diff --git a/examples/go.mod b/examples/go.mod
index 35143eb5f5..c0a0fc97c4 100644
--- a/examples/go.mod
+++ b/examples/go.mod
@@ -185,3 +185,7 @@ require (
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 	lukechampine.com/frand v1.4.2 // indirect
 )
+
+replace github.com/pulumi/pulumi/pkg/v3 => github.com/pulumi/pulumi/pkg/v3 v3.145.1-0.20250110044622-fecabf53b218
+
+replace github.com/pulumi/pulumi/sdk/v3 => github.com/pulumi/pulumi/sdk/v3 v3.145.1-0.20250110044622-fecabf53b218
diff --git a/examples/go.sum b/examples/go.sum
index 6d611634f7..af608023f5 100644
--- a/examples/go.sum
+++ b/examples/go.sum
@@ -348,10 +348,10 @@ github.com/pulumi/esc v0.10.0 h1:jzBKzkLVW0mePeanDRfqSQoCJ5yrkux0jIwAkUxpRKE=
 github.com/pulumi/esc v0.10.0/go.mod h1:2Bfa+FWj/xl8CKqRTWbWgDX0SOD4opdQgvYSURTGK2c=
 github.com/pulumi/pulumi-gcp/sdk/v6 v6.67.0 h1:toKDTQrGp11iU3FQsxqFN+1fgxx4GQFvsmLbUe9++B8=
 github.com/pulumi/pulumi-gcp/sdk/v6 v6.67.0/go.mod h1:0H6CtMuOB754n2Yzu6XqHqeU99fmH/fsBUKLsMic2OY=
-github.com/pulumi/pulumi/pkg/v3 v3.145.0 h1:hAhFLieunnCKuMd3GbLqE5uWQ1hpNLdl6+bCDFSF4YQ=
-github.com/pulumi/pulumi/pkg/v3 v3.145.0/go.mod h1:N19IsMJ3GyYO5N2JfpsCAVk0eH1NKkF05fZGn5dnhBE=
-github.com/pulumi/pulumi/sdk/v3 v3.145.0 h1:r5iOgz67RElFXJt4GVVY2SBGh5sR24mL9NOcKBiBi/k=
-github.com/pulumi/pulumi/sdk/v3 v3.145.0/go.mod h1:5pZySnw3RiQKddx8orThjEFmWsXkGAY3ktKOxZj2Ym4=
+github.com/pulumi/pulumi/pkg/v3 v3.145.1-0.20250110044622-fecabf53b218 h1:8UJToXuturGQYOSJ3nrYzO7NXNOU9fjYtbPmdIJ/lYE=
+github.com/pulumi/pulumi/pkg/v3 v3.145.1-0.20250110044622-fecabf53b218/go.mod h1:N19IsMJ3GyYO5N2JfpsCAVk0eH1NKkF05fZGn5dnhBE=
+github.com/pulumi/pulumi/sdk/v3 v3.145.1-0.20250110044622-fecabf53b218 h1:FIr7pnIQ0kMCWfr4mRFKT04FjmV/vpo+2MQd2sVVgxE=
+github.com/pulumi/pulumi/sdk/v3 v3.145.1-0.20250110044622-fecabf53b218/go.mod h1:5pZySnw3RiQKddx8orThjEFmWsXkGAY3ktKOxZj2Ym4=
 github.com/rivo/uniseg v0.1.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=
 github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=
 github.com/rivo/uniseg v0.4.4 h1:8TfxU8dW6PdqD27gjM8MVNuicgxIjxpm4K7x4jp8sis=
diff --git a/provider/cmd/pulumi-resource-gcp/schema.json b/provider/cmd/pulumi-resource-gcp/schema.json
index b865490071..df3a10f599 100644
--- a/provider/cmd/pulumi-resource-gcp/schema.json
+++ b/provider/cmd/pulumi-resource-gcp/schema.json
@@ -139357,7 +139357,7 @@
             }
         },
         "gcp:apphub/service:Service": {
-            "description": "Service is a network/api interface that exposes some functionality to clients for consumption over the network. Service typically has one or more Workloads behind it. It registers identified service to the Application.\n\n\n\n## Example Usage\n\n### Apphub Service Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as time from \"@pulumi/time\";\n\nconst application = new gcp.apphub.Application(\"application\", {\n    location: \"us-central1\",\n    applicationId: \"example-application-1\",\n    scope: {\n        type: \"REGIONAL\",\n    },\n});\nconst serviceProject = new gcp.organizations.Project(\"service_project\", {\n    projectId: \"project-1\",\n    name: \"Service Project\",\n    orgId: \"123456789\",\n    billingAccount: \"000000-0000000-0000000-000000\",\n    deletionPolicy: \"DELETE\",\n});\n// Enable Compute API\nconst computeServiceProject = new gcp.projects.Service(\"compute_service_project\", {\n    project: serviceProject.projectId,\n    service: \"compute.googleapis.com\",\n});\nconst wait120s = new time.index.Sleep(\"wait_120s\", {createDuration: \"120s\"}, {\n    dependsOn: [computeServiceProject],\n});\nconst serviceProjectAttachment = new gcp.apphub.ServiceProjectAttachment(\"service_project_attachment\", {serviceProjectAttachmentId: serviceProject.projectId}, {\n    dependsOn: [wait120s],\n});\n// VPC network\nconst ilbNetwork = new gcp.compute.Network(\"ilb_network\", {\n    name: \"l7-ilb-network\",\n    project: serviceProject.projectId,\n    autoCreateSubnetworks: false,\n}, {\n    dependsOn: [wait120s],\n});\n// backend subnet\nconst ilbSubnet = new gcp.compute.Subnetwork(\"ilb_subnet\", {\n    name: \"l7-ilb-subnet\",\n    project: serviceProject.projectId,\n    ipCidrRange: \"10.0.1.0/24\",\n    region: \"us-central1\",\n    network: ilbNetwork.id,\n});\n// health check\nconst _default = new gcp.compute.HealthCheck(\"default\", {\n    name: \"l7-ilb-hc\",\n    project: serviceProject.projectId,\n    checkIntervalSec: 1,\n    timeoutSec: 1,\n    tcpHealthCheck: {\n        port: 80,\n    },\n}, {\n    dependsOn: [wait120s],\n});\n// backend service\nconst backend = new gcp.compute.RegionBackendService(\"backend\", {\n    name: \"l7-ilb-backend-subnet\",\n    project: serviceProject.projectId,\n    region: \"us-central1\",\n    healthChecks: _default.id,\n});\n// forwarding rule\nconst forwardingRule = new gcp.compute.ForwardingRule(\"forwarding_rule\", {\n    name: \"l7-ilb-forwarding-rule\",\n    project: serviceProject.projectId,\n    region: \"us-central1\",\n    ipVersion: \"IPV4\",\n    loadBalancingScheme: \"INTERNAL\",\n    allPorts: true,\n    backendService: backend.id,\n    network: ilbNetwork.id,\n    subnetwork: ilbSubnet.id,\n});\n// discovered service block\nconst catalog-service = gcp.apphub.getDiscoveredServiceOutput({\n    location: \"us-central1\",\n    serviceUri: pulumi.interpolate`//compute.googleapis.com/${forwardingRule.id}`,\n});\nconst wait120sForResourceIngestion = new time.index.Sleep(\"wait_120s_for_resource_ingestion\", {createDuration: \"120s\"}, {\n    dependsOn: [forwardingRule],\n});\nconst example = new gcp.apphub.Service(\"example\", {\n    location: \"us-central1\",\n    applicationId: application.applicationId,\n    serviceId: forwardingRule.name,\n    discoveredService: catalog_service.apply(catalog_service =\u003e catalog_service.name),\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_time as time\n\napplication = gcp.apphub.Application(\"application\",\n    location=\"us-central1\",\n    application_id=\"example-application-1\",\n    scope={\n        \"type\": \"REGIONAL\",\n    })\nservice_project = gcp.organizations.Project(\"service_project\",\n    project_id=\"project-1\",\n    name=\"Service Project\",\n    org_id=\"123456789\",\n    billing_account=\"000000-0000000-0000000-000000\",\n    deletion_policy=\"DELETE\")\n# Enable Compute API\ncompute_service_project = gcp.projects.Service(\"compute_service_project\",\n    project=service_project.project_id,\n    service=\"compute.googleapis.com\")\nwait120s = time.index.Sleep(\"wait_120s\", create_duration=120s,\nopts = pulumi.ResourceOptions(depends_on=[compute_service_project]))\nservice_project_attachment = gcp.apphub.ServiceProjectAttachment(\"service_project_attachment\", service_project_attachment_id=service_project.project_id,\nopts = pulumi.ResourceOptions(depends_on=[wait120s]))\n# VPC network\nilb_network = gcp.compute.Network(\"ilb_network\",\n    name=\"l7-ilb-network\",\n    project=service_project.project_id,\n    auto_create_subnetworks=False,\n    opts = pulumi.ResourceOptions(depends_on=[wait120s]))\n# backend subnet\nilb_subnet = gcp.compute.Subnetwork(\"ilb_subnet\",\n    name=\"l7-ilb-subnet\",\n    project=service_project.project_id,\n    ip_cidr_range=\"10.0.1.0/24\",\n    region=\"us-central1\",\n    network=ilb_network.id)\n# health check\ndefault = gcp.compute.HealthCheck(\"default\",\n    name=\"l7-ilb-hc\",\n    project=service_project.project_id,\n    check_interval_sec=1,\n    timeout_sec=1,\n    tcp_health_check={\n        \"port\": 80,\n    },\n    opts = pulumi.ResourceOptions(depends_on=[wait120s]))\n# backend service\nbackend = gcp.compute.RegionBackendService(\"backend\",\n    name=\"l7-ilb-backend-subnet\",\n    project=service_project.project_id,\n    region=\"us-central1\",\n    health_checks=default.id)\n# forwarding rule\nforwarding_rule = gcp.compute.ForwardingRule(\"forwarding_rule\",\n    name=\"l7-ilb-forwarding-rule\",\n    project=service_project.project_id,\n    region=\"us-central1\",\n    ip_version=\"IPV4\",\n    load_balancing_scheme=\"INTERNAL\",\n    all_ports=True,\n    backend_service=backend.id,\n    network=ilb_network.id,\n    subnetwork=ilb_subnet.id)\n# discovered service block\ncatalog_service = gcp.apphub.get_discovered_service_output(location=\"us-central1\",\n    service_uri=forwarding_rule.id.apply(lambda id: f\"//compute.googleapis.com/{id}\"))\nwait120s_for_resource_ingestion = time.index.Sleep(\"wait_120s_for_resource_ingestion\", create_duration=120s,\nopts = pulumi.ResourceOptions(depends_on=[forwarding_rule]))\nexample = gcp.apphub.Service(\"example\",\n    location=\"us-central1\",\n    application_id=application.application_id,\n    service_id=forwarding_rule.name,\n    discovered_service=catalog_service.name)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Time = Pulumi.Time;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var application = new Gcp.Apphub.Application(\"application\", new()\n    {\n        Location = \"us-central1\",\n        ApplicationId = \"example-application-1\",\n        Scope = new Gcp.Apphub.Inputs.ApplicationScopeArgs\n        {\n            Type = \"REGIONAL\",\n        },\n    });\n\n    var serviceProject = new Gcp.Organizations.Project(\"service_project\", new()\n    {\n        ProjectId = \"project-1\",\n        Name = \"Service Project\",\n        OrgId = \"123456789\",\n        BillingAccount = \"000000-0000000-0000000-000000\",\n        DeletionPolicy = \"DELETE\",\n    });\n\n    // Enable Compute API\n    var computeServiceProject = new Gcp.Projects.Service(\"compute_service_project\", new()\n    {\n        Project = serviceProject.ProjectId,\n        ServiceName = \"compute.googleapis.com\",\n    });\n\n    var wait120s = new Time.Index.Sleep(\"wait_120s\", new()\n    {\n        CreateDuration = \"120s\",\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            computeServiceProject,\n        },\n    });\n\n    var serviceProjectAttachment = new Gcp.Apphub.ServiceProjectAttachment(\"service_project_attachment\", new()\n    {\n        ServiceProjectAttachmentId = serviceProject.ProjectId,\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            wait120s,\n        },\n    });\n\n    // VPC network\n    var ilbNetwork = new Gcp.Compute.Network(\"ilb_network\", new()\n    {\n        Name = \"l7-ilb-network\",\n        Project = serviceProject.ProjectId,\n        AutoCreateSubnetworks = false,\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            wait120s,\n        },\n    });\n\n    // backend subnet\n    var ilbSubnet = new Gcp.Compute.Subnetwork(\"ilb_subnet\", new()\n    {\n        Name = \"l7-ilb-subnet\",\n        Project = serviceProject.ProjectId,\n        IpCidrRange = \"10.0.1.0/24\",\n        Region = \"us-central1\",\n        Network = ilbNetwork.Id,\n    });\n\n    // health check\n    var @default = new Gcp.Compute.HealthCheck(\"default\", new()\n    {\n        Name = \"l7-ilb-hc\",\n        Project = serviceProject.ProjectId,\n        CheckIntervalSec = 1,\n        TimeoutSec = 1,\n        TcpHealthCheck = new Gcp.Compute.Inputs.HealthCheckTcpHealthCheckArgs\n        {\n            Port = 80,\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            wait120s,\n        },\n    });\n\n    // backend service\n    var backend = new Gcp.Compute.RegionBackendService(\"backend\", new()\n    {\n        Name = \"l7-ilb-backend-subnet\",\n        Project = serviceProject.ProjectId,\n        Region = \"us-central1\",\n        HealthChecks = @default.Id,\n    });\n\n    // forwarding rule\n    var forwardingRule = new Gcp.Compute.ForwardingRule(\"forwarding_rule\", new()\n    {\n        Name = \"l7-ilb-forwarding-rule\",\n        Project = serviceProject.ProjectId,\n        Region = \"us-central1\",\n        IpVersion = \"IPV4\",\n        LoadBalancingScheme = \"INTERNAL\",\n        AllPorts = true,\n        BackendService = backend.Id,\n        Network = ilbNetwork.Id,\n        Subnetwork = ilbSubnet.Id,\n    });\n\n    // discovered service block\n    var catalog_service = Gcp.Apphub.GetDiscoveredService.Invoke(new()\n    {\n        Location = \"us-central1\",\n        ServiceUri = $\"//compute.googleapis.com/{forwardingRule.Id}\",\n    });\n\n    var wait120sForResourceIngestion = new Time.Index.Sleep(\"wait_120s_for_resource_ingestion\", new()\n    {\n        CreateDuration = \"120s\",\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            forwardingRule,\n        },\n    });\n\n    var example = new Gcp.Apphub.Service(\"example\", new()\n    {\n        Location = \"us-central1\",\n        ApplicationId = application.ApplicationId,\n        ServiceId = forwardingRule.Name,\n        DiscoveredService = catalog_service.Apply(catalog_service =\u003e catalog_service.Apply(getDiscoveredServiceResult =\u003e getDiscoveredServiceResult.Name)),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/apphub\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects\"\n\t\"github.com/pulumi/pulumi-time/sdk/go/time\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tapplication, err := apphub.NewApplication(ctx, \"application\", \u0026apphub.ApplicationArgs{\n\t\t\tLocation:      pulumi.String(\"us-central1\"),\n\t\t\tApplicationId: pulumi.String(\"example-application-1\"),\n\t\t\tScope: \u0026apphub.ApplicationScopeArgs{\n\t\t\t\tType: pulumi.String(\"REGIONAL\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tserviceProject, err := organizations.NewProject(ctx, \"service_project\", \u0026organizations.ProjectArgs{\n\t\t\tProjectId:      pulumi.String(\"project-1\"),\n\t\t\tName:           pulumi.String(\"Service Project\"),\n\t\t\tOrgId:          pulumi.String(\"123456789\"),\n\t\t\tBillingAccount: pulumi.String(\"000000-0000000-0000000-000000\"),\n\t\t\tDeletionPolicy: pulumi.String(\"DELETE\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// Enable Compute API\n\t\tcomputeServiceProject, err := projects.NewService(ctx, \"compute_service_project\", \u0026projects.ServiceArgs{\n\t\t\tProject: serviceProject.ProjectId,\n\t\t\tService: pulumi.String(\"compute.googleapis.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\twait120s, err := time.NewSleep(ctx, \"wait_120s\", \u0026time.SleepArgs{\n\t\t\tCreateDuration: \"120s\",\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tcomputeServiceProject,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = apphub.NewServiceProjectAttachment(ctx, \"service_project_attachment\", \u0026apphub.ServiceProjectAttachmentArgs{\n\t\t\tServiceProjectAttachmentId: serviceProject.ProjectId,\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\twait120s,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// VPC network\n\t\tilbNetwork, err := compute.NewNetwork(ctx, \"ilb_network\", \u0026compute.NetworkArgs{\n\t\t\tName:                  pulumi.String(\"l7-ilb-network\"),\n\t\t\tProject:               serviceProject.ProjectId,\n\t\t\tAutoCreateSubnetworks: pulumi.Bool(false),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\twait120s,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// backend subnet\n\t\tilbSubnet, err := compute.NewSubnetwork(ctx, \"ilb_subnet\", \u0026compute.SubnetworkArgs{\n\t\t\tName:        pulumi.String(\"l7-ilb-subnet\"),\n\t\t\tProject:     serviceProject.ProjectId,\n\t\t\tIpCidrRange: pulumi.String(\"10.0.1.0/24\"),\n\t\t\tRegion:      pulumi.String(\"us-central1\"),\n\t\t\tNetwork:     ilbNetwork.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// health check\n\t\t_, err = compute.NewHealthCheck(ctx, \"default\", \u0026compute.HealthCheckArgs{\n\t\t\tName:             pulumi.String(\"l7-ilb-hc\"),\n\t\t\tProject:          serviceProject.ProjectId,\n\t\t\tCheckIntervalSec: pulumi.Int(1),\n\t\t\tTimeoutSec:       pulumi.Int(1),\n\t\t\tTcpHealthCheck: \u0026compute.HealthCheckTcpHealthCheckArgs{\n\t\t\t\tPort: pulumi.Int(80),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\twait120s,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// backend service\n\t\tbackend, err := compute.NewRegionBackendService(ctx, \"backend\", \u0026compute.RegionBackendServiceArgs{\n\t\t\tName:         pulumi.String(\"l7-ilb-backend-subnet\"),\n\t\t\tProject:      serviceProject.ProjectId,\n\t\t\tRegion:       pulumi.String(\"us-central1\"),\n\t\t\tHealthChecks: _default.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// forwarding rule\n\t\tforwardingRule, err := compute.NewForwardingRule(ctx, \"forwarding_rule\", \u0026compute.ForwardingRuleArgs{\n\t\t\tName:                pulumi.String(\"l7-ilb-forwarding-rule\"),\n\t\t\tProject:             serviceProject.ProjectId,\n\t\t\tRegion:              pulumi.String(\"us-central1\"),\n\t\t\tIpVersion:           pulumi.String(\"IPV4\"),\n\t\t\tLoadBalancingScheme: pulumi.String(\"INTERNAL\"),\n\t\t\tAllPorts:            pulumi.Bool(true),\n\t\t\tBackendService:      backend.ID(),\n\t\t\tNetwork:             ilbNetwork.ID(),\n\t\t\tSubnetwork:          ilbSubnet.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// discovered service block\n\t\tcatalog_service := apphub.GetDiscoveredServiceOutput(ctx, apphub.GetDiscoveredServiceOutputArgs{\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t\tServiceUri: forwardingRule.ID().ApplyT(func(id string) (string, error) {\n\t\t\t\treturn fmt.Sprintf(\"//compute.googleapis.com/%v\", id), nil\n\t\t\t}).(pulumi.StringOutput),\n\t\t}, nil)\n\t\t_, err = time.NewSleep(ctx, \"wait_120s_for_resource_ingestion\", \u0026time.SleepArgs{\n\t\t\tCreateDuration: \"120s\",\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tforwardingRule,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = apphub.NewService(ctx, \"example\", \u0026apphub.ServiceArgs{\n\t\t\tLocation:      pulumi.String(\"us-central1\"),\n\t\t\tApplicationId: application.ApplicationId,\n\t\t\tServiceId:     forwardingRule.Name,\n\t\t\tDiscoveredService: pulumi.String(catalog_service.ApplyT(func(catalog_service apphub.GetDiscoveredServiceResult) (*string, error) {\n\t\t\t\treturn \u0026catalog_service.Name, nil\n\t\t\t}).(pulumi.StringPtrOutput)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.apphub.Application;\nimport com.pulumi.gcp.apphub.ApplicationArgs;\nimport com.pulumi.gcp.apphub.inputs.ApplicationScopeArgs;\nimport com.pulumi.gcp.organizations.Project;\nimport com.pulumi.gcp.organizations.ProjectArgs;\nimport com.pulumi.gcp.projects.Service;\nimport com.pulumi.gcp.projects.ServiceArgs;\nimport com.pulumi.time.sleep;\nimport com.pulumi.time.SleepArgs;\nimport com.pulumi.gcp.apphub.ServiceProjectAttachment;\nimport com.pulumi.gcp.apphub.ServiceProjectAttachmentArgs;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.Subnetwork;\nimport com.pulumi.gcp.compute.SubnetworkArgs;\nimport com.pulumi.gcp.compute.HealthCheck;\nimport com.pulumi.gcp.compute.HealthCheckArgs;\nimport com.pulumi.gcp.compute.inputs.HealthCheckTcpHealthCheckArgs;\nimport com.pulumi.gcp.compute.RegionBackendService;\nimport com.pulumi.gcp.compute.RegionBackendServiceArgs;\nimport com.pulumi.gcp.compute.ForwardingRule;\nimport com.pulumi.gcp.compute.ForwardingRuleArgs;\nimport com.pulumi.gcp.apphub.ApphubFunctions;\nimport com.pulumi.gcp.apphub.inputs.GetDiscoveredServiceArgs;\nimport com.pulumi.gcp.apphub.Service;\nimport com.pulumi.gcp.apphub.ServiceArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var application = new Application(\"application\", ApplicationArgs.builder()\n            .location(\"us-central1\")\n            .applicationId(\"example-application-1\")\n            .scope(ApplicationScopeArgs.builder()\n                .type(\"REGIONAL\")\n                .build())\n            .build());\n\n        var serviceProject = new Project(\"serviceProject\", ProjectArgs.builder()\n            .projectId(\"project-1\")\n            .name(\"Service Project\")\n            .orgId(\"123456789\")\n            .billingAccount(\"000000-0000000-0000000-000000\")\n            .deletionPolicy(\"DELETE\")\n            .build());\n\n        // Enable Compute API\n        var computeServiceProject = new Service(\"computeServiceProject\", ServiceArgs.builder()\n            .project(serviceProject.projectId())\n            .service(\"compute.googleapis.com\")\n            .build());\n\n        var wait120s = new Sleep(\"wait120s\", SleepArgs.builder()\n            .createDuration(\"120s\")\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(computeServiceProject)\n                .build());\n\n        var serviceProjectAttachment = new ServiceProjectAttachment(\"serviceProjectAttachment\", ServiceProjectAttachmentArgs.builder()\n            .serviceProjectAttachmentId(serviceProject.projectId())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(wait120s)\n                .build());\n\n        // VPC network\n        var ilbNetwork = new Network(\"ilbNetwork\", NetworkArgs.builder()\n            .name(\"l7-ilb-network\")\n            .project(serviceProject.projectId())\n            .autoCreateSubnetworks(false)\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(wait120s)\n                .build());\n\n        // backend subnet\n        var ilbSubnet = new Subnetwork(\"ilbSubnet\", SubnetworkArgs.builder()\n            .name(\"l7-ilb-subnet\")\n            .project(serviceProject.projectId())\n            .ipCidrRange(\"10.0.1.0/24\")\n            .region(\"us-central1\")\n            .network(ilbNetwork.id())\n            .build());\n\n        // health check\n        var default_ = new HealthCheck(\"default\", HealthCheckArgs.builder()\n            .name(\"l7-ilb-hc\")\n            .project(serviceProject.projectId())\n            .checkIntervalSec(1)\n            .timeoutSec(1)\n            .tcpHealthCheck(HealthCheckTcpHealthCheckArgs.builder()\n                .port(\"80\")\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(wait120s)\n                .build());\n\n        // backend service\n        var backend = new RegionBackendService(\"backend\", RegionBackendServiceArgs.builder()\n            .name(\"l7-ilb-backend-subnet\")\n            .project(serviceProject.projectId())\n            .region(\"us-central1\")\n            .healthChecks(default_.id())\n            .build());\n\n        // forwarding rule\n        var forwardingRule = new ForwardingRule(\"forwardingRule\", ForwardingRuleArgs.builder()\n            .name(\"l7-ilb-forwarding-rule\")\n            .project(serviceProject.projectId())\n            .region(\"us-central1\")\n            .ipVersion(\"IPV4\")\n            .loadBalancingScheme(\"INTERNAL\")\n            .allPorts(true)\n            .backendService(backend.id())\n            .network(ilbNetwork.id())\n            .subnetwork(ilbSubnet.id())\n            .build());\n\n        // discovered service block\n        final var catalog-service = ApphubFunctions.getDiscoveredService(GetDiscoveredServiceArgs.builder()\n            .location(\"us-central1\")\n            .serviceUri(forwardingRule.id().applyValue(id -\u003e String.format(\"//compute.googleapis.com/%s\", id)))\n            .build());\n\n        var wait120sForResourceIngestion = new Sleep(\"wait120sForResourceIngestion\", SleepArgs.builder()\n            .createDuration(\"120s\")\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(forwardingRule)\n                .build());\n\n        var example = new Service(\"example\", ServiceArgs.builder()\n            .location(\"us-central1\")\n            .applicationId(application.applicationId())\n            .serviceId(forwardingRule.name())\n            .discoveredService(catalog_service.applyValue(catalog_service -\u003e catalog_service.name()))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  application:\n    type: gcp:apphub:Application\n    properties:\n      location: us-central1\n      applicationId: example-application-1\n      scope:\n        type: REGIONAL\n  serviceProject:\n    type: gcp:organizations:Project\n    name: service_project\n    properties:\n      projectId: project-1\n      name: Service Project\n      orgId: '123456789'\n      billingAccount: 000000-0000000-0000000-000000\n      deletionPolicy: DELETE\n  # Enable Compute API\n  computeServiceProject:\n    type: gcp:projects:Service\n    name: compute_service_project\n    properties:\n      project: ${serviceProject.projectId}\n      service: compute.googleapis.com\n  wait120s:\n    type: time:sleep\n    name: wait_120s\n    properties:\n      createDuration: 120s\n    options:\n      dependsOn:\n        - ${computeServiceProject}\n  serviceProjectAttachment:\n    type: gcp:apphub:ServiceProjectAttachment\n    name: service_project_attachment\n    properties:\n      serviceProjectAttachmentId: ${serviceProject.projectId}\n    options:\n      dependsOn:\n        - ${wait120s}\n  wait120sForResourceIngestion:\n    type: time:sleep\n    name: wait_120s_for_resource_ingestion\n    properties:\n      createDuration: 120s\n    options:\n      dependsOn:\n        - ${forwardingRule}\n  example:\n    type: gcp:apphub:Service\n    properties:\n      location: us-central1\n      applicationId: ${application.applicationId}\n      serviceId: ${forwardingRule.name}\n      discoveredService: ${[\"catalog-service\"].name}\n  # VPC network\n  ilbNetwork:\n    type: gcp:compute:Network\n    name: ilb_network\n    properties:\n      name: l7-ilb-network\n      project: ${serviceProject.projectId}\n      autoCreateSubnetworks: false\n    options:\n      dependsOn:\n        - ${wait120s}\n  # backend subnet\n  ilbSubnet:\n    type: gcp:compute:Subnetwork\n    name: ilb_subnet\n    properties:\n      name: l7-ilb-subnet\n      project: ${serviceProject.projectId}\n      ipCidrRange: 10.0.1.0/24\n      region: us-central1\n      network: ${ilbNetwork.id}\n  # forwarding rule\n  forwardingRule:\n    type: gcp:compute:ForwardingRule\n    name: forwarding_rule\n    properties:\n      name: l7-ilb-forwarding-rule\n      project: ${serviceProject.projectId}\n      region: us-central1\n      ipVersion: IPV4\n      loadBalancingScheme: INTERNAL\n      allPorts: true\n      backendService: ${backend.id}\n      network: ${ilbNetwork.id}\n      subnetwork: ${ilbSubnet.id}\n  # backend service\n  backend:\n    type: gcp:compute:RegionBackendService\n    properties:\n      name: l7-ilb-backend-subnet\n      project: ${serviceProject.projectId}\n      region: us-central1\n      healthChecks: ${default.id}\n  # health check\n  default:\n    type: gcp:compute:HealthCheck\n    properties:\n      name: l7-ilb-hc\n      project: ${serviceProject.projectId}\n      checkIntervalSec: 1\n      timeoutSec: 1\n      tcpHealthCheck:\n        port: '80'\n    options:\n      dependsOn:\n        - ${wait120s}\nvariables:\n  # discovered service block\n  catalog-service:\n    fn::invoke:\n      function: gcp:apphub:getDiscoveredService\n      arguments:\n        location: us-central1\n        serviceUri: //compute.googleapis.com/${forwardingRule.id}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Apphub Service Full\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as time from \"@pulumi/time\";\n\nconst application = new gcp.apphub.Application(\"application\", {\n    location: \"us-central1\",\n    applicationId: \"example-application-1\",\n    scope: {\n        type: \"REGIONAL\",\n    },\n});\nconst serviceProject = new gcp.organizations.Project(\"service_project\", {\n    projectId: \"project-1\",\n    name: \"Service Project\",\n    orgId: \"123456789\",\n    billingAccount: \"000000-0000000-0000000-000000\",\n    deletionPolicy: \"DELETE\",\n});\n// Enable Compute API\nconst computeServiceProject = new gcp.projects.Service(\"compute_service_project\", {\n    project: serviceProject.projectId,\n    service: \"compute.googleapis.com\",\n});\nconst wait120s = new time.index.Sleep(\"wait_120s\", {createDuration: \"120s\"}, {\n    dependsOn: [computeServiceProject],\n});\nconst serviceProjectAttachment = new gcp.apphub.ServiceProjectAttachment(\"service_project_attachment\", {serviceProjectAttachmentId: serviceProject.projectId}, {\n    dependsOn: [wait120s],\n});\n// VPC network\nconst ilbNetwork = new gcp.compute.Network(\"ilb_network\", {\n    name: \"l7-ilb-network\",\n    project: serviceProject.projectId,\n    autoCreateSubnetworks: false,\n}, {\n    dependsOn: [wait120s],\n});\n// backend subnet\nconst ilbSubnet = new gcp.compute.Subnetwork(\"ilb_subnet\", {\n    name: \"l7-ilb-subnet\",\n    project: serviceProject.projectId,\n    ipCidrRange: \"10.0.1.0/24\",\n    region: \"us-central1\",\n    network: ilbNetwork.id,\n});\n// health check\nconst _default = new gcp.compute.HealthCheck(\"default\", {\n    name: \"l7-ilb-hc\",\n    project: serviceProject.projectId,\n    checkIntervalSec: 1,\n    timeoutSec: 1,\n    tcpHealthCheck: {\n        port: 80,\n    },\n}, {\n    dependsOn: [wait120s],\n});\n// backend service\nconst backend = new gcp.compute.RegionBackendService(\"backend\", {\n    name: \"l7-ilb-backend-subnet\",\n    project: serviceProject.projectId,\n    region: \"us-central1\",\n    healthChecks: _default.id,\n});\n// forwarding rule\nconst forwardingRule = new gcp.compute.ForwardingRule(\"forwarding_rule\", {\n    name: \"l7-ilb-forwarding-rule\",\n    project: serviceProject.projectId,\n    region: \"us-central1\",\n    ipVersion: \"IPV4\",\n    loadBalancingScheme: \"INTERNAL\",\n    allPorts: true,\n    backendService: backend.id,\n    network: ilbNetwork.id,\n    subnetwork: ilbSubnet.id,\n});\n// discovered service block\nconst catalog-service = gcp.apphub.getDiscoveredServiceOutput({\n    location: \"us-central1\",\n    serviceUri: pulumi.interpolate`//compute.googleapis.com/${forwardingRule.id}`,\n});\nconst wait120sForResourceIngestion = new time.index.Sleep(\"wait_120s_for_resource_ingestion\", {createDuration: \"120s\"}, {\n    dependsOn: [forwardingRule],\n});\nconst example = new gcp.apphub.Service(\"example\", {\n    location: \"us-central1\",\n    applicationId: application.applicationId,\n    serviceId: forwardingRule.name,\n    discoveredService: catalog_service.apply(catalog_service =\u003e catalog_service.name),\n    displayName: \"Example Service Full\",\n    description: \"Register service for testing\",\n    attributes: {\n        environment: {\n            type: \"STAGING\",\n        },\n        criticality: {\n            type: \"MISSION_CRITICAL\",\n        },\n        businessOwners: [{\n            displayName: \"Alice\",\n            email: \"alice@google.com\",\n        }],\n        developerOwners: [{\n            displayName: \"Bob\",\n            email: \"bob@google.com\",\n        }],\n        operatorOwners: [{\n            displayName: \"Charlie\",\n            email: \"charlie@google.com\",\n        }],\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_time as time\n\napplication = gcp.apphub.Application(\"application\",\n    location=\"us-central1\",\n    application_id=\"example-application-1\",\n    scope={\n        \"type\": \"REGIONAL\",\n    })\nservice_project = gcp.organizations.Project(\"service_project\",\n    project_id=\"project-1\",\n    name=\"Service Project\",\n    org_id=\"123456789\",\n    billing_account=\"000000-0000000-0000000-000000\",\n    deletion_policy=\"DELETE\")\n# Enable Compute API\ncompute_service_project = gcp.projects.Service(\"compute_service_project\",\n    project=service_project.project_id,\n    service=\"compute.googleapis.com\")\nwait120s = time.index.Sleep(\"wait_120s\", create_duration=120s,\nopts = pulumi.ResourceOptions(depends_on=[compute_service_project]))\nservice_project_attachment = gcp.apphub.ServiceProjectAttachment(\"service_project_attachment\", service_project_attachment_id=service_project.project_id,\nopts = pulumi.ResourceOptions(depends_on=[wait120s]))\n# VPC network\nilb_network = gcp.compute.Network(\"ilb_network\",\n    name=\"l7-ilb-network\",\n    project=service_project.project_id,\n    auto_create_subnetworks=False,\n    opts = pulumi.ResourceOptions(depends_on=[wait120s]))\n# backend subnet\nilb_subnet = gcp.compute.Subnetwork(\"ilb_subnet\",\n    name=\"l7-ilb-subnet\",\n    project=service_project.project_id,\n    ip_cidr_range=\"10.0.1.0/24\",\n    region=\"us-central1\",\n    network=ilb_network.id)\n# health check\ndefault = gcp.compute.HealthCheck(\"default\",\n    name=\"l7-ilb-hc\",\n    project=service_project.project_id,\n    check_interval_sec=1,\n    timeout_sec=1,\n    tcp_health_check={\n        \"port\": 80,\n    },\n    opts = pulumi.ResourceOptions(depends_on=[wait120s]))\n# backend service\nbackend = gcp.compute.RegionBackendService(\"backend\",\n    name=\"l7-ilb-backend-subnet\",\n    project=service_project.project_id,\n    region=\"us-central1\",\n    health_checks=default.id)\n# forwarding rule\nforwarding_rule = gcp.compute.ForwardingRule(\"forwarding_rule\",\n    name=\"l7-ilb-forwarding-rule\",\n    project=service_project.project_id,\n    region=\"us-central1\",\n    ip_version=\"IPV4\",\n    load_balancing_scheme=\"INTERNAL\",\n    all_ports=True,\n    backend_service=backend.id,\n    network=ilb_network.id,\n    subnetwork=ilb_subnet.id)\n# discovered service block\ncatalog_service = gcp.apphub.get_discovered_service_output(location=\"us-central1\",\n    service_uri=forwarding_rule.id.apply(lambda id: f\"//compute.googleapis.com/{id}\"))\nwait120s_for_resource_ingestion = time.index.Sleep(\"wait_120s_for_resource_ingestion\", create_duration=120s,\nopts = pulumi.ResourceOptions(depends_on=[forwarding_rule]))\nexample = gcp.apphub.Service(\"example\",\n    location=\"us-central1\",\n    application_id=application.application_id,\n    service_id=forwarding_rule.name,\n    discovered_service=catalog_service.name,\n    display_name=\"Example Service Full\",\n    description=\"Register service for testing\",\n    attributes={\n        \"environment\": {\n            \"type\": \"STAGING\",\n        },\n        \"criticality\": {\n            \"type\": \"MISSION_CRITICAL\",\n        },\n        \"business_owners\": [{\n            \"display_name\": \"Alice\",\n            \"email\": \"alice@google.com\",\n        }],\n        \"developer_owners\": [{\n            \"display_name\": \"Bob\",\n            \"email\": \"bob@google.com\",\n        }],\n        \"operator_owners\": [{\n            \"display_name\": \"Charlie\",\n            \"email\": \"charlie@google.com\",\n        }],\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Time = Pulumi.Time;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var application = new Gcp.Apphub.Application(\"application\", new()\n    {\n        Location = \"us-central1\",\n        ApplicationId = \"example-application-1\",\n        Scope = new Gcp.Apphub.Inputs.ApplicationScopeArgs\n        {\n            Type = \"REGIONAL\",\n        },\n    });\n\n    var serviceProject = new Gcp.Organizations.Project(\"service_project\", new()\n    {\n        ProjectId = \"project-1\",\n        Name = \"Service Project\",\n        OrgId = \"123456789\",\n        BillingAccount = \"000000-0000000-0000000-000000\",\n        DeletionPolicy = \"DELETE\",\n    });\n\n    // Enable Compute API\n    var computeServiceProject = new Gcp.Projects.Service(\"compute_service_project\", new()\n    {\n        Project = serviceProject.ProjectId,\n        ServiceName = \"compute.googleapis.com\",\n    });\n\n    var wait120s = new Time.Index.Sleep(\"wait_120s\", new()\n    {\n        CreateDuration = \"120s\",\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            computeServiceProject,\n        },\n    });\n\n    var serviceProjectAttachment = new Gcp.Apphub.ServiceProjectAttachment(\"service_project_attachment\", new()\n    {\n        ServiceProjectAttachmentId = serviceProject.ProjectId,\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            wait120s,\n        },\n    });\n\n    // VPC network\n    var ilbNetwork = new Gcp.Compute.Network(\"ilb_network\", new()\n    {\n        Name = \"l7-ilb-network\",\n        Project = serviceProject.ProjectId,\n        AutoCreateSubnetworks = false,\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            wait120s,\n        },\n    });\n\n    // backend subnet\n    var ilbSubnet = new Gcp.Compute.Subnetwork(\"ilb_subnet\", new()\n    {\n        Name = \"l7-ilb-subnet\",\n        Project = serviceProject.ProjectId,\n        IpCidrRange = \"10.0.1.0/24\",\n        Region = \"us-central1\",\n        Network = ilbNetwork.Id,\n    });\n\n    // health check\n    var @default = new Gcp.Compute.HealthCheck(\"default\", new()\n    {\n        Name = \"l7-ilb-hc\",\n        Project = serviceProject.ProjectId,\n        CheckIntervalSec = 1,\n        TimeoutSec = 1,\n        TcpHealthCheck = new Gcp.Compute.Inputs.HealthCheckTcpHealthCheckArgs\n        {\n            Port = 80,\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            wait120s,\n        },\n    });\n\n    // backend service\n    var backend = new Gcp.Compute.RegionBackendService(\"backend\", new()\n    {\n        Name = \"l7-ilb-backend-subnet\",\n        Project = serviceProject.ProjectId,\n        Region = \"us-central1\",\n        HealthChecks = @default.Id,\n    });\n\n    // forwarding rule\n    var forwardingRule = new Gcp.Compute.ForwardingRule(\"forwarding_rule\", new()\n    {\n        Name = \"l7-ilb-forwarding-rule\",\n        Project = serviceProject.ProjectId,\n        Region = \"us-central1\",\n        IpVersion = \"IPV4\",\n        LoadBalancingScheme = \"INTERNAL\",\n        AllPorts = true,\n        BackendService = backend.Id,\n        Network = ilbNetwork.Id,\n        Subnetwork = ilbSubnet.Id,\n    });\n\n    // discovered service block\n    var catalog_service = Gcp.Apphub.GetDiscoveredService.Invoke(new()\n    {\n        Location = \"us-central1\",\n        ServiceUri = $\"//compute.googleapis.com/{forwardingRule.Id}\",\n    });\n\n    var wait120sForResourceIngestion = new Time.Index.Sleep(\"wait_120s_for_resource_ingestion\", new()\n    {\n        CreateDuration = \"120s\",\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            forwardingRule,\n        },\n    });\n\n    var example = new Gcp.Apphub.Service(\"example\", new()\n    {\n        Location = \"us-central1\",\n        ApplicationId = application.ApplicationId,\n        ServiceId = forwardingRule.Name,\n        DiscoveredService = catalog_service.Apply(catalog_service =\u003e catalog_service.Apply(getDiscoveredServiceResult =\u003e getDiscoveredServiceResult.Name)),\n        DisplayName = \"Example Service Full\",\n        Description = \"Register service for testing\",\n        Attributes = new Gcp.Apphub.Inputs.ServiceAttributesArgs\n        {\n            Environment = new Gcp.Apphub.Inputs.ServiceAttributesEnvironmentArgs\n            {\n                Type = \"STAGING\",\n            },\n            Criticality = new Gcp.Apphub.Inputs.ServiceAttributesCriticalityArgs\n            {\n                Type = \"MISSION_CRITICAL\",\n            },\n            BusinessOwners = new[]\n            {\n                new Gcp.Apphub.Inputs.ServiceAttributesBusinessOwnerArgs\n                {\n                    DisplayName = \"Alice\",\n                    Email = \"alice@google.com\",\n                },\n            },\n            DeveloperOwners = new[]\n            {\n                new Gcp.Apphub.Inputs.ServiceAttributesDeveloperOwnerArgs\n                {\n                    DisplayName = \"Bob\",\n                    Email = \"bob@google.com\",\n                },\n            },\n            OperatorOwners = new[]\n            {\n                new Gcp.Apphub.Inputs.ServiceAttributesOperatorOwnerArgs\n                {\n                    DisplayName = \"Charlie\",\n                    Email = \"charlie@google.com\",\n                },\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/apphub\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects\"\n\t\"github.com/pulumi/pulumi-time/sdk/go/time\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tapplication, err := apphub.NewApplication(ctx, \"application\", \u0026apphub.ApplicationArgs{\n\t\t\tLocation:      pulumi.String(\"us-central1\"),\n\t\t\tApplicationId: pulumi.String(\"example-application-1\"),\n\t\t\tScope: \u0026apphub.ApplicationScopeArgs{\n\t\t\t\tType: pulumi.String(\"REGIONAL\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tserviceProject, err := organizations.NewProject(ctx, \"service_project\", \u0026organizations.ProjectArgs{\n\t\t\tProjectId:      pulumi.String(\"project-1\"),\n\t\t\tName:           pulumi.String(\"Service Project\"),\n\t\t\tOrgId:          pulumi.String(\"123456789\"),\n\t\t\tBillingAccount: pulumi.String(\"000000-0000000-0000000-000000\"),\n\t\t\tDeletionPolicy: pulumi.String(\"DELETE\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// Enable Compute API\n\t\tcomputeServiceProject, err := projects.NewService(ctx, \"compute_service_project\", \u0026projects.ServiceArgs{\n\t\t\tProject: serviceProject.ProjectId,\n\t\t\tService: pulumi.String(\"compute.googleapis.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\twait120s, err := time.NewSleep(ctx, \"wait_120s\", \u0026time.SleepArgs{\n\t\t\tCreateDuration: \"120s\",\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tcomputeServiceProject,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = apphub.NewServiceProjectAttachment(ctx, \"service_project_attachment\", \u0026apphub.ServiceProjectAttachmentArgs{\n\t\t\tServiceProjectAttachmentId: serviceProject.ProjectId,\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\twait120s,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// VPC network\n\t\tilbNetwork, err := compute.NewNetwork(ctx, \"ilb_network\", \u0026compute.NetworkArgs{\n\t\t\tName:                  pulumi.String(\"l7-ilb-network\"),\n\t\t\tProject:               serviceProject.ProjectId,\n\t\t\tAutoCreateSubnetworks: pulumi.Bool(false),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\twait120s,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// backend subnet\n\t\tilbSubnet, err := compute.NewSubnetwork(ctx, \"ilb_subnet\", \u0026compute.SubnetworkArgs{\n\t\t\tName:        pulumi.String(\"l7-ilb-subnet\"),\n\t\t\tProject:     serviceProject.ProjectId,\n\t\t\tIpCidrRange: pulumi.String(\"10.0.1.0/24\"),\n\t\t\tRegion:      pulumi.String(\"us-central1\"),\n\t\t\tNetwork:     ilbNetwork.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// health check\n\t\t_, err = compute.NewHealthCheck(ctx, \"default\", \u0026compute.HealthCheckArgs{\n\t\t\tName:             pulumi.String(\"l7-ilb-hc\"),\n\t\t\tProject:          serviceProject.ProjectId,\n\t\t\tCheckIntervalSec: pulumi.Int(1),\n\t\t\tTimeoutSec:       pulumi.Int(1),\n\t\t\tTcpHealthCheck: \u0026compute.HealthCheckTcpHealthCheckArgs{\n\t\t\t\tPort: pulumi.Int(80),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\twait120s,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// backend service\n\t\tbackend, err := compute.NewRegionBackendService(ctx, \"backend\", \u0026compute.RegionBackendServiceArgs{\n\t\t\tName:         pulumi.String(\"l7-ilb-backend-subnet\"),\n\t\t\tProject:      serviceProject.ProjectId,\n\t\t\tRegion:       pulumi.String(\"us-central1\"),\n\t\t\tHealthChecks: _default.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// forwarding rule\n\t\tforwardingRule, err := compute.NewForwardingRule(ctx, \"forwarding_rule\", \u0026compute.ForwardingRuleArgs{\n\t\t\tName:                pulumi.String(\"l7-ilb-forwarding-rule\"),\n\t\t\tProject:             serviceProject.ProjectId,\n\t\t\tRegion:              pulumi.String(\"us-central1\"),\n\t\t\tIpVersion:           pulumi.String(\"IPV4\"),\n\t\t\tLoadBalancingScheme: pulumi.String(\"INTERNAL\"),\n\t\t\tAllPorts:            pulumi.Bool(true),\n\t\t\tBackendService:      backend.ID(),\n\t\t\tNetwork:             ilbNetwork.ID(),\n\t\t\tSubnetwork:          ilbSubnet.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// discovered service block\n\t\tcatalog_service := apphub.GetDiscoveredServiceOutput(ctx, apphub.GetDiscoveredServiceOutputArgs{\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t\tServiceUri: forwardingRule.ID().ApplyT(func(id string) (string, error) {\n\t\t\t\treturn fmt.Sprintf(\"//compute.googleapis.com/%v\", id), nil\n\t\t\t}).(pulumi.StringOutput),\n\t\t}, nil)\n\t\t_, err = time.NewSleep(ctx, \"wait_120s_for_resource_ingestion\", \u0026time.SleepArgs{\n\t\t\tCreateDuration: \"120s\",\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tforwardingRule,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = apphub.NewService(ctx, \"example\", \u0026apphub.ServiceArgs{\n\t\t\tLocation:      pulumi.String(\"us-central1\"),\n\t\t\tApplicationId: application.ApplicationId,\n\t\t\tServiceId:     forwardingRule.Name,\n\t\t\tDiscoveredService: pulumi.String(catalog_service.ApplyT(func(catalog_service apphub.GetDiscoveredServiceResult) (*string, error) {\n\t\t\t\treturn \u0026catalog_service.Name, nil\n\t\t\t}).(pulumi.StringPtrOutput)),\n\t\t\tDisplayName: pulumi.String(\"Example Service Full\"),\n\t\t\tDescription: pulumi.String(\"Register service for testing\"),\n\t\t\tAttributes: \u0026apphub.ServiceAttributesArgs{\n\t\t\t\tEnvironment: \u0026apphub.ServiceAttributesEnvironmentArgs{\n\t\t\t\t\tType: pulumi.String(\"STAGING\"),\n\t\t\t\t},\n\t\t\t\tCriticality: \u0026apphub.ServiceAttributesCriticalityArgs{\n\t\t\t\t\tType: pulumi.String(\"MISSION_CRITICAL\"),\n\t\t\t\t},\n\t\t\t\tBusinessOwners: apphub.ServiceAttributesBusinessOwnerArray{\n\t\t\t\t\t\u0026apphub.ServiceAttributesBusinessOwnerArgs{\n\t\t\t\t\t\tDisplayName: pulumi.String(\"Alice\"),\n\t\t\t\t\t\tEmail:       pulumi.String(\"alice@google.com\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tDeveloperOwners: apphub.ServiceAttributesDeveloperOwnerArray{\n\t\t\t\t\t\u0026apphub.ServiceAttributesDeveloperOwnerArgs{\n\t\t\t\t\t\tDisplayName: pulumi.String(\"Bob\"),\n\t\t\t\t\t\tEmail:       pulumi.String(\"bob@google.com\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tOperatorOwners: apphub.ServiceAttributesOperatorOwnerArray{\n\t\t\t\t\t\u0026apphub.ServiceAttributesOperatorOwnerArgs{\n\t\t\t\t\t\tDisplayName: pulumi.String(\"Charlie\"),\n\t\t\t\t\t\tEmail:       pulumi.String(\"charlie@google.com\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.apphub.Application;\nimport com.pulumi.gcp.apphub.ApplicationArgs;\nimport com.pulumi.gcp.apphub.inputs.ApplicationScopeArgs;\nimport com.pulumi.gcp.organizations.Project;\nimport com.pulumi.gcp.organizations.ProjectArgs;\nimport com.pulumi.gcp.projects.Service;\nimport com.pulumi.gcp.projects.ServiceArgs;\nimport com.pulumi.time.sleep;\nimport com.pulumi.time.SleepArgs;\nimport com.pulumi.gcp.apphub.ServiceProjectAttachment;\nimport com.pulumi.gcp.apphub.ServiceProjectAttachmentArgs;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.Subnetwork;\nimport com.pulumi.gcp.compute.SubnetworkArgs;\nimport com.pulumi.gcp.compute.HealthCheck;\nimport com.pulumi.gcp.compute.HealthCheckArgs;\nimport com.pulumi.gcp.compute.inputs.HealthCheckTcpHealthCheckArgs;\nimport com.pulumi.gcp.compute.RegionBackendService;\nimport com.pulumi.gcp.compute.RegionBackendServiceArgs;\nimport com.pulumi.gcp.compute.ForwardingRule;\nimport com.pulumi.gcp.compute.ForwardingRuleArgs;\nimport com.pulumi.gcp.apphub.ApphubFunctions;\nimport com.pulumi.gcp.apphub.inputs.GetDiscoveredServiceArgs;\nimport com.pulumi.gcp.apphub.Service;\nimport com.pulumi.gcp.apphub.ServiceArgs;\nimport com.pulumi.gcp.apphub.inputs.ServiceAttributesArgs;\nimport com.pulumi.gcp.apphub.inputs.ServiceAttributesEnvironmentArgs;\nimport com.pulumi.gcp.apphub.inputs.ServiceAttributesCriticalityArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var application = new Application(\"application\", ApplicationArgs.builder()\n            .location(\"us-central1\")\n            .applicationId(\"example-application-1\")\n            .scope(ApplicationScopeArgs.builder()\n                .type(\"REGIONAL\")\n                .build())\n            .build());\n\n        var serviceProject = new Project(\"serviceProject\", ProjectArgs.builder()\n            .projectId(\"project-1\")\n            .name(\"Service Project\")\n            .orgId(\"123456789\")\n            .billingAccount(\"000000-0000000-0000000-000000\")\n            .deletionPolicy(\"DELETE\")\n            .build());\n\n        // Enable Compute API\n        var computeServiceProject = new Service(\"computeServiceProject\", ServiceArgs.builder()\n            .project(serviceProject.projectId())\n            .service(\"compute.googleapis.com\")\n            .build());\n\n        var wait120s = new Sleep(\"wait120s\", SleepArgs.builder()\n            .createDuration(\"120s\")\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(computeServiceProject)\n                .build());\n\n        var serviceProjectAttachment = new ServiceProjectAttachment(\"serviceProjectAttachment\", ServiceProjectAttachmentArgs.builder()\n            .serviceProjectAttachmentId(serviceProject.projectId())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(wait120s)\n                .build());\n\n        // VPC network\n        var ilbNetwork = new Network(\"ilbNetwork\", NetworkArgs.builder()\n            .name(\"l7-ilb-network\")\n            .project(serviceProject.projectId())\n            .autoCreateSubnetworks(false)\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(wait120s)\n                .build());\n\n        // backend subnet\n        var ilbSubnet = new Subnetwork(\"ilbSubnet\", SubnetworkArgs.builder()\n            .name(\"l7-ilb-subnet\")\n            .project(serviceProject.projectId())\n            .ipCidrRange(\"10.0.1.0/24\")\n            .region(\"us-central1\")\n            .network(ilbNetwork.id())\n            .build());\n\n        // health check\n        var default_ = new HealthCheck(\"default\", HealthCheckArgs.builder()\n            .name(\"l7-ilb-hc\")\n            .project(serviceProject.projectId())\n            .checkIntervalSec(1)\n            .timeoutSec(1)\n            .tcpHealthCheck(HealthCheckTcpHealthCheckArgs.builder()\n                .port(\"80\")\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(wait120s)\n                .build());\n\n        // backend service\n        var backend = new RegionBackendService(\"backend\", RegionBackendServiceArgs.builder()\n            .name(\"l7-ilb-backend-subnet\")\n            .project(serviceProject.projectId())\n            .region(\"us-central1\")\n            .healthChecks(default_.id())\n            .build());\n\n        // forwarding rule\n        var forwardingRule = new ForwardingRule(\"forwardingRule\", ForwardingRuleArgs.builder()\n            .name(\"l7-ilb-forwarding-rule\")\n            .project(serviceProject.projectId())\n            .region(\"us-central1\")\n            .ipVersion(\"IPV4\")\n            .loadBalancingScheme(\"INTERNAL\")\n            .allPorts(true)\n            .backendService(backend.id())\n            .network(ilbNetwork.id())\n            .subnetwork(ilbSubnet.id())\n            .build());\n\n        // discovered service block\n        final var catalog-service = ApphubFunctions.getDiscoveredService(GetDiscoveredServiceArgs.builder()\n            .location(\"us-central1\")\n            .serviceUri(forwardingRule.id().applyValue(id -\u003e String.format(\"//compute.googleapis.com/%s\", id)))\n            .build());\n\n        var wait120sForResourceIngestion = new Sleep(\"wait120sForResourceIngestion\", SleepArgs.builder()\n            .createDuration(\"120s\")\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(forwardingRule)\n                .build());\n\n        var example = new Service(\"example\", ServiceArgs.builder()\n            .location(\"us-central1\")\n            .applicationId(application.applicationId())\n            .serviceId(forwardingRule.name())\n            .discoveredService(catalog_service.applyValue(catalog_service -\u003e catalog_service.name()))\n            .displayName(\"Example Service Full\")\n            .description(\"Register service for testing\")\n            .attributes(ServiceAttributesArgs.builder()\n                .environment(ServiceAttributesEnvironmentArgs.builder()\n                    .type(\"STAGING\")\n                    .build())\n                .criticality(ServiceAttributesCriticalityArgs.builder()\n                    .type(\"MISSION_CRITICAL\")\n                    .build())\n                .businessOwners(ServiceAttributesBusinessOwnerArgs.builder()\n                    .displayName(\"Alice\")\n                    .email(\"alice@google.com\")\n                    .build())\n                .developerOwners(ServiceAttributesDeveloperOwnerArgs.builder()\n                    .displayName(\"Bob\")\n                    .email(\"bob@google.com\")\n                    .build())\n                .operatorOwners(ServiceAttributesOperatorOwnerArgs.builder()\n                    .displayName(\"Charlie\")\n                    .email(\"charlie@google.com\")\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  application:\n    type: gcp:apphub:Application\n    properties:\n      location: us-central1\n      applicationId: example-application-1\n      scope:\n        type: REGIONAL\n  serviceProject:\n    type: gcp:organizations:Project\n    name: service_project\n    properties:\n      projectId: project-1\n      name: Service Project\n      orgId: '123456789'\n      billingAccount: 000000-0000000-0000000-000000\n      deletionPolicy: DELETE\n  # Enable Compute API\n  computeServiceProject:\n    type: gcp:projects:Service\n    name: compute_service_project\n    properties:\n      project: ${serviceProject.projectId}\n      service: compute.googleapis.com\n  wait120s:\n    type: time:sleep\n    name: wait_120s\n    properties:\n      createDuration: 120s\n    options:\n      dependsOn:\n        - ${computeServiceProject}\n  serviceProjectAttachment:\n    type: gcp:apphub:ServiceProjectAttachment\n    name: service_project_attachment\n    properties:\n      serviceProjectAttachmentId: ${serviceProject.projectId}\n    options:\n      dependsOn:\n        - ${wait120s}\n  wait120sForResourceIngestion:\n    type: time:sleep\n    name: wait_120s_for_resource_ingestion\n    properties:\n      createDuration: 120s\n    options:\n      dependsOn:\n        - ${forwardingRule}\n  example:\n    type: gcp:apphub:Service\n    properties:\n      location: us-central1\n      applicationId: ${application.applicationId}\n      serviceId: ${forwardingRule.name}\n      discoveredService: ${[\"catalog-service\"].name}\n      displayName: Example Service Full\n      description: Register service for testing\n      attributes:\n        environment:\n          type: STAGING\n        criticality:\n          type: MISSION_CRITICAL\n        businessOwners:\n          - displayName: Alice\n            email: alice@google.com\n        developerOwners:\n          - displayName: Bob\n            email: bob@google.com\n        operatorOwners:\n          - displayName: Charlie\n            email: charlie@google.com\n  # VPC network\n  ilbNetwork:\n    type: gcp:compute:Network\n    name: ilb_network\n    properties:\n      name: l7-ilb-network\n      project: ${serviceProject.projectId}\n      autoCreateSubnetworks: false\n    options:\n      dependsOn:\n        - ${wait120s}\n  # backend subnet\n  ilbSubnet:\n    type: gcp:compute:Subnetwork\n    name: ilb_subnet\n    properties:\n      name: l7-ilb-subnet\n      project: ${serviceProject.projectId}\n      ipCidrRange: 10.0.1.0/24\n      region: us-central1\n      network: ${ilbNetwork.id}\n  # forwarding rule\n  forwardingRule:\n    type: gcp:compute:ForwardingRule\n    name: forwarding_rule\n    properties:\n      name: l7-ilb-forwarding-rule\n      project: ${serviceProject.projectId}\n      region: us-central1\n      ipVersion: IPV4\n      loadBalancingScheme: INTERNAL\n      allPorts: true\n      backendService: ${backend.id}\n      network: ${ilbNetwork.id}\n      subnetwork: ${ilbSubnet.id}\n  # backend service\n  backend:\n    type: gcp:compute:RegionBackendService\n    properties:\n      name: l7-ilb-backend-subnet\n      project: ${serviceProject.projectId}\n      region: us-central1\n      healthChecks: ${default.id}\n  # health check\n  default:\n    type: gcp:compute:HealthCheck\n    properties:\n      name: l7-ilb-hc\n      project: ${serviceProject.projectId}\n      checkIntervalSec: 1\n      timeoutSec: 1\n      tcpHealthCheck:\n        port: '80'\n    options:\n      dependsOn:\n        - ${wait120s}\nvariables:\n  # discovered service block\n  catalog-service:\n    fn::invoke:\n      function: gcp:apphub:getDiscoveredService\n      arguments:\n        location: us-central1\n        serviceUri: //compute.googleapis.com/${forwardingRule.id}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nService can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{location}}/applications/{{application_id}}/services/{{service_id}}`\n\n* `{{project}}/{{location}}/{{application_id}}/{{service_id}}`\n\n* `{{location}}/{{application_id}}/{{service_id}}`\n\nWhen using the `pulumi import` command, Service can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:apphub/service:Service default projects/{{project}}/locations/{{location}}/applications/{{application_id}}/services/{{service_id}}\n```\n\n```sh\n$ pulumi import gcp:apphub/service:Service default {{project}}/{{location}}/{{application_id}}/{{service_id}}\n```\n\n```sh\n$ pulumi import gcp:apphub/service:Service default {{location}}/{{application_id}}/{{service_id}}\n```\n\n",
+            "description": "Service is a network/api interface that exposes some functionality to clients for consumption over the network. Service typically has one or more Workloads behind it. It registers identified service to the Application.\n\n\n\n## Example Usage\n\n### Apphub Service Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as time from \"@pulumi/time\";\n\nconst application = new gcp.apphub.Application(\"application\", {\n    location: \"us-central1\",\n    applicationId: \"example-application-1\",\n    scope: {\n        type: \"REGIONAL\",\n    },\n});\nconst serviceProject = new gcp.organizations.Project(\"service_project\", {\n    projectId: \"project-1\",\n    name: \"Service Project\",\n    orgId: \"123456789\",\n    billingAccount: \"000000-0000000-0000000-000000\",\n    deletionPolicy: \"DELETE\",\n});\n// Enable Compute API\nconst computeServiceProject = new gcp.projects.Service(\"compute_service_project\", {\n    project: serviceProject.projectId,\n    service: \"compute.googleapis.com\",\n});\nconst wait120s = new time.index.Sleep(\"wait_120s\", {createDuration: \"120s\"}, {\n    dependsOn: [computeServiceProject],\n});\nconst serviceProjectAttachment = new gcp.apphub.ServiceProjectAttachment(\"service_project_attachment\", {serviceProjectAttachmentId: serviceProject.projectId}, {\n    dependsOn: [wait120s],\n});\n// VPC network\nconst ilbNetwork = new gcp.compute.Network(\"ilb_network\", {\n    name: \"l7-ilb-network\",\n    project: serviceProject.projectId,\n    autoCreateSubnetworks: false,\n}, {\n    dependsOn: [wait120s],\n});\n// backend subnet\nconst ilbSubnet = new gcp.compute.Subnetwork(\"ilb_subnet\", {\n    name: \"l7-ilb-subnet\",\n    project: serviceProject.projectId,\n    ipCidrRange: \"10.0.1.0/24\",\n    region: \"us-central1\",\n    network: ilbNetwork.id,\n});\n// health check\nconst _default = new gcp.compute.HealthCheck(\"default\", {\n    name: \"l7-ilb-hc\",\n    project: serviceProject.projectId,\n    checkIntervalSec: 1,\n    timeoutSec: 1,\n    tcpHealthCheck: {\n        port: 80,\n    },\n}, {\n    dependsOn: [wait120s],\n});\n// backend service\nconst backend = new gcp.compute.RegionBackendService(\"backend\", {\n    name: \"l7-ilb-backend-subnet\",\n    project: serviceProject.projectId,\n    region: \"us-central1\",\n    healthChecks: _default.id,\n});\n// forwarding rule\nconst forwardingRule = new gcp.compute.ForwardingRule(\"forwarding_rule\", {\n    name: \"l7-ilb-forwarding-rule\",\n    project: serviceProject.projectId,\n    region: \"us-central1\",\n    ipVersion: \"IPV4\",\n    loadBalancingScheme: \"INTERNAL\",\n    allPorts: true,\n    backendService: backend.id,\n    network: ilbNetwork.id,\n    subnetwork: ilbSubnet.id,\n});\n// discovered service block\nconst catalog_service = gcp.apphub.getDiscoveredServiceOutput({\n    location: \"us-central1\",\n    serviceUri: pulumi.interpolate`//compute.googleapis.com/${forwardingRule.id}`,\n});\nconst wait120sForResourceIngestion = new time.index.Sleep(\"wait_120s_for_resource_ingestion\", {createDuration: \"120s\"}, {\n    dependsOn: [forwardingRule],\n});\nconst example = new gcp.apphub.Service(\"example\", {\n    location: \"us-central1\",\n    applicationId: application.applicationId,\n    serviceId: forwardingRule.name,\n    discoveredService: catalog_service.apply(catalog_service =\u003e catalog_service.name),\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_time as time\n\napplication = gcp.apphub.Application(\"application\",\n    location=\"us-central1\",\n    application_id=\"example-application-1\",\n    scope={\n        \"type\": \"REGIONAL\",\n    })\nservice_project = gcp.organizations.Project(\"service_project\",\n    project_id=\"project-1\",\n    name=\"Service Project\",\n    org_id=\"123456789\",\n    billing_account=\"000000-0000000-0000000-000000\",\n    deletion_policy=\"DELETE\")\n# Enable Compute API\ncompute_service_project = gcp.projects.Service(\"compute_service_project\",\n    project=service_project.project_id,\n    service=\"compute.googleapis.com\")\nwait120s = time.index.Sleep(\"wait_120s\", create_duration=120s,\nopts = pulumi.ResourceOptions(depends_on=[compute_service_project]))\nservice_project_attachment = gcp.apphub.ServiceProjectAttachment(\"service_project_attachment\", service_project_attachment_id=service_project.project_id,\nopts = pulumi.ResourceOptions(depends_on=[wait120s]))\n# VPC network\nilb_network = gcp.compute.Network(\"ilb_network\",\n    name=\"l7-ilb-network\",\n    project=service_project.project_id,\n    auto_create_subnetworks=False,\n    opts = pulumi.ResourceOptions(depends_on=[wait120s]))\n# backend subnet\nilb_subnet = gcp.compute.Subnetwork(\"ilb_subnet\",\n    name=\"l7-ilb-subnet\",\n    project=service_project.project_id,\n    ip_cidr_range=\"10.0.1.0/24\",\n    region=\"us-central1\",\n    network=ilb_network.id)\n# health check\ndefault = gcp.compute.HealthCheck(\"default\",\n    name=\"l7-ilb-hc\",\n    project=service_project.project_id,\n    check_interval_sec=1,\n    timeout_sec=1,\n    tcp_health_check={\n        \"port\": 80,\n    },\n    opts = pulumi.ResourceOptions(depends_on=[wait120s]))\n# backend service\nbackend = gcp.compute.RegionBackendService(\"backend\",\n    name=\"l7-ilb-backend-subnet\",\n    project=service_project.project_id,\n    region=\"us-central1\",\n    health_checks=default.id)\n# forwarding rule\nforwarding_rule = gcp.compute.ForwardingRule(\"forwarding_rule\",\n    name=\"l7-ilb-forwarding-rule\",\n    project=service_project.project_id,\n    region=\"us-central1\",\n    ip_version=\"IPV4\",\n    load_balancing_scheme=\"INTERNAL\",\n    all_ports=True,\n    backend_service=backend.id,\n    network=ilb_network.id,\n    subnetwork=ilb_subnet.id)\n# discovered service block\ncatalog_service = gcp.apphub.get_discovered_service_output(location=\"us-central1\",\n    service_uri=forwarding_rule.id.apply(lambda id: f\"//compute.googleapis.com/{id}\"))\nwait120s_for_resource_ingestion = time.index.Sleep(\"wait_120s_for_resource_ingestion\", create_duration=120s,\nopts = pulumi.ResourceOptions(depends_on=[forwarding_rule]))\nexample = gcp.apphub.Service(\"example\",\n    location=\"us-central1\",\n    application_id=application.application_id,\n    service_id=forwarding_rule.name,\n    discovered_service=catalog_service.name)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Time = Pulumi.Time;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var application = new Gcp.Apphub.Application(\"application\", new()\n    {\n        Location = \"us-central1\",\n        ApplicationId = \"example-application-1\",\n        Scope = new Gcp.Apphub.Inputs.ApplicationScopeArgs\n        {\n            Type = \"REGIONAL\",\n        },\n    });\n\n    var serviceProject = new Gcp.Organizations.Project(\"service_project\", new()\n    {\n        ProjectId = \"project-1\",\n        Name = \"Service Project\",\n        OrgId = \"123456789\",\n        BillingAccount = \"000000-0000000-0000000-000000\",\n        DeletionPolicy = \"DELETE\",\n    });\n\n    // Enable Compute API\n    var computeServiceProject = new Gcp.Projects.Service(\"compute_service_project\", new()\n    {\n        Project = serviceProject.ProjectId,\n        ServiceName = \"compute.googleapis.com\",\n    });\n\n    var wait120s = new Time.Index.Sleep(\"wait_120s\", new()\n    {\n        CreateDuration = \"120s\",\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            computeServiceProject,\n        },\n    });\n\n    var serviceProjectAttachment = new Gcp.Apphub.ServiceProjectAttachment(\"service_project_attachment\", new()\n    {\n        ServiceProjectAttachmentId = serviceProject.ProjectId,\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            wait120s,\n        },\n    });\n\n    // VPC network\n    var ilbNetwork = new Gcp.Compute.Network(\"ilb_network\", new()\n    {\n        Name = \"l7-ilb-network\",\n        Project = serviceProject.ProjectId,\n        AutoCreateSubnetworks = false,\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            wait120s,\n        },\n    });\n\n    // backend subnet\n    var ilbSubnet = new Gcp.Compute.Subnetwork(\"ilb_subnet\", new()\n    {\n        Name = \"l7-ilb-subnet\",\n        Project = serviceProject.ProjectId,\n        IpCidrRange = \"10.0.1.0/24\",\n        Region = \"us-central1\",\n        Network = ilbNetwork.Id,\n    });\n\n    // health check\n    var @default = new Gcp.Compute.HealthCheck(\"default\", new()\n    {\n        Name = \"l7-ilb-hc\",\n        Project = serviceProject.ProjectId,\n        CheckIntervalSec = 1,\n        TimeoutSec = 1,\n        TcpHealthCheck = new Gcp.Compute.Inputs.HealthCheckTcpHealthCheckArgs\n        {\n            Port = 80,\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            wait120s,\n        },\n    });\n\n    // backend service\n    var backend = new Gcp.Compute.RegionBackendService(\"backend\", new()\n    {\n        Name = \"l7-ilb-backend-subnet\",\n        Project = serviceProject.ProjectId,\n        Region = \"us-central1\",\n        HealthChecks = @default.Id,\n    });\n\n    // forwarding rule\n    var forwardingRule = new Gcp.Compute.ForwardingRule(\"forwarding_rule\", new()\n    {\n        Name = \"l7-ilb-forwarding-rule\",\n        Project = serviceProject.ProjectId,\n        Region = \"us-central1\",\n        IpVersion = \"IPV4\",\n        LoadBalancingScheme = \"INTERNAL\",\n        AllPorts = true,\n        BackendService = backend.Id,\n        Network = ilbNetwork.Id,\n        Subnetwork = ilbSubnet.Id,\n    });\n\n    // discovered service block\n    var catalog_service = Gcp.Apphub.GetDiscoveredService.Invoke(new()\n    {\n        Location = \"us-central1\",\n        ServiceUri = $\"//compute.googleapis.com/{forwardingRule.Id}\",\n    });\n\n    var wait120sForResourceIngestion = new Time.Index.Sleep(\"wait_120s_for_resource_ingestion\", new()\n    {\n        CreateDuration = \"120s\",\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            forwardingRule,\n        },\n    });\n\n    var example = new Gcp.Apphub.Service(\"example\", new()\n    {\n        Location = \"us-central1\",\n        ApplicationId = application.ApplicationId,\n        ServiceId = forwardingRule.Name,\n        DiscoveredService = catalog_service.Apply(catalog_service =\u003e catalog_service.Apply(getDiscoveredServiceResult =\u003e getDiscoveredServiceResult.Name)),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/apphub\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects\"\n\t\"github.com/pulumi/pulumi-time/sdk/go/time\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tapplication, err := apphub.NewApplication(ctx, \"application\", \u0026apphub.ApplicationArgs{\n\t\t\tLocation:      pulumi.String(\"us-central1\"),\n\t\t\tApplicationId: pulumi.String(\"example-application-1\"),\n\t\t\tScope: \u0026apphub.ApplicationScopeArgs{\n\t\t\t\tType: pulumi.String(\"REGIONAL\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tserviceProject, err := organizations.NewProject(ctx, \"service_project\", \u0026organizations.ProjectArgs{\n\t\t\tProjectId:      pulumi.String(\"project-1\"),\n\t\t\tName:           pulumi.String(\"Service Project\"),\n\t\t\tOrgId:          pulumi.String(\"123456789\"),\n\t\t\tBillingAccount: pulumi.String(\"000000-0000000-0000000-000000\"),\n\t\t\tDeletionPolicy: pulumi.String(\"DELETE\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// Enable Compute API\n\t\tcomputeServiceProject, err := projects.NewService(ctx, \"compute_service_project\", \u0026projects.ServiceArgs{\n\t\t\tProject: serviceProject.ProjectId,\n\t\t\tService: pulumi.String(\"compute.googleapis.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\twait120s, err := time.NewSleep(ctx, \"wait_120s\", \u0026time.SleepArgs{\n\t\t\tCreateDuration: \"120s\",\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tcomputeServiceProject,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = apphub.NewServiceProjectAttachment(ctx, \"service_project_attachment\", \u0026apphub.ServiceProjectAttachmentArgs{\n\t\t\tServiceProjectAttachmentId: serviceProject.ProjectId,\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\twait120s,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// VPC network\n\t\tilbNetwork, err := compute.NewNetwork(ctx, \"ilb_network\", \u0026compute.NetworkArgs{\n\t\t\tName:                  pulumi.String(\"l7-ilb-network\"),\n\t\t\tProject:               serviceProject.ProjectId,\n\t\t\tAutoCreateSubnetworks: pulumi.Bool(false),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\twait120s,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// backend subnet\n\t\tilbSubnet, err := compute.NewSubnetwork(ctx, \"ilb_subnet\", \u0026compute.SubnetworkArgs{\n\t\t\tName:        pulumi.String(\"l7-ilb-subnet\"),\n\t\t\tProject:     serviceProject.ProjectId,\n\t\t\tIpCidrRange: pulumi.String(\"10.0.1.0/24\"),\n\t\t\tRegion:      pulumi.String(\"us-central1\"),\n\t\t\tNetwork:     ilbNetwork.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// health check\n\t\t_, err = compute.NewHealthCheck(ctx, \"default\", \u0026compute.HealthCheckArgs{\n\t\t\tName:             pulumi.String(\"l7-ilb-hc\"),\n\t\t\tProject:          serviceProject.ProjectId,\n\t\t\tCheckIntervalSec: pulumi.Int(1),\n\t\t\tTimeoutSec:       pulumi.Int(1),\n\t\t\tTcpHealthCheck: \u0026compute.HealthCheckTcpHealthCheckArgs{\n\t\t\t\tPort: pulumi.Int(80),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\twait120s,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// backend service\n\t\tbackend, err := compute.NewRegionBackendService(ctx, \"backend\", \u0026compute.RegionBackendServiceArgs{\n\t\t\tName:         pulumi.String(\"l7-ilb-backend-subnet\"),\n\t\t\tProject:      serviceProject.ProjectId,\n\t\t\tRegion:       pulumi.String(\"us-central1\"),\n\t\t\tHealthChecks: _default.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// forwarding rule\n\t\tforwardingRule, err := compute.NewForwardingRule(ctx, \"forwarding_rule\", \u0026compute.ForwardingRuleArgs{\n\t\t\tName:                pulumi.String(\"l7-ilb-forwarding-rule\"),\n\t\t\tProject:             serviceProject.ProjectId,\n\t\t\tRegion:              pulumi.String(\"us-central1\"),\n\t\t\tIpVersion:           pulumi.String(\"IPV4\"),\n\t\t\tLoadBalancingScheme: pulumi.String(\"INTERNAL\"),\n\t\t\tAllPorts:            pulumi.Bool(true),\n\t\t\tBackendService:      backend.ID(),\n\t\t\tNetwork:             ilbNetwork.ID(),\n\t\t\tSubnetwork:          ilbSubnet.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// discovered service block\n\t\tcatalog_service := apphub.GetDiscoveredServiceOutput(ctx, apphub.GetDiscoveredServiceOutputArgs{\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t\tServiceUri: forwardingRule.ID().ApplyT(func(id string) (string, error) {\n\t\t\t\treturn fmt.Sprintf(\"//compute.googleapis.com/%v\", id), nil\n\t\t\t}).(pulumi.StringOutput),\n\t\t}, nil)\n\t\t_, err = time.NewSleep(ctx, \"wait_120s_for_resource_ingestion\", \u0026time.SleepArgs{\n\t\t\tCreateDuration: \"120s\",\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tforwardingRule,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = apphub.NewService(ctx, \"example\", \u0026apphub.ServiceArgs{\n\t\t\tLocation:      pulumi.String(\"us-central1\"),\n\t\t\tApplicationId: application.ApplicationId,\n\t\t\tServiceId:     forwardingRule.Name,\n\t\t\tDiscoveredService: pulumi.String(catalog_service.ApplyT(func(catalog_service apphub.GetDiscoveredServiceResult) (*string, error) {\n\t\t\t\treturn \u0026catalog_service.Name, nil\n\t\t\t}).(pulumi.StringPtrOutput)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.apphub.Application;\nimport com.pulumi.gcp.apphub.ApplicationArgs;\nimport com.pulumi.gcp.apphub.inputs.ApplicationScopeArgs;\nimport com.pulumi.gcp.organizations.Project;\nimport com.pulumi.gcp.organizations.ProjectArgs;\nimport com.pulumi.gcp.projects.Service;\nimport com.pulumi.gcp.projects.ServiceArgs;\nimport com.pulumi.time.sleep;\nimport com.pulumi.time.SleepArgs;\nimport com.pulumi.gcp.apphub.ServiceProjectAttachment;\nimport com.pulumi.gcp.apphub.ServiceProjectAttachmentArgs;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.Subnetwork;\nimport com.pulumi.gcp.compute.SubnetworkArgs;\nimport com.pulumi.gcp.compute.HealthCheck;\nimport com.pulumi.gcp.compute.HealthCheckArgs;\nimport com.pulumi.gcp.compute.inputs.HealthCheckTcpHealthCheckArgs;\nimport com.pulumi.gcp.compute.RegionBackendService;\nimport com.pulumi.gcp.compute.RegionBackendServiceArgs;\nimport com.pulumi.gcp.compute.ForwardingRule;\nimport com.pulumi.gcp.compute.ForwardingRuleArgs;\nimport com.pulumi.gcp.apphub.ApphubFunctions;\nimport com.pulumi.gcp.apphub.inputs.GetDiscoveredServiceArgs;\nimport com.pulumi.gcp.apphub.Service;\nimport com.pulumi.gcp.apphub.ServiceArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var application = new Application(\"application\", ApplicationArgs.builder()\n            .location(\"us-central1\")\n            .applicationId(\"example-application-1\")\n            .scope(ApplicationScopeArgs.builder()\n                .type(\"REGIONAL\")\n                .build())\n            .build());\n\n        var serviceProject = new Project(\"serviceProject\", ProjectArgs.builder()\n            .projectId(\"project-1\")\n            .name(\"Service Project\")\n            .orgId(\"123456789\")\n            .billingAccount(\"000000-0000000-0000000-000000\")\n            .deletionPolicy(\"DELETE\")\n            .build());\n\n        // Enable Compute API\n        var computeServiceProject = new Service(\"computeServiceProject\", ServiceArgs.builder()\n            .project(serviceProject.projectId())\n            .service(\"compute.googleapis.com\")\n            .build());\n\n        var wait120s = new Sleep(\"wait120s\", SleepArgs.builder()\n            .createDuration(\"120s\")\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(computeServiceProject)\n                .build());\n\n        var serviceProjectAttachment = new ServiceProjectAttachment(\"serviceProjectAttachment\", ServiceProjectAttachmentArgs.builder()\n            .serviceProjectAttachmentId(serviceProject.projectId())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(wait120s)\n                .build());\n\n        // VPC network\n        var ilbNetwork = new Network(\"ilbNetwork\", NetworkArgs.builder()\n            .name(\"l7-ilb-network\")\n            .project(serviceProject.projectId())\n            .autoCreateSubnetworks(false)\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(wait120s)\n                .build());\n\n        // backend subnet\n        var ilbSubnet = new Subnetwork(\"ilbSubnet\", SubnetworkArgs.builder()\n            .name(\"l7-ilb-subnet\")\n            .project(serviceProject.projectId())\n            .ipCidrRange(\"10.0.1.0/24\")\n            .region(\"us-central1\")\n            .network(ilbNetwork.id())\n            .build());\n\n        // health check\n        var default_ = new HealthCheck(\"default\", HealthCheckArgs.builder()\n            .name(\"l7-ilb-hc\")\n            .project(serviceProject.projectId())\n            .checkIntervalSec(1)\n            .timeoutSec(1)\n            .tcpHealthCheck(HealthCheckTcpHealthCheckArgs.builder()\n                .port(\"80\")\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(wait120s)\n                .build());\n\n        // backend service\n        var backend = new RegionBackendService(\"backend\", RegionBackendServiceArgs.builder()\n            .name(\"l7-ilb-backend-subnet\")\n            .project(serviceProject.projectId())\n            .region(\"us-central1\")\n            .healthChecks(default_.id())\n            .build());\n\n        // forwarding rule\n        var forwardingRule = new ForwardingRule(\"forwardingRule\", ForwardingRuleArgs.builder()\n            .name(\"l7-ilb-forwarding-rule\")\n            .project(serviceProject.projectId())\n            .region(\"us-central1\")\n            .ipVersion(\"IPV4\")\n            .loadBalancingScheme(\"INTERNAL\")\n            .allPorts(true)\n            .backendService(backend.id())\n            .network(ilbNetwork.id())\n            .subnetwork(ilbSubnet.id())\n            .build());\n\n        // discovered service block\n        final var catalog-service = ApphubFunctions.getDiscoveredService(GetDiscoveredServiceArgs.builder()\n            .location(\"us-central1\")\n            .serviceUri(forwardingRule.id().applyValue(id -\u003e String.format(\"//compute.googleapis.com/%s\", id)))\n            .build());\n\n        var wait120sForResourceIngestion = new Sleep(\"wait120sForResourceIngestion\", SleepArgs.builder()\n            .createDuration(\"120s\")\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(forwardingRule)\n                .build());\n\n        var example = new Service(\"example\", ServiceArgs.builder()\n            .location(\"us-central1\")\n            .applicationId(application.applicationId())\n            .serviceId(forwardingRule.name())\n            .discoveredService(catalog_service.applyValue(catalog_service -\u003e catalog_service.name()))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  application:\n    type: gcp:apphub:Application\n    properties:\n      location: us-central1\n      applicationId: example-application-1\n      scope:\n        type: REGIONAL\n  serviceProject:\n    type: gcp:organizations:Project\n    name: service_project\n    properties:\n      projectId: project-1\n      name: Service Project\n      orgId: '123456789'\n      billingAccount: 000000-0000000-0000000-000000\n      deletionPolicy: DELETE\n  # Enable Compute API\n  computeServiceProject:\n    type: gcp:projects:Service\n    name: compute_service_project\n    properties:\n      project: ${serviceProject.projectId}\n      service: compute.googleapis.com\n  wait120s:\n    type: time:sleep\n    name: wait_120s\n    properties:\n      createDuration: 120s\n    options:\n      dependsOn:\n        - ${computeServiceProject}\n  serviceProjectAttachment:\n    type: gcp:apphub:ServiceProjectAttachment\n    name: service_project_attachment\n    properties:\n      serviceProjectAttachmentId: ${serviceProject.projectId}\n    options:\n      dependsOn:\n        - ${wait120s}\n  wait120sForResourceIngestion:\n    type: time:sleep\n    name: wait_120s_for_resource_ingestion\n    properties:\n      createDuration: 120s\n    options:\n      dependsOn:\n        - ${forwardingRule}\n  example:\n    type: gcp:apphub:Service\n    properties:\n      location: us-central1\n      applicationId: ${application.applicationId}\n      serviceId: ${forwardingRule.name}\n      discoveredService: ${[\"catalog-service\"].name}\n  # VPC network\n  ilbNetwork:\n    type: gcp:compute:Network\n    name: ilb_network\n    properties:\n      name: l7-ilb-network\n      project: ${serviceProject.projectId}\n      autoCreateSubnetworks: false\n    options:\n      dependsOn:\n        - ${wait120s}\n  # backend subnet\n  ilbSubnet:\n    type: gcp:compute:Subnetwork\n    name: ilb_subnet\n    properties:\n      name: l7-ilb-subnet\n      project: ${serviceProject.projectId}\n      ipCidrRange: 10.0.1.0/24\n      region: us-central1\n      network: ${ilbNetwork.id}\n  # forwarding rule\n  forwardingRule:\n    type: gcp:compute:ForwardingRule\n    name: forwarding_rule\n    properties:\n      name: l7-ilb-forwarding-rule\n      project: ${serviceProject.projectId}\n      region: us-central1\n      ipVersion: IPV4\n      loadBalancingScheme: INTERNAL\n      allPorts: true\n      backendService: ${backend.id}\n      network: ${ilbNetwork.id}\n      subnetwork: ${ilbSubnet.id}\n  # backend service\n  backend:\n    type: gcp:compute:RegionBackendService\n    properties:\n      name: l7-ilb-backend-subnet\n      project: ${serviceProject.projectId}\n      region: us-central1\n      healthChecks: ${default.id}\n  # health check\n  default:\n    type: gcp:compute:HealthCheck\n    properties:\n      name: l7-ilb-hc\n      project: ${serviceProject.projectId}\n      checkIntervalSec: 1\n      timeoutSec: 1\n      tcpHealthCheck:\n        port: '80'\n    options:\n      dependsOn:\n        - ${wait120s}\nvariables:\n  # discovered service block\n  catalog-service:\n    fn::invoke:\n      function: gcp:apphub:getDiscoveredService\n      arguments:\n        location: us-central1\n        serviceUri: //compute.googleapis.com/${forwardingRule.id}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Apphub Service Full\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as time from \"@pulumi/time\";\n\nconst application = new gcp.apphub.Application(\"application\", {\n    location: \"us-central1\",\n    applicationId: \"example-application-1\",\n    scope: {\n        type: \"REGIONAL\",\n    },\n});\nconst serviceProject = new gcp.organizations.Project(\"service_project\", {\n    projectId: \"project-1\",\n    name: \"Service Project\",\n    orgId: \"123456789\",\n    billingAccount: \"000000-0000000-0000000-000000\",\n    deletionPolicy: \"DELETE\",\n});\n// Enable Compute API\nconst computeServiceProject = new gcp.projects.Service(\"compute_service_project\", {\n    project: serviceProject.projectId,\n    service: \"compute.googleapis.com\",\n});\nconst wait120s = new time.index.Sleep(\"wait_120s\", {createDuration: \"120s\"}, {\n    dependsOn: [computeServiceProject],\n});\nconst serviceProjectAttachment = new gcp.apphub.ServiceProjectAttachment(\"service_project_attachment\", {serviceProjectAttachmentId: serviceProject.projectId}, {\n    dependsOn: [wait120s],\n});\n// VPC network\nconst ilbNetwork = new gcp.compute.Network(\"ilb_network\", {\n    name: \"l7-ilb-network\",\n    project: serviceProject.projectId,\n    autoCreateSubnetworks: false,\n}, {\n    dependsOn: [wait120s],\n});\n// backend subnet\nconst ilbSubnet = new gcp.compute.Subnetwork(\"ilb_subnet\", {\n    name: \"l7-ilb-subnet\",\n    project: serviceProject.projectId,\n    ipCidrRange: \"10.0.1.0/24\",\n    region: \"us-central1\",\n    network: ilbNetwork.id,\n});\n// health check\nconst _default = new gcp.compute.HealthCheck(\"default\", {\n    name: \"l7-ilb-hc\",\n    project: serviceProject.projectId,\n    checkIntervalSec: 1,\n    timeoutSec: 1,\n    tcpHealthCheck: {\n        port: 80,\n    },\n}, {\n    dependsOn: [wait120s],\n});\n// backend service\nconst backend = new gcp.compute.RegionBackendService(\"backend\", {\n    name: \"l7-ilb-backend-subnet\",\n    project: serviceProject.projectId,\n    region: \"us-central1\",\n    healthChecks: _default.id,\n});\n// forwarding rule\nconst forwardingRule = new gcp.compute.ForwardingRule(\"forwarding_rule\", {\n    name: \"l7-ilb-forwarding-rule\",\n    project: serviceProject.projectId,\n    region: \"us-central1\",\n    ipVersion: \"IPV4\",\n    loadBalancingScheme: \"INTERNAL\",\n    allPorts: true,\n    backendService: backend.id,\n    network: ilbNetwork.id,\n    subnetwork: ilbSubnet.id,\n});\n// discovered service block\nconst catalog_service = gcp.apphub.getDiscoveredServiceOutput({\n    location: \"us-central1\",\n    serviceUri: pulumi.interpolate`//compute.googleapis.com/${forwardingRule.id}`,\n});\nconst wait120sForResourceIngestion = new time.index.Sleep(\"wait_120s_for_resource_ingestion\", {createDuration: \"120s\"}, {\n    dependsOn: [forwardingRule],\n});\nconst example = new gcp.apphub.Service(\"example\", {\n    location: \"us-central1\",\n    applicationId: application.applicationId,\n    serviceId: forwardingRule.name,\n    discoveredService: catalog_service.apply(catalog_service =\u003e catalog_service.name),\n    displayName: \"Example Service Full\",\n    description: \"Register service for testing\",\n    attributes: {\n        environment: {\n            type: \"STAGING\",\n        },\n        criticality: {\n            type: \"MISSION_CRITICAL\",\n        },\n        businessOwners: [{\n            displayName: \"Alice\",\n            email: \"alice@google.com\",\n        }],\n        developerOwners: [{\n            displayName: \"Bob\",\n            email: \"bob@google.com\",\n        }],\n        operatorOwners: [{\n            displayName: \"Charlie\",\n            email: \"charlie@google.com\",\n        }],\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_time as time\n\napplication = gcp.apphub.Application(\"application\",\n    location=\"us-central1\",\n    application_id=\"example-application-1\",\n    scope={\n        \"type\": \"REGIONAL\",\n    })\nservice_project = gcp.organizations.Project(\"service_project\",\n    project_id=\"project-1\",\n    name=\"Service Project\",\n    org_id=\"123456789\",\n    billing_account=\"000000-0000000-0000000-000000\",\n    deletion_policy=\"DELETE\")\n# Enable Compute API\ncompute_service_project = gcp.projects.Service(\"compute_service_project\",\n    project=service_project.project_id,\n    service=\"compute.googleapis.com\")\nwait120s = time.index.Sleep(\"wait_120s\", create_duration=120s,\nopts = pulumi.ResourceOptions(depends_on=[compute_service_project]))\nservice_project_attachment = gcp.apphub.ServiceProjectAttachment(\"service_project_attachment\", service_project_attachment_id=service_project.project_id,\nopts = pulumi.ResourceOptions(depends_on=[wait120s]))\n# VPC network\nilb_network = gcp.compute.Network(\"ilb_network\",\n    name=\"l7-ilb-network\",\n    project=service_project.project_id,\n    auto_create_subnetworks=False,\n    opts = pulumi.ResourceOptions(depends_on=[wait120s]))\n# backend subnet\nilb_subnet = gcp.compute.Subnetwork(\"ilb_subnet\",\n    name=\"l7-ilb-subnet\",\n    project=service_project.project_id,\n    ip_cidr_range=\"10.0.1.0/24\",\n    region=\"us-central1\",\n    network=ilb_network.id)\n# health check\ndefault = gcp.compute.HealthCheck(\"default\",\n    name=\"l7-ilb-hc\",\n    project=service_project.project_id,\n    check_interval_sec=1,\n    timeout_sec=1,\n    tcp_health_check={\n        \"port\": 80,\n    },\n    opts = pulumi.ResourceOptions(depends_on=[wait120s]))\n# backend service\nbackend = gcp.compute.RegionBackendService(\"backend\",\n    name=\"l7-ilb-backend-subnet\",\n    project=service_project.project_id,\n    region=\"us-central1\",\n    health_checks=default.id)\n# forwarding rule\nforwarding_rule = gcp.compute.ForwardingRule(\"forwarding_rule\",\n    name=\"l7-ilb-forwarding-rule\",\n    project=service_project.project_id,\n    region=\"us-central1\",\n    ip_version=\"IPV4\",\n    load_balancing_scheme=\"INTERNAL\",\n    all_ports=True,\n    backend_service=backend.id,\n    network=ilb_network.id,\n    subnetwork=ilb_subnet.id)\n# discovered service block\ncatalog_service = gcp.apphub.get_discovered_service_output(location=\"us-central1\",\n    service_uri=forwarding_rule.id.apply(lambda id: f\"//compute.googleapis.com/{id}\"))\nwait120s_for_resource_ingestion = time.index.Sleep(\"wait_120s_for_resource_ingestion\", create_duration=120s,\nopts = pulumi.ResourceOptions(depends_on=[forwarding_rule]))\nexample = gcp.apphub.Service(\"example\",\n    location=\"us-central1\",\n    application_id=application.application_id,\n    service_id=forwarding_rule.name,\n    discovered_service=catalog_service.name,\n    display_name=\"Example Service Full\",\n    description=\"Register service for testing\",\n    attributes={\n        \"environment\": {\n            \"type\": \"STAGING\",\n        },\n        \"criticality\": {\n            \"type\": \"MISSION_CRITICAL\",\n        },\n        \"business_owners\": [{\n            \"display_name\": \"Alice\",\n            \"email\": \"alice@google.com\",\n        }],\n        \"developer_owners\": [{\n            \"display_name\": \"Bob\",\n            \"email\": \"bob@google.com\",\n        }],\n        \"operator_owners\": [{\n            \"display_name\": \"Charlie\",\n            \"email\": \"charlie@google.com\",\n        }],\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Time = Pulumi.Time;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var application = new Gcp.Apphub.Application(\"application\", new()\n    {\n        Location = \"us-central1\",\n        ApplicationId = \"example-application-1\",\n        Scope = new Gcp.Apphub.Inputs.ApplicationScopeArgs\n        {\n            Type = \"REGIONAL\",\n        },\n    });\n\n    var serviceProject = new Gcp.Organizations.Project(\"service_project\", new()\n    {\n        ProjectId = \"project-1\",\n        Name = \"Service Project\",\n        OrgId = \"123456789\",\n        BillingAccount = \"000000-0000000-0000000-000000\",\n        DeletionPolicy = \"DELETE\",\n    });\n\n    // Enable Compute API\n    var computeServiceProject = new Gcp.Projects.Service(\"compute_service_project\", new()\n    {\n        Project = serviceProject.ProjectId,\n        ServiceName = \"compute.googleapis.com\",\n    });\n\n    var wait120s = new Time.Index.Sleep(\"wait_120s\", new()\n    {\n        CreateDuration = \"120s\",\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            computeServiceProject,\n        },\n    });\n\n    var serviceProjectAttachment = new Gcp.Apphub.ServiceProjectAttachment(\"service_project_attachment\", new()\n    {\n        ServiceProjectAttachmentId = serviceProject.ProjectId,\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            wait120s,\n        },\n    });\n\n    // VPC network\n    var ilbNetwork = new Gcp.Compute.Network(\"ilb_network\", new()\n    {\n        Name = \"l7-ilb-network\",\n        Project = serviceProject.ProjectId,\n        AutoCreateSubnetworks = false,\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            wait120s,\n        },\n    });\n\n    // backend subnet\n    var ilbSubnet = new Gcp.Compute.Subnetwork(\"ilb_subnet\", new()\n    {\n        Name = \"l7-ilb-subnet\",\n        Project = serviceProject.ProjectId,\n        IpCidrRange = \"10.0.1.0/24\",\n        Region = \"us-central1\",\n        Network = ilbNetwork.Id,\n    });\n\n    // health check\n    var @default = new Gcp.Compute.HealthCheck(\"default\", new()\n    {\n        Name = \"l7-ilb-hc\",\n        Project = serviceProject.ProjectId,\n        CheckIntervalSec = 1,\n        TimeoutSec = 1,\n        TcpHealthCheck = new Gcp.Compute.Inputs.HealthCheckTcpHealthCheckArgs\n        {\n            Port = 80,\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            wait120s,\n        },\n    });\n\n    // backend service\n    var backend = new Gcp.Compute.RegionBackendService(\"backend\", new()\n    {\n        Name = \"l7-ilb-backend-subnet\",\n        Project = serviceProject.ProjectId,\n        Region = \"us-central1\",\n        HealthChecks = @default.Id,\n    });\n\n    // forwarding rule\n    var forwardingRule = new Gcp.Compute.ForwardingRule(\"forwarding_rule\", new()\n    {\n        Name = \"l7-ilb-forwarding-rule\",\n        Project = serviceProject.ProjectId,\n        Region = \"us-central1\",\n        IpVersion = \"IPV4\",\n        LoadBalancingScheme = \"INTERNAL\",\n        AllPorts = true,\n        BackendService = backend.Id,\n        Network = ilbNetwork.Id,\n        Subnetwork = ilbSubnet.Id,\n    });\n\n    // discovered service block\n    var catalog_service = Gcp.Apphub.GetDiscoveredService.Invoke(new()\n    {\n        Location = \"us-central1\",\n        ServiceUri = $\"//compute.googleapis.com/{forwardingRule.Id}\",\n    });\n\n    var wait120sForResourceIngestion = new Time.Index.Sleep(\"wait_120s_for_resource_ingestion\", new()\n    {\n        CreateDuration = \"120s\",\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            forwardingRule,\n        },\n    });\n\n    var example = new Gcp.Apphub.Service(\"example\", new()\n    {\n        Location = \"us-central1\",\n        ApplicationId = application.ApplicationId,\n        ServiceId = forwardingRule.Name,\n        DiscoveredService = catalog_service.Apply(catalog_service =\u003e catalog_service.Apply(getDiscoveredServiceResult =\u003e getDiscoveredServiceResult.Name)),\n        DisplayName = \"Example Service Full\",\n        Description = \"Register service for testing\",\n        Attributes = new Gcp.Apphub.Inputs.ServiceAttributesArgs\n        {\n            Environment = new Gcp.Apphub.Inputs.ServiceAttributesEnvironmentArgs\n            {\n                Type = \"STAGING\",\n            },\n            Criticality = new Gcp.Apphub.Inputs.ServiceAttributesCriticalityArgs\n            {\n                Type = \"MISSION_CRITICAL\",\n            },\n            BusinessOwners = new[]\n            {\n                new Gcp.Apphub.Inputs.ServiceAttributesBusinessOwnerArgs\n                {\n                    DisplayName = \"Alice\",\n                    Email = \"alice@google.com\",\n                },\n            },\n            DeveloperOwners = new[]\n            {\n                new Gcp.Apphub.Inputs.ServiceAttributesDeveloperOwnerArgs\n                {\n                    DisplayName = \"Bob\",\n                    Email = \"bob@google.com\",\n                },\n            },\n            OperatorOwners = new[]\n            {\n                new Gcp.Apphub.Inputs.ServiceAttributesOperatorOwnerArgs\n                {\n                    DisplayName = \"Charlie\",\n                    Email = \"charlie@google.com\",\n                },\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/apphub\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects\"\n\t\"github.com/pulumi/pulumi-time/sdk/go/time\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tapplication, err := apphub.NewApplication(ctx, \"application\", \u0026apphub.ApplicationArgs{\n\t\t\tLocation:      pulumi.String(\"us-central1\"),\n\t\t\tApplicationId: pulumi.String(\"example-application-1\"),\n\t\t\tScope: \u0026apphub.ApplicationScopeArgs{\n\t\t\t\tType: pulumi.String(\"REGIONAL\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tserviceProject, err := organizations.NewProject(ctx, \"service_project\", \u0026organizations.ProjectArgs{\n\t\t\tProjectId:      pulumi.String(\"project-1\"),\n\t\t\tName:           pulumi.String(\"Service Project\"),\n\t\t\tOrgId:          pulumi.String(\"123456789\"),\n\t\t\tBillingAccount: pulumi.String(\"000000-0000000-0000000-000000\"),\n\t\t\tDeletionPolicy: pulumi.String(\"DELETE\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// Enable Compute API\n\t\tcomputeServiceProject, err := projects.NewService(ctx, \"compute_service_project\", \u0026projects.ServiceArgs{\n\t\t\tProject: serviceProject.ProjectId,\n\t\t\tService: pulumi.String(\"compute.googleapis.