/editor, or roles/owner.

    GoogleIamV1Policy, GoogleIamV1PolicyArgs

    AuditConfigs List<Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleIamV1AuditConfig>
    Specifies cloud audit logging configuration for this policy.
    Bindings List<Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleIamV1Binding>
    Associates a list of members, or principals, with a role. Optionally, may specify a condition that determines how and when the bindings are applied. Each of the bindings must contain at least one principal. The bindings in a Policy can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the bindings grant 50 different roles to user:alice@example.com, and not to any other principal, then you can add another 1,450 principals to the bindings in the Policy.
    Etag string
    etag is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the etag in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An etag is returned in the response to getIamPolicy, and systems are expected to put that etag in the request to setIamPolicy to ensure that their change will be applied to the same version of the policy. Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost.
    Version int
    Specifies the format of the policy. Valid values are 0, 1, and 3. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version 3. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    AuditConfigs []GoogleIamV1AuditConfig
    Specifies cloud audit logging configuration for this policy.
    Bindings []GoogleIamV1Binding
    Associates a list of members, or principals, with a role. Optionally, may specify a condition that determines how and when the bindings are applied. Each of the bindings must contain at least one principal. The bindings in a Policy can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the bindings grant 50 different roles to user:alice@example.com, and not to any other principal, then you can add another 1,450 principals to the bindings in the Policy.
    Etag string
    etag is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the etag in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An etag is returned in the response to getIamPolicy, and systems are expected to put that etag in the request to setIamPolicy to ensure that their change will be applied to the same version of the policy. Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost.
    Version int
    Specifies the format of the policy. Valid values are 0, 1, and 3. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version 3. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    auditConfigs List<GoogleIamV1AuditConfig>
    Specifies cloud audit logging configuration for this policy.
    bindings List<GoogleIamV1Binding>
    Associates a list of members, or principals, with a role. Optionally, may specify a condition that determines how and when the bindings are applied. Each of the bindings must contain at least one principal. The bindings in a Policy can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the bindings grant 50 different roles to user:alice@example.com, and not to any other principal, then you can add another 1,450 principals to the bindings in the Policy.
    etag String
    etag is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the etag in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An etag is returned in the response to getIamPolicy, and systems are expected to put that etag in the request to setIamPolicy to ensure that their change will be applied to the same version of the policy. Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost.
    version Integer
    Specifies the format of the policy. Valid values are 0, 1, and 3. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version 3. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    auditConfigs GoogleIamV1AuditConfig[]
    Specifies cloud audit logging configuration for this policy.
    bindings GoogleIamV1Binding[]
    Associates a list of members, or principals, with a role. Optionally, may specify a condition that determines how and when the bindings are applied. Each of the bindings must contain at least one principal. The bindings in a Policy can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the bindings grant 50 different roles to user:alice@example.com, and not to any other principal, then you can add another 1,450 principals to the bindings in the Policy.
    etag string
    etag is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the etag in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An etag is returned in the response to getIamPolicy, and systems are expected to put that etag in the request to setIamPolicy to ensure that their change will be applied to the same version of the policy. Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost.
    version number
    Specifies the format of the policy. Valid values are 0, 1, and 3. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version 3. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    audit_configs Sequence[GoogleIamV1AuditConfig]
    Specifies cloud audit logging configuration for this policy.
    bindings Sequence[GoogleIamV1Binding]
    Associates a list of members, or principals, with a role. Optionally, may specify a condition that determines how and when the bindings are applied. Each of the bindings must contain at least one principal. The bindings in a Policy can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the bindings grant 50 different roles to user:alice@example.com, and not to any other principal, then you can add another 1,450 principals to the bindings in the Policy.
    etag str
    etag is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the etag in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An etag is returned in the response to getIamPolicy, and systems are expected to put that etag in the request to setIamPolicy to ensure that their change will be applied to the same version of the policy. Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost.
    version int
    Specifies the format of the policy. Valid values are 0, 1, and 3. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version 3. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    auditConfigs List<Property Map>
    Specifies cloud audit logging configuration for this policy.
    bindings List<Property Map>
    Associates a list of members, or principals, with a role. Optionally, may specify a condition that determines how and when the bindings are applied. Each of the bindings must contain at least one principal. The bindings in a Policy can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the bindings grant 50 different roles to user:alice@example.com, and not to any other principal, then you can add another 1,450 principals to the bindings in the Policy.
    etag String
    etag is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the etag in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An etag is returned in the response to getIamPolicy, and systems are expected to put that etag in the request to setIamPolicy to ensure that their change will be applied to the same version of the policy. Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost.
    version Number
    Specifies the format of the policy. Valid values are 0, 1, and 3. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version 3. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the IAM documentation.