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\twait120s, err := time.NewSleep(ctx, \"wait_120s\", \u0026time.SleepArgs{\n\t\t\tCreateDuration: \"120s\",\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tcomputeServiceProject,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = apphub.NewServiceProjectAttachment(ctx, \"service_project_attachment\", \u0026apphub.ServiceProjectAttachmentArgs{\n\t\t\tServiceProjectAttachmentId: serviceProject.ProjectId,\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\twait120s,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// VPC network\n\t\tilbNetwork, err := compute.NewNetwork(ctx, \"ilb_network\", \u0026compute.NetworkArgs{\n\t\t\tName:                  pulumi.String(\"l7-ilb-network\"),\n\t\t\tProject:               serviceProject.ProjectId,\n\t\t\tAutoCreateSubnetworks: pulumi.Bool(false),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\twait120s,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// backend subnet\n\t\tilbSubnet, err := compute.NewSubnetwork(ctx, \"ilb_subnet\", \u0026compute.SubnetworkArgs{\n\t\t\tName:        pulumi.String(\"l7-ilb-subnet\"),\n\t\t\tProject:     serviceProject.ProjectId,\n\t\t\tIpCidrRange: pulumi.String(\"10.0.1.0/24\"),\n\t\t\tRegion:      pulumi.String(\"us-central1\"),\n\t\t\tNetwork:     ilbNetwork.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// health check\n\t\t_, err = compute.NewHealthCheck(ctx, \"default\", \u0026compute.HealthCheckArgs{\n\t\t\tName:             pulumi.String(\"l7-ilb-hc\"),\n\t\t\tProject:          serviceProject.ProjectId,\n\t\t\tCheckIntervalSec: pulumi.Int(1),\n\t\t\tTimeoutSec:       pulumi.Int(1),\n\t\t\tTcpHealthCheck: \u0026compute.HealthCheckTcpHealthCheckArgs{\n\t\t\t\tPort: pulumi.Int(80),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\twait120s,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// backend service\n\t\tbackend, err := compute.NewRegionBackendService(ctx, \"backend\", \u0026compute.RegionBackendServiceArgs{\n\t\t\tName:         pulumi.String(\"l7-ilb-backend-subnet\"),\n\t\t\tProject:      serviceProject.ProjectId,\n\t\t\tRegion:       pulumi.String(\"us-central1\"),\n\t\t\tHealthChecks: _default.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// forwarding rule\n\t\tforwardingRule, err := compute.NewForwardingRule(ctx, \"forwarding_rule\", \u0026compute.ForwardingRuleArgs{\n\t\t\tName:                pulumi.String(\"l7-ilb-forwarding-rule\"),\n\t\t\tProject:             serviceProject.ProjectId,\n\t\t\tRegion:              pulumi.String(\"us-central1\"),\n\t\t\tIpVersion:           pulumi.String(\"IPV4\"),\n\t\t\tLoadBalancingScheme: pulumi.String(\"INTERNAL\"),\n\t\t\tAllPorts:            pulumi.Bool(true),\n\t\t\tBackendService:      backend.ID(),\n\t\t\tNetwork:             ilbNetwork.ID(),\n\t\t\tSubnetwork:          ilbSubnet.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// discovered service block\n\t\tcatalog_service := apphub.GetDiscoveredServiceOutput(ctx, apphub.GetDiscoveredServiceOutputArgs{\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t\tServiceUri: forwardingRule.ID().ApplyT(func(id string) (string, error) {\n\t\t\t\treturn fmt.Sprintf(\"//compute.googleapis.com/%v\", id), nil\n\t\t\t}).(pulumi.StringOutput),\n\t\t}, nil)\n\t\t_, err = time.NewSleep(ctx, \"wait_120s_for_resource_ingestion\", \u0026time.SleepArgs{\n\t\t\tCreateDuration: \"120s\",\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tforwardingRule,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = apphub.NewService(ctx, \"example\", \u0026apphub.ServiceArgs{\n\t\t\tLocation:      pulumi.String(\"us-central1\"),\n\t\t\tApplicationId: application.ApplicationId,\n\t\t\tServiceId:     forwardingRule.Name,\n\t\t\tDiscoveredService: pulumi.String(catalog_service.ApplyT(func(catalog_service apphub.GetDiscoveredServiceResult) (*string, error) {\n\t\t\t\treturn \u0026catalog_service.Name, nil\n\t\t\t}).(pulumi.StringPtrOutput)),\n\t\t\tDisplayName: pulumi.String(\"Example Service Full\"),\n\t\t\tDescription: pulumi.String(\"Register service for testing\"),\n\t\t\tAttributes: \u0026apphub.ServiceAttributesArgs{\n\t\t\t\tEnvironment: \u0026apphub.ServiceAttributesEnvironmentArgs{\n\t\t\t\t\tType: pulumi.String(\"STAGING\"),\n\t\t\t\t},\n\t\t\t\tCriticality: \u0026apphub.ServiceAttributesCriticalityArgs{\n\t\t\t\t\tType: pulumi.String(\"MISSION_CRITICAL\"),\n\t\t\t\t},\n\t\t\t\tBusinessOwners: apphub.ServiceAttributesBusinessOwnerArray{\n\t\t\t\t\t\u0026apphub.ServiceAttributesBusinessOwnerArgs{\n\t\t\t\t\t\tDisplayName: pulumi.String(\"Alice\"),\n\t\t\t\t\t\tEmail:       pulumi.String(\"alice@google.com\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tDeveloperOwners: apphub.ServiceAttributesDeveloperOwnerArray{\n\t\t\t\t\t\u0026apphub.ServiceAttributesDeveloperOwnerArgs{\n\t\t\t\t\t\tDisplayName: pulumi.String(\"Bob\"),\n\t\t\t\t\t\tEmail:       pulumi.String(\"bob@google.com\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tOperatorOwners: apphub.ServiceAttributesOperatorOwnerArray{\n\t\t\t\t\t\u0026apphub.ServiceAttributesOperatorOwnerArgs{\n\t\t\t\t\t\tDisplayName: pulumi.String(\"Charlie\"),\n\t\t\t\t\t\tEmail:       pulumi.String(\"charlie@google.com\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.apphub.Application;\nimport com.pulumi.gcp.apphub.ApplicationArgs;\nimport com.pulumi.gcp.apphub.inputs.ApplicationScopeArgs;\nimport com.pulumi.gcp.organizations.Project;\nimport com.pulumi.gcp.organizations.ProjectArgs;\nimport com.pulumi.gcp.projects.Service;\nimport com.pulumi.gcp.projects.ServiceArgs;\nimport com.pulumi.time.sleep;\nimport com.pulumi.time.SleepArgs;\nimport com.pulumi.gcp.apphub.ServiceProjectAttachment;\nimport com.pulumi.gcp.apphub.ServiceProjectAttachmentArgs;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.Subnetwork;\nimport com.pulumi.gcp.compute.SubnetworkArgs;\nimport com.pulumi.gcp.compute.HealthCheck;\nimport com.pulumi.gcp.compute.HealthCheckArgs;\nimport com.pulumi.gcp.compute.inputs.HealthCheckTcpHealthCheckArgs;\nimport com.pulumi.gcp.compute.RegionBackendService;\nimport com.pulumi.gcp.compute.RegionBackendServiceArgs;\nimport com.pulumi.gcp.compute.ForwardingRule;\nimport com.pulumi.gcp.compute.ForwardingRuleArgs;\nimport com.pulumi.gcp.apphub.ApphubFunctions;\nimport com.pulumi.gcp.apphub.inputs.GetDiscoveredServiceArgs;\nimport com.pulumi.gcp.apphub.Service;\nimport com.pulumi.gcp.apphub.ServiceArgs;\nimport com.pulumi.gcp.apphub.inputs.ServiceAttributesArgs;\nimport com.pulumi.gcp.apphub.inputs.ServiceAttributesEnvironmentArgs;\nimport com.pulumi.gcp.apphub.inputs.ServiceAttributesCriticalityArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var application = new Application(\"application\", ApplicationArgs.builder()\n            .location(\"us-central1\")\n            .applicationId(\"example-application-1\")\n            .scope(ApplicationScopeArgs.builder()\n                .type(\"REGIONAL\")\n                .build())\n            .build());\n\n        var serviceProject = new Project(\"serviceProject\", ProjectArgs.builder()\n            .projectId(\"project-1\")\n            .name(\"Service Project\")\n            .orgId(\"123456789\")\n            .billingAccount(\"000000-0000000-0000000-000000\")\n            .deletionPolicy(\"DELETE\")\n            .build());\n\n        // Enable Compute API\n        var computeServiceProject = new Service(\"computeServiceProject\", ServiceArgs.builder()\n            .project(serviceProject.projectId())\n            .service(\"compute.googleapis.com\")\n            .build());\n\n        var wait120s = new Sleep(\"wait120s\", SleepArgs.builder()\n            .createDuration(\"120s\")\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(computeServiceProject)\n                .build());\n\n        var serviceProjectAttachment = new ServiceProjectAttachment(\"serviceProjectAttachment\", ServiceProjectAttachmentArgs.builder()\n            .serviceProjectAttachmentId(serviceProject.projectId())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(wait120s)\n                .build());\n\n        // VPC network\n        var ilbNetwork = new Network(\"ilbNetwork\", NetworkArgs.builder()\n            .name(\"l7-ilb-network\")\n            .project(serviceProject.projectId())\n            .autoCreateSubnetworks(false)\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(wait120s)\n                .build());\n\n        // backend subnet\n        var ilbSubnet = new Subnetwork(\"ilbSubnet\", SubnetworkArgs.builder()\n            .name(\"l7-ilb-subnet\")\n            .project(serviceProject.projectId())\n            .ipCidrRange(\"10.0.1.0/24\")\n            .region(\"us-central1\")\n            .network(ilbNetwork.id())\n            .build());\n\n        // health check\n        var default_ = new HealthCheck(\"default\", HealthCheckArgs.builder()\n            .name(\"l7-ilb-hc\")\n            .project(serviceProject.projectId())\n            .checkIntervalSec(1)\n            .timeoutSec(1)\n            .tcpHealthCheck(HealthCheckTcpHealthCheckArgs.builder()\n                .port(\"80\")\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(wait120s)\n                .build());\n\n        // backend service\n        var backend = new RegionBackendService(\"backend\", RegionBackendServiceArgs.builder()\n            .name(\"l7-ilb-backend-subnet\")\n            .project(serviceProject.projectId())\n            .region(\"us-central1\")\n            .healthChecks(default_.id())\n            .build());\n\n        // forwarding rule\n        var forwardingRule = new ForwardingRule(\"forwardingRule\", ForwardingRuleArgs.builder()\n            .name(\"l7-ilb-forwarding-rule\")\n            .project(serviceProject.projectId())\n            .region(\"us-central1\")\n            .ipVersion(\"IPV4\")\n            .loadBalancingScheme(\"INTERNAL\")\n            .allPorts(true)\n            .backendService(backend.id())\n            .network(ilbNetwork.id())\n            .subnetwork(ilbSubnet.id())\n            .build());\n\n        // discovered service block\n        final var catalog-service = ApphubFunctions.getDiscoveredService(GetDiscoveredServiceArgs.builder()\n            .location(\"us-central1\")\n            .serviceUri(forwardingRule.id().applyValue(id -\u003e String.format(\"//compute.googleapis.com/%s\", id)))\n            .build());\n\n        var wait120sForResourceIngestion = new Sleep(\"wait120sForResourceIngestion\", SleepArgs.builder()\n            .createDuration(\"120s\")\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(forwardingRule)\n                .build());\n\n        var example = new Service(\"example\", ServiceArgs.builder()\n            .location(\"us-central1\")\n            .applicationId(application.applicationId())\n            .serviceId(forwardingRule.name())\n            .discoveredService(catalog_service.applyValue(catalog_service -\u003e catalog_service.name()))\n            .displayName(\"Example Service Full\")\n            .description(\"Register service for testing\")\n            .attributes(ServiceAttributesArgs.builder()\n                .environment(ServiceAttributesEnvironmentArgs.builder()\n                    .type(\"STAGING\")\n                    .build())\n                .criticality(ServiceAttributesCriticalityArgs.builder()\n                    .type(\"MISSION_CRITICAL\")\n                    .build())\n                .businessOwners(ServiceAttributesBusinessOwnerArgs.builder()\n                    .displayName(\"Alice\")\n                    .email(\"alice@google.com\")\n                    .build())\n                .developerOwners(ServiceAttributesDeveloperOwnerArgs.builder()\n                    .displayName(\"Bob\")\n                    .email(\"bob@google.com\")\n                    .build())\n                .operatorOwners(ServiceAttributesOperatorOwnerArgs.builder()\n                    .displayName(\"Charlie\")\n                    .email(\"charlie@google.com\")\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  application:\n    type: gcp:apphub:Application\n    properties:\n      location: us-central1\n      applicationId: example-application-1\n      scope:\n        type: REGIONAL\n  serviceProject:\n    type: gcp:organizations:Project\n    name: service_project\n    properties:\n      projectId: project-1\n      name: Service Project\n      orgId: '123456789'\n      billingAccount: 000000-0000000-0000000-000000\n      deletionPolicy: DELETE\n  # Enable Compute API\n  computeServiceProject:\n    type: gcp:projects:Service\n    name: compute_service_project\n    properties:\n      project: ${serviceProject.projectId}\n      service: compute.googleapis.com\n  wait120s:\n    type: time:sleep\n    name: wait_120s\n    properties:\n      createDuration: 120s\n    options:\n      dependsOn:\n        - ${computeServiceProject}\n  serviceProjectAttachment:\n    type: gcp:apphub:ServiceProjectAttachment\n    name: service_project_attachment\n    properties:\n      serviceProjectAttachmentId: ${serviceProject.projectId}\n    options:\n      dependsOn:\n        - ${wait120s}\n  wait120sForResourceIngestion:\n    type: time:sleep\n    name: wait_120s_for_resource_ingestion\n    properties:\n      createDuration: 120s\n    options:\n      dependsOn:\n        - ${forwardingRule}\n  example:\n    type: gcp:apphub:Service\n    properties:\n      location: us-central1\n      applicationId: ${application.applicationId}\n      serviceId: ${forwardingRule.name}\n      discoveredService: ${[\"catalog-service\"].name}\n      displayName: Example Service Full\n      description: Register service for testing\n      attributes:\n        environment:\n          type: STAGING\n        criticality:\n          type: MISSION_CRITICAL\n        businessOwners:\n          - displayName: Alice\n            email: alice@google.com\n        developerOwners:\n          - displayName: Bob\n            email: bob@google.com\n        operatorOwners:\n          - displayName: Charlie\n            email: charlie@google.com\n  # VPC network\n  ilbNetwork:\n    type: gcp:compute:Network\n    name: ilb_network\n    properties:\n      name: l7-ilb-network\n      project: ${serviceProject.projectId}\n      autoCreateSubnetworks: false\n    options:\n      dependsOn:\n        - ${wait120s}\n  # backend subnet\n  ilbSubnet:\n    type: gcp:compute:Subnetwork\n    name: ilb_subnet\n    properties:\n      name: l7-ilb-subnet\n      project: ${serviceProject.projectId}\n      ipCidrRange: 10.0.1.0/24\n      region: us-central1\n      network: ${ilbNetwork.id}\n  # forwarding rule\n  forwardingRule:\n    type: gcp:compute:ForwardingRule\n    name: forwarding_rule\n    properties:\n      name: l7-ilb-forwarding-rule\n      project: ${serviceProject.projectId}\n      region: us-central1\n      ipVersion: IPV4\n      loadBalancingScheme: INTERNAL\n      allPorts: true\n      backendService: ${backend.id}\n      network: ${ilbNetwork.id}\n      subnetwork: ${ilbSubnet.id}\n  # backend service\n  backend:\n    type: gcp:compute:RegionBackendService\n    properties:\n      name: l7-ilb-backend-subnet\n      project: ${serviceProject.projectId}\n      region: us-central1\n      healthChecks: ${default.id}\n  # health check\n  default:\n    type: gcp:compute:HealthCheck\n    properties:\n      name: l7-ilb-hc\n      project: ${serviceProject.projectId}\n      checkIntervalSec: 1\n      timeoutSec: 1\n      tcpHealthCheck:\n        port: '80'\n    options:\n      dependsOn:\n        - ${wait120s}\nvariables:\n  # discovered service block\n  catalog-service:\n    fn::invoke:\n      function: gcp:apphub:getDiscoveredService\n      arguments:\n        location: us-central1\n        serviceUri: //compute.googleapis.com/${forwardingRule.id}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nService can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{location}}/applications/{{application_id}}/services/{{service_id}}`\n\n* `{{project}}/{{location}}/{{application_id}}/{{service_id}}`\n\n* `{{location}}/{{application_id}}/{{service_id}}`\n\nWhen using the `pulumi import` command, Service can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:apphub/service:Service default projects/{{project}}/locations/{{location}}/applications/{{application_id}}/services/{{service_id}}\n```\n\n```sh\n$ pulumi import gcp:apphub/service:Service default {{project}}/{{location}}/{{application_id}}/{{service_id}}\n```\n\n```sh\n$ pulumi import gcp:apphub/service:Service default {{location}}/{{application_id}}/{{service_id}}\n```\n\n",
             "properties": {
                 "applicationId": {
                     "type": "string",
@@ -154371,7 +154371,7 @@
             }
         },
         "gcp:cloudbuildv2/connection:Connection": {
-            "description": "A connection to a SCM like GitHub, GitHub Enterprise, Bitbucket Data Center/Cloud or GitLab.\n\n\nTo get more information about Connection, see:\n\n* [API documentation](https://cloud.google.com/build/docs/api/reference/rest)\n* How-to Guides\n    * [Official Documentation](https://cloud.google.com/build/docs)\n\n## Example Usage\n\n### Cloudbuildv2 Connection\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_connection = new gcp.cloudbuildv2.Connection(\"my-connection\", {\n    location: \"us-central1\",\n    name: \"tf-test-connection\",\n    githubConfig: {\n        appInstallationId: 0,\n        authorizerCredential: {\n            oauthTokenSecretVersion: \"projects/gcb-terraform-creds/secrets/github-pat/versions/1\",\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_connection = gcp.cloudbuildv2.Connection(\"my-connection\",\n    location=\"us-central1\",\n    name=\"tf-test-connection\",\n    github_config={\n        \"app_installation_id\": 0,\n        \"authorizer_credential\": {\n            \"oauth_token_secret_version\": \"projects/gcb-terraform-creds/secrets/github-pat/versions/1\",\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_connection = new Gcp.CloudBuildV2.Connection(\"my-connection\", new()\n    {\n        Location = \"us-central1\",\n        Name = \"tf-test-connection\",\n        GithubConfig = new Gcp.CloudBuildV2.Inputs.ConnectionGithubConfigArgs\n        {\n            AppInstallationId = 0,\n            AuthorizerCredential = new Gcp.CloudBuildV2.Inputs.ConnectionGithubConfigAuthorizerCredentialArgs\n            {\n                OauthTokenSecretVersion = \"projects/gcb-terraform-creds/secrets/github-pat/versions/1\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudbuildv2\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudbuildv2.NewConnection(ctx, \"my-connection\", \u0026cloudbuildv2.ConnectionArgs{\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t\tName:     pulumi.String(\"tf-test-connection\"),\n\t\t\tGithubConfig: \u0026cloudbuildv2.ConnectionGithubConfigArgs{\n\t\t\t\tAppInstallationId: pulumi.Int(0),\n\t\t\t\tAuthorizerCredential: \u0026cloudbuildv2.ConnectionGithubConfigAuthorizerCredentialArgs{\n\t\t\t\t\tOauthTokenSecretVersion: pulumi.String(\"projects/gcb-terraform-creds/secrets/github-pat/versions/1\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.cloudbuildv2.Connection;\nimport com.pulumi.gcp.cloudbuildv2.ConnectionArgs;\nimport com.pulumi.gcp.cloudbuildv2.inputs.ConnectionGithubConfigArgs;\nimport com.pulumi.gcp.cloudbuildv2.inputs.ConnectionGithubConfigAuthorizerCredentialArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var my_connection = new Connection(\"my-connection\", ConnectionArgs.builder()\n            .location(\"us-central1\")\n            .name(\"tf-test-connection\")\n            .githubConfig(ConnectionGithubConfigArgs.builder()\n                .appInstallationId(0)\n                .authorizerCredential(ConnectionGithubConfigAuthorizerCredentialArgs.builder()\n                    .oauthTokenSecretVersion(\"projects/gcb-terraform-creds/secrets/github-pat/versions/1\")\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  my-connection:\n    type: gcp:cloudbuildv2:Connection\n    properties:\n      location: us-central1\n      name: tf-test-connection\n      githubConfig:\n        appInstallationId: 0\n        authorizerCredential:\n          oauthTokenSecretVersion: projects/gcb-terraform-creds/secrets/github-pat/versions/1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Cloudbuildv2 Connection Ghe\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst private_key_secret = new gcp.secretmanager.Secret(\"private-key-secret\", {\n    secretId: \"ghe-pk-secret\",\n    replication: {\n        auto: {},\n    },\n});\nconst private_key_secret_version = new gcp.secretmanager.SecretVersion(\"private-key-secret-version\", {\n    secret: private_key_secret.id,\n    secretData: std.file({\n        input: \"private-key.pem\",\n    }).then(invoke =\u003e invoke.result),\n});\nconst webhook_secret_secret = new gcp.secretmanager.Secret(\"webhook-secret-secret\", {\n    secretId: \"github-token-secret\",\n    replication: {\n        auto: {},\n    },\n});\nconst webhook_secret_secret_version = new gcp.secretmanager.SecretVersion(\"webhook-secret-secret-version\", {\n    secret: webhook_secret_secret.id,\n    secretData: \"\u003cwebhook-secret-data\u003e\",\n});\nconst p4sa-secretAccessor = gcp.organizations.getIAMPolicy({\n    bindings: [{\n        role: \"roles/secretmanager.secretAccessor\",\n        members: [\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\"],\n    }],\n});\nconst policy_pk = new gcp.secretmanager.SecretIamPolicy(\"policy-pk\", {\n    secretId: private_key_secret.secretId,\n    policyData: p4sa_secretAccessor.then(p4sa_secretAccessor =\u003e p4sa_secretAccessor.policyData),\n});\nconst policy_whs = new gcp.secretmanager.SecretIamPolicy(\"policy-whs\", {\n    secretId: webhook_secret_secret.secretId,\n    policyData: p4sa_secretAccessor.then(p4sa_secretAccessor =\u003e p4sa_secretAccessor.policyData),\n});\nconst my_connection = new gcp.cloudbuildv2.Connection(\"my-connection\", {\n    location: \"us-central1\",\n    name: \"my-terraform-ghe-connection\",\n    githubEnterpriseConfig: {\n        hostUri: \"https://ghe.com\",\n        privateKeySecretVersion: private_key_secret_version.id,\n        webhookSecretSecretVersion: webhook_secret_secret_version.id,\n        appId: 200,\n        appSlug: \"gcb-app\",\n        appInstallationId: 300,\n    },\n}, {\n    dependsOn: [\n        policy_pk,\n        policy_whs,\n    ],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\nprivate_key_secret = gcp.secretmanager.Secret(\"private-key-secret\",\n    secret_id=\"ghe-pk-secret\",\n    replication={\n        \"auto\": {},\n    })\nprivate_key_secret_version = gcp.secretmanager.SecretVersion(\"private-key-secret-version\",\n    secret=private_key_secret.id,\n    secret_data=std.file(input=\"private-key.pem\").result)\nwebhook_secret_secret = gcp.secretmanager.Secret(\"webhook-secret-secret\",\n    secret_id=\"github-token-secret\",\n    replication={\n        \"auto\": {},\n    })\nwebhook_secret_secret_version = gcp.secretmanager.SecretVersion(\"webhook-secret-secret-version\",\n    secret=webhook_secret_secret.id,\n    secret_data=\"\u003cwebhook-secret-data\u003e\")\np4sa_secret_accessor = gcp.organizations.get_iam_policy(bindings=[{\n    \"role\": \"roles/secretmanager.secretAccessor\",\n    \"members\": [\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\"],\n}])\npolicy_pk = gcp.secretmanager.SecretIamPolicy(\"policy-pk\",\n    secret_id=private_key_secret.secret_id,\n    policy_data=p4sa_secret_accessor.policy_data)\npolicy_whs = gcp.secretmanager.SecretIamPolicy(\"policy-whs\",\n    secret_id=webhook_secret_secret.secret_id,\n    policy_data=p4sa_secret_accessor.policy_data)\nmy_connection = gcp.cloudbuildv2.Connection(\"my-connection\",\n    location=\"us-central1\",\n    name=\"my-terraform-ghe-connection\",\n    github_enterprise_config={\n        \"host_uri\": \"https://ghe.com\",\n        \"private_key_secret_version\": private_key_secret_version.id,\n        \"webhook_secret_secret_version\": webhook_secret_secret_version.id,\n        \"app_id\": 200,\n        \"app_slug\": \"gcb-app\",\n        \"app_installation_id\": 300,\n    },\n    opts = pulumi.ResourceOptions(depends_on=[\n            policy_pk,\n            policy_whs,\n        ]))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var private_key_secret = new Gcp.SecretManager.Secret(\"private-key-secret\", new()\n    {\n        SecretId = \"ghe-pk-secret\",\n        Replication = new Gcp.SecretManager.Inputs.SecretReplicationArgs\n        {\n            Auto = null,\n        },\n    });\n\n    var private_key_secret_version = new Gcp.SecretManager.SecretVersion(\"private-key-secret-version\", new()\n    {\n        Secret = private_key_secret.Id,\n        SecretData = Std.File.Invoke(new()\n        {\n            Input = \"private-key.pem\",\n        }).Apply(invoke =\u003e invoke.Result),\n    });\n\n    var webhook_secret_secret = new Gcp.SecretManager.Secret(\"webhook-secret-secret\", new()\n    {\n        SecretId = \"github-token-secret\",\n        Replication = new Gcp.SecretManager.Inputs.SecretReplicationArgs\n        {\n            Auto = null,\n        },\n    });\n\n    var webhook_secret_secret_version = new Gcp.SecretManager.SecretVersion(\"webhook-secret-secret-version\", new()\n    {\n        Secret = webhook_secret_secret.Id,\n        SecretData = \"\u003cwebhook-secret-data\u003e\",\n    });\n\n    var p4sa_secretAccessor = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/secretmanager.secretAccessor\",\n                Members = new[]\n                {\n                    \"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\",\n                },\n            },\n        },\n    });\n\n    var policy_pk = new Gcp.SecretManager.SecretIamPolicy(\"policy-pk\", new()\n    {\n        SecretId = private_key_secret.SecretId,\n        PolicyData = p4sa_secretAccessor.Apply(p4sa_secretAccessor =\u003e p4sa_secretAccessor.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData)),\n    });\n\n    var policy_whs = new Gcp.SecretManager.SecretIamPolicy(\"policy-whs\", new()\n    {\n        SecretId = webhook_secret_secret.SecretId,\n        PolicyData = p4sa_secretAccessor.Apply(p4sa_secretAccessor =\u003e p4sa_secretAccessor.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData)),\n    });\n\n    var my_connection = new Gcp.CloudBuildV2.Connection(\"my-connection\", new()\n    {\n        Location = \"us-central1\",\n        Name = \"my-terraform-ghe-connection\",\n        GithubEnterpriseConfig = new Gcp.CloudBuildV2.Inputs.ConnectionGithubEnterpriseConfigArgs\n        {\n            HostUri = \"https://ghe.com\",\n            PrivateKeySecretVersion = private_key_secret_version.Id,\n            WebhookSecretSecretVersion = webhook_secret_secret_version.Id,\n            AppId = 200,\n            AppSlug = \"gcb-app\",\n            AppInstallationId = 300,\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            policy_pk,\n            policy_whs,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudbuildv2\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/secretmanager\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := secretmanager.NewSecret(ctx, \"private-key-secret\", \u0026secretmanager.SecretArgs{\n\t\t\tSecretId: pulumi.String(\"ghe-pk-secret\"),\n\t\t\tReplication: \u0026secretmanager.SecretReplicationArgs{\n\t\t\t\tAuto: \u0026secretmanager.SecretReplicationAutoArgs{},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tinvokeFile, err := std.File(ctx, \u0026std.FileArgs{\n\t\t\tInput: \"private-key.pem\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretVersion(ctx, \"private-key-secret-version\", \u0026secretmanager.SecretVersionArgs{\n\t\t\tSecret:     private_key_secret.ID(),\n\t\t\tSecretData: pulumi.String(invokeFile.Result),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecret(ctx, \"webhook-secret-secret\", \u0026secretmanager.SecretArgs{\n\t\t\tSecretId: pulumi.String(\"github-token-secret\"),\n\t\t\tReplication: \u0026secretmanager.SecretReplicationArgs{\n\t\t\t\tAuto: \u0026secretmanager.SecretReplicationAutoArgs{},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretVersion(ctx, \"webhook-secret-secret-version\", \u0026secretmanager.SecretVersionArgs{\n\t\t\tSecret:     webhook_secret_secret.ID(),\n\t\t\tSecretData: pulumi.String(\"\u003cwebhook-secret-data\u003e\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tp4sa_secretAccessor, err := organizations.LookupIAMPolicy(ctx, \u0026organizations.LookupIAMPolicyArgs{\n\t\t\tBindings: []organizations.GetIAMPolicyBinding{\n\t\t\t\t{\n\t\t\t\t\tRole: \"roles/secretmanager.secretAccessor\",\n\t\t\t\t\tMembers: []string{\n\t\t\t\t\t\t\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretIamPolicy(ctx, \"policy-pk\", \u0026secretmanager.SecretIamPolicyArgs{\n\t\t\tSecretId:   private_key_secret.SecretId,\n\t\t\tPolicyData: pulumi.String(p4sa_secretAccessor.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretIamPolicy(ctx, \"policy-whs\", \u0026secretmanager.SecretIamPolicyArgs{\n\t\t\tSecretId:   webhook_secret_secret.SecretId,\n\t\t\tPolicyData: pulumi.String(p4sa_secretAccessor.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudbuildv2.NewConnection(ctx, \"my-connection\", \u0026cloudbuildv2.ConnectionArgs{\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t\tName:     pulumi.String(\"my-terraform-ghe-connection\"),\n\t\t\tGithubEnterpriseConfig: \u0026cloudbuildv2.ConnectionGithubEnterpriseConfigArgs{\n\t\t\t\tHostUri:                    pulumi.String(\"https://ghe.com\"),\n\t\t\t\tPrivateKeySecretVersion:    private_key_secret_version.ID(),\n\t\t\t\tWebhookSecretSecretVersion: webhook_secret_secret_version.ID(),\n\t\t\t\tAppId:                      pulumi.Int(200),\n\t\t\t\tAppSlug:                    pulumi.String(\"gcb-app\"),\n\t\t\t\tAppInstallationId:          pulumi.Int(300),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tpolicy_pk,\n\t\t\tpolicy_whs,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.secretmanager.Secret;\nimport com.pulumi.gcp.secretmanager.SecretArgs;\nimport com.pulumi.gcp.secretmanager.inputs.SecretReplicationArgs;\nimport com.pulumi.gcp.secretmanager.inputs.SecretReplicationAutoArgs;\nimport com.pulumi.gcp.secretmanager.SecretVersion;\nimport com.pulumi.gcp.secretmanager.SecretVersionArgs;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.secretmanager.SecretIamPolicy;\nimport com.pulumi.gcp.secretmanager.SecretIamPolicyArgs;\nimport com.pulumi.gcp.cloudbuildv2.Connection;\nimport com.pulumi.gcp.cloudbuildv2.ConnectionArgs;\nimport com.pulumi.gcp.cloudbuildv2.inputs.ConnectionGithubEnterpriseConfigArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var private_key_secret = new Secret(\"private-key-secret\", SecretArgs.builder()\n            .secretId(\"ghe-pk-secret\")\n            .replication(SecretReplicationArgs.builder()\n                .auto()\n                .build())\n            .build());\n\n        var private_key_secret_version = new SecretVersion(\"private-key-secret-version\", SecretVersionArgs.builder()\n            .secret(private_key_secret.id())\n            .secretData(StdFunctions.file(FileArgs.builder()\n                .input(\"private-key.pem\")\n                .build()).result())\n            .build());\n\n        var webhook_secret_secret = new Secret(\"webhook-secret-secret\", SecretArgs.builder()\n            .secretId(\"github-token-secret\")\n            .replication(SecretReplicationArgs.builder()\n                .auto()\n                .build())\n            .build());\n\n        var webhook_secret_secret_version = new SecretVersion(\"webhook-secret-secret-version\", SecretVersionArgs.builder()\n            .secret(webhook_secret_secret.id())\n            .secretData(\"\u003cwebhook-secret-data\u003e\")\n            .build());\n\n        final var p4sa-secretAccessor = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/secretmanager.secretAccessor\")\n                .members(\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\")\n                .build())\n            .build());\n\n        var policy_pk = new SecretIamPolicy(\"policy-pk\", SecretIamPolicyArgs.builder()\n            .secretId(private_key_secret.secretId())\n            .policyData(p4sa_secretAccessor.policyData())\n            .build());\n\n        var policy_whs = new SecretIamPolicy(\"policy-whs\", SecretIamPolicyArgs.builder()\n            .secretId(webhook_secret_secret.secretId())\n            .policyData(p4sa_secretAccessor.policyData())\n            .build());\n\n        var my_connection = new Connection(\"my-connection\", ConnectionArgs.builder()\n            .location(\"us-central1\")\n            .name(\"my-terraform-ghe-connection\")\n            .githubEnterpriseConfig(ConnectionGithubEnterpriseConfigArgs.builder()\n                .hostUri(\"https://ghe.com\")\n                .privateKeySecretVersion(private_key_secret_version.id())\n                .webhookSecretSecretVersion(webhook_secret_secret_version.id())\n                .appId(200)\n                .appSlug(\"gcb-app\")\n                .appInstallationId(300)\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(                \n                    policy_pk,\n                    policy_whs)\n                .build());\n\n    }\n}\n```\n```yaml\nresources:\n  private-key-secret:\n    type: gcp:secretmanager:Secret\n    properties:\n      secretId: ghe-pk-secret\n      replication:\n        auto: {}\n  private-key-secret-version:\n    type: gcp:secretmanager:SecretVersion\n    properties:\n      secret: ${[\"private-key-secret\"].id}\n      secretData:\n        fn::invoke:\n          function: std:file\n          arguments:\n            input: private-key.pem\n          return: result\n  webhook-secret-secret:\n    type: gcp:secretmanager:Secret\n    properties:\n      secretId: github-token-secret\n      replication:\n        auto: {}\n  webhook-secret-secret-version:\n    type: gcp:secretmanager:SecretVersion\n    properties:\n      secret: ${[\"webhook-secret-secret\"].id}\n      secretData: \u003cwebhook-secret-data\u003e\n  policy-pk:\n    type: gcp:secretmanager:SecretIamPolicy\n    properties:\n      secretId: ${[\"private-key-secret\"].secretId}\n      policyData: ${[\"p4sa-secretAccessor\"].policyData}\n  policy-whs:\n    type: gcp:secretmanager:SecretIamPolicy\n    properties:\n      secretId: ${[\"webhook-secret-secret\"].secretId}\n      policyData: ${[\"p4sa-secretAccessor\"].policyData}\n  my-connection:\n    type: gcp:cloudbuildv2:Connection\n    properties:\n      location: us-central1\n      name: my-terraform-ghe-connection\n      githubEnterpriseConfig:\n        hostUri: https://ghe.com\n        privateKeySecretVersion: ${[\"private-key-secret-version\"].id}\n        webhookSecretSecretVersion: ${[\"webhook-secret-secret-version\"].id}\n        appId: 200\n        appSlug: gcb-app\n        appInstallationId: 300\n    options:\n      dependsOn:\n        - ${[\"policy-pk\"]}\n        - ${[\"policy-whs\"]}\nvariables:\n  p4sa-secretAccessor:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/secretmanager.secretAccessor\n            members:\n              - serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Cloudbuildv2 Connection Github\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst github_token_secret = new gcp.secretmanager.Secret(\"github-token-secret\", {\n    secretId: \"github-token-secret\",\n    replication: {\n        auto: {},\n    },\n});\nconst github_token_secret_version = new gcp.secretmanager.SecretVersion(\"github-token-secret-version\", {\n    secret: github_token_secret.id,\n    secretData: std.file({\n        input: \"my-github-token.txt\",\n    }).then(invoke =\u003e invoke.result),\n});\nconst p4sa-secretAccessor = gcp.organizations.getIAMPolicy({\n    bindings: [{\n        role: \"roles/secretmanager.secretAccessor\",\n        members: [\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\"],\n    }],\n});\nconst policy = new gcp.secretmanager.SecretIamPolicy(\"policy\", {\n    secretId: github_token_secret.secretId,\n    policyData: p4sa_secretAccessor.then(p4sa_secretAccessor =\u003e p4sa_secretAccessor.policyData),\n});\nconst my_connection = new gcp.cloudbuildv2.Connection(\"my-connection\", {\n    location: \"us-central1\",\n    name: \"my-connection\",\n    githubConfig: {\n        appInstallationId: 123123,\n        authorizerCredential: {\n            oauthTokenSecretVersion: github_token_secret_version.id,\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\ngithub_token_secret = gcp.secretmanager.Secret(\"github-token-secret\",\n    secret_id=\"github-token-secret\",\n    replication={\n        \"auto\": {},\n    })\ngithub_token_secret_version = gcp.secretmanager.SecretVersion(\"github-token-secret-version\",\n    secret=github_token_secret.id,\n    secret_data=std.file(input=\"my-github-token.txt\").result)\np4sa_secret_accessor = gcp.organizations.get_iam_policy(bindings=[{\n    \"role\": \"roles/secretmanager.secretAccessor\",\n    \"members\": [\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\"],\n}])\npolicy = gcp.secretmanager.SecretIamPolicy(\"policy\",\n    secret_id=github_token_secret.secret_id,\n    policy_data=p4sa_secret_accessor.policy_data)\nmy_connection = gcp.cloudbuildv2.Connection(\"my-connection\",\n    location=\"us-central1\",\n    name=\"my-connection\",\n    github_config={\n        \"app_installation_id\": 123123,\n        \"authorizer_credential\": {\n            \"oauth_token_secret_version\": github_token_secret_version.id,\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var github_token_secret = new Gcp.SecretManager.Secret(\"github-token-secret\", new()\n    {\n        SecretId = \"github-token-secret\",\n        Replication = new Gcp.SecretManager.Inputs.SecretReplicationArgs\n        {\n            Auto = null,\n        },\n    });\n\n    var github_token_secret_version = new Gcp.SecretManager.SecretVersion(\"github-token-secret-version\", new()\n    {\n        Secret = github_token_secret.Id,\n        SecretData = Std.File.Invoke(new()\n        {\n            Input = \"my-github-token.txt\",\n        }).Apply(invoke =\u003e invoke.Result),\n    });\n\n    var p4sa_secretAccessor = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/secretmanager.secretAccessor\",\n                Members = new[]\n                {\n                    \"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\",\n                },\n            },\n        },\n    });\n\n    var policy = new Gcp.SecretManager.SecretIamPolicy(\"policy\", new()\n    {\n        SecretId = github_token_secret.SecretId,\n        PolicyData = p4sa_secretAccessor.Apply(p4sa_secretAccessor =\u003e p4sa_secretAccessor.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData)),\n    });\n\n    var my_connection = new Gcp.CloudBuildV2.Connection(\"my-connection\", new()\n    {\n        Location = \"us-central1\",\n        Name = \"my-connection\",\n        GithubConfig = new Gcp.CloudBuildV2.Inputs.ConnectionGithubConfigArgs\n        {\n            AppInstallationId = 123123,\n            AuthorizerCredential = new Gcp.CloudBuildV2.Inputs.ConnectionGithubConfigAuthorizerCredentialArgs\n            {\n                OauthTokenSecretVersion = github_token_secret_version.Id,\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudbuildv2\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/secretmanager\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := secretmanager.NewSecret(ctx, \"github-token-secret\", \u0026secretmanager.SecretArgs{\n\t\t\tSecretId: pulumi.String(\"github-token-secret\"),\n\t\t\tReplication: \u0026secretmanager.SecretReplicationArgs{\n\t\t\t\tAuto: \u0026secretmanager.SecretReplicationAutoArgs{},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tinvokeFile, err := std.File(ctx, \u0026std.FileArgs{\n\t\t\tInput: \"my-github-token.txt\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretVersion(ctx, \"github-token-secret-version\", \u0026secretmanager.SecretVersionArgs{\n\t\t\tSecret:     github_token_secret.ID(),\n\t\t\tSecretData: pulumi.String(invokeFile.Result),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tp4sa_secretAccessor, err := organizations.LookupIAMPolicy(ctx, \u0026organizations.LookupIAMPolicyArgs{\n\t\t\tBindings: []organizations.GetIAMPolicyBinding{\n\t\t\t\t{\n\t\t\t\t\tRole: \"roles/secretmanager.secretAccessor\",\n\t\t\t\t\tMembers: []string{\n\t\t\t\t\t\t\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretIamPolicy(ctx, \"policy\", \u0026secretmanager.SecretIamPolicyArgs{\n\t\t\tSecretId:   github_token_secret.SecretId,\n\t\t\tPolicyData: pulumi.String(p4sa_secretAccessor.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudbuildv2.NewConnection(ctx, \"my-connection\", \u0026cloudbuildv2.ConnectionArgs{\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t\tName:     pulumi.String(\"my-connection\"),\n\t\t\tGithubConfig: \u0026cloudbuildv2.ConnectionGithubConfigArgs{\n\t\t\t\tAppInstallationId: pulumi.Int(123123),\n\t\t\t\tAuthorizerCredential: \u0026cloudbuildv2.ConnectionGithubConfigAuthorizerCredentialArgs{\n\t\t\t\t\tOauthTokenSecretVersion: github_token_secret_version.ID(),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.secretmanager.Secret;\nimport com.pulumi.gcp.secretmanager.SecretArgs;\nimport com.pulumi.gcp.secretmanager.inputs.SecretReplicationArgs;\nimport com.pulumi.gcp.secretmanager.inputs.SecretReplicationAutoArgs;\nimport com.pulumi.gcp.secretmanager.SecretVersion;\nimport com.pulumi.gcp.secretmanager.SecretVersionArgs;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.secretmanager.SecretIamPolicy;\nimport com.pulumi.gcp.secretmanager.SecretIamPolicyArgs;\nimport com.pulumi.gcp.cloudbuildv2.Connection;\nimport com.pulumi.gcp.cloudbuildv2.ConnectionArgs;\nimport com.pulumi.gcp.cloudbuildv2.inputs.ConnectionGithubConfigArgs;\nimport com.pulumi.gcp.cloudbuildv2.inputs.ConnectionGithubConfigAuthorizerCredentialArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var github_token_secret = new Secret(\"github-token-secret\", SecretArgs.builder()\n            .secretId(\"github-token-secret\")\n            .replication(SecretReplicationArgs.builder()\n                .auto()\n                .build())\n            .build());\n\n        var github_token_secret_version = new SecretVersion(\"github-token-secret-version\", SecretVersionArgs.builder()\n            .secret(github_token_secret.id())\n            .secretData(StdFunctions.file(FileArgs.builder()\n                .input(\"my-github-token.txt\")\n                .build()).result())\n            .build());\n\n        final var p4sa-secretAccessor = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/secretmanager.secretAccessor\")\n                .members(\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\")\n                .build())\n            .build());\n\n        var policy = new SecretIamPolicy(\"policy\", SecretIamPolicyArgs.builder()\n            .secretId(github_token_secret.secretId())\n            .policyData(p4sa_secretAccessor.policyData())\n            .build());\n\n        var my_connection = new Connection(\"my-connection\", ConnectionArgs.builder()\n            .location(\"us-central1\")\n            .name(\"my-connection\")\n            .githubConfig(ConnectionGithubConfigArgs.builder()\n                .appInstallationId(123123)\n                .authorizerCredential(ConnectionGithubConfigAuthorizerCredentialArgs.builder()\n                    .oauthTokenSecretVersion(github_token_secret_version.id())\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  github-token-secret:\n    type: gcp:secretmanager:Secret\n    properties:\n      secretId: github-token-secret\n      replication:\n        auto: {}\n  github-token-secret-version:\n    type: gcp:secretmanager:SecretVersion\n    properties:\n      secret: ${[\"github-token-secret\"].id}\n      secretData:\n        fn::invoke:\n          function: std:file\n          arguments:\n            input: my-github-token.txt\n          return: result\n  policy:\n    type: gcp:secretmanager:SecretIamPolicy\n    properties:\n      secretId: ${[\"github-token-secret\"].secretId}\n      policyData: ${[\"p4sa-secretAccessor\"].policyData}\n  my-connection:\n    type: gcp:cloudbuildv2:Connection\n    properties:\n      location: us-central1\n      name: my-connection\n      githubConfig:\n        appInstallationId: 123123\n        authorizerCredential:\n          oauthTokenSecretVersion: ${[\"github-token-secret-version\"].id}\nvariables:\n  p4sa-secretAccessor:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/secretmanager.secretAccessor\n            members:\n              - serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nConnection can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{location}}/connections/{{name}}`\n\n* `{{project}}/{{location}}/{{name}}`\n\n* `{{location}}/{{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, Connection can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:cloudbuildv2/connection:Connection default projects/{{project}}/locations/{{location}}/connections/{{name}}\n```\n\n```sh\n$ pulumi import gcp:cloudbuildv2/connection:Connection default {{project}}/{{location}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:cloudbuildv2/connection:Connection default {{location}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:cloudbuildv2/connection:Connection default {{name}}\n```\n\n",
+            "description": "A connection to a SCM like GitHub, GitHub Enterprise, Bitbucket Data Center/Cloud or GitLab.\n\n\nTo get more information about Connection, see:\n\n* [API documentation](https://cloud.google.com/build/docs/api/reference/rest)\n* How-to Guides\n    * [Official Documentation](https://cloud.google.com/build/docs)\n\n## Example Usage\n\n### Cloudbuildv2 Connection\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_connection = new gcp.cloudbuildv2.Connection(\"my-connection\", {\n    location: \"us-central1\",\n    name: \"tf-test-connection\",\n    githubConfig: {\n        appInstallationId: 0,\n        authorizerCredential: {\n            oauthTokenSecretVersion: \"projects/gcb-terraform-creds/secrets/github-pat/versions/1\",\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_connection = gcp.cloudbuildv2.Connection(\"my-connection\",\n    location=\"us-central1\",\n    name=\"tf-test-connection\",\n    github_config={\n        \"app_installation_id\": 0,\n        \"authorizer_credential\": {\n            \"oauth_token_secret_version\": \"projects/gcb-terraform-creds/secrets/github-pat/versions/1\",\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_connection = new Gcp.CloudBuildV2.Connection(\"my-connection\", new()\n    {\n        Location = \"us-central1\",\n        Name = \"tf-test-connection\",\n        GithubConfig = new Gcp.CloudBuildV2.Inputs.ConnectionGithubConfigArgs\n        {\n            AppInstallationId = 0,\n            AuthorizerCredential = new Gcp.CloudBuildV2.Inputs.ConnectionGithubConfigAuthorizerCredentialArgs\n            {\n                OauthTokenSecretVersion = \"projects/gcb-terraform-creds/secrets/github-pat/versions/1\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudbuildv2\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudbuildv2.NewConnection(ctx, \"my-connection\", \u0026cloudbuildv2.ConnectionArgs{\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t\tName:     pulumi.String(\"tf-test-connection\"),\n\t\t\tGithubConfig: \u0026cloudbuildv2.ConnectionGithubConfigArgs{\n\t\t\t\tAppInstallationId: pulumi.Int(0),\n\t\t\t\tAuthorizerCredential: \u0026cloudbuildv2.ConnectionGithubConfigAuthorizerCredentialArgs{\n\t\t\t\t\tOauthTokenSecretVersion: pulumi.String(\"projects/gcb-terraform-creds/secrets/github-pat/versions/1\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.cloudbuildv2.Connection;\nimport com.pulumi.gcp.cloudbuildv2.ConnectionArgs;\nimport com.pulumi.gcp.cloudbuildv2.inputs.ConnectionGithubConfigArgs;\nimport com.pulumi.gcp.cloudbuildv2.inputs.ConnectionGithubConfigAuthorizerCredentialArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var my_connection = new Connection(\"my-connection\", ConnectionArgs.builder()\n            .location(\"us-central1\")\n            .name(\"tf-test-connection\")\n            .githubConfig(ConnectionGithubConfigArgs.builder()\n                .appInstallationId(0)\n                .authorizerCredential(ConnectionGithubConfigAuthorizerCredentialArgs.builder()\n                    .oauthTokenSecretVersion(\"projects/gcb-terraform-creds/secrets/github-pat/versions/1\")\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  my-connection:\n    type: gcp:cloudbuildv2:Connection\n    properties:\n      location: us-central1\n      name: tf-test-connection\n      githubConfig:\n        appInstallationId: 0\n        authorizerCredential:\n          oauthTokenSecretVersion: projects/gcb-terraform-creds/secrets/github-pat/versions/1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Cloudbuildv2 Connection Ghe\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst private_key_secret = new gcp.secretmanager.Secret(\"private-key-secret\", {\n    secretId: \"ghe-pk-secret\",\n    replication: {\n        auto: {},\n    },\n});\nconst private_key_secret_version = new gcp.secretmanager.SecretVersion(\"private-key-secret-version\", {\n    secret: private_key_secret.id,\n    secretData: std.file({\n        input: \"private-key.pem\",\n    }).then(invoke =\u003e invoke.result),\n});\nconst webhook_secret_secret = new gcp.secretmanager.Secret(\"webhook-secret-secret\", {\n    secretId: \"github-token-secret\",\n    replication: {\n        auto: {},\n    },\n});\nconst webhook_secret_secret_version = new gcp.secretmanager.SecretVersion(\"webhook-secret-secret-version\", {\n    secret: webhook_secret_secret.id,\n    secretData: \"\u003cwebhook-secret-data\u003e\",\n});\nconst p4sa_secretAccessor = gcp.organizations.getIAMPolicy({\n    bindings: [{\n        role: \"roles/secretmanager.secretAccessor\",\n        members: [\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\"],\n    }],\n});\nconst policy_pk = new gcp.secretmanager.SecretIamPolicy(\"policy-pk\", {\n    secretId: private_key_secret.secretId,\n    policyData: p4sa_secretAccessor.then(p4sa_secretAccessor =\u003e p4sa_secretAccessor.policyData),\n});\nconst policy_whs = new gcp.secretmanager.SecretIamPolicy(\"policy-whs\", {\n    secretId: webhook_secret_secret.secretId,\n    policyData: p4sa_secretAccessor.then(p4sa_secretAccessor =\u003e p4sa_secretAccessor.policyData),\n});\nconst my_connection = new gcp.cloudbuildv2.Connection(\"my-connection\", {\n    location: \"us-central1\",\n    name: \"my-terraform-ghe-connection\",\n    githubEnterpriseConfig: {\n        hostUri: \"https://ghe.com\",\n        privateKeySecretVersion: private_key_secret_version.id,\n        webhookSecretSecretVersion: webhook_secret_secret_version.id,\n        appId: 200,\n        appSlug: \"gcb-app\",\n        appInstallationId: 300,\n    },\n}, {\n    dependsOn: [\n        policy_pk,\n        policy_whs,\n    ],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\nprivate_key_secret = gcp.secretmanager.Secret(\"private-key-secret\",\n    secret_id=\"ghe-pk-secret\",\n    replication={\n        \"auto\": {},\n    })\nprivate_key_secret_version = gcp.secretmanager.SecretVersion(\"private-key-secret-version\",\n    secret=private_key_secret.id,\n    secret_data=std.file(input=\"private-key.pem\").result)\nwebhook_secret_secret = gcp.secretmanager.Secret(\"webhook-secret-secret\",\n    secret_id=\"github-token-secret\",\n    replication={\n        \"auto\": {},\n    })\nwebhook_secret_secret_version = gcp.secretmanager.SecretVersion(\"webhook-secret-secret-version\",\n    secret=webhook_secret_secret.id,\n    secret_data=\"\u003cwebhook-secret-data\u003e\")\np4sa_secret_accessor = gcp.organizations.get_iam_policy(bindings=[{\n    \"role\": \"roles/secretmanager.secretAccessor\",\n    \"members\": [\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\"],\n}])\npolicy_pk = gcp.secretmanager.SecretIamPolicy(\"policy-pk\",\n    secret_id=private_key_secret.secret_id,\n    policy_data=p4sa_secret_accessor.policy_data)\npolicy_whs = gcp.secretmanager.SecretIamPolicy(\"policy-whs\",\n    secret_id=webhook_secret_secret.secret_id,\n    policy_data=p4sa_secret_accessor.policy_data)\nmy_connection = gcp.cloudbuildv2.Connection(\"my-connection\",\n    location=\"us-central1\",\n    name=\"my-terraform-ghe-connection\",\n    github_enterprise_config={\n        \"host_uri\": \"https://ghe.com\",\n        \"private_key_secret_version\": private_key_secret_version.id,\n        \"webhook_secret_secret_version\": webhook_secret_secret_version.id,\n        \"app_id\": 200,\n        \"app_slug\": \"gcb-app\",\n        \"app_installation_id\": 300,\n    },\n    opts = pulumi.ResourceOptions(depends_on=[\n            policy_pk,\n            policy_whs,\n        ]))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var private_key_secret = new Gcp.SecretManager.Secret(\"private-key-secret\", new()\n    {\n        SecretId = \"ghe-pk-secret\",\n        Replication = new Gcp.SecretManager.Inputs.SecretReplicationArgs\n        {\n            Auto = null,\n        },\n    });\n\n    var private_key_secret_version = new Gcp.SecretManager.SecretVersion(\"private-key-secret-version\", new()\n    {\n        Secret = private_key_secret.Id,\n        SecretData = Std.File.Invoke(new()\n        {\n            Input = \"private-key.pem\",\n        }).Apply(invoke =\u003e invoke.Result),\n    });\n\n    var webhook_secret_secret = new Gcp.SecretManager.Secret(\"webhook-secret-secret\", new()\n    {\n        SecretId = \"github-token-secret\",\n        Replication = new Gcp.SecretManager.Inputs.SecretReplicationArgs\n        {\n            Auto = null,\n        },\n    });\n\n    var webhook_secret_secret_version = new Gcp.SecretManager.SecretVersion(\"webhook-secret-secret-version\", new()\n    {\n        Secret = webhook_secret_secret.Id,\n        SecretData = \"\u003cwebhook-secret-data\u003e\",\n    });\n\n    var p4sa_secretAccessor = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/secretmanager.secretAccessor\",\n                Members = new[]\n                {\n                    \"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\",\n                },\n            },\n        },\n    });\n\n    var policy_pk = new Gcp.SecretManager.SecretIamPolicy(\"policy-pk\", new()\n    {\n        SecretId = private_key_secret.SecretId,\n        PolicyData = p4sa_secretAccessor.Apply(p4sa_secretAccessor =\u003e p4sa_secretAccessor.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData)),\n    });\n\n    var policy_whs = new Gcp.SecretManager.SecretIamPolicy(\"policy-whs\", new()\n    {\n        SecretId = webhook_secret_secret.SecretId,\n        PolicyData = p4sa_secretAccessor.Apply(p4sa_secretAccessor =\u003e p4sa_secretAccessor.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData)),\n    });\n\n    var my_connection = new Gcp.CloudBuildV2.Connection(\"my-connection\", new()\n    {\n        Location = \"us-central1\",\n        Name = \"my-terraform-ghe-connection\",\n        GithubEnterpriseConfig = new Gcp.CloudBuildV2.Inputs.ConnectionGithubEnterpriseConfigArgs\n        {\n            HostUri = \"https://ghe.com\",\n            PrivateKeySecretVersion = private_key_secret_version.Id,\n            WebhookSecretSecretVersion = webhook_secret_secret_version.Id,\n            AppId = 200,\n            AppSlug = \"gcb-app\",\n            AppInstallationId = 300,\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            policy_pk,\n            policy_whs,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudbuildv2\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/secretmanager\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := secretmanager.NewSecret(ctx, \"private-key-secret\", \u0026secretmanager.SecretArgs{\n\t\t\tSecretId: pulumi.String(\"ghe-pk-secret\"),\n\t\t\tReplication: \u0026secretmanager.SecretReplicationArgs{\n\t\t\t\tAuto: \u0026secretmanager.SecretReplicationAutoArgs{},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tinvokeFile, err := std.File(ctx, \u0026std.FileArgs{\n\t\t\tInput: \"private-key.pem\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretVersion(ctx, \"private-key-secret-version\", \u0026secretmanager.SecretVersionArgs{\n\t\t\tSecret:     private_key_secret.ID(),\n\t\t\tSecretData: pulumi.String(invokeFile.Result),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecret(ctx, \"webhook-secret-secret\", \u0026secretmanager.SecretArgs{\n\t\t\tSecretId: pulumi.String(\"github-token-secret\"),\n\t\t\tReplication: \u0026secretmanager.SecretReplicationArgs{\n\t\t\t\tAuto: \u0026secretmanager.SecretReplicationAutoArgs{},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretVersion(ctx, \"webhook-secret-secret-version\", \u0026secretmanager.SecretVersionArgs{\n\t\t\tSecret:     webhook_secret_secret.ID(),\n\t\t\tSecretData: pulumi.String(\"\u003cwebhook-secret-data\u003e\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tp4sa_secretAccessor, err := organizations.LookupIAMPolicy(ctx, \u0026organizations.LookupIAMPolicyArgs{\n\t\t\tBindings: []organizations.GetIAMPolicyBinding{\n\t\t\t\t{\n\t\t\t\t\tRole: \"roles/secretmanager.secretAccessor\",\n\t\t\t\t\tMembers: []string{\n\t\t\t\t\t\t\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretIamPolicy(ctx, \"policy-pk\", \u0026secretmanager.SecretIamPolicyArgs{\n\t\t\tSecretId:   private_key_secret.SecretId,\n\t\t\tPolicyData: pulumi.String(p4sa_secretAccessor.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretIamPolicy(ctx, \"policy-whs\", \u0026secretmanager.SecretIamPolicyArgs{\n\t\t\tSecretId:   webhook_secret_secret.SecretId,\n\t\t\tPolicyData: pulumi.String(p4sa_secretAccessor.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudbuildv2.NewConnection(ctx, \"my-connection\", \u0026cloudbuildv2.ConnectionArgs{\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t\tName:     pulumi.String(\"my-terraform-ghe-connection\"),\n\t\t\tGithubEnterpriseConfig: \u0026cloudbuildv2.ConnectionGithubEnterpriseConfigArgs{\n\t\t\t\tHostUri:                    pulumi.String(\"https://ghe.com\"),\n\t\t\t\tPrivateKeySecretVersion:    private_key_secret_version.ID(),\n\t\t\t\tWebhookSecretSecretVersion: webhook_secret_secret_version.ID(),\n\t\t\t\tAppId:                      pulumi.Int(200),\n\t\t\t\tAppSlug:                    pulumi.String(\"gcb-app\"),\n\t\t\t\tAppInstallationId:          pulumi.Int(300),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tpolicy_pk,\n\t\t\tpolicy_whs,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.secretmanager.Secret;\nimport com.pulumi.gcp.secretmanager.SecretArgs;\nimport com.pulumi.gcp.secretmanager.inputs.SecretReplicationArgs;\nimport com.pulumi.gcp.secretmanager.inputs.SecretReplicationAutoArgs;\nimport com.pulumi.gcp.secretmanager.SecretVersion;\nimport com.pulumi.gcp.secretmanager.SecretVersionArgs;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.secretmanager.SecretIamPolicy;\nimport com.pulumi.gcp.secretmanager.SecretIamPolicyArgs;\nimport com.pulumi.gcp.cloudbuildv2.Connection;\nimport com.pulumi.gcp.cloudbuildv2.ConnectionArgs;\nimport com.pulumi.gcp.cloudbuildv2.inputs.ConnectionGithubEnterpriseConfigArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var private_key_secret = new Secret(\"private-key-secret\", SecretArgs.builder()\n            .secretId(\"ghe-pk-secret\")\n            .replication(SecretReplicationArgs.builder()\n                .auto()\n                .build())\n            .build());\n\n        var private_key_secret_version = new SecretVersion(\"private-key-secret-version\", SecretVersionArgs.builder()\n            .secret(private_key_secret.id())\n            .secretData(StdFunctions.file(FileArgs.builder()\n                .input(\"private-key.pem\")\n                .build()).result())\n            .build());\n\n        var webhook_secret_secret = new Secret(\"webhook-secret-secret\", SecretArgs.builder()\n            .secretId(\"github-token-secret\")\n            .replication(SecretReplicationArgs.builder()\n                .auto()\n                .build())\n            .build());\n\n        var webhook_secret_secret_version = new SecretVersion(\"webhook-secret-secret-version\", SecretVersionArgs.builder()\n            .secret(webhook_secret_secret.id())\n            .secretData(\"\u003cwebhook-secret-data\u003e\")\n            .build());\n\n        final var p4sa-secretAccessor = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/secretmanager.secretAccessor\")\n                .members(\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\")\n                .build())\n            .build());\n\n        var policy_pk = new SecretIamPolicy(\"policy-pk\", SecretIamPolicyArgs.builder()\n            .secretId(private_key_secret.secretId())\n            .policyData(p4sa_secretAccessor.policyData())\n            .build());\n\n        var policy_whs = new SecretIamPolicy(\"policy-whs\", SecretIamPolicyArgs.builder()\n            .secretId(webhook_secret_secret.secretId())\n            .policyData(p4sa_secretAccessor.policyData())\n            .build());\n\n        var my_connection = new Connection(\"my-connection\", ConnectionArgs.builder()\n            .location(\"us-central1\")\n            .name(\"my-terraform-ghe-connection\")\n            .githubEnterpriseConfig(ConnectionGithubEnterpriseConfigArgs.builder()\n                .hostUri(\"https://ghe.com\")\n                .privateKeySecretVersion(private_key_secret_version.id())\n                .webhookSecretSecretVersion(webhook_secret_secret_version.id())\n                .appId(200)\n                .appSlug(\"gcb-app\")\n                .appInstallationId(300)\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(                \n                    policy_pk,\n                    policy_whs)\n                .build());\n\n    }\n}\n```\n```yaml\nresources:\n  private-key-secret:\n    type: gcp:secretmanager:Secret\n    properties:\n      secretId: ghe-pk-secret\n      replication:\n        auto: {}\n  private-key-secret-version:\n    type: gcp:secretmanager:SecretVersion\n    properties:\n      secret: ${[\"private-key-secret\"].id}\n      secretData:\n        fn::invoke:\n          function: std:file\n          arguments:\n            input: private-key.pem\n          return: result\n  webhook-secret-secret:\n    type: gcp:secretmanager:Secret\n    properties:\n      secretId: github-token-secret\n      replication:\n        auto: {}\n  webhook-secret-secret-version:\n    type: gcp:secretmanager:SecretVersion\n    properties:\n      secret: ${[\"webhook-secret-secret\"].id}\n      secretData: \u003cwebhook-secret-data\u003e\n  policy-pk:\n    type: gcp:secretmanager:SecretIamPolicy\n    properties:\n      secretId: ${[\"private-key-secret\"].secretId}\n      policyData: ${[\"p4sa-secretAccessor\"].policyData}\n  policy-whs:\n    type: gcp:secretmanager:SecretIamPolicy\n    properties:\n      secretId: ${[\"webhook-secret-secret\"].secretId}\n      policyData: ${[\"p4sa-secretAccessor\"].policyData}\n  my-connection:\n    type: gcp:cloudbuildv2:Connection\n    properties:\n      location: us-central1\n      name: my-terraform-ghe-connection\n      githubEnterpriseConfig:\n        hostUri: https://ghe.com\n        privateKeySecretVersion: ${[\"private-key-secret-version\"].id}\n        webhookSecretSecretVersion: ${[\"webhook-secret-secret-version\"].id}\n        appId: 200\n        appSlug: gcb-app\n        appInstallationId: 300\n    options:\n      dependsOn:\n        - ${[\"policy-pk\"]}\n        - ${[\"policy-whs\"]}\nvariables:\n  p4sa-secretAccessor:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/secretmanager.secretAccessor\n            members:\n              - serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Cloudbuildv2 Connection Github\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst github_token_secret = new gcp.secretmanager.Secret(\"github-token-secret\", {\n    secretId: \"github-token-secret\",\n    replication: {\n        auto: {},\n    },\n});\nconst github_token_secret_version = new gcp.secretmanager.SecretVersion(\"github-token-secret-version\", {\n    secret: github_token_secret.id,\n    secretData: std.file({\n        input: \"my-github-token.txt\",\n    }).then(invoke =\u003e invoke.result),\n});\nconst p4sa_secretAccessor = gcp.organizations.getIAMPolicy({\n    bindings: [{\n        role: \"roles/secretmanager.secretAccessor\",\n        members: [\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\"],\n    }],\n});\nconst policy = new gcp.secretmanager.SecretIamPolicy(\"policy\", {\n    secretId: github_token_secret.secretId,\n    policyData: p4sa_secretAccessor.then(p4sa_secretAccessor =\u003e p4sa_secretAccessor.policyData),\n});\nconst my_connection = new gcp.cloudbuildv2.Connection(\"my-connection\", {\n    location: \"us-central1\",\n    name: \"my-connection\",\n    githubConfig: {\n        appInstallationId: 123123,\n        authorizerCredential: {\n            oauthTokenSecretVersion: github_token_secret_version.id,\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\ngithub_token_secret = gcp.secretmanager.Secret(\"github-token-secret\",\n    secret_id=\"github-token-secret\",\n    replication={\n        \"auto\": {},\n    })\ngithub_token_secret_version = gcp.secretmanager.SecretVersion(\"github-token-secret-version\",\n    secret=github_token_secret.id,\n    secret_data=std.file(input=\"my-github-token.txt\").result)\np4sa_secret_accessor = gcp.organizations.get_iam_policy(bindings=[{\n    \"role\": \"roles/secretmanager.secretAccessor\",\n    \"members\": [\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\"],\n}])\npolicy = gcp.secretmanager.SecretIamPolicy(\"policy\",\n    secret_id=github_token_secret.secret_id,\n    policy_data=p4sa_secret_accessor.policy_data)\nmy_connection = gcp.cloudbuildv2.Connection(\"my-connection\",\n    location=\"us-central1\",\n    name=\"my-connection\",\n    github_config={\n        \"app_installation_id\": 123123,\n        \"authorizer_credential\": {\n            \"oauth_token_secret_version\": github_token_secret_version.id,\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var github_token_secret = new Gcp.SecretManager.Secret(\"github-token-secret\", new()\n    {\n        SecretId = \"github-token-secret\",\n        Replication = new Gcp.SecretManager.Inputs.SecretReplicationArgs\n        {\n            Auto = null,\n        },\n    });\n\n    var github_token_secret_version = new Gcp.SecretManager.SecretVersion(\"github-token-secret-version\", new()\n    {\n        Secret = github_token_secret.Id,\n        SecretData = Std.File.Invoke(new()\n        {\n            Input = \"my-github-token.txt\",\n        }).Apply(invoke =\u003e invoke.Result),\n    });\n\n    var p4sa_secretAccessor = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/secretmanager.secretAccessor\",\n                Members = new[]\n                {\n                    \"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\",\n                },\n            },\n        },\n    });\n\n    var policy = new Gcp.SecretManager.SecretIamPolicy(\"policy\", new()\n    {\n        SecretId = github_token_secret.SecretId,\n        PolicyData = p4sa_secretAccessor.Apply(p4sa_secretAccessor =\u003e p4sa_secretAccessor.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData)),\n    });\n\n    var my_connection = new Gcp.CloudBuildV2.Connection(\"my-connection\", new()\n    {\n        Location = \"us-central1\",\n        Name = \"my-connection\",\n        GithubConfig = new Gcp.CloudBuildV2.Inputs.ConnectionGithubConfigArgs\n        {\n            AppInstallationId = 123123,\n            AuthorizerCredential = new Gcp.CloudBuildV2.Inputs.ConnectionGithubConfigAuthorizerCredentialArgs\n            {\n                OauthTokenSecretVersion = github_token_secret_version.Id,\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudbuildv2\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/secretmanager\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := secretmanager.NewSecret(ctx, \"github-token-secret\", \u0026secretmanager.SecretArgs{\n\t\t\tSecretId: pulumi.String(\"github-token-secret\"),\n\t\t\tReplication: \u0026secretmanager.SecretReplicationArgs{\n\t\t\t\tAuto: \u0026secretmanager.SecretReplicationAutoArgs{},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tinvokeFile, err := std.File(ctx, \u0026std.FileArgs{\n\t\t\tInput: \"my-github-token.txt\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretVersion(ctx, \"github-token-secret-version\", \u0026secretmanager.SecretVersionArgs{\n\t\t\tSecret:     github_token_secret.ID(),\n\t\t\tSecretData: pulumi.String(invokeFile.Result),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tp4sa_secretAccessor, err := organizations.LookupIAMPolicy(ctx, \u0026organizations.LookupIAMPolicyArgs{\n\t\t\tBindings: []organizations.GetIAMPolicyBinding{\n\t\t\t\t{\n\t\t\t\t\tRole: \"roles/secretmanager.secretAccessor\",\n\t\t\t\t\tMembers: []string{\n\t\t\t\t\t\t\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretIamPolicy(ctx, \"policy\", \u0026secretmanager.SecretIamPolicyArgs{\n\t\t\tSecretId:   github_token_secret.SecretId,\n\t\t\tPolicyData: pulumi.String(p4sa_secretAccessor.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudbuildv2.NewConnection(ctx, \"my-connection\", \u0026cloudbuildv2.ConnectionArgs{\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t\tName:     pulumi.String(\"my-connection\"),\n\t\t\tGithubConfig: \u0026cloudbuildv2.ConnectionGithubConfigArgs{\n\t\t\t\tAppInstallationId: pulumi.Int(123123),\n\t\t\t\tAuthorizerCredential: \u0026cloudbuildv2.ConnectionGithubConfigAuthorizerCredentialArgs{\n\t\t\t\t\tOauthTokenSecretVersion: github_token_secret_version.ID(),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.secretmanager.Secret;\nimport com.pulumi.gcp.secretmanager.SecretArgs;\nimport com.pulumi.gcp.secretmanager.inputs.SecretReplicationArgs;\nimport com.pulumi.gcp.secretmanager.inputs.SecretReplicationAutoArgs;\nimport com.pulumi.gcp.secretmanager.SecretVersion;\nimport com.pulumi.gcp.secretmanager.SecretVersionArgs;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.secretmanager.SecretIamPolicy;\nimport com.pulumi.gcp.secretmanager.SecretIamPolicyArgs;\nimport com.pulumi.gcp.cloudbuildv2.Connection;\nimport com.pulumi.gcp.cloudbuildv2.ConnectionArgs;\nimport com.pulumi.gcp.cloudbuildv2.inputs.ConnectionGithubConfigArgs;\nimport com.pulumi.gcp.cloudbuildv2.inputs.ConnectionGithubConfigAuthorizerCredentialArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var github_token_secret = new Secret(\"github-token-secret\", SecretArgs.builder()\n            .secretId(\"github-token-secret\")\n            .replication(SecretReplicationArgs.builder()\n                .auto()\n                .build())\n            .build());\n\n        var github_token_secret_version = new SecretVersion(\"github-token-secret-version\", SecretVersionArgs.builder()\n            .secret(github_token_secret.id())\n            .secretData(StdFunctions.file(FileArgs.builder()\n                .input(\"my-github-token.txt\")\n                .build()).result())\n            .build());\n\n        final var p4sa-secretAccessor = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/secretmanager.secretAccessor\")\n                .members(\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\")\n                .build())\n            .build());\n\n        var policy = new SecretIamPolicy(\"policy\", SecretIamPolicyArgs.builder()\n            .secretId(github_token_secret.secretId())\n            .policyData(p4sa_secretAccessor.policyData())\n            .build());\n\n        var my_connection = new Connection(\"my-connection\", ConnectionArgs.builder()\n            .location(\"us-central1\")\n            .name(\"my-connection\")\n            .githubConfig(ConnectionGithubConfigArgs.builder()\n                .appInstallationId(123123)\n                .authorizerCredential(ConnectionGithubConfigAuthorizerCredentialArgs.builder()\n                    .oauthTokenSecretVersion(github_token_secret_version.id())\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  github-token-secret:\n    type: gcp:secretmanager:Secret\n    properties:\n      secretId: github-token-secret\n      replication:\n        auto: {}\n  github-token-secret-version:\n    type: gcp:secretmanager:SecretVersion\n    properties:\n      secret: ${[\"github-token-secret\"].id}\n      secretData:\n        fn::invoke:\n          function: std:file\n          arguments:\n            input: my-github-token.txt\n          return: result\n  policy:\n    type: gcp:secretmanager:SecretIamPolicy\n    properties:\n      secretId: ${[\"github-token-secret\"].secretId}\n      policyData: ${[\"p4sa-secretAccessor\"].policyData}\n  my-connection:\n    type: gcp:cloudbuildv2:Connection\n    properties:\n      location: us-central1\n      name: my-connection\n      githubConfig:\n        appInstallationId: 123123\n        authorizerCredential:\n          oauthTokenSecretVersion: ${[\"github-token-secret-version\"].id}\nvariables:\n  p4sa-secretAccessor:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/secretmanager.secretAccessor\n            members:\n              - serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nConnection can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{location}}/connections/{{name}}`\n\n* `{{project}}/{{location}}/{{name}}`\n\n* `{{location}}/{{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, Connection can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:cloudbuildv2/connection:Connection default projects/{{project}}/locations/{{location}}/connections/{{name}}\n```\n\n```sh\n$ pulumi import gcp:cloudbuildv2/connection:Connection default {{project}}/{{location}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:cloudbuildv2/connection:Connection default {{location}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:cloudbuildv2/connection:Connection default {{name}}\n```\n\n",
             "properties": {
                 "annotations": {
                     "type": "object",
@@ -154911,7 +154911,7 @@
             }
         },
         "gcp:cloudbuildv2/repository:Repository": {
-            "description": "A repository associated to a parent connection.\n\n\nTo get more information about Repository, see:\n\n* [API documentation](https://cloud.google.com/build/docs/api/reference/rest)\n* How-to Guides\n    * [Official Documentation](https://cloud.google.com/build/docs)\n\n## Example Usage\n\n### Cloudbuildv2 Repository Ghe Doc\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst private_key_secret = new gcp.secretmanager.Secret(\"private-key-secret\", {\n    secretId: \"ghe-pk-secret\",\n    replication: {\n        auto: {},\n    },\n});\nconst private_key_secret_version = new gcp.secretmanager.SecretVersion(\"private-key-secret-version\", {\n    secret: private_key_secret.id,\n    secretData: std.file({\n        input: \"private-key.pem\",\n    }).then(invoke =\u003e invoke.result),\n});\nconst webhook_secret_secret = new gcp.secretmanager.Secret(\"webhook-secret-secret\", {\n    secretId: \"github-token-secret\",\n    replication: {\n        auto: {},\n    },\n});\nconst webhook_secret_secret_version = new gcp.secretmanager.SecretVersion(\"webhook-secret-secret-version\", {\n    secret: webhook_secret_secret.id,\n    secretData: \"\u003cwebhook-secret-data\u003e\",\n});\nconst p4sa-secretAccessor = gcp.organizations.getIAMPolicy({\n    bindings: [{\n        role: \"roles/secretmanager.secretAccessor\",\n        members: [\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\"],\n    }],\n});\nconst policy_pk = new gcp.secretmanager.SecretIamPolicy(\"policy-pk\", {\n    secretId: private_key_secret.secretId,\n    policyData: p4sa_secretAccessor.then(p4sa_secretAccessor =\u003e p4sa_secretAccessor.policyData),\n});\nconst policy_whs = new gcp.secretmanager.SecretIamPolicy(\"policy-whs\", {\n    secretId: webhook_secret_secret.secretId,\n    policyData: p4sa_secretAccessor.then(p4sa_secretAccessor =\u003e p4sa_secretAccessor.policyData),\n});\nconst my_connection = new gcp.cloudbuildv2.Connection(\"my-connection\", {\n    location: \"us-central1\",\n    name: \"my-terraform-ghe-connection\",\n    githubEnterpriseConfig: {\n        hostUri: \"https://ghe.com\",\n        privateKeySecretVersion: private_key_secret_version.id,\n        webhookSecretSecretVersion: webhook_secret_secret_version.id,\n        appId: 200,\n        appSlug: \"gcb-app\",\n        appInstallationId: 300,\n    },\n}, {\n    dependsOn: [\n        policy_pk,\n        policy_whs,\n    ],\n});\nconst my_repository = new gcp.cloudbuildv2.Repository(\"my-repository\", {\n    name: \"my-terraform-ghe-repo\",\n    location: \"us-central1\",\n    parentConnection: my_connection.name,\n    remoteUri: \"https://ghe.com/hashicorp/terraform-provider-google.git\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\nprivate_key_secret = gcp.secretmanager.Secret(\"private-key-secret\",\n    secret_id=\"ghe-pk-secret\",\n    replication={\n        \"auto\": {},\n    })\nprivate_key_secret_version = gcp.secretmanager.SecretVersion(\"private-key-secret-version\",\n    secret=private_key_secret.id,\n    secret_data=std.file(input=\"private-key.pem\").result)\nwebhook_secret_secret = gcp.secretmanager.Secret(\"webhook-secret-secret\",\n    secret_id=\"github-token-secret\",\n    replication={\n        \"auto\": {},\n    })\nwebhook_secret_secret_version = gcp.secretmanager.SecretVersion(\"webhook-secret-secret-version\",\n    secret=webhook_secret_secret.id,\n    secret_data=\"\u003cwebhook-secret-data\u003e\")\np4sa_secret_accessor = gcp.organizations.get_iam_policy(bindings=[{\n    \"role\": \"roles/secretmanager.secretAccessor\",\n    \"members\": [\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\"],\n}])\npolicy_pk = gcp.secretmanager.SecretIamPolicy(\"policy-pk\",\n    secret_id=private_key_secret.secret_id,\n    policy_data=p4sa_secret_accessor.policy_data)\npolicy_whs = gcp.secretmanager.SecretIamPolicy(\"policy-whs\",\n    secret_id=webhook_secret_secret.secret_id,\n    policy_data=p4sa_secret_accessor.policy_data)\nmy_connection = gcp.cloudbuildv2.Connection(\"my-connection\",\n    location=\"us-central1\",\n    name=\"my-terraform-ghe-connection\",\n    github_enterprise_config={\n        \"host_uri\": \"https://ghe.com\",\n        \"private_key_secret_version\": private_key_secret_version.id,\n        \"webhook_secret_secret_version\": webhook_secret_secret_version.id,\n        \"app_id\": 200,\n        \"app_slug\": \"gcb-app\",\n        \"app_installation_id\": 300,\n    },\n    opts = pulumi.ResourceOptions(depends_on=[\n            policy_pk,\n            policy_whs,\n        ]))\nmy_repository = gcp.cloudbuildv2.Repository(\"my-repository\",\n    name=\"my-terraform-ghe-repo\",\n    location=\"us-central1\",\n    parent_connection=my_connection.name,\n    remote_uri=\"https://ghe.com/hashicorp/terraform-provider-google.git\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var private_key_secret = new Gcp.SecretManager.Secret(\"private-key-secret\", new()\n    {\n        SecretId = \"ghe-pk-secret\",\n        Replication = new Gcp.SecretManager.Inputs.SecretReplicationArgs\n        {\n            Auto = null,\n        },\n    });\n\n    var private_key_secret_version = new Gcp.SecretManager.SecretVersion(\"private-key-secret-version\", new()\n    {\n        Secret = private_key_secret.Id,\n        SecretData = Std.File.Invoke(new()\n        {\n            Input = \"private-key.pem\",\n        }).Apply(invoke =\u003e invoke.Result),\n    });\n\n    var webhook_secret_secret = new Gcp.SecretManager.Secret(\"webhook-secret-secret\", new()\n    {\n        SecretId = \"github-token-secret\",\n        Replication = new Gcp.SecretManager.Inputs.SecretReplicationArgs\n        {\n            Auto = null,\n        },\n    });\n\n    var webhook_secret_secret_version = new Gcp.SecretManager.SecretVersion(\"webhook-secret-secret-version\", new()\n    {\n        Secret = webhook_secret_secret.Id,\n        SecretData = \"\u003cwebhook-secret-data\u003e\",\n    });\n\n    var p4sa_secretAccessor = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/secretmanager.secretAccessor\",\n                Members = new[]\n                {\n                    \"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\",\n                },\n            },\n        },\n    });\n\n    var policy_pk = new Gcp.SecretManager.SecretIamPolicy(\"policy-pk\", new()\n    {\n        SecretId = private_key_secret.SecretId,\n        PolicyData = p4sa_secretAccessor.Apply(p4sa_secretAccessor =\u003e p4sa_secretAccessor.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData)),\n    });\n\n    var policy_whs = new Gcp.SecretManager.SecretIamPolicy(\"policy-whs\", new()\n    {\n        SecretId = webhook_secret_secret.SecretId,\n        PolicyData = p4sa_secretAccessor.Apply(p4sa_secretAccessor =\u003e p4sa_secretAccessor.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData)),\n    });\n\n    var my_connection = new Gcp.CloudBuildV2.Connection(\"my-connection\", new()\n    {\n        Location = \"us-central1\",\n        Name = \"my-terraform-ghe-connection\",\n        GithubEnterpriseConfig = new Gcp.CloudBuildV2.Inputs.ConnectionGithubEnterpriseConfigArgs\n        {\n            HostUri = \"https://ghe.com\",\n            PrivateKeySecretVersion = private_key_secret_version.Id,\n            WebhookSecretSecretVersion = webhook_secret_secret_version.Id,\n            AppId = 200,\n            AppSlug = \"gcb-app\",\n            AppInstallationId = 300,\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            policy_pk,\n            policy_whs,\n        },\n    });\n\n    var my_repository = new Gcp.CloudBuildV2.Repository(\"my-repository\", new()\n    {\n        Name = \"my-terraform-ghe-repo\",\n        Location = \"us-central1\",\n        ParentConnection = my_connection.Name,\n        RemoteUri = \"https://ghe.com/hashicorp/terraform-provider-google.git\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudbuildv2\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/secretmanager\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := secretmanager.NewSecret(ctx, \"private-key-secret\", \u0026secretmanager.SecretArgs{\n\t\t\tSecretId: pulumi.String(\"ghe-pk-secret\"),\n\t\t\tReplication: \u0026secretmanager.SecretReplicationArgs{\n\t\t\t\tAuto: \u0026secretmanager.SecretReplicationAutoArgs{},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tinvokeFile, err := std.File(ctx, \u0026std.FileArgs{\n\t\t\tInput: \"private-key.pem\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretVersion(ctx, \"private-key-secret-version\", \u0026secretmanager.SecretVersionArgs{\n\t\t\tSecret:     private_key_secret.ID(),\n\t\t\tSecretData: pulumi.String(invokeFile.Result),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecret(ctx, \"webhook-secret-secret\", \u0026secretmanager.SecretArgs{\n\t\t\tSecretId: pulumi.String(\"github-token-secret\"),\n\t\t\tReplication: \u0026secretmanager.SecretReplicationArgs{\n\t\t\t\tAuto: \u0026secretmanager.SecretReplicationAutoArgs{},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretVersion(ctx, \"webhook-secret-secret-version\", \u0026secretmanager.SecretVersionArgs{\n\t\t\tSecret:     webhook_secret_secret.ID(),\n\t\t\tSecretData: pulumi.String(\"\u003cwebhook-secret-data\u003e\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tp4sa_secretAccessor, err := organizations.LookupIAMPolicy(ctx, \u0026organizations.LookupIAMPolicyArgs{\n\t\t\tBindings: []organizations.GetIAMPolicyBinding{\n\t\t\t\t{\n\t\t\t\t\tRole: \"roles/secretmanager.secretAccessor\",\n\t\t\t\t\tMembers: []string{\n\t\t\t\t\t\t\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretIamPolicy(ctx, \"policy-pk\", \u0026secretmanager.SecretIamPolicyArgs{\n\t\t\tSecretId:   private_key_secret.SecretId,\n\t\t\tPolicyData: pulumi.String(p4sa_secretAccessor.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretIamPolicy(ctx, \"policy-whs\", \u0026secretmanager.SecretIamPolicyArgs{\n\t\t\tSecretId:   webhook_secret_secret.SecretId,\n\t\t\tPolicyData: pulumi.String(p4sa_secretAccessor.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudbuildv2.NewConnection(ctx, \"my-connection\", \u0026cloudbuildv2.ConnectionArgs{\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t\tName:     pulumi.String(\"my-terraform-ghe-connection\"),\n\t\t\tGithubEnterpriseConfig: \u0026cloudbuildv2.ConnectionGithubEnterpriseConfigArgs{\n\t\t\t\tHostUri:                    pulumi.String(\"https://ghe.com\"),\n\t\t\t\tPrivateKeySecretVersion:    private_key_secret_version.ID(),\n\t\t\t\tWebhookSecretSecretVersion: webhook_secret_secret_version.ID(),\n\t\t\t\tAppId:                      pulumi.Int(200),\n\t\t\t\tAppSlug:                    pulumi.String(\"gcb-app\"),\n\t\t\t\tAppInstallationId:          pulumi.Int(300),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tpolicy_pk,\n\t\t\tpolicy_whs,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudbuildv2.NewRepository(ctx, \"my-repository\", \u0026cloudbuildv2.RepositoryArgs{\n\t\t\tName:             pulumi.String(\"my-terraform-ghe-repo\"),\n\t\t\tLocation:         pulumi.String(\"us-central1\"),\n\t\t\tParentConnection: my_connection.Name,\n\t\t\tRemoteUri:        pulumi.String(\"https://ghe.com/hashicorp/terraform-provider-google.git\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.secretmanager.Secret;\nimport com.pulumi.gcp.secretmanager.SecretArgs;\nimport com.pulumi.gcp.secretmanager.inputs.SecretReplicationArgs;\nimport com.pulumi.gcp.secretmanager.inputs.SecretReplicationAutoArgs;\nimport com.pulumi.gcp.secretmanager.SecretVersion;\nimport com.pulumi.gcp.secretmanager.SecretVersionArgs;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.secretmanager.SecretIamPolicy;\nimport com.pulumi.gcp.secretmanager.SecretIamPolicyArgs;\nimport com.pulumi.gcp.cloudbuildv2.Connection;\nimport com.pulumi.gcp.cloudbuildv2.ConnectionArgs;\nimport com.pulumi.gcp.cloudbuildv2.inputs.ConnectionGithubEnterpriseConfigArgs;\nimport com.pulumi.gcp.cloudbuildv2.Repository;\nimport com.pulumi.gcp.cloudbuildv2.RepositoryArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var private_key_secret = new Secret(\"private-key-secret\", SecretArgs.builder()\n            .secretId(\"ghe-pk-secret\")\n            .replication(SecretReplicationArgs.builder()\n                .auto()\n                .build())\n            .build());\n\n        var private_key_secret_version = new SecretVersion(\"private-key-secret-version\", SecretVersionArgs.builder()\n            .secret(private_key_secret.id())\n            .secretData(StdFunctions.file(FileArgs.builder()\n                .input(\"private-key.pem\")\n                .build()).result())\n            .build());\n\n        var webhook_secret_secret = new Secret(\"webhook-secret-secret\", SecretArgs.builder()\n            .secretId(\"github-token-secret\")\n            .replication(SecretReplicationArgs.builder()\n                .auto()\n                .build())\n            .build());\n\n        var webhook_secret_secret_version = new SecretVersion(\"webhook-secret-secret-version\", SecretVersionArgs.builder()\n            .secret(webhook_secret_secret.id())\n            .secretData(\"\u003cwebhook-secret-data\u003e\")\n            .build());\n\n        final var p4sa-secretAccessor = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/secretmanager.secretAccessor\")\n                .members(\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\")\n                .build())\n            .build());\n\n        var policy_pk = new SecretIamPolicy(\"policy-pk\", SecretIamPolicyArgs.builder()\n            .secretId(private_key_secret.secretId())\n            .policyData(p4sa_secretAccessor.policyData())\n            .build());\n\n        var policy_whs = new SecretIamPolicy(\"policy-whs\", SecretIamPolicyArgs.builder()\n            .secretId(webhook_secret_secret.secretId())\n            .policyData(p4sa_secretAccessor.policyData())\n            .build());\n\n        var my_connection = new Connection(\"my-connection\", ConnectionArgs.builder()\n            .location(\"us-central1\")\n            .name(\"my-terraform-ghe-connection\")\n            .githubEnterpriseConfig(ConnectionGithubEnterpriseConfigArgs.builder()\n                .hostUri(\"https://ghe.com\")\n                .privateKeySecretVersion(private_key_secret_version.id())\n                .webhookSecretSecretVersion(webhook_secret_secret_version.id())\n                .appId(200)\n                .appSlug(\"gcb-app\")\n                .appInstallationId(300)\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(                \n                    policy_pk,\n                    policy_whs)\n                .build());\n\n        var my_repository = new Repository(\"my-repository\", RepositoryArgs.builder()\n            .name(\"my-terraform-ghe-repo\")\n            .location(\"us-central1\")\n            .parentConnection(my_connection.name())\n            .remoteUri(\"https://ghe.com/hashicorp/terraform-provider-google.git\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  private-key-secret:\n    type: gcp:secretmanager:Secret\n    properties:\n      secretId: ghe-pk-secret\n      replication:\n        auto: {}\n  private-key-secret-version:\n    type: gcp:secretmanager:SecretVersion\n    properties:\n      secret: ${[\"private-key-secret\"].id}\n      secretData:\n        fn::invoke:\n          function: std:file\n          arguments:\n            input: private-key.pem\n          return: result\n  webhook-secret-secret:\n    type: gcp:secretmanager:Secret\n    properties:\n      secretId: github-token-secret\n      replication:\n        auto: {}\n  webhook-secret-secret-version:\n    type: gcp:secretmanager:SecretVersion\n    properties:\n      secret: ${[\"webhook-secret-secret\"].id}\n      secretData: \u003cwebhook-secret-data\u003e\n  policy-pk:\n    type: gcp:secretmanager:SecretIamPolicy\n    properties:\n      secretId: ${[\"private-key-secret\"].secretId}\n      policyData: ${[\"p4sa-secretAccessor\"].policyData}\n  policy-whs:\n    type: gcp:secretmanager:SecretIamPolicy\n    properties:\n      secretId: ${[\"webhook-secret-secret\"].secretId}\n      policyData: ${[\"p4sa-secretAccessor\"].policyData}\n  my-connection:\n    type: gcp:cloudbuildv2:Connection\n    properties:\n      location: us-central1\n      name: my-terraform-ghe-connection\n      githubEnterpriseConfig:\n        hostUri: https://ghe.com\n        privateKeySecretVersion: ${[\"private-key-secret-version\"].id}\n        webhookSecretSecretVersion: ${[\"webhook-secret-secret-version\"].id}\n        appId: 200\n        appSlug: gcb-app\n        appInstallationId: 300\n    options:\n      dependsOn:\n        - ${[\"policy-pk\"]}\n        - ${[\"policy-whs\"]}\n  my-repository:\n    type: gcp:cloudbuildv2:Repository\n    properties:\n      name: my-terraform-ghe-repo\n      location: us-central1\n      parentConnection: ${[\"my-connection\"].name}\n      remoteUri: https://ghe.com/hashicorp/terraform-provider-google.git\nvariables:\n  p4sa-secretAccessor:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/secretmanager.secretAccessor\n            members:\n              - serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Cloudbuildv2 Repository Github Doc\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst github_token_secret = new gcp.secretmanager.Secret(\"github-token-secret\", {\n    secretId: \"github-token-secret\",\n    replication: {\n        auto: {},\n    },\n});\nconst github_token_secret_version = new gcp.secretmanager.SecretVersion(\"github-token-secret-version\", {\n    secret: github_token_secret.id,\n    secretData: std.file({\n        input: \"my-github-token.txt\",\n    }).then(invoke =\u003e invoke.result),\n});\nconst p4sa-secretAccessor = gcp.organizations.getIAMPolicy({\n    bindings: [{\n        role: \"roles/secretmanager.secretAccessor\",\n        members: [\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\"],\n    }],\n});\nconst policy = new gcp.secretmanager.SecretIamPolicy(\"policy\", {\n    secretId: github_token_secret.secretId,\n    policyData: p4sa_secretAccessor.then(p4sa_secretAccessor =\u003e p4sa_secretAccessor.policyData),\n});\nconst my_connection = new gcp.cloudbuildv2.Connection(\"my-connection\", {\n    location: \"us-central1\",\n    name: \"my-connection\",\n    githubConfig: {\n        appInstallationId: 123123,\n        authorizerCredential: {\n            oauthTokenSecretVersion: github_token_secret_version.id,\n        },\n    },\n});\nconst my_repository = new gcp.cloudbuildv2.Repository(\"my-repository\", {\n    location: \"us-central1\",\n    name: \"my-repo\",\n    parentConnection: my_connection.name,\n    remoteUri: \"https://github.com/myuser/myrepo.git\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\ngithub_token_secret = gcp.secretmanager.Secret(\"github-token-secret\",\n    secret_id=\"github-token-secret\",\n    replication={\n        \"auto\": {},\n    })\ngithub_token_secret_version = gcp.secretmanager.SecretVersion(\"github-token-secret-version\",\n    secret=github_token_secret.id,\n    secret_data=std.file(input=\"my-github-token.txt\").result)\np4sa_secret_accessor = gcp.organizations.get_iam_policy(bindings=[{\n    \"role\": \"roles/secretmanager.secretAccessor\",\n    \"members\": [\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\"],\n}])\npolicy = gcp.secretmanager.SecretIamPolicy(\"policy\",\n    secret_id=github_token_secret.secret_id,\n    policy_data=p4sa_secret_accessor.policy_data)\nmy_connection = gcp.cloudbuildv2.Connection(\"my-connection\",\n    location=\"us-central1\",\n    name=\"my-connection\",\n    github_config={\n        \"app_installation_id\": 123123,\n        \"authorizer_credential\": {\n            \"oauth_token_secret_version\": github_token_secret_version.id,\n        },\n    })\nmy_repository = gcp.cloudbuildv2.Repository(\"my-repository\",\n    location=\"us-central1\",\n    name=\"my-repo\",\n    parent_connection=my_connection.name,\n    remote_uri=\"https://github.com/myuser/myrepo.git\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var github_token_secret = new Gcp.SecretManager.Secret(\"github-token-secret\", new()\n    {\n        SecretId = \"github-token-secret\",\n        Replication = new Gcp.SecretManager.Inputs.SecretReplicationArgs\n        {\n            Auto = null,\n        },\n    });\n\n    var github_token_secret_version = new Gcp.SecretManager.SecretVersion(\"github-token-secret-version\", new()\n    {\n        Secret = github_token_secret.Id,\n        SecretData = Std.File.Invoke(new()\n        {\n            Input = \"my-github-token.txt\",\n        }).Apply(invoke =\u003e invoke.Result),\n    });\n\n    var p4sa_secretAccessor = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/secretmanager.secretAccessor\",\n                Members = new[]\n                {\n                    \"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\",\n                },\n            },\n        },\n    });\n\n    var policy = new Gcp.SecretManager.SecretIamPolicy(\"policy\", new()\n    {\n        SecretId = github_token_secret.SecretId,\n        PolicyData = p4sa_secretAccessor.Apply(p4sa_secretAccessor =\u003e p4sa_secretAccessor.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData)),\n    });\n\n    var my_connection = new Gcp.CloudBuildV2.Connection(\"my-connection\", new()\n    {\n        Location = \"us-central1\",\n        Name = \"my-connection\",\n        GithubConfig = new Gcp.CloudBuildV2.Inputs.ConnectionGithubConfigArgs\n        {\n            AppInstallationId = 123123,\n            AuthorizerCredential = new Gcp.CloudBuildV2.Inputs.ConnectionGithubConfigAuthorizerCredentialArgs\n            {\n                OauthTokenSecretVersion = github_token_secret_version.Id,\n            },\n        },\n    });\n\n    var my_repository = new Gcp.CloudBuildV2.Repository(\"my-repository\", new()\n    {\n        Location = \"us-central1\",\n        Name = \"my-repo\",\n        ParentConnection = my_connection.Name,\n        RemoteUri = \"https://github.com/myuser/myrepo.git\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudbuildv2\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/secretmanager\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := secretmanager.NewSecret(ctx, \"github-token-secret\", \u0026secretmanager.SecretArgs{\n\t\t\tSecretId: pulumi.String(\"github-token-secret\"),\n\t\t\tReplication: \u0026secretmanager.SecretReplicationArgs{\n\t\t\t\tAuto: \u0026secretmanager.SecretReplicationAutoArgs{},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tinvokeFile, err := std.File(ctx, \u0026std.FileArgs{\n\t\t\tInput: \"my-github-token.txt\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretVersion(ctx, \"github-token-secret-version\", \u0026secretmanager.SecretVersionArgs{\n\t\t\tSecret:     github_token_secret.ID(),\n\t\t\tSecretData: pulumi.String(invokeFile.Result),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tp4sa_secretAccessor, err := organizations.LookupIAMPolicy(ctx, \u0026organizations.LookupIAMPolicyArgs{\n\t\t\tBindings: []organizations.GetIAMPolicyBinding{\n\t\t\t\t{\n\t\t\t\t\tRole: \"roles/secretmanager.secretAccessor\",\n\t\t\t\t\tMembers: []string{\n\t\t\t\t\t\t\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretIamPolicy(ctx, \"policy\", \u0026secretmanager.SecretIamPolicyArgs{\n\t\t\tSecretId:   github_token_secret.SecretId,\n\t\t\tPolicyData: pulumi.String(p4sa_secretAccessor.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudbuildv2.NewConnection(ctx, \"my-connection\", \u0026cloudbuildv2.ConnectionArgs{\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t\tName:     pulumi.String(\"my-connection\"),\n\t\t\tGithubConfig: \u0026cloudbuildv2.ConnectionGithubConfigArgs{\n\t\t\t\tAppInstallationId: pulumi.Int(123123),\n\t\t\t\tAuthorizerCredential: \u0026cloudbuildv2.ConnectionGithubConfigAuthorizerCredentialArgs{\n\t\t\t\t\tOauthTokenSecretVersion: github_token_secret_version.ID(),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudbuildv2.NewRepository(ctx, \"my-repository\", \u0026cloudbuildv2.RepositoryArgs{\n\t\t\tLocation:         pulumi.String(\"us-central1\"),\n\t\t\tName:             pulumi.String(\"my-repo\"),\n\t\t\tParentConnection: my_connection.Name,\n\t\t\tRemoteUri:        pulumi.String(\"https://github.com/myuser/myrepo.git\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.secretmanager.Secret;\nimport com.pulumi.gcp.secretmanager.SecretArgs;\nimport com.pulumi.gcp.secretmanager.inputs.SecretReplicationArgs;\nimport com.pulumi.gcp.secretmanager.inputs.SecretReplicationAutoArgs;\nimport com.pulumi.gcp.secretmanager.SecretVersion;\nimport com.pulumi.gcp.secretmanager.SecretVersionArgs;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.secretmanager.SecretIamPolicy;\nimport com.pulumi.gcp.secretmanager.SecretIamPolicyArgs;\nimport com.pulumi.gcp.cloudbuildv2.Connection;\nimport com.pulumi.gcp.cloudbuildv2.ConnectionArgs;\nimport com.pulumi.gcp.cloudbuildv2.inputs.ConnectionGithubConfigArgs;\nimport com.pulumi.gcp.cloudbuildv2.inputs.ConnectionGithubConfigAuthorizerCredentialArgs;\nimport com.pulumi.gcp.cloudbuildv2.Repository;\nimport com.pulumi.gcp.cloudbuildv2.RepositoryArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var github_token_secret = new Secret(\"github-token-secret\", SecretArgs.builder()\n            .secretId(\"github-token-secret\")\n            .replication(SecretReplicationArgs.builder()\n                .auto()\n                .build())\n            .build());\n\n        var github_token_secret_version = new SecretVersion(\"github-token-secret-version\", SecretVersionArgs.builder()\n            .secret(github_token_secret.id())\n            .secretData(StdFunctions.file(FileArgs.builder()\n                .input(\"my-github-token.txt\")\n                .build()).result())\n            .build());\n\n        final var p4sa-secretAccessor = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/secretmanager.secretAccessor\")\n                .members(\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\")\n                .build())\n            .build());\n\n        var policy = new SecretIamPolicy(\"policy\", SecretIamPolicyArgs.builder()\n            .secretId(github_token_secret.secretId())\n            .policyData(p4sa_secretAccessor.policyData())\n            .build());\n\n        var my_connection = new Connection(\"my-connection\", ConnectionArgs.builder()\n            .location(\"us-central1\")\n            .name(\"my-connection\")\n            .githubConfig(ConnectionGithubConfigArgs.builder()\n                .appInstallationId(123123)\n                .authorizerCredential(ConnectionGithubConfigAuthorizerCredentialArgs.builder()\n                    .oauthTokenSecretVersion(github_token_secret_version.id())\n                    .build())\n                .build())\n            .build());\n\n        var my_repository = new Repository(\"my-repository\", RepositoryArgs.builder()\n            .location(\"us-central1\")\n            .name(\"my-repo\")\n            .parentConnection(my_connection.name())\n            .remoteUri(\"https://github.com/myuser/myrepo.git\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  github-token-secret:\n    type: gcp:secretmanager:Secret\n    properties:\n      secretId: github-token-secret\n      replication:\n        auto: {}\n  github-token-secret-version:\n    type: gcp:secretmanager:SecretVersion\n    properties:\n      secret: ${[\"github-token-secret\"].id}\n      secretData:\n        fn::invoke:\n          function: std:file\n          arguments:\n            input: my-github-token.txt\n          return: result\n  policy:\n    type: gcp:secretmanager:SecretIamPolicy\n    properties:\n      secretId: ${[\"github-token-secret\"].secretId}\n      policyData: ${[\"p4sa-secretAccessor\"].policyData}\n  my-connection:\n    type: gcp:cloudbuildv2:Connection\n    properties:\n      location: us-central1\n      name: my-connection\n      githubConfig:\n        appInstallationId: 123123\n        authorizerCredential:\n          oauthTokenSecretVersion: ${[\"github-token-secret-version\"].id}\n  my-repository:\n    type: gcp:cloudbuildv2:Repository\n    properties:\n      location: us-central1\n      name: my-repo\n      parentConnection: ${[\"my-connection\"].name}\n      remoteUri: https://github.com/myuser/myrepo.git\nvariables:\n  p4sa-secretAccessor:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/secretmanager.secretAccessor\n            members:\n              - serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nRepository can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{location}}/connections/{{parent_connection}}/repositories/{{name}}`\n\n* `{{project}}/{{location}}/{{parent_connection}}/{{name}}`\n\n* `{{location}}/{{parent_connection}}/{{name}}`\n\nWhen using the `pulumi import` command, Repository can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:cloudbuildv2/repository:Repository default projects/{{project}}/locations/{{location}}/connections/{{parent_connection}}/repositories/{{name}}\n```\n\n```sh\n$ pulumi import gcp:cloudbuildv2/repository:Repository default {{project}}/{{location}}/{{parent_connection}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:cloudbuildv2/repository:Repository default {{location}}/{{parent_connection}}/{{name}}\n```\n\n",
+            "description": "A repository associated to a parent connection.\n\n\nTo get more information about Repository, see:\n\n* [API documentation](https://cloud.google.com/build/docs/api/reference/rest)\n* How-to Guides\n    * [Official Documentation](https://cloud.google.com/build/docs)\n\n## Example Usage\n\n### Cloudbuildv2 Repository Ghe Doc\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst private_key_secret = new gcp.secretmanager.Secret(\"private-key-secret\", {\n    secretId: \"ghe-pk-secret\",\n    replication: {\n        auto: {},\n    },\n});\nconst private_key_secret_version = new gcp.secretmanager.SecretVersion(\"private-key-secret-version\", {\n    secret: private_key_secret.id,\n    secretData: std.file({\n        input: \"private-key.pem\",\n    }).then(invoke =\u003e invoke.result),\n});\nconst webhook_secret_secret = new gcp.secretmanager.Secret(\"webhook-secret-secret\", {\n    secretId: \"github-token-secret\",\n    replication: {\n        auto: {},\n    },\n});\nconst webhook_secret_secret_version = new gcp.secretmanager.SecretVersion(\"webhook-secret-secret-version\", {\n    secret: webhook_secret_secret.id,\n    secretData: \"\u003cwebhook-secret-data\u003e\",\n});\nconst p4sa_secretAccessor = gcp.organizations.getIAMPolicy({\n    bindings: [{\n        role: \"roles/secretmanager.secretAccessor\",\n        members: [\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\"],\n    }],\n});\nconst policy_pk = new gcp.secretmanager.SecretIamPolicy(\"policy-pk\", {\n    secretId: private_key_secret.secretId,\n    policyData: p4sa_secretAccessor.then(p4sa_secretAccessor =\u003e p4sa_secretAccessor.policyData),\n});\nconst policy_whs = new gcp.secretmanager.SecretIamPolicy(\"policy-whs\", {\n    secretId: webhook_secret_secret.secretId,\n    policyData: p4sa_secretAccessor.then(p4sa_secretAccessor =\u003e p4sa_secretAccessor.policyData),\n});\nconst my_connection = new gcp.cloudbuildv2.Connection(\"my-connection\", {\n    location: \"us-central1\",\n    name: \"my-terraform-ghe-connection\",\n    githubEnterpriseConfig: {\n        hostUri: \"https://ghe.com\",\n        privateKeySecretVersion: private_key_secret_version.id,\n        webhookSecretSecretVersion: webhook_secret_secret_version.id,\n        appId: 200,\n        appSlug: \"gcb-app\",\n        appInstallationId: 300,\n    },\n}, {\n    dependsOn: [\n        policy_pk,\n        policy_whs,\n    ],\n});\nconst my_repository = new gcp.cloudbuildv2.Repository(\"my-repository\", {\n    name: \"my-terraform-ghe-repo\",\n    location: \"us-central1\",\n    parentConnection: my_connection.name,\n    remoteUri: \"https://ghe.com/hashicorp/terraform-provider-google.git\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\nprivate_key_secret = gcp.secretmanager.Secret(\"private-key-secret\",\n    secret_id=\"ghe-pk-secret\",\n    replication={\n        \"auto\": {},\n    })\nprivate_key_secret_version = gcp.secretmanager.SecretVersion(\"private-key-secret-version\",\n    secret=private_key_secret.id,\n    secret_data=std.file(input=\"private-key.pem\").result)\nwebhook_secret_secret = gcp.secretmanager.Secret(\"webhook-secret-secret\",\n    secret_id=\"github-token-secret\",\n    replication={\n        \"auto\": {},\n    })\nwebhook_secret_secret_version = gcp.secretmanager.SecretVersion(\"webhook-secret-secret-version\",\n    secret=webhook_secret_secret.id,\n    secret_data=\"\u003cwebhook-secret-data\u003e\")\np4sa_secret_accessor = gcp.organizations.get_iam_policy(bindings=[{\n    \"role\": \"roles/secretmanager.secretAccessor\",\n    \"members\": [\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\"],\n}])\npolicy_pk = gcp.secretmanager.SecretIamPolicy(\"policy-pk\",\n    secret_id=private_key_secret.secret_id,\n    policy_data=p4sa_secret_accessor.policy_data)\npolicy_whs = gcp.secretmanager.SecretIamPolicy(\"policy-whs\",\n    secret_id=webhook_secret_secret.secret_id,\n    policy_data=p4sa_secret_accessor.policy_data)\nmy_connection = gcp.cloudbuildv2.Connection(\"my-connection\",\n    location=\"us-central1\",\n    name=\"my-terraform-ghe-connection\",\n    github_enterprise_config={\n        \"host_uri\": \"https://ghe.com\",\n        \"private_key_secret_version\": private_key_secret_version.id,\n        \"webhook_secret_secret_version\": webhook_secret_secret_version.id,\n        \"app_id\": 200,\n        \"app_slug\": \"gcb-app\",\n        \"app_installation_id\": 300,\n    },\n    opts = pulumi.ResourceOptions(depends_on=[\n            policy_pk,\n            policy_whs,\n        ]))\nmy_repository = gcp.cloudbuildv2.Repository(\"my-repository\",\n    name=\"my-terraform-ghe-repo\",\n    location=\"us-central1\",\n    parent_connection=my_connection.name,\n    remote_uri=\"https://ghe.com/hashicorp/terraform-provider-google.git\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var private_key_secret = new Gcp.SecretManager.Secret(\"private-key-secret\", new()\n    {\n        SecretId = \"ghe-pk-secret\",\n        Replication = new Gcp.SecretManager.Inputs.SecretReplicationArgs\n        {\n            Auto = null,\n        },\n    });\n\n    var private_key_secret_version = new Gcp.SecretManager.SecretVersion(\"private-key-secret-version\", new()\n    {\n        Secret = private_key_secret.Id,\n        SecretData = Std.File.Invoke(new()\n        {\n            Input = \"private-key.pem\",\n        }).Apply(invoke =\u003e invoke.Result),\n    });\n\n    var webhook_secret_secret = new Gcp.SecretManager.Secret(\"webhook-secret-secret\", new()\n    {\n        SecretId = \"github-token-secret\",\n        Replication = new Gcp.SecretManager.Inputs.SecretReplicationArgs\n        {\n            Auto = null,\n        },\n    });\n\n    var webhook_secret_secret_version = new Gcp.SecretManager.SecretVersion(\"webhook-secret-secret-version\", new()\n    {\n        Secret = webhook_secret_secret.Id,\n        SecretData = \"\u003cwebhook-secret-data\u003e\",\n    });\n\n    var p4sa_secretAccessor = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/secretmanager.secretAccessor\",\n                Members = new[]\n                {\n                    \"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\",\n                },\n            },\n        },\n    });\n\n    var policy_pk = new Gcp.SecretManager.SecretIamPolicy(\"policy-pk\", new()\n    {\n        SecretId = private_key_secret.SecretId,\n        PolicyData = p4sa_secretAccessor.Apply(p4sa_secretAccessor =\u003e p4sa_secretAccessor.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData)),\n    });\n\n    var policy_whs = new Gcp.SecretManager.SecretIamPolicy(\"policy-whs\", new()\n    {\n        SecretId = webhook_secret_secret.SecretId,\n        PolicyData = p4sa_secretAccessor.Apply(p4sa_secretAccessor =\u003e p4sa_secretAccessor.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData)),\n    });\n\n    var my_connection = new Gcp.CloudBuildV2.Connection(\"my-connection\", new()\n    {\n        Location = \"us-central1\",\n        Name = \"my-terraform-ghe-connection\",\n        GithubEnterpriseConfig = new Gcp.CloudBuildV2.Inputs.ConnectionGithubEnterpriseConfigArgs\n        {\n            HostUri = \"https://ghe.com\",\n            PrivateKeySecretVersion = private_key_secret_version.Id,\n            WebhookSecretSecretVersion = webhook_secret_secret_version.Id,\n            AppId = 200,\n            AppSlug = \"gcb-app\",\n            AppInstallationId = 300,\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            policy_pk,\n            policy_whs,\n        },\n    });\n\n    var my_repository = new Gcp.CloudBuildV2.Repository(\"my-repository\", new()\n    {\n        Name = \"my-terraform-ghe-repo\",\n        Location = \"us-central1\",\n        ParentConnection = my_connection.Name,\n        RemoteUri = \"https://ghe.com/hashicorp/terraform-provider-google.git\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudbuildv2\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/secretmanager\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := secretmanager.NewSecret(ctx, \"private-key-secret\", \u0026secretmanager.SecretArgs{\n\t\t\tSecretId: pulumi.String(\"ghe-pk-secret\"),\n\t\t\tReplication: \u0026secretmanager.SecretReplicationArgs{\n\t\t\t\tAuto: \u0026secretmanager.SecretReplicationAutoArgs{},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tinvokeFile, err := std.File(ctx, \u0026std.FileArgs{\n\t\t\tInput: \"private-key.pem\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretVersion(ctx, \"private-key-secret-version\", \u0026secretmanager.SecretVersionArgs{\n\t\t\tSecret:     private_key_secret.ID(),\n\t\t\tSecretData: pulumi.String(invokeFile.Result),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecret(ctx, \"webhook-secret-secret\", \u0026secretmanager.SecretArgs{\n\t\t\tSecretId: pulumi.String(\"github-token-secret\"),\n\t\t\tReplication: \u0026secretmanager.SecretReplicationArgs{\n\t\t\t\tAuto: \u0026secretmanager.SecretReplicationAutoArgs{},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretVersion(ctx, \"webhook-secret-secret-version\", \u0026secretmanager.SecretVersionArgs{\n\t\t\tSecret:     webhook_secret_secret.ID(),\n\t\t\tSecretData: pulumi.String(\"\u003cwebhook-secret-data\u003e\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tp4sa_secretAccessor, err := organizations.LookupIAMPolicy(ctx, \u0026organizations.LookupIAMPolicyArgs{\n\t\t\tBindings: []organizations.GetIAMPolicyBinding{\n\t\t\t\t{\n\t\t\t\t\tRole: \"roles/secretmanager.secretAccessor\",\n\t\t\t\t\tMembers: []string{\n\t\t\t\t\t\t\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretIamPolicy(ctx, \"policy-pk\", \u0026secretmanager.SecretIamPolicyArgs{\n\t\t\tSecretId:   private_key_secret.SecretId,\n\t\t\tPolicyData: pulumi.String(p4sa_secretAccessor.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretIamPolicy(ctx, \"policy-whs\", \u0026secretmanager.SecretIamPolicyArgs{\n\t\t\tSecretId:   webhook_secret_secret.SecretId,\n\t\t\tPolicyData: pulumi.String(p4sa_secretAccessor.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudbuildv2.NewConnection(ctx, \"my-connection\", \u0026cloudbuildv2.ConnectionArgs{\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t\tName:     pulumi.String(\"my-terraform-ghe-connection\"),\n\t\t\tGithubEnterpriseConfig: \u0026cloudbuildv2.ConnectionGithubEnterpriseConfigArgs{\n\t\t\t\tHostUri:                    pulumi.String(\"https://ghe.com\"),\n\t\t\t\tPrivateKeySecretVersion:    private_key_secret_version.ID(),\n\t\t\t\tWebhookSecretSecretVersion: webhook_secret_secret_version.ID(),\n\t\t\t\tAppId:                      pulumi.Int(200),\n\t\t\t\tAppSlug:                    pulumi.String(\"gcb-app\"),\n\t\t\t\tAppInstallationId:          pulumi.Int(300),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tpolicy_pk,\n\t\t\tpolicy_whs,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudbuildv2.NewRepository(ctx, \"my-repository\", \u0026cloudbuildv2.RepositoryArgs{\n\t\t\tName:             pulumi.String(\"my-terraform-ghe-repo\"),\n\t\t\tLocation:         pulumi.String(\"us-central1\"),\n\t\t\tParentConnection: my_connection.Name,\n\t\t\tRemoteUri:        pulumi.String(\"https://ghe.com/hashicorp/terraform-provider-google.git\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.secretmanager.Secret;\nimport com.pulumi.gcp.secretmanager.SecretArgs;\nimport com.pulumi.gcp.secretmanager.inputs.SecretReplicationArgs;\nimport com.pulumi.gcp.secretmanager.inputs.SecretReplicationAutoArgs;\nimport com.pulumi.gcp.secretmanager.SecretVersion;\nimport com.pulumi.gcp.secretmanager.SecretVersionArgs;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.secretmanager.SecretIamPolicy;\nimport com.pulumi.gcp.secretmanager.SecretIamPolicyArgs;\nimport com.pulumi.gcp.cloudbuildv2.Connection;\nimport com.pulumi.gcp.cloudbuildv2.ConnectionArgs;\nimport com.pulumi.gcp.cloudbuildv2.inputs.ConnectionGithubEnterpriseConfigArgs;\nimport com.pulumi.gcp.cloudbuildv2.Repository;\nimport com.pulumi.gcp.cloudbuildv2.RepositoryArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var private_key_secret = new Secret(\"private-key-secret\", SecretArgs.builder()\n            .secretId(\"ghe-pk-secret\")\n            .replication(SecretReplicationArgs.builder()\n                .auto()\n                .build())\n            .build());\n\n        var private_key_secret_version = new SecretVersion(\"private-key-secret-version\", SecretVersionArgs.builder()\n            .secret(private_key_secret.id())\n            .secretData(StdFunctions.file(FileArgs.builder()\n                .input(\"private-key.pem\")\n                .build()).result())\n            .build());\n\n        var webhook_secret_secret = new Secret(\"webhook-secret-secret\", SecretArgs.builder()\n            .secretId(\"github-token-secret\")\n            .replication(SecretReplicationArgs.builder()\n                .auto()\n                .build())\n            .build());\n\n        var webhook_secret_secret_version = new SecretVersion(\"webhook-secret-secret-version\", SecretVersionArgs.builder()\n            .secret(webhook_secret_secret.id())\n            .secretData(\"\u003cwebhook-secret-data\u003e\")\n            .build());\n\n        final var p4sa-secretAccessor = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/secretmanager.secretAccessor\")\n                .members(\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\")\n                .build())\n            .build());\n\n        var policy_pk = new SecretIamPolicy(\"policy-pk\", SecretIamPolicyArgs.builder()\n            .secretId(private_key_secret.secretId())\n            .policyData(p4sa_secretAccessor.policyData())\n            .build());\n\n        var policy_whs = new SecretIamPolicy(\"policy-whs\", SecretIamPolicyArgs.builder()\n            .secretId(webhook_secret_secret.secretId())\n            .policyData(p4sa_secretAccessor.policyData())\n            .build());\n\n        var my_connection = new Connection(\"my-connection\", ConnectionArgs.builder()\n            .location(\"us-central1\")\n            .name(\"my-terraform-ghe-connection\")\n            .githubEnterpriseConfig(ConnectionGithubEnterpriseConfigArgs.builder()\n                .hostUri(\"https://ghe.com\")\n                .privateKeySecretVersion(private_key_secret_version.id())\n                .webhookSecretSecretVersion(webhook_secret_secret_version.id())\n                .appId(200)\n                .appSlug(\"gcb-app\")\n                .appInstallationId(300)\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(                \n                    policy_pk,\n                    policy_whs)\n                .build());\n\n        var my_repository = new Repository(\"my-repository\", RepositoryArgs.builder()\n            .name(\"my-terraform-ghe-repo\")\n            .location(\"us-central1\")\n            .parentConnection(my_connection.name())\n            .remoteUri(\"https://ghe.com/hashicorp/terraform-provider-google.git\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  private-key-secret:\n    type: gcp:secretmanager:Secret\n    properties:\n      secretId: ghe-pk-secret\n      replication:\n        auto: {}\n  private-key-secret-version:\n    type: gcp:secretmanager:SecretVersion\n    properties:\n      secret: ${[\"private-key-secret\"].id}\n      secretData:\n        fn::invoke:\n          function: std:file\n          arguments:\n            input: private-key.pem\n          return: result\n  webhook-secret-secret:\n    type: gcp:secretmanager:Secret\n    properties:\n      secretId: github-token-secret\n      replication:\n        auto: {}\n  webhook-secret-secret-version:\n    type: gcp:secretmanager:SecretVersion\n    properties:\n      secret: ${[\"webhook-secret-secret\"].id}\n      secretData: \u003cwebhook-secret-data\u003e\n  policy-pk:\n    type: gcp:secretmanager:SecretIamPolicy\n    properties:\n      secretId: ${[\"private-key-secret\"].secretId}\n      policyData: ${[\"p4sa-secretAccessor\"].policyData}\n  policy-whs:\n    type: gcp:secretmanager:SecretIamPolicy\n    properties:\n      secretId: ${[\"webhook-secret-secret\"].secretId}\n      policyData: ${[\"p4sa-secretAccessor\"].policyData}\n  my-connection:\n    type: gcp:cloudbuildv2:Connection\n    properties:\n      location: us-central1\n      name: my-terraform-ghe-connection\n      githubEnterpriseConfig:\n        hostUri: https://ghe.com\n        privateKeySecretVersion: ${[\"private-key-secret-version\"].id}\n        webhookSecretSecretVersion: ${[\"webhook-secret-secret-version\"].id}\n        appId: 200\n        appSlug: gcb-app\n        appInstallationId: 300\n    options:\n      dependsOn:\n        - ${[\"policy-pk\"]}\n        - ${[\"policy-whs\"]}\n  my-repository:\n    type: gcp:cloudbuildv2:Repository\n    properties:\n      name: my-terraform-ghe-repo\n      location: us-central1\n      parentConnection: ${[\"my-connection\"].name}\n      remoteUri: https://ghe.com/hashicorp/terraform-provider-google.git\nvariables:\n  p4sa-secretAccessor:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/secretmanager.secretAccessor\n            members:\n              - serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Cloudbuildv2 Repository Github Doc\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst github_token_secret = new gcp.secretmanager.Secret(\"github-token-secret\", {\n    secretId: \"github-token-secret\",\n    replication: {\n        auto: {},\n    },\n});\nconst github_token_secret_version = new gcp.secretmanager.SecretVersion(\"github-token-secret-version\", {\n    secret: github_token_secret.id,\n    secretData: std.file({\n        input: \"my-github-token.txt\",\n    }).then(invoke =\u003e invoke.result),\n});\nconst p4sa_secretAccessor = gcp.organizations.getIAMPolicy({\n    bindings: [{\n        role: \"roles/secretmanager.secretAccessor\",\n        members: [\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\"],\n    }],\n});\nconst policy = new gcp.secretmanager.SecretIamPolicy(\"policy\", {\n    secretId: github_token_secret.secretId,\n    policyData: p4sa_secretAccessor.then(p4sa_secretAccessor =\u003e p4sa_secretAccessor.policyData),\n});\nconst my_connection = new gcp.cloudbuildv2.Connection(\"my-connection\", {\n    location: \"us-central1\",\n    name: \"my-connection\",\n    githubConfig: {\n        appInstallationId: 123123,\n        authorizerCredential: {\n            oauthTokenSecretVersion: github_token_secret_version.id,\n        },\n    },\n});\nconst my_repository = new gcp.cloudbuildv2.Repository(\"my-repository\", {\n    location: \"us-central1\",\n    name: \"my-repo\",\n    parentConnection: my_connection.name,\n    remoteUri: \"https://github.com/myuser/myrepo.git\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\ngithub_token_secret = gcp.secretmanager.Secret(\"github-token-secret\",\n    secret_id=\"github-token-secret\",\n    replication={\n        \"auto\": {},\n    })\ngithub_token_secret_version = gcp.secretmanager.SecretVersion(\"github-token-secret-version\",\n    secret=github_token_secret.id,\n    secret_data=std.file(input=\"my-github-token.txt\").result)\np4sa_secret_accessor = gcp.organizations.get_iam_policy(bindings=[{\n    \"role\": \"roles/secretmanager.secretAccessor\",\n    \"members\": [\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\"],\n}])\npolicy = gcp.secretmanager.SecretIamPolicy(\"policy\",\n    secret_id=github_token_secret.secret_id,\n    policy_data=p4sa_secret_accessor.policy_data)\nmy_connection = gcp.cloudbuildv2.Connection(\"my-connection\",\n    location=\"us-central1\",\n    name=\"my-connection\",\n    github_config={\n        \"app_installation_id\": 123123,\n        \"authorizer_credential\": {\n            \"oauth_token_secret_version\": github_token_secret_version.id,\n        },\n    })\nmy_repository = gcp.cloudbuildv2.Repository(\"my-repository\",\n    location=\"us-central1\",\n    name=\"my-repo\",\n    parent_connection=my_connection.name,\n    remote_uri=\"https://github.com/myuser/myrepo.git\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var github_token_secret = new Gcp.SecretManager.Secret(\"github-token-secret\", new()\n    {\n        SecretId = \"github-token-secret\",\n        Replication = new Gcp.SecretManager.Inputs.SecretReplicationArgs\n        {\n            Auto = null,\n        },\n    });\n\n    var github_token_secret_version = new Gcp.SecretManager.SecretVersion(\"github-token-secret-version\", new()\n    {\n        Secret = github_token_secret.Id,\n        SecretData = Std.File.Invoke(new()\n        {\n            Input = \"my-github-token.txt\",\n        }).Apply(invoke =\u003e invoke.Result),\n    });\n\n    var p4sa_secretAccessor = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/secretmanager.secretAccessor\",\n                Members = new[]\n                {\n                    \"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\",\n                },\n            },\n        },\n    });\n\n    var policy = new Gcp.SecretManager.SecretIamPolicy(\"policy\", new()\n    {\n        SecretId = github_token_secret.SecretId,\n        PolicyData = p4sa_secretAccessor.Apply(p4sa_secretAccessor =\u003e p4sa_secretAccessor.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData)),\n    });\n\n    var my_connection = new Gcp.CloudBuildV2.Connection(\"my-connection\", new()\n    {\n        Location = \"us-central1\",\n        Name = \"my-connection\",\n        GithubConfig = new Gcp.CloudBuildV2.Inputs.ConnectionGithubConfigArgs\n        {\n            AppInstallationId = 123123,\n            AuthorizerCredential = new Gcp.CloudBuildV2.Inputs.ConnectionGithubConfigAuthorizerCredentialArgs\n            {\n                OauthTokenSecretVersion = github_token_secret_version.Id,\n            },\n        },\n    });\n\n    var my_repository = new Gcp.CloudBuildV2.Repository(\"my-repository\", new()\n    {\n        Location = \"us-central1\",\n        Name = \"my-repo\",\n        ParentConnection = my_connection.Name,\n        RemoteUri = \"https://github.com/myuser/myrepo.git\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudbuildv2\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/secretmanager\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := secretmanager.NewSecret(ctx, \"github-token-secret\", \u0026secretmanager.SecretArgs{\n\t\t\tSecretId: pulumi.String(\"github-token-secret\"),\n\t\t\tReplication: \u0026secretmanager.SecretReplicationArgs{\n\t\t\t\tAuto: \u0026secretmanager.SecretReplicationAutoArgs{},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tinvokeFile, err := std.File(ctx, \u0026std.FileArgs{\n\t\t\tInput: \"my-github-token.txt\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretVersion(ctx, \"github-token-secret-version\", \u0026secretmanager.SecretVersionArgs{\n\t\t\tSecret:     github_token_secret.ID(),\n\t\t\tSecretData: pulumi.String(invokeFile.Result),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tp4sa_secretAccessor, err := organizations.LookupIAMPolicy(ctx, \u0026organizations.LookupIAMPolicyArgs{\n\t\t\tBindings: []organizations.GetIAMPolicyBinding{\n\t\t\t\t{\n\t\t\t\t\tRole: \"roles/secretmanager.secretAccessor\",\n\t\t\t\t\tMembers: []string{\n\t\t\t\t\t\t\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretIamPolicy(ctx, \"policy\", \u0026secretmanager.SecretIamPolicyArgs{\n\t\t\tSecretId:   github_token_secret.SecretId,\n\t\t\tPolicyData: pulumi.String(p4sa_secretAccessor.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudbuildv2.NewConnection(ctx, \"my-connection\", \u0026cloudbuildv2.ConnectionArgs{\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t\tName:     pulumi.String(\"my-connection\"),\n\t\t\tGithubConfig: \u0026cloudbuildv2.ConnectionGithubConfigArgs{\n\t\t\t\tAppInstallationId: pulumi.Int(123123),\n\t\t\t\tAuthorizerCredential: \u0026cloudbuildv2.ConnectionGithubConfigAuthorizerCredentialArgs{\n\t\t\t\t\tOauthTokenSecretVersion: github_token_secret_version.ID(),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudbuildv2.NewRepository(ctx, \"my-repository\", \u0026cloudbuildv2.RepositoryArgs{\n\t\t\tLocation:         pulumi.String(\"us-central1\"),\n\t\t\tName:             pulumi.String(\"my-repo\"),\n\t\t\tParentConnection: my_connection.Name,\n\t\t\tRemoteUri:        pulumi.String(\"https://github.com/myuser/myrepo.git\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.secretmanager.Secret;\nimport com.pulumi.gcp.secretmanager.SecretArgs;\nimport com.pulumi.gcp.secretmanager.inputs.SecretReplicationArgs;\nimport com.pulumi.gcp.secretmanager.inputs.SecretReplicationAutoArgs;\nimport com.pulumi.gcp.secretmanager.SecretVersion;\nimport com.pulumi.gcp.secretmanager.SecretVersionArgs;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.secretmanager.SecretIamPolicy;\nimport com.pulumi.gcp.secretmanager.SecretIamPolicyArgs;\nimport com.pulumi.gcp.cloudbuildv2.Connection;\nimport com.pulumi.gcp.cloudbuildv2.ConnectionArgs;\nimport com.pulumi.gcp.cloudbuildv2.inputs.ConnectionGithubConfigArgs;\nimport com.pulumi.gcp.cloudbuildv2.inputs.ConnectionGithubConfigAuthorizerCredentialArgs;\nimport com.pulumi.gcp.cloudbuildv2.Repository;\nimport com.pulumi.gcp.cloudbuildv2.RepositoryArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var github_token_secret = new Secret(\"github-token-secret\", SecretArgs.builder()\n            .secretId(\"github-token-secret\")\n            .replication(SecretReplicationArgs.builder()\n                .auto()\n                .build())\n            .build());\n\n        var github_token_secret_version = new SecretVersion(\"github-token-secret-version\", SecretVersionArgs.builder()\n            .secret(github_token_secret.id())\n            .secretData(StdFunctions.file(FileArgs.builder()\n                .input(\"my-github-token.txt\")\n                .build()).result())\n            .build());\n\n        final var p4sa-secretAccessor = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/secretmanager.secretAccessor\")\n                .members(\"serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\")\n                .build())\n            .build());\n\n        var policy = new SecretIamPolicy(\"policy\", SecretIamPolicyArgs.builder()\n            .secretId(github_token_secret.secretId())\n            .policyData(p4sa_secretAccessor.policyData())\n            .build());\n\n        var my_connection = new Connection(\"my-connection\", ConnectionArgs.builder()\n            .location(\"us-central1\")\n            .name(\"my-connection\")\n            .githubConfig(ConnectionGithubConfigArgs.builder()\n                .appInstallationId(123123)\n                .authorizerCredential(ConnectionGithubConfigAuthorizerCredentialArgs.builder()\n                    .oauthTokenSecretVersion(github_token_secret_version.id())\n                    .build())\n                .build())\n            .build());\n\n        var my_repository = new Repository(\"my-repository\", RepositoryArgs.builder()\n            .location(\"us-central1\")\n            .name(\"my-repo\")\n            .parentConnection(my_connection.name())\n            .remoteUri(\"https://github.com/myuser/myrepo.git\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  github-token-secret:\n    type: gcp:secretmanager:Secret\n    properties:\n      secretId: github-token-secret\n      replication:\n        auto: {}\n  github-token-secret-version:\n    type: gcp:secretmanager:SecretVersion\n    properties:\n      secret: ${[\"github-token-secret\"].id}\n      secretData:\n        fn::invoke:\n          function: std:file\n          arguments:\n            input: my-github-token.txt\n          return: result\n  policy:\n    type: gcp:secretmanager:SecretIamPolicy\n    properties:\n      secretId: ${[\"github-token-secret\"].secretId}\n      policyData: ${[\"p4sa-secretAccessor\"].policyData}\n  my-connection:\n    type: gcp:cloudbuildv2:Connection\n    properties:\n      location: us-central1\n      name: my-connection\n      githubConfig:\n        appInstallationId: 123123\n        authorizerCredential:\n          oauthTokenSecretVersion: ${[\"github-token-secret-version\"].id}\n  my-repository:\n    type: gcp:cloudbuildv2:Repository\n    properties:\n      location: us-central1\n      name: my-repo\n      parentConnection: ${[\"my-connection\"].name}\n      remoteUri: https://github.com/myuser/myrepo.git\nvariables:\n  p4sa-secretAccessor:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/secretmanager.secretAccessor\n            members:\n              - serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nRepository can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{location}}/connections/{{parent_connection}}/repositories/{{name}}`\n\n* `{{project}}/{{location}}/{{parent_connection}}/{{name}}`\n\n* `{{location}}/{{parent_connection}}/{{name}}`\n\nWhen using the `pulumi import` command, Repository can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:cloudbuildv2/repository:Repository default projects/{{project}}/locations/{{location}}/connections/{{parent_connection}}/repositories/{{name}}\n```\n\n```sh\n$ pulumi import gcp:cloudbuildv2/repository:Repository default {{project}}/{{location}}/{{parent_connection}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:cloudbuildv2/repository:Repository default {{location}}/{{parent_connection}}/{{name}}\n```\n\n",
             "properties": {
                 "annotations": {
                     "type": "object",
@@ -161358,7 +161358,7 @@
             }
         },
         "gcp:cloudscheduler/job:Job": {
-            "description": "A scheduled job that can publish a PubSub message or an HTTP request\nevery X interval of time, using a crontab format string.\n\n\nTo get more information about Job, see:\n\n* [API documentation](https://cloud.google.com/scheduler/docs/reference/rest/)\n* How-to Guides\n    * [Official Documentation](https://cloud.google.com/scheduler/)\n\n## Example Usage\n\n### Scheduler Job Pubsub\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst topic = new gcp.pubsub.Topic(\"topic\", {name: \"job-topic\"});\nconst job = new gcp.cloudscheduler.Job(\"job\", {\n    name: \"test-job\",\n    description: \"test job\",\n    schedule: \"*/2 * * * *\",\n    pubsubTarget: {\n        topicName: topic.id,\n        data: std.base64encode({\n            input: \"test\",\n        }).then(invoke =\u003e invoke.result),\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\ntopic = gcp.pubsub.Topic(\"topic\", name=\"job-topic\")\njob = gcp.cloudscheduler.Job(\"job\",\n    name=\"test-job\",\n    description=\"test job\",\n    schedule=\"*/2 * * * *\",\n    pubsub_target={\n        \"topic_name\": topic.id,\n        \"data\": std.base64encode(input=\"test\").result,\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var topic = new Gcp.PubSub.Topic(\"topic\", new()\n    {\n        Name = \"job-topic\",\n    });\n\n    var job = new Gcp.CloudScheduler.Job(\"job\", new()\n    {\n        Name = \"test-job\",\n        Description = \"test job\",\n        Schedule = \"*/2 * * * *\",\n        PubsubTarget = new Gcp.CloudScheduler.Inputs.JobPubsubTargetArgs\n        {\n            TopicName = topic.Id,\n            Data = Std.Base64encode.Invoke(new()\n            {\n                Input = \"test\",\n            }).Apply(invoke =\u003e invoke.Result),\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudscheduler\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/pubsub\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\ttopic, err := pubsub.NewTopic(ctx, \"topic\", \u0026pubsub.TopicArgs{\n\t\t\tName: pulumi.String(\"job-topic\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tinvokeBase64encode, err := std.Base64encode(ctx, \u0026std.Base64encodeArgs{\n\t\t\tInput: \"test\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudscheduler.NewJob(ctx, \"job\", \u0026cloudscheduler.JobArgs{\n\t\t\tName:        pulumi.String(\"test-job\"),\n\t\t\tDescription: pulumi.String(\"test job\"),\n\t\t\tSchedule:    pulumi.String(\"*/2 * * * *\"),\n\t\t\tPubsubTarget: \u0026cloudscheduler.JobPubsubTargetArgs{\n\t\t\t\tTopicName: topic.ID(),\n\t\t\t\tData:      pulumi.String(invokeBase64encode.Result),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.pubsub.Topic;\nimport com.pulumi.gcp.pubsub.TopicArgs;\nimport com.pulumi.gcp.cloudscheduler.Job;\nimport com.pulumi.gcp.cloudscheduler.JobArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobPubsubTargetArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var topic = new Topic(\"topic\", TopicArgs.builder()\n            .name(\"job-topic\")\n            .build());\n\n        var job = new Job(\"job\", JobArgs.builder()\n            .name(\"test-job\")\n            .description(\"test job\")\n            .schedule(\"*/2 * * * *\")\n            .pubsubTarget(JobPubsubTargetArgs.builder()\n                .topicName(topic.id())\n                .data(StdFunctions.base64encode(Base64encodeArgs.builder()\n                    .input(\"test\")\n                    .build()).result())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  topic:\n    type: gcp:pubsub:Topic\n    properties:\n      name: job-topic\n  job:\n    type: gcp:cloudscheduler:Job\n    properties:\n      name: test-job\n      description: test job\n      schedule: '*/2 * * * *'\n      pubsubTarget:\n        topicName: ${topic.id}\n        data:\n          fn::invoke:\n            function: std:base64encode\n            arguments:\n              input: test\n            return: result\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Scheduler Job Http\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst job = new gcp.cloudscheduler.Job(\"job\", {\n    name: \"test-job\",\n    description: \"test http job\",\n    schedule: \"*/8 * * * *\",\n    timeZone: \"America/New_York\",\n    attemptDeadline: \"320s\",\n    retryConfig: {\n        retryCount: 1,\n    },\n    httpTarget: {\n        httpMethod: \"POST\",\n        uri: \"https://example.com/\",\n        body: std.base64encode({\n            input: \"{\\\"foo\\\":\\\"bar\\\"}\",\n        }).then(invoke =\u003e invoke.result),\n        headers: {\n            \"Content-Type\": \"application/json\",\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\njob = gcp.cloudscheduler.Job(\"job\",\n    name=\"test-job\",\n    description=\"test http job\",\n    schedule=\"*/8 * * * *\",\n    time_zone=\"America/New_York\",\n    attempt_deadline=\"320s\",\n    retry_config={\n        \"retry_count\": 1,\n    },\n    http_target={\n        \"http_method\": \"POST\",\n        \"uri\": \"https://example.com/\",\n        \"body\": std.base64encode(input=\"{\\\"foo\\\":\\\"bar\\\"}\").result,\n        \"headers\": {\n            \"Content-Type\": \"application/json\",\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var job = new Gcp.CloudScheduler.Job(\"job\", new()\n    {\n        Name = \"test-job\",\n        Description = \"test http job\",\n        Schedule = \"*/8 * * * *\",\n        TimeZone = \"America/New_York\",\n        AttemptDeadline = \"320s\",\n        RetryConfig = new Gcp.CloudScheduler.Inputs.JobRetryConfigArgs\n        {\n            RetryCount = 1,\n        },\n        HttpTarget = new Gcp.CloudScheduler.Inputs.JobHttpTargetArgs\n        {\n            HttpMethod = \"POST\",\n            Uri = \"https://example.com/\",\n            Body = Std.Base64encode.Invoke(new()\n            {\n                Input = \"{\\\"foo\\\":\\\"bar\\\"}\",\n            }).Apply(invoke =\u003e invoke.Result),\n            Headers = \n            {\n                { \"Content-Type\", \"application/json\" },\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudscheduler\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tinvokeBase64encode, err := std.Base64encode(ctx, \u0026std.Base64encodeArgs{\n\t\t\tInput: \"{\\\"foo\\\":\\\"bar\\\"}\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudscheduler.NewJob(ctx, \"job\", \u0026cloudscheduler.JobArgs{\n\t\t\tName:            pulumi.String(\"test-job\"),\n\t\t\tDescription:     pulumi.String(\"test http job\"),\n\t\t\tSchedule:        pulumi.String(\"*/8 * * * *\"),\n\t\t\tTimeZone:        pulumi.String(\"America/New_York\"),\n\t\t\tAttemptDeadline: pulumi.String(\"320s\"),\n\t\t\tRetryConfig: \u0026cloudscheduler.JobRetryConfigArgs{\n\t\t\t\tRetryCount: pulumi.Int(1),\n\t\t\t},\n\t\t\tHttpTarget: \u0026cloudscheduler.JobHttpTargetArgs{\n\t\t\t\tHttpMethod: pulumi.String(\"POST\"),\n\t\t\t\tUri:        pulumi.String(\"https://example.com/\"),\n\t\t\t\tBody:       pulumi.String(invokeBase64encode.Result),\n\t\t\t\tHeaders: pulumi.StringMap{\n\t\t\t\t\t\"Content-Type\": pulumi.String(\"application/json\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.cloudscheduler.Job;\nimport com.pulumi.gcp.cloudscheduler.JobArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobRetryConfigArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobHttpTargetArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var job = new Job(\"job\", JobArgs.builder()\n            .name(\"test-job\")\n            .description(\"test http job\")\n            .schedule(\"*/8 * * * *\")\n            .timeZone(\"America/New_York\")\n            .attemptDeadline(\"320s\")\n            .retryConfig(JobRetryConfigArgs.builder()\n                .retryCount(1)\n                .build())\n            .httpTarget(JobHttpTargetArgs.builder()\n                .httpMethod(\"POST\")\n                .uri(\"https://example.com/\")\n                .body(StdFunctions.base64encode(Base64encodeArgs.builder()\n                    .input(\"{\\\"foo\\\":\\\"bar\\\"}\")\n                    .build()).result())\n                .headers(Map.of(\"Content-Type\", \"application/json\"))\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  job:\n    type: gcp:cloudscheduler:Job\n    properties:\n      name: test-job\n      description: test http job\n      schedule: '*/8 * * * *'\n      timeZone: America/New_York\n      attemptDeadline: 320s\n      retryConfig:\n        retryCount: 1\n      httpTarget:\n        httpMethod: POST\n        uri: https://example.com/\n        body:\n          fn::invoke:\n            function: std:base64encode\n            arguments:\n              input: '{\"foo\":\"bar\"}'\n            return: result\n        headers:\n          Content-Type: application/json\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Scheduler Job Paused\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst job = new gcp.cloudscheduler.Job(\"job\", {\n    paused: true,\n    name: \"test-job\",\n    description: \"test http job with updated fields\",\n    schedule: \"*/8 * * * *\",\n    timeZone: \"America/New_York\",\n    attemptDeadline: \"320s\",\n    retryConfig: {\n        retryCount: 1,\n    },\n    httpTarget: {\n        httpMethod: \"POST\",\n        uri: \"https://example.com/ping\",\n        body: std.base64encode({\n            input: \"{\\\"foo\\\":\\\"bar\\\"}\",\n        }).then(invoke =\u003e invoke.result),\n        headers: {\n            \"Content-Type\": \"application/json\",\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\njob = gcp.cloudscheduler.Job(\"job\",\n    paused=True,\n    name=\"test-job\",\n    description=\"test http job with updated fields\",\n    schedule=\"*/8 * * * *\",\n    time_zone=\"America/New_York\",\n    attempt_deadline=\"320s\",\n    retry_config={\n        \"retry_count\": 1,\n    },\n    http_target={\n        \"http_method\": \"POST\",\n        \"uri\": \"https://example.com/ping\",\n        \"body\": std.base64encode(input=\"{\\\"foo\\\":\\\"bar\\\"}\").result,\n        \"headers\": {\n            \"Content-Type\": \"application/json\",\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var job = new Gcp.CloudScheduler.Job(\"job\", new()\n    {\n        Paused = true,\n        Name = \"test-job\",\n        Description = \"test http job with updated fields\",\n        Schedule = \"*/8 * * * *\",\n        TimeZone = \"America/New_York\",\n        AttemptDeadline = \"320s\",\n        RetryConfig = new Gcp.CloudScheduler.Inputs.JobRetryConfigArgs\n        {\n            RetryCount = 1,\n        },\n        HttpTarget = new Gcp.CloudScheduler.Inputs.JobHttpTargetArgs\n        {\n            HttpMethod = \"POST\",\n            Uri = \"https://example.com/ping\",\n            Body = Std.Base64encode.Invoke(new()\n            {\n                Input = \"{\\\"foo\\\":\\\"bar\\\"}\",\n            }).Apply(invoke =\u003e invoke.Result),\n            Headers = \n            {\n                { \"Content-Type\", \"application/json\" },\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudscheduler\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tinvokeBase64encode, err := std.Base64encode(ctx, \u0026std.Base64encodeArgs{\n\t\t\tInput: \"{\\\"foo\\\":\\\"bar\\\"}\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudscheduler.NewJob(ctx, \"job\", \u0026cloudscheduler.JobArgs{\n\t\t\tPaused:          pulumi.Bool(true),\n\t\t\tName:            pulumi.String(\"test-job\"),\n\t\t\tDescription:     pulumi.String(\"test http job with updated fields\"),\n\t\t\tSchedule:        pulumi.String(\"*/8 * * * *\"),\n\t\t\tTimeZone:        pulumi.String(\"America/New_York\"),\n\t\t\tAttemptDeadline: pulumi.String(\"320s\"),\n\t\t\tRetryConfig: \u0026cloudscheduler.JobRetryConfigArgs{\n\t\t\t\tRetryCount: pulumi.Int(1),\n\t\t\t},\n\t\t\tHttpTarget: \u0026cloudscheduler.JobHttpTargetArgs{\n\t\t\t\tHttpMethod: pulumi.String(\"POST\"),\n\t\t\t\tUri:        pulumi.String(\"https://example.com/ping\"),\n\t\t\t\tBody:       pulumi.String(invokeBase64encode.Result),\n\t\t\t\tHeaders: pulumi.StringMap{\n\t\t\t\t\t\"Content-Type\": pulumi.String(\"application/json\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.cloudscheduler.Job;\nimport com.pulumi.gcp.cloudscheduler.JobArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobRetryConfigArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobHttpTargetArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var job = new Job(\"job\", JobArgs.builder()\n            .paused(true)\n            .name(\"test-job\")\n            .description(\"test http job with updated fields\")\n            .schedule(\"*/8 * * * *\")\n            .timeZone(\"America/New_York\")\n            .attemptDeadline(\"320s\")\n            .retryConfig(JobRetryConfigArgs.builder()\n                .retryCount(1)\n                .build())\n            .httpTarget(JobHttpTargetArgs.builder()\n                .httpMethod(\"POST\")\n                .uri(\"https://example.com/ping\")\n                .body(StdFunctions.base64encode(Base64encodeArgs.builder()\n                    .input(\"{\\\"foo\\\":\\\"bar\\\"}\")\n                    .build()).result())\n                .headers(Map.of(\"Content-Type\", \"application/json\"))\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  job:\n    type: gcp:cloudscheduler:Job\n    properties:\n      paused: true\n      name: test-job\n      description: test http job with updated fields\n      schedule: '*/8 * * * *'\n      timeZone: America/New_York\n      attemptDeadline: 320s\n      retryConfig:\n        retryCount: 1\n      httpTarget:\n        httpMethod: POST\n        uri: https://example.com/ping\n        body:\n          fn::invoke:\n            function: std:base64encode\n            arguments:\n              input: '{\"foo\":\"bar\"}'\n            return: result\n        headers:\n          Content-Type: application/json\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Scheduler Job App Engine\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst job = new gcp.cloudscheduler.Job(\"job\", {\n    name: \"test-job\",\n    schedule: \"*/4 * * * *\",\n    description: \"test app engine job\",\n    timeZone: \"Europe/London\",\n    attemptDeadline: \"320s\",\n    retryConfig: {\n        minBackoffDuration: \"1s\",\n        maxRetryDuration: \"10s\",\n        maxDoublings: 2,\n        retryCount: 3,\n    },\n    appEngineHttpTarget: {\n        httpMethod: \"POST\",\n        appEngineRouting: {\n            service: \"web\",\n            version: \"prod\",\n            instance: \"my-instance-001\",\n        },\n        relativeUri: \"/ping\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\njob = gcp.cloudscheduler.Job(\"job\",\n    name=\"test-job\",\n    schedule=\"*/4 * * * *\",\n    description=\"test app engine job\",\n    time_zone=\"Europe/London\",\n    attempt_deadline=\"320s\",\n    retry_config={\n        \"min_backoff_duration\": \"1s\",\n        \"max_retry_duration\": \"10s\",\n        \"max_doublings\": 2,\n        \"retry_count\": 3,\n    },\n    app_engine_http_target={\n        \"http_method\": \"POST\",\n        \"app_engine_routing\": {\n            \"service\": \"web\",\n            \"version\": \"prod\",\n            \"instance\": \"my-instance-001\",\n        },\n        \"relative_uri\": \"/ping\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var job = new Gcp.CloudScheduler.Job(\"job\", new()\n    {\n        Name = \"test-job\",\n        Schedule = \"*/4 * * * *\",\n        Description = \"test app engine job\",\n        TimeZone = \"Europe/London\",\n        AttemptDeadline = \"320s\",\n        RetryConfig = new Gcp.CloudScheduler.Inputs.JobRetryConfigArgs\n        {\n            MinBackoffDuration = \"1s\",\n            MaxRetryDuration = \"10s\",\n            MaxDoublings = 2,\n            RetryCount = 3,\n        },\n        AppEngineHttpTarget = new Gcp.CloudScheduler.Inputs.JobAppEngineHttpTargetArgs\n        {\n            HttpMethod = \"POST\",\n            AppEngineRouting = new Gcp.CloudScheduler.Inputs.JobAppEngineHttpTargetAppEngineRoutingArgs\n            {\n                Service = \"web\",\n                Version = \"prod\",\n                Instance = \"my-instance-001\",\n            },\n            RelativeUri = \"/ping\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudscheduler\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudscheduler.NewJob(ctx, \"job\", \u0026cloudscheduler.JobArgs{\n\t\t\tName:            pulumi.String(\"test-job\"),\n\t\t\tSchedule:        pulumi.String(\"*/4 * * * *\"),\n\t\t\tDescription:     pulumi.String(\"test app engine job\"),\n\t\t\tTimeZone:        pulumi.String(\"Europe/London\"),\n\t\t\tAttemptDeadline: pulumi.String(\"320s\"),\n\t\t\tRetryConfig: \u0026cloudscheduler.JobRetryConfigArgs{\n\t\t\t\tMinBackoffDuration: pulumi.String(\"1s\"),\n\t\t\t\tMaxRetryDuration:   pulumi.String(\"10s\"),\n\t\t\t\tMaxDoublings:       pulumi.Int(2),\n\t\t\t\tRetryCount:         pulumi.Int(3),\n\t\t\t},\n\t\t\tAppEngineHttpTarget: \u0026cloudscheduler.JobAppEngineHttpTargetArgs{\n\t\t\t\tHttpMethod: pulumi.String(\"POST\"),\n\t\t\t\tAppEngineRouting: \u0026cloudscheduler.JobAppEngineHttpTargetAppEngineRoutingArgs{\n\t\t\t\t\tService:  pulumi.String(\"web\"),\n\t\t\t\t\tVersion:  pulumi.String(\"prod\"),\n\t\t\t\t\tInstance: pulumi.String(\"my-instance-001\"),\n\t\t\t\t},\n\t\t\t\tRelativeUri: pulumi.String(\"/ping\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.cloudscheduler.Job;\nimport com.pulumi.gcp.cloudscheduler.JobArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobRetryConfigArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobAppEngineHttpTargetArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobAppEngineHttpTargetAppEngineRoutingArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var job = new Job(\"job\", JobArgs.builder()\n            .name(\"test-job\")\n            .schedule(\"*/4 * * * *\")\n            .description(\"test app engine job\")\n            .timeZone(\"Europe/London\")\n            .attemptDeadline(\"320s\")\n            .retryConfig(JobRetryConfigArgs.builder()\n                .minBackoffDuration(\"1s\")\n                .maxRetryDuration(\"10s\")\n                .maxDoublings(2)\n                .retryCount(3)\n                .build())\n            .appEngineHttpTarget(JobAppEngineHttpTargetArgs.builder()\n                .httpMethod(\"POST\")\n                .appEngineRouting(JobAppEngineHttpTargetAppEngineRoutingArgs.builder()\n                    .service(\"web\")\n                    .version(\"prod\")\n                    .instance(\"my-instance-001\")\n                    .build())\n                .relativeUri(\"/ping\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  job:\n    type: gcp:cloudscheduler:Job\n    properties:\n      name: test-job\n      schedule: '*/4 * * * *'\n      description: test app engine job\n      timeZone: Europe/London\n      attemptDeadline: 320s\n      retryConfig:\n        minBackoffDuration: 1s\n        maxRetryDuration: 10s\n        maxDoublings: 2\n        retryCount: 3\n      appEngineHttpTarget:\n        httpMethod: POST\n        appEngineRouting:\n          service: web\n          version: prod\n          instance: my-instance-001\n        relativeUri: /ping\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Scheduler Job Oauth\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.compute.getDefaultServiceAccount({});\nconst job = new gcp.cloudscheduler.Job(\"job\", {\n    name: \"test-job\",\n    description: \"test http job\",\n    schedule: \"*/8 * * * *\",\n    timeZone: \"America/New_York\",\n    attemptDeadline: \"320s\",\n    httpTarget: {\n        httpMethod: \"GET\",\n        uri: \"https://cloudscheduler.googleapis.com/v1/projects/my-project-name/locations/us-west1/jobs\",\n        oauthToken: {\n            serviceAccountEmail: _default.then(_default =\u003e _default.email),\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_default_service_account()\njob = gcp.cloudscheduler.Job(\"job\",\n    name=\"test-job\",\n    description=\"test http job\",\n    schedule=\"*/8 * * * *\",\n    time_zone=\"America/New_York\",\n    attempt_deadline=\"320s\",\n    http_target={\n        \"http_method\": \"GET\",\n        \"uri\": \"https://cloudscheduler.googleapis.com/v1/projects/my-project-name/locations/us-west1/jobs\",\n        \"oauth_token\": {\n            \"service_account_email\": default.email,\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetDefaultServiceAccount.Invoke();\n\n    var job = new Gcp.CloudScheduler.Job(\"job\", new()\n    {\n        Name = \"test-job\",\n        Description = \"test http job\",\n        Schedule = \"*/8 * * * *\",\n        TimeZone = \"America/New_York\",\n        AttemptDeadline = \"320s\",\n        HttpTarget = new Gcp.CloudScheduler.Inputs.JobHttpTargetArgs\n        {\n            HttpMethod = \"GET\",\n            Uri = \"https://cloudscheduler.googleapis.com/v1/projects/my-project-name/locations/us-west1/jobs\",\n            OauthToken = new Gcp.CloudScheduler.Inputs.JobHttpTargetOauthTokenArgs\n            {\n                ServiceAccountEmail = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Email)),\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudscheduler\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.GetDefaultServiceAccount(ctx, \u0026compute.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudscheduler.NewJob(ctx, \"job\", \u0026cloudscheduler.JobArgs{\n\t\t\tName:            pulumi.String(\"test-job\"),\n\t\t\tDescription:     pulumi.String(\"test http job\"),\n\t\t\tSchedule:        pulumi.String(\"*/8 * * * *\"),\n\t\t\tTimeZone:        pulumi.String(\"America/New_York\"),\n\t\t\tAttemptDeadline: pulumi.String(\"320s\"),\n\t\t\tHttpTarget: \u0026cloudscheduler.JobHttpTargetArgs{\n\t\t\t\tHttpMethod: pulumi.String(\"GET\"),\n\t\t\t\tUri:        pulumi.String(\"https://cloudscheduler.googleapis.com/v1/projects/my-project-name/locations/us-west1/jobs\"),\n\t\t\t\tOauthToken: \u0026cloudscheduler.JobHttpTargetOauthTokenArgs{\n\t\t\t\t\tServiceAccountEmail: pulumi.String(_default.Email),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.cloudscheduler.Job;\nimport com.pulumi.gcp.cloudscheduler.JobArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobHttpTargetArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobHttpTargetOauthTokenArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getDefaultServiceAccount();\n\n        var job = new Job(\"job\", JobArgs.builder()\n            .name(\"test-job\")\n            .description(\"test http job\")\n            .schedule(\"*/8 * * * *\")\n            .timeZone(\"America/New_York\")\n            .attemptDeadline(\"320s\")\n            .httpTarget(JobHttpTargetArgs.builder()\n                .httpMethod(\"GET\")\n                .uri(\"https://cloudscheduler.googleapis.com/v1/projects/my-project-name/locations/us-west1/jobs\")\n                .oauthToken(JobHttpTargetOauthTokenArgs.builder()\n                    .serviceAccountEmail(default_.email())\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  job:\n    type: gcp:cloudscheduler:Job\n    properties:\n      name: test-job\n      description: test http job\n      schedule: '*/8 * * * *'\n      timeZone: America/New_York\n      attemptDeadline: 320s\n      httpTarget:\n        httpMethod: GET\n        uri: https://cloudscheduler.googleapis.com/v1/projects/my-project-name/locations/us-west1/jobs\n        oauthToken:\n          serviceAccountEmail: ${default.email}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Scheduler Job Oidc\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.compute.getDefaultServiceAccount({});\nconst job = new gcp.cloudscheduler.Job(\"job\", {\n    name: \"test-job\",\n    description: \"test http job\",\n    schedule: \"*/8 * * * *\",\n    timeZone: \"America/New_York\",\n    attemptDeadline: \"320s\",\n    httpTarget: {\n        httpMethod: \"GET\",\n        uri: \"https://example.com/ping\",\n        oidcToken: {\n            serviceAccountEmail: _default.then(_default =\u003e _default.email),\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_default_service_account()\njob = gcp.cloudscheduler.Job(\"job\",\n    name=\"test-job\",\n    description=\"test http job\",\n    schedule=\"*/8 * * * *\",\n    time_zone=\"America/New_York\",\n    attempt_deadline=\"320s\",\n    http_target={\n        \"http_method\": \"GET\",\n        \"uri\": \"https://example.com/ping\",\n        \"oidc_token\": {\n            \"service_account_email\": default.email,\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetDefaultServiceAccount.Invoke();\n\n    var job = new Gcp.CloudScheduler.Job(\"job\", new()\n    {\n        Name = \"test-job\",\n        Description = \"test http job\",\n        Schedule = \"*/8 * * * *\",\n        TimeZone = \"America/New_York\",\n        AttemptDeadline = \"320s\",\n        HttpTarget = new Gcp.CloudScheduler.Inputs.JobHttpTargetArgs\n        {\n            HttpMethod = \"GET\",\n            Uri = \"https://example.com/ping\",\n            OidcToken = new Gcp.CloudScheduler.Inputs.JobHttpTargetOidcTokenArgs\n            {\n                ServiceAccountEmail = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Email)),\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudscheduler\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.GetDefaultServiceAccount(ctx, \u0026compute.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudscheduler.NewJob(ctx, \"job\", \u0026cloudscheduler.JobArgs{\n\t\t\tName:            pulumi.String(\"test-job\"),\n\t\t\tDescription:     pulumi.String(\"test http job\"),\n\t\t\tSchedule:        pulumi.String(\"*/8 * * * *\"),\n\t\t\tTimeZone:        pulumi.String(\"America/New_York\"),\n\t\t\tAttemptDeadline: pulumi.String(\"320s\"),\n\t\t\tHttpTarget: \u0026cloudscheduler.JobHttpTargetArgs{\n\t\t\t\tHttpMethod: pulumi.String(\"GET\"),\n\t\t\t\tUri:        pulumi.String(\"https://example.com/ping\"),\n\t\t\t\tOidcToken: \u0026cloudscheduler.JobHttpTargetOidcTokenArgs{\n\t\t\t\t\tServiceAccountEmail: pulumi.String(_default.Email),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.cloudscheduler.Job;\nimport com.pulumi.gcp.cloudscheduler.JobArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobHttpTargetArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobHttpTargetOidcTokenArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getDefaultServiceAccount();\n\n        var job = new Job(\"job\", JobArgs.builder()\n            .name(\"test-job\")\n            .description(\"test http job\")\n            .schedule(\"*/8 * * * *\")\n            .timeZone(\"America/New_York\")\n            .attemptDeadline(\"320s\")\n            .httpTarget(JobHttpTargetArgs.builder()\n                .httpMethod(\"GET\")\n                .uri(\"https://example.com/ping\")\n                .oidcToken(JobHttpTargetOidcTokenArgs.builder()\n                    .serviceAccountEmail(default_.email())\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  job:\n    type: gcp:cloudscheduler:Job\n    properties:\n      name: test-job\n      description: test http job\n      schedule: '*/8 * * * *'\n      timeZone: America/New_York\n      attemptDeadline: 320s\n      httpTarget:\n        httpMethod: GET\n        uri: https://example.com/ping\n        oidcToken:\n          serviceAccountEmail: ${default.email}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nJob can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{region}}/jobs/{{name}}`\n\n* `{{project}}/{{region}}/{{name}}`\n\n* `{{region}}/{{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, Job can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:cloudscheduler/job:Job default projects/{{project}}/locations/{{region}}/jobs/{{name}}\n```\n\n```sh\n$ pulumi import gcp:cloudscheduler/job:Job default {{project}}/{{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:cloudscheduler/job:Job default {{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:cloudscheduler/job:Job default {{name}}\n```\n\n",