    GoogleIamV1PolicyResponse, GoogleIamV1PolicyResponseArgs

    AuditConfigs List<Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleIamV1AuditConfigResponse>
    Specifies cloud audit logging configuration for this policy.
    Bindings List<Pulumi.GoogleNative.Contentwarehouse.V1.Inputs.GoogleIamV1BindingResponse>
    Associates a list of members, or principals, with a role. Optionally, may specify a condition that determines how and when the bindings are applied. Each of the bindings must contain at least one principal. The bindings in a Policy can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the bindings grant 50 different roles to user:alice@example.com, and not to any other principal, then you can add another 1,450 principals to the bindings in the Policy.
    Etag string
    etag is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the etag in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An etag is returned in the response to getIamPolicy, and systems are expected to put that etag in the request to setIamPolicy to ensure that their change will be applied to the same version of the policy. Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost.
    Version int
    Specifies the format of the policy. Valid values are 0, 1, and 3. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version 3. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    AuditConfigs []GoogleIamV1AuditConfigResponse
    Specifies cloud audit logging configuration for this policy.
    Bindings []GoogleIamV1BindingResponse
    Associates a list of members, or principals, with a role. Optionally, may specify a condition that determines how and when the bindings are applied. Each of the bindings must contain at least one principal. The bindings in a Policy can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the bindings grant 50 different roles to user:alice@example.com, and not to any other principal, then you can add another 1,450 principals to the bindings in the Policy.
    Etag string
    etag is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the etag in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An etag is returned in the response to getIamPolicy, and systems are expected to put that etag in the request to setIamPolicy to ensure that their change will be applied to the same version of the policy. Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost.
    Version int
    Specifies the format of the policy. Valid values are 0, 1, and 3. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version 3. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    auditConfigs List<GoogleIamV1AuditConfigResponse>
    Specifies cloud audit logging configuration for this policy.
    bindings List<GoogleIamV1BindingResponse>
    Associates a list of members, or principals, with a role. Optionally, may specify a condition that determines how and when the bindings are applied. Each of the bindings must contain at least one principal. The bindings in a Policy can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the bindings grant 50 different roles to user:alice@example.com, and not to any other principal, then you can add another 1,450 principals to the bindings in the Policy.
    etag String
    etag is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the etag in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An etag is returned in the response to getIamPolicy, and systems are expected to put that etag in the request to setIamPolicy to ensure that their change will be applied to the same version of the policy. Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost.
    version Integer
    Specifies the format of the policy. Valid values are 0, 1, and 3. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version 3. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    auditConfigs GoogleIamV1AuditConfigResponse[]
    Specifies cloud audit logging configuration for this policy.
    bindings GoogleIamV1BindingResponse[]
    Associates a list of members, or principals, with a role. Optionally, may specify a condition that determines how and when the bindings are applied. Each of the bindings must contain at least one principal. The bindings in a Policy can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the bindings grant 50 different roles to user:alice@example.com, and not to any other principal, then you can add another 1,450 principals to the bindings in the Policy.
    etag string
    etag is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the etag in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An etag is returned in the response to getIamPolicy, and systems are expected to put that etag in the request to setIamPolicy to ensure that their change will be applied to the same version of the policy. Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost.
    version number
    Specifies the format of the policy. Valid values are 0, 1, and 3. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version 3. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    audit_configs Sequence[GoogleIamV1AuditConfigResponse]
    Specifies cloud audit logging configuration for this policy.
    bindings Sequence[GoogleIamV1BindingResponse]
    Associates a list of members, or principals, with a role. Optionally, may specify a condition that determines how and when the bindings are applied. Each of the bindings must contain at least one principal. The bindings in a Policy can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the bindings grant 50 different roles to user:alice@example.com, and not to any other principal, then you can add another 1,450 principals to the bindings in the Policy.
    etag str
    etag is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the etag in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An etag is returned in the response to getIamPolicy, and systems are expected to put that etag in the request to setIamPolicy to ensure that their change will be applied to the same version of the policy. Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost.
    version int
    Specifies the format of the policy. Valid values are 0, 1, and 3. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version 3. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the IAM documentation.
    auditConfigs List<Property Map>
    Specifies cloud audit logging configuration for this policy.
    bindings List<Property Map>
    Associates a list of members, or principals, with a role. Optionally, may specify a condition that determines how and when the bindings are applied. Each of the bindings must contain at least one principal. The bindings in a Policy can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the bindings grant 50 different roles to user:alice@example.com, and not to any other principal, then you can add another 1,450 principals to the bindings in the Policy.
    etag String
    etag is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the etag in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An etag is returned in the response to getIamPolicy, and systems are expected to put that etag in the request to setIamPolicy to ensure that their change will be applied to the same version of the policy. Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost.
    version Number
    Specifies the format of the policy. Valid values are 0, 1, and 3. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version 3. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the IAM documentation.

    GoogleTypeExpr, GoogleTypeExprArgs

    Description string
    Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
    Expression string
    Textual representation of an expression in Common Expression Language syntax.
    Location string
    Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
    Title string
    Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
    Description string
    Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
    Expression string
    Textual representation of an expression in Common Expression Language syntax.
    Location string
    Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
    Title string
    Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
    description String
    Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
    expression String
    Textual representation of an expression in Common Expression Language syntax.
    location String
    Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
    title String
    Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
    description string
    Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
    expression string
    Textual representation of an expression in Common Expression Language syntax.
    location string
    Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
    title string
    Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
    description str
    Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
    expression str
    Textual representation of an expression in Common Expression Language syntax.
    location str
    Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
    title str
    Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
    description String
    Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
    expression String
    Textual representation of an expression in Common Expression Language syntax.
    location String
    Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
    title String
    Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

    GoogleTypeExprResponse, GoogleTypeExprResponseArgs

    Description string
    Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
    Expression string
    Textual representation of an expression in Common Expression Language syntax.
    Location string
    Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
    Title string
    Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
    Description string
    Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
    Expression string
    Textual representation of an expression in Common Expression Language syntax.
    Location string
    Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
    Title string
    Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
    description String
    Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
    expression String
    Textual representation of an expression in Common Expression Language syntax.
    location String
    Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
    title String
    Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
    description string
    Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
    expression string
    Textual representation of an expression in Common Expression Language syntax.
    location string
    Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
    title string
    Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
    description str
    Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
    expression str
    Textual representation of an expression in Common Expression Language syntax.
    location str
    Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
    title str
    Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
    description String
    Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
    expression String
    Textual representation of an expression in Common Expression Language syntax.
    location String
    Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
    title String
    Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.

    Package Details

    Repository
    Google Cloud Native pulumi/pulumi-google-native
    License
    Apache-2.0
    google-native logo

    Google Cloud Native is in preview. Google Cloud Classic is fully supported.

    Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
    pulumi/pulumi-google-native