+            "description": "A scheduled job that can publish a PubSub message or an HTTP request\nevery X interval of time, using a crontab format string.\n\n\nTo get more information about Job, see:\n\n* [API documentation](https://cloud.google.com/scheduler/docs/reference/rest/)\n* How-to Guides\n    * [Official Documentation](https://cloud.google.com/scheduler/)\n\n## Example Usage\n\n### Scheduler Job Pubsub\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst topic = new gcp.pubsub.Topic(\"topic\", {name: \"job-topic\"});\nconst job = new gcp.cloudscheduler.Job(\"job\", {\n    name: \"test-job\",\n    description: \"test job\",\n    schedule: \"*/2 * * * *\",\n    pubsubTarget: {\n        topicName: topic.id,\n        data: std.base64encode({\n            input: \"test\",\n        }).then(invoke =\u003e invoke.result),\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\ntopic = gcp.pubsub.Topic(\"topic\", name=\"job-topic\")\njob = gcp.cloudscheduler.Job(\"job\",\n    name=\"test-job\",\n    description=\"test job\",\n    schedule=\"*/2 * * * *\",\n    pubsub_target={\n        \"topic_name\": topic.id,\n        \"data\": std.base64encode(input=\"test\").result,\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var topic = new Gcp.PubSub.Topic(\"topic\", new()\n    {\n        Name = \"job-topic\",\n    });\n\n    var job = new Gcp.CloudScheduler.Job(\"job\", new()\n    {\n        Name = \"test-job\",\n        Description = \"test job\",\n        Schedule = \"*/2 * * * *\",\n        PubsubTarget = new Gcp.CloudScheduler.Inputs.JobPubsubTargetArgs\n        {\n            TopicName = topic.Id,\n            Data = Std.Base64encode.Invoke(new()\n            {\n                Input = \"test\",\n            }).Apply(invoke =\u003e invoke.Result),\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudscheduler\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/pubsub\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\ttopic, err := pubsub.NewTopic(ctx, \"topic\", \u0026pubsub.TopicArgs{\n\t\t\tName: pulumi.String(\"job-topic\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tinvokeBase64encode, err := std.Base64encode(ctx, \u0026std.Base64encodeArgs{\n\t\t\tInput: \"test\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudscheduler.NewJob(ctx, \"job\", \u0026cloudscheduler.JobArgs{\n\t\t\tName:        pulumi.String(\"test-job\"),\n\t\t\tDescription: pulumi.String(\"test job\"),\n\t\t\tSchedule:    pulumi.String(\"*/2 * * * *\"),\n\t\t\tPubsubTarget: \u0026cloudscheduler.JobPubsubTargetArgs{\n\t\t\t\tTopicName: topic.ID(),\n\t\t\t\tData:      pulumi.String(invokeBase64encode.Result),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.pubsub.Topic;\nimport com.pulumi.gcp.pubsub.TopicArgs;\nimport com.pulumi.gcp.cloudscheduler.Job;\nimport com.pulumi.gcp.cloudscheduler.JobArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobPubsubTargetArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var topic = new Topic(\"topic\", TopicArgs.builder()\n            .name(\"job-topic\")\n            .build());\n\n        var job = new Job(\"job\", JobArgs.builder()\n            .name(\"test-job\")\n            .description(\"test job\")\n            .schedule(\"*/2 * * * *\")\n            .pubsubTarget(JobPubsubTargetArgs.builder()\n                .topicName(topic.id())\n                .data(StdFunctions.base64encode(Base64encodeArgs.builder()\n                    .input(\"test\")\n                    .build()).result())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  topic:\n    type: gcp:pubsub:Topic\n    properties:\n      name: job-topic\n  job:\n    type: gcp:cloudscheduler:Job\n    properties:\n      name: test-job\n      description: test job\n      schedule: '*/2 * * * *'\n      pubsubTarget:\n        topicName: ${topic.id}\n        data:\n          fn::invoke:\n            function: std:base64encode\n            arguments:\n              input: test\n            return: result\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Scheduler Job Http\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst job = new gcp.cloudscheduler.Job(\"job\", {\n    name: \"test-job\",\n    description: \"test http job\",\n    schedule: \"*/8 * * * *\",\n    timeZone: \"America/New_York\",\n    attemptDeadline: \"320s\",\n    retryConfig: {\n        retryCount: 1,\n    },\n    httpTarget: {\n        httpMethod: \"POST\",\n        uri: \"https://example.com/\",\n        body: std.base64encode({\n            input: \"{\\\"foo\\\":\\\"bar\\\"}\",\n        }).then(invoke =\u003e invoke.result),\n        headers: {\n            \"Content-Type\": \"application/json\",\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\njob = gcp.cloudscheduler.Job(\"job\",\n    name=\"test-job\",\n    description=\"test http job\",\n    schedule=\"*/8 * * * *\",\n    time_zone=\"America/New_York\",\n    attempt_deadline=\"320s\",\n    retry_config={\n        \"retry_count\": 1,\n    },\n    http_target={\n        \"http_method\": \"POST\",\n        \"uri\": \"https://example.com/\",\n        \"body\": std.base64encode(input=\"{\\\"foo\\\":\\\"bar\\\"}\").result,\n        \"headers\": {\n            \"Content-Type\": \"application/json\",\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var job = new Gcp.CloudScheduler.Job(\"job\", new()\n    {\n        Name = \"test-job\",\n        Description = \"test http job\",\n        Schedule = \"*/8 * * * *\",\n        TimeZone = \"America/New_York\",\n        AttemptDeadline = \"320s\",\n        RetryConfig = new Gcp.CloudScheduler.Inputs.JobRetryConfigArgs\n        {\n            RetryCount = 1,\n        },\n        HttpTarget = new Gcp.CloudScheduler.Inputs.JobHttpTargetArgs\n        {\n            HttpMethod = \"POST\",\n            Uri = \"https://example.com/\",\n            Body = Std.Base64encode.Invoke(new()\n            {\n                Input = \"{\\\"foo\\\":\\\"bar\\\"}\",\n            }).Apply(invoke =\u003e invoke.Result),\n            Headers = \n            {\n                { \"Content-Type\", \"application/json\" },\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudscheduler\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tinvokeBase64encode, err := std.Base64encode(ctx, \u0026std.Base64encodeArgs{\n\t\t\tInput: \"{\\\"foo\\\":\\\"bar\\\"}\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudscheduler.NewJob(ctx, \"job\", \u0026cloudscheduler.JobArgs{\n\t\t\tName:            pulumi.String(\"test-job\"),\n\t\t\tDescription:     pulumi.String(\"test http job\"),\n\t\t\tSchedule:        pulumi.String(\"*/8 * * * *\"),\n\t\t\tTimeZone:        pulumi.String(\"America/New_York\"),\n\t\t\tAttemptDeadline: pulumi.String(\"320s\"),\n\t\t\tRetryConfig: \u0026cloudscheduler.JobRetryConfigArgs{\n\t\t\t\tRetryCount: pulumi.Int(1),\n\t\t\t},\n\t\t\tHttpTarget: \u0026cloudscheduler.JobHttpTargetArgs{\n\t\t\t\tHttpMethod: pulumi.String(\"POST\"),\n\t\t\t\tUri:        pulumi.String(\"https://example.com/\"),\n\t\t\t\tBody:       pulumi.String(invokeBase64encode.Result),\n\t\t\t\tHeaders: pulumi.StringMap{\n\t\t\t\t\t\"Content-Type\": pulumi.String(\"application/json\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.cloudscheduler.Job;\nimport com.pulumi.gcp.cloudscheduler.JobArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobRetryConfigArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobHttpTargetArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var job = new Job(\"job\", JobArgs.builder()\n            .name(\"test-job\")\n            .description(\"test http job\")\n            .schedule(\"*/8 * * * *\")\n            .timeZone(\"America/New_York\")\n            .attemptDeadline(\"320s\")\n            .retryConfig(JobRetryConfigArgs.builder()\n                .retryCount(1)\n                .build())\n            .httpTarget(JobHttpTargetArgs.builder()\n                .httpMethod(\"POST\")\n                .uri(\"https://example.com/\")\n                .body(StdFunctions.base64encode(Base64encodeArgs.builder()\n                    .input(\"{\\\"foo\\\":\\\"bar\\\"}\")\n                    .build()).result())\n                .headers(Map.of(\"Content-Type\", \"application/json\"))\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  job:\n    type: gcp:cloudscheduler:Job\n    properties:\n      name: test-job\n      description: test http job\n      schedule: '*/8 * * * *'\n      timeZone: America/New_York\n      attemptDeadline: 320s\n      retryConfig:\n        retryCount: 1\n      httpTarget:\n        httpMethod: POST\n        uri: https://example.com/\n        body:\n          fn::invoke:\n            function: std:base64encode\n            arguments:\n              input: '{\"foo\":\"bar\"}'\n            return: result\n        headers:\n          Content-Type: application/json\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Scheduler Job Paused\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst job = new gcp.cloudscheduler.Job(\"job\", {\n    paused: true,\n    name: \"test-job\",\n    description: \"test http job with updated fields\",\n    schedule: \"*/8 * * * *\",\n    timeZone: \"America/New_York\",\n    attemptDeadline: \"320s\",\n    retryConfig: {\n        retryCount: 1,\n    },\n    httpTarget: {\n        httpMethod: \"POST\",\n        uri: \"https://example.com/ping\",\n        body: std.base64encode({\n            input: \"{\\\"foo\\\":\\\"bar\\\"}\",\n        }).then(invoke =\u003e invoke.result),\n        headers: {\n            \"Content-Type\": \"application/json\",\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\njob = gcp.cloudscheduler.Job(\"job\",\n    paused=True,\n    name=\"test-job\",\n    description=\"test http job with updated fields\",\n    schedule=\"*/8 * * * *\",\n    time_zone=\"America/New_York\",\n    attempt_deadline=\"320s\",\n    retry_config={\n        \"retry_count\": 1,\n    },\n    http_target={\n        \"http_method\": \"POST\",\n        \"uri\": \"https://example.com/ping\",\n        \"body\": std.base64encode(input=\"{\\\"foo\\\":\\\"bar\\\"}\").result,\n        \"headers\": {\n            \"Content-Type\": \"application/json\",\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var job = new Gcp.CloudScheduler.Job(\"job\", new()\n    {\n        Paused = true,\n        Name = \"test-job\",\n        Description = \"test http job with updated fields\",\n        Schedule = \"*/8 * * * *\",\n        TimeZone = \"America/New_York\",\n        AttemptDeadline = \"320s\",\n        RetryConfig = new Gcp.CloudScheduler.Inputs.JobRetryConfigArgs\n        {\n            RetryCount = 1,\n        },\n        HttpTarget = new Gcp.CloudScheduler.Inputs.JobHttpTargetArgs\n        {\n            HttpMethod = \"POST\",\n            Uri = \"https://example.com/ping\",\n            Body = Std.Base64encode.Invoke(new()\n            {\n                Input = \"{\\\"foo\\\":\\\"bar\\\"}\",\n            }).Apply(invoke =\u003e invoke.Result),\n            Headers = \n            {\n                { \"Content-Type\", \"application/json\" },\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudscheduler\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tinvokeBase64encode, err := std.Base64encode(ctx, \u0026std.Base64encodeArgs{\n\t\t\tInput: \"{\\\"foo\\\":\\\"bar\\\"}\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudscheduler.NewJob(ctx, \"job\", \u0026cloudscheduler.JobArgs{\n\t\t\tPaused:          pulumi.Bool(true),\n\t\t\tName:            pulumi.String(\"test-job\"),\n\t\t\tDescription:     pulumi.String(\"test http job with updated fields\"),\n\t\t\tSchedule:        pulumi.String(\"*/8 * * * *\"),\n\t\t\tTimeZone:        pulumi.String(\"America/New_York\"),\n\t\t\tAttemptDeadline: pulumi.String(\"320s\"),\n\t\t\tRetryConfig: \u0026cloudscheduler.JobRetryConfigArgs{\n\t\t\t\tRetryCount: pulumi.Int(1),\n\t\t\t},\n\t\t\tHttpTarget: \u0026cloudscheduler.JobHttpTargetArgs{\n\t\t\t\tHttpMethod: pulumi.String(\"POST\"),\n\t\t\t\tUri:        pulumi.String(\"https://example.com/ping\"),\n\t\t\t\tBody:       pulumi.String(invokeBase64encode.Result),\n\t\t\t\tHeaders: pulumi.StringMap{\n\t\t\t\t\t\"Content-Type\": pulumi.String(\"application/json\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.cloudscheduler.Job;\nimport com.pulumi.gcp.cloudscheduler.JobArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobRetryConfigArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobHttpTargetArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var job = new Job(\"job\", JobArgs.builder()\n            .paused(true)\n            .name(\"test-job\")\n            .description(\"test http job with updated fields\")\n            .schedule(\"*/8 * * * *\")\n            .timeZone(\"America/New_York\")\n            .attemptDeadline(\"320s\")\n            .retryConfig(JobRetryConfigArgs.builder()\n                .retryCount(1)\n                .build())\n            .httpTarget(JobHttpTargetArgs.builder()\n                .httpMethod(\"POST\")\n                .uri(\"https://example.com/ping\")\n                .body(StdFunctions.base64encode(Base64encodeArgs.builder()\n                    .input(\"{\\\"foo\\\":\\\"bar\\\"}\")\n                    .build()).result())\n                .headers(Map.of(\"Content-Type\", \"application/json\"))\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  job:\n    type: gcp:cloudscheduler:Job\n    properties:\n      paused: true\n      name: test-job\n      description: test http job with updated fields\n      schedule: '*/8 * * * *'\n      timeZone: America/New_York\n      attemptDeadline: 320s\n      retryConfig:\n        retryCount: 1\n      httpTarget:\n        httpMethod: POST\n        uri: https://example.com/ping\n        body:\n          fn::invoke:\n            function: std:base64encode\n            arguments:\n              input: '{\"foo\":\"bar\"}'\n            return: result\n        headers:\n          Content-Type: application/json\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Scheduler Job App Engine\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst job = new gcp.cloudscheduler.Job(\"job\", {\n    name: \"test-job\",\n    schedule: \"*/4 * * * *\",\n    description: \"test app engine job\",\n    timeZone: \"Europe/London\",\n    attemptDeadline: \"320s\",\n    retryConfig: {\n        minBackoffDuration: \"1s\",\n        maxRetryDuration: \"10s\",\n        maxDoublings: 2,\n        retryCount: 3,\n    },\n    appEngineHttpTarget: {\n        httpMethod: \"POST\",\n        appEngineRouting: {\n            service: \"web\",\n            version: \"prod\",\n            instance: \"my-instance-001\",\n        },\n        relativeUri: \"/ping\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\njob = gcp.cloudscheduler.Job(\"job\",\n    name=\"test-job\",\n    schedule=\"*/4 * * * *\",\n    description=\"test app engine job\",\n    time_zone=\"Europe/London\",\n    attempt_deadline=\"320s\",\n    retry_config={\n        \"min_backoff_duration\": \"1s\",\n        \"max_retry_duration\": \"10s\",\n        \"max_doublings\": 2,\n        \"retry_count\": 3,\n    },\n    app_engine_http_target={\n        \"http_method\": \"POST\",\n        \"app_engine_routing\": {\n            \"service\": \"web\",\n            \"version\": \"prod\",\n            \"instance\": \"my-instance-001\",\n        },\n        \"relative_uri\": \"/ping\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var job = new Gcp.CloudScheduler.Job(\"job\", new()\n    {\n        Name = \"test-job\",\n        Schedule = \"*/4 * * * *\",\n        Description = \"test app engine job\",\n        TimeZone = \"Europe/London\",\n        AttemptDeadline = \"320s\",\n        RetryConfig = new Gcp.CloudScheduler.Inputs.JobRetryConfigArgs\n        {\n            MinBackoffDuration = \"1s\",\n            MaxRetryDuration = \"10s\",\n            MaxDoublings = 2,\n            RetryCount = 3,\n        },\n        AppEngineHttpTarget = new Gcp.CloudScheduler.Inputs.JobAppEngineHttpTargetArgs\n        {\n            HttpMethod = \"POST\",\n            AppEngineRouting = new Gcp.CloudScheduler.Inputs.JobAppEngineHttpTargetAppEngineRoutingArgs\n            {\n                Service = \"web\",\n                Version = \"prod\",\n                Instance = \"my-instance-001\",\n            },\n            RelativeUri = \"/ping\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudscheduler\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudscheduler.NewJob(ctx, \"job\", \u0026cloudscheduler.JobArgs{\n\t\t\tName:            pulumi.String(\"test-job\"),\n\t\t\tSchedule:        pulumi.String(\"*/4 * * * *\"),\n\t\t\tDescription:     pulumi.String(\"test app engine job\"),\n\t\t\tTimeZone:        pulumi.String(\"Europe/London\"),\n\t\t\tAttemptDeadline: pulumi.String(\"320s\"),\n\t\t\tRetryConfig: \u0026cloudscheduler.JobRetryConfigArgs{\n\t\t\t\tMinBackoffDuration: pulumi.String(\"1s\"),\n\t\t\t\tMaxRetryDuration:   pulumi.String(\"10s\"),\n\t\t\t\tMaxDoublings:       pulumi.Int(2),\n\t\t\t\tRetryCount:         pulumi.Int(3),\n\t\t\t},\n\t\t\tAppEngineHttpTarget: \u0026cloudscheduler.JobAppEngineHttpTargetArgs{\n\t\t\t\tHttpMethod: pulumi.String(\"POST\"),\n\t\t\t\tAppEngineRouting: \u0026cloudscheduler.JobAppEngineHttpTargetAppEngineRoutingArgs{\n\t\t\t\t\tService:  pulumi.String(\"web\"),\n\t\t\t\t\tVersion:  pulumi.String(\"prod\"),\n\t\t\t\t\tInstance: pulumi.String(\"my-instance-001\"),\n\t\t\t\t},\n\t\t\t\tRelativeUri: pulumi.String(\"/ping\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.cloudscheduler.Job;\nimport com.pulumi.gcp.cloudscheduler.JobArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobRetryConfigArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobAppEngineHttpTargetArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobAppEngineHttpTargetAppEngineRoutingArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var job = new Job(\"job\", JobArgs.builder()\n            .name(\"test-job\")\n            .schedule(\"*/4 * * * *\")\n            .description(\"test app engine job\")\n            .timeZone(\"Europe/London\")\n            .attemptDeadline(\"320s\")\n            .retryConfig(JobRetryConfigArgs.builder()\n                .minBackoffDuration(\"1s\")\n                .maxRetryDuration(\"10s\")\n                .maxDoublings(2)\n                .retryCount(3)\n                .build())\n            .appEngineHttpTarget(JobAppEngineHttpTargetArgs.builder()\n                .httpMethod(\"POST\")\n                .appEngineRouting(JobAppEngineHttpTargetAppEngineRoutingArgs.builder()\n                    .service(\"web\")\n                    .version(\"prod\")\n                    .instance(\"my-instance-001\")\n                    .build())\n                .relativeUri(\"/ping\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  job:\n    type: gcp:cloudscheduler:Job\n    properties:\n      name: test-job\n      schedule: '*/4 * * * *'\n      description: test app engine job\n      timeZone: Europe/London\n      attemptDeadline: 320s\n      retryConfig:\n        minBackoffDuration: 1s\n        maxRetryDuration: 10s\n        maxDoublings: 2\n        retryCount: 3\n      appEngineHttpTarget:\n        httpMethod: POST\n        appEngineRouting:\n          service: web\n          version: prod\n          instance: my-instance-001\n        relativeUri: /ping\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Scheduler Job Oauth\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.compute.getDefaultServiceAccount({});\nconst job = new gcp.cloudscheduler.Job(\"job\", {\n    name: \"test-job\",\n    description: \"test http job\",\n    schedule: \"*/8 * * * *\",\n    timeZone: \"America/New_York\",\n    attemptDeadline: \"320s\",\n    httpTarget: {\n        httpMethod: \"GET\",\n        uri: \"https://cloudscheduler.googleapis.com/v1/projects/my-project-name/locations/us-west1/jobs\",\n        oauthToken: {\n            serviceAccountEmail: _default.then(_default =\u003e _default.email),\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_default_service_account()\njob = gcp.cloudscheduler.Job(\"job\",\n    name=\"test-job\",\n    description=\"test http job\",\n    schedule=\"*/8 * * * *\",\n    time_zone=\"America/New_York\",\n    attempt_deadline=\"320s\",\n    http_target={\n        \"http_method\": \"GET\",\n        \"uri\": \"https://cloudscheduler.googleapis.com/v1/projects/my-project-name/locations/us-west1/jobs\",\n        \"oauth_token\": {\n            \"service_account_email\": default.email,\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetDefaultServiceAccount.Invoke();\n\n    var job = new Gcp.CloudScheduler.Job(\"job\", new()\n    {\n        Name = \"test-job\",\n        Description = \"test http job\",\n        Schedule = \"*/8 * * * *\",\n        TimeZone = \"America/New_York\",\n        AttemptDeadline = \"320s\",\n        HttpTarget = new Gcp.CloudScheduler.Inputs.JobHttpTargetArgs\n        {\n            HttpMethod = \"GET\",\n            Uri = \"https://cloudscheduler.googleapis.com/v1/projects/my-project-name/locations/us-west1/jobs\",\n            OauthToken = new Gcp.CloudScheduler.Inputs.JobHttpTargetOauthTokenArgs\n            {\n                ServiceAccountEmail = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Email)),\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudscheduler\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.GetDefaultServiceAccount(ctx, \u0026compute.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudscheduler.NewJob(ctx, \"job\", \u0026cloudscheduler.JobArgs{\n\t\t\tName:            pulumi.String(\"test-job\"),\n\t\t\tDescription:     pulumi.String(\"test http job\"),\n\t\t\tSchedule:        pulumi.String(\"*/8 * * * *\"),\n\t\t\tTimeZone:        pulumi.String(\"America/New_York\"),\n\t\t\tAttemptDeadline: pulumi.String(\"320s\"),\n\t\t\tHttpTarget: \u0026cloudscheduler.JobHttpTargetArgs{\n\t\t\t\tHttpMethod: pulumi.String(\"GET\"),\n\t\t\t\tUri:        pulumi.String(\"https://cloudscheduler.googleapis.com/v1/projects/my-project-name/locations/us-west1/jobs\"),\n\t\t\t\tOauthToken: \u0026cloudscheduler.JobHttpTargetOauthTokenArgs{\n\t\t\t\t\tServiceAccountEmail: pulumi.String(_default.Email),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.cloudscheduler.Job;\nimport com.pulumi.gcp.cloudscheduler.JobArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobHttpTargetArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobHttpTargetOauthTokenArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getDefaultServiceAccount();\n\n        var job = new Job(\"job\", JobArgs.builder()\n            .name(\"test-job\")\n            .description(\"test http job\")\n            .schedule(\"*/8 * * * *\")\n            .timeZone(\"America/New_York\")\n            .attemptDeadline(\"320s\")\n            .httpTarget(JobHttpTargetArgs.builder()\n                .httpMethod(\"GET\")\n                .uri(\"https://cloudscheduler.googleapis.com/v1/projects/my-project-name/locations/us-west1/jobs\")\n                .oauthToken(JobHttpTargetOauthTokenArgs.builder()\n                    .serviceAccountEmail(default_.email())\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  job:\n    type: gcp:cloudscheduler:Job\n    properties:\n      name: test-job\n      description: test http job\n      schedule: '*/8 * * * *'\n      timeZone: America/New_York\n      attemptDeadline: 320s\n      httpTarget:\n        httpMethod: GET\n        uri: https://cloudscheduler.googleapis.com/v1/projects/my-project-name/locations/us-west1/jobs\n        oauthToken:\n          serviceAccountEmail: ${default.email}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Scheduler Job Oidc\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.compute.getDefaultServiceAccount({});\nconst job = new gcp.cloudscheduler.Job(\"job\", {\n    name: \"test-job\",\n    description: \"test http job\",\n    schedule: \"*/8 * * * *\",\n    timeZone: \"America/New_York\",\n    attemptDeadline: \"320s\",\n    httpTarget: {\n        httpMethod: \"GET\",\n        uri: \"https://example.com/ping\",\n        oidcToken: {\n            serviceAccountEmail: _default.then(_default =\u003e _default.email),\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_default_service_account()\njob = gcp.cloudscheduler.Job(\"job\",\n    name=\"test-job\",\n    description=\"test http job\",\n    schedule=\"*/8 * * * *\",\n    time_zone=\"America/New_York\",\n    attempt_deadline=\"320s\",\n    http_target={\n        \"http_method\": \"GET\",\n        \"uri\": \"https://example.com/ping\",\n        \"oidc_token\": {\n            \"service_account_email\": default.email,\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetDefaultServiceAccount.Invoke();\n\n    var job = new Gcp.CloudScheduler.Job(\"job\", new()\n    {\n        Name = \"test-job\",\n        Description = \"test http job\",\n        Schedule = \"*/8 * * * *\",\n        TimeZone = \"America/New_York\",\n        AttemptDeadline = \"320s\",\n        HttpTarget = new Gcp.CloudScheduler.Inputs.JobHttpTargetArgs\n        {\n            HttpMethod = \"GET\",\n            Uri = \"https://example.com/ping\",\n            OidcToken = new Gcp.CloudScheduler.Inputs.JobHttpTargetOidcTokenArgs\n            {\n                ServiceAccountEmail = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Email)),\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudscheduler\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.GetDefaultServiceAccount(ctx, \u0026compute.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudscheduler.NewJob(ctx, \"job\", \u0026cloudscheduler.JobArgs{\n\t\t\tName:            pulumi.String(\"test-job\"),\n\t\t\tDescription:     pulumi.String(\"test http job\"),\n\t\t\tSchedule:        pulumi.String(\"*/8 * * * *\"),\n\t\t\tTimeZone:        pulumi.String(\"America/New_York\"),\n\t\t\tAttemptDeadline: pulumi.String(\"320s\"),\n\t\t\tHttpTarget: \u0026cloudscheduler.JobHttpTargetArgs{\n\t\t\t\tHttpMethod: pulumi.String(\"GET\"),\n\t\t\t\tUri:        pulumi.String(\"https://example.com/ping\"),\n\t\t\t\tOidcToken: \u0026cloudscheduler.JobHttpTargetOidcTokenArgs{\n\t\t\t\t\tServiceAccountEmail: pulumi.String(_default.Email),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.cloudscheduler.Job;\nimport com.pulumi.gcp.cloudscheduler.JobArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobHttpTargetArgs;\nimport com.pulumi.gcp.cloudscheduler.inputs.JobHttpTargetOidcTokenArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getDefaultServiceAccount();\n\n        var job = new Job(\"job\", JobArgs.builder()\n            .name(\"test-job\")\n            .description(\"test http job\")\n            .schedule(\"*/8 * * * *\")\n            .timeZone(\"America/New_York\")\n            .attemptDeadline(\"320s\")\n            .httpTarget(JobHttpTargetArgs.builder()\n                .httpMethod(\"GET\")\n                .uri(\"https://example.com/ping\")\n                .oidcToken(JobHttpTargetOidcTokenArgs.builder()\n                    .serviceAccountEmail(default_.email())\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  job:\n    type: gcp:cloudscheduler:Job\n    properties:\n      name: test-job\n      description: test http job\n      schedule: '*/8 * * * *'\n      timeZone: America/New_York\n      attemptDeadline: 320s\n      httpTarget:\n        httpMethod: GET\n        uri: https://example.com/ping\n        oidcToken:\n          serviceAccountEmail: ${default.email}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nJob can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{region}}/jobs/{{name}}`\n\n* `{{project}}/{{region}}/{{name}}`\n\n* `{{region}}/{{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, Job can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:cloudscheduler/job:Job default projects/{{project}}/locations/{{region}}/jobs/{{name}}\n```\n\n```sh\n$ pulumi import gcp:cloudscheduler/job:Job default {{project}}/{{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:cloudscheduler/job:Job default {{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:cloudscheduler/job:Job default {{name}}\n```\n\n",
             "properties": {
                 "appEngineHttpTarget": {
                     "$ref": "#/types/gcp:cloudscheduler/JobAppEngineHttpTarget:JobAppEngineHttpTarget",
@@ -172025,7 +172025,7 @@
             }
         },
         "gcp:compute/instanceTemplate:InstanceTemplate": {
-            "description": "\u003e **Note**: Global instance templates can be used in any region. To lower the impact of outages outside your region and gain data residency within your region, use google_compute_region_instance_template.\n\nManages a VM instance template resource within GCE. For more information see\n[the official documentation](https://cloud.google.com/compute/docs/instance-templates)\nand\n[API](https://cloud.google.com/compute/docs/reference/latest/instanceTemplates).\n\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = new gcp.serviceaccount.Account(\"default\", {\n    accountId: \"service-account-id\",\n    displayName: \"Service Account\",\n});\nconst myImage = gcp.compute.getImage({\n    family: \"debian-11\",\n    project: \"debian-cloud\",\n});\nconst foobar = new gcp.compute.Disk(\"foobar\", {\n    name: \"existing-disk\",\n    image: myImage.then(myImage =\u003e myImage.selfLink),\n    size: 10,\n    type: \"pd-ssd\",\n    zone: \"us-central1-a\",\n});\nconst dailyBackup = new gcp.compute.ResourcePolicy(\"daily_backup\", {\n    name: \"every-day-4am\",\n    region: \"us-central1\",\n    snapshotSchedulePolicy: {\n        schedule: {\n            dailySchedule: {\n                daysInCycle: 1,\n                startTime: \"04:00\",\n            },\n        },\n    },\n});\nconst defaultInstanceTemplate = new gcp.compute.InstanceTemplate(\"default\", {\n    name: \"appserver-template\",\n    description: \"This template is used to create app server instances.\",\n    tags: [\n        \"foo\",\n        \"bar\",\n    ],\n    labels: {\n        environment: \"dev\",\n    },\n    instanceDescription: \"description assigned to instances\",\n    machineType: \"e2-medium\",\n    canIpForward: false,\n    scheduling: {\n        automaticRestart: true,\n        onHostMaintenance: \"MIGRATE\",\n    },\n    disks: [\n        {\n            sourceImage: \"debian-cloud/debian-11\",\n            autoDelete: true,\n            boot: true,\n            resourcePolicies: dailyBackup.id,\n        },\n        {\n            source: foobar.name,\n            autoDelete: false,\n            boot: false,\n        },\n    ],\n    networkInterfaces: [{\n        network: \"default\",\n    }],\n    metadata: {\n        foo: \"bar\",\n    },\n    serviceAccount: {\n        email: _default.email,\n        scopes: [\"cloud-platform\"],\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.serviceaccount.Account(\"default\",\n    account_id=\"service-account-id\",\n    display_name=\"Service Account\")\nmy_image = gcp.compute.get_image(family=\"debian-11\",\n    project=\"debian-cloud\")\nfoobar = gcp.compute.Disk(\"foobar\",\n    name=\"existing-disk\",\n    image=my_image.self_link,\n    size=10,\n    type=\"pd-ssd\",\n    zone=\"us-central1-a\")\ndaily_backup = gcp.compute.ResourcePolicy(\"daily_backup\",\n    name=\"every-day-4am\",\n    region=\"us-central1\",\n    snapshot_schedule_policy={\n        \"schedule\": {\n            \"daily_schedule\": {\n                \"days_in_cycle\": 1,\n                \"start_time\": \"04:00\",\n            },\n        },\n    })\ndefault_instance_template = gcp.compute.InstanceTemplate(\"default\",\n    name=\"appserver-template\",\n    description=\"This template is used to create app server instances.\",\n    tags=[\n        \"foo\",\n        \"bar\",\n    ],\n    labels={\n        \"environment\": \"dev\",\n    },\n    instance_description=\"description assigned to instances\",\n    machine_type=\"e2-medium\",\n    can_ip_forward=False,\n    scheduling={\n        \"automatic_restart\": True,\n        \"on_host_maintenance\": \"MIGRATE\",\n    },\n    disks=[\n        {\n            \"source_image\": \"debian-cloud/debian-11\",\n            \"auto_delete\": True,\n            \"boot\": True,\n            \"resource_policies\": daily_backup.id,\n        },\n        {\n            \"source\": foobar.name,\n            \"auto_delete\": False,\n            \"boot\": False,\n        },\n    ],\n    network_interfaces=[{\n        \"network\": \"default\",\n    }],\n    metadata={\n        \"foo\": \"bar\",\n    },\n    service_account={\n        \"email\": default.email,\n        \"scopes\": [\"cloud-platform\"],\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = new Gcp.ServiceAccount.Account(\"default\", new()\n    {\n        AccountId = \"service-account-id\",\n        DisplayName = \"Service Account\",\n    });\n\n    var myImage = Gcp.Compute.GetImage.Invoke(new()\n    {\n        Family = \"debian-11\",\n        Project = \"debian-cloud\",\n    });\n\n    var foobar = new Gcp.Compute.Disk(\"foobar\", new()\n    {\n        Name = \"existing-disk\",\n        Image = myImage.Apply(getImageResult =\u003e getImageResult.SelfLink),\n        Size = 10,\n        Type = \"pd-ssd\",\n        Zone = \"us-central1-a\",\n    });\n\n    var dailyBackup = new Gcp.Compute.ResourcePolicy(\"daily_backup\", new()\n    {\n        Name = \"every-day-4am\",\n        Region = \"us-central1\",\n        SnapshotSchedulePolicy = new Gcp.Compute.Inputs.ResourcePolicySnapshotSchedulePolicyArgs\n        {\n            Schedule = new Gcp.Compute.Inputs.ResourcePolicySnapshotSchedulePolicyScheduleArgs\n            {\n                DailySchedule = new Gcp.Compute.Inputs.ResourcePolicySnapshotSchedulePolicyScheduleDailyScheduleArgs\n                {\n                    DaysInCycle = 1,\n                    StartTime = \"04:00\",\n                },\n            },\n        },\n    });\n\n    var defaultInstanceTemplate = new Gcp.Compute.InstanceTemplate(\"default\", new()\n    {\n        Name = \"appserver-template\",\n        Description = \"This template is used to create app server instances.\",\n        Tags = new[]\n        {\n            \"foo\",\n            \"bar\",\n        },\n        Labels = \n        {\n            { \"environment\", \"dev\" },\n        },\n        InstanceDescription = \"description assigned to instances\",\n        MachineType = \"e2-medium\",\n        CanIpForward = false,\n        Scheduling = new Gcp.Compute.Inputs.InstanceTemplateSchedulingArgs\n        {\n            AutomaticRestart = true,\n            OnHostMaintenance = \"MIGRATE\",\n        },\n        Disks = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceTemplateDiskArgs\n            {\n                SourceImage = \"debian-cloud/debian-11\",\n                AutoDelete = true,\n                Boot = true,\n                ResourcePolicies = dailyBackup.Id,\n            },\n            new Gcp.Compute.Inputs.InstanceTemplateDiskArgs\n            {\n                Source = foobar.Name,\n                AutoDelete = false,\n                Boot = false,\n            },\n        },\n        NetworkInterfaces = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceTemplateNetworkInterfaceArgs\n            {\n                Network = \"default\",\n            },\n        },\n        Metadata = \n        {\n            { \"foo\", \"bar\" },\n        },\n        ServiceAccount = new Gcp.Compute.Inputs.InstanceTemplateServiceAccountArgs\n        {\n            Email = @default.Email,\n            Scopes = new[]\n            {\n                \"cloud-platform\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := serviceaccount.NewAccount(ctx, \"default\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"service-account-id\"),\n\t\t\tDisplayName: pulumi.String(\"Service Account\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tmyImage, err := compute.LookupImage(ctx, \u0026compute.LookupImageArgs{\n\t\t\tFamily:  pulumi.StringRef(\"debian-11\"),\n\t\t\tProject: pulumi.StringRef(\"debian-cloud\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tfoobar, err := compute.NewDisk(ctx, \"foobar\", \u0026compute.DiskArgs{\n\t\t\tName:  pulumi.String(\"existing-disk\"),\n\t\t\tImage: pulumi.String(myImage.SelfLink),\n\t\t\tSize:  pulumi.Int(10),\n\t\t\tType:  pulumi.String(\"pd-ssd\"),\n\t\t\tZone:  pulumi.String(\"us-central1-a\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdailyBackup, err := compute.NewResourcePolicy(ctx, \"daily_backup\", \u0026compute.ResourcePolicyArgs{\n\t\t\tName:   pulumi.String(\"every-day-4am\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tSnapshotSchedulePolicy: \u0026compute.ResourcePolicySnapshotSchedulePolicyArgs{\n\t\t\t\tSchedule: \u0026compute.ResourcePolicySnapshotSchedulePolicyScheduleArgs{\n\t\t\t\t\tDailySchedule: \u0026compute.ResourcePolicySnapshotSchedulePolicyScheduleDailyScheduleArgs{\n\t\t\t\t\t\tDaysInCycle: pulumi.Int(1),\n\t\t\t\t\t\tStartTime:   pulumi.String(\"04:00\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewInstanceTemplate(ctx, \"default\", \u0026compute.InstanceTemplateArgs{\n\t\t\tName:        pulumi.String(\"appserver-template\"),\n\t\t\tDescription: pulumi.String(\"This template is used to create app server instances.\"),\n\t\t\tTags: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"foo\"),\n\t\t\t\tpulumi.String(\"bar\"),\n\t\t\t},\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"environment\": pulumi.String(\"dev\"),\n\t\t\t},\n\t\t\tInstanceDescription: pulumi.String(\"description assigned to instances\"),\n\t\t\tMachineType:         pulumi.String(\"e2-medium\"),\n\t\t\tCanIpForward:        pulumi.Bool(false),\n\t\t\tScheduling: \u0026compute.InstanceTemplateSchedulingArgs{\n\t\t\t\tAutomaticRestart:  pulumi.Bool(true),\n\t\t\t\tOnHostMaintenance: pulumi.String(\"MIGRATE\"),\n\t\t\t},\n\t\t\tDisks: compute.InstanceTemplateDiskArray{\n\t\t\t\t\u0026compute.InstanceTemplateDiskArgs{\n\t\t\t\t\tSourceImage:      pulumi.String(\"debian-cloud/debian-11\"),\n\t\t\t\t\tAutoDelete:       pulumi.Bool(true),\n\t\t\t\t\tBoot:             pulumi.Bool(true),\n\t\t\t\t\tResourcePolicies: dailyBackup.ID(),\n\t\t\t\t},\n\t\t\t\t\u0026compute.InstanceTemplateDiskArgs{\n\t\t\t\t\tSource:     foobar.Name,\n\t\t\t\t\tAutoDelete: pulumi.Bool(false),\n\t\t\t\t\tBoot:       pulumi.Bool(false),\n\t\t\t\t},\n\t\t\t},\n\t\t\tNetworkInterfaces: compute.InstanceTemplateNetworkInterfaceArray{\n\t\t\t\t\u0026compute.InstanceTemplateNetworkInterfaceArgs{\n\t\t\t\t\tNetwork: pulumi.String(\"default\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tMetadata: pulumi.StringMap{\n\t\t\t\t\"foo\": pulumi.String(\"bar\"),\n\t\t\t},\n\t\t\tServiceAccount: \u0026compute.InstanceTemplateServiceAccountArgs{\n\t\t\t\tEmail: _default.Email,\n\t\t\t\tScopes: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"cloud-platform\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetImageArgs;\nimport com.pulumi.gcp.compute.Disk;\nimport com.pulumi.gcp.compute.DiskArgs;\nimport com.pulumi.gcp.compute.ResourcePolicy;\nimport com.pulumi.gcp.compute.ResourcePolicyArgs;\nimport com.pulumi.gcp.compute.inputs.ResourcePolicySnapshotSchedulePolicyArgs;\nimport com.pulumi.gcp.compute.inputs.ResourcePolicySnapshotSchedulePolicyScheduleArgs;\nimport com.pulumi.gcp.compute.inputs.ResourcePolicySnapshotSchedulePolicyScheduleDailyScheduleArgs;\nimport com.pulumi.gcp.compute.InstanceTemplate;\nimport com.pulumi.gcp.compute.InstanceTemplateArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateSchedulingArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateDiskArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateNetworkInterfaceArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateServiceAccountArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var default_ = new Account(\"default\", AccountArgs.builder()\n            .accountId(\"service-account-id\")\n            .displayName(\"Service Account\")\n            .build());\n\n        final var myImage = ComputeFunctions.getImage(GetImageArgs.builder()\n            .family(\"debian-11\")\n            .project(\"debian-cloud\")\n            .build());\n\n        var foobar = new Disk(\"foobar\", DiskArgs.builder()\n            .name(\"existing-disk\")\n            .image(myImage.applyValue(getImageResult -\u003e getImageResult.selfLink()))\n            .size(10)\n            .type(\"pd-ssd\")\n            .zone(\"us-central1-a\")\n            .build());\n\n        var dailyBackup = new ResourcePolicy(\"dailyBackup\", ResourcePolicyArgs.builder()\n            .name(\"every-day-4am\")\n            .region(\"us-central1\")\n            .snapshotSchedulePolicy(ResourcePolicySnapshotSchedulePolicyArgs.builder()\n                .schedule(ResourcePolicySnapshotSchedulePolicyScheduleArgs.builder()\n                    .dailySchedule(ResourcePolicySnapshotSchedulePolicyScheduleDailyScheduleArgs.builder()\n                        .daysInCycle(1)\n                        .startTime(\"04:00\")\n                        .build())\n                    .build())\n                .build())\n            .build());\n\n        var defaultInstanceTemplate = new InstanceTemplate(\"defaultInstanceTemplate\", InstanceTemplateArgs.builder()\n            .name(\"appserver-template\")\n            .description(\"This template is used to create app server instances.\")\n            .tags(            \n                \"foo\",\n                \"bar\")\n            .labels(Map.of(\"environment\", \"dev\"))\n            .instanceDescription(\"description assigned to instances\")\n            .machineType(\"e2-medium\")\n            .canIpForward(false)\n            .scheduling(InstanceTemplateSchedulingArgs.builder()\n                .automaticRestart(true)\n                .onHostMaintenance(\"MIGRATE\")\n                .build())\n            .disks(            \n                InstanceTemplateDiskArgs.builder()\n                    .sourceImage(\"debian-cloud/debian-11\")\n                    .autoDelete(true)\n                    .boot(true)\n                    .resourcePolicies(dailyBackup.id())\n                    .build(),\n                InstanceTemplateDiskArgs.builder()\n                    .source(foobar.name())\n                    .autoDelete(false)\n                    .boot(false)\n                    .build())\n            .networkInterfaces(InstanceTemplateNetworkInterfaceArgs.builder()\n                .network(\"default\")\n                .build())\n            .metadata(Map.of(\"foo\", \"bar\"))\n            .serviceAccount(InstanceTemplateServiceAccountArgs.builder()\n                .email(default_.email())\n                .scopes(\"cloud-platform\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  default:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: service-account-id\n      displayName: Service Account\n  defaultInstanceTemplate:\n    type: gcp:compute:InstanceTemplate\n    name: default\n    properties:\n      name: appserver-template\n      description: This template is used to create app server instances.\n      tags:\n        - foo\n        - bar\n      labels:\n        environment: dev\n      instanceDescription: description assigned to instances\n      machineType: e2-medium\n      canIpForward: false\n      scheduling:\n        automaticRestart: true\n        onHostMaintenance: MIGRATE\n      disks:\n        - sourceImage: debian-cloud/debian-11\n          autoDelete: true\n          boot: true\n          resourcePolicies: ${dailyBackup.id}\n        - source: ${foobar.name}\n          autoDelete: false\n          boot: false\n      networkInterfaces:\n        - network: default\n      metadata:\n        foo: bar\n      serviceAccount:\n        email: ${default.email}\n        scopes:\n          - cloud-platform\n  foobar:\n    type: gcp:compute:Disk\n    properties:\n      name: existing-disk\n      image: ${myImage.selfLink}\n      size: 10\n      type: pd-ssd\n      zone: us-central1-a\n  dailyBackup:\n    type: gcp:compute:ResourcePolicy\n    name: daily_backup\n    properties:\n      name: every-day-4am\n      region: us-central1\n      snapshotSchedulePolicy:\n        schedule:\n          dailySchedule:\n            daysInCycle: 1\n            startTime: 04:00\nvariables:\n  myImage:\n    fn::invoke:\n      function: gcp:compute:getImage\n      arguments:\n        family: debian-11\n        project: debian-cloud\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Automatic Envoy Deployment\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.compute.getDefaultServiceAccount({});\nconst myImage = gcp.compute.getImage({\n    family: \"debian-11\",\n    project: \"debian-cloud\",\n});\nconst foobar = new gcp.compute.InstanceTemplate(\"foobar\", {\n    name: \"appserver-template\",\n    machineType: \"e2-medium\",\n    canIpForward: false,\n    tags: [\n        \"foo\",\n        \"bar\",\n    ],\n    disks: [{\n        sourceImage: myImage.then(myImage =\u003e myImage.selfLink),\n        autoDelete: true,\n        boot: true,\n    }],\n    networkInterfaces: [{\n        network: \"default\",\n    }],\n    scheduling: {\n        preemptible: false,\n        automaticRestart: true,\n    },\n    metadata: {\n        \"gce-software-declaration\": `{\n  \"softwareRecipes\": [{\n    \"name\": \"install-gce-service-proxy-agent\",\n    \"desired_state\": \"INSTALLED\",\n    \"installSteps\": [{\n      \"scriptRun\": {\n        \"script\": \"#! /bin/bash\\\\nZONE=(curl --silent http://metadata.google.internal/computeMetadata/v1/instance/zone -H Metadata-Flavor:Google | cut -d/ -f4 )\\\\nexport SERVICE_PROXY_AGENT_DIRECTORY=(mktemp -d)\\\\nsudo gsutil cp   gs://gce-service-proxy-\"ZONE\"/service-proxy-agent/releases/service-proxy-agent-0.2.tgz   \"SERVICE_PROXY_AGENT_DIRECTORY\"   || sudo gsutil cp     gs://gce-service-proxy/service-proxy-agent/releases/service-proxy-agent-0.2.tgz     \"SERVICE_PROXY_AGENT_DIRECTORY\"\\\\nsudo tar -xzf \"SERVICE_PROXY_AGENT_DIRECTORY\"/service-proxy-agent-0.2.tgz -C \"SERVICE_PROXY_AGENT_DIRECTORY\"\\\\n\"SERVICE_PROXY_AGENT_DIRECTORY\"/service-proxy-agent/service-proxy-agent-bootstrap.sh\"\n      }\n    }]\n  }]\n}\n`,\n        \"gce-service-proxy\": `{\n  \"api-version\": \"0.2\",\n  \"proxy-spec\": {\n    \"proxy-port\": 15001,\n    \"network\": \"my-network\",\n    \"tracing\": \"ON\",\n    \"access-log\": \"/var/log/envoy/access.log\"\n  }\n  \"service\": {\n    \"serving-ports\": [80, 81]\n  },\n \"labels\": {\n   \"app_name\": \"bookserver_app\",\n   \"app_version\": \"STABLE\"\n  }\n}\n`,\n        \"enable-guest-attributes\": \"true\",\n        \"enable-osconfig\": \"true\",\n    },\n    serviceAccount: {\n        email: _default.then(_default =\u003e _default.email),\n        scopes: [\"cloud-platform\"],\n    },\n    labels: {\n        \"gce-service-proxy\": \"on\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_default_service_account()\nmy_image = gcp.compute.get_image(family=\"debian-11\",\n    project=\"debian-cloud\")\nfoobar = gcp.compute.InstanceTemplate(\"foobar\",\n    name=\"appserver-template\",\n    machine_type=\"e2-medium\",\n    can_ip_forward=False,\n    tags=[\n        \"foo\",\n        \"bar\",\n    ],\n    disks=[{\n        \"source_image\": my_image.self_link,\n        \"auto_delete\": True,\n        \"boot\": True,\n    }],\n    network_interfaces=[{\n        \"network\": \"default\",\n    }],\n    scheduling={\n        \"preemptible\": False,\n        \"automatic_restart\": True,\n    },\n    metadata={\n        \"gce-software-declaration\": \"\"\"{\n  \"softwareRecipes\": [{\n    \"name\": \"install-gce-service-proxy-agent\",\n    \"desired_state\": \"INSTALLED\",\n    \"installSteps\": [{\n      \"scriptRun\": {\n        \"script\": \"#! /bin/bash\\nZONE=$(curl --silent http://metadata.google.internal/computeMetadata/v1/instance/zone -H Metadata-Flavor:Google | cut -d/ -f4 )\\nexport SERVICE_PROXY_AGENT_DIRECTORY=$(mktemp -d)\\nsudo gsutil cp   gs://gce-service-proxy-\"$ZONE\"/service-proxy-agent/releases/service-proxy-agent-0.2.tgz   \"$SERVICE_PROXY_AGENT_DIRECTORY\"   || sudo gsutil cp     gs://gce-service-proxy/service-proxy-agent/releases/service-proxy-agent-0.2.tgz     \"$SERVICE_PROXY_AGENT_DIRECTORY\"\\nsudo tar -xzf \"$SERVICE_PROXY_AGENT_DIRECTORY\"/service-proxy-agent-0.2.tgz -C \"$SERVICE_PROXY_AGENT_DIRECTORY\"\\n\"$SERVICE_PROXY_AGENT_DIRECTORY\"/service-proxy-agent/service-proxy-agent-bootstrap.sh\"\n      }\n    }]\n  }]\n}\n\"\"\",\n        \"gce-service-proxy\": \"\"\"{\n  \"api-version\": \"0.2\",\n  \"proxy-spec\": {\n    \"proxy-port\": 15001,\n    \"network\": \"my-network\",\n    \"tracing\": \"ON\",\n    \"access-log\": \"/var/log/envoy/access.log\"\n  }\n  \"service\": {\n    \"serving-ports\": [80, 81]\n  },\n \"labels\": {\n   \"app_name\": \"bookserver_app\",\n   \"app_version\": \"STABLE\"\n  }\n}\n\"\"\",\n        \"enable-guest-attributes\": \"true\",\n        \"enable-osconfig\": \"true\",\n    },\n    service_account={\n        \"email\": default.email,\n        \"scopes\": [\"cloud-platform\"],\n    },\n    labels={\n        \"gce-service-proxy\": \"on\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetDefaultServiceAccount.Invoke();\n\n    var myImage = Gcp.Compute.GetImage.Invoke(new()\n    {\n        Family = \"debian-11\",\n        Project = \"debian-cloud\",\n    });\n\n    var foobar = new Gcp.Compute.InstanceTemplate(\"foobar\", new()\n    {\n        Name = \"appserver-template\",\n        MachineType = \"e2-medium\",\n        CanIpForward = false,\n        Tags = new[]\n        {\n            \"foo\",\n            \"bar\",\n        },\n        Disks = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceTemplateDiskArgs\n            {\n                SourceImage = myImage.Apply(getImageResult =\u003e getImageResult.SelfLink),\n                AutoDelete = true,\n                Boot = true,\n            },\n        },\n        NetworkInterfaces = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceTemplateNetworkInterfaceArgs\n            {\n                Network = \"default\",\n            },\n        },\n        Scheduling = new Gcp.Compute.Inputs.InstanceTemplateSchedulingArgs\n        {\n            Preemptible = false,\n            AutomaticRestart = true,\n        },\n        Metadata = \n        {\n            { \"gce-software-declaration\", @\"{\n  \"\"softwareRecipes\"\": [{\n    \"\"name\"\": \"\"install-gce-service-proxy-agent\"\",\n    \"\"desired_state\"\": \"\"INSTALLED\"\",\n    \"\"installSteps\"\": [{\n      \"\"scriptRun\"\": {\n        \"\"script\"\": \"\"#! /bin/bash\\nZONE=$(curl --silent http://metadata.google.internal/computeMetadata/v1/instance/zone -H Metadata-Flavor:Google | cut -d/ -f4 )\\nexport SERVICE_PROXY_AGENT_DIRECTORY=$(mktemp -d)\\nsudo gsutil cp   gs://gce-service-proxy-\"\"$ZONE\"\"/service-proxy-agent/releases/service-proxy-agent-0.2.tgz   \"\"$SERVICE_PROXY_AGENT_DIRECTORY\"\"   || sudo gsutil cp     gs://gce-service-proxy/service-proxy-agent/releases/service-proxy-agent-0.2.tgz     \"\"$SERVICE_PROXY_AGENT_DIRECTORY\"\"\\nsudo tar -xzf \"\"$SERVICE_PROXY_AGENT_DIRECTORY\"\"/service-proxy-agent-0.2.tgz -C \"\"$SERVICE_PROXY_AGENT_DIRECTORY\"\"\\n\"\"$SERVICE_PROXY_AGENT_DIRECTORY\"\"/service-proxy-agent/service-proxy-agent-bootstrap.sh\"\"\n      }\n    }]\n  }]\n}\n\" },\n            { \"gce-service-proxy\", @\"{\n  \"\"api-version\"\": \"\"0.2\"\",\n  \"\"proxy-spec\"\": {\n    \"\"proxy-port\"\": 15001,\n    \"\"network\"\": \"\"my-network\"\",\n    \"\"tracing\"\": \"\"ON\"\",\n    \"\"access-log\"\": \"\"/var/log/envoy/access.log\"\"\n  }\n  \"\"service\"\": {\n    \"\"serving-ports\"\": [80, 81]\n  },\n \"\"labels\"\": {\n   \"\"app_name\"\": \"\"bookserver_app\"\",\n   \"\"app_version\"\": \"\"STABLE\"\"\n  }\n}\n\" },\n            { \"enable-guest-attributes\", \"true\" },\n            { \"enable-osconfig\", \"true\" },\n        },\n        ServiceAccount = new Gcp.Compute.Inputs.InstanceTemplateServiceAccountArgs\n        {\n            Email = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Email)),\n            Scopes = new[]\n            {\n                \"cloud-platform\",\n            },\n        },\n        Labels = \n        {\n            { \"gce-service-proxy\", \"on\" },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.GetDefaultServiceAccount(ctx, \u0026compute.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tmyImage, err := compute.LookupImage(ctx, \u0026compute.LookupImageArgs{\n\t\t\tFamily:  pulumi.StringRef(\"debian-11\"),\n\t\t\tProject: pulumi.StringRef(\"debian-cloud\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewInstanceTemplate(ctx, \"foobar\", \u0026compute.InstanceTemplateArgs{\n\t\t\tName:         pulumi.String(\"appserver-template\"),\n\t\t\tMachineType:  pulumi.String(\"e2-medium\"),\n\t\t\tCanIpForward: pulumi.Bool(false),\n\t\t\tTags: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"foo\"),\n\t\t\t\tpulumi.String(\"bar\"),\n\t\t\t},\n\t\t\tDisks: compute.InstanceTemplateDiskArray{\n\t\t\t\t\u0026compute.InstanceTemplateDiskArgs{\n\t\t\t\t\tSourceImage: pulumi.String(myImage.SelfLink),\n\t\t\t\t\tAutoDelete:  pulumi.Bool(true),\n\t\t\t\t\tBoot:        pulumi.Bool(true),\n\t\t\t\t},\n\t\t\t},\n\t\t\tNetworkInterfaces: compute.InstanceTemplateNetworkInterfaceArray{\n\t\t\t\t\u0026compute.InstanceTemplateNetworkInterfaceArgs{\n\t\t\t\t\tNetwork: pulumi.String(\"default\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tScheduling: \u0026compute.InstanceTemplateSchedulingArgs{\n\t\t\t\tPreemptible:      pulumi.Bool(false),\n\t\t\t\tAutomaticRestart: pulumi.Bool(true),\n\t\t\t},\n\t\t\tMetadata: pulumi.StringMap{\n\t\t\t\t\"gce-software-declaration\": pulumi.String(`{\n  \"softwareRecipes\": [{\n    \"name\": \"install-gce-service-proxy-agent\",\n    \"desired_state\": \"INSTALLED\",\n    \"installSteps\": [{\n      \"scriptRun\": {\n        \"script\": \"#! /bin/bash\\nZONE=$(curl --silent http://metadata.google.internal/computeMetadata/v1/instance/zone -H Metadata-Flavor:Google | cut -d/ -f4 )\\nexport SERVICE_PROXY_AGENT_DIRECTORY=$(mktemp -d)\\nsudo gsutil cp   gs://gce-service-proxy-\"$ZONE\"/service-proxy-agent/releases/service-proxy-agent-0.2.tgz   \"$SERVICE_PROXY_AGENT_DIRECTORY\"   || sudo gsutil cp     gs://gce-service-proxy/service-proxy-agent/releases/service-proxy-agent-0.2.tgz     \"$SERVICE_PROXY_AGENT_DIRECTORY\"\\nsudo tar -xzf \"$SERVICE_PROXY_AGENT_DIRECTORY\"/service-proxy-agent-0.2.tgz -C \"$SERVICE_PROXY_AGENT_DIRECTORY\"\\n\"$SERVICE_PROXY_AGENT_DIRECTORY\"/service-proxy-agent/service-proxy-agent-bootstrap.sh\"\n      }\n    }]\n  }]\n}\n`),\n\t\t\t\t\"gce-service-proxy\": pulumi.String(`{\n  \"api-version\": \"0.2\",\n  \"proxy-spec\": {\n    \"proxy-port\": 15001,\n    \"network\": \"my-network\",\n    \"tracing\": \"ON\",\n    \"access-log\": \"/var/log/envoy/access.log\"\n  }\n  \"service\": {\n    \"serving-ports\": [80, 81]\n  },\n \"labels\": {\n   \"app_name\": \"bookserver_app\",\n   \"app_version\": \"STABLE\"\n  }\n}\n`),\n\t\t\t\t\"enable-guest-attributes\": pulumi.String(\"true\"),\n\t\t\t\t\"enable-osconfig\":         pulumi.String(\"true\"),\n\t\t\t},\n\t\t\tServiceAccount: \u0026compute.InstanceTemplateServiceAccountArgs{\n\t\t\t\tEmail: pulumi.String(_default.Email),\n\t\t\t\tScopes: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"cloud-platform\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"gce-service-proxy\": pulumi.String(\"on\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.compute.inputs.GetImageArgs;\nimport com.pulumi.gcp.compute.InstanceTemplate;\nimport com.pulumi.gcp.compute.InstanceTemplateArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateDiskArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateNetworkInterfaceArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateSchedulingArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateServiceAccountArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getDefaultServiceAccount();\n\n        final var myImage = ComputeFunctions.getImage(GetImageArgs.builder()\n            .family(\"debian-11\")\n            .project(\"debian-cloud\")\n            .build());\n\n        var foobar = new InstanceTemplate(\"foobar\", InstanceTemplateArgs.builder()\n            .name(\"appserver-template\")\n            .machineType(\"e2-medium\")\n            .canIpForward(false)\n            .tags(            \n                \"foo\",\n                \"bar\")\n            .disks(InstanceTemplateDiskArgs.builder()\n                .sourceImage(myImage.applyValue(getImageResult -\u003e getImageResult.selfLink()))\n                .autoDelete(true)\n                .boot(true)\n                .build())\n            .networkInterfaces(InstanceTemplateNetworkInterfaceArgs.builder()\n                .network(\"default\")\n                .build())\n            .scheduling(InstanceTemplateSchedulingArgs.builder()\n                .preemptible(false)\n                .automaticRestart(true)\n                .build())\n            .metadata(Map.ofEntries(\n                Map.entry(\"gce-software-declaration\", \"\"\"\n{\n  \"softwareRecipes\": [{\n    \"name\": \"install-gce-service-proxy-agent\",\n    \"desired_state\": \"INSTALLED\",\n    \"installSteps\": [{\n      \"scriptRun\": {\n        \"script\": \"#! /bin/bash\\nZONE=$(curl --silent http://metadata.google.internal/computeMetadata/v1/instance/zone -H Metadata-Flavor:Google | cut -d/ -f4 )\\nexport SERVICE_PROXY_AGENT_DIRECTORY=$(mktemp -d)\\nsudo gsutil cp   gs://gce-service-proxy-\"$ZONE\"/service-proxy-agent/releases/service-proxy-agent-0.2.tgz   \"$SERVICE_PROXY_AGENT_DIRECTORY\"   || sudo gsutil cp     gs://gce-service-proxy/service-proxy-agent/releases/service-proxy-agent-0.2.tgz     \"$SERVICE_PROXY_AGENT_DIRECTORY\"\\nsudo tar -xzf \"$SERVICE_PROXY_AGENT_DIRECTORY\"/service-proxy-agent-0.2.tgz -C \"$SERVICE_PROXY_AGENT_DIRECTORY\"\\n\"$SERVICE_PROXY_AGENT_DIRECTORY\"/service-proxy-agent/service-proxy-agent-bootstrap.sh\"\n      }\n    }]\n  }]\n}\n                \"\"\"),\n                Map.entry(\"gce-service-proxy\", \"\"\"\n{\n  \"api-version\": \"0.2\",\n  \"proxy-spec\": {\n    \"proxy-port\": 15001,\n    \"network\": \"my-network\",\n    \"tracing\": \"ON\",\n    \"access-log\": \"/var/log/envoy/access.log\"\n  }\n  \"service\": {\n    \"serving-ports\": [80, 81]\n  },\n \"labels\": {\n   \"app_name\": \"bookserver_app\",\n   \"app_version\": \"STABLE\"\n  }\n}\n                \"\"\"),\n                Map.entry(\"enable-guest-attributes\", \"true\"),\n                Map.entry(\"enable-osconfig\", \"true\")\n            ))\n            .serviceAccount(InstanceTemplateServiceAccountArgs.builder()\n                .email(default_.email())\n                .scopes(\"cloud-platform\")\n                .build())\n            .labels(Map.of(\"gce-service-proxy\", \"on\"))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  foobar:\n    type: gcp:compute:InstanceTemplate\n    properties:\n      name: appserver-template\n      machineType: e2-medium\n      canIpForward: false\n      tags:\n        - foo\n        - bar\n      disks:\n        - sourceImage: ${myImage.selfLink}\n          autoDelete: true\n          boot: true\n      networkInterfaces:\n        - network: default\n      scheduling:\n        preemptible: false\n        automaticRestart: true\n      metadata:\n        gce-software-declaration: |\n          {\n            \"softwareRecipes\": [{\n              \"name\": \"install-gce-service-proxy-agent\",\n              \"desired_state\": \"INSTALLED\",\n              \"installSteps\": [{\n                \"scriptRun\": {\n                  \"script\": \"#! /bin/bash\\nZONE=$(curl --silent http://metadata.google.internal/computeMetadata/v1/instance/zone -H Metadata-Flavor:Google | cut -d/ -f4 )\\nexport SERVICE_PROXY_AGENT_DIRECTORY=$(mktemp -d)\\nsudo gsutil cp   gs://gce-service-proxy-\"$ZONE\"/service-proxy-agent/releases/service-proxy-agent-0.2.tgz   \"$SERVICE_PROXY_AGENT_DIRECTORY\"   || sudo gsutil cp     gs://gce-service-proxy/service-proxy-agent/releases/service-proxy-agent-0.2.tgz     \"$SERVICE_PROXY_AGENT_DIRECTORY\"\\nsudo tar -xzf \"$SERVICE_PROXY_AGENT_DIRECTORY\"/service-proxy-agent-0.2.tgz -C \"$SERVICE_PROXY_AGENT_DIRECTORY\"\\n\"$SERVICE_PROXY_AGENT_DIRECTORY\"/service-proxy-agent/service-proxy-agent-bootstrap.sh\"\n                }\n              }]\n            }]\n          }\n        gce-service-proxy: |\n          {\n            \"api-version\": \"0.2\",\n            \"proxy-spec\": {\n              \"proxy-port\": 15001,\n              \"network\": \"my-network\",\n              \"tracing\": \"ON\",\n              \"access-log\": \"/var/log/envoy/access.log\"\n            }\n            \"service\": {\n              \"serving-ports\": [80, 81]\n            },\n           \"labels\": {\n             \"app_name\": \"bookserver_app\",\n             \"app_version\": \"STABLE\"\n            }\n          }\n        enable-guest-attributes: 'true'\n        enable-osconfig: 'true'\n      serviceAccount:\n        email: ${default.email}\n        scopes:\n          - cloud-platform\n      labels:\n        gce-service-proxy: on\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getDefaultServiceAccount\n      arguments: {}\n  myImage:\n    fn::invoke:\n      function: gcp:compute:getImage\n      arguments:\n        family: debian-11\n        project: debian-cloud\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n\n### Confidential Computing\n\nExample with [Confidential Mode](https://cloud.google.com/confidential-computing/confidential-vm/docs/confidential-vm-overview) activated.\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = new gcp.serviceaccount.Account(\"default\", {\n    accountId: \"my-custom-sa\",\n    displayName: \"Custom SA for VM Instance\",\n});\nconst confidentialInstanceTemplate = new gcp.compute.InstanceTemplate(\"confidential_instance_template\", {\n    networkInterfaces: [{\n        accessConfigs: [{}],\n        network: \"default\",\n    }],\n    name: \"my-confidential-instance-template\",\n    region: \"us-central1\",\n    machineType: \"n2d-standard-2\",\n    minCpuPlatform: \"AMD Milan\",\n    confidentialInstanceConfig: {\n        enableConfidentialCompute: true,\n        confidentialInstanceType: \"SEV\",\n    },\n    disks: [{\n        sourceImage: \"ubuntu-os-cloud/ubuntu-2004-lts\",\n    }],\n    serviceAccount: {\n        email: _default.email,\n        scopes: [\"cloud-platform\"],\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.serviceaccount.Account(\"default\",\n    account_id=\"my-custom-sa\",\n    display_name=\"Custom SA for VM Instance\")\nconfidential_instance_template = gcp.compute.InstanceTemplate(\"confidential_instance_template\",\n    network_interfaces=[{\n        \"access_configs\": [{}],\n        \"network\": \"default\",\n    }],\n    name=\"my-confidential-instance-template\",\n    region=\"us-central1\",\n    machine_type=\"n2d-standard-2\",\n    min_cpu_platform=\"AMD Milan\",\n    confidential_instance_config={\n        \"enable_confidential_compute\": True,\n        \"confidential_instance_type\": \"SEV\",\n    },\n    disks=[{\n        \"source_image\": \"ubuntu-os-cloud/ubuntu-2004-lts\",\n    }],\n    service_account={\n        \"email\": default.email,\n        \"scopes\": [\"cloud-platform\"],\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = new Gcp.ServiceAccount.Account(\"default\", new()\n    {\n        AccountId = \"my-custom-sa\",\n        DisplayName = \"Custom SA for VM Instance\",\n    });\n\n    var confidentialInstanceTemplate = new Gcp.Compute.InstanceTemplate(\"confidential_instance_template\", new()\n    {\n        NetworkInterfaces = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceTemplateNetworkInterfaceArgs\n            {\n                AccessConfigs = new[]\n                {\n                    null,\n                },\n                Network = \"default\",\n            },\n        },\n        Name = \"my-confidential-instance-template\",\n        Region = \"us-central1\",\n        MachineType = \"n2d-standard-2\",\n        MinCpuPlatform = \"AMD Milan\",\n        ConfidentialInstanceConfig = new Gcp.Compute.Inputs.InstanceTemplateConfidentialInstanceConfigArgs\n        {\n            EnableConfidentialCompute = true,\n            ConfidentialInstanceType = \"SEV\",\n        },\n        Disks = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceTemplateDiskArgs\n            {\n                SourceImage = \"ubuntu-os-cloud/ubuntu-2004-lts\",\n            },\n        },\n        ServiceAccount = new Gcp.Compute.Inputs.InstanceTemplateServiceAccountArgs\n        {\n            Email = @default.Email,\n            Scopes = new[]\n            {\n                \"cloud-platform\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := serviceaccount.NewAccount(ctx, \"default\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-custom-sa\"),\n\t\t\tDisplayName: pulumi.String(\"Custom SA for VM Instance\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewInstanceTemplate(ctx, \"confidential_instance_template\", \u0026compute.InstanceTemplateArgs{\n\t\t\tNetworkInterfaces: compute.InstanceTemplateNetworkInterfaceArray{\n\t\t\t\t\u0026compute.InstanceTemplateNetworkInterfaceArgs{\n\t\t\t\t\tAccessConfigs: compute.InstanceTemplateNetworkInterfaceAccessConfigArray{\n\t\t\t\t\t\t\u0026compute.InstanceTemplateNetworkInterfaceAccessConfigArgs{},\n\t\t\t\t\t},\n\t\t\t\t\tNetwork: pulumi.String(\"default\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tName:           pulumi.String(\"my-confidential-instance-template\"),\n\t\t\tRegion:         pulumi.String(\"us-central1\"),\n\t\t\tMachineType:    pulumi.String(\"n2d-standard-2\"),\n\t\t\tMinCpuPlatform: pulumi.String(\"AMD Milan\"),\n\t\t\tConfidentialInstanceConfig: \u0026compute.InstanceTemplateConfidentialInstanceConfigArgs{\n\t\t\t\tEnableConfidentialCompute: pulumi.Bool(true),\n\t\t\t\tConfidentialInstanceType:  pulumi.String(\"SEV\"),\n\t\t\t},\n\t\t\tDisks: compute.InstanceTemplateDiskArray{\n\t\t\t\t\u0026compute.InstanceTemplateDiskArgs{\n\t\t\t\t\tSourceImage: pulumi.String(\"ubuntu-os-cloud/ubuntu-2004-lts\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tServiceAccount: \u0026compute.InstanceTemplateServiceAccountArgs{\n\t\t\t\tEmail: _default.Email,\n\t\t\t\tScopes: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"cloud-platform\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.compute.InstanceTemplate;\nimport com.pulumi.gcp.compute.InstanceTemplateArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateNetworkInterfaceArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateConfidentialInstanceConfigArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateDiskArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateServiceAccountArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var default_ = new Account(\"default\", AccountArgs.builder()\n            .accountId(\"my-custom-sa\")\n            .displayName(\"Custom SA for VM Instance\")\n            .build());\n\n        var confidentialInstanceTemplate = new InstanceTemplate(\"confidentialInstanceTemplate\", InstanceTemplateArgs.builder()\n            .networkInterfaces(InstanceTemplateNetworkInterfaceArgs.builder()\n                .accessConfigs()\n                .network(\"default\")\n                .build())\n            .name(\"my-confidential-instance-template\")\n            .region(\"us-central1\")\n            .machineType(\"n2d-standard-2\")\n            .minCpuPlatform(\"AMD Milan\")\n            .confidentialInstanceConfig(InstanceTemplateConfidentialInstanceConfigArgs.builder()\n                .enableConfidentialCompute(true)\n                .confidentialInstanceType(\"SEV\")\n                .build())\n            .disks(InstanceTemplateDiskArgs.builder()\n                .sourceImage(\"ubuntu-os-cloud/ubuntu-2004-lts\")\n                .build())\n            .serviceAccount(InstanceTemplateServiceAccountArgs.builder()\n                .email(default_.email())\n                .scopes(\"cloud-platform\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  default:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-custom-sa\n      displayName: Custom SA for VM Instance\n  confidentialInstanceTemplate:\n    type: gcp:compute:InstanceTemplate\n    name: confidential_instance_template\n    properties:\n      networkInterfaces:\n        - accessConfigs:\n            - {}\n          network: default\n      name: my-confidential-instance-template\n      region: us-central1\n      machineType: n2d-standard-2\n      minCpuPlatform: AMD Milan\n      confidentialInstanceConfig:\n        enableConfidentialCompute: true\n        confidentialInstanceType: SEV\n      disks:\n        - sourceImage: ubuntu-os-cloud/ubuntu-2004-lts\n      serviceAccount:\n        email: ${default.email}\n        scopes:\n          - cloud-platform\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Deploying the Latest Image\n\nA common way to use instance templates and managed instance groups is to deploy the\nlatest image in a family, usually the latest build of your application. There are two\nways to do this in the provider, and they have their pros and cons. The difference ends\nup being in how \"latest\" is interpreted. You can either deploy the latest image available\nwhen the provider runs, or you can have each instance check what the latest image is when\nit's being created, either as part of a scaling event or being rebuilt by the instance\ngroup manager.\n\nIf you're not sure, we recommend deploying the latest image available when the provider runs,\nbecause this means all the instances in your group will be based on the same image, always,\nand means that no upgrades or changes to your instances happen outside of a `pulumi up`.\nYou can achieve this by using the `gcp.compute.Image`\ndata source, which will retrieve the latest image on every `pulumi apply`, and will update\nthe template to use that specific image:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst myImage = gcp.compute.getImage({\n    family: \"debian-11\",\n    project: \"debian-cloud\",\n});\nconst instanceTemplate = new gcp.compute.InstanceTemplate(\"instance_template\", {\n    namePrefix: \"instance-template-\",\n    machineType: \"e2-medium\",\n    region: \"us-central1\",\n    disks: [{\n        sourceImage: myImage.then(myImage =\u003e myImage.selfLink),\n    }],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_image = gcp.compute.get_image(family=\"debian-11\",\n    project=\"debian-cloud\")\ninstance_template = gcp.compute.InstanceTemplate(\"instance_template\",\n    name_prefix=\"instance-template-\",\n    machine_type=\"e2-medium\",\n    region=\"us-central1\",\n    disks=[{\n        \"source_image\": my_image.self_link,\n    }])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myImage = Gcp.Compute.GetImage.Invoke(new()\n    {\n        Family = \"debian-11\",\n        Project = \"debian-cloud\",\n    });\n\n    var instanceTemplate = new Gcp.Compute.InstanceTemplate(\"instance_template\", new()\n    {\n        NamePrefix = \"instance-template-\",\n        MachineType = \"e2-medium\",\n        Region = \"us-central1\",\n        Disks = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceTemplateDiskArgs\n            {\n                SourceImage = myImage.Apply(getImageResult =\u003e getImageResult.SelfLink),\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmyImage, err := compute.LookupImage(ctx, \u0026compute.LookupImageArgs{\n\t\t\tFamily:  pulumi.StringRef(\"debian-11\"),\n\t\t\tProject: pulumi.StringRef(\"debian-cloud\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewInstanceTemplate(ctx, \"instance_template\", \u0026compute.InstanceTemplateArgs{\n\t\t\tNamePrefix:  pulumi.String(\"instance-template-\"),\n\t\t\tMachineType: pulumi.String(\"e2-medium\"),\n\t\t\tRegion:      pulumi.String(\"us-central1\"),\n\t\t\tDisks: compute.InstanceTemplateDiskArray{\n\t\t\t\t\u0026compute.InstanceTemplateDiskArgs{\n\t\t\t\t\tSourceImage: pulumi.String(myImage.SelfLink),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetImageArgs;\nimport com.pulumi.gcp.compute.InstanceTemplate;\nimport com.pulumi.gcp.compute.InstanceTemplateArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateDiskArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var myImage = ComputeFunctions.getImage(GetImageArgs.builder()\n            .family(\"debian-11\")\n            .project(\"debian-cloud\")\n            .build());\n\n        var instanceTemplate = new InstanceTemplate(\"instanceTemplate\", InstanceTemplateArgs.builder()\n            .namePrefix(\"instance-template-\")\n            .machineType(\"e2-medium\")\n            .region(\"us-central1\")\n            .disks(InstanceTemplateDiskArgs.builder()\n                .sourceImage(myImage.applyValue(getImageResult -\u003e getImageResult.selfLink()))\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  instanceTemplate:\n    type: gcp:compute:InstanceTemplate\n    name: instance_template\n    properties:\n      namePrefix: instance-template-\n      machineType: e2-medium\n      region: us-central1\n      disks:\n        - sourceImage: ${myImage.selfLink}\nvariables:\n  myImage:\n    fn::invoke:\n      function: gcp:compute:getImage\n      arguments:\n        family: debian-11\n        project: debian-cloud\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\nTo have instances update to the latest on every scaling event or instance re-creation,\nuse the family as the image for the disk, and it will use GCP's default behavior, setting\nthe image for the template to the family:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst instanceTemplate = new gcp.compute.InstanceTemplate(\"instance_template\", {\n    namePrefix: \"instance-template-\",\n    machineType: \"e2-medium\",\n    region: \"us-central1\",\n    disks: [{\n        sourceImage: \"debian-cloud/debian-11\",\n    }],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ninstance_template = gcp.compute.InstanceTemplate(\"instance_template\",\n    name_prefix=\"instance-template-\",\n    machine_type=\"e2-medium\",\n    region=\"us-central1\",\n    disks=[{\n        \"source_image\": \"debian-cloud/debian-11\",\n    }])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var instanceTemplate = new Gcp.Compute.InstanceTemplate(\"instance_template\", new()\n    {\n        NamePrefix = \"instance-template-\",\n        MachineType = \"e2-medium\",\n        Region = \"us-central1\",\n        Disks = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceTemplateDiskArgs\n            {\n                SourceImage = \"debian-cloud/debian-11\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.NewInstanceTemplate(ctx, \"instance_template\", \u0026compute.InstanceTemplateArgs{\n\t\t\tNamePrefix:  pulumi.String(\"instance-template-\"),\n\t\t\tMachineType: pulumi.String(\"e2-medium\"),\n\t\t\tRegion:      pulumi.String(\"us-central1\"),\n\t\t\tDisks: compute.InstanceTemplateDiskArray{\n\t\t\t\t\u0026compute.InstanceTemplateDiskArgs{\n\t\t\t\t\tSourceImage: pulumi.String(\"debian-cloud/debian-11\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.InstanceTemplate;\nimport com.pulumi.gcp.compute.InstanceTemplateArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateDiskArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var instanceTemplate = new InstanceTemplate(\"instanceTemplate\", InstanceTemplateArgs.builder()\n            .namePrefix(\"instance-template-\")\n            .machineType(\"e2-medium\")\n            .region(\"us-central1\")\n            .disks(InstanceTemplateDiskArgs.builder()\n                .sourceImage(\"debian-cloud/debian-11\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  instanceTemplate:\n    type: gcp:compute:InstanceTemplate\n    name: instance_template\n    properties:\n      namePrefix: instance-template-\n      machineType: e2-medium\n      region: us-central1\n      disks:\n        - sourceImage: debian-cloud/debian-11\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nInstance templates can be imported using any of these accepted formats:\n\n* `projects/{{project}}/global/instanceTemplates/{{name}}`\n\n* `{{project}}/{{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, instance templates can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:compute/instanceTemplate:InstanceTemplate default projects/{{project}}/global/instanceTemplates/{{name}}\n```\n\n```sh\n$ pulumi import gcp:compute/instanceTemplate:InstanceTemplate default {{project}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:compute/instanceTemplate:InstanceTemplate default {{name}}\n```\n\n",
+            "description": "\u003e **Note**: Global instance templates can be used in any region. To lower the impact of outages outside your region and gain data residency within your region, use google_compute_region_instance_template.\n\nManages a VM instance template resource within GCE. For more information see\n[the official documentation](https://cloud.google.com/compute/docs/instance-templates)\nand\n[API](https://cloud.google.com/compute/docs/reference/latest/instanceTemplates).\n\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = new gcp.serviceaccount.Account(\"default\", {\n    accountId: \"service-account-id\",\n    displayName: \"Service Account\",\n});\nconst myImage = gcp.compute.getImage({\n    family: \"debian-11\",\n    project: \"debian-cloud\",\n});\nconst foobar = new gcp.compute.Disk(\"foobar\", {\n    name: \"existing-disk\",\n    image: myImage.then(myImage =\u003e myImage.selfLink),\n    size: 10,\n    type: \"pd-ssd\",\n    zone: \"us-central1-a\",\n});\nconst dailyBackup = new gcp.compute.ResourcePolicy(\"daily_backup\", {\n    name: \"every-day-4am\",\n    region: \"us-central1\",\n    snapshotSchedulePolicy: {\n        schedule: {\n            dailySchedule: {\n                daysInCycle: 1,\n                startTime: \"04:00\",\n            },\n        },\n    },\n});\nconst defaultInstanceTemplate = new gcp.compute.InstanceTemplate(\"default\", {\n    name: \"appserver-template\",\n    description: \"This template is used to create app server instances.\",\n    tags: [\n        \"foo\",\n        \"bar\",\n    ],\n    labels: {\n        environment: \"dev\",\n    },\n    instanceDescription: \"description assigned to instances\",\n    machineType: \"e2-medium\",\n    canIpForward: false,\n    scheduling: {\n        automaticRestart: true,\n        onHostMaintenance: \"MIGRATE\",\n    },\n    disks: [\n        {\n            sourceImage: \"debian-cloud/debian-11\",\n            autoDelete: true,\n            boot: true,\n            resourcePolicies: dailyBackup.id,\n        },\n        {\n            source: foobar.name,\n            autoDelete: false,\n            boot: false,\n        },\n    ],\n    networkInterfaces: [{\n        network: \"default\",\n    }],\n    metadata: {\n        foo: \"bar\",\n    },\n    serviceAccount: {\n        email: _default.email,\n        scopes: [\"cloud-platform\"],\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.serviceaccount.Account(\"default\",\n    account_id=\"service-account-id\",\n    display_name=\"Service Account\")\nmy_image = gcp.compute.get_image(family=\"debian-11\",\n    project=\"debian-cloud\")\nfoobar = gcp.compute.Disk(\"foobar\",\n    name=\"existing-disk\",\n    image=my_image.self_link,\n    size=10,\n    type=\"pd-ssd\",\n    zone=\"us-central1-a\")\ndaily_backup = gcp.compute.ResourcePolicy(\"daily_backup\",\n    name=\"every-day-4am\",\n    region=\"us-central1\",\n    snapshot_schedule_policy={\n        \"schedule\": {\n            \"daily_schedule\": {\n                \"days_in_cycle\": 1,\n                \"start_time\": \"04:00\",\n            },\n        },\n    })\ndefault_instance_template = gcp.compute.InstanceTemplate(\"default\",\n    name=\"appserver-template\",\n    description=\"This template is used to create app server instances.\",\n    tags=[\n        \"foo\",\n        \"bar\",\n    ],\n    labels={\n        \"environment\": \"dev\",\n    },\n    instance_description=\"description assigned to instances\",\n    machine_type=\"e2-medium\",\n    can_ip_forward=False,\n    scheduling={\n        \"automatic_restart\": True,\n        \"on_host_maintenance\": \"MIGRATE\",\n    },\n    disks=[\n        {\n            \"source_image\": \"debian-cloud/debian-11\",\n            \"auto_delete\": True,\n            \"boot\": True,\n            \"resource_policies\": daily_backup.id,\n        },\n        {\n            \"source\": foobar.name,\n            \"auto_delete\": False,\n            \"boot\": False,\n        },\n    ],\n    network_interfaces=[{\n        \"network\": \"default\",\n    }],\n    metadata={\n        \"foo\": \"bar\",\n    },\n    service_account={\n        \"email\": default.email,\n        \"scopes\": [\"cloud-platform\"],\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = new Gcp.ServiceAccount.Account(\"default\", new()\n    {\n        AccountId = \"service-account-id\",\n        DisplayName = \"Service Account\",\n    });\n\n    var myImage = Gcp.Compute.GetImage.Invoke(new()\n    {\n        Family = \"debian-11\",\n        Project = \"debian-cloud\",\n    });\n\n    var foobar = new Gcp.Compute.Disk(\"foobar\", new()\n    {\n        Name = \"existing-disk\",\n        Image = myImage.Apply(getImageResult =\u003e getImageResult.SelfLink),\n        Size = 10,\n        Type = \"pd-ssd\",\n        Zone = \"us-central1-a\",\n    });\n\n    var dailyBackup = new Gcp.Compute.ResourcePolicy(\"daily_backup\", new()\n    {\n        Name = \"every-day-4am\",\n        Region = \"us-central1\",\n        SnapshotSchedulePolicy = new Gcp.Compute.Inputs.ResourcePolicySnapshotSchedulePolicyArgs\n        {\n            Schedule = new Gcp.Compute.Inputs.ResourcePolicySnapshotSchedulePolicyScheduleArgs\n            {\n                DailySchedule = new Gcp.Compute.Inputs.ResourcePolicySnapshotSchedulePolicyScheduleDailyScheduleArgs\n                {\n                    DaysInCycle = 1,\n                    StartTime = \"04:00\",\n                },\n            },\n        },\n    });\n\n    var defaultInstanceTemplate = new Gcp.Compute.InstanceTemplate(\"default\", new()\n    {\n        Name = \"appserver-template\",\n        Description = \"This template is used to create app server instances.\",\n        Tags = new[]\n        {\n            \"foo\",\n            \"bar\",\n        },\n        Labels = \n        {\n            { \"environment\", \"dev\" },\n        },\n        InstanceDescription = \"description assigned to instances\",\n        MachineType = \"e2-medium\",\n        CanIpForward = false,\n        Scheduling = new Gcp.Compute.Inputs.InstanceTemplateSchedulingArgs\n        {\n            AutomaticRestart = true,\n            OnHostMaintenance = \"MIGRATE\",\n        },\n        Disks = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceTemplateDiskArgs\n            {\n                SourceImage = \"debian-cloud/debian-11\",\n                AutoDelete = true,\n                Boot = true,\n                ResourcePolicies = dailyBackup.Id,\n            },\n            new Gcp.Compute.Inputs.InstanceTemplateDiskArgs\n            {\n                Source = foobar.Name,\n                AutoDelete = false,\n                Boot = false,\n            },\n        },\n        NetworkInterfaces = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceTemplateNetworkInterfaceArgs\n            {\n                Network = \"default\",\n            },\n        },\n        Metadata = \n        {\n            { \"foo\", \"bar\" },\n        },\n        ServiceAccount = new Gcp.Compute.Inputs.InstanceTemplateServiceAccountArgs\n        {\n            Email = @default.Email,\n            Scopes = new[]\n            {\n                \"cloud-platform\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := serviceaccount.NewAccount(ctx, \"default\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"service-account-id\"),\n\t\t\tDisplayName: pulumi.String(\"Service Account\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tmyImage, err := compute.LookupImage(ctx, \u0026compute.LookupImageArgs{\n\t\t\tFamily:  pulumi.StringRef(\"debian-11\"),\n\t\t\tProject: pulumi.StringRef(\"debian-cloud\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tfoobar, err := compute.NewDisk(ctx, \"foobar\", \u0026compute.DiskArgs{\n\t\t\tName:  pulumi.String(\"existing-disk\"),\n\t\t\tImage: pulumi.String(myImage.SelfLink),\n\t\t\tSize:  pulumi.Int(10),\n\t\t\tType:  pulumi.String(\"pd-ssd\"),\n\t\t\tZone:  pulumi.String(\"us-central1-a\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdailyBackup, err := compute.NewResourcePolicy(ctx, \"daily_backup\", \u0026compute.ResourcePolicyArgs{\n\t\t\tName:   pulumi.String(\"every-day-4am\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tSnapshotSchedulePolicy: \u0026compute.ResourcePolicySnapshotSchedulePolicyArgs{\n\t\t\t\tSchedule: \u0026compute.ResourcePolicySnapshotSchedulePolicyScheduleArgs{\n\t\t\t\t\tDailySchedule: \u0026compute.ResourcePolicySnapshotSchedulePolicyScheduleDailyScheduleArgs{\n\t\t\t\t\t\tDaysInCycle: pulumi.Int(1),\n\t\t\t\t\t\tStartTime:   pulumi.String(\"04:00\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewInstanceTemplate(ctx, \"default\", \u0026compute.InstanceTemplateArgs{\n\t\t\tName:        pulumi.String(\"appserver-template\"),\n\t\t\tDescription: pulumi.String(\"This template is used to create app server instances.\"),\n\t\t\tTags: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"foo\"),\n\t\t\t\tpulumi.String(\"bar\"),\n\t\t\t},\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"environment\": pulumi.String(\"dev\"),\n\t\t\t},\n\t\t\tInstanceDescription: pulumi.String(\"description assigned to instances\"),\n\t\t\tMachineType:         pulumi.String(\"e2-medium\"),\n\t\t\tCanIpForward:        pulumi.Bool(false),\n\t\t\tScheduling: \u0026compute.InstanceTemplateSchedulingArgs{\n\t\t\t\tAutomaticRestart:  pulumi.Bool(true),\n\t\t\t\tOnHostMaintenance: pulumi.String(\"MIGRATE\"),\n\t\t\t},\n\t\t\tDisks: compute.InstanceTemplateDiskArray{\n\t\t\t\t\u0026compute.InstanceTemplateDiskArgs{\n\t\t\t\t\tSourceImage:      pulumi.String(\"debian-cloud/debian-11\"),\n\t\t\t\t\tAutoDelete:       pulumi.Bool(true),\n\t\t\t\t\tBoot:             pulumi.Bool(true),\n\t\t\t\t\tResourcePolicies: dailyBackup.ID(),\n\t\t\t\t},\n\t\t\t\t\u0026compute.InstanceTemplateDiskArgs{\n\t\t\t\t\tSource:     foobar.Name,\n\t\t\t\t\tAutoDelete: pulumi.Bool(false),\n\t\t\t\t\tBoot:       pulumi.Bool(false),\n\t\t\t\t},\n\t\t\t},\n\t\t\tNetworkInterfaces: compute.InstanceTemplateNetworkInterfaceArray{\n\t\t\t\t\u0026compute.InstanceTemplateNetworkInterfaceArgs{\n\t\t\t\t\tNetwork: pulumi.String(\"default\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tMetadata: pulumi.StringMap{\n\t\t\t\t\"foo\": pulumi.String(\"bar\"),\n\t\t\t},\n\t\t\tServiceAccount: \u0026compute.InstanceTemplateServiceAccountArgs{\n\t\t\t\tEmail: _default.Email,\n\t\t\t\tScopes: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"cloud-platform\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetImageArgs;\nimport com.pulumi.gcp.compute.Disk;\nimport com.pulumi.gcp.compute.DiskArgs;\nimport com.pulumi.gcp.compute.ResourcePolicy;\nimport com.pulumi.gcp.compute.ResourcePolicyArgs;\nimport com.pulumi.gcp.compute.inputs.ResourcePolicySnapshotSchedulePolicyArgs;\nimport com.pulumi.gcp.compute.inputs.ResourcePolicySnapshotSchedulePolicyScheduleArgs;\nimport com.pulumi.gcp.compute.inputs.ResourcePolicySnapshotSchedulePolicyScheduleDailyScheduleArgs;\nimport com.pulumi.gcp.compute.InstanceTemplate;\nimport com.pulumi.gcp.compute.InstanceTemplateArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateSchedulingArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateDiskArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateNetworkInterfaceArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateServiceAccountArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var default_ = new Account(\"default\", AccountArgs.builder()\n            .accountId(\"service-account-id\")\n            .displayName(\"Service Account\")\n            .build());\n\n        final var myImage = ComputeFunctions.getImage(GetImageArgs.builder()\n            .family(\"debian-11\")\n            .project(\"debian-cloud\")\n            .build());\n\n        var foobar = new Disk(\"foobar\", DiskArgs.builder()\n            .name(\"existing-disk\")\n            .image(myImage.applyValue(getImageResult -\u003e getImageResult.selfLink()))\n            .size(10)\n            .type(\"pd-ssd\")\n            .zone(\"us-central1-a\")\n            .build());\n\n        var dailyBackup = new ResourcePolicy(\"dailyBackup\", ResourcePolicyArgs.builder()\n            .name(\"every-day-4am\")\n            .region(\"us-central1\")\n            .snapshotSchedulePolicy(ResourcePolicySnapshotSchedulePolicyArgs.builder()\n                .schedule(ResourcePolicySnapshotSchedulePolicyScheduleArgs.builder()\n                    .dailySchedule(ResourcePolicySnapshotSchedulePolicyScheduleDailyScheduleArgs.builder()\n                        .daysInCycle(1)\n                        .startTime(\"04:00\")\n                        .build())\n                    .build())\n                .build())\n            .build());\n\n        var defaultInstanceTemplate = new InstanceTemplate(\"defaultInstanceTemplate\", InstanceTemplateArgs.builder()\n            .name(\"appserver-template\")\n            .description(\"This template is used to create app server instances.\")\n            .tags(            \n                \"foo\",\n                \"bar\")\n            .labels(Map.of(\"environment\", \"dev\"))\n            .instanceDescription(\"description assigned to instances\")\n            .machineType(\"e2-medium\")\n            .canIpForward(false)\n            .scheduling(InstanceTemplateSchedulingArgs.builder()\n                .automaticRestart(true)\n                .onHostMaintenance(\"MIGRATE\")\n                .build())\n            .disks(            \n                InstanceTemplateDiskArgs.builder()\n                    .sourceImage(\"debian-cloud/debian-11\")\n                    .autoDelete(true)\n                    .boot(true)\n                    .resourcePolicies(dailyBackup.id())\n                    .build(),\n                InstanceTemplateDiskArgs.builder()\n                    .source(foobar.name())\n                    .autoDelete(false)\n                    .boot(false)\n                    .build())\n            .networkInterfaces(InstanceTemplateNetworkInterfaceArgs.builder()\n                .network(\"default\")\n                .build())\n            .metadata(Map.of(\"foo\", \"bar\"))\n            .serviceAccount(InstanceTemplateServiceAccountArgs.builder()\n                .email(default_.email())\n                .scopes(\"cloud-platform\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  default:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: service-account-id\n      displayName: Service Account\n  defaultInstanceTemplate:\n    type: gcp:compute:InstanceTemplate\n    name: default\n    properties:\n      name: appserver-template\n      description: This template is used to create app server instances.\n      tags:\n        - foo\n        - bar\n      labels:\n        environment: dev\n      instanceDescription: description assigned to instances\n      machineType: e2-medium\n      canIpForward: false\n      scheduling:\n        automaticRestart: true\n        onHostMaintenance: MIGRATE\n      disks:\n        - sourceImage: debian-cloud/debian-11\n          autoDelete: true\n          boot: true\n          resourcePolicies: ${dailyBackup.id}\n        - source: ${foobar.name}\n          autoDelete: false\n          boot: false\n      networkInterfaces:\n        - network: default\n      metadata:\n        foo: bar\n      serviceAccount:\n        email: ${default.email}\n        scopes:\n          - cloud-platform\n  foobar:\n    type: gcp:compute:Disk\n    properties:\n      name: existing-disk\n      image: ${myImage.selfLink}\n      size: 10\n      type: pd-ssd\n      zone: us-central1-a\n  dailyBackup:\n    type: gcp:compute:ResourcePolicy\n    name: daily_backup\n    properties:\n      name: every-day-4am\n      region: us-central1\n      snapshotSchedulePolicy:\n        schedule:\n          dailySchedule:\n            daysInCycle: 1\n            startTime: 04:00\nvariables:\n  myImage:\n    fn::invoke:\n      function: gcp:compute:getImage\n      arguments:\n        family: debian-11\n        project: debian-cloud\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Automatic Envoy Deployment\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.compute.getDefaultServiceAccount({});\nconst myImage = gcp.compute.getImage({\n    family: \"debian-11\",\n    project: \"debian-cloud\",\n});\nconst foobar = new gcp.compute.InstanceTemplate(\"foobar\", {\n    name: \"appserver-template\",\n    machineType: \"e2-medium\",\n    canIpForward: false,\n    tags: [\n        \"foo\",\n        \"bar\",\n    ],\n    disks: [{\n        sourceImage: myImage.then(myImage =\u003e myImage.selfLink),\n        autoDelete: true,\n        boot: true,\n    }],\n    networkInterfaces: [{\n        network: \"default\",\n    }],\n    scheduling: {\n        preemptible: false,\n        automaticRestart: true,\n    },\n    metadata: {\n        \"gce-software-declaration\": `{\n  \"softwareRecipes\": [{\n    \"name\": \"install-gce-service-proxy-agent\",\n    \"desired_state\": \"INSTALLED\",\n    \"installSteps\": [{\n      \"scriptRun\": {\n        \"script\": \"#! /bin/bash\\\\nZONE=(curl --silent http://metadata.google.internal/computeMetadata/v1/instance/zone -H Metadata-Flavor:Google | cut -d/ -f4 )\\\\nexport SERVICE_PROXY_AGENT_DIRECTORY=(mktemp -d)\\\\nsudo gsutil cp   gs://gce-service-proxy-\"ZONE\"/service-proxy-agent/releases/service-proxy-agent-0.2.tgz   \"SERVICE_PROXY_AGENT_DIRECTORY\"   || sudo gsutil cp     gs://gce-service-proxy/service-proxy-agent/releases/service-proxy-agent-0.2.tgz     \"SERVICE_PROXY_AGENT_DIRECTORY\"\\\\nsudo tar -xzf \"SERVICE_PROXY_AGENT_DIRECTORY\"/service-proxy-agent-0.2.tgz -C \"SERVICE_PROXY_AGENT_DIRECTORY\"\\\\n\"SERVICE_PROXY_AGENT_DIRECTORY\"/service-proxy-agent/service-proxy-agent-bootstrap.sh\"\n      }\n    }]\n  }]\n}\n`,\n        \"gce-service-proxy\": `{\n  \"api-version\": \"0.2\",\n  \"proxy-spec\": {\n    \"proxy-port\": 15001,\n    \"network\": \"my-network\",\n    \"tracing\": \"ON\",\n    \"access-log\": \"/var/log/envoy/access.log\"\n  }\n  \"service\": {\n    \"serving-ports\": [80, 81]\n  },\n \"labels\": {\n   \"app_name\": \"bookserver_app\",\n   \"app_version\": \"STABLE\"\n  }\n}\n`,\n        \"enable-guest-attributes\": \"true\",\n        \"enable-osconfig\": \"true\",\n    },\n    serviceAccount: {\n        email: _default.then(_default =\u003e _default.email),\n        scopes: [\"cloud-platform\"],\n    },\n    labels: {\n        \"gce-service-proxy\": \"on\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_default_service_account()\nmy_image = gcp.compute.get_image(family=\"debian-11\",\n    project=\"debian-cloud\")\nfoobar = gcp.compute.InstanceTemplate(\"foobar\",\n    name=\"appserver-template\",\n    machine_type=\"e2-medium\",\n    can_ip_forward=False,\n    tags=[\n        \"foo\",\n        \"bar\",\n    ],\n    disks=[{\n        \"source_image\": my_image.self_link,\n        \"auto_delete\": True,\n        \"boot\": True,\n    }],\n    network_interfaces=[{\n        \"network\": \"default\",\n    }],\n    scheduling={\n        \"preemptible\": False,\n        \"automatic_restart\": True,\n    },\n    metadata={\n        \"gce-software-declaration\": \"\"\"{\n  \"softwareRecipes\": [{\n    \"name\": \"install-gce-service-proxy-agent\",\n    \"desired_state\": \"INSTALLED\",\n    \"installSteps\": [{\n      \"scriptRun\": {\n        \"script\": \"#! /bin/bash\\nZONE=$(curl --silent http://metadata.google.internal/computeMetadata/v1/instance/zone -H Metadata-Flavor:Google | cut -d/ -f4 )\\nexport SERVICE_PROXY_AGENT_DIRECTORY=$(mktemp -d)\\nsudo gsutil cp   gs://gce-service-proxy-\"$ZONE\"/service-proxy-agent/releases/service-proxy-agent-0.2.tgz   \"$SERVICE_PROXY_AGENT_DIRECTORY\"   || sudo gsutil cp     gs://gce-service-proxy/service-proxy-agent/releases/service-proxy-agent-0.2.tgz     \"$SERVICE_PROXY_AGENT_DIRECTORY\"\\nsudo tar -xzf \"$SERVICE_PROXY_AGENT_DIRECTORY\"/service-proxy-agent-0.2.tgz -C \"$SERVICE_PROXY_AGENT_DIRECTORY\"\\n\"$SERVICE_PROXY_AGENT_DIRECTORY\"/service-proxy-agent/service-proxy-agent-bootstrap.sh\"\n      }\n    }]\n  }]\n}\n\"\"\",\n        \"gce-service-proxy\": \"\"\"{\n  \"api-version\": \"0.2\",\n  \"proxy-spec\": {\n    \"proxy-port\": 15001,\n    \"network\": \"my-network\",\n    \"tracing\": \"ON\",\n    \"access-log\": \"/var/log/envoy/access.log\"\n  }\n  \"service\": {\n    \"serving-ports\": [80, 81]\n  },\n \"labels\": {\n   \"app_name\": \"bookserver_app\",\n   \"app_version\": \"STABLE\"\n  }\n}\n\"\"\",\n        \"enable-guest-attributes\": \"true\",\n        \"enable-osconfig\": \"true\",\n    },\n    service_account={\n        \"email\": default.email,\n        \"scopes\": [\"cloud-platform\"],\n    },\n    labels={\n        \"gce-service-proxy\": \"on\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetDefaultServiceAccount.Invoke();\n\n    var myImage = Gcp.Compute.GetImage.Invoke(new()\n    {\n        Family = \"debian-11\",\n        Project = \"debian-cloud\",\n    });\n\n    var foobar = new Gcp.Compute.InstanceTemplate(\"foobar\", new()\n    {\n        Name = \"appserver-template\",\n        MachineType = \"e2-medium\",\n        CanIpForward = false,\n        Tags = new[]\n        {\n            \"foo\",\n            \"bar\",\n        },\n        Disks = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceTemplateDiskArgs\n            {\n                SourceImage = myImage.Apply(getImageResult =\u003e getImageResult.SelfLink),\n                AutoDelete = true,\n                Boot = true,\n            },\n        },\n        NetworkInterfaces = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceTemplateNetworkInterfaceArgs\n            {\n                Network = \"default\",\n            },\n        },\n        Scheduling = new Gcp.Compute.Inputs.InstanceTemplateSchedulingArgs\n        {\n            Preemptible = false,\n            AutomaticRestart = true,\n        },\n        Metadata = \n        {\n            { \"gce-software-declaration\", @\"{\n  \"\"softwareRecipes\"\": [{\n    \"\"name\"\": \"\"install-gce-service-proxy-agent\"\",\n    \"\"desired_state\"\": \"\"INSTALLED\"\",\n    \"\"installSteps\"\": [{\n      \"\"scriptRun\"\": {\n        \"\"script\"\": \"\"#! /bin/bash\\nZONE=$(curl --silent http://metadata.google.internal/computeMetadata/v1/instance/zone -H Metadata-Flavor:Google | cut -d/ -f4 )\\nexport SERVICE_PROXY_AGENT_DIRECTORY=$(mktemp -d)\\nsudo gsutil cp   gs://gce-service-proxy-\"\"$ZONE\"\"/service-proxy-agent/releases/service-proxy-agent-0.2.tgz   \"\"$SERVICE_PROXY_AGENT_DIRECTORY\"\"   || sudo gsutil cp     gs://gce-service-proxy/service-proxy-agent/releases/service-proxy-agent-0.2.tgz     \"\"$SERVICE_PROXY_AGENT_DIRECTORY\"\"\\nsudo tar -xzf \"\"$SERVICE_PROXY_AGENT_DIRECTORY\"\"/service-proxy-agent-0.2.tgz -C \"\"$SERVICE_PROXY_AGENT_DIRECTORY\"\"\\n\"\"$SERVICE_PROXY_AGENT_DIRECTORY\"\"/service-proxy-agent/service-proxy-agent-bootstrap.sh\"\"\n      }\n    }]\n  }]\n}\n\" },\n            { \"gce-service-proxy\", @\"{\n  \"\"api-version\"\": \"\"0.2\"\",\n  \"\"proxy-spec\"\": {\n    \"\"proxy-port\"\": 15001,\n    \"\"network\"\": \"\"my-network\"\",\n    \"\"tracing\"\": \"\"ON\"\",\n    \"\"access-log\"\": \"\"/var/log/envoy/access.log\"\"\n  }\n  \"\"service\"\": {\n    \"\"serving-ports\"\": [80, 81]\n  },\n \"\"labels\"\": {\n   \"\"app_name\"\": \"\"bookserver_app\"\",\n   \"\"app_version\"\": \"\"STABLE\"\"\n  }\n}\n\" },\n            { \"enable-guest-attributes\", \"true\" },\n            { \"enable-osconfig\", \"true\" },\n        },\n        ServiceAccount = new Gcp.Compute.Inputs.InstanceTemplateServiceAccountArgs\n        {\n            Email = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Email)),\n            Scopes = new[]\n            {\n                \"cloud-platform\",\n            },\n        },\n        Labels = \n        {\n            { \"gce-service-proxy\", \"on\" },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.GetDefaultServiceAccount(ctx, \u0026compute.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tmyImage, err := compute.LookupImage(ctx, \u0026compute.LookupImageArgs{\n\t\t\tFamily:  pulumi.StringRef(\"debian-11\"),\n\t\t\tProject: pulumi.StringRef(\"debian-cloud\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewInstanceTemplate(ctx, \"foobar\", \u0026compute.InstanceTemplateArgs{\n\t\t\tName:         pulumi.String(\"appserver-template\"),\n\t\t\tMachineType:  pulumi.String(\"e2-medium\"),\n\t\t\tCanIpForward: pulumi.Bool(false),\n\t\t\tTags: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"foo\"),\n\t\t\t\tpulumi.String(\"bar\"),\n\t\t\t},\n\t\t\tDisks: compute.InstanceTemplateDiskArray{\n\t\t\t\t\u0026compute.InstanceTemplateDiskArgs{\n\t\t\t\t\tSourceImage: pulumi.String(myImage.SelfLink),\n\t\t\t\t\tAutoDelete:  pulumi.Bool(true),\n\t\t\t\t\tBoot:        pulumi.Bool(true),\n\t\t\t\t},\n\t\t\t},\n\t\t\tNetworkInterfaces: compute.InstanceTemplateNetworkInterfaceArray{\n\t\t\t\t\u0026compute.InstanceTemplateNetworkInterfaceArgs{\n\t\t\t\t\tNetwork: pulumi.String(\"default\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tScheduling: \u0026compute.InstanceTemplateSchedulingArgs{\n\t\t\t\tPreemptible:      pulumi.Bool(false),\n\t\t\t\tAutomaticRestart: pulumi.Bool(true),\n\t\t\t},\n\t\t\tMetadata: pulumi.StringMap{\n\t\t\t\t\"gce-software-declaration\": pulumi.String(`{\n  \"softwareRecipes\": [{\n    \"name\": \"install-gce-service-proxy-agent\",\n    \"desired_state\": \"INSTALLED\",\n    \"installSteps\": [{\n      \"scriptRun\": {\n        \"script\": \"#! /bin/bash\\nZONE=$(curl --silent http://metadata.google.internal/computeMetadata/v1/instance/zone -H Metadata-Flavor:Google | cut -d/ -f4 )\\nexport SERVICE_PROXY_AGENT_DIRECTORY=$(mktemp -d)\\nsudo gsutil cp   gs://gce-service-proxy-\"$ZONE\"/service-proxy-agent/releases/service-proxy-agent-0.2.tgz   \"$SERVICE_PROXY_AGENT_DIRECTORY\"   || sudo gsutil cp     gs://gce-service-proxy/service-proxy-agent/releases/service-proxy-agent-0.2.tgz     \"$SERVICE_PROXY_AGENT_DIRECTORY\"\\nsudo tar -xzf \"$SERVICE_PROXY_AGENT_DIRECTORY\"/service-proxy-agent-0.2.tgz -C \"$SERVICE_PROXY_AGENT_DIRECTORY\"\\n\"$SERVICE_PROXY_AGENT_DIRECTORY\"/service-proxy-agent/service-proxy-agent-bootstrap.sh\"\n      }\n    }]\n  }]\n}\n`),\n\t\t\t\t\"gce-service-proxy\": pulumi.String(`{\n  \"api-version\": \"0.2\",\n  \"proxy-spec\": {\n    \"proxy-port\": 15001,\n    \"network\": \"my-network\",\n    \"tracing\": \"ON\",\n    \"access-log\": \"/var/log/envoy/access.log\"\n  }\n  \"service\": {\n    \"serving-ports\": [80, 81]\n  },\n \"labels\": {\n   \"app_name\": \"bookserver_app\",\n   \"app_version\": \"STABLE\"\n  }\n}\n`),\n\t\t\t\t\"enable-guest-attributes\": pulumi.String(\"true\"),\n\t\t\t\t\"enable-osconfig\":         pulumi.String(\"true\"),\n\t\t\t},\n\t\t\tServiceAccount: \u0026compute.InstanceTemplateServiceAccountArgs{\n\t\t\t\tEmail: pulumi.String(_default.Email),\n\t\t\t\tScopes: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"cloud-platform\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"gce-service-proxy\": pulumi.String(\"on\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.compute.inputs.GetImageArgs;\nimport com.pulumi.gcp.compute.InstanceTemplate;\nimport com.pulumi.gcp.compute.InstanceTemplateArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateDiskArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateNetworkInterfaceArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateSchedulingArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateServiceAccountArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getDefaultServiceAccount();\n\n        final var myImage = ComputeFunctions.getImage(GetImageArgs.builder()\n            .family(\"debian-11\")\n            .project(\"debian-cloud\")\n            .build());\n\n        var foobar = new InstanceTemplate(\"foobar\", InstanceTemplateArgs.builder()\n            .name(\"appserver-template\")\n            .machineType(\"e2-medium\")\n            .canIpForward(false)\n            .tags(            \n                \"foo\",\n                \"bar\")\n            .disks(InstanceTemplateDiskArgs.builder()\n                .sourceImage(myImage.applyValue(getImageResult -\u003e getImageResult.selfLink()))\n                .autoDelete(true)\n                .boot(true)\n                .build())\n            .networkInterfaces(InstanceTemplateNetworkInterfaceArgs.builder()\n                .network(\"default\")\n                .build())\n            .scheduling(InstanceTemplateSchedulingArgs.builder()\n                .preemptible(false)\n                .automaticRestart(true)\n                .build())\n            .metadata(Map.ofEntries(\n                Map.entry(\"gce-software-declaration\", \"\"\"\n{\n  \"softwareRecipes\": [{\n    \"name\": \"install-gce-service-proxy-agent\",\n    \"desired_state\": \"INSTALLED\",\n    \"installSteps\": [{\n      \"scriptRun\": {\n        \"script\": \"#! /bin/bash\\nZONE=$(curl --silent http://metadata.google.internal/computeMetadata/v1/instance/zone -H Metadata-Flavor:Google | cut -d/ -f4 )\\nexport SERVICE_PROXY_AGENT_DIRECTORY=$(mktemp -d)\\nsudo gsutil cp   gs://gce-service-proxy-\"$ZONE\"/service-proxy-agent/releases/service-proxy-agent-0.2.tgz   \"$SERVICE_PROXY_AGENT_DIRECTORY\"   || sudo gsutil cp     gs://gce-service-proxy/service-proxy-agent/releases/service-proxy-agent-0.2.tgz     \"$SERVICE_PROXY_AGENT_DIRECTORY\"\\nsudo tar -xzf \"$SERVICE_PROXY_AGENT_DIRECTORY\"/service-proxy-agent-0.2.tgz -C \"$SERVICE_PROXY_AGENT_DIRECTORY\"\\n\"$SERVICE_PROXY_AGENT_DIRECTORY\"/service-proxy-agent/service-proxy-agent-bootstrap.sh\"\n      }\n    }]\n  }]\n}\n                \"\"\"),\n                Map.entry(\"gce-service-proxy\", \"\"\"\n{\n  \"api-version\": \"0.2\",\n  \"proxy-spec\": {\n    \"proxy-port\": 15001,\n    \"network\": \"my-network\",\n    \"tracing\": \"ON\",\n    \"access-log\": \"/var/log/envoy/access.log\"\n  }\n  \"service\": {\n    \"serving-ports\": [80, 81]\n  },\n \"labels\": {\n   \"app_name\": \"bookserver_app\",\n   \"app_version\": \"STABLE\"\n  }\n}\n                \"\"\"),\n                Map.entry(\"enable-guest-attributes\", \"true\"),\n                Map.entry(\"enable-osconfig\", \"true\")\n            ))\n            .serviceAccount(InstanceTemplateServiceAccountArgs.builder()\n                .email(default_.email())\n                .scopes(\"cloud-platform\")\n                .build())\n            .labels(Map.of(\"gce-service-proxy\", \"on\"))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  foobar:\n    type: gcp:compute:InstanceTemplate\n    properties:\n      name: appserver-template\n      machineType: e2-medium\n      canIpForward: false\n      tags:\n        - foo\n        - bar\n      disks:\n        - sourceImage: ${myImage.selfLink}\n          autoDelete: true\n          boot: true\n      networkInterfaces:\n        - network: default\n      scheduling:\n        preemptible: false\n        automaticRestart: true\n      metadata:\n        gce-software-declaration: |\n          {\n            \"softwareRecipes\": [{\n              \"name\": \"install-gce-service-proxy-agent\",\n              \"desired_state\": \"INSTALLED\",\n              \"installSteps\": [{\n                \"scriptRun\": {\n                  \"script\": \"#! /bin/bash\\nZONE=$(curl --silent http://metadata.google.internal/computeMetadata/v1/instance/zone -H Metadata-Flavor:Google | cut -d/ -f4 )\\nexport SERVICE_PROXY_AGENT_DIRECTORY=$(mktemp -d)\\nsudo gsutil cp   gs://gce-service-proxy-\"$ZONE\"/service-proxy-agent/releases/service-proxy-agent-0.2.tgz   \"$SERVICE_PROXY_AGENT_DIRECTORY\"   || sudo gsutil cp     gs://gce-service-proxy/service-proxy-agent/releases/service-proxy-agent-0.2.tgz     \"$SERVICE_PROXY_AGENT_DIRECTORY\"\\nsudo tar -xzf \"$SERVICE_PROXY_AGENT_DIRECTORY\"/service-proxy-agent-0.2.tgz -C \"$SERVICE_PROXY_AGENT_DIRECTORY\"\\n\"$SERVICE_PROXY_AGENT_DIRECTORY\"/service-proxy-agent/service-proxy-agent-bootstrap.sh\"\n                }\n              }]\n            }]\n          }\n        gce-service-proxy: |\n          {\n            \"api-version\": \"0.2\",\n            \"proxy-spec\": {\n              \"proxy-port\": 15001,\n              \"network\": \"my-network\",\n              \"tracing\": \"ON\",\n              \"access-log\": \"/var/log/envoy/access.log\"\n            }\n            \"service\": {\n              \"serving-ports\": [80, 81]\n            },\n           \"labels\": {\n             \"app_name\": \"bookserver_app\",\n             \"app_version\": \"STABLE\"\n            }\n          }\n        enable-guest-attributes: 'true'\n        enable-osconfig: 'true'\n      serviceAccount:\n        email: ${default.email}\n        scopes:\n          - cloud-platform\n      labels:\n        gce-service-proxy: on\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getDefaultServiceAccount\n      arguments: {}\n  myImage:\n    fn::invoke:\n      function: gcp:compute:getImage\n      arguments:\n        family: debian-11\n        project: debian-cloud\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n\n### Confidential Computing\n\nExample with [Confidential Mode](https://cloud.google.com/confidential-computing/confidential-vm/docs/confidential-vm-overview) activated.\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = new gcp.serviceaccount.Account(\"default\", {\n    accountId: \"my-custom-sa\",\n    displayName: \"Custom SA for VM Instance\",\n});\nconst confidentialInstanceTemplate = new gcp.compute.InstanceTemplate(\"confidential_instance_template\", {\n    networkInterfaces: [{\n        accessConfigs: [{}],\n        network: \"default\",\n    }],\n    name: \"my-confidential-instance-template\",\n    region: \"us-central1\",\n    machineType: \"n2d-standard-2\",\n    minCpuPlatform: \"AMD Milan\",\n    confidentialInstanceConfig: {\n        enableConfidentialCompute: true,\n        confidentialInstanceType: \"SEV\",\n    },\n    disks: [{\n        sourceImage: \"ubuntu-os-cloud/ubuntu-2004-lts\",\n    }],\n    serviceAccount: {\n        email: _default.email,\n        scopes: [\"cloud-platform\"],\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.serviceaccount.Account(\"default\",\n    account_id=\"my-custom-sa\",\n    display_name=\"Custom SA for VM Instance\")\nconfidential_instance_template = gcp.compute.InstanceTemplate(\"confidential_instance_template\",\n    network_interfaces=[{\n        \"access_configs\": [{}],\n        \"network\": \"default\",\n    }],\n    name=\"my-confidential-instance-template\",\n    region=\"us-central1\",\n    machine_type=\"n2d-standard-2\",\n    min_cpu_platform=\"AMD Milan\",\n    confidential_instance_config={\n        \"enable_confidential_compute\": True,\n        \"confidential_instance_type\": \"SEV\",\n    },\n    disks=[{\n        \"source_image\": \"ubuntu-os-cloud/ubuntu-2004-lts\",\n    }],\n    service_account={\n        \"email\": default.email,\n        \"scopes\": [\"cloud-platform\"],\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = new Gcp.ServiceAccount.Account(\"default\", new()\n    {\n        AccountId = \"my-custom-sa\",\n        DisplayName = \"Custom SA for VM Instance\",\n    });\n\n    var confidentialInstanceTemplate = new Gcp.Compute.InstanceTemplate(\"confidential_instance_template\", new()\n    {\n        NetworkInterfaces = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceTemplateNetworkInterfaceArgs\n            {\n                AccessConfigs = new[]\n                {\n                    null,\n                },\n                Network = \"default\",\n            },\n        },\n        Name = \"my-confidential-instance-template\",\n        Region = \"us-central1\",\n        MachineType = \"n2d-standard-2\",\n        MinCpuPlatform = \"AMD Milan\",\n        ConfidentialInstanceConfig = new Gcp.Compute.Inputs.InstanceTemplateConfidentialInstanceConfigArgs\n        {\n            EnableConfidentialCompute = true,\n            ConfidentialInstanceType = \"SEV\",\n        },\n        Disks = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceTemplateDiskArgs\n            {\n                SourceImage = \"ubuntu-os-cloud/ubuntu-2004-lts\",\n            },\n        },\n        ServiceAccount = new Gcp.Compute.Inputs.InstanceTemplateServiceAccountArgs\n        {\n            Email = @default.Email,\n            Scopes = new[]\n            {\n                \"cloud-platform\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := serviceaccount.NewAccount(ctx, \"default\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-custom-sa\"),\n\t\t\tDisplayName: pulumi.String(\"Custom SA for VM Instance\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewInstanceTemplate(ctx, \"confidential_instance_template\", \u0026compute.InstanceTemplateArgs{\n\t\t\tNetworkInterfaces: compute.InstanceTemplateNetworkInterfaceArray{\n\t\t\t\t\u0026compute.InstanceTemplateNetworkInterfaceArgs{\n\t\t\t\t\tAccessConfigs: compute.InstanceTemplateNetworkInterfaceAccessConfigArray{\n\t\t\t\t\t\t\u0026compute.InstanceTemplateNetworkInterfaceAccessConfigArgs{},\n\t\t\t\t\t},\n\t\t\t\t\tNetwork: pulumi.String(\"default\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tName:           pulumi.String(\"my-confidential-instance-template\"),\n\t\t\tRegion:         pulumi.String(\"us-central1\"),\n\t\t\tMachineType:    pulumi.String(\"n2d-standard-2\"),\n\t\t\tMinCpuPlatform: pulumi.String(\"AMD Milan\"),\n\t\t\tConfidentialInstanceConfig: \u0026compute.InstanceTemplateConfidentialInstanceConfigArgs{\n\t\t\t\tEnableConfidentialCompute: pulumi.Bool(true),\n\t\t\t\tConfidentialInstanceType:  pulumi.String(\"SEV\"),\n\t\t\t},\n\t\t\tDisks: compute.InstanceTemplateDiskArray{\n\t\t\t\t\u0026compute.InstanceTemplateDiskArgs{\n\t\t\t\t\tSourceImage: pulumi.String(\"ubuntu-os-cloud/ubuntu-2004-lts\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tServiceAccount: \u0026compute.InstanceTemplateServiceAccountArgs{\n\t\t\t\tEmail: _default.Email,\n\t\t\t\tScopes: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"cloud-platform\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.compute.InstanceTemplate;\nimport com.pulumi.gcp.compute.InstanceTemplateArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateNetworkInterfaceArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateConfidentialInstanceConfigArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateDiskArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateServiceAccountArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var default_ = new Account(\"default\", AccountArgs.builder()\n            .accountId(\"my-custom-sa\")\n            .displayName(\"Custom SA for VM Instance\")\n            .build());\n\n        var confidentialInstanceTemplate = new InstanceTemplate(\"confidentialInstanceTemplate\", InstanceTemplateArgs.builder()\n            .networkInterfaces(InstanceTemplateNetworkInterfaceArgs.builder()\n                .accessConfigs()\n                .network(\"default\")\n                .build())\n            .name(\"my-confidential-instance-template\")\n            .region(\"us-central1\")\n            .machineType(\"n2d-standard-2\")\n            .minCpuPlatform(\"AMD Milan\")\n            .confidentialInstanceConfig(InstanceTemplateConfidentialInstanceConfigArgs.builder()\n                .enableConfidentialCompute(true)\n                .confidentialInstanceType(\"SEV\")\n                .build())\n            .disks(InstanceTemplateDiskArgs.builder()\n                .sourceImage(\"ubuntu-os-cloud/ubuntu-2004-lts\")\n                .build())\n            .serviceAccount(InstanceTemplateServiceAccountArgs.builder()\n                .email(default_.email())\n                .scopes(\"cloud-platform\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  default:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-custom-sa\n      displayName: Custom SA for VM Instance\n  confidentialInstanceTemplate:\n    type: gcp:compute:InstanceTemplate\n    name: confidential_instance_template\n    properties:\n      networkInterfaces:\n        - accessConfigs:\n            - {}\n          network: default\n      name: my-confidential-instance-template\n      region: us-central1\n      machineType: n2d-standard-2\n      minCpuPlatform: AMD Milan\n      confidentialInstanceConfig:\n        enableConfidentialCompute: true\n        confidentialInstanceType: SEV\n      disks:\n        - sourceImage: ubuntu-os-cloud/ubuntu-2004-lts\n      serviceAccount:\n        email: ${default.email}\n        scopes:\n          - cloud-platform\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Deploying the Latest Image\n\nA common way to use instance templates and managed instance groups is to deploy the\nlatest image in a family, usually the latest build of your application. There are two\nways to do this in the provider, and they have their pros and cons. The difference ends\nup being in how \"latest\" is interpreted. You can either deploy the latest image available\nwhen the provider runs, or you can have each instance check what the latest image is when\nit's being created, either as part of a scaling event or being rebuilt by the instance\ngroup manager.\n\nIf you're not sure, we recommend deploying the latest image available when the provider runs,\nbecause this means all the instances in your group will be based on the same image, always,\nand means that no upgrades or changes to your instances happen outside of a `pulumi up`.\nYou can achieve this by using the `gcp.compute.Image`\ndata source, which will retrieve the latest image on every `pulumi apply`, and will update\nthe template to use that specific image:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst myImage = gcp.compute.getImage({\n    family: \"debian-11\",\n    project: \"debian-cloud\",\n});\nconst instanceTemplate = new gcp.compute.InstanceTemplate(\"instance_template\", {\n    namePrefix: \"instance-template-\",\n    machineType: \"e2-medium\",\n    region: \"us-central1\",\n    disks: [{\n        sourceImage: myImage.then(myImage =\u003e myImage.selfLink),\n    }],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_image = gcp.compute.get_image(family=\"debian-11\",\n    project=\"debian-cloud\")\ninstance_template = gcp.compute.InstanceTemplate(\"instance_template\",\n    name_prefix=\"instance-template-\",\n    machine_type=\"e2-medium\",\n    region=\"us-central1\",\n    disks=[{\n        \"source_image\": my_image.self_link,\n    }])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myImage = Gcp.Compute.GetImage.Invoke(new()\n    {\n        Family = \"debian-11\",\n        Project = \"debian-cloud\",\n    });\n\n    var instanceTemplate = new Gcp.Compute.InstanceTemplate(\"instance_template\", new()\n    {\n        NamePrefix = \"instance-template-\",\n        MachineType = \"e2-medium\",\n        Region = \"us-central1\",\n        Disks = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceTemplateDiskArgs\n            {\n                SourceImage = myImage.Apply(getImageResult =\u003e getImageResult.SelfLink),\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmyImage, err := compute.LookupImage(ctx, \u0026compute.LookupImageArgs{\n\t\t\tFamily:  pulumi.StringRef(\"debian-11\"),\n\t\t\tProject: pulumi.StringRef(\"debian-cloud\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewInstanceTemplate(ctx, \"instance_template\", \u0026compute.InstanceTemplateArgs{\n\t\t\tNamePrefix:  pulumi.String(\"instance-template-\"),\n\t\t\tMachineType: pulumi.String(\"e2-medium\"),\n\t\t\tRegion:      pulumi.String(\"us-central1\"),\n\t\t\tDisks: compute.InstanceTemplateDiskArray{\n\t\t\t\t\u0026compute.InstanceTemplateDiskArgs{\n\t\t\t\t\tSourceImage: pulumi.String(myImage.SelfLink),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetImageArgs;\nimport com.pulumi.gcp.compute.InstanceTemplate;\nimport com.pulumi.gcp.compute.InstanceTemplateArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateDiskArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var myImage = ComputeFunctions.getImage(GetImageArgs.builder()\n            .family(\"debian-11\")\n            .project(\"debian-cloud\")\n            .build());\n\n        var instanceTemplate = new InstanceTemplate(\"instanceTemplate\", InstanceTemplateArgs.builder()\n            .namePrefix(\"instance-template-\")\n            .machineType(\"e2-medium\")\n            .region(\"us-central1\")\n            .disks(InstanceTemplateDiskArgs.builder()\n                .sourceImage(myImage.applyValue(getImageResult -\u003e getImageResult.selfLink()))\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  instanceTemplate:\n    type: gcp:compute:InstanceTemplate\n    name: instance_template\n    properties:\n      namePrefix: instance-template-\n      machineType: e2-medium\n      region: us-central1\n      disks:\n        - sourceImage: ${myImage.selfLink}\nvariables:\n  myImage:\n    fn::invoke:\n      function: gcp:compute:getImage\n      arguments:\n        family: debian-11\n        project: debian-cloud\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\nTo have instances update to the latest on every scaling event or instance re-creation,\nuse the family as the image for the disk, and it will use GCP's default behavior, setting\nthe image for the template to the family:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst instanceTemplate = new gcp.compute.InstanceTemplate(\"instance_template\", {\n    namePrefix: \"instance-template-\",\n    machineType: \"e2-medium\",\n    region: \"us-central1\",\n    disks: [{\n        sourceImage: \"debian-cloud/debian-11\",\n    }],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ninstance_template = gcp.compute.InstanceTemplate(\"instance_template\",\n    name_prefix=\"instance-template-\",\n    machine_type=\"e2-medium\",\n    region=\"us-central1\",\n    disks=[{\n        \"source_image\": \"debian-cloud/debian-11\",\n    }])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var instanceTemplate = new Gcp.Compute.InstanceTemplate(\"instance_template\", new()\n    {\n        NamePrefix = \"instance-template-\",\n        MachineType = \"e2-medium\",\n        Region = \"us-central1\",\n        Disks = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceTemplateDiskArgs\n            {\n                SourceImage = \"debian-cloud/debian-11\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.NewInstanceTemplate(ctx, \"instance_template\", \u0026compute.InstanceTemplateArgs{\n\t\t\tNamePrefix:  pulumi.String(\"instance-template-\"),\n\t\t\tMachineType: pulumi.String(\"e2-medium\"),\n\t\t\tRegion:      pulumi.String(\"us-central1\"),\n\t\t\tDisks: compute.InstanceTemplateDiskArray{\n\t\t\t\t\u0026compute.InstanceTemplateDiskArgs{\n\t\t\t\t\tSourceImage: pulumi.String(\"debian-cloud/debian-11\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.InstanceTemplate;\nimport com.pulumi.gcp.compute.InstanceTemplateArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceTemplateDiskArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var instanceTemplate = new InstanceTemplate(\"instanceTemplate\", InstanceTemplateArgs.builder()\n            .namePrefix(\"instance-template-\")\n            .machineType(\"e2-medium\")\n            .region(\"us-central1\")\n            .disks(InstanceTemplateDiskArgs.builder()\n                .sourceImage(\"debian-cloud/debian-11\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  instanceTemplate:\n    type: gcp:compute:InstanceTemplate\n    name: instance_template\n    properties:\n      namePrefix: instance-template-\n      machineType: e2-medium\n      region: us-central1\n      disks:\n        - sourceImage: debian-cloud/debian-11\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nInstance templates can be imported using any of these accepted formats:\n\n* `projects/{{project}}/global/instanceTemplates/{{name}}`\n\n* `{{project}}/{{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, instance templates can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:compute/instanceTemplate:InstanceTemplate default projects/{{project}}/global/instanceTemplates/{{name}}\n```\n\n```sh\n$ pulumi import gcp:compute/instanceTemplate:InstanceTemplate default {{project}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:compute/instanceTemplate:InstanceTemplate default {{name}}\n```\n\n",
             "properties": {
                 "advancedMachineFeatures": {
                     "$ref": "#/types/gcp:compute/InstanceTemplateAdvancedMachineFeatures:InstanceTemplateAdvancedMachineFeatures",
@@ -188075,7 +188075,7 @@
             }
         },
         "gcp:compute/targetInstance:TargetInstance": {
-            "description": "Represents a TargetInstance resource which defines an endpoint instance\nthat terminates traffic of certain protocols. In particular, they are used\nin Protocol Forwarding, where forwarding rules can send packets to a\nnon-NAT'ed target instance. Each target instance contains a single\nvirtual machine instance that receives and handles traffic from the\ncorresponding forwarding rules.\n\n\nTo get more information about TargetInstance, see:\n\n* [API documentation](https://cloud.google.com/compute/docs/reference/v1/targetInstances)\n* How-to Guides\n    * [Using Protocol Forwarding](https://cloud.google.com/compute/docs/protocol-forwarding)\n\n## Example Usage\n\n### Target Instance Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst vmimage = gcp.compute.getImage({\n    family: \"debian-11\",\n    project: \"debian-cloud\",\n});\nconst target_vm = new gcp.compute.Instance(\"target-vm\", {\n    name: \"target-vm\",\n    machineType: \"e2-medium\",\n    zone: \"us-central1-a\",\n    bootDisk: {\n        initializeParams: {\n            image: vmimage.then(vmimage =\u003e vmimage.selfLink),\n        },\n    },\n    networkInterfaces: [{\n        network: \"default\",\n    }],\n});\nconst _default = new gcp.compute.TargetInstance(\"default\", {\n    name: \"target\",\n    instance: target_vm.id,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nvmimage = gcp.compute.get_image(family=\"debian-11\",\n    project=\"debian-cloud\")\ntarget_vm = gcp.compute.Instance(\"target-vm\",\n    name=\"target-vm\",\n    machine_type=\"e2-medium\",\n    zone=\"us-central1-a\",\n    boot_disk={\n        \"initialize_params\": {\n            \"image\": vmimage.self_link,\n        },\n    },\n    network_interfaces=[{\n        \"network\": \"default\",\n    }])\ndefault = gcp.compute.TargetInstance(\"default\",\n    name=\"target\",\n    instance=target_vm.id)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var vmimage = Gcp.Compute.GetImage.Invoke(new()\n    {\n        Family = \"debian-11\",\n        Project = \"debian-cloud\",\n    });\n\n    var target_vm = new Gcp.Compute.Instance(\"target-vm\", new()\n    {\n        Name = \"target-vm\",\n        MachineType = \"e2-medium\",\n        Zone = \"us-central1-a\",\n        BootDisk = new Gcp.Compute.Inputs.InstanceBootDiskArgs\n        {\n            InitializeParams = new Gcp.Compute.Inputs.InstanceBootDiskInitializeParamsArgs\n            {\n                Image = vmimage.Apply(getImageResult =\u003e getImageResult.SelfLink),\n            },\n        },\n        NetworkInterfaces = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceNetworkInterfaceArgs\n            {\n                Network = \"default\",\n            },\n        },\n    });\n\n    var @default = new Gcp.Compute.TargetInstance(\"default\", new()\n    {\n        Name = \"target\",\n        Instance = target_vm.Id,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tvmimage, err := compute.LookupImage(ctx, \u0026compute.LookupImageArgs{\n\t\t\tFamily:  pulumi.StringRef(\"debian-11\"),\n\t\t\tProject: pulumi.StringRef(\"debian-cloud\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewInstance(ctx, \"target-vm\", \u0026compute.InstanceArgs{\n\t\t\tName:        pulumi.String(\"target-vm\"),\n\t\t\tMachineType: pulumi.String(\"e2-medium\"),\n\t\t\tZone:        pulumi.String(\"us-central1-a\"),\n\t\t\tBootDisk: \u0026compute.InstanceBootDiskArgs{\n\t\t\t\tInitializeParams: \u0026compute.InstanceBootDiskInitializeParamsArgs{\n\t\t\t\t\tImage: pulumi.String(vmimage.SelfLink),\n\t\t\t\t},\n\t\t\t},\n\t\t\tNetworkInterfaces: compute.InstanceNetworkInterfaceArray{\n\t\t\t\t\u0026compute.InstanceNetworkInterfaceArgs{\n\t\t\t\t\tNetwork: pulumi.String(\"default\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewTargetInstance(ctx, \"default\", \u0026compute.TargetInstanceArgs{\n\t\t\tName:     pulumi.String(\"target\"),\n\t\t\tInstance: target_vm.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetImageArgs;\nimport com.pulumi.gcp.compute.Instance;\nimport com.pulumi.gcp.compute.InstanceArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceBootDiskArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceBootDiskInitializeParamsArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceNetworkInterfaceArgs;\nimport com.pulumi.gcp.compute.TargetInstance;\nimport com.pulumi.gcp.compute.TargetInstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var vmimage = ComputeFunctions.getImage(GetImageArgs.builder()\n            .family(\"debian-11\")\n            .project(\"debian-cloud\")\n            .build());\n\n        var target_vm = new Instance(\"target-vm\", InstanceArgs.builder()\n            .name(\"target-vm\")\n            .machineType(\"e2-medium\")\n            .zone(\"us-central1-a\")\n            .bootDisk(InstanceBootDiskArgs.builder()\n                .initializeParams(InstanceBootDiskInitializeParamsArgs.builder()\n                    .image(vmimage.applyValue(getImageResult -\u003e getImageResult.selfLink()))\n                    .build())\n                .build())\n            .networkInterfaces(InstanceNetworkInterfaceArgs.builder()\n                .network(\"default\")\n                .build())\n            .build());\n\n        var default_ = new TargetInstance(\"default\", TargetInstanceArgs.builder()\n            .name(\"target\")\n            .instance(target_vm.id())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  default:\n    type: gcp:compute:TargetInstance\n    properties:\n      name: target\n      instance: ${[\"target-vm\"].id}\n  target-vm:\n    type: gcp:compute:Instance\n    properties:\n      name: target-vm\n      machineType: e2-medium\n      zone: us-central1-a\n      bootDisk:\n        initializeParams:\n          image: ${vmimage.selfLink}\n      networkInterfaces:\n        - network: default\nvariables:\n  vmimage:\n    fn::invoke:\n      function: gcp:compute:getImage\n      arguments:\n        family: debian-11\n        project: debian-cloud\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Target Instance Custom Network\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst target-vm = gcp.compute.getNetwork({\n    name: \"default\",\n});\nconst vmimage = gcp.compute.getImage({\n    family: \"debian-12\",\n    project: \"debian-cloud\",\n});\nconst target_vmInstance = new gcp.compute.Instance(\"target-vm\", {\n    name: \"custom-network-target-vm\",\n    machineType: \"e2-medium\",\n    zone: \"us-central1-a\",\n    bootDisk: {\n        initializeParams: {\n            image: vmimage.then(vmimage =\u003e vmimage.selfLink),\n        },\n    },\n    networkInterfaces: [{\n        network: \"default\",\n    }],\n});\nconst customNetwork = new gcp.compute.TargetInstance(\"custom_network\", {\n    name: \"custom-network\",\n    instance: target_vmInstance.id,\n    network: target_vm.then(target_vm =\u003e target_vm.selfLink),\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ntarget_vm = gcp.compute.get_network(name=\"default\")\nvmimage = gcp.compute.get_image(family=\"debian-12\",\n    project=\"debian-cloud\")\ntarget_vm_instance = gcp.compute.Instance(\"target-vm\",\n    name=\"custom-network-target-vm\",\n    machine_type=\"e2-medium\",\n    zone=\"us-central1-a\",\n    boot_disk={\n        \"initialize_params\": {\n            \"image\": vmimage.self_link,\n        },\n    },\n    network_interfaces=[{\n        \"network\": \"default\",\n    }])\ncustom_network = gcp.compute.TargetInstance(\"custom_network\",\n    name=\"custom-network\",\n    instance=target_vm_instance.id,\n    network=target_vm.self_link)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var target_vm = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"default\",\n    });\n\n    var vmimage = Gcp.Compute.GetImage.Invoke(new()\n    {\n        Family = \"debian-12\",\n        Project = \"debian-cloud\",\n    });\n\n    var target_vmInstance = new Gcp.Compute.Instance(\"target-vm\", new()\n    {\n        Name = \"custom-network-target-vm\",\n        MachineType = \"e2-medium\",\n        Zone = \"us-central1-a\",\n        BootDisk = new Gcp.Compute.Inputs.InstanceBootDiskArgs\n        {\n            InitializeParams = new Gcp.Compute.Inputs.InstanceBootDiskInitializeParamsArgs\n            {\n                Image = vmimage.Apply(getImageResult =\u003e getImageResult.SelfLink),\n            },\n        },\n        NetworkInterfaces = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceNetworkInterfaceArgs\n            {\n                Network = \"default\",\n            },\n        },\n    });\n\n    var customNetwork = new Gcp.Compute.TargetInstance(\"custom_network\", new()\n    {\n        Name = \"custom-network\",\n        Instance = target_vmInstance.Id,\n        Network = target_vm.Apply(target_vm =\u003e target_vm.Apply(getNetworkResult =\u003e getNetworkResult.SelfLink)),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\ttarget_vm, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName: \"default\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tvmimage, err := compute.LookupImage(ctx, \u0026compute.LookupImageArgs{\n\t\t\tFamily:  pulumi.StringRef(\"debian-12\"),\n\t\t\tProject: pulumi.StringRef(\"debian-cloud\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewInstance(ctx, \"target-vm\", \u0026compute.InstanceArgs{\n\t\t\tName:        pulumi.String(\"custom-network-target-vm\"),\n\t\t\tMachineType: pulumi.String(\"e2-medium\"),\n\t\t\tZone:        pulumi.String(\"us-central1-a\"),\n\t\t\tBootDisk: \u0026compute.InstanceBootDiskArgs{\n\t\t\t\tInitializeParams: \u0026compute.InstanceBootDiskInitializeParamsArgs{\n\t\t\t\t\tImage: pulumi.String(vmimage.SelfLink),\n\t\t\t\t},\n\t\t\t},\n\t\t\tNetworkInterfaces: compute.InstanceNetworkInterfaceArray{\n\t\t\t\t\u0026compute.InstanceNetworkInterfaceArgs{\n\t\t\t\t\tNetwork: pulumi.String(\"default\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewTargetInstance(ctx, \"custom_network\", \u0026compute.TargetInstanceArgs{\n\t\t\tName:     pulumi.String(\"custom-network\"),\n\t\t\tInstance: target_vmInstance.ID(),\n\t\t\tNetwork:  pulumi.String(target_vm.SelfLink),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.compute.inputs.GetImageArgs;\nimport com.pulumi.gcp.compute.Instance;\nimport com.pulumi.gcp.compute.InstanceArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceBootDiskArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceBootDiskInitializeParamsArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceNetworkInterfaceArgs;\nimport com.pulumi.gcp.compute.TargetInstance;\nimport com.pulumi.gcp.compute.TargetInstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var target-vm = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"default\")\n            .build());\n\n        final var vmimage = ComputeFunctions.getImage(GetImageArgs.builder()\n            .family(\"debian-12\")\n            .project(\"debian-cloud\")\n            .build());\n\n        var target_vmInstance = new Instance(\"target-vmInstance\", InstanceArgs.builder()\n            .name(\"custom-network-target-vm\")\n            .machineType(\"e2-medium\")\n            .zone(\"us-central1-a\")\n            .bootDisk(InstanceBootDiskArgs.builder()\n                .initializeParams(InstanceBootDiskInitializeParamsArgs.builder()\n                    .image(vmimage.applyValue(getImageResult -\u003e getImageResult.selfLink()))\n                    .build())\n                .build())\n            .networkInterfaces(InstanceNetworkInterfaceArgs.builder()\n                .network(\"default\")\n                .build())\n            .build());\n\n        var customNetwork = new TargetInstance(\"customNetwork\", TargetInstanceArgs.builder()\n            .name(\"custom-network\")\n            .instance(target_vmInstance.id())\n            .network(target_vm.selfLink())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  customNetwork:\n    type: gcp:compute:TargetInstance\n    name: custom_network\n    properties:\n      name: custom-network\n      instance: ${[\"target-vmInstance\"].id}\n      network: ${[\"target-vm\"].selfLink}\n  target-vmInstance:\n    type: gcp:compute:Instance\n    name: target-vm\n    properties:\n      name: custom-network-target-vm\n      machineType: e2-medium\n      zone: us-central1-a\n      bootDisk:\n        initializeParams:\n          image: ${vmimage.selfLink}\n      networkInterfaces:\n        - network: default\nvariables:\n  target-vm:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: default\n  vmimage:\n    fn::invoke:\n      function: gcp:compute:getImage\n      arguments:\n        family: debian-12\n        project: debian-cloud\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Target Instance With Security Policy\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = new gcp.compute.Network(\"default\", {\n    name: \"custom-default-network\",\n    autoCreateSubnetworks: false,\n    routingMode: \"REGIONAL\",\n});\nconst defaultSubnetwork = new gcp.compute.Subnetwork(\"default\", {\n    name: \"custom-default-subnet\",\n    ipCidrRange: \"10.1.2.0/24\",\n    network: _default.id,\n    privateIpv6GoogleAccess: \"DISABLE_GOOGLE_ACCESS\",\n    purpose: \"PRIVATE\",\n    region: \"southamerica-west1\",\n    stackType: \"IPV4_ONLY\",\n});\nconst vmimage = gcp.compute.getImage({\n    family: \"debian-11\",\n    project: \"debian-cloud\",\n});\nconst target_vm = new gcp.compute.Instance(\"target-vm\", {\n    networkInterfaces: [{\n        accessConfigs: [{}],\n        network: _default.selfLink,\n        subnetwork: defaultSubnetwork.selfLink,\n    }],\n    name: \"target-vm\",\n    machineType: \"e2-medium\",\n    zone: \"southamerica-west1-a\",\n    bootDisk: {\n        initializeParams: {\n            image: vmimage.then(vmimage =\u003e vmimage.selfLink),\n        },\n    },\n});\nconst policyddosprotection = new gcp.compute.RegionSecurityPolicy(\"policyddosprotection\", {\n    region: \"southamerica-west1\",\n    name: \"tf-test-policyddos_85794\",\n    description: \"ddos protection security policy to set target instance\",\n    type: \"CLOUD_ARMOR_NETWORK\",\n    ddosProtectionConfig: {\n        ddosProtection: \"ADVANCED_PREVIEW\",\n    },\n});\nconst edgeSecService = new gcp.compute.NetworkEdgeSecurityService(\"edge_sec_service\", {\n    region: \"southamerica-west1\",\n    name: \"tf-test-edgesec_21197\",\n    securityPolicy: policyddosprotection.selfLink,\n});\nconst regionsecuritypolicy = new gcp.compute.RegionSecurityPolicy(\"regionsecuritypolicy\", {\n    name: \"region-secpolicy\",\n    region: \"southamerica-west1\",\n    description: \"basic security policy for target instance\",\n    type: \"CLOUD_ARMOR_NETWORK\",\n}, {\n    dependsOn: [edgeSecService],\n});\nconst defaultTargetInstance = new gcp.compute.TargetInstance(\"default\", {\n    name: \"target-instance\",\n    zone: \"southamerica-west1-a\",\n    instance: target_vm.id,\n    securityPolicy: regionsecuritypolicy.selfLink,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.Network(\"default\",\n    name=\"custom-default-network\",\n    auto_create_subnetworks=False,\n    routing_mode=\"REGIONAL\")\ndefault_subnetwork = gcp.compute.Subnetwork(\"default\",\n    name=\"custom-default-subnet\",\n    ip_cidr_range=\"10.1.2.0/24\",\n    network=default.id,\n    private_ipv6_google_access=\"DISABLE_GOOGLE_ACCESS\",\n    purpose=\"PRIVATE\",\n    region=\"southamerica-west1\",\n    stack_type=\"IPV4_ONLY\")\nvmimage = gcp.compute.get_image(family=\"debian-11\",\n    project=\"debian-cloud\")\ntarget_vm = gcp.compute.Instance(\"target-vm\",\n    network_interfaces=[{\n        \"access_configs\": [{}],\n        \"network\": default.self_link,\n        \"subnetwork\": default_subnetwork.self_link,\n    }],\n    name=\"target-vm\",\n    machine_type=\"e2-medium\",\n    zone=\"southamerica-west1-a\",\n    boot_disk={\n        \"initialize_params\": {\n            \"image\": vmimage.self_link,\n        },\n    })\npolicyddosprotection = gcp.compute.RegionSecurityPolicy(\"policyddosprotection\",\n    region=\"southamerica-west1\",\n    name=\"tf-test-policyddos_85794\",\n    description=\"ddos protection security policy to set target instance\",\n    type=\"CLOUD_ARMOR_NETWORK\",\n    ddos_protection_config={\n        \"ddos_protection\": \"ADVANCED_PREVIEW\",\n    })\nedge_sec_service = gcp.compute.NetworkEdgeSecurityService(\"edge_sec_service\",\n    region=\"southamerica-west1\",\n    name=\"tf-test-edgesec_21197\",\n    security_policy=policyddosprotection.self_link)\nregionsecuritypolicy = gcp.compute.RegionSecurityPolicy(\"regionsecuritypolicy\",\n    name=\"region-secpolicy\",\n    region=\"southamerica-west1\",\n    description=\"basic security policy for target instance\",\n    type=\"CLOUD_ARMOR_NETWORK\",\n    opts = pulumi.ResourceOptions(depends_on=[edge_sec_service]))\ndefault_target_instance = gcp.compute.TargetInstance(\"default\",\n    name=\"target-instance\",\n    zone=\"southamerica-west1-a\",\n    instance=target_vm.id,\n    security_policy=regionsecuritypolicy.self_link)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = new Gcp.Compute.Network(\"default\", new()\n    {\n        Name = \"custom-default-network\",\n        AutoCreateSubnetworks = false,\n        RoutingMode = \"REGIONAL\",\n    });\n\n    var defaultSubnetwork = new Gcp.Compute.Subnetwork(\"default\", new()\n    {\n        Name = \"custom-default-subnet\",\n        IpCidrRange = \"10.1.2.0/24\",\n        Network = @default.Id,\n        PrivateIpv6GoogleAccess = \"DISABLE_GOOGLE_ACCESS\",\n        Purpose = \"PRIVATE\",\n        Region = \"southamerica-west1\",\n        StackType = \"IPV4_ONLY\",\n    });\n\n    var vmimage = Gcp.Compute.GetImage.Invoke(new()\n    {\n        Family = \"debian-11\",\n        Project = \"debian-cloud\",\n    });\n\n    var target_vm = new Gcp.Compute.Instance(\"target-vm\", new()\n    {\n        NetworkInterfaces = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceNetworkInterfaceArgs\n            {\n                AccessConfigs = new[]\n                {\n                    null,\n                },\n                Network = @default.SelfLink,\n                Subnetwork = defaultSubnetwork.SelfLink,\n            },\n        },\n        Name = \"target-vm\",\n        MachineType = \"e2-medium\",\n        Zone = \"southamerica-west1-a\",\n        BootDisk = new Gcp.Compute.Inputs.InstanceBootDiskArgs\n        {\n            InitializeParams = new Gcp.Compute.Inputs.InstanceBootDiskInitializeParamsArgs\n            {\n                Image = vmimage.Apply(getImageResult =\u003e getImageResult.SelfLink),\n            },\n        },\n    });\n\n    var policyddosprotection = new Gcp.Compute.RegionSecurityPolicy(\"policyddosprotection\", new()\n    {\n        Region = \"southamerica-west1\",\n        Name = \"tf-test-policyddos_85794\",\n        Description = \"ddos protection security policy to set target instance\",\n        Type = \"CLOUD_ARMOR_NETWORK\",\n        DdosProtectionConfig = new Gcp.Compute.Inputs.RegionSecurityPolicyDdosProtectionConfigArgs\n        {\n            DdosProtection = \"ADVANCED_PREVIEW\",\n        },\n    });\n\n    var edgeSecService = new Gcp.Compute.NetworkEdgeSecurityService(\"edge_sec_service\", new()\n    {\n        Region = \"southamerica-west1\",\n        Name = \"tf-test-edgesec_21197\",\n        SecurityPolicy = policyddosprotection.SelfLink,\n    });\n\n    var regionsecuritypolicy = new Gcp.Compute.RegionSecurityPolicy(\"regionsecuritypolicy\", new()\n    {\n        Name = \"region-secpolicy\",\n        Region = \"southamerica-west1\",\n        Description = \"basic security policy for target instance\",\n        Type = \"CLOUD_ARMOR_NETWORK\",\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            edgeSecService,\n        },\n    });\n\n    var defaultTargetInstance = new Gcp.Compute.TargetInstance(\"default\", new()\n    {\n        Name = \"target-instance\",\n        Zone = \"southamerica-west1-a\",\n        Instance = target_vm.Id,\n        SecurityPolicy = regionsecuritypolicy.SelfLink,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.NewNetwork(ctx, \"default\", \u0026compute.NetworkArgs{\n\t\t\tName:                  pulumi.String(\"custom-default-network\"),\n\t\t\tAutoCreateSubnetworks: pulumi.Bool(false),\n\t\t\tRoutingMode:           pulumi.String(\"REGIONAL\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdefaultSubnetwork, err := compute.NewSubnetwork(ctx, \"default\", \u0026compute.SubnetworkArgs{\n\t\t\tName:                    pulumi.String(\"custom-default-subnet\"),\n\t\t\tIpCidrRange:             pulumi.String(\"10.1.2.0/24\"),\n\t\t\tNetwork:                 _default.ID(),\n\t\t\tPrivateIpv6GoogleAccess: pulumi.String(\"DISABLE_GOOGLE_ACCESS\"),\n\t\t\tPurpose:                 pulumi.String(\"PRIVATE\"),\n\t\t\tRegion:                  pulumi.String(\"southamerica-west1\"),\n\t\t\tStackType:               pulumi.String(\"IPV4_ONLY\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tvmimage, err := compute.LookupImage(ctx, \u0026compute.LookupImageArgs{\n\t\t\tFamily:  pulumi.StringRef(\"debian-11\"),\n\t\t\tProject: pulumi.StringRef(\"debian-cloud\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewInstance(ctx, \"target-vm\", \u0026compute.InstanceArgs{\n\t\t\tNetworkInterfaces: compute.InstanceNetworkInterfaceArray{\n\t\t\t\t\u0026compute.InstanceNetworkInterfaceArgs{\n\t\t\t\t\tAccessConfigs: compute.InstanceNetworkInterfaceAccessConfigArray{\n\t\t\t\t\t\t\u0026compute.InstanceNetworkInterfaceAccessConfigArgs{},\n\t\t\t\t\t},\n\t\t\t\t\tNetwork:    _default.SelfLink,\n\t\t\t\t\tSubnetwork: defaultSubnetwork.SelfLink,\n\t\t\t\t},\n\t\t\t},\n\t\t\tName:        pulumi.String(\"target-vm\"),\n\t\t\tMachineType: pulumi.String(\"e2-medium\"),\n\t\t\tZone:        pulumi.String(\"southamerica-west1-a\"),\n\t\t\tBootDisk: \u0026compute.InstanceBootDiskArgs{\n\t\t\t\tInitializeParams: \u0026compute.InstanceBootDiskInitializeParamsArgs{\n\t\t\t\t\tImage: pulumi.String(vmimage.SelfLink),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tpolicyddosprotection, err := compute.NewRegionSecurityPolicy(ctx, \"policyddosprotection\", \u0026compute.RegionSecurityPolicyArgs{\n\t\t\tRegion:      pulumi.String(\"southamerica-west1\"),\n\t\t\tName:        pulumi.String(\"tf-test-policyddos_85794\"),\n\t\t\tDescription: pulumi.String(\"ddos protection security policy to set target instance\"),\n\t\t\tType:        pulumi.String(\"CLOUD_ARMOR_NETWORK\"),\n\t\t\tDdosProtectionConfig: \u0026compute.RegionSecurityPolicyDdosProtectionConfigArgs{\n\t\t\t\tDdosProtection: pulumi.String(\"ADVANCED_PREVIEW\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tedgeSecService, err := compute.NewNetworkEdgeSecurityService(ctx, \"edge_sec_service\", \u0026compute.NetworkEdgeSecurityServiceArgs{\n\t\t\tRegion:         pulumi.String(\"southamerica-west1\"),\n\t\t\tName:           pulumi.String(\"tf-test-edgesec_21197\"),\n\t\t\tSecurityPolicy: policyddosprotection.SelfLink,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tregionsecuritypolicy, err := compute.NewRegionSecurityPolicy(ctx, \"regionsecuritypolicy\", \u0026compute.RegionSecurityPolicyArgs{\n\t\t\tName:        pulumi.String(\"region-secpolicy\"),\n\t\t\tRegion:      pulumi.String(\"southamerica-west1\"),\n\t\t\tDescription: pulumi.String(\"basic security policy for target instance\"),\n\t\t\tType:        pulumi.String(\"CLOUD_ARMOR_NETWORK\"),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tedgeSecService,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewTargetInstance(ctx, \"default\", \u0026compute.TargetInstanceArgs{\n\t\t\tName:           pulumi.String(\"target-instance\"),\n\t\t\tZone:           pulumi.String(\"southamerica-west1-a\"),\n\t\t\tInstance:       target_vm.ID(),\n\t\t\tSecurityPolicy: regionsecuritypolicy.SelfLink,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.Subnetwork;\nimport com.pulumi.gcp.compute.SubnetworkArgs;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetImageArgs;\nimport com.pulumi.gcp.compute.Instance;\nimport com.pulumi.gcp.compute.InstanceArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceNetworkInterfaceArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceBootDiskArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceBootDiskInitializeParamsArgs;\nimport com.pulumi.gcp.compute.RegionSecurityPolicy;\nimport com.pulumi.gcp.compute.RegionSecurityPolicyArgs;\nimport com.pulumi.gcp.compute.inputs.RegionSecurityPolicyDdosProtectionConfigArgs;\nimport com.pulumi.gcp.compute.NetworkEdgeSecurityService;\nimport com.pulumi.gcp.compute.NetworkEdgeSecurityServiceArgs;\nimport com.pulumi.gcp.compute.TargetInstance;\nimport com.pulumi.gcp.compute.TargetInstanceArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var default_ = new Network(\"default\", NetworkArgs.builder()\n            .name(\"custom-default-network\")\n            .autoCreateSubnetworks(false)\n            .routingMode(\"REGIONAL\")\n            .build());\n\n        var defaultSubnetwork = new Subnetwork(\"defaultSubnetwork\", SubnetworkArgs.builder()\n            .name(\"custom-default-subnet\")\n            .ipCidrRange(\"10.1.2.0/24\")\n            .network(default_.id())\n            .privateIpv6GoogleAccess(\"DISABLE_GOOGLE_ACCESS\")\n            .purpose(\"PRIVATE\")\n            .region(\"southamerica-west1\")\n            .stackType(\"IPV4_ONLY\")\n            .build());\n\n        final var vmimage = ComputeFunctions.getImage(GetImageArgs.builder()\n            .family(\"debian-11\")\n            .project(\"debian-cloud\")\n            .build());\n\n        var target_vm = new Instance(\"target-vm\", InstanceArgs.builder()\n            .networkInterfaces(InstanceNetworkInterfaceArgs.builder()\n                .accessConfigs()\n                .network(default_.selfLink())\n                .subnetwork(defaultSubnetwork.selfLink())\n                .build())\n            .name(\"target-vm\")\n            .machineType(\"e2-medium\")\n            .zone(\"southamerica-west1-a\")\n            .bootDisk(InstanceBootDiskArgs.builder()\n                .initializeParams(InstanceBootDiskInitializeParamsArgs.builder()\n                    .image(vmimage.applyValue(getImageResult -\u003e getImageResult.selfLink()))\n                    .build())\n                .build())\n            .build());\n\n        var policyddosprotection = new RegionSecurityPolicy(\"policyddosprotection\", RegionSecurityPolicyArgs.builder()\n            .region(\"southamerica-west1\")\n            .name(\"tf-test-policyddos_85794\")\n            .description(\"ddos protection security policy to set target instance\")\n            .type(\"CLOUD_ARMOR_NETWORK\")\n            .ddosProtectionConfig(RegionSecurityPolicyDdosProtectionConfigArgs.builder()\n                .ddosProtection(\"ADVANCED_PREVIEW\")\n                .build())\n            .build());\n\n        var edgeSecService = new NetworkEdgeSecurityService(\"edgeSecService\", NetworkEdgeSecurityServiceArgs.builder()\n            .region(\"southamerica-west1\")\n            .name(\"tf-test-edgesec_21197\")\n            .securityPolicy(policyddosprotection.selfLink())\n            .build());\n\n        var regionsecuritypolicy = new RegionSecurityPolicy(\"regionsecuritypolicy\", RegionSecurityPolicyArgs.builder()\n            .name(\"region-secpolicy\")\n            .region(\"southamerica-west1\")\n            .description(\"basic security policy for target instance\")\n            .type(\"CLOUD_ARMOR_NETWORK\")\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(edgeSecService)\n                .build());\n\n        var defaultTargetInstance = new TargetInstance(\"defaultTargetInstance\", TargetInstanceArgs.builder()\n            .name(\"target-instance\")\n            .zone(\"southamerica-west1-a\")\n            .instance(target_vm.id())\n            .securityPolicy(regionsecuritypolicy.selfLink())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  default:\n    type: gcp:compute:Network\n    properties:\n      name: custom-default-network\n      autoCreateSubnetworks: false\n      routingMode: REGIONAL\n  defaultSubnetwork:\n    type: gcp:compute:Subnetwork\n    name: default\n    properties:\n      name: custom-default-subnet\n      ipCidrRange: 10.1.2.0/24\n      network: ${default.id}\n      privateIpv6GoogleAccess: DISABLE_GOOGLE_ACCESS\n      purpose: PRIVATE\n      region: southamerica-west1\n      stackType: IPV4_ONLY\n  target-vm:\n    type: gcp:compute:Instance\n    properties:\n      networkInterfaces:\n        - accessConfigs:\n            - {}\n          network: ${default.selfLink}\n          subnetwork: ${defaultSubnetwork.selfLink}\n      name: target-vm\n      machineType: e2-medium\n      zone: southamerica-west1-a\n      bootDisk:\n        initializeParams:\n          image: ${vmimage.selfLink}\n  policyddosprotection:\n    type: gcp:compute:RegionSecurityPolicy\n    properties:\n      region: southamerica-west1\n      name: tf-test-policyddos_85794\n      description: ddos protection security policy to set target instance\n      type: CLOUD_ARMOR_NETWORK\n      ddosProtectionConfig:\n        ddosProtection: ADVANCED_PREVIEW\n  edgeSecService:\n    type: gcp:compute:NetworkEdgeSecurityService\n    name: edge_sec_service\n    properties:\n      region: southamerica-west1\n      name: tf-test-edgesec_21197\n      securityPolicy: ${policyddosprotection.selfLink}\n  regionsecuritypolicy:\n    type: gcp:compute:RegionSecurityPolicy\n    properties:\n      name: region-secpolicy\n      region: southamerica-west1\n      description: basic security policy for target instance\n      type: CLOUD_ARMOR_NETWORK\n    options:\n      dependsOn:\n        - ${edgeSecService}\n  defaultTargetInstance:\n    type: gcp:compute:TargetInstance\n    name: default\n    properties:\n      name: target-instance\n      zone: southamerica-west1-a\n      instance: ${[\"target-vm\"].id}\n      securityPolicy: ${regionsecuritypolicy.selfLink}\nvariables:\n  vmimage:\n    fn::invoke:\n      function: gcp:compute:getImage\n      arguments:\n        family: debian-11\n        project: debian-cloud\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nTargetInstance can be imported using any of these accepted formats:\n\n* `projects/{{project}}/zones/{{zone}}/targetInstances/{{name}}`\n\n* `{{project}}/{{zone}}/{{name}}`\n\n* `{{zone}}/{{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, TargetInstance can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:compute/targetInstance:TargetInstance default projects/{{project}}/zones/{{zone}}/targetInstances/{{name}}\n```\n\n```sh\n$ pulumi import gcp:compute/targetInstance:TargetInstance default {{project}}/{{zone}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:compute/targetInstance:TargetInstance default {{zone}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:compute/targetInstance:TargetInstance default {{name}}\n```\n\n",
+            "description": "Represents a TargetInstance resource which defines an endpoint instance\nthat terminates traffic of certain protocols. In particular, they are used\nin Protocol Forwarding, where forwarding rules can send packets to a\nnon-NAT'ed target instance. Each target instance contains a single\nvirtual machine instance that receives and handles traffic from the\ncorresponding forwarding rules.\n\n\nTo get more information about TargetInstance, see:\n\n* [API documentation](https://cloud.google.com/compute/docs/reference/v1/targetInstances)\n* How-to Guides\n    * [Using Protocol Forwarding](https://cloud.google.com/compute/docs/protocol-forwarding)\n\n## Example Usage\n\n### Target Instance Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst vmimage = gcp.compute.getImage({\n    family: \"debian-11\",\n    project: \"debian-cloud\",\n});\nconst target_vm = new gcp.compute.Instance(\"target-vm\", {\n    name: \"target-vm\",\n    machineType: \"e2-medium\",\n    zone: \"us-central1-a\",\n    bootDisk: {\n        initializeParams: {\n            image: vmimage.then(vmimage =\u003e vmimage.selfLink),\n        },\n    },\n    networkInterfaces: [{\n        network: \"default\",\n    }],\n});\nconst _default = new gcp.compute.TargetInstance(\"default\", {\n    name: \"target\",\n    instance: target_vm.id,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nvmimage = gcp.compute.get_image(family=\"debian-11\",\n    project=\"debian-cloud\")\ntarget_vm = gcp.compute.Instance(\"target-vm\",\n    name=\"target-vm\",\n    machine_type=\"e2-medium\",\n    zone=\"us-central1-a\",\n    boot_disk={\n        \"initialize_params\": {\n            \"image\": vmimage.self_link,\n        },\n    },\n    network_interfaces=[{\n        \"network\": \"default\",\n    }])\ndefault = gcp.compute.TargetInstance(\"default\",\n    name=\"target\",\n    instance=target_vm.id)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var vmimage = Gcp.Compute.GetImage.Invoke(new()\n    {\n        Family = \"debian-11\",\n        Project = \"debian-cloud\",\n    });\n\n    var target_vm = new Gcp.Compute.Instance(\"target-vm\", new()\n    {\n        Name = \"target-vm\",\n        MachineType = \"e2-medium\",\n        Zone = \"us-central1-a\",\n        BootDisk = new Gcp.Compute.Inputs.InstanceBootDiskArgs\n        {\n            InitializeParams = new Gcp.Compute.Inputs.InstanceBootDiskInitializeParamsArgs\n            {\n                Image = vmimage.Apply(getImageResult =\u003e getImageResult.SelfLink),\n            },\n        },\n        NetworkInterfaces = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceNetworkInterfaceArgs\n            {\n                Network = \"default\",\n            },\n        },\n    });\n\n    var @default = new Gcp.Compute.TargetInstance(\"default\", new()\n    {\n        Name = \"target\",\n        Instance = target_vm.Id,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tvmimage, err := compute.LookupImage(ctx, \u0026compute.LookupImageArgs{\n\t\t\tFamily:  pulumi.StringRef(\"debian-11\"),\n\t\t\tProject: pulumi.StringRef(\"debian-cloud\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewInstance(ctx, \"target-vm\", \u0026compute.InstanceArgs{\n\t\t\tName:        pulumi.String(\"target-vm\"),\n\t\t\tMachineType: pulumi.String(\"e2-medium\"),\n\t\t\tZone:        pulumi.String(\"us-central1-a\"),\n\t\t\tBootDisk: \u0026compute.InstanceBootDiskArgs{\n\t\t\t\tInitializeParams: \u0026compute.InstanceBootDiskInitializeParamsArgs{\n\t\t\t\t\tImage: pulumi.String(vmimage.SelfLink),\n\t\t\t\t},\n\t\t\t},\n\t\t\tNetworkInterfaces: compute.InstanceNetworkInterfaceArray{\n\t\t\t\t\u0026compute.InstanceNetworkInterfaceArgs{\n\t\t\t\t\tNetwork: pulumi.String(\"default\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewTargetInstance(ctx, \"default\", \u0026compute.TargetInstanceArgs{\n\t\t\tName:     pulumi.String(\"target\"),\n\t\t\tInstance: target_vm.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetImageArgs;\nimport com.pulumi.gcp.compute.Instance;\nimport com.pulumi.gcp.compute.InstanceArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceBootDiskArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceBootDiskInitializeParamsArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceNetworkInterfaceArgs;\nimport com.pulumi.gcp.compute.TargetInstance;\nimport com.pulumi.gcp.compute.TargetInstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var vmimage = ComputeFunctions.getImage(GetImageArgs.builder()\n            .family(\"debian-11\")\n            .project(\"debian-cloud\")\n            .build());\n\n        var target_vm = new Instance(\"target-vm\", InstanceArgs.builder()\n            .name(\"target-vm\")\n            .machineType(\"e2-medium\")\n            .zone(\"us-central1-a\")\n            .bootDisk(InstanceBootDiskArgs.builder()\n                .initializeParams(InstanceBootDiskInitializeParamsArgs.builder()\n                    .image(vmimage.applyValue(getImageResult -\u003e getImageResult.selfLink()))\n                    .build())\n                .build())\n            .networkInterfaces(InstanceNetworkInterfaceArgs.builder()\n                .network(\"default\")\n                .build())\n            .build());\n\n        var default_ = new TargetInstance(\"default\", TargetInstanceArgs.builder()\n            .name(\"target\")\n            .instance(target_vm.id())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  default:\n    type: gcp:compute:TargetInstance\n    properties:\n      name: target\n      instance: ${[\"target-vm\"].id}\n  target-vm:\n    type: gcp:compute:Instance\n    properties:\n      name: target-vm\n      machineType: e2-medium\n      zone: us-central1-a\n      bootDisk:\n        initializeParams:\n          image: ${vmimage.selfLink}\n      networkInterfaces:\n        - network: default\nvariables:\n  vmimage:\n    fn::invoke:\n      function: gcp:compute:getImage\n      arguments:\n        family: debian-11\n        project: debian-cloud\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Target Instance Custom Network\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst target_vm = gcp.compute.getNetwork({\n    name: \"default\",\n});\nconst vmimage = gcp.compute.getImage({\n    family: \"debian-12\",\n    project: \"debian-cloud\",\n});\nconst target_vmInstance = new gcp.compute.Instance(\"target-vm\", {\n    name: \"custom-network-target-vm\",\n    machineType: \"e2-medium\",\n    zone: \"us-central1-a\",\n    bootDisk: {\n        initializeParams: {\n            image: vmimage.then(vmimage =\u003e vmimage.selfLink),\n        },\n    },\n    networkInterfaces: [{\n        network: \"default\",\n    }],\n});\nconst customNetwork = new gcp.compute.TargetInstance(\"custom_network\", {\n    name: \"custom-network\",\n    instance: target_vmInstance.id,\n    network: target_vm.then(target_vm =\u003e target_vm.selfLink),\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ntarget_vm = gcp.compute.get_network(name=\"default\")\nvmimage = gcp.compute.get_image(family=\"debian-12\",\n    project=\"debian-cloud\")\ntarget_vm_instance = gcp.compute.Instance(\"target-vm\",\n    name=\"custom-network-target-vm\",\n    machine_type=\"e2-medium\",\n    zone=\"us-central1-a\",\n    boot_disk={\n        \"initialize_params\": {\n            \"image\": vmimage.self_link,\n        },\n    },\n    network_interfaces=[{\n        \"network\": \"default\",\n    }])\ncustom_network = gcp.compute.TargetInstance(\"custom_network\",\n    name=\"custom-network\",\n    instance=target_vm_instance.id,\n    network=target_vm.self_link)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var target_vm = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"default\",\n    });\n\n    var vmimage = Gcp.Compute.GetImage.Invoke(new()\n    {\n        Family = \"debian-12\",\n        Project = \"debian-cloud\",\n    });\n\n    var target_vmInstance = new Gcp.Compute.Instance(\"target-vm\", new()\n    {\n        Name = \"custom-network-target-vm\",\n        MachineType = \"e2-medium\",\n        Zone = \"us-central1-a\",\n        BootDisk = new Gcp.Compute.Inputs.InstanceBootDiskArgs\n        {\n            InitializeParams = new Gcp.Compute.Inputs.InstanceBootDiskInitializeParamsArgs\n            {\n                Image = vmimage.Apply(getImageResult =\u003e getImageResult.SelfLink),\n            },\n        },\n        NetworkInterfaces = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceNetworkInterfaceArgs\n            {\n                Network = \"default\",\n            },\n        },\n    });\n\n    var customNetwork = new Gcp.Compute.TargetInstance(\"custom_network\", new()\n    {\n        Name = \"custom-network\",\n        Instance = target_vmInstance.Id,\n        Network = target_vm.Apply(target_vm =\u003e target_vm.Apply(getNetworkResult =\u003e getNetworkResult.SelfLink)),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\ttarget_vm, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName: \"default\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tvmimage, err := compute.LookupImage(ctx, \u0026compute.LookupImageArgs{\n\t\t\tFamily:  pulumi.StringRef(\"debian-12\"),\n\t\t\tProject: pulumi.StringRef(\"debian-cloud\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewInstance(ctx, \"target-vm\", \u0026compute.InstanceArgs{\n\t\t\tName:        pulumi.String(\"custom-network-target-vm\"),\n\t\t\tMachineType: pulumi.String(\"e2-medium\"),\n\t\t\tZone:        pulumi.String(\"us-central1-a\"),\n\t\t\tBootDisk: \u0026compute.InstanceBootDiskArgs{\n\t\t\t\tInitializeParams: \u0026compute.InstanceBootDiskInitializeParamsArgs{\n\t\t\t\t\tImage: pulumi.String(vmimage.SelfLink),\n\t\t\t\t},\n\t\t\t},\n\t\t\tNetworkInterfaces: compute.InstanceNetworkInterfaceArray{\n\t\t\t\t\u0026compute.InstanceNetworkInterfaceArgs{\n\t\t\t\t\tNetwork: pulumi.String(\"default\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewTargetInstance(ctx, \"custom_network\", \u0026compute.TargetInstanceArgs{\n\t\t\tName:     pulumi.String(\"custom-network\"),\n\t\t\tInstance: target_vmInstance.ID(),\n\t\t\tNetwork:  pulumi.String(target_vm.SelfLink),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.compute.inputs.GetImageArgs;\nimport com.pulumi.gcp.compute.Instance;\nimport com.pulumi.gcp.compute.InstanceArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceBootDiskArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceBootDiskInitializeParamsArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceNetworkInterfaceArgs;\nimport com.pulumi.gcp.compute.TargetInstance;\nimport com.pulumi.gcp.compute.TargetInstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var target-vm = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"default\")\n            .build());\n\n        final var vmimage = ComputeFunctions.getImage(GetImageArgs.builder()\n            .family(\"debian-12\")\n            .project(\"debian-cloud\")\n            .build());\n\n        var target_vmInstance = new Instance(\"target-vmInstance\", InstanceArgs.builder()\n            .name(\"custom-network-target-vm\")\n            .machineType(\"e2-medium\")\n            .zone(\"us-central1-a\")\n            .bootDisk(InstanceBootDiskArgs.builder()\n                .initializeParams(InstanceBootDiskInitializeParamsArgs.builder()\n                    .image(vmimage.applyValue(getImageResult -\u003e getImageResult.selfLink()))\n                    .build())\n                .build())\n            .networkInterfaces(InstanceNetworkInterfaceArgs.builder()\n                .network(\"default\")\n                .build())\n            .build());\n\n        var customNetwork = new TargetInstance(\"customNetwork\", TargetInstanceArgs.builder()\n            .name(\"custom-network\")\n            .instance(target_vmInstance.id())\n            .network(target_vm.selfLink())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  customNetwork:\n    type: gcp:compute:TargetInstance\n    name: custom_network\n    properties:\n      name: custom-network\n      instance: ${[\"target-vmInstance\"].id}\n      network: ${[\"target-vm\"].selfLink}\n  target-vmInstance:\n    type: gcp:compute:Instance\n    name: target-vm\n    properties:\n      name: custom-network-target-vm\n      machineType: e2-medium\n      zone: us-central1-a\n      bootDisk:\n        initializeParams:\n          image: ${vmimage.selfLink}\n      networkInterfaces:\n        - network: default\nvariables:\n  target-vm:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: default\n  vmimage:\n    fn::invoke:\n      function: gcp:compute:getImage\n      arguments:\n        family: debian-12\n        project: debian-cloud\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Target Instance With Security Policy\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = new gcp.compute.Network(\"default\", {\n    name: \"custom-default-network\",\n    autoCreateSubnetworks: false,\n    routingMode: \"REGIONAL\",\n});\nconst defaultSubnetwork = new gcp.compute.Subnetwork(\"default\", {\n    name: \"custom-default-subnet\",\n    ipCidrRange: \"10.1.2.0/24\",\n    network: _default.id,\n    privateIpv6GoogleAccess: \"DISABLE_GOOGLE_ACCESS\",\n    purpose: \"PRIVATE\",\n    region: \"southamerica-west1\",\n    stackType: \"IPV4_ONLY\",\n});\nconst vmimage = gcp.compute.getImage({\n    family: \"debian-11\",\n    project: \"debian-cloud\",\n});\nconst target_vm = new gcp.compute.Instance(\"target-vm\", {\n    networkInterfaces: [{\n        accessConfigs: [{}],\n        network: _default.selfLink,\n        subnetwork: defaultSubnetwork.selfLink,\n    }],\n    name: \"target-vm\",\n    machineType: \"e2-medium\",\n    zone: \"southamerica-west1-a\",\n    bootDisk: {\n        initializeParams: {\n            image: vmimage.then(vmimage =\u003e vmimage.selfLink),\n        },\n    },\n});\nconst policyddosprotection = new gcp.compute.RegionSecurityPolicy(\"policyddosprotection\", {\n    region: \"southamerica-west1\",\n    name: \"tf-test-policyddos_85794\",\n    description: \"ddos protection security policy to set target instance\",\n    type: \"CLOUD_ARMOR_NETWORK\",\n    ddosProtectionConfig: {\n        ddosProtection: \"ADVANCED_PREVIEW\",\n    },\n});\nconst edgeSecService = new gcp.compute.NetworkEdgeSecurityService(\"edge_sec_service\", {\n    region: \"southamerica-west1\",\n    name: \"tf-test-edgesec_21197\",\n    securityPolicy: policyddosprotection.selfLink,\n});\nconst regionsecuritypolicy = new gcp.compute.RegionSecurityPolicy(\"regionsecuritypolicy\", {\n    name: \"region-secpolicy\",\n    region: \"southamerica-west1\",\n    description: \"basic security policy for target instance\",\n    type: \"CLOUD_ARMOR_NETWORK\",\n}, {\n    dependsOn: [edgeSecService],\n});\nconst defaultTargetInstance = new gcp.compute.TargetInstance(\"default\", {\n    name: \"target-instance\",\n    zone: \"southamerica-west1-a\",\n    instance: target_vm.id,\n    securityPolicy: regionsecuritypolicy.selfLink,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.Network(\"default\",\n    name=\"custom-default-network\",\n    auto_create_subnetworks=False,\n    routing_mode=\"REGIONAL\")\ndefault_subnetwork = gcp.compute.Subnetwork(\"default\",\n    name=\"custom-default-subnet\",\n    ip_cidr_range=\"10.1.2.0/24\",\n    network=default.id,\n    private_ipv6_google_access=\"DISABLE_GOOGLE_ACCESS\",\n    purpose=\"PRIVATE\",\n    region=\"southamerica-west1\",\n    stack_type=\"IPV4_ONLY\")\nvmimage = gcp.compute.get_image(family=\"debian-11\",\n    project=\"debian-cloud\")\ntarget_vm = gcp.compute.Instance(\"target-vm\",\n    network_interfaces=[{\n        \"access_configs\": [{}],\n        \"network\": default.self_link,\n        \"subnetwork\": default_subnetwork.self_link,\n    }],\n    name=\"target-vm\",\n    machine_type=\"e2-medium\",\n    zone=\"southamerica-west1-a\",\n    boot_disk={\n        \"initialize_params\": {\n            \"image\": vmimage.self_link,\n        },\n    })\npolicyddosprotection = gcp.compute.RegionSecurityPolicy(\"policyddosprotection\",\n    region=\"southamerica-west1\",\n    name=\"tf-test-policyddos_85794\",\n    description=\"ddos protection security policy to set target instance\",\n    type=\"CLOUD_ARMOR_NETWORK\",\n    ddos_protection_config={\n        \"ddos_protection\": \"ADVANCED_PREVIEW\",\n    })\nedge_sec_service = gcp.compute.NetworkEdgeSecurityService(\"edge_sec_service\",\n    region=\"southamerica-west1\",\n    name=\"tf-test-edgesec_21197\",\n    security_policy=policyddosprotection.self_link)\nregionsecuritypolicy = gcp.compute.RegionSecurityPolicy(\"regionsecuritypolicy\",\n    name=\"region-secpolicy\",\n    region=\"southamerica-west1\",\n    description=\"basic security policy for target instance\",\n    type=\"CLOUD_ARMOR_NETWORK\",\n    opts = pulumi.ResourceOptions(depends_on=[edge_sec_service]))\ndefault_target_instance = gcp.compute.TargetInstance(\"default\",\n    name=\"target-instance\",\n    zone=\"southamerica-west1-a\",\n    instance=target_vm.id,\n    security_policy=regionsecuritypolicy.self_link)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = new Gcp.Compute.Network(\"default\", new()\n    {\n        Name = \"custom-default-network\",\n        AutoCreateSubnetworks = false,\n        RoutingMode = \"REGIONAL\",\n    });\n\n    var defaultSubnetwork = new Gcp.Compute.Subnetwork(\"default\", new()\n    {\n        Name = \"custom-default-subnet\",\n        IpCidrRange = \"10.1.2.0/24\",\n        Network = @default.Id,\n        PrivateIpv6GoogleAccess = \"DISABLE_GOOGLE_ACCESS\",\n        Purpose = \"PRIVATE\",\n        Region = \"southamerica-west1\",\n        StackType = \"IPV4_ONLY\",\n    });\n\n    var vmimage = Gcp.Compute.GetImage.Invoke(new()\n    {\n        Family = \"debian-11\",\n        Project = \"debian-cloud\",\n    });\n\n    var target_vm = new Gcp.Compute.Instance(\"target-vm\", new()\n    {\n        NetworkInterfaces = new[]\n        {\n            new Gcp.Compute.Inputs.InstanceNetworkInterfaceArgs\n            {\n                AccessConfigs = new[]\n                {\n                    null,\n                },\n                Network = @default.SelfLink,\n                Subnetwork = defaultSubnetwork.SelfLink,\n            },\n        },\n        Name = \"target-vm\",\n        MachineType = \"e2-medium\",\n        Zone = \"southamerica-west1-a\",\n        BootDisk = new Gcp.Compute.Inputs.InstanceBootDiskArgs\n        {\n            InitializeParams = new Gcp.Compute.Inputs.InstanceBootDiskInitializeParamsArgs\n            {\n                Image = vmimage.Apply(getImageResult =\u003e getImageResult.SelfLink),\n            },\n        },\n    });\n\n    var policyddosprotection = new Gcp.Compute.RegionSecurityPolicy(\"policyddosprotection\", new()\n    {\n        Region = \"southamerica-west1\",\n        Name = \"tf-test-policyddos_85794\",\n        Description = \"ddos protection security policy to set target instance\",\n        Type = \"CLOUD_ARMOR_NETWORK\",\n        DdosProtectionConfig = new Gcp.Compute.Inputs.RegionSecurityPolicyDdosProtectionConfigArgs\n        {\n            DdosProtection = \"ADVANCED_PREVIEW\",\n        },\n    });\n\n    var edgeSecService = new Gcp.Compute.NetworkEdgeSecurityService(\"edge_sec_service\", new()\n    {\n        Region = \"southamerica-west1\",\n        Name = \"tf-test-edgesec_21197\",\n        SecurityPolicy = policyddosprotection.SelfLink,\n    });\n\n    var regionsecuritypolicy = new Gcp.Compute.RegionSecurityPolicy(\"regionsecuritypolicy\", new()\n    {\n        Name = \"region-secpolicy\",\n        Region = \"southamerica-west1\",\n        Description = \"basic security policy for target instance\",\n        Type = \"CLOUD_ARMOR_NETWORK\",\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            edgeSecService,\n        },\n    });\n\n    var defaultTargetInstance = new Gcp.Compute.TargetInstance(\"default\", new()\n    {\n        Name = \"target-instance\",\n        Zone = \"southamerica-west1-a\",\n        Instance = target_vm.Id,\n        SecurityPolicy = regionsecuritypolicy.SelfLink,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.NewNetwork(ctx, \"default\", \u0026compute.NetworkArgs{\n\t\t\tName:                  pulumi.String(\"custom-default-network\"),\n\t\t\tAutoCreateSubnetworks: pulumi.Bool(false),\n\t\t\tRoutingMode:           pulumi.String(\"REGIONAL\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdefaultSubnetwork, err := compute.NewSubnetwork(ctx, \"default\", \u0026compute.SubnetworkArgs{\n\t\t\tName:                    pulumi.String(\"custom-default-subnet\"),\n\t\t\tIpCidrRange:             pulumi.String(\"10.1.2.0/24\"),\n\t\t\tNetwork:                 _default.ID(),\n\t\t\tPrivateIpv6GoogleAccess: pulumi.String(\"DISABLE_GOOGLE_ACCESS\"),\n\t\t\tPurpose:                 pulumi.String(\"PRIVATE\"),\n\t\t\tRegion:                  pulumi.String(\"southamerica-west1\"),\n\t\t\tStackType:               pulumi.String(\"IPV4_ONLY\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tvmimage, err := compute.LookupImage(ctx, \u0026compute.LookupImageArgs{\n\t\t\tFamily:  pulumi.StringRef(\"debian-11\"),\n\t\t\tProject: pulumi.StringRef(\"debian-cloud\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewInstance(ctx, \"target-vm\", \u0026compute.InstanceArgs{\n\t\t\tNetworkInterfaces: compute.InstanceNetworkInterfaceArray{\n\t\t\t\t\u0026compute.InstanceNetworkInterfaceArgs{\n\t\t\t\t\tAccessConfigs: compute.InstanceNetworkInterfaceAccessConfigArray{\n\t\t\t\t\t\t\u0026compute.InstanceNetworkInterfaceAccessConfigArgs{},\n\t\t\t\t\t},\n\t\t\t\t\tNetwork:    _default.SelfLink,\n\t\t\t\t\tSubnetwork: defaultSubnetwork.SelfLink,\n\t\t\t\t},\n\t\t\t},\n\t\t\tName:        pulumi.String(\"target-vm\"),\n\t\t\tMachineType: pulumi.String(\"e2-medium\"),\n\t\t\tZone:        pulumi.String(\"southamerica-west1-a\"),\n\t\t\tBootDisk: \u0026compute.InstanceBootDiskArgs{\n\t\t\t\tInitializeParams: \u0026compute.InstanceBootDiskInitializeParamsArgs{\n\t\t\t\t\tImage: pulumi.String(vmimage.SelfLink),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tpolicyddosprotection, err := compute.NewRegionSecurityPolicy(ctx, \"policyddosprotection\", \u0026compute.RegionSecurityPolicyArgs{\n\t\t\tRegion:      pulumi.String(\"southamerica-west1\"),\n\t\t\tName:        pulumi.String(\"tf-test-policyddos_85794\"),\n\t\t\tDescription: pulumi.String(\"ddos protection security policy to set target instance\"),\n\t\t\tType:        pulumi.String(\"CLOUD_ARMOR_NETWORK\"),\n\t\t\tDdosProtectionConfig: \u0026compute.RegionSecurityPolicyDdosProtectionConfigArgs{\n\t\t\t\tDdosProtection: pulumi.String(\"ADVANCED_PREVIEW\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tedgeSecService, err := compute.NewNetworkEdgeSecurityService(ctx, \"edge_sec_service\", \u0026compute.NetworkEdgeSecurityServiceArgs{\n\t\t\tRegion:         pulumi.String(\"southamerica-west1\"),\n\t\t\tName:           pulumi.String(\"tf-test-edgesec_21197\"),\n\t\t\tSecurityPolicy: policyddosprotection.SelfLink,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tregionsecuritypolicy, err := compute.NewRegionSecurityPolicy(ctx, \"regionsecuritypolicy\", \u0026compute.RegionSecurityPolicyArgs{\n\t\t\tName:        pulumi.String(\"region-secpolicy\"),\n\t\t\tRegion:      pulumi.String(\"southamerica-west1\"),\n\t\t\tDescription: pulumi.String(\"basic security policy for target instance\"),\n\t\t\tType:        pulumi.String(\"CLOUD_ARMOR_NETWORK\"),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tedgeSecService,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewTargetInstance(ctx, \"default\", \u0026compute.TargetInstanceArgs{\n\t\t\tName:           pulumi.String(\"target-instance\"),\n\t\t\tZone:           pulumi.String(\"southamerica-west1-a\"),\n\t\t\tInstance:       target_vm.ID(),\n\t\t\tSecurityPolicy: regionsecuritypolicy.SelfLink,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.Subnetwork;\nimport com.pulumi.gcp.compute.SubnetworkArgs;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetImageArgs;\nimport com.pulumi.gcp.compute.Instance;\nimport com.pulumi.gcp.compute.InstanceArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceNetworkInterfaceArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceBootDiskArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceBootDiskInitializeParamsArgs;\nimport com.pulumi.gcp.compute.RegionSecurityPolicy;\nimport com.pulumi.gcp.compute.RegionSecurityPolicyArgs;\nimport com.pulumi.gcp.compute.inputs.RegionSecurityPolicyDdosProtectionConfigArgs;\nimport com.pulumi.gcp.compute.NetworkEdgeSecurityService;\nimport com.pulumi.gcp.compute.NetworkEdgeSecurityServiceArgs;\nimport com.pulumi.gcp.compute.TargetInstance;\nimport com.pulumi.gcp.compute.TargetInstanceArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var default_ = new Network(\"default\", NetworkArgs.builder()\n            .name(\"custom-default-network\")\n            .autoCreateSubnetworks(false)\n            .routingMode(\"REGIONAL\")\n            .build());\n\n        var defaultSubnetwork = new Subnetwork(\"defaultSubnetwork\", SubnetworkArgs.builder()\n            .name(\"custom-default-subnet\")\n            .ipCidrRange(\"10.1.2.0/24\")\n            .network(default_.id())\n            .privateIpv6GoogleAccess(\"DISABLE_GOOGLE_ACCESS\")\n            .purpose(\"PRIVATE\")\n            .region(\"southamerica-west1\")\n            .stackType(\"IPV4_ONLY\")\n            .build());\n\n        final var vmimage = ComputeFunctions.getImage(GetImageArgs.builder()\n            .family(\"debian-11\")\n            .project(\"debian-cloud\")\n            .build());\n\n        var target_vm = new Instance(\"target-vm\", InstanceArgs.builder()\n            .networkInterfaces(InstanceNetworkInterfaceArgs.builder()\n                .accessConfigs()\n                .network(default_.selfLink())\n                .subnetwork(defaultSubnetwork.selfLink())\n                .build())\n            .name(\"target-vm\")\n            .machineType(\"e2-medium\")\n            .zone(\"southamerica-west1-a\")\n            .bootDisk(InstanceBootDiskArgs.builder()\n                .initializeParams(InstanceBootDiskInitializeParamsArgs.builder()\n                    .image(vmimage.applyValue(getImageResult -\u003e getImageResult.selfLink()))\n                    .build())\n                .build())\n            .build());\n\n        var policyddosprotection = new RegionSecurityPolicy(\"policyddosprotection\", RegionSecurityPolicyArgs.builder()\n            .region(\"southamerica-west1\")\n            .name(\"tf-test-policyddos_85794\")\n            .description(\"ddos protection security policy to set target instance\")\n            .type(\"CLOUD_ARMOR_NETWORK\")\n            .ddosProtectionConfig(RegionSecurityPolicyDdosProtectionConfigArgs.builder()\n                .ddosProtection(\"ADVANCED_PREVIEW\")\n                .build())\n            .build());\n\n        var edgeSecService = new NetworkEdgeSecurityService(\"edgeSecService\", NetworkEdgeSecurityServiceArgs.builder()\n            .region(\"southamerica-west1\")\n            .name(\"tf-test-edgesec_21197\")\n            .securityPolicy(policyddosprotection.selfLink())\n            .build());\n\n        var regionsecuritypolicy = new RegionSecurityPolicy(\"regionsecuritypolicy\", RegionSecurityPolicyArgs.builder()\n            .name(\"region-secpolicy\")\n            .region(\"southamerica-west1\")\n            .description(\"basic security policy for target instance\")\n            .type(\"CLOUD_ARMOR_NETWORK\")\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(edgeSecService)\n                .build());\n\n        var defaultTargetInstance = new TargetInstance(\"defaultTargetInstance\", TargetInstanceArgs.builder()\n            .name(\"target-instance\")\n            .zone(\"southamerica-west1-a\")\n            .instance(target_vm.id())\n            .securityPolicy(regionsecuritypolicy.selfLink())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  default:\n    type: gcp:compute:Network\n    properties:\n      name: custom-default-network\n      autoCreateSubnetworks: false\n      routingMode: REGIONAL\n  defaultSubnetwork:\n    type: gcp:compute:Subnetwork\n    name: default\n    properties:\n      name: custom-default-subnet\n      ipCidrRange: 10.1.2.0/24\n      network: ${default.id}\n      privateIpv6GoogleAccess: DISABLE_GOOGLE_ACCESS\n      purpose: PRIVATE\n      region: southamerica-west1\n      stackType: IPV4_ONLY\n  target-vm:\n    type: gcp:compute:Instance\n    properties:\n      networkInterfaces:\n        - accessConfigs:\n            - {}\n          network: ${default.selfLink}\n          subnetwork: ${defaultSubnetwork.selfLink}\n      name: target-vm\n      machineType: e2-medium\n      zone: southamerica-west1-a\n      bootDisk:\n        initializeParams:\n          image: ${vmimage.selfLink}\n  policyddosprotection:\n    type: gcp:compute:RegionSecurityPolicy\n    properties:\n      region: southamerica-west1\n      name: tf-test-policyddos_85794\n      description: ddos protection security policy to set target instance\n      type: CLOUD_ARMOR_NETWORK\n      ddosProtectionConfig:\n        ddosProtection: ADVANCED_PREVIEW\n  edgeSecService:\n    type: gcp:compute:NetworkEdgeSecurityService\n    name: edge_sec_service\n    properties:\n      region: southamerica-west1\n      name: tf-test-edgesec_21197\n      securityPolicy: ${policyddosprotection.selfLink}\n  regionsecuritypolicy:\n    type: gcp:compute:RegionSecurityPolicy\n    properties:\n      name: region-secpolicy\n      region: southamerica-west1\n      description: basic security policy for target instance\n      type: CLOUD_ARMOR_NETWORK\n    options:\n      dependsOn:\n        - ${edgeSecService}\n  defaultTargetInstance:\n    type: gcp:compute:TargetInstance\n    name: default\n    properties:\n      name: target-instance\n      zone: southamerica-west1-a\n      instance: ${[\"target-vm\"].id}\n      securityPolicy: ${regionsecuritypolicy.selfLink}\nvariables:\n  vmimage:\n    fn::invoke:\n      function: gcp:compute:getImage\n      arguments:\n        family: debian-11\n        project: debian-cloud\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nTargetInstance can be imported using any of these accepted formats:\n\n* `projects/{{project}}/zones/{{zone}}/targetInstances/{{name}}`\n\n* `{{project}}/{{zone}}/{{name}}`\n\n* `{{zone}}/{{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, TargetInstance can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:compute/targetInstance:TargetInstance default projects/{{project}}/zones/{{zone}}/targetInstances/{{name}}\n```\n\n```sh\n$ pulumi import gcp:compute/targetInstance:TargetInstance default {{project}}/{{zone}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:compute/targetInstance:TargetInstance default {{zone}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:compute/targetInstance:TargetInstance default {{name}}\n```\n\n",
             "properties": {
                 "creationTimestamp": {
                     "type": "string",
@@ -197378,7 +197378,7 @@
             }
         },
         "gcp:datafusion/instance:Instance": {
-            "description": "Represents a Data Fusion instance.\n\n\nTo get more information about Instance, see:\n\n* [API documentation](https://cloud.google.com/data-fusion/docs/reference/rest/v1beta1/projects.locations.instances)\n* How-to Guides\n    * [Official Documentation](https://cloud.google.com/data-fusion/docs/)\n\n## Example Usage\n\n### Data Fusion Instance Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst basicInstance = new gcp.datafusion.Instance(\"basic_instance\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nbasic_instance = gcp.datafusion.Instance(\"basic_instance\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicInstance = new Gcp.DataFusion.Instance(\"basic_instance\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"basic_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var basicInstance = new Instance(\"basicInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  basicInstance:\n    type: gcp:datafusion:Instance\n    name: basic_instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Full\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.appengine.getDefaultServiceAccount({});\nconst network = new gcp.compute.Network(\"network\", {name: \"datafusion-full-network\"});\nconst privateIpAlloc = new gcp.compute.GlobalAddress(\"private_ip_alloc\", {\n    name: \"datafusion-ip-alloc\",\n    addressType: \"INTERNAL\",\n    purpose: \"VPC_PEERING\",\n    prefixLength: 22,\n    network: network.id,\n});\nconst extendedInstance = new gcp.datafusion.Instance(\"extended_instance\", {\n    name: \"my-instance\",\n    description: \"My Data Fusion instance\",\n    displayName: \"My Data Fusion instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    enableStackdriverLogging: true,\n    enableStackdriverMonitoring: true,\n    privateInstance: true,\n    dataprocServiceAccount: _default.then(_default =\u003e _default.email),\n    labels: {\n        example_key: \"example_value\",\n    },\n    networkConfig: {\n        network: \"default\",\n        ipAllocation: pulumi.interpolate`${privateIpAlloc.address}/${privateIpAlloc.prefixLength}`,\n    },\n    accelerators: [{\n        acceleratorType: \"CDC\",\n        state: \"ENABLED\",\n    }],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.appengine.get_default_service_account()\nnetwork = gcp.compute.Network(\"network\", name=\"datafusion-full-network\")\nprivate_ip_alloc = gcp.compute.GlobalAddress(\"private_ip_alloc\",\n    name=\"datafusion-ip-alloc\",\n    address_type=\"INTERNAL\",\n    purpose=\"VPC_PEERING\",\n    prefix_length=22,\n    network=network.id)\nextended_instance = gcp.datafusion.Instance(\"extended_instance\",\n    name=\"my-instance\",\n    description=\"My Data Fusion instance\",\n    display_name=\"My Data Fusion instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    enable_stackdriver_logging=True,\n    enable_stackdriver_monitoring=True,\n    private_instance=True,\n    dataproc_service_account=default.email,\n    labels={\n        \"example_key\": \"example_value\",\n    },\n    network_config={\n        \"network\": \"default\",\n        \"ip_allocation\": pulumi.Output.all(\n            address=private_ip_alloc.address,\n            prefix_length=private_ip_alloc.prefix_length\n).apply(lambda resolved_outputs: f\"{resolved_outputs['address']}/{resolved_outputs['prefix_length']}\")\n,\n    },\n    accelerators=[{\n        \"accelerator_type\": \"CDC\",\n        \"state\": \"ENABLED\",\n    }])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.AppEngine.GetDefaultServiceAccount.Invoke();\n\n    var network = new Gcp.Compute.Network(\"network\", new()\n    {\n        Name = \"datafusion-full-network\",\n    });\n\n    var privateIpAlloc = new Gcp.Compute.GlobalAddress(\"private_ip_alloc\", new()\n    {\n        Name = \"datafusion-ip-alloc\",\n        AddressType = \"INTERNAL\",\n        Purpose = \"VPC_PEERING\",\n        PrefixLength = 22,\n        Network = network.Id,\n    });\n\n    var extendedInstance = new Gcp.DataFusion.Instance(\"extended_instance\", new()\n    {\n        Name = \"my-instance\",\n        Description = \"My Data Fusion instance\",\n        DisplayName = \"My Data Fusion instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        EnableStackdriverLogging = true,\n        EnableStackdriverMonitoring = true,\n        PrivateInstance = true,\n        DataprocServiceAccount = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Email)),\n        Labels = \n        {\n            { \"example_key\", \"example_value\" },\n        },\n        NetworkConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigArgs\n        {\n            Network = \"default\",\n            IpAllocation = Output.Tuple(privateIpAlloc.Address, privateIpAlloc.PrefixLength).Apply(values =\u003e\n            {\n                var address = values.Item1;\n                var prefixLength = values.Item2;\n                return $\"{address}/{prefixLength}\";\n            }),\n        },\n        Accelerators = new[]\n        {\n            new Gcp.DataFusion.Inputs.InstanceAcceleratorArgs\n            {\n                AcceleratorType = \"CDC\",\n                State = \"ENABLED\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/appengine\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := appengine.GetDefaultServiceAccount(ctx, \u0026appengine.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tnetwork, err := compute.NewNetwork(ctx, \"network\", \u0026compute.NetworkArgs{\n\t\t\tName: pulumi.String(\"datafusion-full-network\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tprivateIpAlloc, err := compute.NewGlobalAddress(ctx, \"private_ip_alloc\", \u0026compute.GlobalAddressArgs{\n\t\t\tName:         pulumi.String(\"datafusion-ip-alloc\"),\n\t\t\tAddressType:  pulumi.String(\"INTERNAL\"),\n\t\t\tPurpose:      pulumi.String(\"VPC_PEERING\"),\n\t\t\tPrefixLength: pulumi.Int(22),\n\t\t\tNetwork:      network.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"extended_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:                        pulumi.String(\"my-instance\"),\n\t\t\tDescription:                 pulumi.String(\"My Data Fusion instance\"),\n\t\t\tDisplayName:                 pulumi.String(\"My Data Fusion instance\"),\n\t\t\tRegion:                      pulumi.String(\"us-central1\"),\n\t\t\tType:                        pulumi.String(\"BASIC\"),\n\t\t\tEnableStackdriverLogging:    pulumi.Bool(true),\n\t\t\tEnableStackdriverMonitoring: pulumi.Bool(true),\n\t\t\tPrivateInstance:             pulumi.Bool(true),\n\t\t\tDataprocServiceAccount:      pulumi.String(_default.Email),\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"example_key\": pulumi.String(\"example_value\"),\n\t\t\t},\n\t\t\tNetworkConfig: \u0026datafusion.InstanceNetworkConfigArgs{\n\t\t\t\tNetwork: pulumi.String(\"default\"),\n\t\t\t\tIpAllocation: pulumi.All(privateIpAlloc.Address, privateIpAlloc.PrefixLength).ApplyT(func(_args []interface{}) (string, error) {\n\t\t\t\t\taddress := _args[0].(string)\n\t\t\t\t\tprefixLength := _args[1].(int)\n\t\t\t\t\treturn fmt.Sprintf(\"%v/%v\", address, prefixLength), nil\n\t\t\t\t}).(pulumi.StringOutput),\n\t\t\t},\n\t\t\tAccelerators: datafusion.InstanceAcceleratorArray{\n\t\t\t\t\u0026datafusion.InstanceAcceleratorArgs{\n\t\t\t\t\tAcceleratorType: pulumi.String(\"CDC\"),\n\t\t\t\t\tState:           pulumi.String(\"ENABLED\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.appengine.AppengineFunctions;\nimport com.pulumi.gcp.appengine.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.GlobalAddress;\nimport com.pulumi.gcp.compute.GlobalAddressArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceAcceleratorArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = AppengineFunctions.getDefaultServiceAccount();\n\n        var network = new Network(\"network\", NetworkArgs.builder()\n            .name(\"datafusion-full-network\")\n            .build());\n\n        var privateIpAlloc = new GlobalAddress(\"privateIpAlloc\", GlobalAddressArgs.builder()\n            .name(\"datafusion-ip-alloc\")\n            .addressType(\"INTERNAL\")\n            .purpose(\"VPC_PEERING\")\n            .prefixLength(22)\n            .network(network.id())\n            .build());\n\n        var extendedInstance = new Instance(\"extendedInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .description(\"My Data Fusion instance\")\n            .displayName(\"My Data Fusion instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .enableStackdriverLogging(true)\n            .enableStackdriverMonitoring(true)\n            .privateInstance(true)\n            .dataprocServiceAccount(default_.email())\n            .labels(Map.of(\"example_key\", \"example_value\"))\n            .networkConfig(InstanceNetworkConfigArgs.builder()\n                .network(\"default\")\n                .ipAllocation(Output.tuple(privateIpAlloc.address(), privateIpAlloc.prefixLength()).applyValue(values -\u003e {\n                    var address = values.t1;\n                    var prefixLength = values.t2;\n                    return String.format(\"%s/%s\", address,prefixLength);\n                }))\n                .build())\n            .accelerators(InstanceAcceleratorArgs.builder()\n                .acceleratorType(\"CDC\")\n                .state(\"ENABLED\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  extendedInstance:\n    type: gcp:datafusion:Instance\n    name: extended_instance\n    properties:\n      name: my-instance\n      description: My Data Fusion instance\n      displayName: My Data Fusion instance\n      region: us-central1\n      type: BASIC\n      enableStackdriverLogging: true\n      enableStackdriverMonitoring: true\n      privateInstance: true\n      dataprocServiceAccount: ${default.email}\n      labels:\n        example_key: example_value\n      networkConfig:\n        network: default\n        ipAllocation: ${privateIpAlloc.address}/${privateIpAlloc.prefixLength}\n      accelerators:\n        - acceleratorType: CDC\n          state: ENABLED\n  network:\n    type: gcp:compute:Network\n    properties:\n      name: datafusion-full-network\n  privateIpAlloc:\n    type: gcp:compute:GlobalAddress\n    name: private_ip_alloc\n    properties:\n      name: datafusion-ip-alloc\n      addressType: INTERNAL\n      purpose: VPC_PEERING\n      prefixLength: 22\n      network: ${network.id}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:appengine:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Psc\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst psc = new gcp.compute.Network(\"psc\", {\n    name: \"datafusion-psc-network\",\n    autoCreateSubnetworks: false,\n});\nconst pscSubnetwork = new gcp.compute.Subnetwork(\"psc\", {\n    name: \"datafusion-psc-subnet\",\n    region: \"us-central1\",\n    network: psc.id,\n    ipCidrRange: \"10.0.0.0/16\",\n});\nconst pscNetworkAttachment = new gcp.compute.NetworkAttachment(\"psc\", {\n    name: \"datafusion-psc-attachment\",\n    region: \"us-central1\",\n    connectionPreference: \"ACCEPT_AUTOMATIC\",\n    subnetworks: [pscSubnetwork.selfLink],\n});\nconst pscInstance = new gcp.datafusion.Instance(\"psc_instance\", {\n    name: \"psc-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    privateInstance: true,\n    networkConfig: {\n        connectionType: \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n        privateServiceConnectConfig: {\n            networkAttachment: pscNetworkAttachment.id,\n            unreachableCidrBlock: \"192.168.0.0/25\",\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\npsc = gcp.compute.Network(\"psc\",\n    name=\"datafusion-psc-network\",\n    auto_create_subnetworks=False)\npsc_subnetwork = gcp.compute.Subnetwork(\"psc\",\n    name=\"datafusion-psc-subnet\",\n    region=\"us-central1\",\n    network=psc.id,\n    ip_cidr_range=\"10.0.0.0/16\")\npsc_network_attachment = gcp.compute.NetworkAttachment(\"psc\",\n    name=\"datafusion-psc-attachment\",\n    region=\"us-central1\",\n    connection_preference=\"ACCEPT_AUTOMATIC\",\n    subnetworks=[psc_subnetwork.self_link])\npsc_instance = gcp.datafusion.Instance(\"psc_instance\",\n    name=\"psc-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    private_instance=True,\n    network_config={\n        \"connection_type\": \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n        \"private_service_connect_config\": {\n            \"network_attachment\": psc_network_attachment.id,\n            \"unreachable_cidr_block\": \"192.168.0.0/25\",\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var psc = new Gcp.Compute.Network(\"psc\", new()\n    {\n        Name = \"datafusion-psc-network\",\n        AutoCreateSubnetworks = false,\n    });\n\n    var pscSubnetwork = new Gcp.Compute.Subnetwork(\"psc\", new()\n    {\n        Name = \"datafusion-psc-subnet\",\n        Region = \"us-central1\",\n        Network = psc.Id,\n        IpCidrRange = \"10.0.0.0/16\",\n    });\n\n    var pscNetworkAttachment = new Gcp.Compute.NetworkAttachment(\"psc\", new()\n    {\n        Name = \"datafusion-psc-attachment\",\n        Region = \"us-central1\",\n        ConnectionPreference = \"ACCEPT_AUTOMATIC\",\n        Subnetworks = new[]\n        {\n            pscSubnetwork.SelfLink,\n        },\n    });\n\n    var pscInstance = new Gcp.DataFusion.Instance(\"psc_instance\", new()\n    {\n        Name = \"psc-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        PrivateInstance = true,\n        NetworkConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigArgs\n        {\n            ConnectionType = \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n            PrivateServiceConnectConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigPrivateServiceConnectConfigArgs\n            {\n                NetworkAttachment = pscNetworkAttachment.Id,\n                UnreachableCidrBlock = \"192.168.0.0/25\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tpsc, err := compute.NewNetwork(ctx, \"psc\", \u0026compute.NetworkArgs{\n\t\t\tName:                  pulumi.String(\"datafusion-psc-network\"),\n\t\t\tAutoCreateSubnetworks: pulumi.Bool(false),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tpscSubnetwork, err := compute.NewSubnetwork(ctx, \"psc\", \u0026compute.SubnetworkArgs{\n\t\t\tName:        pulumi.String(\"datafusion-psc-subnet\"),\n\t\t\tRegion:      pulumi.String(\"us-central1\"),\n\t\t\tNetwork:     psc.ID(),\n\t\t\tIpCidrRange: pulumi.String(\"10.0.0.0/16\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tpscNetworkAttachment, err := compute.NewNetworkAttachment(ctx, \"psc\", \u0026compute.NetworkAttachmentArgs{\n\t\t\tName:                 pulumi.String(\"datafusion-psc-attachment\"),\n\t\t\tRegion:               pulumi.String(\"us-central1\"),\n\t\t\tConnectionPreference: pulumi.String(\"ACCEPT_AUTOMATIC\"),\n\t\t\tSubnetworks: pulumi.StringArray{\n\t\t\t\tpscSubnetwork.SelfLink,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"psc_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:            pulumi.String(\"psc-instance\"),\n\t\t\tRegion:          pulumi.String(\"us-central1\"),\n\t\t\tType:            pulumi.String(\"BASIC\"),\n\t\t\tPrivateInstance: pulumi.Bool(true),\n\t\t\tNetworkConfig: \u0026datafusion.InstanceNetworkConfigArgs{\n\t\t\t\tConnectionType: pulumi.String(\"PRIVATE_SERVICE_CONNECT_INTERFACES\"),\n\t\t\t\tPrivateServiceConnectConfig: \u0026datafusion.InstanceNetworkConfigPrivateServiceConnectConfigArgs{\n\t\t\t\t\tNetworkAttachment:    pscNetworkAttachment.ID(),\n\t\t\t\t\tUnreachableCidrBlock: pulumi.String(\"192.168.0.0/25\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.Subnetwork;\nimport com.pulumi.gcp.compute.SubnetworkArgs;\nimport com.pulumi.gcp.compute.NetworkAttachment;\nimport com.pulumi.gcp.compute.NetworkAttachmentArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigPrivateServiceConnectConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var psc = new Network(\"psc\", NetworkArgs.builder()\n            .name(\"datafusion-psc-network\")\n            .autoCreateSubnetworks(false)\n            .build());\n\n        var pscSubnetwork = new Subnetwork(\"pscSubnetwork\", SubnetworkArgs.builder()\n            .name(\"datafusion-psc-subnet\")\n            .region(\"us-central1\")\n            .network(psc.id())\n            .ipCidrRange(\"10.0.0.0/16\")\n            .build());\n\n        var pscNetworkAttachment = new NetworkAttachment(\"pscNetworkAttachment\", NetworkAttachmentArgs.builder()\n            .name(\"datafusion-psc-attachment\")\n            .region(\"us-central1\")\n            .connectionPreference(\"ACCEPT_AUTOMATIC\")\n            .subnetworks(pscSubnetwork.selfLink())\n            .build());\n\n        var pscInstance = new Instance(\"pscInstance\", InstanceArgs.builder()\n            .name(\"psc-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .privateInstance(true)\n            .networkConfig(InstanceNetworkConfigArgs.builder()\n                .connectionType(\"PRIVATE_SERVICE_CONNECT_INTERFACES\")\n                .privateServiceConnectConfig(InstanceNetworkConfigPrivateServiceConnectConfigArgs.builder()\n                    .networkAttachment(pscNetworkAttachment.id())\n                    .unreachableCidrBlock(\"192.168.0.0/25\")\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  pscInstance:\n    type: gcp:datafusion:Instance\n    name: psc_instance\n    properties:\n      name: psc-instance\n      region: us-central1\n      type: BASIC\n      privateInstance: true\n      networkConfig:\n        connectionType: PRIVATE_SERVICE_CONNECT_INTERFACES\n        privateServiceConnectConfig:\n          networkAttachment: ${pscNetworkAttachment.id}\n          unreachableCidrBlock: 192.168.0.0/25\n  psc:\n    type: gcp:compute:Network\n    properties:\n      name: datafusion-psc-network\n      autoCreateSubnetworks: false\n  pscSubnetwork:\n    type: gcp:compute:Subnetwork\n    name: psc\n    properties:\n      name: datafusion-psc-subnet\n      region: us-central1\n      network: ${psc.id}\n      ipCidrRange: 10.0.0.0/16\n  pscNetworkAttachment:\n    type: gcp:compute:NetworkAttachment\n    name: psc\n    properties:\n      name: datafusion-psc-attachment\n      region: us-central1\n      connectionPreference: ACCEPT_AUTOMATIC\n      subnetworks:\n        - ${pscSubnetwork.selfLink}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Cmek\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst keyRing = new gcp.kms.KeyRing(\"key_ring\", {\n    name: \"my-instance\",\n    location: \"us-central1\",\n});\nconst cryptoKey = new gcp.kms.CryptoKey(\"crypto_key\", {\n    name: \"my-instance\",\n    keyRing: keyRing.id,\n});\nconst project = gcp.organizations.getProject({});\nconst cryptoKeyMember = new gcp.kms.CryptoKeyIAMMember(\"crypto_key_member\", {\n    cryptoKeyId: cryptoKey.id,\n    role: \"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n    member: project.then(project =\u003e `serviceAccount:service-${project.number}@gcp-sa-datafusion.iam.gserviceaccount.com`),\n});\nconst cmek = new gcp.datafusion.Instance(\"cmek\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    cryptoKeyConfig: {\n        keyReference: cryptoKey.id,\n    },\n}, {\n    dependsOn: [cryptoKeyMember],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nkey_ring = gcp.kms.KeyRing(\"key_ring\",\n    name=\"my-instance\",\n    location=\"us-central1\")\ncrypto_key = gcp.kms.CryptoKey(\"crypto_key\",\n    name=\"my-instance\",\n    key_ring=key_ring.id)\nproject = gcp.organizations.get_project()\ncrypto_key_member = gcp.kms.CryptoKeyIAMMember(\"crypto_key_member\",\n    crypto_key_id=crypto_key.id,\n    role=\"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n    member=f\"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com\")\ncmek = gcp.datafusion.Instance(\"cmek\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    crypto_key_config={\n        \"key_reference\": crypto_key.id,\n    },\n    opts = pulumi.ResourceOptions(depends_on=[crypto_key_member]))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var keyRing = new Gcp.Kms.KeyRing(\"key_ring\", new()\n    {\n        Name = \"my-instance\",\n        Location = \"us-central1\",\n    });\n\n    var cryptoKey = new Gcp.Kms.CryptoKey(\"crypto_key\", new()\n    {\n        Name = \"my-instance\",\n        KeyRing = keyRing.Id,\n    });\n\n    var project = Gcp.Organizations.GetProject.Invoke();\n\n    var cryptoKeyMember = new Gcp.Kms.CryptoKeyIAMMember(\"crypto_key_member\", new()\n    {\n        CryptoKeyId = cryptoKey.Id,\n        Role = \"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n        Member = $\"serviceAccount:service-{project.Apply(getProjectResult =\u003e getProjectResult.Number)}@gcp-sa-datafusion.iam.gserviceaccount.com\",\n    });\n\n    var cmek = new Gcp.DataFusion.Instance(\"cmek\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        CryptoKeyConfig = new Gcp.DataFusion.Inputs.InstanceCryptoKeyConfigArgs\n        {\n            KeyReference = cryptoKey.Id,\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            cryptoKeyMember,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/kms\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tkeyRing, err := kms.NewKeyRing(ctx, \"key_ring\", \u0026kms.KeyRingArgs{\n\t\t\tName:     pulumi.String(\"my-instance\"),\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcryptoKey, err := kms.NewCryptoKey(ctx, \"crypto_key\", \u0026kms.CryptoKeyArgs{\n\t\t\tName:    pulumi.String(\"my-instance\"),\n\t\t\tKeyRing: keyRing.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tproject, err := organizations.LookupProject(ctx, \u0026organizations.LookupProjectArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcryptoKeyMember, err := kms.NewCryptoKeyIAMMember(ctx, \"crypto_key_member\", \u0026kms.CryptoKeyIAMMemberArgs{\n\t\t\tCryptoKeyId: cryptoKey.ID(),\n\t\t\tRole:        pulumi.String(\"roles/cloudkms.cryptoKeyEncrypterDecrypter\"),\n\t\t\tMember:      pulumi.Sprintf(\"serviceAccount:service-%v@gcp-sa-datafusion.iam.gserviceaccount.com\", project.Number),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"cmek\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t\tCryptoKeyConfig: \u0026datafusion.InstanceCryptoKeyConfigArgs{\n\t\t\t\tKeyReference: cryptoKey.ID(),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tcryptoKeyMember,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.kms.KeyRing;\nimport com.pulumi.gcp.kms.KeyRingArgs;\nimport com.pulumi.gcp.kms.CryptoKey;\nimport com.pulumi.gcp.kms.CryptoKeyArgs;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetProjectArgs;\nimport com.pulumi.gcp.kms.CryptoKeyIAMMember;\nimport com.pulumi.gcp.kms.CryptoKeyIAMMemberArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceCryptoKeyConfigArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var keyRing = new KeyRing(\"keyRing\", KeyRingArgs.builder()\n            .name(\"my-instance\")\n            .location(\"us-central1\")\n            .build());\n\n        var cryptoKey = new CryptoKey(\"cryptoKey\", CryptoKeyArgs.builder()\n            .name(\"my-instance\")\n            .keyRing(keyRing.id())\n            .build());\n\n        final var project = OrganizationsFunctions.getProject();\n\n        var cryptoKeyMember = new CryptoKeyIAMMember(\"cryptoKeyMember\", CryptoKeyIAMMemberArgs.builder()\n            .cryptoKeyId(cryptoKey.id())\n            .role(\"roles/cloudkms.cryptoKeyEncrypterDecrypter\")\n            .member(String.format(\"serviceAccount:service-%s@gcp-sa-datafusion.iam.gserviceaccount.com\", project.applyValue(getProjectResult -\u003e getProjectResult.number())))\n            .build());\n\n        var cmek = new Instance(\"cmek\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .cryptoKeyConfig(InstanceCryptoKeyConfigArgs.builder()\n                .keyReference(cryptoKey.id())\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(cryptoKeyMember)\n                .build());\n\n    }\n}\n```\n```yaml\nresources:\n  cmek:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n      cryptoKeyConfig:\n        keyReference: ${cryptoKey.id}\n    options:\n      dependsOn:\n        - ${cryptoKeyMember}\n  cryptoKey:\n    type: gcp:kms:CryptoKey\n    name: crypto_key\n    properties:\n      name: my-instance\n      keyRing: ${keyRing.id}\n  keyRing:\n    type: gcp:kms:KeyRing\n    name: key_ring\n    properties:\n      name: my-instance\n      location: us-central1\n  cryptoKeyMember:\n    type: gcp:kms:CryptoKeyIAMMember\n    name: crypto_key_member\n    properties:\n      cryptoKeyId: ${cryptoKey.id}\n      role: roles/cloudkms.cryptoKeyEncrypterDecrypter\n      member: serviceAccount:service-${project.number}@gcp-sa-datafusion.iam.gserviceaccount.com\nvariables:\n  project:\n    fn::invoke:\n      function: gcp:organizations:getProject\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Enterprise\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst enterpriseInstance = new gcp.datafusion.Instance(\"enterprise_instance\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"ENTERPRISE\",\n    enableRbac: true,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nenterprise_instance = gcp.datafusion.Instance(\"enterprise_instance\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"ENTERPRISE\",\n    enable_rbac=True)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var enterpriseInstance = new Gcp.DataFusion.Instance(\"enterprise_instance\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"ENTERPRISE\",\n        EnableRbac = true,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"enterprise_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:       pulumi.String(\"my-instance\"),\n\t\t\tRegion:     pulumi.String(\"us-central1\"),\n\t\t\tType:       pulumi.String(\"ENTERPRISE\"),\n\t\t\tEnableRbac: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var enterpriseInstance = new Instance(\"enterpriseInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"ENTERPRISE\")\n            .enableRbac(true)\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  enterpriseInstance:\n    type: gcp:datafusion:Instance\n    name: enterprise_instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: ENTERPRISE\n      enableRbac: true\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Event\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst eventTopic = new gcp.pubsub.Topic(\"event\", {name: \"my-instance\"});\nconst event = new gcp.datafusion.Instance(\"event\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    eventPublishConfig: {\n        enabled: true,\n        topic: eventTopic.id,\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nevent_topic = gcp.pubsub.Topic(\"event\", name=\"my-instance\")\nevent = gcp.datafusion.Instance(\"event\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    event_publish_config={\n        \"enabled\": True,\n        \"topic\": event_topic.id,\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var eventTopic = new Gcp.PubSub.Topic(\"event\", new()\n    {\n        Name = \"my-instance\",\n    });\n\n    var @event = new Gcp.DataFusion.Instance(\"event\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        EventPublishConfig = new Gcp.DataFusion.Inputs.InstanceEventPublishConfigArgs\n        {\n            Enabled = true,\n            Topic = eventTopic.Id,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/pubsub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\teventTopic, err := pubsub.NewTopic(ctx, \"event\", \u0026pubsub.TopicArgs{\n\t\t\tName: pulumi.String(\"my-instance\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"event\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t\tEventPublishConfig: \u0026datafusion.InstanceEventPublishConfigArgs{\n\t\t\t\tEnabled: pulumi.Bool(true),\n\t\t\t\tTopic:   eventTopic.ID(),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.pubsub.Topic;\nimport com.pulumi.gcp.pubsub.TopicArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceEventPublishConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var eventTopic = new Topic(\"eventTopic\", TopicArgs.builder()\n            .name(\"my-instance\")\n            .build());\n\n        var event = new Instance(\"event\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .eventPublishConfig(InstanceEventPublishConfigArgs.builder()\n                .enabled(true)\n                .topic(eventTopic.id())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  event:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n      eventPublishConfig:\n        enabled: true\n        topic: ${eventTopic.id}\n  eventTopic:\n    type: gcp:pubsub:Topic\n    name: event\n    properties:\n      name: my-instance\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Zone\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst zone = new gcp.datafusion.Instance(\"zone\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    zone: \"us-central1-a\",\n    type: \"DEVELOPER\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nzone = gcp.datafusion.Instance(\"zone\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    zone=\"us-central1-a\",\n    type=\"DEVELOPER\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var zone = new Gcp.DataFusion.Instance(\"zone\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Zone = \"us-central1-a\",\n        Type = \"DEVELOPER\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"zone\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tZone:   pulumi.String(\"us-central1-a\"),\n\t\t\tType:   pulumi.String(\"DEVELOPER\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var zone = new Instance(\"zone\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .zone(\"us-central1-a\")\n            .type(\"DEVELOPER\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  zone:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      zone: us-central1-a\n      type: DEVELOPER\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nInstance can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{region}}/instances/{{name}}`\n\n* `{{project}}/{{region}}/{{name}}`\n\n* `{{region}}/{{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, Instance can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:datafusion/instance:Instance default projects/{{project}}/locations/{{region}}/instances/{{name}}\n```\n\n```sh\n$ pulumi import gcp:datafusion/instance:Instance default {{project}}/{{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:datafusion/instance:Instance default {{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:datafusion/instance:Instance default {{name}}\n```\n\n",
+            "description": "Represents a Data Fusion instance.\n\n\nTo get more information about Instance, see:\n\n* [API documentation](https://cloud.google.com/data-fusion/docs/reference/rest/v1beta1/projects.locations.instances)\n* How-to Guides\n    * [Official Documentation](https://cloud.google.com/data-fusion/docs/)\n\n## Example Usage\n\n### Data Fusion Instance Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst basicInstance = new gcp.datafusion.Instance(\"basic_instance\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nbasic_instance = gcp.datafusion.Instance(\"basic_instance\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicInstance = new Gcp.DataFusion.Instance(\"basic_instance\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"basic_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var basicInstance = new Instance(\"basicInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  basicInstance:\n    type: gcp:datafusion:Instance\n    name: basic_instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Full\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.appengine.getDefaultServiceAccount({});\nconst network = new gcp.compute.Network(\"network\", {name: \"datafusion-full-network\"});\nconst privateIpAlloc = new gcp.compute.GlobalAddress(\"private_ip_alloc\", {\n    name: \"datafusion-ip-alloc\",\n    addressType: \"INTERNAL\",\n    purpose: \"VPC_PEERING\",\n    prefixLength: 22,\n    network: network.id,\n});\nconst extendedInstance = new gcp.datafusion.Instance(\"extended_instance\", {\n    name: \"my-instance\",\n    description: \"My Data Fusion instance\",\n    displayName: \"My Data Fusion instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    enableStackdriverLogging: true,\n    enableStackdriverMonitoring: true,\n    privateInstance: true,\n    dataprocServiceAccount: _default.then(_default =\u003e _default.email),\n    labels: {\n        example_key: \"example_value\",\n    },\n    networkConfig: {\n        network: \"default\",\n        ipAllocation: pulumi.interpolate`${privateIpAlloc.address}/${privateIpAlloc.prefixLength}`,\n    },\n    accelerators: [{\n        acceleratorType: \"CDC\",\n        state: \"ENABLED\",\n    }],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.appengine.get_default_service_account()\nnetwork = gcp.compute.Network(\"network\", name=\"datafusion-full-network\")\nprivate_ip_alloc = gcp.compute.GlobalAddress(\"private_ip_alloc\",\n    name=\"datafusion-ip-alloc\",\n    address_type=\"INTERNAL\",\n    purpose=\"VPC_PEERING\",\n    prefix_length=22,\n    network=network.id)\nextended_instance = gcp.datafusion.Instance(\"extended_instance\",\n    name=\"my-instance\",\n    description=\"My Data Fusion instance\",\n    display_name=\"My Data Fusion instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    enable_stackdriver_logging=True,\n    enable_stackdriver_monitoring=True,\n    private_instance=True,\n    dataproc_service_account=default.email,\n    labels={\n        \"example_key\": \"example_value\",\n    },\n    network_config={\n        \"network\": \"default\",\n        \"ip_allocation\": pulumi.Output.all(\n            address=private_ip_alloc.address,\n            prefix_length=private_ip_alloc.prefix_length\n).apply(lambda resolved_outputs: f\"{resolved_outputs['address']}/{resolved_outputs['prefix_length']}\")\n,\n    },\n    accelerators=[{\n        \"accelerator_type\": \"CDC\",\n        \"state\": \"ENABLED\",\n    }])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.AppEngine.GetDefaultServiceAccount.Invoke();\n\n    var network = new Gcp.Compute.Network(\"network\", new()\n    {\n        Name = \"datafusion-full-network\",\n    });\n\n    var privateIpAlloc = new Gcp.Compute.GlobalAddress(\"private_ip_alloc\", new()\n    {\n        Name = \"datafusion-ip-alloc\",\n        AddressType = \"INTERNAL\",\n        Purpose = \"VPC_PEERING\",\n        PrefixLength = 22,\n        Network = network.Id,\n    });\n\n    var extendedInstance = new Gcp.DataFusion.Instance(\"extended_instance\", new()\n    {\n        Name = \"my-instance\",\n        Description = \"My Data Fusion instance\",\n        DisplayName = \"My Data Fusion instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        EnableStackdriverLogging = true,\n        EnableStackdriverMonitoring = true,\n        PrivateInstance = true,\n        DataprocServiceAccount = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Email)),\n        Labels = \n        {\n            { \"example_key\", \"example_value\" },\n        },\n        NetworkConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigArgs\n        {\n            Network = \"default\",\n            IpAllocation = Output.Tuple(privateIpAlloc.Address, privateIpAlloc.PrefixLength).Apply(values =\u003e\n            {\n                var address = values.Item1;\n                var prefixLength = values.Item2;\n                return $\"{address}/{prefixLength}\";\n            }),\n        },\n        Accelerators = new[]\n        {\n            new Gcp.DataFusion.Inputs.InstanceAcceleratorArgs\n            {\n                AcceleratorType = \"CDC\",\n                State = \"ENABLED\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/appengine\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := appengine.GetDefaultServiceAccount(ctx, \u0026appengine.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tnetwork, err := compute.NewNetwork(ctx, \"network\", \u0026compute.NetworkArgs{\n\t\t\tName: pulumi.String(\"datafusion-full-network\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tprivateIpAlloc, err := compute.NewGlobalAddress(ctx, \"private_ip_alloc\", \u0026compute.GlobalAddressArgs{\n\t\t\tName:         pulumi.String(\"datafusion-ip-alloc\"),\n\t\t\tAddressType:  pulumi.String(\"INTERNAL\"),\n\t\t\tPurpose:      pulumi.String(\"VPC_PEERING\"),\n\t\t\tPrefixLength: pulumi.Int(22),\n\t\t\tNetwork:      network.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"extended_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:                        pulumi.String(\"my-instance\"),\n\t\t\tDescription:                 pulumi.String(\"My Data Fusion instance\"),\n\t\t\tDisplayName:                 pulumi.String(\"My Data Fusion instance\"),\n\t\t\tRegion:                      pulumi.String(\"us-central1\"),\n\t\t\tType:                        pulumi.String(\"BASIC\"),\n\t\t\tEnableStackdriverLogging:    pulumi.Bool(true),\n\t\t\tEnableStackdriverMonitoring: pulumi.Bool(true),\n\t\t\tPrivateInstance:             pulumi.Bool(true),\n\t\t\tDataprocServiceAccount:      pulumi.String(_default.Email),\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"example_key\": pulumi.String(\"example_value\"),\n\t\t\t},\n\t\t\tNetworkConfig: \u0026datafusion.InstanceNetworkConfigArgs{\n\t\t\t\tNetwork: pulumi.String(\"default\"),\n\t\t\t\tIpAllocation: pulumi.All(privateIpAlloc.Address, privateIpAlloc.PrefixLength).ApplyT(func(_args []interface{}) (string, error) {\n\t\t\t\t\taddress := _args[0].(string)\n\t\t\t\t\tprefixLength := _args[1].(int)\n\t\t\t\t\treturn fmt.Sprintf(\"%v/%v\", address, prefixLength), nil\n\t\t\t\t}).(pulumi.StringOutput),\n\t\t\t},\n\t\t\tAccelerators: datafusion.InstanceAcceleratorArray{\n\t\t\t\t\u0026datafusion.InstanceAcceleratorArgs{\n\t\t\t\t\tAcceleratorType: pulumi.String(\"CDC\"),\n\t\t\t\t\tState:           pulumi.String(\"ENABLED\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.appengine.AppengineFunctions;\nimport com.pulumi.gcp.appengine.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.GlobalAddress;\nimport com.pulumi.gcp.compute.GlobalAddressArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceAcceleratorArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = AppengineFunctions.getDefaultServiceAccount();\n\n        var network = new Network(\"network\", NetworkArgs.builder()\n            .name(\"datafusion-full-network\")\n            .build());\n\n        var privateIpAlloc = new GlobalAddress(\"privateIpAlloc\", GlobalAddressArgs.builder()\n            .name(\"datafusion-ip-alloc\")\n            .addressType(\"INTERNAL\")\n            .purpose(\"VPC_PEERING\")\n            .prefixLength(22)\n            .network(network.id())\n            .build());\n\n        var extendedInstance = new Instance(\"extendedInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .description(\"My Data Fusion instance\")\n            .displayName(\"My Data Fusion instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .enableStackdriverLogging(true)\n            .enableStackdriverMonitoring(true)\n            .privateInstance(true)\n            .dataprocServiceAccount(default_.email())\n            .labels(Map.of(\"example_key\", \"example_value\"))\n            .networkConfig(InstanceNetworkConfigArgs.builder()\n                .network(\"default\")\n                .ipAllocation(Output.tuple(privateIpAlloc.address(), privateIpAlloc.prefixLength()).applyValue(values -\u003e {\n                    var address = values.t1;\n                    var prefixLength = values.t2;\n                    return String.format(\"%s/%s\", address,prefixLength);\n                }))\n                .build())\n            .accelerators(InstanceAcceleratorArgs.builder()\n                .acceleratorType(\"CDC\")\n                .state(\"ENABLED\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  extendedInstance:\n    type: gcp:datafusion:Instance\n    name: extended_instance\n    properties:\n      name: my-instance\n      description: My Data Fusion instance\n      displayName: My Data Fusion instance\n      region: us-central1\n      type: BASIC\n      enableStackdriverLogging: true\n      enableStackdriverMonitoring: true\n      privateInstance: true\n      dataprocServiceAccount: ${default.email}\n      labels:\n        example_key: example_value\n      networkConfig:\n        network: default\n        ipAllocation: ${privateIpAlloc.address}/${privateIpAlloc.prefixLength}\n      accelerators:\n        - acceleratorType: CDC\n          state: ENABLED\n  network:\n    type: gcp:compute:Network\n    properties:\n      name: datafusion-full-network\n  privateIpAlloc:\n    type: gcp:compute:GlobalAddress\n    name: private_ip_alloc\n    properties:\n      name: datafusion-ip-alloc\n      addressType: INTERNAL\n      purpose: VPC_PEERING\n      prefixLength: 22\n      network: ${network.id}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:appengine:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Psc\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst psc = new gcp.compute.Network(\"psc\", {\n    name: \"datafusion-psc-network\",\n    autoCreateSubnetworks: false,\n});\nconst pscSubnetwork = new gcp.compute.Subnetwork(\"psc\", {\n    name: \"datafusion-psc-subnet\",\n    region: \"us-central1\",\n    network: psc.id,\n    ipCidrRange: \"10.0.0.0/16\",\n});\nconst pscNetworkAttachment = new gcp.compute.NetworkAttachment(\"psc\", {\n    name: \"datafusion-psc-attachment\",\n    region: \"us-central1\",\n    connectionPreference: \"ACCEPT_AUTOMATIC\",\n    subnetworks: [pscSubnetwork.selfLink],\n});\nconst pscInstance = new gcp.datafusion.Instance(\"psc_instance\", {\n    name: \"psc-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    privateInstance: true,\n    networkConfig: {\n        connectionType: \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n        privateServiceConnectConfig: {\n            networkAttachment: pscNetworkAttachment.id,\n            unreachableCidrBlock: \"192.168.0.0/25\",\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\npsc = gcp.compute.Network(\"psc\",\n    name=\"datafusion-psc-network\",\n    auto_create_subnetworks=False)\npsc_subnetwork = gcp.compute.Subnetwork(\"psc\",\n    name=\"datafusion-psc-subnet\",\n    region=\"us-central1\",\n    network=psc.id,\n    ip_cidr_range=\"10.0.0.0/16\")\npsc_network_attachment = gcp.compute.NetworkAttachment(\"psc\",\n    name=\"datafusion-psc-attachment\",\n    region=\"us-central1\",\n    connection_preference=\"ACCEPT_AUTOMATIC\",\n    subnetworks=[psc_subnetwork.self_link])\npsc_instance = gcp.datafusion.Instance(\"psc_instance\",\n    name=\"psc-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    private_instance=True,\n    network_config={\n        \"connection_type\": \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n        \"private_service_connect_config\": {\n            \"network_attachment\": psc_network_attachment.id,\n            \"unreachable_cidr_block\": \"192.168.0.0/25\",\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var psc = new Gcp.Compute.Network(\"psc\", new()\n    {\n        Name = \"datafusion-psc-network\",\n        AutoCreateSubnetworks = false,\n    });\n\n    var pscSubnetwork = new Gcp.Compute.Subnetwork(\"psc\", new()\n    {\n        Name = \"datafusion-psc-subnet\",\n        Region = \"us-central1\",\n        Network = psc.Id,\n        IpCidrRange = \"10.0.0.0/16\",\n    });\n\n    var pscNetworkAttachment = new Gcp.Compute.NetworkAttachment(\"psc\", new()\n    {\n        Name = \"datafusion-psc-attachment\",\n        Region = \"us-central1\",\n        ConnectionPreference = \"ACCEPT_AUTOMATIC\",\n        Subnetworks = new[]\n        {\n            pscSubnetwork.SelfLink,\n        },\n    });\n\n    var pscInstance = new Gcp.DataFusion.Instance(\"psc_instance\", new()\n    {\n        Name = \"psc-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        PrivateInstance = true,\n        NetworkConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigArgs\n        {\n            ConnectionType = \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n            PrivateServiceConnectConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigPrivateServiceConnectConfigArgs\n            {\n                NetworkAttachment = pscNetworkAttachment.Id,\n                UnreachableCidrBlock = \"192.168.0.0/25\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tpsc, err := compute.NewNetwork(ctx, \"psc\", \u0026compute.NetworkArgs{\n\t\t\tName:                  pulumi.String(\"datafusion-psc-network\"),\n\t\t\tAutoCreateSubnetworks: pulumi.Bool(false),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tpscSubnetwork, err := compute.NewSubnetwork(ctx, \"psc\", \u0026compute.SubnetworkArgs{\n\t\t\tName:        pulumi.String(\"datafusion-psc-subnet\"),\n\t\t\tRegion:      pulumi.String(\"us-central1\"),\n\t\t\tNetwork:     psc.ID(),\n\t\t\tIpCidrRange: pulumi.String(\"10.0.0.0/16\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tpscNetworkAttachment, err := compute.NewNetworkAttachment(ctx, \"psc\", \u0026compute.NetworkAttachmentArgs{\n\t\t\tName:                 pulumi.String(\"datafusion-psc-attachment\"),\n\t\t\tRegion:               pulumi.String(\"us-central1\"),\n\t\t\tConnectionPreference: pulumi.String(\"ACCEPT_AUTOMATIC\"),\n\t\t\tSubnetworks: pulumi.StringArray{\n\t\t\t\tpscSubnetwork.SelfLink,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"psc_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:            pulumi.String(\"psc-instance\"),\n\t\t\tRegion:          pulumi.String(\"us-central1\"),\n\t\t\tType:            pulumi.String(\"BASIC\"),\n\t\t\tPrivateInstance: pulumi.Bool(true),\n\t\t\tNetworkConfig: \u0026datafusion.InstanceNetworkConfigArgs{\n\t\t\t\tConnectionType: pulumi.String(\"PRIVATE_SERVICE_CONNECT_INTERFACES\"),\n\t\t\t\tPrivateServiceConnectConfig: \u0026datafusion.InstanceNetworkConfigPrivateServiceConnectConfigArgs{\n\t\t\t\t\tNetworkAttachment:    pscNetworkAttachment.ID(),\n\t\t\t\t\tUnreachableCidrBlock: pulumi.String(\"192.168.0.0/25\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.Subnetwork;\nimport com.pulumi.gcp.compute.SubnetworkArgs;\nimport com.pulumi.gcp.compute.NetworkAttachment;\nimport com.pulumi.gcp.compute.NetworkAttachmentArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigPrivateServiceConnectConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var psc = new Network(\"psc\", NetworkArgs.builder()\n            .name(\"datafusion-psc-network\")\n            .autoCreateSubnetworks(false)\n            .build());\n\n        var pscSubnetwork = new Subnetwork(\"pscSubnetwork\", SubnetworkArgs.builder()\n            .name(\"datafusion-psc-subnet\")\n            .region(\"us-central1\")\n            .network(psc.id())\n            .ipCidrRange(\"10.0.0.0/16\")\n            .build());\n\n        var pscNetworkAttachment = new NetworkAttachment(\"pscNetworkAttachment\", NetworkAttachmentArgs.builder()\n            .name(\"datafusion-psc-attachment\")\n            .region(\"us-central1\")\n            .connectionPreference(\"ACCEPT_AUTOMATIC\")\n            .subnetworks(pscSubnetwork.selfLink())\n            .build());\n\n        var pscInstance = new Instance(\"pscInstance\", InstanceArgs.builder()\n            .name(\"psc-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .privateInstance(true)\n            .networkConfig(InstanceNetworkConfigArgs.builder()\n                .connectionType(\"PRIVATE_SERVICE_CONNECT_INTERFACES\")\n                .privateServiceConnectConfig(InstanceNetworkConfigPrivateServiceConnectConfigArgs.builder()\n                    .networkAttachment(pscNetworkAttachment.id())\n                    .unreachableCidrBlock(\"192.168.0.0/25\")\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  pscInstance:\n    type: gcp:datafusion:Instance\n    name: psc_instance\n    properties:\n      name: psc-instance\n      region: us-central1\n      type: BASIC\n      privateInstance: true\n      networkConfig:\n        connectionType: PRIVATE_SERVICE_CONNECT_INTERFACES\n        privateServiceConnectConfig:\n          networkAttachment: ${pscNetworkAttachment.id}\n          unreachableCidrBlock: 192.168.0.0/25\n  psc:\n    type: gcp:compute:Network\n    properties:\n      name: datafusion-psc-network\n      autoCreateSubnetworks: false\n  pscSubnetwork:\n    type: gcp:compute:Subnetwork\n    name: psc\n    properties:\n      name: datafusion-psc-subnet\n      region: us-central1\n      network: ${psc.id}\n      ipCidrRange: 10.0.0.0/16\n  pscNetworkAttachment:\n    type: gcp:compute:NetworkAttachment\n    name: psc\n    properties:\n      name: datafusion-psc-attachment\n      region: us-central1\n      connectionPreference: ACCEPT_AUTOMATIC\n      subnetworks:\n        - ${pscSubnetwork.selfLink}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Cmek\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst keyRing = new gcp.kms.KeyRing(\"key_ring\", {\n    name: \"my-instance\",\n    location: \"us-central1\",\n});\nconst cryptoKey = new gcp.kms.CryptoKey(\"crypto_key\", {\n    name: \"my-instance\",\n    keyRing: keyRing.id,\n});\nconst project = gcp.organizations.getProject({});\nconst cryptoKeyMember = new gcp.kms.CryptoKeyIAMMember(\"crypto_key_member\", {\n    cryptoKeyId: cryptoKey.id,\n    role: \"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n    member: project.then(project =\u003e `serviceAccount:service-${project.number}@gcp-sa-datafusion.iam.gserviceaccount.com`),\n});\nconst cmek = new gcp.datafusion.Instance(\"cmek\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    cryptoKeyConfig: {\n        keyReference: cryptoKey.id,\n    },\n}, {\n    dependsOn: [cryptoKeyMember],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nkey_ring = gcp.kms.KeyRing(\"key_ring\",\n    name=\"my-instance\",\n    location=\"us-central1\")\ncrypto_key = gcp.kms.CryptoKey(\"crypto_key\",\n    name=\"my-instance\",\n    key_ring=key_ring.id)\nproject = gcp.organizations.get_project()\ncrypto_key_member = gcp.kms.CryptoKeyIAMMember(\"crypto_key_member\",\n    crypto_key_id=crypto_key.id,\n    role=\"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n    member=f\"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com\")\ncmek = gcp.datafusion.Instance(\"cmek\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    crypto_key_config={\n        \"key_reference\": crypto_key.id,\n    },\n    opts = pulumi.ResourceOptions(depends_on=[crypto_key_member]))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var keyRing = new Gcp.Kms.KeyRing(\"key_ring\", new()\n    {\n        Name = \"my-instance\",\n        Location = \"us-central1\",\n    });\n\n    var cryptoKey = new Gcp.Kms.CryptoKey(\"crypto_key\", new()\n    {\n        Name = \"my-instance\",\n        KeyRing = keyRing.Id,\n    });\n\n    var project = Gcp.Organizations.GetProject.Invoke();\n\n    var cryptoKeyMember = new Gcp.Kms.CryptoKeyIAMMember(\"crypto_key_member\", new()\n    {\n        CryptoKeyId = cryptoKey.Id,\n        Role = \"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n        Member = $\"serviceAccount:service-{project.Apply(getProjectResult =\u003e getProjectResult.Number)}@gcp-sa-datafusion.iam.gserviceaccount.com\",\n    });\n\n    var cmek = new Gcp.DataFusion.Instance(\"cmek\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        CryptoKeyConfig = new Gcp.DataFusion.Inputs.InstanceCryptoKeyConfigArgs\n        {\n            KeyReference = cryptoKey.Id,\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            cryptoKeyMember,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/kms\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tkeyRing, err := kms.NewKeyRing(ctx, \"key_ring\", \u0026kms.KeyRingArgs{\n\t\t\tName:     pulumi.String(\"my-instance\"),\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcryptoKey, err := kms.NewCryptoKey(ctx, \"crypto_key\", \u0026kms.CryptoKeyArgs{\n\t\t\tName:    pulumi.String(\"my-instance\"),\n\t\t\tKeyRing: keyRing.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tproject, err := organizations.LookupProject(ctx, \u0026organizations.LookupProjectArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcryptoKeyMember, err := kms.NewCryptoKeyIAMMember(ctx, \"crypto_key_member\", \u0026kms.CryptoKeyIAMMemberArgs{\n\t\t\tCryptoKeyId: cryptoKey.ID(),\n\t\t\tRole:        pulumi.String(\"roles/cloudkms.cryptoKeyEncrypterDecrypter\"),\n\t\t\tMember:      pulumi.Sprintf(\"serviceAccount:service-%v@gcp-sa-datafusion.iam.gserviceaccount.com\", project.Number),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"cmek\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t\tCryptoKeyConfig: \u0026datafusion.InstanceCryptoKeyConfigArgs{\n\t\t\t\tKeyReference: cryptoKey.ID(),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tcryptoKeyMember,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.kms.KeyRing;\nimport com.pulumi.gcp.kms.KeyRingArgs;\nimport com.pulumi.gcp.kms.CryptoKey;\nimport com.pulumi.gcp.kms.CryptoKeyArgs;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetProjectArgs;\nimport com.pulumi.gcp.kms.CryptoKeyIAMMember;\nimport com.pulumi.gcp.kms.CryptoKeyIAMMemberArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceCryptoKeyConfigArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var keyRing = new KeyRing(\"keyRing\", KeyRingArgs.builder()\n            .name(\"my-instance\")\n            .location(\"us-central1\")\n            .build());\n\n        var cryptoKey = new CryptoKey(\"cryptoKey\", CryptoKeyArgs.builder()\n            .name(\"my-instance\")\n            .keyRing(keyRing.id())\n            .build());\n\n        final var project = OrganizationsFunctions.getProject();\n\n        var cryptoKeyMember = new CryptoKeyIAMMember(\"cryptoKeyMember\", CryptoKeyIAMMemberArgs.builder()\n            .cryptoKeyId(cryptoKey.id())\n            .role(\"roles/cloudkms.cryptoKeyEncrypterDecrypter\")\n            .member(String.format(\"serviceAccount:service-%s@gcp-sa-datafusion.iam.gserviceaccount.com\", project.applyValue(getProjectResult -\u003e getProjectResult.number())))\n            .build());\n\n        var cmek = new Instance(\"cmek\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .cryptoKeyConfig(InstanceCryptoKeyConfigArgs.builder()\n                .keyReference(cryptoKey.id())\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(cryptoKeyMember)\n                .build());\n\n    }\n}\n```\n```yaml\nresources:\n  cmek:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n      cryptoKeyConfig:\n        keyReference: ${cryptoKey.id}\n    options:\n      dependsOn:\n        - ${cryptoKeyMember}\n  cryptoKey:\n    type: gcp:kms:CryptoKey\n    name: crypto_key\n    properties:\n      name: my-instance\n      keyRing: ${keyRing.id}\n  keyRing:\n    type: gcp:kms:KeyRing\n    name: key_ring\n    properties:\n      name: my-instance\n      location: us-central1\n  cryptoKeyMember:\n    type: gcp:kms:CryptoKeyIAMMember\n    name: crypto_key_member\n    properties:\n      cryptoKeyId: ${cryptoKey.id}\n      role: roles/cloudkms.cryptoKeyEncrypterDecrypter\n      member: serviceAccount:service-${project.number}@gcp-sa-datafusion.iam.gserviceaccount.com\nvariables:\n  project:\n    fn::invoke:\n      function: gcp:organizations:getProject\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Enterprise\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst enterpriseInstance = new gcp.datafusion.Instance(\"enterprise_instance\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"ENTERPRISE\",\n    enableRbac: true,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nenterprise_instance = gcp.datafusion.Instance(\"enterprise_instance\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"ENTERPRISE\",\n    enable_rbac=True)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var enterpriseInstance = new Gcp.DataFusion.Instance(\"enterprise_instance\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"ENTERPRISE\",\n        EnableRbac = true,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"enterprise_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:       pulumi.String(\"my-instance\"),\n\t\t\tRegion:     pulumi.String(\"us-central1\"),\n\t\t\tType:       pulumi.String(\"ENTERPRISE\"),\n\t\t\tEnableRbac: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var enterpriseInstance = new Instance(\"enterpriseInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"ENTERPRISE\")\n            .enableRbac(true)\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  enterpriseInstance:\n    type: gcp:datafusion:Instance\n    name: enterprise_instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: ENTERPRISE\n      enableRbac: true\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Event\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst eventTopic = new gcp.pubsub.Topic(\"event\", {name: \"my-instance\"});\nconst event = new gcp.datafusion.Instance(\"event\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    eventPublishConfig: {\n        enabled: true,\n        topic: eventTopic.id,\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nevent_topic = gcp.pubsub.Topic(\"event\", name=\"my-instance\")\nevent = gcp.datafusion.Instance(\"event\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    event_publish_config={\n        \"enabled\": True,\n        \"topic\": event_topic.id,\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var eventTopic = new Gcp.PubSub.Topic(\"event\", new()\n    {\n        Name = \"my-instance\",\n    });\n\n    var @event = new Gcp.DataFusion.Instance(\"event\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        EventPublishConfig = new Gcp.DataFusion.Inputs.InstanceEventPublishConfigArgs\n        {\n            Enabled = true,\n            Topic = eventTopic.Id,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/pubsub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\teventTopic, err := pubsub.NewTopic(ctx, \"event\", \u0026pubsub.TopicArgs{\n\t\t\tName: pulumi.String(\"my-instance\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"event\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t\tEventPublishConfig: \u0026datafusion.InstanceEventPublishConfigArgs{\n\t\t\t\tEnabled: pulumi.Bool(true),\n\t\t\t\tTopic:   eventTopic.ID(),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.pubsub.Topic;\nimport com.pulumi.gcp.pubsub.TopicArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceEventPublishConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var eventTopic = new Topic(\"eventTopic\", TopicArgs.builder()\n            .name(\"my-instance\")\n            .build());\n\n        var event = new Instance(\"event\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .eventPublishConfig(InstanceEventPublishConfigArgs.builder()\n                .enabled(true)\n                .topic(eventTopic.id())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  event:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n      eventPublishConfig:\n        enabled: true\n        topic: ${eventTopic.id}\n  eventTopic:\n    type: gcp:pubsub:Topic\n    name: event\n    properties:\n      name: my-instance\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Zone\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst zone = new gcp.datafusion.Instance(\"zone\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    zone: \"us-central1-a\",\n    type: \"DEVELOPER\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nzone = gcp.datafusion.Instance(\"zone\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    zone=\"us-central1-a\",\n    type=\"DEVELOPER\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var zone = new Gcp.DataFusion.Instance(\"zone\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Zone = \"us-central1-a\",\n        Type = \"DEVELOPER\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"zone\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tZone:   pulumi.String(\"us-central1-a\"),\n\t\t\tType:   pulumi.String(\"DEVELOPER\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var zone = new Instance(\"zone\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .zone(\"us-central1-a\")\n            .type(\"DEVELOPER\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  zone:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      zone: us-central1-a\n      type: DEVELOPER\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nInstance can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{region}}/instances/{{name}}`\n\n* `{{project}}/{{region}}/{{name}}`\n\n* `{{region}}/{{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, Instance can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:datafusion/instance:Instance default projects/{{project}}/locations/{{region}}/instances/{{name}}\n```\n\n```sh\n$ pulumi import gcp:datafusion/instance:Instance default {{project}}/{{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:datafusion/instance:Instance default {{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:datafusion/instance:Instance default {{name}}\n```\n\n",
             "properties": {
                 "accelerators": {
                     "type": "array",
@@ -208022,7 +208022,7 @@
             }
         },
         "gcp:developerconnect/connection:Connection": {
-            "description": "## Example Usage\n\n### Developer Connect Connection New\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\n// Setup permissions. Only needed once per project\nconst devconnect_p4sa = new gcp.projects.ServiceIdentity(\"devconnect-p4sa\", {service: \"developerconnect.googleapis.com\"});\nconst devconnect_secret = new gcp.projects.IAMMember(\"devconnect-secret\", {\n    project: \"my-project-name\",\n    role: \"roles/secretmanager.admin\",\n    member: devconnect_p4sa.member,\n});\nconst my_connection = new gcp.developerconnect.Connection(\"my-connection\", {\n    location: \"us-central1\",\n    connectionId: \"tf-test-connection-new\",\n    githubConfig: {\n        githubApp: \"FIREBASE\",\n    },\n}, {\n    dependsOn: [devconnect_secret],\n});\nexport const nextSteps = my_connection.installationStates;\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\n# Setup permissions. Only needed once per project\ndevconnect_p4sa = gcp.projects.ServiceIdentity(\"devconnect-p4sa\", service=\"developerconnect.googleapis.com\")\ndevconnect_secret = gcp.projects.IAMMember(\"devconnect-secret\",\n    project=\"my-project-name\",\n    role=\"roles/secretmanager.admin\",\n    member=devconnect_p4sa.member)\nmy_connection = gcp.developerconnect.Connection(\"my-connection\",\n    location=\"us-central1\",\n    connection_id=\"tf-test-connection-new\",\n    github_config={\n        \"github_app\": \"FIREBASE\",\n    },\n    opts = pulumi.ResourceOptions(depends_on=[devconnect_secret]))\npulumi.export(\"nextSteps\", my_connection.installation_states)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    // Setup permissions. Only needed once per project\n    var devconnect_p4sa = new Gcp.Projects.ServiceIdentity(\"devconnect-p4sa\", new()\n    {\n        Service = \"developerconnect.googleapis.com\",\n    });\n\n    var devconnect_secret = new Gcp.Projects.IAMMember(\"devconnect-secret\", new()\n    {\n        Project = \"my-project-name\",\n        Role = \"roles/secretmanager.admin\",\n        Member = devconnect_p4sa.Member,\n    });\n\n    var my_connection = new Gcp.DeveloperConnect.Connection(\"my-connection\", new()\n    {\n        Location = \"us-central1\",\n        ConnectionId = \"tf-test-connection-new\",\n        GithubConfig = new Gcp.DeveloperConnect.Inputs.ConnectionGithubConfigArgs\n        {\n            GithubApp = \"FIREBASE\",\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            devconnect_secret,\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"nextSteps\"] = my_connection.InstallationStates,\n    };\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/developerconnect\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t// Setup permissions. Only needed once per project\n\t\t_, err := projects.NewServiceIdentity(ctx, \"devconnect-p4sa\", \u0026projects.ServiceIdentityArgs{\n\t\t\tService: pulumi.String(\"developerconnect.googleapis.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = projects.NewIAMMember(ctx, \"devconnect-secret\", \u0026projects.IAMMemberArgs{\n\t\t\tProject: pulumi.String(\"my-project-name\"),\n\t\t\tRole:    pulumi.String(\"roles/secretmanager.admin\"),\n\t\t\tMember:  devconnect_p4sa.Member,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = developerconnect.NewConnection(ctx, \"my-connection\", \u0026developerconnect.ConnectionArgs{\n\t\t\tLocation:     pulumi.String(\"us-central1\"),\n\t\t\tConnectionId: pulumi.String(\"tf-test-connection-new\"),\n\t\t\tGithubConfig: \u0026developerconnect.ConnectionGithubConfigArgs{\n\t\t\t\tGithubApp: pulumi.String(\"FIREBASE\"),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tdevconnect_secret,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"nextSteps\", my_connection.InstallationStates)\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.projects.ServiceIdentity;\nimport com.pulumi.gcp.projects.ServiceIdentityArgs;\nimport com.pulumi.gcp.projects.IAMMember;\nimport com.pulumi.gcp.projects.IAMMemberArgs;\nimport com.pulumi.gcp.developerconnect.Connection;\nimport com.pulumi.gcp.developerconnect.ConnectionArgs;\nimport com.pulumi.gcp.developerconnect.inputs.ConnectionGithubConfigArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        // Setup permissions. Only needed once per project\n        var devconnect_p4sa = new ServiceIdentity(\"devconnect-p4sa\", ServiceIdentityArgs.builder()\n            .service(\"developerconnect.googleapis.com\")\n            .build());\n\n        var devconnect_secret = new IAMMember(\"devconnect-secret\", IAMMemberArgs.builder()\n            .project(\"my-project-name\")\n            .role(\"roles/secretmanager.admin\")\n            .member(devconnect_p4sa.member())\n            .build());\n\n        var my_connection = new Connection(\"my-connection\", ConnectionArgs.builder()\n            .location(\"us-central1\")\n            .connectionId(\"tf-test-connection-new\")\n            .githubConfig(ConnectionGithubConfigArgs.builder()\n                .githubApp(\"FIREBASE\")\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(devconnect_secret)\n                .build());\n\n        ctx.export(\"nextSteps\", my_connection.installationStates());\n    }\n}\n```\n```yaml\nresources:\n  my-connection:\n    type: gcp:developerconnect:Connection\n    properties:\n      location: us-central1\n      connectionId: tf-test-connection-new\n      githubConfig:\n        githubApp: FIREBASE\n    options:\n      dependsOn:\n        - ${[\"devconnect-secret\"]}\n  # Setup permissions. Only needed once per project\n  devconnect-p4sa:\n    type: gcp:projects:ServiceIdentity\n    properties:\n      service: developerconnect.googleapis.com\n  devconnect-secret:\n    type: gcp:projects:IAMMember\n    properties:\n      project: my-project-name\n      role: roles/secretmanager.admin\n      member: ${[\"devconnect-p4sa\"].member}\noutputs:\n  nextSteps: ${[\"my-connection\"].installationStates}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Developer Connect Connection Existing Credentials\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_connection = new gcp.developerconnect.Connection(\"my-connection\", {\n    location: \"us-central1\",\n    connectionId: \"tf-test-connection-cred\",\n    githubConfig: {\n        githubApp: \"DEVELOPER_CONNECT\",\n        authorizerCredential: {\n            oauthTokenSecretVersion: \"projects/your-project/secrets/your-secret-id/versions/latest\",\n        },\n    },\n});\nexport const nextSteps = my_connection.installationStates;\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_connection = gcp.developerconnect.Connection(\"my-connection\",\n    location=\"us-central1\",\n    connection_id=\"tf-test-connection-cred\",\n    github_config={\n        \"github_app\": \"DEVELOPER_CONNECT\",\n        \"authorizer_credential\": {\n            \"oauth_token_secret_version\": \"projects/your-project/secrets/your-secret-id/versions/latest\",\n        },\n    })\npulumi.export(\"nextSteps\", my_connection.installation_states)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_connection = new Gcp.DeveloperConnect.Connection(\"my-connection\", new()\n    {\n        Location = \"us-central1\",\n        ConnectionId = \"tf-test-connection-cred\",\n        GithubConfig = new Gcp.DeveloperConnect.Inputs.ConnectionGithubConfigArgs\n        {\n            GithubApp = \"DEVELOPER_CONNECT\",\n            AuthorizerCredential = new Gcp.DeveloperConnect.Inputs.ConnectionGithubConfigAuthorizerCredentialArgs\n            {\n                OauthTokenSecretVersion = \"projects/your-project/secrets/your-secret-id/versions/latest\",\n            },\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"nextSteps\"] = my_connection.InstallationStates,\n    };\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/developerconnect\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := developerconnect.NewConnection(ctx, \"my-connection\", \u0026developerconnect.ConnectionArgs{\n\t\t\tLocation:     pulumi.String(\"us-central1\"),\n\t\t\tConnectionId: pulumi.String(\"tf-test-connection-cred\"),\n\t\t\tGithubConfig: \u0026developerconnect.ConnectionGithubConfigArgs{\n\t\t\t\tGithubApp: pulumi.String(\"DEVELOPER_CONNECT\"),\n\t\t\t\tAuthorizerCredential: \u0026developerconnect.ConnectionGithubConfigAuthorizerCredentialArgs{\n\t\t\t\t\tOauthTokenSecretVersion: pulumi.String(\"projects/your-project/secrets/your-secret-id/versions/latest\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"nextSteps\", my_connection.InstallationStates)\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.developerconnect.Connection;\nimport com.pulumi.gcp.developerconnect.ConnectionArgs;\nimport com.pulumi.gcp.developerconnect.inputs.ConnectionGithubConfigArgs;\nimport com.pulumi.gcp.developerconnect.inputs.ConnectionGithubConfigAuthorizerCredentialArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var my_connection = new Connection(\"my-connection\", ConnectionArgs.builder()\n            .location(\"us-central1\")\n            .connectionId(\"tf-test-connection-cred\")\n            .githubConfig(ConnectionGithubConfigArgs.builder()\n                .githubApp(\"DEVELOPER_CONNECT\")\n                .authorizerCredential(ConnectionGithubConfigAuthorizerCredentialArgs.builder()\n                    .oauthTokenSecretVersion(\"projects/your-project/secrets/your-secret-id/versions/latest\")\n                    .build())\n                .build())\n            .build());\n\n        ctx.export(\"nextSteps\", my_connection.installationStates());\n    }\n}\n```\n```yaml\nresources:\n  my-connection:\n    type: gcp:developerconnect:Connection\n    properties:\n      location: us-central1\n      connectionId: tf-test-connection-cred\n      githubConfig:\n        githubApp: DEVELOPER_CONNECT\n        authorizerCredential:\n          oauthTokenSecretVersion: projects/your-project/secrets/your-secret-id/versions/latest\noutputs:\n  nextSteps: ${[\"my-connection\"].installationStates}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Developer Connect Connection Existing Installation\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst github_token_secret = new gcp.secretmanager.Secret(\"github-token-secret\", {\n    secretId: \"github-token-secret\",\n    replication: {\n        auto: {},\n    },\n});\nconst github_token_secret_version = new gcp.secretmanager.SecretVersion(\"github-token-secret-version\", {\n    secret: github_token_secret.id,\n    secretData: std.file({\n        input: \"my-github-token.txt\",\n    }).then(invoke =\u003e invoke.result),\n});\nconst devconnect_p4sa = new gcp.projects.ServiceIdentity(\"devconnect-p4sa\", {service: \"developerconnect.googleapis.com\"});\nconst p4sa-secretAccessor = gcp.organizations.getIAMPolicyOutput({\n    bindings: [{\n        role: \"roles/secretmanager.secretAccessor\",\n        members: [devconnect_p4sa.member],\n    }],\n});\nconst policy = new gcp.secretmanager.SecretIamPolicy(\"policy\", {\n    secretId: github_token_secret.secretId,\n    policyData: p4sa_secretAccessor.apply(p4sa_secretAccessor =\u003e p4sa_secretAccessor.policyData),\n});\nconst my_connection = new gcp.developerconnect.Connection(\"my-connection\", {\n    location: \"us-central1\",\n    connectionId: \"my-connection\",\n    githubConfig: {\n        githubApp: \"DEVELOPER_CONNECT\",\n        appInstallationId: \"123123\",\n        authorizerCredential: {\n            oauthTokenSecretVersion: github_token_secret_version.id,\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\ngithub_token_secret = gcp.secretmanager.Secret(\"github-token-secret\",\n    secret_id=\"github-token-secret\",\n    replication={\n        \"auto\": {},\n    })\ngithub_token_secret_version = gcp.secretmanager.SecretVersion(\"github-token-secret-version\",\n    secret=github_token_secret.id,\n    secret_data=std.file(input=\"my-github-token.txt\").result)\ndevconnect_p4sa = gcp.projects.ServiceIdentity(\"devconnect-p4sa\", service=\"developerconnect.googleapis.com\")\np4sa_secret_accessor = gcp.organizations.get_iam_policy_output(bindings=[{\n    \"role\": \"roles/secretmanager.secretAccessor\",\n    \"members\": [devconnect_p4sa.member],\n}])\npolicy = gcp.secretmanager.SecretIamPolicy(\"policy\",\n    secret_id=github_token_secret.secret_id,\n    policy_data=p4sa_secret_accessor.policy_data)\nmy_connection = gcp.developerconnect.Connection(\"my-connection\",\n    location=\"us-central1\",\n    connection_id=\"my-connection\",\n    github_config={\n        \"github_app\": \"DEVELOPER_CONNECT\",\n        \"app_installation_id\": \"123123\",\n        \"authorizer_credential\": {\n            \"oauth_token_secret_version\": github_token_secret_version.id,\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var github_token_secret = new Gcp.SecretManager.Secret(\"github-token-secret\", new()\n    {\n        SecretId = \"github-token-secret\",\n        Replication = new Gcp.SecretManager.Inputs.SecretReplicationArgs\n        {\n            Auto = null,\n        },\n    });\n\n    var github_token_secret_version = new Gcp.SecretManager.SecretVersion(\"github-token-secret-version\", new()\n    {\n        Secret = github_token_secret.Id,\n        SecretData = Std.File.Invoke(new()\n        {\n            Input = \"my-github-token.txt\",\n        }).Apply(invoke =\u003e invoke.Result),\n    });\n\n    var devconnect_p4sa = new Gcp.Projects.ServiceIdentity(\"devconnect-p4sa\", new()\n    {\n        Service = \"developerconnect.googleapis.com\",\n    });\n\n    var p4sa_secretAccessor = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/secretmanager.secretAccessor\",\n                Members = new[]\n                {\n                    devconnect_p4sa.Member,\n                },\n            },\n        },\n    });\n\n    var policy = new Gcp.SecretManager.SecretIamPolicy(\"policy\", new()\n    {\n        SecretId = github_token_secret.SecretId,\n        PolicyData = p4sa_secretAccessor.Apply(p4sa_secretAccessor =\u003e p4sa_secretAccessor.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData)),\n    });\n\n    var my_connection = new Gcp.DeveloperConnect.Connection(\"my-connection\", new()\n    {\n        Location = \"us-central1\",\n        ConnectionId = \"my-connection\",\n        GithubConfig = new Gcp.DeveloperConnect.Inputs.ConnectionGithubConfigArgs\n        {\n            GithubApp = \"DEVELOPER_CONNECT\",\n            AppInstallationId = \"123123\",\n            AuthorizerCredential = new Gcp.DeveloperConnect.Inputs.ConnectionGithubConfigAuthorizerCredentialArgs\n            {\n                OauthTokenSecretVersion = github_token_secret_version.Id,\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/developerconnect\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/secretmanager\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := secretmanager.NewSecret(ctx, \"github-token-secret\", \u0026secretmanager.SecretArgs{\n\t\t\tSecretId: pulumi.String(\"github-token-secret\"),\n\t\t\tReplication: \u0026secretmanager.SecretReplicationArgs{\n\t\t\t\tAuto: \u0026secretmanager.SecretReplicationAutoArgs{},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tinvokeFile, err := std.File(ctx, \u0026std.FileArgs{\n\t\t\tInput: \"my-github-token.txt\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretVersion(ctx, \"github-token-secret-version\", \u0026secretmanager.SecretVersionArgs{\n\t\t\tSecret:     github_token_secret.ID(),\n\t\t\tSecretData: pulumi.String(invokeFile.Result),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = projects.NewServiceIdentity(ctx, \"devconnect-p4sa\", \u0026projects.ServiceIdentityArgs{\n\t\t\tService: pulumi.String(\"developerconnect.googleapis.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tp4sa_secretAccessor := organizations.LookupIAMPolicyOutput(ctx, organizations.GetIAMPolicyOutputArgs{\n\t\t\tBindings: organizations.GetIAMPolicyBindingArray{\n\t\t\t\t\u0026organizations.GetIAMPolicyBindingArgs{\n\t\t\t\t\tRole: pulumi.String(\"roles/secretmanager.secretAccessor\"),\n\t\t\t\t\tMembers: pulumi.StringArray{\n\t\t\t\t\t\tdevconnect_p4sa.Member,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\t_, err = secretmanager.NewSecretIamPolicy(ctx, \"policy\", \u0026secretmanager.SecretIamPolicyArgs{\n\t\t\tSecretId: github_token_secret.SecretId,\n\t\t\tPolicyData: pulumi.String(p4sa_secretAccessor.ApplyT(func(p4sa_secretAccessor organizations.GetIAMPolicyResult) (*string, error) {\n\t\t\t\treturn \u0026p4sa_secretAccessor.PolicyData, nil\n\t\t\t}).(pulumi.StringPtrOutput)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = developerconnect.NewConnection(ctx, \"my-connection\", \u0026developerconnect.ConnectionArgs{\n\t\t\tLocation:     pulumi.String(\"us-central1\"),\n\t\t\tConnectionId: pulumi.String(\"my-connection\"),\n\t\t\tGithubConfig: \u0026developerconnect.ConnectionGithubConfigArgs{\n\t\t\t\tGithubApp:         pulumi.String(\"DEVELOPER_CONNECT\"),\n\t\t\t\tAppInstallationId: pulumi.String(\"123123\"),\n\t\t\t\tAuthorizerCredential: \u0026developerconnect.ConnectionGithubConfigAuthorizerCredentialArgs{\n\t\t\t\t\tOauthTokenSecretVersion: github_token_secret_version.ID(),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.secretmanager.Secret;\nimport com.pulumi.gcp.secretmanager.SecretArgs;\nimport com.pulumi.gcp.secretmanager.inputs.SecretReplicationArgs;\nimport com.pulumi.gcp.secretmanager.inputs.SecretReplicationAutoArgs;\nimport com.pulumi.gcp.secretmanager.SecretVersion;\nimport com.pulumi.gcp.secretmanager.SecretVersionArgs;\nimport com.pulumi.gcp.projects.ServiceIdentity;\nimport com.pulumi.gcp.projects.ServiceIdentityArgs;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.secretmanager.SecretIamPolicy;\nimport com.pulumi.gcp.secretmanager.SecretIamPolicyArgs;\nimport com.pulumi.gcp.developerconnect.Connection;\nimport com.pulumi.gcp.developerconnect.ConnectionArgs;\nimport com.pulumi.gcp.developerconnect.inputs.ConnectionGithubConfigArgs;\nimport com.pulumi.gcp.developerconnect.inputs.ConnectionGithubConfigAuthorizerCredentialArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var github_token_secret = new Secret(\"github-token-secret\", SecretArgs.builder()\n            .secretId(\"github-token-secret\")\n            .replication(SecretReplicationArgs.builder()\n                .auto()\n                .build())\n            .build());\n\n        var github_token_secret_version = new SecretVersion(\"github-token-secret-version\", SecretVersionArgs.builder()\n            .secret(github_token_secret.id())\n            .secretData(StdFunctions.file(FileArgs.builder()\n                .input(\"my-github-token.txt\")\n                .build()).result())\n            .build());\n\n        var devconnect_p4sa = new ServiceIdentity(\"devconnect-p4sa\", ServiceIdentityArgs.builder()\n            .service(\"developerconnect.googleapis.com\")\n            .build());\n\n        final var p4sa-secretAccessor = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/secretmanager.secretAccessor\")\n                .members(devconnect_p4sa.member())\n                .build())\n            .build());\n\n        var policy = new SecretIamPolicy(\"policy\", SecretIamPolicyArgs.builder()\n            .secretId(github_token_secret.secretId())\n            .policyData(p4sa_secretAccessor.applyValue(p4sa_secretAccessor -\u003e p4sa_secretAccessor.policyData()))\n            .build());\n\n        var my_connection = new Connection(\"my-connection\", ConnectionArgs.builder()\n            .location(\"us-central1\")\n            .connectionId(\"my-connection\")\n            .githubConfig(ConnectionGithubConfigArgs.builder()\n                .githubApp(\"DEVELOPER_CONNECT\")\n                .appInstallationId(123123)\n                .authorizerCredential(ConnectionGithubConfigAuthorizerCredentialArgs.builder()\n                    .oauthTokenSecretVersion(github_token_secret_version.id())\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  github-token-secret:\n    type: gcp:secretmanager:Secret\n    properties:\n      secretId: github-token-secret\n      replication:\n        auto: {}\n  github-token-secret-version:\n    type: gcp:secretmanager:SecretVersion\n    properties:\n      secret: ${[\"github-token-secret\"].id}\n      secretData:\n        fn::invoke:\n          function: std:file\n          arguments:\n            input: my-github-token.txt\n          return: result\n  devconnect-p4sa:\n    type: gcp:projects:ServiceIdentity\n    properties:\n      service: developerconnect.googleapis.com\n  policy:\n    type: gcp:secretmanager:SecretIamPolicy\n    properties:\n      secretId: ${[\"github-token-secret\"].secretId}\n      policyData: ${[\"p4sa-secretAccessor\"].policyData}\n  my-connection:\n    type: gcp:developerconnect:Connection\n    properties:\n      location: us-central1\n      connectionId: my-connection\n      githubConfig:\n        githubApp: DEVELOPER_CONNECT\n        appInstallationId: 123123\n        authorizerCredential:\n          oauthTokenSecretVersion: ${[\"github-token-secret-version\"].id}\nvariables:\n  p4sa-secretAccessor:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/secretmanager.secretAccessor\n            members:\n              - ${[\"devconnect-p4sa\"].member}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nConnection can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{location}}/connections/{{connection_id}}`\n\n* `{{project}}/{{location}}/{{connection_id}}`\n\n* `{{location}}/{{connection_id}}`\n\nWhen using the `pulumi import` command, Connection can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:developerconnect/connection:Connection default projects/{{project}}/locations/{{location}}/connections/{{connection_id}}\n```\n\n```sh\n$ pulumi import gcp:developerconnect/connection:Connection default {{project}}/{{location}}/{{connection_id}}\n```\n\n```sh\n$ pulumi import gcp:developerconnect/connection:Connection default {{location}}/{{connection_id}}\n```\n\n",
+            "description": "## Example Usage\n\n### Developer Connect Connection New\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\n// Setup permissions. Only needed once per project\nconst devconnect_p4sa = new gcp.projects.ServiceIdentity(\"devconnect-p4sa\", {service: \"developerconnect.googleapis.com\"});\nconst devconnect_secret = new gcp.projects.IAMMember(\"devconnect-secret\", {\n    project: \"my-project-name\",\n    role: \"roles/secretmanager.admin\",\n    member: devconnect_p4sa.member,\n});\nconst my_connection = new gcp.developerconnect.Connection(\"my-connection\", {\n    location: \"us-central1\",\n    connectionId: \"tf-test-connection-new\",\n    githubConfig: {\n        githubApp: \"FIREBASE\",\n    },\n}, {\n    dependsOn: [devconnect_secret],\n});\nexport const nextSteps = my_connection.installationStates;\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\n# Setup permissions. Only needed once per project\ndevconnect_p4sa = gcp.projects.ServiceIdentity(\"devconnect-p4sa\", service=\"developerconnect.googleapis.com\")\ndevconnect_secret = gcp.projects.IAMMember(\"devconnect-secret\",\n    project=\"my-project-name\",\n    role=\"roles/secretmanager.admin\",\n    member=devconnect_p4sa.member)\nmy_connection = gcp.developerconnect.Connection(\"my-connection\",\n    location=\"us-central1\",\n    connection_id=\"tf-test-connection-new\",\n    github_config={\n        \"github_app\": \"FIREBASE\",\n    },\n    opts = pulumi.ResourceOptions(depends_on=[devconnect_secret]))\npulumi.export(\"nextSteps\", my_connection.installation_states)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    // Setup permissions. Only needed once per project\n    var devconnect_p4sa = new Gcp.Projects.ServiceIdentity(\"devconnect-p4sa\", new()\n    {\n        Service = \"developerconnect.googleapis.com\",\n    });\n\n    var devconnect_secret = new Gcp.Projects.IAMMember(\"devconnect-secret\", new()\n    {\n        Project = \"my-project-name\",\n        Role = \"roles/secretmanager.admin\",\n        Member = devconnect_p4sa.Member,\n    });\n\n    var my_connection = new Gcp.DeveloperConnect.Connection(\"my-connection\", new()\n    {\n        Location = \"us-central1\",\n        ConnectionId = \"tf-test-connection-new\",\n        GithubConfig = new Gcp.DeveloperConnect.Inputs.ConnectionGithubConfigArgs\n        {\n            GithubApp = \"FIREBASE\",\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            devconnect_secret,\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"nextSteps\"] = my_connection.InstallationStates,\n    };\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/developerconnect\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t// Setup permissions. Only needed once per project\n\t\t_, err := projects.NewServiceIdentity(ctx, \"devconnect-p4sa\", \u0026projects.ServiceIdentityArgs{\n\t\t\tService: pulumi.String(\"developerconnect.googleapis.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = projects.NewIAMMember(ctx, \"devconnect-secret\", \u0026projects.IAMMemberArgs{\n\t\t\tProject: pulumi.String(\"my-project-name\"),\n\t\t\tRole:    pulumi.String(\"roles/secretmanager.admin\"),\n\t\t\tMember:  devconnect_p4sa.Member,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = developerconnect.NewConnection(ctx, \"my-connection\", \u0026developerconnect.ConnectionArgs{\n\t\t\tLocation:     pulumi.String(\"us-central1\"),\n\t\t\tConnectionId: pulumi.String(\"tf-test-connection-new\"),\n\t\t\tGithubConfig: \u0026developerconnect.ConnectionGithubConfigArgs{\n\t\t\t\tGithubApp: pulumi.String(\"FIREBASE\"),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tdevconnect_secret,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"nextSteps\", my_connection.InstallationStates)\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.projects.ServiceIdentity;\nimport com.pulumi.gcp.projects.ServiceIdentityArgs;\nimport com.pulumi.gcp.projects.IAMMember;\nimport com.pulumi.gcp.projects.IAMMemberArgs;\nimport com.pulumi.gcp.developerconnect.Connection;\nimport com.pulumi.gcp.developerconnect.ConnectionArgs;\nimport com.pulumi.gcp.developerconnect.inputs.ConnectionGithubConfigArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        // Setup permissions. Only needed once per project\n        var devconnect_p4sa = new ServiceIdentity(\"devconnect-p4sa\", ServiceIdentityArgs.builder()\n            .service(\"developerconnect.googleapis.com\")\n            .build());\n\n        var devconnect_secret = new IAMMember(\"devconnect-secret\", IAMMemberArgs.builder()\n            .project(\"my-project-name\")\n            .role(\"roles/secretmanager.admin\")\n            .member(devconnect_p4sa.member())\n            .build());\n\n        var my_connection = new Connection(\"my-connection\", ConnectionArgs.builder()\n            .location(\"us-central1\")\n            .connectionId(\"tf-test-connection-new\")\n            .githubConfig(ConnectionGithubConfigArgs.builder()\n                .githubApp(\"FIREBASE\")\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(devconnect_secret)\n                .build());\n\n        ctx.export(\"nextSteps\", my_connection.installationStates());\n    }\n}\n```\n```yaml\nresources:\n  my-connection:\n    type: gcp:developerconnect:Connection\n    properties:\n      location: us-central1\n      connectionId: tf-test-connection-new\n      githubConfig:\n        githubApp: FIREBASE\n    options:\n      dependsOn:\n        - ${[\"devconnect-secret\"]}\n  # Setup permissions. Only needed once per project\n  devconnect-p4sa:\n    type: gcp:projects:ServiceIdentity\n    properties:\n      service: developerconnect.googleapis.com\n  devconnect-secret:\n    type: gcp:projects:IAMMember\n    properties:\n      project: my-project-name\n      role: roles/secretmanager.admin\n      member: ${[\"devconnect-p4sa\"].member}\noutputs:\n  nextSteps: ${[\"my-connection\"].installationStates}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Developer Connect Connection Existing Credentials\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_connection = new gcp.developerconnect.Connection(\"my-connection\", {\n    location: \"us-central1\",\n    connectionId: \"tf-test-connection-cred\",\n    githubConfig: {\n        githubApp: \"DEVELOPER_CONNECT\",\n        authorizerCredential: {\n            oauthTokenSecretVersion: \"projects/your-project/secrets/your-secret-id/versions/latest\",\n        },\n    },\n});\nexport const nextSteps = my_connection.installationStates;\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_connection = gcp.developerconnect.Connection(\"my-connection\",\n    location=\"us-central1\",\n    connection_id=\"tf-test-connection-cred\",\n    github_config={\n        \"github_app\": \"DEVELOPER_CONNECT\",\n        \"authorizer_credential\": {\n            \"oauth_token_secret_version\": \"projects/your-project/secrets/your-secret-id/versions/latest\",\n        },\n    })\npulumi.export(\"nextSteps\", my_connection.installation_states)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_connection = new Gcp.DeveloperConnect.Connection(\"my-connection\", new()\n    {\n        Location = \"us-central1\",\n        ConnectionId = \"tf-test-connection-cred\",\n        GithubConfig = new Gcp.DeveloperConnect.Inputs.ConnectionGithubConfigArgs\n        {\n            GithubApp = \"DEVELOPER_CONNECT\",\n            AuthorizerCredential = new Gcp.DeveloperConnect.Inputs.ConnectionGithubConfigAuthorizerCredentialArgs\n            {\n                OauthTokenSecretVersion = \"projects/your-project/secrets/your-secret-id/versions/latest\",\n            },\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"nextSteps\"] = my_connection.InstallationStates,\n    };\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/developerconnect\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := developerconnect.NewConnection(ctx, \"my-connection\", \u0026developerconnect.ConnectionArgs{\n\t\t\tLocation:     pulumi.String(\"us-central1\"),\n\t\t\tConnectionId: pulumi.String(\"tf-test-connection-cred\"),\n\t\t\tGithubConfig: \u0026developerconnect.ConnectionGithubConfigArgs{\n\t\t\t\tGithubApp: pulumi.String(\"DEVELOPER_CONNECT\"),\n\t\t\t\tAuthorizerCredential: \u0026developerconnect.ConnectionGithubConfigAuthorizerCredentialArgs{\n\t\t\t\t\tOauthTokenSecretVersion: pulumi.String(\"projects/your-project/secrets/your-secret-id/versions/latest\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"nextSteps\", my_connection.InstallationStates)\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.developerconnect.Connection;\nimport com.pulumi.gcp.developerconnect.ConnectionArgs;\nimport com.pulumi.gcp.developerconnect.inputs.ConnectionGithubConfigArgs;\nimport com.pulumi.gcp.developerconnect.inputs.ConnectionGithubConfigAuthorizerCredentialArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var my_connection = new Connection(\"my-connection\", ConnectionArgs.builder()\n            .location(\"us-central1\")\n            .connectionId(\"tf-test-connection-cred\")\n            .githubConfig(ConnectionGithubConfigArgs.builder()\n                .githubApp(\"DEVELOPER_CONNECT\")\n                .authorizerCredential(ConnectionGithubConfigAuthorizerCredentialArgs.builder()\n                    .oauthTokenSecretVersion(\"projects/your-project/secrets/your-secret-id/versions/latest\")\n                    .build())\n                .build())\n            .build());\n\n        ctx.export(\"nextSteps\", my_connection.installationStates());\n    }\n}\n```\n```yaml\nresources:\n  my-connection:\n    type: gcp:developerconnect:Connection\n    properties:\n      location: us-central1\n      connectionId: tf-test-connection-cred\n      githubConfig:\n        githubApp: DEVELOPER_CONNECT\n        authorizerCredential:\n          oauthTokenSecretVersion: projects/your-project/secrets/your-secret-id/versions/latest\noutputs:\n  nextSteps: ${[\"my-connection\"].installationStates}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Developer Connect Connection Existing Installation\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst github_token_secret = new gcp.secretmanager.Secret(\"github-token-secret\", {\n    secretId: \"github-token-secret\",\n    replication: {\n        auto: {},\n    },\n});\nconst github_token_secret_version = new gcp.secretmanager.SecretVersion(\"github-token-secret-version\", {\n    secret: github_token_secret.id,\n    secretData: std.file({\n        input: \"my-github-token.txt\",\n    }).then(invoke =\u003e invoke.result),\n});\nconst devconnect_p4sa = new gcp.projects.ServiceIdentity(\"devconnect-p4sa\", {service: \"developerconnect.googleapis.com\"});\nconst p4sa_secretAccessor = gcp.organizations.getIAMPolicyOutput({\n    bindings: [{\n        role: \"roles/secretmanager.secretAccessor\",\n        members: [devconnect_p4sa.member],\n    }],\n});\nconst policy = new gcp.secretmanager.SecretIamPolicy(\"policy\", {\n    secretId: github_token_secret.secretId,\n    policyData: p4sa_secretAccessor.apply(p4sa_secretAccessor =\u003e p4sa_secretAccessor.policyData),\n});\nconst my_connection = new gcp.developerconnect.Connection(\"my-connection\", {\n    location: \"us-central1\",\n    connectionId: \"my-connection\",\n    githubConfig: {\n        githubApp: \"DEVELOPER_CONNECT\",\n        appInstallationId: \"123123\",\n        authorizerCredential: {\n            oauthTokenSecretVersion: github_token_secret_version.id,\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\ngithub_token_secret = gcp.secretmanager.Secret(\"github-token-secret\",\n    secret_id=\"github-token-secret\",\n    replication={\n        \"auto\": {},\n    })\ngithub_token_secret_version = gcp.secretmanager.SecretVersion(\"github-token-secret-version\",\n    secret=github_token_secret.id,\n    secret_data=std.file(input=\"my-github-token.txt\").result)\ndevconnect_p4sa = gcp.projects.ServiceIdentity(\"devconnect-p4sa\", service=\"developerconnect.googleapis.com\")\np4sa_secret_accessor = gcp.organizations.get_iam_policy_output(bindings=[{\n    \"role\": \"roles/secretmanager.secretAccessor\",\n    \"members\": [devconnect_p4sa.member],\n}])\npolicy = gcp.secretmanager.SecretIamPolicy(\"policy\",\n    secret_id=github_token_secret.secret_id,\n    policy_data=p4sa_secret_accessor.policy_data)\nmy_connection = gcp.developerconnect.Connection(\"my-connection\",\n    location=\"us-central1\",\n    connection_id=\"my-connection\",\n    github_config={\n        \"github_app\": \"DEVELOPER_CONNECT\",\n        \"app_installation_id\": \"123123\",\n        \"authorizer_credential\": {\n            \"oauth_token_secret_version\": github_token_secret_version.id,\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var github_token_secret = new Gcp.SecretManager.Secret(\"github-token-secret\", new()\n    {\n        SecretId = \"github-token-secret\",\n        Replication = new Gcp.SecretManager.Inputs.SecretReplicationArgs\n        {\n            Auto = null,\n        },\n    });\n\n    var github_token_secret_version = new Gcp.SecretManager.SecretVersion(\"github-token-secret-version\", new()\n    {\n        Secret = github_token_secret.Id,\n        SecretData = Std.File.Invoke(new()\n        {\n            Input = \"my-github-token.txt\",\n        }).Apply(invoke =\u003e invoke.Result),\n    });\n\n    var devconnect_p4sa = new Gcp.Projects.ServiceIdentity(\"devconnect-p4sa\", new()\n    {\n        Service = \"developerconnect.googleapis.com\",\n    });\n\n    var p4sa_secretAccessor = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/secretmanager.secretAccessor\",\n                Members = new[]\n                {\n                    devconnect_p4sa.Member,\n                },\n            },\n        },\n    });\n\n    var policy = new Gcp.SecretManager.SecretIamPolicy(\"policy\", new()\n    {\n        SecretId = github_token_secret.SecretId,\n        PolicyData = p4sa_secretAccessor.Apply(p4sa_secretAccessor =\u003e p4sa_secretAccessor.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData)),\n    });\n\n    var my_connection = new Gcp.DeveloperConnect.Connection(\"my-connection\", new()\n    {\n        Location = \"us-central1\",\n        ConnectionId = \"my-connection\",\n        GithubConfig = new Gcp.DeveloperConnect.Inputs.ConnectionGithubConfigArgs\n        {\n            GithubApp = \"DEVELOPER_CONNECT\",\n            AppInstallationId = \"123123\",\n            AuthorizerCredential = new Gcp.DeveloperConnect.Inputs.ConnectionGithubConfigAuthorizerCredentialArgs\n            {\n                OauthTokenSecretVersion = github_token_secret_version.Id,\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/developerconnect\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/secretmanager\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := secretmanager.NewSecret(ctx, \"github-token-secret\", \u0026secretmanager.SecretArgs{\n\t\t\tSecretId: pulumi.String(\"github-token-secret\"),\n\t\t\tReplication: \u0026secretmanager.SecretReplicationArgs{\n\t\t\t\tAuto: \u0026secretmanager.SecretReplicationAutoArgs{},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tinvokeFile, err := std.File(ctx, \u0026std.FileArgs{\n\t\t\tInput: \"my-github-token.txt\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretmanager.NewSecretVersion(ctx, \"github-token-secret-version\", \u0026secretmanager.SecretVersionArgs{\n\t\t\tSecret:     github_token_secret.ID(),\n\t\t\tSecretData: pulumi.String(invokeFile.Result),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = projects.NewServiceIdentity(ctx, \"devconnect-p4sa\", \u0026projects.ServiceIdentityArgs{\n\t\t\tService: pulumi.String(\"developerconnect.googleapis.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tp4sa_secretAccessor := organizations.LookupIAMPolicyOutput(ctx, organizations.GetIAMPolicyOutputArgs{\n\t\t\tBindings: organizations.GetIAMPolicyBindingArray{\n\t\t\t\t\u0026organizations.GetIAMPolicyBindingArgs{\n\t\t\t\t\tRole: pulumi.String(\"roles/secretmanager.secretAccessor\"),\n\t\t\t\t\tMembers: pulumi.StringArray{\n\t\t\t\t\t\tdevconnect_p4sa.Member,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\t_, err = secretmanager.NewSecretIamPolicy(ctx, \"policy\", \u0026secretmanager.SecretIamPolicyArgs{\n\t\t\tSecretId: github_token_secret.SecretId,\n\t\t\tPolicyData: pulumi.String(p4sa_secretAccessor.ApplyT(func(p4sa_secretAccessor organizations.GetIAMPolicyResult) (*string, error) {\n\t\t\t\treturn \u0026p4sa_secretAccessor.PolicyData, nil\n\t\t\t}).(pulumi.StringPtrOutput)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = developerconnect.NewConnection(ctx, \"my-connection\", \u0026developerconnect.ConnectionArgs{\n\t\t\tLocation:     pulumi.String(\"us-central1\"),\n\t\t\tConnectionId: pulumi.String(\"my-connection\"),\n\t\t\tGithubConfig: \u0026developerconnect.ConnectionGithubConfigArgs{\n\t\t\t\tGithubApp:         pulumi.String(\"DEVELOPER_CONNECT\"),\n\t\t\t\tAppInstallationId: pulumi.String(\"123123\"),\n\t\t\t\tAuthorizerCredential: \u0026developerconnect.ConnectionGithubConfigAuthorizerCredentialArgs{\n\t\t\t\t\tOauthTokenSecretVersion: github_token_secret_version.ID(),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.secretmanager.Secret;\nimport com.pulumi.gcp.secretmanager.SecretArgs;\nimport com.pulumi.gcp.secretmanager.inputs.SecretReplicationArgs;\nimport com.pulumi.gcp.secretmanager.inputs.SecretReplicationAutoArgs;\nimport com.pulumi.gcp.secretmanager.SecretVersion;\nimport com.pulumi.gcp.secretmanager.SecretVersionArgs;\nimport com.pulumi.gcp.projects.ServiceIdentity;\nimport com.pulumi.gcp.projects.ServiceIdentityArgs;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.secretmanager.SecretIamPolicy;\nimport com.pulumi.gcp.secretmanager.SecretIamPolicyArgs;\nimport com.pulumi.gcp.developerconnect.Connection;\nimport com.pulumi.gcp.developerconnect.ConnectionArgs;\nimport com.pulumi.gcp.developerconnect.inputs.ConnectionGithubConfigArgs;\nimport com.pulumi.gcp.developerconnect.inputs.ConnectionGithubConfigAuthorizerCredentialArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var github_token_secret = new Secret(\"github-token-secret\", SecretArgs.builder()\n            .secretId(\"github-token-secret\")\n            .replication(SecretReplicationArgs.builder()\n                .auto()\n                .build())\n            .build());\n\n        var github_token_secret_version = new SecretVersion(\"github-token-secret-version\", SecretVersionArgs.builder()\n            .secret(github_token_secret.id())\n            .secretData(StdFunctions.file(FileArgs.builder()\n                .input(\"my-github-token.txt\")\n                .build()).result())\n            .build());\n\n        var devconnect_p4sa = new ServiceIdentity(\"devconnect-p4sa\", ServiceIdentityArgs.builder()\n            .service(\"developerconnect.googleapis.com\")\n            .build());\n\n        final var p4sa-secretAccessor = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/secretmanager.secretAccessor\")\n                .members(devconnect_p4sa.member())\n                .build())\n            .build());\n\n        var policy = new SecretIamPolicy(\"policy\", SecretIamPolicyArgs.builder()\n            .secretId(github_token_secret.secretId())\n            .policyData(p4sa_secretAccessor.applyValue(p4sa_secretAccessor -\u003e p4sa_secretAccessor.policyData()))\n            .build());\n\n        var my_connection = new Connection(\"my-connection\", ConnectionArgs.builder()\n            .location(\"us-central1\")\n            .connectionId(\"my-connection\")\n            .githubConfig(ConnectionGithubConfigArgs.builder()\n                .githubApp(\"DEVELOPER_CONNECT\")\n                .appInstallationId(123123)\n                .authorizerCredential(ConnectionGithubConfigAuthorizerCredentialArgs.builder()\n                    .oauthTokenSecretVersion(github_token_secret_version.id())\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  github-token-secret:\n    type: gcp:secretmanager:Secret\n    properties:\n      secretId: github-token-secret\n      replication:\n        auto: {}\n  github-token-secret-version:\n    type: gcp:secretmanager:SecretVersion\n    properties:\n      secret: ${[\"github-token-secret\"].id}\n      secretData:\n        fn::invoke:\n          function: std:file\n          arguments:\n            input: my-github-token.txt\n          return: result\n  devconnect-p4sa:\n    type: gcp:projects:ServiceIdentity\n    properties:\n      service: developerconnect.googleapis.com\n  policy:\n    type: gcp:secretmanager:SecretIamPolicy\n    properties:\n      secretId: ${[\"github-token-secret\"].secretId}\n      policyData: ${[\"p4sa-secretAccessor\"].policyData}\n  my-connection:\n    type: gcp:developerconnect:Connection\n    properties:\n      location: us-central1\n      connectionId: my-connection\n      githubConfig:\n        githubApp: DEVELOPER_CONNECT\n        appInstallationId: 123123\n        authorizerCredential:\n          oauthTokenSecretVersion: ${[\"github-token-secret-version\"].id}\nvariables:\n  p4sa-secretAccessor:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/secretmanager.secretAccessor\n            members:\n              - ${[\"devconnect-p4sa\"].member}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nConnection can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{location}}/connections/{{connection_id}}`\n\n* `{{project}}/{{location}}/{{connection_id}}`\n\n* `{{location}}/{{connection_id}}`\n\nWhen using the `pulumi import` command, Connection can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:developerconnect/connection:Connection default projects/{{project}}/locations/{{location}}/connections/{{connection_id}}\n```\n\n```sh\n$ pulumi import gcp:developerconnect/connection:Connection default {{project}}/{{location}}/{{connection_id}}\n```\n\n```sh\n$ pulumi import gcp:developerconnect/connection:Connection default {{location}}/{{connection_id}}\n```\n\n",
             "properties": {
                 "annotations": {
                     "type": "object",
@@ -236557,7 +236557,7 @@
             }
         },
         "gcp:logging/billingAccountBucketConfig:BillingAccountBucketConfig": {
-            "description": "Manages a billing account level logging bucket config. For more information see\n[the official logging documentation](https://cloud.google.com/logging/docs/) and\n[Storing Logs](https://cloud.google.com/logging/docs/storage).\n\n\u003e **Note:** Logging buckets are automatically created for a given folder, project, organization, billingAccount and cannot be deleted. Creating a resource of this type will acquire and update the resource that already exists at the desired location. These buckets cannot be removed so deleting this resource will remove the bucket config from your state but will leave the logging bucket unchanged. The buckets that are currently automatically created are \"_Default\" and \"_Required\".\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.organizations.getBillingAccount({\n    billingAccount: \"00AA00-000AAA-00AA0A\",\n});\nconst basic = new gcp.logging.BillingAccountBucketConfig(\"basic\", {\n    billingAccount: _default.then(_default =\u003e _default.billingAccount),\n    location: \"global\",\n    retentionDays: 30,\n    bucketId: \"_Default\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.organizations.get_billing_account(billing_account=\"00AA00-000AAA-00AA0A\")\nbasic = gcp.logging.BillingAccountBucketConfig(\"basic\",\n    billing_account=default.billing_account,\n    location=\"global\",\n    retention_days=30,\n    bucket_id=\"_Default\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Organizations.GetBillingAccount.Invoke(new()\n    {\n        BillingAccount = \"00AA00-000AAA-00AA0A\",\n    });\n\n    var basic = new Gcp.Logging.BillingAccountBucketConfig(\"basic\", new()\n    {\n        BillingAccount = @default.Apply(@default =\u003e @default.Apply(getBillingAccountResult =\u003e getBillingAccountResult.BillingAccount)),\n        Location = \"global\",\n        RetentionDays = 30,\n        BucketId = \"_Default\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/logging\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := organizations.GetBillingAccount(ctx, \u0026organizations.GetBillingAccountArgs{\n\t\t\tBillingAccount: pulumi.StringRef(\"00AA00-000AAA-00AA0A\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = logging.NewBillingAccountBucketConfig(ctx, \"basic\", \u0026logging.BillingAccountBucketConfigArgs{\n\t\t\tBillingAccount: pulumi.String(_default.BillingAccount),\n\t\t\tLocation:       pulumi.String(\"global\"),\n\t\t\tRetentionDays:  pulumi.Int(30),\n\t\t\tBucketId:       pulumi.String(\"_Default\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetBillingAccountArgs;\nimport com.pulumi.gcp.logging.BillingAccountBucketConfig;\nimport com.pulumi.gcp.logging.BillingAccountBucketConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = OrganizationsFunctions.getBillingAccount(GetBillingAccountArgs.builder()\n            .billingAccount(\"00AA00-000AAA-00AA0A\")\n            .build());\n\n        var basic = new BillingAccountBucketConfig(\"basic\", BillingAccountBucketConfigArgs.builder()\n            .billingAccount(default_.billingAccount())\n            .location(\"global\")\n            .retentionDays(30)\n            .bucketId(\"_Default\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  basic:\n    type: gcp:logging:BillingAccountBucketConfig\n    properties:\n      billingAccount: ${default.billingAccount}\n      location: global\n      retentionDays: 30\n      bucketId: _Default\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:organizations:getBillingAccount\n      arguments:\n        billingAccount: 00AA00-000AAA-00AA0A\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\nCreate logging bucket with index configs\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```yaml\nresources:\n  example-billing-account-bucket-index-configs:\n    type: gcp:logging:BillingAccountBucketConfig\n    properties:\n      folder: ${default.billingAccount}\n      location: global\n      retentionDays: 30\n      bucketId: _Default\n      indexConfigs:\n        - fieldPath: jsonPayload.request.status\n          type: INDEX_TYPE_STRING\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nThis resource can be imported using the following format:\n\n* `billingAccounts/{{billingAccount}}/locations/{{location}}/buckets/{{bucket_id}}`\n\nWhen using the `pulumi import` command, this resource can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:logging/billingAccountBucketConfig:BillingAccountBucketConfig default billingAccounts/{{billingAccount}}/locations/{{location}}/buckets/{{bucket_id}}\n```\n\n",
+            "description": "Manages a billing account level logging bucket config. For more information see\n[the official logging documentation](https://cloud.google.com/logging/docs/) and\n[Storing Logs](https://cloud.google.com/logging/docs/storage).\n\n\u003e **Note:** Logging buckets are automatically created for a given folder, project, organization, billingAccount and cannot be deleted. Creating a resource of this type will acquire and update the resource that already exists at the desired location. These buckets cannot be removed so deleting this resource will remove the bucket config from your state but will leave the logging bucket unchanged. The buckets that are currently automatically created are \"_Default\" and \"_Required\".\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.organizations.getBillingAccount({\n    billingAccount: \"00AA00-000AAA-00AA0A\",\n});\nconst basic = new gcp.logging.BillingAccountBucketConfig(\"basic\", {\n    billingAccount: _default.then(_default =\u003e _default.billingAccount),\n    location: \"global\",\n    retentionDays: 30,\n    bucketId: \"_Default\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.organizations.get_billing_account(billing_account=\"00AA00-000AAA-00AA0A\")\nbasic = gcp.logging.BillingAccountBucketConfig(\"basic\",\n    billing_account=default.billing_account,\n    location=\"global\",\n    retention_days=30,\n    bucket_id=\"_Default\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Organizations.GetBillingAccount.Invoke(new()\n    {\n        BillingAccount = \"00AA00-000AAA-00AA0A\",\n    });\n\n    var basic = new Gcp.Logging.BillingAccountBucketConfig(\"basic\", new()\n    {\n        BillingAccount = @default.Apply(@default =\u003e @default.Apply(getBillingAccountResult =\u003e getBillingAccountResult.BillingAccount)),\n        Location = \"global\",\n        RetentionDays = 30,\n        BucketId = \"_Default\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/logging\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := organizations.GetBillingAccount(ctx, \u0026organizations.GetBillingAccountArgs{\n\t\t\tBillingAccount: pulumi.StringRef(\"00AA00-000AAA-00AA0A\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = logging.NewBillingAccountBucketConfig(ctx, \"basic\", \u0026logging.BillingAccountBucketConfigArgs{\n\t\t\tBillingAccount: pulumi.String(_default.BillingAccount),\n\t\t\tLocation:       pulumi.String(\"global\"),\n\t\t\tRetentionDays:  pulumi.Int(30),\n\t\t\tBucketId:       pulumi.String(\"_Default\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetBillingAccountArgs;\nimport com.pulumi.gcp.logging.BillingAccountBucketConfig;\nimport com.pulumi.gcp.logging.BillingAccountBucketConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = OrganizationsFunctions.getBillingAccount(GetBillingAccountArgs.builder()\n            .billingAccount(\"00AA00-000AAA-00AA0A\")\n            .build());\n\n        var basic = new BillingAccountBucketConfig(\"basic\", BillingAccountBucketConfigArgs.builder()\n            .billingAccount(default_.billingAccount())\n            .location(\"global\")\n            .retentionDays(30)\n            .bucketId(\"_Default\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  basic:\n    type: gcp:logging:BillingAccountBucketConfig\n    properties:\n      billingAccount: ${default.billingAccount}\n      location: global\n      retentionDays: 30\n      bucketId: _Default\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:organizations:getBillingAccount\n      arguments:\n        billingAccount: 00AA00-000AAA-00AA0A\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\nCreate logging bucket with index configs\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```yaml\nresources:\n  example-billing-account-bucket-index-configs:\n    type: gcp:logging:BillingAccountBucketConfig\n    properties:\n      folder: ${default.billingAccount}\n      location: global\n      retentionDays: 30\n      bucketId: _Default\n      indexConfigs:\n        - fieldPath: jsonPayload.request.status\n          type: INDEX_TYPE_STRING\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nThis resource can be imported using the following format:\n\n* `billingAccounts/{{billingAccount}}/locations/{{location}}/buckets/{{bucket_id}}`\n\nWhen using the `pulumi import` command, this resource can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:logging/billingAccountBucketConfig:BillingAccountBucketConfig default billingAccounts/{{billingAccount}}/locations/{{location}}/buckets/{{bucket_id}}\n```\n\n",
             "properties": {
                 "billingAccount": {
                     "type": "string",
@@ -238325,7 +238325,7 @@
             }
         },
         "gcp:logging/organizationBucketConfig:OrganizationBucketConfig": {
-            "description": "Manages a organization-level logging bucket config. For more information see\n[the official logging documentation](https://cloud.google.com/logging/docs/) and\n[Storing Logs](https://cloud.google.com/logging/docs/storage).\n\n\u003e **Note:** Logging buckets are automatically created for a given folder, project, organization, billingAccount and cannot be deleted. Creating a resource of this type will acquire and update the resource that already exists at the desired location. These buckets cannot be removed so deleting this resource will remove the bucket config from your state but will leave the logging bucket unchanged. The buckets that are currently automatically created are \"_Default\" and \"_Required\".\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.organizations.getOrganization({\n    organization: \"123456789\",\n});\nconst basic = new gcp.logging.OrganizationBucketConfig(\"basic\", {\n    organization: _default.then(_default =\u003e _default.organization),\n    location: \"global\",\n    retentionDays: 30,\n    bucketId: \"_Default\",\n    indexConfigs: [{\n        fieldPath: \"jsonPayload.request.status\",\n        type: \"INDEX_TYPE_STRING\",\n    }],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.organizations.get_organization(organization=\"123456789\")\nbasic = gcp.logging.OrganizationBucketConfig(\"basic\",\n    organization=default.organization,\n    location=\"global\",\n    retention_days=30,\n    bucket_id=\"_Default\",\n    index_configs=[{\n        \"field_path\": \"jsonPayload.request.status\",\n        \"type\": \"INDEX_TYPE_STRING\",\n    }])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Organizations.GetOrganization.Invoke(new()\n    {\n        Organization = \"123456789\",\n    });\n\n    var basic = new Gcp.Logging.OrganizationBucketConfig(\"basic\", new()\n    {\n        Organization = @default.Apply(@default =\u003e @default.Apply(getOrganizationResult =\u003e getOrganizationResult.Organization)),\n        Location = \"global\",\n        RetentionDays = 30,\n        BucketId = \"_Default\",\n        IndexConfigs = new[]\n        {\n            new Gcp.Logging.Inputs.OrganizationBucketConfigIndexConfigArgs\n            {\n                FieldPath = \"jsonPayload.request.status\",\n                Type = \"INDEX_TYPE_STRING\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/logging\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := organizations.GetOrganization(ctx, \u0026organizations.GetOrganizationArgs{\n\t\t\tOrganization: pulumi.StringRef(\"123456789\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = logging.NewOrganizationBucketConfig(ctx, \"basic\", \u0026logging.OrganizationBucketConfigArgs{\n\t\t\tOrganization:  pulumi.String(_default.Organization),\n\t\t\tLocation:      pulumi.String(\"global\"),\n\t\t\tRetentionDays: pulumi.Int(30),\n\t\t\tBucketId:      pulumi.String(\"_Default\"),\n\t\t\tIndexConfigs: logging.OrganizationBucketConfigIndexConfigArray{\n\t\t\t\t\u0026logging.OrganizationBucketConfigIndexConfigArgs{\n\t\t\t\t\tFieldPath: pulumi.String(\"jsonPayload.request.status\"),\n\t\t\t\t\tType:      pulumi.String(\"INDEX_TYPE_STRING\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetOrganizationArgs;\nimport com.pulumi.gcp.logging.OrganizationBucketConfig;\nimport com.pulumi.gcp.logging.OrganizationBucketConfigArgs;\nimport com.pulumi.gcp.logging.inputs.OrganizationBucketConfigIndexConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = OrganizationsFunctions.getOrganization(GetOrganizationArgs.builder()\n            .organization(\"123456789\")\n            .build());\n\n        var basic = new OrganizationBucketConfig(\"basic\", OrganizationBucketConfigArgs.builder()\n            .organization(default_.organization())\n            .location(\"global\")\n            .retentionDays(30)\n            .bucketId(\"_Default\")\n            .indexConfigs(OrganizationBucketConfigIndexConfigArgs.builder()\n                .fieldPath(\"jsonPayload.request.status\")\n                .type(\"INDEX_TYPE_STRING\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  basic:\n    type: gcp:logging:OrganizationBucketConfig\n    properties:\n      organization: ${default.organization}\n      location: global\n      retentionDays: 30\n      bucketId: _Default\n      indexConfigs:\n        - fieldPath: jsonPayload.request.status\n          type: INDEX_TYPE_STRING\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:organizations:getOrganization\n      arguments:\n        organization: '123456789'\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nThis resource can be imported using the following format:\n\n* `organizations/{{organization}}/locations/{{location}}/buckets/{{bucket_id}}`\n\nWhen using the `pulumi import` command, this resource can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:logging/organizationBucketConfig:OrganizationBucketConfig default organizations/{{organization}}/locations/{{location}}/buckets/{{bucket_id}}\n```\n\n",
+            "description": "Manages a organization-level logging bucket config. For more information see\n[the official logging documentation](https://cloud.google.com/logging/docs/) and\n[Storing Logs](https://cloud.google.com/logging/docs/storage).\n\n\u003e **Note:** Logging buckets are automatically created for a given folder, project, organization, billingAccount and cannot be deleted. Creating a resource of this type will acquire and update the resource that already exists at the desired location. These buckets cannot be removed so deleting this resource will remove the bucket config from your state but will leave the logging bucket unchanged. The buckets that are currently automatically created are \"_Default\" and \"_Required\".\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.organizations.getOrganization({\n    organization: \"123456789\",\n});\nconst basic = new gcp.logging.OrganizationBucketConfig(\"basic\", {\n    organization: _default.then(_default =\u003e _default.organization),\n    location: \"global\",\n    retentionDays: 30,\n    bucketId: \"_Default\",\n    indexConfigs: [{\n        fieldPath: \"jsonPayload.request.status\",\n        type: \"INDEX_TYPE_STRING\",\n    }],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.organizations.get_organization(organization=\"123456789\")\nbasic = gcp.logging.OrganizationBucketConfig(\"basic\",\n    organization=default.organization,\n    location=\"global\",\n    retention_days=30,\n    bucket_id=\"_Default\",\n    index_configs=[{\n        \"field_path\": \"jsonPayload.request.status\",\n        \"type\": \"INDEX_TYPE_STRING\",\n    }])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Organizations.GetOrganization.Invoke(new()\n    {\n        Organization = \"123456789\",\n    });\n\n    var basic = new Gcp.Logging.OrganizationBucketConfig(\"basic\", new()\n    {\n        Organization = @default.Apply(@default =\u003e @default.Apply(getOrganizationResult =\u003e getOrganizationResult.Organization)),\n        Location = \"global\",\n        RetentionDays = 30,\n        BucketId = \"_Default\",\n        IndexConfigs = new[]\n        {\n            new Gcp.Logging.Inputs.OrganizationBucketConfigIndexConfigArgs\n            {\n                FieldPath = \"jsonPayload.request.status\",\n                Type = \"INDEX_TYPE_STRING\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/logging\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := organizations.GetOrganization(ctx, \u0026organizations.GetOrganizationArgs{\n\t\t\tOrganization: pulumi.StringRef(\"123456789\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = logging.NewOrganizationBucketConfig(ctx, \"basic\", \u0026logging.OrganizationBucketConfigArgs{\n\t\t\tOrganization:  pulumi.String(_default.Organization),\n\t\t\tLocation:      pulumi.String(\"global\"),\n\t\t\tRetentionDays: pulumi.Int(30),\n\t\t\tBucketId:      pulumi.String(\"_Default\"),\n\t\t\tIndexConfigs: logging.OrganizationBucketConfigIndexConfigArray{\n\t\t\t\t\u0026logging.OrganizationBucketConfigIndexConfigArgs{\n\t\t\t\t\tFieldPath: pulumi.String(\"jsonPayload.request.status\"),\n\t\t\t\t\tType:      pulumi.String(\"INDEX_TYPE_STRING\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetOrganizationArgs;\nimport com.pulumi.gcp.logging.OrganizationBucketConfig;\nimport com.pulumi.gcp.logging.OrganizationBucketConfigArgs;\nimport com.pulumi.gcp.logging.inputs.OrganizationBucketConfigIndexConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = OrganizationsFunctions.getOrganization(GetOrganizationArgs.builder()\n            .organization(\"123456789\")\n            .build());\n\n        var basic = new OrganizationBucketConfig(\"basic\", OrganizationBucketConfigArgs.builder()\n            .organization(default_.organization())\n            .location(\"global\")\n            .retentionDays(30)\n            .bucketId(\"_Default\")\n            .indexConfigs(OrganizationBucketConfigIndexConfigArgs.builder()\n                .fieldPath(\"jsonPayload.request.status\")\n                .type(\"INDEX_TYPE_STRING\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  basic:\n    type: gcp:logging:OrganizationBucketConfig\n    properties:\n      organization: ${default.organization}\n      location: global\n      retentionDays: 30\n      bucketId: _Default\n      indexConfigs:\n        - fieldPath: jsonPayload.request.status\n          type: INDEX_TYPE_STRING\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:organizations:getOrganization\n      arguments:\n        organization: '123456789'\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nThis resource can be imported using the following format:\n\n* `organizations/{{organization}}/locations/{{location}}/buckets/{{bucket_id}}`\n\nWhen using the `pulumi import` command, this resource can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:logging/organizationBucketConfig:OrganizationBucketConfig default organizations/{{organization}}/locations/{{location}}/buckets/{{bucket_id}}\n```\n\n",
             "properties": {
                 "bucketId": {
                     "type": "string",
@@ -242066,7 +242066,7 @@
             }
         },
         "gcp:monitoring/slo:Slo": {
-            "description": "A Service-Level Objective (SLO) describes the level of desired good\nservice. It consists of a service-level indicator (SLI), a performance\ngoal, and a period over which the objective is to be evaluated against\nthat goal. The SLO can use SLIs defined in a number of different manners.\nTypical SLOs might include \"99% of requests in each rolling week have\nlatency below 200 milliseconds\" or \"99.5% of requests in each calendar\nmonth return successfully.\"\n\n\nTo get more information about Slo, see:\n\n* [API documentation](https://cloud.google.com/monitoring/api/ref_v3/rest/v3/services.serviceLevelObjectives)\n* How-to Guides\n    * [Monitoring API Documentation](https://cloud.google.com/monitoring/api/v3/)\n    * [Service Monitoring](https://cloud.google.com/monitoring/service-monitoring)\n\n## Example Usage\n\n### Monitoring Slo Appengine\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.monitoring.getAppEngineService({\n    moduleId: \"default\",\n});\nconst appengSlo = new gcp.monitoring.Slo(\"appeng_slo\", {\n    service: _default.then(_default =\u003e _default.serviceId),\n    sloId: \"ae-slo\",\n    displayName: \"Test SLO for App Engine\",\n    goal: 0.9,\n    calendarPeriod: \"DAY\",\n    basicSli: {\n        latency: {\n            threshold: \"1s\",\n        },\n    },\n    userLabels: {\n        my_key: \"my_value\",\n        my_other_key: \"my_other_value\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.monitoring.get_app_engine_service(module_id=\"default\")\nappeng_slo = gcp.monitoring.Slo(\"appeng_slo\",\n    service=default.service_id,\n    slo_id=\"ae-slo\",\n    display_name=\"Test SLO for App Engine\",\n    goal=0.9,\n    calendar_period=\"DAY\",\n    basic_sli={\n        \"latency\": {\n            \"threshold\": \"1s\",\n        },\n    },\n    user_labels={\n        \"my_key\": \"my_value\",\n        \"my_other_key\": \"my_other_value\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Monitoring.GetAppEngineService.Invoke(new()\n    {\n        ModuleId = \"default\",\n    });\n\n    var appengSlo = new Gcp.Monitoring.Slo(\"appeng_slo\", new()\n    {\n        Service = @default.Apply(@default =\u003e @default.Apply(getAppEngineServiceResult =\u003e getAppEngineServiceResult.ServiceId)),\n        SloId = \"ae-slo\",\n        DisplayName = \"Test SLO for App Engine\",\n        Goal = 0.9,\n        CalendarPeriod = \"DAY\",\n        BasicSli = new Gcp.Monitoring.Inputs.SloBasicSliArgs\n        {\n            Latency = new Gcp.Monitoring.Inputs.SloBasicSliLatencyArgs\n            {\n                Threshold = \"1s\",\n            },\n        },\n        UserLabels = \n        {\n            { \"my_key\", \"my_value\" },\n            { \"my_other_key\", \"my_other_value\" },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/monitoring\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := monitoring.GetAppEngineService(ctx, \u0026monitoring.GetAppEngineServiceArgs{\n\t\t\tModuleId: \"default\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = monitoring.NewSlo(ctx, \"appeng_slo\", \u0026monitoring.SloArgs{\n\t\t\tService:        pulumi.String(_default.ServiceId),\n\t\t\tSloId:          pulumi.String(\"ae-slo\"),\n\t\t\tDisplayName:    pulumi.String(\"Test SLO for App Engine\"),\n\t\t\tGoal:           pulumi.Float64(0.9),\n\t\t\tCalendarPeriod: pulumi.String(\"DAY\"),\n\t\t\tBasicSli: \u0026monitoring.SloBasicSliArgs{\n\t\t\t\tLatency: \u0026monitoring.SloBasicSliLatencyArgs{\n\t\t\t\t\tThreshold: pulumi.String(\"1s\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tUserLabels: pulumi.StringMap{\n\t\t\t\t\"my_key\":       pulumi.String(\"my_value\"),\n\t\t\t\t\"my_other_key\": pulumi.String(\"my_other_value\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.monitoring.MonitoringFunctions;\nimport com.pulumi.gcp.monitoring.inputs.GetAppEngineServiceArgs;\nimport com.pulumi.gcp.monitoring.Slo;\nimport com.pulumi.gcp.monitoring.SloArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloBasicSliArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloBasicSliLatencyArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = MonitoringFunctions.getAppEngineService(GetAppEngineServiceArgs.builder()\n            .moduleId(\"default\")\n            .build());\n\n        var appengSlo = new Slo(\"appengSlo\", SloArgs.builder()\n            .service(default_.serviceId())\n            .sloId(\"ae-slo\")\n            .displayName(\"Test SLO for App Engine\")\n            .goal(0.9)\n            .calendarPeriod(\"DAY\")\n            .basicSli(SloBasicSliArgs.builder()\n                .latency(SloBasicSliLatencyArgs.builder()\n                    .threshold(\"1s\")\n                    .build())\n                .build())\n            .userLabels(Map.ofEntries(\n                Map.entry(\"my_key\", \"my_value\"),\n                Map.entry(\"my_other_key\", \"my_other_value\")\n            ))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  appengSlo:\n    type: gcp:monitoring:Slo\n    name: appeng_slo\n    properties:\n      service: ${default.serviceId}\n      sloId: ae-slo\n      displayName: Test SLO for App Engine\n      goal: 0.9\n      calendarPeriod: DAY\n      basicSli:\n        latency:\n          threshold: 1s\n      userLabels:\n        my_key: my_value\n        my_other_key: my_other_value\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:monitoring:getAppEngineService\n      arguments:\n        moduleId: default\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Monitoring Slo Request Based\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst customsrv = new gcp.monitoring.CustomService(\"customsrv\", {\n    serviceId: \"custom-srv-request-slos\",\n    displayName: \"My Custom Service\",\n});\nconst requestBasedSlo = new gcp.monitoring.Slo(\"request_based_slo\", {\n    service: customsrv.serviceId,\n    sloId: \"consumed-api-slo\",\n    displayName: \"Test SLO with request based SLI (good total ratio)\",\n    goal: 0.9,\n    rollingPeriodDays: 30,\n    requestBasedSli: {\n        distributionCut: {\n            distributionFilter: \"metric.type=\\\"serviceruntime.googleapis.com/api/request_latencies\\\" resource.type=\\\"api\\\"  \",\n            range: {\n                max: 0.5,\n            },\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ncustomsrv = gcp.monitoring.CustomService(\"customsrv\",\n    service_id=\"custom-srv-request-slos\",\n    display_name=\"My Custom Service\")\nrequest_based_slo = gcp.monitoring.Slo(\"request_based_slo\",\n    service=customsrv.service_id,\n    slo_id=\"consumed-api-slo\",\n    display_name=\"Test SLO with request based SLI (good total ratio)\",\n    goal=0.9,\n    rolling_period_days=30,\n    request_based_sli={\n        \"distribution_cut\": {\n            \"distribution_filter\": \"metric.type=\\\"serviceruntime.googleapis.com/api/request_latencies\\\" resource.type=\\\"api\\\"  \",\n            \"range\": {\n                \"max\": 0.5,\n            },\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var customsrv = new Gcp.Monitoring.CustomService(\"customsrv\", new()\n    {\n        ServiceId = \"custom-srv-request-slos\",\n        DisplayName = \"My Custom Service\",\n    });\n\n    var requestBasedSlo = new Gcp.Monitoring.Slo(\"request_based_slo\", new()\n    {\n        Service = customsrv.ServiceId,\n        SloId = \"consumed-api-slo\",\n        DisplayName = \"Test SLO with request based SLI (good total ratio)\",\n        Goal = 0.9,\n        RollingPeriodDays = 30,\n        RequestBasedSli = new Gcp.Monitoring.Inputs.SloRequestBasedSliArgs\n        {\n            DistributionCut = new Gcp.Monitoring.Inputs.SloRequestBasedSliDistributionCutArgs\n            {\n                DistributionFilter = \"metric.type=\\\"serviceruntime.googleapis.com/api/request_latencies\\\" resource.type=\\\"api\\\"  \",\n                Range = new Gcp.Monitoring.Inputs.SloRequestBasedSliDistributionCutRangeArgs\n                {\n                    Max = 0.5,\n                },\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/monitoring\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcustomsrv, err := monitoring.NewCustomService(ctx, \"customsrv\", \u0026monitoring.CustomServiceArgs{\n\t\t\tServiceId:   pulumi.String(\"custom-srv-request-slos\"),\n\t\t\tDisplayName: pulumi.String(\"My Custom Service\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = monitoring.NewSlo(ctx, \"request_based_slo\", \u0026monitoring.SloArgs{\n\t\t\tService:           customsrv.ServiceId,\n\t\t\tSloId:             pulumi.String(\"consumed-api-slo\"),\n\t\t\tDisplayName:       pulumi.String(\"Test SLO with request based SLI (good total ratio)\"),\n\t\t\tGoal:              pulumi.Float64(0.9),\n\t\t\tRollingPeriodDays: pulumi.Int(30),\n\t\t\tRequestBasedSli: \u0026monitoring.SloRequestBasedSliArgs{\n\t\t\t\tDistributionCut: \u0026monitoring.SloRequestBasedSliDistributionCutArgs{\n\t\t\t\t\tDistributionFilter: pulumi.String(\"metric.type=\\\"serviceruntime.googleapis.com/api/request_latencies\\\" resource.type=\\\"api\\\"  \"),\n\t\t\t\t\tRange: \u0026monitoring.SloRequestBasedSliDistributionCutRangeArgs{\n\t\t\t\t\t\tMax: pulumi.Float64(0.5),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.monitoring.CustomService;\nimport com.pulumi.gcp.monitoring.CustomServiceArgs;\nimport com.pulumi.gcp.monitoring.Slo;\nimport com.pulumi.gcp.monitoring.SloArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloRequestBasedSliArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloRequestBasedSliDistributionCutArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloRequestBasedSliDistributionCutRangeArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var customsrv = new CustomService(\"customsrv\", CustomServiceArgs.builder()\n            .serviceId(\"custom-srv-request-slos\")\n            .displayName(\"My Custom Service\")\n            .build());\n\n        var requestBasedSlo = new Slo(\"requestBasedSlo\", SloArgs.builder()\n            .service(customsrv.serviceId())\n            .sloId(\"consumed-api-slo\")\n            .displayName(\"Test SLO with request based SLI (good total ratio)\")\n            .goal(0.9)\n            .rollingPeriodDays(30)\n            .requestBasedSli(SloRequestBasedSliArgs.builder()\n                .distributionCut(SloRequestBasedSliDistributionCutArgs.builder()\n                    .distributionFilter(\"metric.type=\\\"serviceruntime.googleapis.com/api/request_latencies\\\" resource.type=\\\"api\\\"  \")\n                    .range(SloRequestBasedSliDistributionCutRangeArgs.builder()\n                        .max(0.5)\n                        .build())\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  customsrv:\n    type: gcp:monitoring:CustomService\n    properties:\n      serviceId: custom-srv-request-slos\n      displayName: My Custom Service\n  requestBasedSlo:\n    type: gcp:monitoring:Slo\n    name: request_based_slo\n    properties:\n      service: ${customsrv.serviceId}\n      sloId: consumed-api-slo\n      displayName: Test SLO with request based SLI (good total ratio)\n      goal: 0.9\n      rollingPeriodDays: 30\n      requestBasedSli:\n        distributionCut:\n          distributionFilter: 'metric.type=\"serviceruntime.googleapis.com/api/request_latencies\" resource.type=\"api\"  '\n          range:\n            max: 0.5\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Monitoring Slo Windows Based Good Bad Metric Filter\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst customsrv = new gcp.monitoring.CustomService(\"customsrv\", {\n    serviceId: \"custom-srv-windows-slos\",\n    displayName: \"My Custom Service\",\n});\nconst windowsBased = new gcp.monitoring.Slo(\"windows_based\", {\n    service: customsrv.serviceId,\n    displayName: \"Test SLO with window based SLI\",\n    goal: 0.95,\n    calendarPeriod: \"FORTNIGHT\",\n    windowsBasedSli: {\n        windowPeriod: \"400s\",\n        goodBadMetricFilter: std.join({\n            separator: \" AND \",\n            input: [\n                \"metric.type=\\\"monitoring.googleapis.com/uptime_check/check_passed\\\"\",\n                \"resource.type=\\\"uptime_url\\\"\",\n            ],\n        }).then(invoke =\u003e invoke.result),\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\ncustomsrv = gcp.monitoring.CustomService(\"customsrv\",\n    service_id=\"custom-srv-windows-slos\",\n    display_name=\"My Custom Service\")\nwindows_based = gcp.monitoring.Slo(\"windows_based\",\n    service=customsrv.service_id,\n    display_name=\"Test SLO with window based SLI\",\n    goal=0.95,\n    calendar_period=\"FORTNIGHT\",\n    windows_based_sli={\n        \"window_period\": \"400s\",\n        \"good_bad_metric_filter\": std.join(separator=\" AND \",\n            input=[\n                \"metric.type=\\\"monitoring.googleapis.com/uptime_check/check_passed\\\"\",\n                \"resource.type=\\\"uptime_url\\\"\",\n            ]).result,\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var customsrv = new Gcp.Monitoring.CustomService(\"customsrv\", new()\n    {\n        ServiceId = \"custom-srv-windows-slos\",\n        DisplayName = \"My Custom Service\",\n    });\n\n    var windowsBased = new Gcp.Monitoring.Slo(\"windows_based\", new()\n    {\n        Service = customsrv.ServiceId,\n        DisplayName = \"Test SLO with window based SLI\",\n        Goal = 0.95,\n        CalendarPeriod = \"FORTNIGHT\",\n        WindowsBasedSli = new Gcp.Monitoring.Inputs.SloWindowsBasedSliArgs\n        {\n            WindowPeriod = \"400s\",\n            GoodBadMetricFilter = Std.Join.Invoke(new()\n            {\n                Separator = \" AND \",\n                Input = new[]\n                {\n                    \"metric.type=\\\"monitoring.googleapis.com/uptime_check/check_passed\\\"\",\n                    \"resource.type=\\\"uptime_url\\\"\",\n                },\n            }).Apply(invoke =\u003e invoke.Result),\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/monitoring\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcustomsrv, err := monitoring.NewCustomService(ctx, \"customsrv\", \u0026monitoring.CustomServiceArgs{\n\t\t\tServiceId:   pulumi.String(\"custom-srv-windows-slos\"),\n\t\t\tDisplayName: pulumi.String(\"My Custom Service\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tinvokeJoin, err := std.Join(ctx, \u0026std.JoinArgs{\n\t\t\tSeparator: \" AND \",\n\t\t\tInput: []string{\n\t\t\t\t\"metric.type=\\\"monitoring.googleapis.com/uptime_check/check_passed\\\"\",\n\t\t\t\t\"resource.type=\\\"uptime_url\\\"\",\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = monitoring.NewSlo(ctx, \"windows_based\", \u0026monitoring.SloArgs{\n\t\t\tService:        customsrv.ServiceId,\n\t\t\tDisplayName:    pulumi.String(\"Test SLO with window based SLI\"),\n\t\t\tGoal:           pulumi.Float64(0.95),\n\t\t\tCalendarPeriod: pulumi.String(\"FORTNIGHT\"),\n\t\t\tWindowsBasedSli: \u0026monitoring.SloWindowsBasedSliArgs{\n\t\t\t\tWindowPeriod:        pulumi.String(\"400s\"),\n\t\t\t\tGoodBadMetricFilter: pulumi.String(invokeJoin.Result),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.monitoring.CustomService;\nimport com.pulumi.gcp.monitoring.CustomServiceArgs;\nimport com.pulumi.gcp.monitoring.Slo;\nimport com.pulumi.gcp.monitoring.SloArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var customsrv = new CustomService(\"customsrv\", CustomServiceArgs.builder()\n            .serviceId(\"custom-srv-windows-slos\")\n            .displayName(\"My Custom Service\")\n            .build());\n\n        var windowsBased = new Slo(\"windowsBased\", SloArgs.builder()\n            .service(customsrv.serviceId())\n            .displayName(\"Test SLO with window based SLI\")\n            .goal(0.95)\n            .calendarPeriod(\"FORTNIGHT\")\n            .windowsBasedSli(SloWindowsBasedSliArgs.builder()\n                .windowPeriod(\"400s\")\n                .goodBadMetricFilter(StdFunctions.join(JoinArgs.builder()\n                    .separator(\" AND \")\n                    .input(                    \n                        \"metric.type=\\\"monitoring.googleapis.com/uptime_check/check_passed\\\"\",\n                        \"resource.type=\\\"uptime_url\\\"\")\n                    .build()).result())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  customsrv:\n    type: gcp:monitoring:CustomService\n    properties:\n      serviceId: custom-srv-windows-slos\n      displayName: My Custom Service\n  windowsBased:\n    type: gcp:monitoring:Slo\n    name: windows_based\n    properties:\n      service: ${customsrv.serviceId}\n      displayName: Test SLO with window based SLI\n      goal: 0.95\n      calendarPeriod: FORTNIGHT\n      windowsBasedSli:\n        windowPeriod: 400s\n        goodBadMetricFilter:\n          fn::invoke:\n            function: std:join\n            arguments:\n              separator: ' AND '\n              input:\n                - metric.type=\"monitoring.googleapis.com/uptime_check/check_passed\"\n                - resource.type=\"uptime_url\"\n            return: result\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Monitoring Slo Windows Based Metric Mean\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst customsrv = new gcp.monitoring.CustomService(\"customsrv\", {\n    serviceId: \"custom-srv-windows-slos\",\n    displayName: \"My Custom Service\",\n});\nconst windowsBased = new gcp.monitoring.Slo(\"windows_based\", {\n    service: customsrv.serviceId,\n    displayName: \"Test SLO with window based SLI\",\n    goal: 0.9,\n    rollingPeriodDays: 20,\n    windowsBasedSli: {\n        windowPeriod: \"600s\",\n        metricMeanInRange: {\n            timeSeries: std.join({\n                separator: \" AND \",\n                input: [\n                    \"metric.type=\\\"agent.googleapis.com/cassandra/client_request/latency/95p\\\"\",\n                    \"resource.type=\\\"gce_instance\\\"\",\n                ],\n            }).then(invoke =\u003e invoke.result),\n            range: {\n                max: 5,\n            },\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\ncustomsrv = gcp.monitoring.CustomService(\"customsrv\",\n    service_id=\"custom-srv-windows-slos\",\n    display_name=\"My Custom Service\")\nwindows_based = gcp.monitoring.Slo(\"windows_based\",\n    service=customsrv.service_id,\n    display_name=\"Test SLO with window based SLI\",\n    goal=0.9,\n    rolling_period_days=20,\n    windows_based_sli={\n        \"window_period\": \"600s\",\n        \"metric_mean_in_range\": {\n            \"time_series\": std.join(separator=\" AND \",\n                input=[\n                    \"metric.type=\\\"agent.googleapis.com/cassandra/client_request/latency/95p\\\"\",\n                    \"resource.type=\\\"gce_instance\\\"\",\n                ]).result,\n            \"range\": {\n                \"max\": 5,\n            },\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var customsrv = new Gcp.Monitoring.CustomService(\"customsrv\", new()\n    {\n        ServiceId = \"custom-srv-windows-slos\",\n        DisplayName = \"My Custom Service\",\n    });\n\n    var windowsBased = new Gcp.Monitoring.Slo(\"windows_based\", new()\n    {\n        Service = customsrv.ServiceId,\n        DisplayName = \"Test SLO with window based SLI\",\n        Goal = 0.9,\n        RollingPeriodDays = 20,\n        WindowsBasedSli = new Gcp.Monitoring.Inputs.SloWindowsBasedSliArgs\n        {\n            WindowPeriod = \"600s\",\n            MetricMeanInRange = new Gcp.Monitoring.Inputs.SloWindowsBasedSliMetricMeanInRangeArgs\n            {\n                TimeSeries = Std.Join.Invoke(new()\n                {\n                    Separator = \" AND \",\n                    Input = new[]\n                    {\n                        \"metric.type=\\\"agent.googleapis.com/cassandra/client_request/latency/95p\\\"\",\n                        \"resource.type=\\\"gce_instance\\\"\",\n                    },\n                }).Apply(invoke =\u003e invoke.Result),\n                Range = new Gcp.Monitoring.Inputs.SloWindowsBasedSliMetricMeanInRangeRangeArgs\n                {\n                    Max = 5,\n                },\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/monitoring\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcustomsrv, err := monitoring.NewCustomService(ctx, \"customsrv\", \u0026monitoring.CustomServiceArgs{\n\t\t\tServiceId:   pulumi.String(\"custom-srv-windows-slos\"),\n\t\t\tDisplayName: pulumi.String(\"My Custom Service\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tinvokeJoin, err := std.Join(ctx, \u0026std.JoinArgs{\n\t\t\tSeparator: \" AND \",\n\t\t\tInput: []string{\n\t\t\t\t\"metric.type=\\\"agent.googleapis.com/cassandra/client_request/latency/95p\\\"\",\n\t\t\t\t\"resource.type=\\\"gce_instance\\\"\",\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = monitoring.NewSlo(ctx, \"windows_based\", \u0026monitoring.SloArgs{\n\t\t\tService:           customsrv.ServiceId,\n\t\t\tDisplayName:       pulumi.String(\"Test SLO with window based SLI\"),\n\t\t\tGoal:              pulumi.Float64(0.9),\n\t\t\tRollingPeriodDays: pulumi.Int(20),\n\t\t\tWindowsBasedSli: \u0026monitoring.SloWindowsBasedSliArgs{\n\t\t\t\tWindowPeriod: pulumi.String(\"600s\"),\n\t\t\t\tMetricMeanInRange: \u0026monitoring.SloWindowsBasedSliMetricMeanInRangeArgs{\n\t\t\t\t\tTimeSeries: pulumi.String(invokeJoin.Result),\n\t\t\t\t\tRange: \u0026monitoring.SloWindowsBasedSliMetricMeanInRangeRangeArgs{\n\t\t\t\t\t\tMax: pulumi.Float64(5),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.monitoring.CustomService;\nimport com.pulumi.gcp.monitoring.CustomServiceArgs;\nimport com.pulumi.gcp.monitoring.Slo;\nimport com.pulumi.gcp.monitoring.SloArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliMetricMeanInRangeArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliMetricMeanInRangeRangeArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var customsrv = new CustomService(\"customsrv\", CustomServiceArgs.builder()\n            .serviceId(\"custom-srv-windows-slos\")\n            .displayName(\"My Custom Service\")\n            .build());\n\n        var windowsBased = new Slo(\"windowsBased\", SloArgs.builder()\n            .service(customsrv.serviceId())\n            .displayName(\"Test SLO with window based SLI\")\n            .goal(0.9)\n            .rollingPeriodDays(20)\n            .windowsBasedSli(SloWindowsBasedSliArgs.builder()\n                .windowPeriod(\"600s\")\n                .metricMeanInRange(SloWindowsBasedSliMetricMeanInRangeArgs.builder()\n                    .timeSeries(StdFunctions.join(JoinArgs.builder()\n                        .separator(\" AND \")\n                        .input(                        \n                            \"metric.type=\\\"agent.googleapis.com/cassandra/client_request/latency/95p\\\"\",\n                            \"resource.type=\\\"gce_instance\\\"\")\n                        .build()).result())\n                    .range(SloWindowsBasedSliMetricMeanInRangeRangeArgs.builder()\n                        .max(5)\n                        .build())\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  customsrv:\n    type: gcp:monitoring:CustomService\n    properties:\n      serviceId: custom-srv-windows-slos\n      displayName: My Custom Service\n  windowsBased:\n    type: gcp:monitoring:Slo\n    name: windows_based\n    properties:\n      service: ${customsrv.serviceId}\n      displayName: Test SLO with window based SLI\n      goal: 0.9\n      rollingPeriodDays: 20\n      windowsBasedSli:\n        windowPeriod: 600s\n        metricMeanInRange:\n          timeSeries:\n            fn::invoke:\n              function: std:join\n              arguments:\n                separator: ' AND '\n                input:\n                  - metric.type=\"agent.googleapis.com/cassandra/client_request/latency/95p\"\n                  - resource.type=\"gce_instance\"\n              return: result\n          range:\n            max: 5\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Monitoring Slo Windows Based Metric Sum\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst customsrv = new gcp.monitoring.CustomService(\"customsrv\", {\n    serviceId: \"custom-srv-windows-slos\",\n    displayName: \"My Custom Service\",\n});\nconst windowsBased = new gcp.monitoring.Slo(\"windows_based\", {\n    service: customsrv.serviceId,\n    displayName: \"Test SLO with window based SLI\",\n    goal: 0.9,\n    rollingPeriodDays: 20,\n    windowsBasedSli: {\n        windowPeriod: \"400s\",\n        metricSumInRange: {\n            timeSeries: std.join({\n                separator: \" AND \",\n                input: [\n                    \"metric.type=\\\"monitoring.googleapis.com/uptime_check/request_latency\\\"\",\n                    \"resource.type=\\\"uptime_url\\\"\",\n                ],\n            }).then(invoke =\u003e invoke.result),\n            range: {\n                max: 5000,\n            },\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\ncustomsrv = gcp.monitoring.CustomService(\"customsrv\",\n    service_id=\"custom-srv-windows-slos\",\n    display_name=\"My Custom Service\")\nwindows_based = gcp.monitoring.Slo(\"windows_based\",\n    service=customsrv.service_id,\n    display_name=\"Test SLO with window based SLI\",\n    goal=0.9,\n    rolling_period_days=20,\n    windows_based_sli={\n        \"window_period\": \"400s\",\n        \"metric_sum_in_range\": {\n            \"time_series\": std.join(separator=\" AND \",\n                input=[\n                    \"metric.type=\\\"monitoring.googleapis.com/uptime_check/request_latency\\\"\",\n                    \"resource.type=\\\"uptime_url\\\"\",\n                ]).result,\n            \"range\": {\n                \"max\": 5000,\n            },\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var customsrv = new Gcp.Monitoring.CustomService(\"customsrv\", new()\n    {\n        ServiceId = \"custom-srv-windows-slos\",\n        DisplayName = \"My Custom Service\",\n    });\n\n    var windowsBased = new Gcp.Monitoring.Slo(\"windows_based\", new()\n    {\n        Service = customsrv.ServiceId,\n        DisplayName = \"Test SLO with window based SLI\",\n        Goal = 0.9,\n        RollingPeriodDays = 20,\n        WindowsBasedSli = new Gcp.Monitoring.Inputs.SloWindowsBasedSliArgs\n        {\n            WindowPeriod = \"400s\",\n            MetricSumInRange = new Gcp.Monitoring.Inputs.SloWindowsBasedSliMetricSumInRangeArgs\n            {\n                TimeSeries = Std.Join.Invoke(new()\n                {\n                    Separator = \" AND \",\n                    Input = new[]\n                    {\n                        \"metric.type=\\\"monitoring.googleapis.com/uptime_check/request_latency\\\"\",\n                        \"resource.type=\\\"uptime_url\\\"\",\n                    },\n                }).Apply(invoke =\u003e invoke.Result),\n                Range = new Gcp.Monitoring.Inputs.SloWindowsBasedSliMetricSumInRangeRangeArgs\n                {\n                    Max = 5000,\n                },\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/monitoring\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcustomsrv, err := monitoring.NewCustomService(ctx, \"customsrv\", \u0026monitoring.CustomServiceArgs{\n\t\t\tServiceId:   pulumi.String(\"custom-srv-windows-slos\"),\n\t\t\tDisplayName: pulumi.String(\"My Custom Service\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tinvokeJoin, err := std.Join(ctx, \u0026std.JoinArgs{\n\t\t\tSeparator: \" AND \",\n\t\t\tInput: []string{\n\t\t\t\t\"metric.type=\\\"monitoring.googleapis.com/uptime_check/request_latency\\\"\",\n\t\t\t\t\"resource.type=\\\"uptime_url\\\"\",\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = monitoring.NewSlo(ctx, \"windows_based\", \u0026monitoring.SloArgs{\n\t\t\tService:           customsrv.ServiceId,\n\t\t\tDisplayName:       pulumi.String(\"Test SLO with window based SLI\"),\n\t\t\tGoal:              pulumi.Float64(0.9),\n\t\t\tRollingPeriodDays: pulumi.Int(20),\n\t\t\tWindowsBasedSli: \u0026monitoring.SloWindowsBasedSliArgs{\n\t\t\t\tWindowPeriod: pulumi.String(\"400s\"),\n\t\t\t\tMetricSumInRange: \u0026monitoring.SloWindowsBasedSliMetricSumInRangeArgs{\n\t\t\t\t\tTimeSeries: pulumi.String(invokeJoin.Result),\n\t\t\t\t\tRange: \u0026monitoring.SloWindowsBasedSliMetricSumInRangeRangeArgs{\n\t\t\t\t\t\tMax: pulumi.Float64(5000),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.monitoring.CustomService;\nimport com.pulumi.gcp.monitoring.CustomServiceArgs;\nimport com.pulumi.gcp.monitoring.Slo;\nimport com.pulumi.gcp.monitoring.SloArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliMetricSumInRangeArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliMetricSumInRangeRangeArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var customsrv = new CustomService(\"customsrv\", CustomServiceArgs.builder()\n            .serviceId(\"custom-srv-windows-slos\")\n            .displayName(\"My Custom Service\")\n            .build());\n\n        var windowsBased = new Slo(\"windowsBased\", SloArgs.builder()\n            .service(customsrv.serviceId())\n            .displayName(\"Test SLO with window based SLI\")\n            .goal(0.9)\n            .rollingPeriodDays(20)\n            .windowsBasedSli(SloWindowsBasedSliArgs.builder()\n                .windowPeriod(\"400s\")\n                .metricSumInRange(SloWindowsBasedSliMetricSumInRangeArgs.builder()\n                    .timeSeries(StdFunctions.join(JoinArgs.builder()\n                        .separator(\" AND \")\n                        .input(                        \n                            \"metric.type=\\\"monitoring.googleapis.com/uptime_check/request_latency\\\"\",\n                            \"resource.type=\\\"uptime_url\\\"\")\n                        .build()).result())\n                    .range(SloWindowsBasedSliMetricSumInRangeRangeArgs.builder()\n                        .max(5000)\n                        .build())\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  customsrv:\n    type: gcp:monitoring:CustomService\n    properties:\n      serviceId: custom-srv-windows-slos\n      displayName: My Custom Service\n  windowsBased:\n    type: gcp:monitoring:Slo\n    name: windows_based\n    properties:\n      service: ${customsrv.serviceId}\n      displayName: Test SLO with window based SLI\n      goal: 0.9\n      rollingPeriodDays: 20\n      windowsBasedSli:\n        windowPeriod: 400s\n        metricSumInRange:\n          timeSeries:\n            fn::invoke:\n              function: std:join\n              arguments:\n                separator: ' AND '\n                input:\n                  - metric.type=\"monitoring.googleapis.com/uptime_check/request_latency\"\n                  - resource.type=\"uptime_url\"\n              return: result\n          range:\n            max: 5000\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Monitoring Slo Windows Based Ratio Threshold\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst customsrv = new gcp.monitoring.CustomService(\"customsrv\", {\n    serviceId: \"custom-srv-windows-slos\",\n    displayName: \"My Custom Service\",\n});\nconst windowsBased = new gcp.monitoring.Slo(\"windows_based\", {\n    service: customsrv.serviceId,\n    displayName: \"Test SLO with window based SLI\",\n    goal: 0.9,\n    rollingPeriodDays: 20,\n    windowsBasedSli: {\n        windowPeriod: \"100s\",\n        goodTotalRatioThreshold: {\n            threshold: 0.1,\n            performance: {\n                distributionCut: {\n                    distributionFilter: std.join({\n                        separator: \" AND \",\n                        input: [\n                            \"metric.type=\\\"serviceruntime.googleapis.com/api/request_latencies\\\"\",\n                            \"resource.type=\\\"consumed_api\\\"\",\n                        ],\n                    }).then(invoke =\u003e invoke.result),\n                    range: {\n                        min: 1,\n                        max: 9,\n                    },\n                },\n            },\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\ncustomsrv = gcp.monitoring.CustomService(\"customsrv\",\n    service_id=\"custom-srv-windows-slos\",\n    display_name=\"My Custom Service\")\nwindows_based = gcp.monitoring.Slo(\"windows_based\",\n    service=customsrv.service_id,\n    display_name=\"Test SLO with window based SLI\",\n    goal=0.9,\n    rolling_period_days=20,\n    windows_based_sli={\n        \"window_period\": \"100s\",\n        \"good_total_ratio_threshold\": {\n            \"threshold\": 0.1,\n            \"performance\": {\n                \"distribution_cut\": {\n                    \"distribution_filter\": std.join(separator=\" AND \",\n                        input=[\n                            \"metric.type=\\\"serviceruntime.googleapis.com/api/request_latencies\\\"\",\n                            \"resource.type=\\\"consumed_api\\\"\",\n                        ]).result,\n                    \"range\": {\n                        \"min\": 1,\n                        \"max\": 9,\n                    },\n                },\n            },\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var customsrv = new Gcp.Monitoring.CustomService(\"customsrv\", new()\n    {\n        ServiceId = \"custom-srv-windows-slos\",\n        DisplayName = \"My Custom Service\",\n    });\n\n    var windowsBased = new Gcp.Monitoring.Slo(\"windows_based\", new()\n    {\n        Service = customsrv.ServiceId,\n        DisplayName = \"Test SLO with window based SLI\",\n        Goal = 0.9,\n        RollingPeriodDays = 20,\n        WindowsBasedSli = new Gcp.Monitoring.Inputs.SloWindowsBasedSliArgs\n        {\n            WindowPeriod = \"100s\",\n            GoodTotalRatioThreshold = new Gcp.Monitoring.Inputs.SloWindowsBasedSliGoodTotalRatioThresholdArgs\n            {\n                Threshold = 0.1,\n                Performance = new Gcp.Monitoring.Inputs.SloWindowsBasedSliGoodTotalRatioThresholdPerformanceArgs\n                {\n                    DistributionCut = new Gcp.Monitoring.Inputs.SloWindowsBasedSliGoodTotalRatioThresholdPerformanceDistributionCutArgs\n                    {\n                        DistributionFilter = Std.Join.Invoke(new()\n                        {\n                            Separator = \" AND \",\n                            Input = new[]\n                            {\n                                \"metric.type=\\\"serviceruntime.googleapis.com/api/request_latencies\\\"\",\n                                \"resource.type=\\\"consumed_api\\\"\",\n                            },\n                        }).Apply(invoke =\u003e invoke.Result),\n                        Range = new Gcp.Monitoring.Inputs.SloWindowsBasedSliGoodTotalRatioThresholdPerformanceDistributionCutRangeArgs\n                        {\n                            Min = 1,\n                            Max = 9,\n                        },\n                    },\n                },\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/monitoring\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcustomsrv, err := monitoring.NewCustomService(ctx, \"customsrv\", \u0026monitoring.CustomServiceArgs{\n\t\t\tServiceId:   pulumi.String(\"custom-srv-windows-slos\"),\n\t\t\tDisplayName: pulumi.String(\"My Custom Service\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tinvokeJoin, err := std.Join(ctx, \u0026std.JoinArgs{\n\t\t\tSeparator: \" AND \",\n\t\t\tInput: []string{\n\t\t\t\t\"metric.type=\\\"serviceruntime.googleapis.com/api/request_latencies\\\"\",\n\t\t\t\t\"resource.type=\\\"consumed_api\\\"\",\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = monitoring.NewSlo(ctx, \"windows_based\", \u0026monitoring.SloArgs{\n\t\t\tService:           customsrv.ServiceId,\n\t\t\tDisplayName:       pulumi.String(\"Test SLO with window based SLI\"),\n\t\t\tGoal:              pulumi.Float64(0.9),\n\t\t\tRollingPeriodDays: pulumi.Int(20),\n\t\t\tWindowsBasedSli: \u0026monitoring.SloWindowsBasedSliArgs{\n\t\t\t\tWindowPeriod: pulumi.String(\"100s\"),\n\t\t\t\tGoodTotalRatioThreshold: \u0026monitoring.SloWindowsBasedSliGoodTotalRatioThresholdArgs{\n\t\t\t\t\tThreshold: pulumi.Float64(0.1),\n\t\t\t\t\tPerformance: \u0026monitoring.SloWindowsBasedSliGoodTotalRatioThresholdPerformanceArgs{\n\t\t\t\t\t\tDistributionCut: \u0026monitoring.SloWindowsBasedSliGoodTotalRatioThresholdPerformanceDistributionCutArgs{\n\t\t\t\t\t\t\tDistributionFilter: pulumi.String(invokeJoin.Result),\n\t\t\t\t\t\t\tRange: \u0026monitoring.SloWindowsBasedSliGoodTotalRatioThresholdPerformanceDistributionCutRangeArgs{\n\t\t\t\t\t\t\t\tMin: pulumi.Float64(1),\n\t\t\t\t\t\t\t\tMax: pulumi.Float64(9),\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.monitoring.CustomService;\nimport com.pulumi.gcp.monitoring.CustomServiceArgs;\nimport com.pulumi.gcp.monitoring.Slo;\nimport com.pulumi.gcp.monitoring.SloArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliGoodTotalRatioThresholdArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliGoodTotalRatioThresholdPerformanceArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliGoodTotalRatioThresholdPerformanceDistributionCutArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliGoodTotalRatioThresholdPerformanceDistributionCutRangeArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var customsrv = new CustomService(\"customsrv\", CustomServiceArgs.builder()\n            .serviceId(\"custom-srv-windows-slos\")\n            .displayName(\"My Custom Service\")\n            .build());\n\n        var windowsBased = new Slo(\"windowsBased\", SloArgs.builder()\n            .service(customsrv.serviceId())\n            .displayName(\"Test SLO with window based SLI\")\n            .goal(0.9)\n            .rollingPeriodDays(20)\n            .windowsBasedSli(SloWindowsBasedSliArgs.builder()\n                .windowPeriod(\"100s\")\n                .goodTotalRatioThreshold(SloWindowsBasedSliGoodTotalRatioThresholdArgs.builder()\n                    .threshold(0.1)\n                    .performance(SloWindowsBasedSliGoodTotalRatioThresholdPerformanceArgs.builder()\n                        .distributionCut(SloWindowsBasedSliGoodTotalRatioThresholdPerformanceDistributionCutArgs.builder()\n                            .distributionFilter(StdFunctions.join(JoinArgs.builder()\n                                .separator(\" AND \")\n                                .input(                                \n                                    \"metric.type=\\\"serviceruntime.googleapis.com/api/request_latencies\\\"\",\n                                    \"resource.type=\\\"consumed_api\\\"\")\n                                .build()).result())\n                            .range(SloWindowsBasedSliGoodTotalRatioThresholdPerformanceDistributionCutRangeArgs.builder()\n                                .min(1)\n                                .max(9)\n                                .build())\n                            .build())\n                        .build())\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  customsrv:\n    type: gcp:monitoring:CustomService\n    properties:\n      serviceId: custom-srv-windows-slos\n      displayName: My Custom Service\n  windowsBased:\n    type: gcp:monitoring:Slo\n    name: windows_based\n    properties:\n      service: ${customsrv.serviceId}\n      displayName: Test SLO with window based SLI\n      goal: 0.9\n      rollingPeriodDays: 20\n      windowsBasedSli:\n        windowPeriod: 100s\n        goodTotalRatioThreshold:\n          threshold: 0.1\n          performance:\n            distributionCut:\n              distributionFilter:\n                fn::invoke:\n                  function: std:join\n                  arguments:\n                    separator: ' AND '\n                    input:\n                      - metric.type=\"serviceruntime.googleapis.com/api/request_latencies\"\n                      - resource.type=\"consumed_api\"\n                  return: result\n              range:\n                min: 1\n                max: 9\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nSlo can be imported using any of these accepted formats:\n\n* `{{project}}/{{name}}`\n\n* `{{project}} {{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, Slo can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:monitoring/slo:Slo default {{project}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:monitoring/slo:Slo default \"{{project}} {{name}}\"\n```\n\n```sh\n$ pulumi import gcp:monitoring/slo:Slo default {{name}}\n```\n\n",
+            "description": "A Service-Level Objective (SLO) describes the level of desired good\nservice. It consists of a service-level indicator (SLI), a performance\ngoal, and a period over which the objective is to be evaluated against\nthat goal. The SLO can use SLIs defined in a number of different manners.\nTypical SLOs might include \"99% of requests in each rolling week have\nlatency below 200 milliseconds\" or \"99.5% of requests in each calendar\nmonth return successfully.\"\n\n\nTo get more information about Slo, see:\n\n* [API documentation](https://cloud.google.com/monitoring/api/ref_v3/rest/v3/services.serviceLevelObjectives)\n* How-to Guides\n    * [Monitoring API Documentation](https://cloud.google.com/monitoring/api/v3/)\n    * [Service Monitoring](https://cloud.google.com/monitoring/service-monitoring)\n\n## Example Usage\n\n### Monitoring Slo Appengine\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.monitoring.getAppEngineService({\n    moduleId: \"default\",\n});\nconst appengSlo = new gcp.monitoring.Slo(\"appeng_slo\", {\n    service: _default.then(_default =\u003e _default.serviceId),\n    sloId: \"ae-slo\",\n    displayName: \"Test SLO for App Engine\",\n    goal: 0.9,\n    calendarPeriod: \"DAY\",\n    basicSli: {\n        latency: {\n            threshold: \"1s\",\n        },\n    },\n    userLabels: {\n        my_key: \"my_value\",\n        my_other_key: \"my_other_value\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.monitoring.get_app_engine_service(module_id=\"default\")\nappeng_slo = gcp.monitoring.Slo(\"appeng_slo\",\n    service=default.service_id,\n    slo_id=\"ae-slo\",\n    display_name=\"Test SLO for App Engine\",\n    goal=0.9,\n    calendar_period=\"DAY\",\n    basic_sli={\n        \"latency\": {\n            \"threshold\": \"1s\",\n        },\n    },\n    user_labels={\n        \"my_key\": \"my_value\",\n        \"my_other_key\": \"my_other_value\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Monitoring.GetAppEngineService.Invoke(new()\n    {\n        ModuleId = \"default\",\n    });\n\n    var appengSlo = new Gcp.Monitoring.Slo(\"appeng_slo\", new()\n    {\n        Service = @default.Apply(@default =\u003e @default.Apply(getAppEngineServiceResult =\u003e getAppEngineServiceResult.ServiceId)),\n        SloId = \"ae-slo\",\n        DisplayName = \"Test SLO for App Engine\",\n        Goal = 0.9,\n        CalendarPeriod = \"DAY\",\n        BasicSli = new Gcp.Monitoring.Inputs.SloBasicSliArgs\n        {\n            Latency = new Gcp.Monitoring.Inputs.SloBasicSliLatencyArgs\n            {\n                Threshold = \"1s\",\n            },\n        },\n        UserLabels = \n        {\n            { \"my_key\", \"my_value\" },\n            { \"my_other_key\", \"my_other_value\" },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/monitoring\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := monitoring.GetAppEngineService(ctx, \u0026monitoring.GetAppEngineServiceArgs{\n\t\t\tModuleId: \"default\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = monitoring.NewSlo(ctx, \"appeng_slo\", \u0026monitoring.SloArgs{\n\t\t\tService:        pulumi.String(_default.ServiceId),\n\t\t\tSloId:          pulumi.String(\"ae-slo\"),\n\t\t\tDisplayName:    pulumi.String(\"Test SLO for App Engine\"),\n\t\t\tGoal:           pulumi.Float64(0.9),\n\t\t\tCalendarPeriod: pulumi.String(\"DAY\"),\n\t\t\tBasicSli: \u0026monitoring.SloBasicSliArgs{\n\t\t\t\tLatency: \u0026monitoring.SloBasicSliLatencyArgs{\n\t\t\t\t\tThreshold: pulumi.String(\"1s\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tUserLabels: pulumi.StringMap{\n\t\t\t\t\"my_key\":       pulumi.String(\"my_value\"),\n\t\t\t\t\"my_other_key\": pulumi.String(\"my_other_value\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.monitoring.MonitoringFunctions;\nimport com.pulumi.gcp.monitoring.inputs.GetAppEngineServiceArgs;\nimport com.pulumi.gcp.monitoring.Slo;\nimport com.pulumi.gcp.monitoring.SloArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloBasicSliArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloBasicSliLatencyArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = MonitoringFunctions.getAppEngineService(GetAppEngineServiceArgs.builder()\n            .moduleId(\"default\")\n            .build());\n\n        var appengSlo = new Slo(\"appengSlo\", SloArgs.builder()\n            .service(default_.serviceId())\n            .sloId(\"ae-slo\")\n            .displayName(\"Test SLO for App Engine\")\n            .goal(0.9)\n            .calendarPeriod(\"DAY\")\n            .basicSli(SloBasicSliArgs.builder()\n                .latency(SloBasicSliLatencyArgs.builder()\n                    .threshold(\"1s\")\n                    .build())\n                .build())\n            .userLabels(Map.ofEntries(\n                Map.entry(\"my_key\", \"my_value\"),\n                Map.entry(\"my_other_key\", \"my_other_value\")\n            ))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  appengSlo:\n    type: gcp:monitoring:Slo\n    name: appeng_slo\n    properties:\n      service: ${default.serviceId}\n      sloId: ae-slo\n      displayName: Test SLO for App Engine\n      goal: 0.9\n      calendarPeriod: DAY\n      basicSli:\n        latency:\n          threshold: 1s\n      userLabels:\n        my_key: my_value\n        my_other_key: my_other_value\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:monitoring:getAppEngineService\n      arguments:\n        moduleId: default\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Monitoring Slo Request Based\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst customsrv = new gcp.monitoring.CustomService(\"customsrv\", {\n    serviceId: \"custom-srv-request-slos\",\n    displayName: \"My Custom Service\",\n});\nconst requestBasedSlo = new gcp.monitoring.Slo(\"request_based_slo\", {\n    service: customsrv.serviceId,\n    sloId: \"consumed-api-slo\",\n    displayName: \"Test SLO with request based SLI (good total ratio)\",\n    goal: 0.9,\n    rollingPeriodDays: 30,\n    requestBasedSli: {\n        distributionCut: {\n            distributionFilter: \"metric.type=\\\"serviceruntime.googleapis.com/api/request_latencies\\\" resource.type=\\\"api\\\"  \",\n            range: {\n                max: 0.5,\n            },\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ncustomsrv = gcp.monitoring.CustomService(\"customsrv\",\n    service_id=\"custom-srv-request-slos\",\n    display_name=\"My Custom Service\")\nrequest_based_slo = gcp.monitoring.Slo(\"request_based_slo\",\n    service=customsrv.service_id,\n    slo_id=\"consumed-api-slo\",\n    display_name=\"Test SLO with request based SLI (good total ratio)\",\n    goal=0.9,\n    rolling_period_days=30,\n    request_based_sli={\n        \"distribution_cut\": {\n            \"distribution_filter\": \"metric.type=\\\"serviceruntime.googleapis.com/api/request_latencies\\\" resource.type=\\\"api\\\"  \",\n            \"range\": {\n                \"max\": 0.5,\n            },\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var customsrv = new Gcp.Monitoring.CustomService(\"customsrv\", new()\n    {\n        ServiceId = \"custom-srv-request-slos\",\n        DisplayName = \"My Custom Service\",\n    });\n\n    var requestBasedSlo = new Gcp.Monitoring.Slo(\"request_based_slo\", new()\n    {\n        Service = customsrv.ServiceId,\n        SloId = \"consumed-api-slo\",\n        DisplayName = \"Test SLO with request based SLI (good total ratio)\",\n        Goal = 0.9,\n        RollingPeriodDays = 30,\n        RequestBasedSli = new Gcp.Monitoring.Inputs.SloRequestBasedSliArgs\n        {\n            DistributionCut = new Gcp.Monitoring.Inputs.SloRequestBasedSliDistributionCutArgs\n            {\n                DistributionFilter = \"metric.type=\\\"serviceruntime.googleapis.com/api/request_latencies\\\" resource.type=\\\"api\\\"  \",\n                Range = new Gcp.Monitoring.Inputs.SloRequestBasedSliDistributionCutRangeArgs\n                {\n                    Max = 0.5,\n                },\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/monitoring\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcustomsrv, err := monitoring.NewCustomService(ctx, \"customsrv\", \u0026monitoring.CustomServiceArgs{\n\t\t\tServiceId:   pulumi.String(\"custom-srv-request-slos\"),\n\t\t\tDisplayName: pulumi.String(\"My Custom Service\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = monitoring.NewSlo(ctx, \"request_based_slo\", \u0026monitoring.SloArgs{\n\t\t\tService:           customsrv.ServiceId,\n\t\t\tSloId:             pulumi.String(\"consumed-api-slo\"),\n\t\t\tDisplayName:       pulumi.String(\"Test SLO with request based SLI (good total ratio)\"),\n\t\t\tGoal:              pulumi.Float64(0.9),\n\t\t\tRollingPeriodDays: pulumi.Int(30),\n\t\t\tRequestBasedSli: \u0026monitoring.SloRequestBasedSliArgs{\n\t\t\t\tDistributionCut: \u0026monitoring.SloRequestBasedSliDistributionCutArgs{\n\t\t\t\t\tDistributionFilter: pulumi.String(\"metric.type=\\\"serviceruntime.googleapis.com/api/request_latencies\\\" resource.type=\\\"api\\\"  \"),\n\t\t\t\t\tRange: \u0026monitoring.SloRequestBasedSliDistributionCutRangeArgs{\n\t\t\t\t\t\tMax: pulumi.Float64(0.5),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.monitoring.CustomService;\nimport com.pulumi.gcp.monitoring.CustomServiceArgs;\nimport com.pulumi.gcp.monitoring.Slo;\nimport com.pulumi.gcp.monitoring.SloArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloRequestBasedSliArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloRequestBasedSliDistributionCutArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloRequestBasedSliDistributionCutRangeArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var customsrv = new CustomService(\"customsrv\", CustomServiceArgs.builder()\n            .serviceId(\"custom-srv-request-slos\")\n            .displayName(\"My Custom Service\")\n            .build());\n\n        var requestBasedSlo = new Slo(\"requestBasedSlo\", SloArgs.builder()\n            .service(customsrv.serviceId())\n            .sloId(\"consumed-api-slo\")\n            .displayName(\"Test SLO with request based SLI (good total ratio)\")\n            .goal(0.9)\n            .rollingPeriodDays(30)\n            .requestBasedSli(SloRequestBasedSliArgs.builder()\n                .distributionCut(SloRequestBasedSliDistributionCutArgs.builder()\n                    .distributionFilter(\"metric.type=\\\"serviceruntime.googleapis.com/api/request_latencies\\\" resource.type=\\\"api\\\"  \")\n                    .range(SloRequestBasedSliDistributionCutRangeArgs.builder()\n                        .max(0.5)\n                        .build())\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  customsrv:\n    type: gcp:monitoring:CustomService\n    properties:\n      serviceId: custom-srv-request-slos\n      displayName: My Custom Service\n  requestBasedSlo:\n    type: gcp:monitoring:Slo\n    name: request_based_slo\n    properties:\n      service: ${customsrv.serviceId}\n      sloId: consumed-api-slo\n      displayName: Test SLO with request based SLI (good total ratio)\n      goal: 0.9\n      rollingPeriodDays: 30\n      requestBasedSli:\n        distributionCut:\n          distributionFilter: 'metric.type=\"serviceruntime.googleapis.com/api/request_latencies\" resource.type=\"api\"  '\n          range:\n            max: 0.5\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Monitoring Slo Windows Based Good Bad Metric Filter\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst customsrv = new gcp.monitoring.CustomService(\"customsrv\", {\n    serviceId: \"custom-srv-windows-slos\",\n    displayName: \"My Custom Service\",\n});\nconst windowsBased = new gcp.monitoring.Slo(\"windows_based\", {\n    service: customsrv.serviceId,\n    displayName: \"Test SLO with window based SLI\",\n    goal: 0.95,\n    calendarPeriod: \"FORTNIGHT\",\n    windowsBasedSli: {\n        windowPeriod: \"400s\",\n        goodBadMetricFilter: std.join({\n            separator: \" AND \",\n            input: [\n                \"metric.type=\\\"monitoring.googleapis.com/uptime_check/check_passed\\\"\",\n                \"resource.type=\\\"uptime_url\\\"\",\n            ],\n        }).then(invoke =\u003e invoke.result),\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\ncustomsrv = gcp.monitoring.CustomService(\"customsrv\",\n    service_id=\"custom-srv-windows-slos\",\n    display_name=\"My Custom Service\")\nwindows_based = gcp.monitoring.Slo(\"windows_based\",\n    service=customsrv.service_id,\n    display_name=\"Test SLO with window based SLI\",\n    goal=0.95,\n    calendar_period=\"FORTNIGHT\",\n    windows_based_sli={\n        \"window_period\": \"400s\",\n        \"good_bad_metric_filter\": std.join(separator=\" AND \",\n            input=[\n                \"metric.type=\\\"monitoring.googleapis.com/uptime_check/check_passed\\\"\",\n                \"resource.type=\\\"uptime_url\\\"\",\n            ]).result,\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var customsrv = new Gcp.Monitoring.CustomService(\"customsrv\", new()\n    {\n        ServiceId = \"custom-srv-windows-slos\",\n        DisplayName = \"My Custom Service\",\n    });\n\n    var windowsBased = new Gcp.Monitoring.Slo(\"windows_based\", new()\n    {\n        Service = customsrv.ServiceId,\n        DisplayName = \"Test SLO with window based SLI\",\n        Goal = 0.95,\n        CalendarPeriod = \"FORTNIGHT\",\n        WindowsBasedSli = new Gcp.Monitoring.Inputs.SloWindowsBasedSliArgs\n        {\n            WindowPeriod = \"400s\",\n            GoodBadMetricFilter = Std.Join.Invoke(new()\n            {\n                Separator = \" AND \",\n                Input = new[]\n                {\n                    \"metric.type=\\\"monitoring.googleapis.com/uptime_check/check_passed\\\"\",\n                    \"resource.type=\\\"uptime_url\\\"\",\n                },\n            }).Apply(invoke =\u003e invoke.Result),\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/monitoring\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcustomsrv, err := monitoring.NewCustomService(ctx, \"customsrv\", \u0026monitoring.CustomServiceArgs{\n\t\t\tServiceId:   pulumi.String(\"custom-srv-windows-slos\"),\n\t\t\tDisplayName: pulumi.String(\"My Custom Service\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tinvokeJoin, err := std.Join(ctx, \u0026std.JoinArgs{\n\t\t\tSeparator: \" AND \",\n\t\t\tInput: []string{\n\t\t\t\t\"metric.type=\\\"monitoring.googleapis.com/uptime_check/check_passed\\\"\",\n\t\t\t\t\"resource.type=\\\"uptime_url\\\"\",\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = monitoring.NewSlo(ctx, \"windows_based\", \u0026monitoring.SloArgs{\n\t\t\tService:        customsrv.ServiceId,\n\t\t\tDisplayName:    pulumi.String(\"Test SLO with window based SLI\"),\n\t\t\tGoal:           pulumi.Float64(0.95),\n\t\t\tCalendarPeriod: pulumi.String(\"FORTNIGHT\"),\n\t\t\tWindowsBasedSli: \u0026monitoring.SloWindowsBasedSliArgs{\n\t\t\t\tWindowPeriod:        pulumi.String(\"400s\"),\n\t\t\t\tGoodBadMetricFilter: pulumi.String(invokeJoin.Result),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.monitoring.CustomService;\nimport com.pulumi.gcp.monitoring.CustomServiceArgs;\nimport com.pulumi.gcp.monitoring.Slo;\nimport com.pulumi.gcp.monitoring.SloArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var customsrv = new CustomService(\"customsrv\", CustomServiceArgs.builder()\n            .serviceId(\"custom-srv-windows-slos\")\n            .displayName(\"My Custom Service\")\n            .build());\n\n        var windowsBased = new Slo(\"windowsBased\", SloArgs.builder()\n            .service(customsrv.serviceId())\n            .displayName(\"Test SLO with window based SLI\")\n            .goal(0.95)\n            .calendarPeriod(\"FORTNIGHT\")\n            .windowsBasedSli(SloWindowsBasedSliArgs.builder()\n                .windowPeriod(\"400s\")\n                .goodBadMetricFilter(StdFunctions.join(JoinArgs.builder()\n                    .separator(\" AND \")\n                    .input(                    \n                        \"metric.type=\\\"monitoring.googleapis.com/uptime_check/check_passed\\\"\",\n                        \"resource.type=\\\"uptime_url\\\"\")\n                    .build()).result())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  customsrv:\n    type: gcp:monitoring:CustomService\n    properties:\n      serviceId: custom-srv-windows-slos\n      displayName: My Custom Service\n  windowsBased:\n    type: gcp:monitoring:Slo\n    name: windows_based\n    properties:\n      service: ${customsrv.serviceId}\n      displayName: Test SLO with window based SLI\n      goal: 0.95\n      calendarPeriod: FORTNIGHT\n      windowsBasedSli:\n        windowPeriod: 400s\n        goodBadMetricFilter:\n          fn::invoke:\n            function: std:join\n            arguments:\n              separator: ' AND '\n              input:\n                - metric.type=\"monitoring.googleapis.com/uptime_check/check_passed\"\n                - resource.type=\"uptime_url\"\n            return: result\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Monitoring Slo Windows Based Metric Mean\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst customsrv = new gcp.monitoring.CustomService(\"customsrv\", {\n    serviceId: \"custom-srv-windows-slos\",\n    displayName: \"My Custom Service\",\n});\nconst windowsBased = new gcp.monitoring.Slo(\"windows_based\", {\n    service: customsrv.serviceId,\n    displayName: \"Test SLO with window based SLI\",\n    goal: 0.9,\n    rollingPeriodDays: 20,\n    windowsBasedSli: {\n        windowPeriod: \"600s\",\n        metricMeanInRange: {\n            timeSeries: std.join({\n                separator: \" AND \",\n                input: [\n                    \"metric.type=\\\"agent.googleapis.com/cassandra/client_request/latency/95p\\\"\",\n                    \"resource.type=\\\"gce_instance\\\"\",\n                ],\n            }).then(invoke =\u003e invoke.result),\n            range: {\n                max: 5,\n            },\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\ncustomsrv = gcp.monitoring.CustomService(\"customsrv\",\n    service_id=\"custom-srv-windows-slos\",\n    display_name=\"My Custom Service\")\nwindows_based = gcp.monitoring.Slo(\"windows_based\",\n    service=customsrv.service_id,\n    display_name=\"Test SLO with window based SLI\",\n    goal=0.9,\n    rolling_period_days=20,\n    windows_based_sli={\n        \"window_period\": \"600s\",\n        \"metric_mean_in_range\": {\n            \"time_series\": std.join(separator=\" AND \",\n                input=[\n                    \"metric.type=\\\"agent.googleapis.com/cassandra/client_request/latency/95p\\\"\",\n                    \"resource.type=\\\"gce_instance\\\"\",\n                ]).result,\n            \"range\": {\n                \"max\": 5,\n            },\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var customsrv = new Gcp.Monitoring.CustomService(\"customsrv\", new()\n    {\n        ServiceId = \"custom-srv-windows-slos\",\n        DisplayName = \"My Custom Service\",\n    });\n\n    var windowsBased = new Gcp.Monitoring.Slo(\"windows_based\", new()\n    {\n        Service = customsrv.ServiceId,\n        DisplayName = \"Test SLO with window based SLI\",\n        Goal = 0.9,\n        RollingPeriodDays = 20,\n        WindowsBasedSli = new Gcp.Monitoring.Inputs.SloWindowsBasedSliArgs\n        {\n            WindowPeriod = \"600s\",\n            MetricMeanInRange = new Gcp.Monitoring.Inputs.SloWindowsBasedSliMetricMeanInRangeArgs\n            {\n                TimeSeries = Std.Join.Invoke(new()\n                {\n                    Separator = \" AND \",\n                    Input = new[]\n                    {\n                        \"metric.type=\\\"agent.googleapis.com/cassandra/client_request/latency/95p\\\"\",\n                        \"resource.type=\\\"gce_instance\\\"\",\n                    },\n                }).Apply(invoke =\u003e invoke.Result),\n                Range = new Gcp.Monitoring.Inputs.SloWindowsBasedSliMetricMeanInRangeRangeArgs\n                {\n                    Max = 5,\n                },\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/monitoring\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcustomsrv, err := monitoring.NewCustomService(ctx, \"customsrv\", \u0026monitoring.CustomServiceArgs{\n\t\t\tServiceId:   pulumi.String(\"custom-srv-windows-slos\"),\n\t\t\tDisplayName: pulumi.String(\"My Custom Service\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tinvokeJoin, err := std.Join(ctx, \u0026std.JoinArgs{\n\t\t\tSeparator: \" AND \",\n\t\t\tInput: []string{\n\t\t\t\t\"metric.type=\\\"agent.googleapis.com/cassandra/client_request/latency/95p\\\"\",\n\t\t\t\t\"resource.type=\\\"gce_instance\\\"\",\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = monitoring.NewSlo(ctx, \"windows_based\", \u0026monitoring.SloArgs{\n\t\t\tService:           customsrv.ServiceId,\n\t\t\tDisplayName:       pulumi.String(\"Test SLO with window based SLI\"),\n\t\t\tGoal:              pulumi.Float64(0.9),\n\t\t\tRollingPeriodDays: pulumi.Int(20),\n\t\t\tWindowsBasedSli: \u0026monitoring.SloWindowsBasedSliArgs{\n\t\t\t\tWindowPeriod: pulumi.String(\"600s\"),\n\t\t\t\tMetricMeanInRange: \u0026monitoring.SloWindowsBasedSliMetricMeanInRangeArgs{\n\t\t\t\t\tTimeSeries: pulumi.String(invokeJoin.Result),\n\t\t\t\t\tRange: \u0026monitoring.SloWindowsBasedSliMetricMeanInRangeRangeArgs{\n\t\t\t\t\t\tMax: pulumi.Float64(5),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.monitoring.CustomService;\nimport com.pulumi.gcp.monitoring.CustomServiceArgs;\nimport com.pulumi.gcp.monitoring.Slo;\nimport com.pulumi.gcp.monitoring.SloArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliMetricMeanInRangeArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliMetricMeanInRangeRangeArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var customsrv = new CustomService(\"customsrv\", CustomServiceArgs.builder()\n            .serviceId(\"custom-srv-windows-slos\")\n            .displayName(\"My Custom Service\")\n            .build());\n\n        var windowsBased = new Slo(\"windowsBased\", SloArgs.builder()\n            .service(customsrv.serviceId())\n            .displayName(\"Test SLO with window based SLI\")\n            .goal(0.9)\n            .rollingPeriodDays(20)\n            .windowsBasedSli(SloWindowsBasedSliArgs.builder()\n                .windowPeriod(\"600s\")\n                .metricMeanInRange(SloWindowsBasedSliMetricMeanInRangeArgs.builder()\n                    .timeSeries(StdFunctions.join(JoinArgs.builder()\n                        .separator(\" AND \")\n                        .input(                        \n                            \"metric.type=\\\"agent.googleapis.com/cassandra/client_request/latency/95p\\\"\",\n                            \"resource.type=\\\"gce_instance\\\"\")\n                        .build()).result())\n                    .range(SloWindowsBasedSliMetricMeanInRangeRangeArgs.builder()\n                        .max(5)\n                        .build())\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  customsrv:\n    type: gcp:monitoring:CustomService\n    properties:\n      serviceId: custom-srv-windows-slos\n      displayName: My Custom Service\n  windowsBased:\n    type: gcp:monitoring:Slo\n    name: windows_based\n    properties:\n      service: ${customsrv.serviceId}\n      displayName: Test SLO with window based SLI\n      goal: 0.9\n      rollingPeriodDays: 20\n      windowsBasedSli:\n        windowPeriod: 600s\n        metricMeanInRange:\n          timeSeries:\n            fn::invoke:\n              function: std:join\n              arguments:\n                separator: ' AND '\n                input:\n                  - metric.type=\"agent.googleapis.com/cassandra/client_request/latency/95p\"\n                  - resource.type=\"gce_instance\"\n              return: result\n          range:\n            max: 5\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Monitoring Slo Windows Based Metric Sum\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst customsrv = new gcp.monitoring.CustomService(\"customsrv\", {\n    serviceId: \"custom-srv-windows-slos\",\n    displayName: \"My Custom Service\",\n});\nconst windowsBased = new gcp.monitoring.Slo(\"windows_based\", {\n    service: customsrv.serviceId,\n    displayName: \"Test SLO with window based SLI\",\n    goal: 0.9,\n    rollingPeriodDays: 20,\n    windowsBasedSli: {\n        windowPeriod: \"400s\",\n        metricSumInRange: {\n            timeSeries: std.join({\n                separator: \" AND \",\n                input: [\n                    \"metric.type=\\\"monitoring.googleapis.com/uptime_check/request_latency\\\"\",\n                    \"resource.type=\\\"uptime_url\\\"\",\n                ],\n            }).then(invoke =\u003e invoke.result),\n            range: {\n                max: 5000,\n            },\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\ncustomsrv = gcp.monitoring.CustomService(\"customsrv\",\n    service_id=\"custom-srv-windows-slos\",\n    display_name=\"My Custom Service\")\nwindows_based = gcp.monitoring.Slo(\"windows_based\",\n    service=customsrv.service_id,\n    display_name=\"Test SLO with window based SLI\",\n    goal=0.9,\n    rolling_period_days=20,\n    windows_based_sli={\n        \"window_period\": \"400s\",\n        \"metric_sum_in_range\": {\n            \"time_series\": std.join(separator=\" AND \",\n                input=[\n                    \"metric.type=\\\"monitoring.googleapis.com/uptime_check/request_latency\\\"\",\n                    \"resource.type=\\\"uptime_url\\\"\",\n                ]).result,\n            \"range\": {\n                \"max\": 5000,\n            },\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var customsrv = new Gcp.Monitoring.CustomService(\"customsrv\", new()\n    {\n        ServiceId = \"custom-srv-windows-slos\",\n        DisplayName = \"My Custom Service\",\n    });\n\n    var windowsBased = new Gcp.Monitoring.Slo(\"windows_based\", new()\n    {\n        Service = customsrv.ServiceId,\n        DisplayName = \"Test SLO with window based SLI\",\n        Goal = 0.9,\n        RollingPeriodDays = 20,\n        WindowsBasedSli = new Gcp.Monitoring.Inputs.SloWindowsBasedSliArgs\n        {\n            WindowPeriod = \"400s\",\n            MetricSumInRange = new Gcp.Monitoring.Inputs.SloWindowsBasedSliMetricSumInRangeArgs\n            {\n                TimeSeries = Std.Join.Invoke(new()\n                {\n                    Separator = \" AND \",\n                    Input = new[]\n                    {\n                        \"metric.type=\\\"monitoring.googleapis.com/uptime_check/request_latency\\\"\",\n                        \"resource.type=\\\"uptime_url\\\"\",\n                    },\n                }).Apply(invoke =\u003e invoke.Result),\n                Range = new Gcp.Monitoring.Inputs.SloWindowsBasedSliMetricSumInRangeRangeArgs\n                {\n                    Max = 5000,\n                },\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/monitoring\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcustomsrv, err := monitoring.NewCustomService(ctx, \"customsrv\", \u0026monitoring.CustomServiceArgs{\n\t\t\tServiceId:   pulumi.String(\"custom-srv-windows-slos\"),\n\t\t\tDisplayName: pulumi.String(\"My Custom Service\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tinvokeJoin, err := std.Join(ctx, \u0026std.JoinArgs{\n\t\t\tSeparator: \" AND \",\n\t\t\tInput: []string{\n\t\t\t\t\"metric.type=\\\"monitoring.googleapis.com/uptime_check/request_latency\\\"\",\n\t\t\t\t\"resource.type=\\\"uptime_url\\\"\",\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = monitoring.NewSlo(ctx, \"windows_based\", \u0026monitoring.SloArgs{\n\t\t\tService:           customsrv.ServiceId,\n\t\t\tDisplayName:       pulumi.String(\"Test SLO with window based SLI\"),\n\t\t\tGoal:              pulumi.Float64(0.9),\n\t\t\tRollingPeriodDays: pulumi.Int(20),\n\t\t\tWindowsBasedSli: \u0026monitoring.SloWindowsBasedSliArgs{\n\t\t\t\tWindowPeriod: pulumi.String(\"400s\"),\n\t\t\t\tMetricSumInRange: \u0026monitoring.SloWindowsBasedSliMetricSumInRangeArgs{\n\t\t\t\t\tTimeSeries: pulumi.String(invokeJoin.Result),\n\t\t\t\t\tRange: \u0026monitoring.SloWindowsBasedSliMetricSumInRangeRangeArgs{\n\t\t\t\t\t\tMax: pulumi.Float64(5000),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.monitoring.CustomService;\nimport com.pulumi.gcp.monitoring.CustomServiceArgs;\nimport com.pulumi.gcp.monitoring.Slo;\nimport com.pulumi.gcp.monitoring.SloArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliMetricSumInRangeArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliMetricSumInRangeRangeArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var customsrv = new CustomService(\"customsrv\", CustomServiceArgs.builder()\n            .serviceId(\"custom-srv-windows-slos\")\n            .displayName(\"My Custom Service\")\n            .build());\n\n        var windowsBased = new Slo(\"windowsBased\", SloArgs.builder()\n            .service(customsrv.serviceId())\n            .displayName(\"Test SLO with window based SLI\")\n            .goal(0.9)\n            .rollingPeriodDays(20)\n            .windowsBasedSli(SloWindowsBasedSliArgs.builder()\n                .windowPeriod(\"400s\")\n                .metricSumInRange(SloWindowsBasedSliMetricSumInRangeArgs.builder()\n                    .timeSeries(StdFunctions.join(JoinArgs.builder()\n                        .separator(\" AND \")\n                        .input(                        \n                            \"metric.type=\\\"monitoring.googleapis.com/uptime_check/request_latency\\\"\",\n                            \"resource.type=\\\"uptime_url\\\"\")\n                        .build()).result())\n                    .range(SloWindowsBasedSliMetricSumInRangeRangeArgs.builder()\n                        .max(5000)\n                        .build())\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  customsrv:\n    type: gcp:monitoring:CustomService\n    properties:\n      serviceId: custom-srv-windows-slos\n      displayName: My Custom Service\n  windowsBased:\n    type: gcp:monitoring:Slo\n    name: windows_based\n    properties:\n      service: ${customsrv.serviceId}\n      displayName: Test SLO with window based SLI\n      goal: 0.9\n      rollingPeriodDays: 20\n      windowsBasedSli:\n        windowPeriod: 400s\n        metricSumInRange:\n          timeSeries:\n            fn::invoke:\n              function: std:join\n              arguments:\n                separator: ' AND '\n                input:\n                  - metric.type=\"monitoring.googleapis.com/uptime_check/request_latency\"\n                  - resource.type=\"uptime_url\"\n              return: result\n          range:\n            max: 5000\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Monitoring Slo Windows Based Ratio Threshold\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\nimport * as std from \"@pulumi/std\";\n\nconst customsrv = new gcp.monitoring.CustomService(\"customsrv\", {\n    serviceId: \"custom-srv-windows-slos\",\n    displayName: \"My Custom Service\",\n});\nconst windowsBased = new gcp.monitoring.Slo(\"windows_based\", {\n    service: customsrv.serviceId,\n    displayName: \"Test SLO with window based SLI\",\n    goal: 0.9,\n    rollingPeriodDays: 20,\n    windowsBasedSli: {\n        windowPeriod: \"100s\",\n        goodTotalRatioThreshold: {\n            threshold: 0.1,\n            performance: {\n                distributionCut: {\n                    distributionFilter: std.join({\n                        separator: \" AND \",\n                        input: [\n                            \"metric.type=\\\"serviceruntime.googleapis.com/api/request_latencies\\\"\",\n                            \"resource.type=\\\"consumed_api\\\"\",\n                        ],\n                    }).then(invoke =\u003e invoke.result),\n                    range: {\n                        min: 1,\n                        max: 9,\n                    },\n                },\n            },\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\nimport pulumi_std as std\n\ncustomsrv = gcp.monitoring.CustomService(\"customsrv\",\n    service_id=\"custom-srv-windows-slos\",\n    display_name=\"My Custom Service\")\nwindows_based = gcp.monitoring.Slo(\"windows_based\",\n    service=customsrv.service_id,\n    display_name=\"Test SLO with window based SLI\",\n    goal=0.9,\n    rolling_period_days=20,\n    windows_based_sli={\n        \"window_period\": \"100s\",\n        \"good_total_ratio_threshold\": {\n            \"threshold\": 0.1,\n            \"performance\": {\n                \"distribution_cut\": {\n                    \"distribution_filter\": std.join(separator=\" AND \",\n                        input=[\n                            \"metric.type=\\\"serviceruntime.googleapis.com/api/request_latencies\\\"\",\n                            \"resource.type=\\\"consumed_api\\\"\",\n                        ]).result,\n                    \"range\": {\n                        \"min\": 1,\n                        \"max\": 9,\n                    },\n                },\n            },\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\nusing Std = Pulumi.Std;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var customsrv = new Gcp.Monitoring.CustomService(\"customsrv\", new()\n    {\n        ServiceId = \"custom-srv-windows-slos\",\n        DisplayName = \"My Custom Service\",\n    });\n\n    var windowsBased = new Gcp.Monitoring.Slo(\"windows_based\", new()\n    {\n        Service = customsrv.ServiceId,\n        DisplayName = \"Test SLO with window based SLI\",\n        Goal = 0.9,\n        RollingPeriodDays = 20,\n        WindowsBasedSli = new Gcp.Monitoring.Inputs.SloWindowsBasedSliArgs\n        {\n            WindowPeriod = \"100s\",\n            GoodTotalRatioThreshold = new Gcp.Monitoring.Inputs.SloWindowsBasedSliGoodTotalRatioThresholdArgs\n            {\n                Threshold = 0.1,\n                Performance = new Gcp.Monitoring.Inputs.SloWindowsBasedSliGoodTotalRatioThresholdPerformanceArgs\n                {\n                    DistributionCut = new Gcp.Monitoring.Inputs.SloWindowsBasedSliGoodTotalRatioThresholdPerformanceDistributionCutArgs\n                    {\n                        DistributionFilter = Std.Join.Invoke(new()\n                        {\n                            Separator = \" AND \",\n                            Input = new[]\n                            {\n                                \"metric.type=\\\"serviceruntime.googleapis.com/api/request_latencies\\\"\",\n                                \"resource.type=\\\"consumed_api\\\"\",\n                            },\n                        }).Apply(invoke =\u003e invoke.Result),\n                        Range = new Gcp.Monitoring.Inputs.SloWindowsBasedSliGoodTotalRatioThresholdPerformanceDistributionCutRangeArgs\n                        {\n                            Min = 1,\n                            Max = 9,\n                        },\n                    },\n                },\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/monitoring\"\n\t\"github.com/pulumi/pulumi-std/sdk/go/std\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcustomsrv, err := monitoring.NewCustomService(ctx, \"customsrv\", \u0026monitoring.CustomServiceArgs{\n\t\t\tServiceId:   pulumi.String(\"custom-srv-windows-slos\"),\n\t\t\tDisplayName: pulumi.String(\"My Custom Service\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tinvokeJoin, err := std.Join(ctx, \u0026std.JoinArgs{\n\t\t\tSeparator: \" AND \",\n\t\t\tInput: []string{\n\t\t\t\t\"metric.type=\\\"serviceruntime.googleapis.com/api/request_latencies\\\"\",\n\t\t\t\t\"resource.type=\\\"consumed_api\\\"\",\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = monitoring.NewSlo(ctx, \"windows_based\", \u0026monitoring.SloArgs{\n\t\t\tService:           customsrv.ServiceId,\n\t\t\tDisplayName:       pulumi.String(\"Test SLO with window based SLI\"),\n\t\t\tGoal:              pulumi.Float64(0.9),\n\t\t\tRollingPeriodDays: pulumi.Int(20),\n\t\t\tWindowsBasedSli: \u0026monitoring.SloWindowsBasedSliArgs{\n\t\t\t\tWindowPeriod: pulumi.String(\"100s\"),\n\t\t\t\tGoodTotalRatioThreshold: \u0026monitoring.SloWindowsBasedSliGoodTotalRatioThresholdArgs{\n\t\t\t\t\tThreshold: pulumi.Float64(0.1),\n\t\t\t\t\tPerformance: \u0026monitoring.SloWindowsBasedSliGoodTotalRatioThresholdPerformanceArgs{\n\t\t\t\t\t\tDistributionCut: \u0026monitoring.SloWindowsBasedSliGoodTotalRatioThresholdPerformanceDistributionCutArgs{\n\t\t\t\t\t\t\tDistributionFilter: pulumi.String(invokeJoin.Result),\n\t\t\t\t\t\t\tRange: \u0026monitoring.SloWindowsBasedSliGoodTotalRatioThresholdPerformanceDistributionCutRangeArgs{\n\t\t\t\t\t\t\t\tMin: pulumi.Float64(1),\n\t\t\t\t\t\t\t\tMax: pulumi.Float64(9),\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.monitoring.CustomService;\nimport com.pulumi.gcp.monitoring.CustomServiceArgs;\nimport com.pulumi.gcp.monitoring.Slo;\nimport com.pulumi.gcp.monitoring.SloArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliGoodTotalRatioThresholdArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliGoodTotalRatioThresholdPerformanceArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliGoodTotalRatioThresholdPerformanceDistributionCutArgs;\nimport com.pulumi.gcp.monitoring.inputs.SloWindowsBasedSliGoodTotalRatioThresholdPerformanceDistributionCutRangeArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var customsrv = new CustomService(\"customsrv\", CustomServiceArgs.builder()\n            .serviceId(\"custom-srv-windows-slos\")\n            .displayName(\"My Custom Service\")\n            .build());\n\n        var windowsBased = new Slo(\"windowsBased\", SloArgs.builder()\n            .service(customsrv.serviceId())\n            .displayName(\"Test SLO with window based SLI\")\n            .goal(0.9)\n            .rollingPeriodDays(20)\n            .windowsBasedSli(SloWindowsBasedSliArgs.builder()\n                .windowPeriod(\"100s\")\n                .goodTotalRatioThreshold(SloWindowsBasedSliGoodTotalRatioThresholdArgs.builder()\n                    .threshold(0.1)\n                    .performance(SloWindowsBasedSliGoodTotalRatioThresholdPerformanceArgs.builder()\n                        .distributionCut(SloWindowsBasedSliGoodTotalRatioThresholdPerformanceDistributionCutArgs.builder()\n                            .distributionFilter(StdFunctions.join(JoinArgs.builder()\n                                .separator(\" AND \")\n                                .input(                                \n                                    \"metric.type=\\\"serviceruntime.googleapis.com/api/request_latencies\\\"\",\n                                    \"resource.type=\\\"consumed_api\\\"\")\n                                .build()).result())\n                            .range(SloWindowsBasedSliGoodTotalRatioThresholdPerformanceDistributionCutRangeArgs.builder()\n                                .min(1)\n                                .max(9)\n                                .build())\n                            .build())\n                        .build())\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  customsrv:\n    type: gcp:monitoring:CustomService\n    properties:\n      serviceId: custom-srv-windows-slos\n      displayName: My Custom Service\n  windowsBased:\n    type: gcp:monitoring:Slo\n    name: windows_based\n    properties:\n      service: ${customsrv.serviceId}\n      displayName: Test SLO with window based SLI\n      goal: 0.9\n      rollingPeriodDays: 20\n      windowsBasedSli:\n        windowPeriod: 100s\n        goodTotalRatioThreshold:\n          threshold: 0.1\n          performance:\n            distributionCut:\n              distributionFilter:\n                fn::invoke:\n                  function: std:join\n                  arguments:\n                    separator: ' AND '\n                    input:\n                      - metric.type=\"serviceruntime.googleapis.com/api/request_latencies\"\n                      - resource.type=\"consumed_api\"\n                  return: result\n              range:\n                min: 1\n                max: 9\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nSlo can be imported using any of these accepted formats:\n\n* `{{project}}/{{name}}`\n\n* `{{project}} {{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, Slo can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:monitoring/slo:Slo default {{project}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:monitoring/slo:Slo default \"{{project}} {{name}}\"\n```\n\n```sh\n$ pulumi import gcp:monitoring/slo:Slo default {{name}}\n```\n\n",
             "properties": {
                 "basicSli": {
                     "$ref": "#/types/gcp:monitoring/SloBasicSli:SloBasicSli",
@@ -242866,7 +242866,7 @@
             }
         },
         "gcp:netapp/backup:Backup": {
-            "description": "NetApp Volumes supports volume backups, which are copies of your volumes\nstored independently from the volume. Backups are stored in backup vaults,\nwhich are containers for backups. If a volume is lost or deleted, you can\nuse backups to restore your data to a new volume.\n\nWhen you create the first backup of a volume, all of the volume's used\ndata is sent to the backup vault. Subsequent backups of the same volume\nonly include data that has changed from the previous backup. This allows\nfor fast incremental-forever backups and reduces the required capacity\ninside the backup vault.\n\nYou can create manual and scheduled backups. Manual backups can be taken\nfrom a volume or from an existing volume snapshot. Scheduled backups\nrequire a backup policy.\n\n\nTo get more information about Backup, see:\n\n* [API documentation](https://cloud.google.com/netapp/volumes/docs/reference/rest/v1/projects.locations.backupVaults.backups)\n* How-to Guides\n    * [Documentation](https://cloud.google.com/netapp/volumes/docs/protect-data/about-volume-backups)\n\n## Example Usage\n\n### Netapp Backup\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.compute.getNetwork({\n    name: \"\",\n});\nconst defaultStoragePool = new gcp.netapp.StoragePool(\"default\", {\n    name: \"backup-pool\",\n    location: \"us-central1\",\n    serviceLevel: \"PREMIUM\",\n    capacityGib: \"2048\",\n    network: _default.then(_default =\u003e _default.id),\n});\nconst defaultBackupVault = new gcp.netapp.BackupVault(\"default\", {\n    name: \"backup-vault\",\n    location: defaultStoragePool.location,\n});\nconst defaultVolume = new gcp.netapp.Volume(\"default\", {\n    name: \"backup-volume\",\n    location: defaultStoragePool.location,\n    capacityGib: \"100\",\n    shareName: \"backup-volume\",\n    storagePool: defaultStoragePool.name,\n    protocols: [\"NFSV3\"],\n    deletionPolicy: \"FORCE\",\n    backupConfig: {\n        backupVault: defaultBackupVault.id,\n    },\n});\nconst testBackup = new gcp.netapp.Backup(\"test_backup\", {\n    name: \"test-backup\",\n    location: defaultBackupVault.location,\n    vaultName: defaultBackupVault.name,\n    sourceVolume: defaultVolume.id,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_network(name=\"\")\ndefault_storage_pool = gcp.netapp.StoragePool(\"default\",\n    name=\"backup-pool\",\n    location=\"us-central1\",\n    service_level=\"PREMIUM\",\n    capacity_gib=\"2048\",\n    network=default.id)\ndefault_backup_vault = gcp.netapp.BackupVault(\"default\",\n    name=\"backup-vault\",\n    location=default_storage_pool.location)\ndefault_volume = gcp.netapp.Volume(\"default\",\n    name=\"backup-volume\",\n    location=default_storage_pool.location,\n    capacity_gib=\"100\",\n    share_name=\"backup-volume\",\n    storage_pool=default_storage_pool.name,\n    protocols=[\"NFSV3\"],\n    deletion_policy=\"FORCE\",\n    backup_config={\n        \"backup_vault\": default_backup_vault.id,\n    })\ntest_backup = gcp.netapp.Backup(\"test_backup\",\n    name=\"test-backup\",\n    location=default_backup_vault.location,\n    vault_name=default_backup_vault.name,\n    source_volume=default_volume.id)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"\",\n    });\n\n    var defaultStoragePool = new Gcp.Netapp.StoragePool(\"default\", new()\n    {\n        Name = \"backup-pool\",\n        Location = \"us-central1\",\n        ServiceLevel = \"PREMIUM\",\n        CapacityGib = \"2048\",\n        Network = @default.Apply(@default =\u003e @default.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n    });\n\n    var defaultBackupVault = new Gcp.Netapp.BackupVault(\"default\", new()\n    {\n        Name = \"backup-vault\",\n        Location = defaultStoragePool.Location,\n    });\n\n    var defaultVolume = new Gcp.Netapp.Volume(\"default\", new()\n    {\n        Name = \"backup-volume\",\n        Location = defaultStoragePool.Location,\n        CapacityGib = \"100\",\n        ShareName = \"backup-volume\",\n        StoragePool = defaultStoragePool.Name,\n        Protocols = new[]\n        {\n            \"NFSV3\",\n        },\n        DeletionPolicy = \"FORCE\",\n        BackupConfig = new Gcp.Netapp.Inputs.VolumeBackupConfigArgs\n        {\n            BackupVault = defaultBackupVault.Id,\n        },\n    });\n\n    var testBackup = new Gcp.Netapp.Backup(\"test_backup\", new()\n    {\n        Name = \"test-backup\",\n        Location = defaultBackupVault.Location,\n        VaultName = defaultBackupVault.Name,\n        SourceVolume = defaultVolume.Id,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/netapp\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName: \"\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdefaultStoragePool, err := netapp.NewStoragePool(ctx, \"default\", \u0026netapp.StoragePoolArgs{\n\t\t\tName:         pulumi.String(\"backup-pool\"),\n\t\t\tLocation:     pulumi.String(\"us-central1\"),\n\t\t\tServiceLevel: pulumi.String(\"PREMIUM\"),\n\t\t\tCapacityGib:  pulumi.String(\"2048\"),\n\t\t\tNetwork:      pulumi.String(_default.Id),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdefaultBackupVault, err := netapp.NewBackupVault(ctx, \"default\", \u0026netapp.BackupVaultArgs{\n\t\t\tName:     pulumi.String(\"backup-vault\"),\n\t\t\tLocation: defaultStoragePool.Location,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdefaultVolume, err := netapp.NewVolume(ctx, \"default\", \u0026netapp.VolumeArgs{\n\t\t\tName:        pulumi.String(\"backup-volume\"),\n\t\t\tLocation:    defaultStoragePool.Location,\n\t\t\tCapacityGib: pulumi.String(\"100\"),\n\t\t\tShareName:   pulumi.String(\"backup-volume\"),\n\t\t\tStoragePool: defaultStoragePool.Name,\n\t\t\tProtocols: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"NFSV3\"),\n\t\t\t},\n\t\t\tDeletionPolicy: pulumi.String(\"FORCE\"),\n\t\t\tBackupConfig: \u0026netapp.VolumeBackupConfigArgs{\n\t\t\t\tBackupVault: defaultBackupVault.ID(),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = netapp.NewBackup(ctx, \"test_backup\", \u0026netapp.BackupArgs{\n\t\t\tName:         pulumi.String(\"test-backup\"),\n\t\t\tLocation:     defaultBackupVault.Location,\n\t\t\tVaultName:    defaultBackupVault.Name,\n\t\t\tSourceVolume: defaultVolume.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.netapp.StoragePool;\nimport com.pulumi.gcp.netapp.StoragePoolArgs;\nimport com.pulumi.gcp.netapp.BackupVault;\nimport com.pulumi.gcp.netapp.BackupVaultArgs;\nimport com.pulumi.gcp.netapp.Volume;\nimport com.pulumi.gcp.netapp.VolumeArgs;\nimport com.pulumi.gcp.netapp.inputs.VolumeBackupConfigArgs;\nimport com.pulumi.gcp.netapp.Backup;\nimport com.pulumi.gcp.netapp.BackupArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"\")\n            .build());\n\n        var defaultStoragePool = new StoragePool(\"defaultStoragePool\", StoragePoolArgs.builder()\n            .name(\"backup-pool\")\n            .location(\"us-central1\")\n            .serviceLevel(\"PREMIUM\")\n            .capacityGib(\"2048\")\n            .network(default_.id())\n            .build());\n\n        var defaultBackupVault = new BackupVault(\"defaultBackupVault\", BackupVaultArgs.builder()\n            .name(\"backup-vault\")\n            .location(defaultStoragePool.location())\n            .build());\n\n        var defaultVolume = new Volume(\"defaultVolume\", VolumeArgs.builder()\n            .name(\"backup-volume\")\n            .location(defaultStoragePool.location())\n            .capacityGib(\"100\")\n            .shareName(\"backup-volume\")\n            .storagePool(defaultStoragePool.name())\n            .protocols(\"NFSV3\")\n            .deletionPolicy(\"FORCE\")\n            .backupConfig(VolumeBackupConfigArgs.builder()\n                .backupVault(defaultBackupVault.id())\n                .build())\n            .build());\n\n        var testBackup = new Backup(\"testBackup\", BackupArgs.builder()\n            .name(\"test-backup\")\n            .location(defaultBackupVault.location())\n            .vaultName(defaultBackupVault.name())\n            .sourceVolume(defaultVolume.id())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  defaultStoragePool:\n    type: gcp:netapp:StoragePool\n    name: default\n    properties:\n      name: backup-pool\n      location: us-central1\n      serviceLevel: PREMIUM\n      capacityGib: '2048'\n      network: ${default.id}\n  defaultVolume:\n    type: gcp:netapp:Volume\n    name: default\n    properties:\n      name: backup-volume\n      location: ${defaultStoragePool.location}\n      capacityGib: '100'\n      shareName: backup-volume\n      storagePool: ${defaultStoragePool.name}\n      protocols:\n        - NFSV3\n      deletionPolicy: FORCE\n      backupConfig:\n        backupVault: ${defaultBackupVault.id}\n  defaultBackupVault:\n    type: gcp:netapp:BackupVault\n    name: default\n    properties:\n      name: backup-vault\n      location: ${defaultStoragePool.location}\n  testBackup:\n    type: gcp:netapp:Backup\n    name: test_backup\n    properties:\n      name: test-backup\n      location: ${defaultBackupVault.location}\n      vaultName: ${defaultBackupVault.name}\n      sourceVolume: ${defaultVolume.id}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: \"\"\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nBackup can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{location}}/backupVaults/{{vault_name}}/backups/{{name}}`\n\n* `{{project}}/{{location}}/{{vault_name}}/{{name}}`\n\n* `{{location}}/{{vault_name}}/{{name}}`\n\nWhen using the `pulumi import` command, Backup can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:netapp/backup:Backup default projects/{{project}}/locations/{{location}}/backupVaults/{{vault_name}}/backups/{{name}}\n```\n\n```sh\n$ pulumi import gcp:netapp/backup:Backup default {{project}}/{{location}}/{{vault_name}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:netapp/backup:Backup default {{location}}/{{vault_name}}/{{name}}\n```\n\n",
+            "description": "NetApp Volumes supports volume backups, which are copies of your volumes\nstored independently from the volume. Backups are stored in backup vaults,\nwhich are containers for backups. If a volume is lost or deleted, you can\nuse backups to restore your data to a new volume.\n\nWhen you create the first backup of a volume, all of the volume's used\ndata is sent to the backup vault. Subsequent backups of the same volume\nonly include data that has changed from the previous backup. This allows\nfor fast incremental-forever backups and reduces the required capacity\ninside the backup vault.\n\nYou can create manual and scheduled backups. Manual backups can be taken\nfrom a volume or from an existing volume snapshot. Scheduled backups\nrequire a backup policy.\n\n\nTo get more information about Backup, see:\n\n* [API documentation](https://cloud.google.com/netapp/volumes/docs/reference/rest/v1/projects.locations.backupVaults.backups)\n* How-to Guides\n    * [Documentation](https://cloud.google.com/netapp/volumes/docs/protect-data/about-volume-backups)\n\n## Example Usage\n\n### Netapp Backup\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.compute.getNetwork({\n    name: \"\",\n});\nconst defaultStoragePool = new gcp.netapp.StoragePool(\"default\", {\n    name: \"backup-pool\",\n    location: \"us-central1\",\n    serviceLevel: \"PREMIUM\",\n    capacityGib: \"2048\",\n    network: _default.then(_default =\u003e _default.id),\n});\nconst defaultBackupVault = new gcp.netapp.BackupVault(\"default\", {\n    name: \"backup-vault\",\n    location: defaultStoragePool.location,\n});\nconst defaultVolume = new gcp.netapp.Volume(\"default\", {\n    name: \"backup-volume\",\n    location: defaultStoragePool.location,\n    capacityGib: \"100\",\n    shareName: \"backup-volume\",\n    storagePool: defaultStoragePool.name,\n    protocols: [\"NFSV3\"],\n    deletionPolicy: \"FORCE\",\n    backupConfig: {\n        backupVault: defaultBackupVault.id,\n    },\n});\nconst testBackup = new gcp.netapp.Backup(\"test_backup\", {\n    name: \"test-backup\",\n    location: defaultBackupVault.location,\n    vaultName: defaultBackupVault.name,\n    sourceVolume: defaultVolume.id,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_network(name=\"\")\ndefault_storage_pool = gcp.netapp.StoragePool(\"default\",\n    name=\"backup-pool\",\n    location=\"us-central1\",\n    service_level=\"PREMIUM\",\n    capacity_gib=\"2048\",\n    network=default.id)\ndefault_backup_vault = gcp.netapp.BackupVault(\"default\",\n    name=\"backup-vault\",\n    location=default_storage_pool.location)\ndefault_volume = gcp.netapp.Volume(\"default\",\n    name=\"backup-volume\",\n    location=default_storage_pool.location,\n    capacity_gib=\"100\",\n    share_name=\"backup-volume\",\n    storage_pool=default_storage_pool.name,\n    protocols=[\"NFSV3\"],\n    deletion_policy=\"FORCE\",\n    backup_config={\n        \"backup_vault\": default_backup_vault.id,\n    })\ntest_backup = gcp.netapp.Backup(\"test_backup\",\n    name=\"test-backup\",\n    location=default_backup_vault.location,\n    vault_name=default_backup_vault.name,\n    source_volume=default_volume.id)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"\",\n    });\n\n    var defaultStoragePool = new Gcp.Netapp.StoragePool(\"default\", new()\n    {\n        Name = \"backup-pool\",\n        Location = \"us-central1\",\n        ServiceLevel = \"PREMIUM\",\n        CapacityGib = \"2048\",\n        Network = @default.Apply(@default =\u003e @default.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n    });\n\n    var defaultBackupVault = new Gcp.Netapp.BackupVault(\"default\", new()\n    {\n        Name = \"backup-vault\",\n        Location = defaultStoragePool.Location,\n    });\n\n    var defaultVolume = new Gcp.Netapp.Volume(\"default\", new()\n    {\n        Name = \"backup-volume\",\n        Location = defaultStoragePool.Location,\n        CapacityGib = \"100\",\n        ShareName = \"backup-volume\",\n        StoragePool = defaultStoragePool.Name,\n        Protocols = new[]\n        {\n            \"NFSV3\",\n        },\n        DeletionPolicy = \"FORCE\",\n        BackupConfig = new Gcp.Netapp.Inputs.VolumeBackupConfigArgs\n        {\n            BackupVault = defaultBackupVault.Id,\n        },\n    });\n\n    var testBackup = new Gcp.Netapp.Backup(\"test_backup\", new()\n    {\n        Name = \"test-backup\",\n        Location = defaultBackupVault.Location,\n        VaultName = defaultBackupVault.Name,\n        SourceVolume = defaultVolume.Id,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/netapp\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName: \"\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdefaultStoragePool, err := netapp.NewStoragePool(ctx, \"default\", \u0026netapp.StoragePoolArgs{\n\t\t\tName:         pulumi.String(\"backup-pool\"),\n\t\t\tLocation:     pulumi.String(\"us-central1\"),\n\t\t\tServiceLevel: pulumi.String(\"PREMIUM\"),\n\t\t\tCapacityGib:  pulumi.String(\"2048\"),\n\t\t\tNetwork:      pulumi.String(_default.Id),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdefaultBackupVault, err := netapp.NewBackupVault(ctx, \"default\", \u0026netapp.BackupVaultArgs{\n\t\t\tName:     pulumi.String(\"backup-vault\"),\n\t\t\tLocation: defaultStoragePool.Location,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdefaultVolume, err := netapp.NewVolume(ctx, \"default\", \u0026netapp.VolumeArgs{\n\t\t\tName:        pulumi.String(\"backup-volume\"),\n\t\t\tLocation:    defaultStoragePool.Location,\n\t\t\tCapacityGib: pulumi.String(\"100\"),\n\t\t\tShareName:   pulumi.String(\"backup-volume\"),\n\t\t\tStoragePool: defaultStoragePool.Name,\n\t\t\tProtocols: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"NFSV3\"),\n\t\t\t},\n\t\t\tDeletionPolicy: pulumi.String(\"FORCE\"),\n\t\t\tBackupConfig: \u0026netapp.VolumeBackupConfigArgs{\n\t\t\t\tBackupVault: defaultBackupVault.ID(),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = netapp.NewBackup(ctx, \"test_backup\", \u0026netapp.BackupArgs{\n\t\t\tName:         pulumi.String(\"test-backup\"),\n\t\t\tLocation:     defaultBackupVault.Location,\n\t\t\tVaultName:    defaultBackupVault.Name,\n\t\t\tSourceVolume: defaultVolume.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.netapp.StoragePool;\nimport com.pulumi.gcp.netapp.StoragePoolArgs;\nimport com.pulumi.gcp.netapp.BackupVault;\nimport com.pulumi.gcp.netapp.BackupVaultArgs;\nimport com.pulumi.gcp.netapp.Volume;\nimport com.pulumi.gcp.netapp.VolumeArgs;\nimport com.pulumi.gcp.netapp.inputs.VolumeBackupConfigArgs;\nimport com.pulumi.gcp.netapp.Backup;\nimport com.pulumi.gcp.netapp.BackupArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"\")\n            .build());\n\n        var defaultStoragePool = new StoragePool(\"defaultStoragePool\", StoragePoolArgs.builder()\n            .name(\"backup-pool\")\n            .location(\"us-central1\")\n            .serviceLevel(\"PREMIUM\")\n            .capacityGib(\"2048\")\n            .network(default_.id())\n            .build());\n\n        var defaultBackupVault = new BackupVault(\"defaultBackupVault\", BackupVaultArgs.builder()\n            .name(\"backup-vault\")\n            .location(defaultStoragePool.location())\n            .build());\n\n        var defaultVolume = new Volume(\"defaultVolume\", VolumeArgs.builder()\n            .name(\"backup-volume\")\n            .location(defaultStoragePool.location())\n            .capacityGib(\"100\")\n            .shareName(\"backup-volume\")\n            .storagePool(defaultStoragePool.name())\n            .protocols(\"NFSV3\")\n            .deletionPolicy(\"FORCE\")\n            .backupConfig(VolumeBackupConfigArgs.builder()\n                .backupVault(defaultBackupVault.id())\n                .build())\n            .build());\n\n        var testBackup = new Backup(\"testBackup\", BackupArgs.builder()\n            .name(\"test-backup\")\n            .location(defaultBackupVault.location())\n            .vaultName(defaultBackupVault.name())\n            .sourceVolume(defaultVolume.id())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  defaultStoragePool:\n    type: gcp:netapp:StoragePool\n    name: default\n    properties:\n      name: backup-pool\n      location: us-central1\n      serviceLevel: PREMIUM\n      capacityGib: '2048'\n      network: ${default.id}\n  defaultVolume:\n    type: gcp:netapp:Volume\n    name: default\n    properties:\n      name: backup-volume\n      location: ${defaultStoragePool.location}\n      capacityGib: '100'\n      shareName: backup-volume\n      storagePool: ${defaultStoragePool.name}\n      protocols:\n        - NFSV3\n      deletionPolicy: FORCE\n      backupConfig:\n        backupVault: ${defaultBackupVault.id}\n  defaultBackupVault:\n    type: gcp:netapp:BackupVault\n    name: default\n    properties:\n      name: backup-vault\n      location: ${defaultStoragePool.location}\n  testBackup:\n    type: gcp:netapp:Backup\n    name: test_backup\n    properties:\n      name: test-backup\n      location: ${defaultBackupVault.location}\n      vaultName: ${defaultBackupVault.name}\n      sourceVolume: ${defaultVolume.id}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: \"\"\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nBackup can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{location}}/backupVaults/{{vault_name}}/backups/{{name}}`\n\n* `{{project}}/{{location}}/{{vault_name}}/{{name}}`\n\n* `{{location}}/{{vault_name}}/{{name}}`\n\nWhen using the `pulumi import` command, Backup can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:netapp/backup:Backup default projects/{{project}}/locations/{{location}}/backupVaults/{{vault_name}}/backups/{{name}}\n```\n\n```sh\n$ pulumi import gcp:netapp/backup:Backup default {{project}}/{{location}}/{{vault_name}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:netapp/backup:Backup default {{location}}/{{vault_name}}/{{name}}\n```\n\n",
             "properties": {
                 "backupType": {
                     "type": "string",
@@ -243885,7 +243885,7 @@
             }
         },
         "gcp:netapp/volume:Volume": {
-            "description": "A volume is a file system container in a storage pool that stores application, database, and user data.\n\nYou can create a volume's capacity using the available capacity in the storage pool and you can define and resize the capacity without disruption to any processes.\n\nStorage pool settings apply to the volumes contained within them automatically.\n\n\nTo get more information about Volume, see:\n\n* [API documentation](https://cloud.google.com/netapp/volumes/docs/reference/rest/v1/projects.locations.volumes)\n* How-to Guides\n    * [Documentation](https://cloud.google.com/netapp/volumes/docs/configure-and-use/volumes/overview)\n    * [Quickstart](https://cloud.google.com/netapp/volumes/docs/get-started/quickstarts/create-volume)\n\n## Example Usage\n\n### Netapp Volume Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.compute.getNetwork({\n    name: \"test-network\",\n});\nconst defaultStoragePool = new gcp.netapp.StoragePool(\"default\", {\n    name: \"test-pool\",\n    location: \"us-west2\",\n    serviceLevel: \"PREMIUM\",\n    capacityGib: \"2048\",\n    network: _default.then(_default =\u003e _default.id),\n});\nconst testVolume = new gcp.netapp.Volume(\"test_volume\", {\n    location: \"us-west2\",\n    name: \"test-volume\",\n    capacityGib: \"100\",\n    shareName: \"test-volume\",\n    storagePool: defaultStoragePool.name,\n    protocols: [\"NFSV3\"],\n    deletionPolicy: \"DEFAULT\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_network(name=\"test-network\")\ndefault_storage_pool = gcp.netapp.StoragePool(\"default\",\n    name=\"test-pool\",\n    location=\"us-west2\",\n    service_level=\"PREMIUM\",\n    capacity_gib=\"2048\",\n    network=default.id)\ntest_volume = gcp.netapp.Volume(\"test_volume\",\n    location=\"us-west2\",\n    name=\"test-volume\",\n    capacity_gib=\"100\",\n    share_name=\"test-volume\",\n    storage_pool=default_storage_pool.name,\n    protocols=[\"NFSV3\"],\n    deletion_policy=\"DEFAULT\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"test-network\",\n    });\n\n    var defaultStoragePool = new Gcp.Netapp.StoragePool(\"default\", new()\n    {\n        Name = \"test-pool\",\n        Location = \"us-west2\",\n        ServiceLevel = \"PREMIUM\",\n        CapacityGib = \"2048\",\n        Network = @default.Apply(@default =\u003e @default.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n    });\n\n    var testVolume = new Gcp.Netapp.Volume(\"test_volume\", new()\n    {\n        Location = \"us-west2\",\n        Name = \"test-volume\",\n        CapacityGib = \"100\",\n        ShareName = \"test-volume\",\n        StoragePool = defaultStoragePool.Name,\n        Protocols = new[]\n        {\n            \"NFSV3\",\n        },\n        DeletionPolicy = \"DEFAULT\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/netapp\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName: \"test-network\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdefaultStoragePool, err := netapp.NewStoragePool(ctx, \"default\", \u0026netapp.StoragePoolArgs{\n\t\t\tName:         pulumi.String(\"test-pool\"),\n\t\t\tLocation:     pulumi.String(\"us-west2\"),\n\t\t\tServiceLevel: pulumi.String(\"PREMIUM\"),\n\t\t\tCapacityGib:  pulumi.String(\"2048\"),\n\t\t\tNetwork:      pulumi.String(_default.Id),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = netapp.NewVolume(ctx, \"test_volume\", \u0026netapp.VolumeArgs{\n\t\t\tLocation:    pulumi.String(\"us-west2\"),\n\t\t\tName:        pulumi.String(\"test-volume\"),\n\t\t\tCapacityGib: pulumi.String(\"100\"),\n\t\t\tShareName:   pulumi.String(\"test-volume\"),\n\t\t\tStoragePool: defaultStoragePool.Name,\n\t\t\tProtocols: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"NFSV3\"),\n\t\t\t},\n\t\t\tDeletionPolicy: pulumi.String(\"DEFAULT\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.netapp.StoragePool;\nimport com.pulumi.gcp.netapp.StoragePoolArgs;\nimport com.pulumi.gcp.netapp.Volume;\nimport com.pulumi.gcp.netapp.VolumeArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"test-network\")\n            .build());\n\n        var defaultStoragePool = new StoragePool(\"defaultStoragePool\", StoragePoolArgs.builder()\n            .name(\"test-pool\")\n            .location(\"us-west2\")\n            .serviceLevel(\"PREMIUM\")\n            .capacityGib(\"2048\")\n            .network(default_.id())\n            .build());\n\n        var testVolume = new Volume(\"testVolume\", VolumeArgs.builder()\n            .location(\"us-west2\")\n            .name(\"test-volume\")\n            .capacityGib(\"100\")\n            .shareName(\"test-volume\")\n            .storagePool(defaultStoragePool.name())\n            .protocols(\"NFSV3\")\n            .deletionPolicy(\"DEFAULT\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  defaultStoragePool:\n    type: gcp:netapp:StoragePool\n    name: default\n    properties:\n      name: test-pool\n      location: us-west2\n      serviceLevel: PREMIUM\n      capacityGib: '2048'\n      network: ${default.id}\n  testVolume:\n    type: gcp:netapp:Volume\n    name: test_volume\n    properties:\n      location: us-west2\n      name: test-volume\n      capacityGib: '100'\n      shareName: test-volume\n      storagePool: ${defaultStoragePool.name}\n      protocols:\n        - NFSV3\n      deletionPolicy: DEFAULT\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: test-network\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nVolume can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{location}}/volumes/{{name}}`\n\n* `{{project}}/{{location}}/{{name}}`\n\n* `{{location}}/{{name}}`\n\nWhen using the `pulumi import` command, Volume can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:netapp/volume:Volume default projects/{{project}}/locations/{{location}}/volumes/{{name}}\n```\n\n```sh\n$ pulumi import gcp:netapp/volume:Volume default {{project}}/{{location}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:netapp/volume:Volume default {{location}}/{{name}}\n```\n\n",
+            "description": "A volume is a file system container in a storage pool that stores application, database, and user data.\n\nYou can create a volume's capacity using the available capacity in the storage pool and you can define and resize the capacity without disruption to any processes.\n\nStorage pool settings apply to the volumes contained within them automatically.\n\n\nTo get more information about Volume, see:\n\n* [API documentation](https://cloud.google.com/netapp/volumes/docs/reference/rest/v1/projects.locations.volumes)\n* How-to Guides\n    * [Documentation](https://cloud.google.com/netapp/volumes/docs/configure-and-use/volumes/overview)\n    * [Quickstart](https://cloud.google.com/netapp/volumes/docs/get-started/quickstarts/create-volume)\n\n## Example Usage\n\n### Netapp Volume Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.compute.getNetwork({\n    name: \"test-network\",\n});\nconst defaultStoragePool = new gcp.netapp.StoragePool(\"default\", {\n    name: \"test-pool\",\n    location: \"us-west2\",\n    serviceLevel: \"PREMIUM\",\n    capacityGib: \"2048\",\n    network: _default.then(_default =\u003e _default.id),\n});\nconst testVolume = new gcp.netapp.Volume(\"test_volume\", {\n    location: \"us-west2\",\n    name: \"test-volume\",\n    capacityGib: \"100\",\n    shareName: \"test-volume\",\n    storagePool: defaultStoragePool.name,\n    protocols: [\"NFSV3\"],\n    deletionPolicy: \"DEFAULT\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_network(name=\"test-network\")\ndefault_storage_pool = gcp.netapp.StoragePool(\"default\",\n    name=\"test-pool\",\n    location=\"us-west2\",\n    service_level=\"PREMIUM\",\n    capacity_gib=\"2048\",\n    network=default.id)\ntest_volume = gcp.netapp.Volume(\"test_volume\",\n    location=\"us-west2\",\n    name=\"test-volume\",\n    capacity_gib=\"100\",\n    share_name=\"test-volume\",\n    storage_pool=default_storage_pool.name,\n    protocols=[\"NFSV3\"],\n    deletion_policy=\"DEFAULT\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"test-network\",\n    });\n\n    var defaultStoragePool = new Gcp.Netapp.StoragePool(\"default\", new()\n    {\n        Name = \"test-pool\",\n        Location = \"us-west2\",\n        ServiceLevel = \"PREMIUM\",\n        CapacityGib = \"2048\",\n        Network = @default.Apply(@default =\u003e @default.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n    });\n\n    var testVolume = new Gcp.Netapp.Volume(\"test_volume\", new()\n    {\n        Location = \"us-west2\",\n        Name = \"test-volume\",\n        CapacityGib = \"100\",\n        ShareName = \"test-volume\",\n        StoragePool = defaultStoragePool.Name,\n        Protocols = new[]\n        {\n            \"NFSV3\",\n        },\n        DeletionPolicy = \"DEFAULT\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/netapp\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName: \"test-network\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdefaultStoragePool, err := netapp.NewStoragePool(ctx, \"default\", \u0026netapp.StoragePoolArgs{\n\t\t\tName:         pulumi.String(\"test-pool\"),\n\t\t\tLocation:     pulumi.String(\"us-west2\"),\n\t\t\tServiceLevel: pulumi.String(\"PREMIUM\"),\n\t\t\tCapacityGib:  pulumi.String(\"2048\"),\n\t\t\tNetwork:      pulumi.String(_default.Id),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = netapp.NewVolume(ctx, \"test_volume\", \u0026netapp.VolumeArgs{\n\t\t\tLocation:    pulumi.String(\"us-west2\"),\n\t\t\tName:        pulumi.String(\"test-volume\"),\n\t\t\tCapacityGib: pulumi.String(\"100\"),\n\t\t\tShareName:   pulumi.String(\"test-volume\"),\n\t\t\tStoragePool: defaultStoragePool.Name,\n\t\t\tProtocols: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"NFSV3\"),\n\t\t\t},\n\t\t\tDeletionPolicy: pulumi.String(\"DEFAULT\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.netapp.StoragePool;\nimport com.pulumi.gcp.netapp.StoragePoolArgs;\nimport com.pulumi.gcp.netapp.Volume;\nimport com.pulumi.gcp.netapp.VolumeArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"test-network\")\n            .build());\n\n        var defaultStoragePool = new StoragePool(\"defaultStoragePool\", StoragePoolArgs.builder()\n            .name(\"test-pool\")\n            .location(\"us-west2\")\n            .serviceLevel(\"PREMIUM\")\n            .capacityGib(\"2048\")\n            .network(default_.id())\n            .build());\n\n        var testVolume = new Volume(\"testVolume\", VolumeArgs.builder()\n            .location(\"us-west2\")\n            .name(\"test-volume\")\n            .capacityGib(\"100\")\n            .shareName(\"test-volume\")\n            .storagePool(defaultStoragePool.name())\n            .protocols(\"NFSV3\")\n            .deletionPolicy(\"DEFAULT\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  defaultStoragePool:\n    type: gcp:netapp:StoragePool\n    name: default\n    properties:\n      name: test-pool\n      location: us-west2\n      serviceLevel: PREMIUM\n      capacityGib: '2048'\n      network: ${default.id}\n  testVolume:\n    type: gcp:netapp:Volume\n    name: test_volume\n    properties:\n      location: us-west2\n      name: test-volume\n      capacityGib: '100'\n      shareName: test-volume\n      storagePool: ${defaultStoragePool.name}\n      protocols:\n        - NFSV3\n      deletionPolicy: DEFAULT\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: test-network\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nVolume can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{location}}/volumes/{{name}}`\n\n* `{{project}}/{{location}}/{{name}}`\n\n* `{{location}}/{{name}}`\n\nWhen using the `pulumi import` command, Volume can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:netapp/volume:Volume default projects/{{project}}/locations/{{location}}/volumes/{{name}}\n```\n\n```sh\n$ pulumi import gcp:netapp/volume:Volume default {{project}}/{{location}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:netapp/volume:Volume default {{location}}/{{name}}\n```\n\n",
             "properties": {
                 "activeDirectory": {
                     "type": "string",
@@ -244429,7 +244429,7 @@
             }
         },
         "gcp:netapp/volumeReplication:VolumeReplication": {
-            "description": "## Example Usage\n\n### Netapp Volume Replication Create\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.compute.getNetwork({\n    name: \"test-network\",\n});\nconst sourcePool = new gcp.netapp.StoragePool(\"source_pool\", {\n    name: \"source-pool\",\n    location: \"us-central1\",\n    serviceLevel: \"PREMIUM\",\n    capacityGib: \"2048\",\n    network: _default.then(_default =\u003e _default.id),\n});\nconst destinationPool = new gcp.netapp.StoragePool(\"destination_pool\", {\n    name: \"destination-pool\",\n    location: \"us-west2\",\n    serviceLevel: \"PREMIUM\",\n    capacityGib: \"2048\",\n    network: _default.then(_default =\u003e _default.id),\n});\nconst sourceVolume = new gcp.netapp.Volume(\"source_volume\", {\n    location: sourcePool.location,\n    name: \"source-volume\",\n    capacityGib: \"100\",\n    shareName: \"source-volume\",\n    storagePool: sourcePool.name,\n    protocols: [\"NFSV3\"],\n    deletionPolicy: \"FORCE\",\n});\nconst testReplication = new gcp.netapp.VolumeReplication(\"test_replication\", {\n    location: sourceVolume.location,\n    volumeName: sourceVolume.name,\n    name: \"test-replication\",\n    replicationSchedule: \"EVERY_10_MINUTES\",\n    description: \"This is a replication resource\",\n    destinationVolumeParameters: {\n        storagePool: destinationPool.id,\n        volumeId: \"destination-volume\",\n        shareName: \"source-volume\",\n        description: \"This is a replicated volume\",\n    },\n    deleteDestinationVolume: true,\n    waitForMirror: true,\n}, {\n    dependsOn: [sourceVolume],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_network(name=\"test-network\")\nsource_pool = gcp.netapp.StoragePool(\"source_pool\",\n    name=\"source-pool\",\n    location=\"us-central1\",\n    service_level=\"PREMIUM\",\n    capacity_gib=\"2048\",\n    network=default.id)\ndestination_pool = gcp.netapp.StoragePool(\"destination_pool\",\n    name=\"destination-pool\",\n    location=\"us-west2\",\n    service_level=\"PREMIUM\",\n    capacity_gib=\"2048\",\n    network=default.id)\nsource_volume = gcp.netapp.Volume(\"source_volume\",\n    location=source_pool.location,\n    name=\"source-volume\",\n    capacity_gib=\"100\",\n    share_name=\"source-volume\",\n    storage_pool=source_pool.name,\n    protocols=[\"NFSV3\"],\n    deletion_policy=\"FORCE\")\ntest_replication = gcp.netapp.VolumeReplication(\"test_replication\",\n    location=source_volume.location,\n    volume_name=source_volume.name,\n    name=\"test-replication\",\n    replication_schedule=\"EVERY_10_MINUTES\",\n    description=\"This is a replication resource\",\n    destination_volume_parameters={\n        \"storage_pool\": destination_pool.id,\n        \"volume_id\": \"destination-volume\",\n        \"share_name\": \"source-volume\",\n        \"description\": \"This is a replicated volume\",\n    },\n    delete_destination_volume=True,\n    wait_for_mirror=True,\n    opts = pulumi.ResourceOptions(depends_on=[source_volume]))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"test-network\",\n    });\n\n    var sourcePool = new Gcp.Netapp.StoragePool(\"source_pool\", new()\n    {\n        Name = \"source-pool\",\n        Location = \"us-central1\",\n        ServiceLevel = \"PREMIUM\",\n        CapacityGib = \"2048\",\n        Network = @default.Apply(@default =\u003e @default.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n    });\n\n    var destinationPool = new Gcp.Netapp.StoragePool(\"destination_pool\", new()\n    {\n        Name = \"destination-pool\",\n        Location = \"us-west2\",\n        ServiceLevel = \"PREMIUM\",\n        CapacityGib = \"2048\",\n        Network = @default.Apply(@default =\u003e @default.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n    });\n\n    var sourceVolume = new Gcp.Netapp.Volume(\"source_volume\", new()\n    {\n        Location = sourcePool.Location,\n        Name = \"source-volume\",\n        CapacityGib = \"100\",\n        ShareName = \"source-volume\",\n        StoragePool = sourcePool.Name,\n        Protocols = new[]\n        {\n            \"NFSV3\",\n        },\n        DeletionPolicy = \"FORCE\",\n    });\n\n    var testReplication = new Gcp.Netapp.VolumeReplication(\"test_replication\", new()\n    {\n        Location = sourceVolume.Location,\n        VolumeName = sourceVolume.Name,\n        Name = \"test-replication\",\n        ReplicationSchedule = \"EVERY_10_MINUTES\",\n        Description = \"This is a replication resource\",\n        DestinationVolumeParameters = new Gcp.Netapp.Inputs.VolumeReplicationDestinationVolumeParametersArgs\n        {\n            StoragePool = destinationPool.Id,\n            VolumeId = \"destination-volume\",\n            ShareName = \"source-volume\",\n            Description = \"This is a replicated volume\",\n        },\n        DeleteDestinationVolume = true,\n        WaitForMirror = true,\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            sourceVolume,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/netapp\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName: \"test-network\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsourcePool, err := netapp.NewStoragePool(ctx, \"source_pool\", \u0026netapp.StoragePoolArgs{\n\t\t\tName:         pulumi.String(\"source-pool\"),\n\t\t\tLocation:     pulumi.String(\"us-central1\"),\n\t\t\tServiceLevel: pulumi.String(\"PREMIUM\"),\n\t\t\tCapacityGib:  pulumi.String(\"2048\"),\n\t\t\tNetwork:      pulumi.String(_default.Id),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdestinationPool, err := netapp.NewStoragePool(ctx, \"destination_pool\", \u0026netapp.StoragePoolArgs{\n\t\t\tName:         pulumi.String(\"destination-pool\"),\n\t\t\tLocation:     pulumi.String(\"us-west2\"),\n\t\t\tServiceLevel: pulumi.String(\"PREMIUM\"),\n\t\t\tCapacityGib:  pulumi.String(\"2048\"),\n\t\t\tNetwork:      pulumi.String(_default.Id),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsourceVolume, err := netapp.NewVolume(ctx, \"source_volume\", \u0026netapp.VolumeArgs{\n\t\t\tLocation:    sourcePool.Location,\n\t\t\tName:        pulumi.String(\"source-volume\"),\n\t\t\tCapacityGib: pulumi.String(\"100\"),\n\t\t\tShareName:   pulumi.String(\"source-volume\"),\n\t\t\tStoragePool: sourcePool.Name,\n\t\t\tProtocols: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"NFSV3\"),\n\t\t\t},\n\t\t\tDeletionPolicy: pulumi.String(\"FORCE\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = netapp.NewVolumeReplication(ctx, \"test_replication\", \u0026netapp.VolumeReplicationArgs{\n\t\t\tLocation:            sourceVolume.Location,\n\t\t\tVolumeName:          sourceVolume.Name,\n\t\t\tName:                pulumi.String(\"test-replication\"),\n\t\t\tReplicationSchedule: pulumi.String(\"EVERY_10_MINUTES\"),\n\t\t\tDescription:         pulumi.String(\"This is a replication resource\"),\n\t\t\tDestinationVolumeParameters: \u0026netapp.VolumeReplicationDestinationVolumeParametersArgs{\n\t\t\t\tStoragePool: destinationPool.ID(),\n\t\t\t\tVolumeId:    pulumi.String(\"destination-volume\"),\n\t\t\t\tShareName:   pulumi.String(\"source-volume\"),\n\t\t\t\tDescription: pulumi.String(\"This is a replicated volume\"),\n\t\t\t},\n\t\t\tDeleteDestinationVolume: pulumi.Bool(true),\n\t\t\tWaitForMirror:           pulumi.Bool(true),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tsourceVolume,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.netapp.StoragePool;\nimport com.pulumi.gcp.netapp.StoragePoolArgs;\nimport com.pulumi.gcp.netapp.Volume;\nimport com.pulumi.gcp.netapp.VolumeArgs;\nimport com.pulumi.gcp.netapp.VolumeReplication;\nimport com.pulumi.gcp.netapp.VolumeReplicationArgs;\nimport com.pulumi.gcp.netapp.inputs.VolumeReplicationDestinationVolumeParametersArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"test-network\")\n            .build());\n\n        var sourcePool = new StoragePool(\"sourcePool\", StoragePoolArgs.builder()\n            .name(\"source-pool\")\n            .location(\"us-central1\")\n            .serviceLevel(\"PREMIUM\")\n            .capacityGib(2048)\n            .network(default_.id())\n            .build());\n\n        var destinationPool = new StoragePool(\"destinationPool\", StoragePoolArgs.builder()\n            .name(\"destination-pool\")\n            .location(\"us-west2\")\n            .serviceLevel(\"PREMIUM\")\n            .capacityGib(2048)\n            .network(default_.id())\n            .build());\n\n        var sourceVolume = new Volume(\"sourceVolume\", VolumeArgs.builder()\n            .location(sourcePool.location())\n            .name(\"source-volume\")\n            .capacityGib(100)\n            .shareName(\"source-volume\")\n            .storagePool(sourcePool.name())\n            .protocols(\"NFSV3\")\n            .deletionPolicy(\"FORCE\")\n            .build());\n\n        var testReplication = new VolumeReplication(\"testReplication\", VolumeReplicationArgs.builder()\n            .location(sourceVolume.location())\n            .volumeName(sourceVolume.name())\n            .name(\"test-replication\")\n            .replicationSchedule(\"EVERY_10_MINUTES\")\n            .description(\"This is a replication resource\")\n            .destinationVolumeParameters(VolumeReplicationDestinationVolumeParametersArgs.builder()\n                .storagePool(destinationPool.id())\n                .volumeId(\"destination-volume\")\n                .shareName(\"source-volume\")\n                .description(\"This is a replicated volume\")\n                .build())\n            .deleteDestinationVolume(true)\n            .waitForMirror(true)\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(sourceVolume)\n                .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sourcePool:\n    type: gcp:netapp:StoragePool\n    name: source_pool\n    properties:\n      name: source-pool\n      location: us-central1\n      serviceLevel: PREMIUM\n      capacityGib: 2048\n      network: ${default.id}\n  destinationPool:\n    type: gcp:netapp:StoragePool\n    name: destination_pool\n    properties:\n      name: destination-pool\n      location: us-west2\n      serviceLevel: PREMIUM\n      capacityGib: 2048\n      network: ${default.id}\n  sourceVolume:\n    type: gcp:netapp:Volume\n    name: source_volume\n    properties:\n      location: ${sourcePool.location}\n      name: source-volume\n      capacityGib: 100\n      shareName: source-volume\n      storagePool: ${sourcePool.name}\n      protocols:\n        - NFSV3\n      deletionPolicy: FORCE\n  testReplication:\n    type: gcp:netapp:VolumeReplication\n    name: test_replication\n    properties:\n      location: ${sourceVolume.location}\n      volumeName: ${sourceVolume.name}\n      name: test-replication\n      replicationSchedule: EVERY_10_MINUTES\n      description: This is a replication resource\n      destinationVolumeParameters:\n        storagePool: ${destinationPool.id}\n        volumeId: destination-volume\n        shareName: source-volume\n        description: This is a replicated volume\n      deleteDestinationVolume: true\n      waitForMirror: true\n    options:\n      dependsOn:\n        - ${sourceVolume}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: test-network\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nVolumeReplication can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{location}}/volumes/{{volume_name}}/replications/{{name}}`\n\n* `{{project}}/{{location}}/{{volume_name}}/{{name}}`\n\n* `{{location}}/{{volume_name}}/{{name}}`\n\nWhen using the `pulumi import` command, VolumeReplication can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:netapp/volumeReplication:VolumeReplication default projects/{{project}}/locations/{{location}}/volumes/{{volume_name}}/replications/{{name}}\n```\n\n```sh\n$ pulumi import gcp:netapp/volumeReplication:VolumeReplication default {{project}}/{{location}}/{{volume_name}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:netapp/volumeReplication:VolumeReplication default {{location}}/{{volume_name}}/{{name}}\n```\n\n",
+            "description": "## Example Usage\n\n### Netapp Volume Replication Create\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.compute.getNetwork({\n    name: \"test-network\",\n});\nconst sourcePool = new gcp.netapp.StoragePool(\"source_pool\", {\n    name: \"source-pool\",\n    location: \"us-central1\",\n    serviceLevel: \"PREMIUM\",\n    capacityGib: \"2048\",\n    network: _default.then(_default =\u003e _default.id),\n});\nconst destinationPool = new gcp.netapp.StoragePool(\"destination_pool\", {\n    name: \"destination-pool\",\n    location: \"us-west2\",\n    serviceLevel: \"PREMIUM\",\n    capacityGib: \"2048\",\n    network: _default.then(_default =\u003e _default.id),\n});\nconst sourceVolume = new gcp.netapp.Volume(\"source_volume\", {\n    location: sourcePool.location,\n    name: \"source-volume\",\n    capacityGib: \"100\",\n    shareName: \"source-volume\",\n    storagePool: sourcePool.name,\n    protocols: [\"NFSV3\"],\n    deletionPolicy: \"FORCE\",\n});\nconst testReplication = new gcp.netapp.VolumeReplication(\"test_replication\", {\n    location: sourceVolume.location,\n    volumeName: sourceVolume.name,\n    name: \"test-replication\",\n    replicationSchedule: \"EVERY_10_MINUTES\",\n    description: \"This is a replication resource\",\n    destinationVolumeParameters: {\n        storagePool: destinationPool.id,\n        volumeId: \"destination-volume\",\n        shareName: \"source-volume\",\n        description: \"This is a replicated volume\",\n    },\n    deleteDestinationVolume: true,\n    waitForMirror: true,\n}, {\n    dependsOn: [sourceVolume],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_network(name=\"test-network\")\nsource_pool = gcp.netapp.StoragePool(\"source_pool\",\n    name=\"source-pool\",\n    location=\"us-central1\",\n    service_level=\"PREMIUM\",\n    capacity_gib=\"2048\",\n    network=default.id)\ndestination_pool = gcp.netapp.StoragePool(\"destination_pool\",\n    name=\"destination-pool\",\n    location=\"us-west2\",\n    service_level=\"PREMIUM\",\n    capacity_gib=\"2048\",\n    network=default.id)\nsource_volume = gcp.netapp.Volume(\"source_volume\",\n    location=source_pool.location,\n    name=\"source-volume\",\n    capacity_gib=\"100\",\n    share_name=\"source-volume\",\n    storage_pool=source_pool.name,\n    protocols=[\"NFSV3\"],\n    deletion_policy=\"FORCE\")\ntest_replication = gcp.netapp.VolumeReplication(\"test_replication\",\n    location=source_volume.location,\n    volume_name=source_volume.name,\n    name=\"test-replication\",\n    replication_schedule=\"EVERY_10_MINUTES\",\n    description=\"This is a replication resource\",\n    destination_volume_parameters={\n        \"storage_pool\": destination_pool.id,\n        \"volume_id\": \"destination-volume\",\n        \"share_name\": \"source-volume\",\n        \"description\": \"This is a replicated volume\",\n    },\n    delete_destination_volume=True,\n    wait_for_mirror=True,\n    opts = pulumi.ResourceOptions(depends_on=[source_volume]))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"test-network\",\n    });\n\n    var sourcePool = new Gcp.Netapp.StoragePool(\"source_pool\", new()\n    {\n        Name = \"source-pool\",\n        Location = \"us-central1\",\n        ServiceLevel = \"PREMIUM\",\n        CapacityGib = \"2048\",\n        Network = @default.Apply(@default =\u003e @default.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n    });\n\n    var destinationPool = new Gcp.Netapp.StoragePool(\"destination_pool\", new()\n    {\n        Name = \"destination-pool\",\n        Location = \"us-west2\",\n        ServiceLevel = \"PREMIUM\",\n        CapacityGib = \"2048\",\n        Network = @default.Apply(@default =\u003e @default.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n    });\n\n    var sourceVolume = new Gcp.Netapp.Volume(\"source_volume\", new()\n    {\n        Location = sourcePool.Location,\n        Name = \"source-volume\",\n        CapacityGib = \"100\",\n        ShareName = \"source-volume\",\n        StoragePool = sourcePool.Name,\n        Protocols = new[]\n        {\n            \"NFSV3\",\n        },\n        DeletionPolicy = \"FORCE\",\n    });\n\n    var testReplication = new Gcp.Netapp.VolumeReplication(\"test_replication\", new()\n    {\n        Location = sourceVolume.Location,\n        VolumeName = sourceVolume.Name,\n        Name = \"test-replication\",\n        ReplicationSchedule = \"EVERY_10_MINUTES\",\n        Description = \"This is a replication resource\",\n        DestinationVolumeParameters = new Gcp.Netapp.Inputs.VolumeReplicationDestinationVolumeParametersArgs\n        {\n            StoragePool = destinationPool.Id,\n            VolumeId = \"destination-volume\",\n            ShareName = \"source-volume\",\n            Description = \"This is a replicated volume\",\n        },\n        DeleteDestinationVolume = true,\n        WaitForMirror = true,\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            sourceVolume,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/netapp\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName: \"test-network\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsourcePool, err := netapp.NewStoragePool(ctx, \"source_pool\", \u0026netapp.StoragePoolArgs{\n\t\t\tName:         pulumi.String(\"source-pool\"),\n\t\t\tLocation:     pulumi.String(\"us-central1\"),\n\t\t\tServiceLevel: pulumi.String(\"PREMIUM\"),\n\t\t\tCapacityGib:  pulumi.String(\"2048\"),\n\t\t\tNetwork:      pulumi.String(_default.Id),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdestinationPool, err := netapp.NewStoragePool(ctx, \"destination_pool\", \u0026netapp.StoragePoolArgs{\n\t\t\tName:         pulumi.String(\"destination-pool\"),\n\t\t\tLocation:     pulumi.String(\"us-west2\"),\n\t\t\tServiceLevel: pulumi.String(\"PREMIUM\"),\n\t\t\tCapacityGib:  pulumi.String(\"2048\"),\n\t\t\tNetwork:      pulumi.String(_default.Id),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsourceVolume, err := netapp.NewVolume(ctx, \"source_volume\", \u0026netapp.VolumeArgs{\n\t\t\tLocation:    sourcePool.Location,\n\t\t\tName:        pulumi.String(\"source-volume\"),\n\t\t\tCapacityGib: pulumi.String(\"100\"),\n\t\t\tShareName:   pulumi.String(\"source-volume\"),\n\t\t\tStoragePool: sourcePool.Name,\n\t\t\tProtocols: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"NFSV3\"),\n\t\t\t},\n\t\t\tDeletionPolicy: pulumi.String(\"FORCE\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = netapp.NewVolumeReplication(ctx, \"test_replication\", \u0026netapp.VolumeReplicationArgs{\n\t\t\tLocation:            sourceVolume.Location,\n\t\t\tVolumeName:          sourceVolume.Name,\n\t\t\tName:                pulumi.String(\"test-replication\"),\n\t\t\tReplicationSchedule: pulumi.String(\"EVERY_10_MINUTES\"),\n\t\t\tDescription:         pulumi.String(\"This is a replication resource\"),\n\t\t\tDestinationVolumeParameters: \u0026netapp.VolumeReplicationDestinationVolumeParametersArgs{\n\t\t\t\tStoragePool: destinationPool.ID(),\n\t\t\t\tVolumeId:    pulumi.String(\"destination-volume\"),\n\t\t\t\tShareName:   pulumi.String(\"source-volume\"),\n\t\t\t\tDescription: pulumi.String(\"This is a replicated volume\"),\n\t\t\t},\n\t\t\tDeleteDestinationVolume: pulumi.Bool(true),\n\t\t\tWaitForMirror:           pulumi.Bool(true),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tsourceVolume,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.netapp.StoragePool;\nimport com.pulumi.gcp.netapp.StoragePoolArgs;\nimport com.pulumi.gcp.netapp.Volume;\nimport com.pulumi.gcp.netapp.VolumeArgs;\nimport com.pulumi.gcp.netapp.VolumeReplication;\nimport com.pulumi.gcp.netapp.VolumeReplicationArgs;\nimport com.pulumi.gcp.netapp.inputs.VolumeReplicationDestinationVolumeParametersArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"test-network\")\n            .build());\n\n        var sourcePool = new StoragePool(\"sourcePool\", StoragePoolArgs.builder()\n            .name(\"source-pool\")\n            .location(\"us-central1\")\n            .serviceLevel(\"PREMIUM\")\n            .capacityGib(2048)\n            .network(default_.id())\n            .build());\n\n        var destinationPool = new StoragePool(\"destinationPool\", StoragePoolArgs.builder()\n            .name(\"destination-pool\")\n            .location(\"us-west2\")\n            .serviceLevel(\"PREMIUM\")\n            .capacityGib(2048)\n            .network(default_.id())\n            .build());\n\n        var sourceVolume = new Volume(\"sourceVolume\", VolumeArgs.builder()\n            .location(sourcePool.location())\n            .name(\"source-volume\")\n            .capacityGib(100)\n            .shareName(\"source-volume\")\n            .storagePool(sourcePool.name())\n            .protocols(\"NFSV3\")\n            .deletionPolicy(\"FORCE\")\n            .build());\n\n        var testReplication = new VolumeReplication(\"testReplication\", VolumeReplicationArgs.builder()\n            .location(sourceVolume.location())\n            .volumeName(sourceVolume.name())\n            .name(\"test-replication\")\n            .replicationSchedule(\"EVERY_10_MINUTES\")\n            .description(\"This is a replication resource\")\n            .destinationVolumeParameters(VolumeReplicationDestinationVolumeParametersArgs.builder()\n                .storagePool(destinationPool.id())\n                .volumeId(\"destination-volume\")\n                .shareName(\"source-volume\")\n                .description(\"This is a replicated volume\")\n                .build())\n            .deleteDestinationVolume(true)\n            .waitForMirror(true)\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(sourceVolume)\n                .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sourcePool:\n    type: gcp:netapp:StoragePool\n    name: source_pool\n    properties:\n      name: source-pool\n      location: us-central1\n      serviceLevel: PREMIUM\n      capacityGib: 2048\n      network: ${default.id}\n  destinationPool:\n    type: gcp:netapp:StoragePool\n    name: destination_pool\n    properties:\n      name: destination-pool\n      location: us-west2\n      serviceLevel: PREMIUM\n      capacityGib: 2048\n      network: ${default.id}\n  sourceVolume:\n    type: gcp:netapp:Volume\n    name: source_volume\n    properties:\n      location: ${sourcePool.location}\n      name: source-volume\n      capacityGib: 100\n      shareName: source-volume\n      storagePool: ${sourcePool.name}\n      protocols:\n        - NFSV3\n      deletionPolicy: FORCE\n  testReplication:\n    type: gcp:netapp:VolumeReplication\n    name: test_replication\n    properties:\n      location: ${sourceVolume.location}\n      volumeName: ${sourceVolume.name}\n      name: test-replication\n      replicationSchedule: EVERY_10_MINUTES\n      description: This is a replication resource\n      destinationVolumeParameters:\n        storagePool: ${destinationPool.id}\n        volumeId: destination-volume\n        shareName: source-volume\n        description: This is a replicated volume\n      deleteDestinationVolume: true\n      waitForMirror: true\n    options:\n      dependsOn:\n        - ${sourceVolume}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: test-network\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nVolumeReplication can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{location}}/volumes/{{volume_name}}/replications/{{name}}`\n\n* `{{project}}/{{location}}/{{volume_name}}/{{name}}`\n\n* `{{location}}/{{volume_name}}/{{name}}`\n\nWhen using the `pulumi import` command, VolumeReplication can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:netapp/volumeReplication:VolumeReplication default projects/{{project}}/locations/{{location}}/volumes/{{volume_name}}/replications/{{name}}\n```\n\n```sh\n$ pulumi import gcp:netapp/volumeReplication:VolumeReplication default {{project}}/{{location}}/{{volume_name}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:netapp/volumeReplication:VolumeReplication default {{location}}/{{volume_name}}/{{name}}\n```\n\n",
             "properties": {
                 "createTime": {
                     "type": "string",
@@ -244730,7 +244730,7 @@
             }
         },
         "gcp:netapp/volumeSnapshot:VolumeSnapshot": {
-            "description": "NetApp Volumes helps you manage your data usage with snapshots that can quickly restore lost data.\nSnapshots are point-in-time versions of your volume's content. They are resources of volumes and are\ninstant captures of your data that consume space only for modified data. Because data changes over\ntime, snapshots usually consume more space as they get older.\nNetApp Volumes volumes use just-in-time copy-on-write so that unmodified files in snapshots don't\nconsume any of the volume's capacity.\n\n\nTo get more information about VolumeSnapshot, see:\n\n* [API documentation](https://cloud.google.com/netapp/volumes/docs/reference/rest/v1/projects.locations.volumes.snapshots)\n* How-to Guides\n    * [Documentation](https://cloud.google.com/netapp/volumes/docs/configure-and-use/volume-snapshots/overview)\n\n## Example Usage\n\n### Volume Snapshot Create\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.compute.getNetwork({\n    name: \"test-network\",\n});\nconst defaultStoragePool = new gcp.netapp.StoragePool(\"default\", {\n    name: \"test-pool\",\n    location: \"us-west2\",\n    serviceLevel: \"PREMIUM\",\n    capacityGib: \"2048\",\n    network: _default.then(_default =\u003e _default.id),\n});\nconst defaultVolume = new gcp.netapp.Volume(\"default\", {\n    location: defaultStoragePool.location,\n    name: \"test-volume\",\n    capacityGib: \"100\",\n    shareName: \"test-volume\",\n    storagePool: defaultStoragePool.name,\n    protocols: [\"NFSV3\"],\n});\nconst testSnapshot = new gcp.netapp.VolumeSnapshot(\"test_snapshot\", {\n    location: defaultVolume.location,\n    volumeName: defaultVolume.name,\n    name: \"testvolumesnap\",\n}, {\n    dependsOn: [defaultVolume],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_network(name=\"test-network\")\ndefault_storage_pool = gcp.netapp.StoragePool(\"default\",\n    name=\"test-pool\",\n    location=\"us-west2\",\n    service_level=\"PREMIUM\",\n    capacity_gib=\"2048\",\n    network=default.id)\ndefault_volume = gcp.netapp.Volume(\"default\",\n    location=default_storage_pool.location,\n    name=\"test-volume\",\n    capacity_gib=\"100\",\n    share_name=\"test-volume\",\n    storage_pool=default_storage_pool.name,\n    protocols=[\"NFSV3\"])\ntest_snapshot = gcp.netapp.VolumeSnapshot(\"test_snapshot\",\n    location=default_volume.location,\n    volume_name=default_volume.name,\n    name=\"testvolumesnap\",\n    opts = pulumi.ResourceOptions(depends_on=[default_volume]))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"test-network\",\n    });\n\n    var defaultStoragePool = new Gcp.Netapp.StoragePool(\"default\", new()\n    {\n        Name = \"test-pool\",\n        Location = \"us-west2\",\n        ServiceLevel = \"PREMIUM\",\n        CapacityGib = \"2048\",\n        Network = @default.Apply(@default =\u003e @default.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n    });\n\n    var defaultVolume = new Gcp.Netapp.Volume(\"default\", new()\n    {\n        Location = defaultStoragePool.Location,\n        Name = \"test-volume\",\n        CapacityGib = \"100\",\n        ShareName = \"test-volume\",\n        StoragePool = defaultStoragePool.Name,\n        Protocols = new[]\n        {\n            \"NFSV3\",\n        },\n    });\n\n    var testSnapshot = new Gcp.Netapp.VolumeSnapshot(\"test_snapshot\", new()\n    {\n        Location = defaultVolume.Location,\n        VolumeName = defaultVolume.Name,\n        Name = \"testvolumesnap\",\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            defaultVolume,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/netapp\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName: \"test-network\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdefaultStoragePool, err := netapp.NewStoragePool(ctx, \"default\", \u0026netapp.StoragePoolArgs{\n\t\t\tName:         pulumi.String(\"test-pool\"),\n\t\t\tLocation:     pulumi.String(\"us-west2\"),\n\t\t\tServiceLevel: pulumi.String(\"PREMIUM\"),\n\t\t\tCapacityGib:  pulumi.String(\"2048\"),\n\t\t\tNetwork:      pulumi.String(_default.Id),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdefaultVolume, err := netapp.NewVolume(ctx, \"default\", \u0026netapp.VolumeArgs{\n\t\t\tLocation:    defaultStoragePool.Location,\n\t\t\tName:        pulumi.String(\"test-volume\"),\n\t\t\tCapacityGib: pulumi.String(\"100\"),\n\t\t\tShareName:   pulumi.String(\"test-volume\"),\n\t\t\tStoragePool: defaultStoragePool.Name,\n\t\t\tProtocols: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"NFSV3\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = netapp.NewVolumeSnapshot(ctx, \"test_snapshot\", \u0026netapp.VolumeSnapshotArgs{\n\t\t\tLocation:   defaultVolume.Location,\n\t\t\tVolumeName: defaultVolume.Name,\n\t\t\tName:       pulumi.String(\"testvolumesnap\"),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tdefaultVolume,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.netapp.StoragePool;\nimport com.pulumi.gcp.netapp.StoragePoolArgs;\nimport com.pulumi.gcp.netapp.Volume;\nimport com.pulumi.gcp.netapp.VolumeArgs;\nimport com.pulumi.gcp.netapp.VolumeSnapshot;\nimport com.pulumi.gcp.netapp.VolumeSnapshotArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"test-network\")\n            .build());\n\n        var defaultStoragePool = new StoragePool(\"defaultStoragePool\", StoragePoolArgs.builder()\n            .name(\"test-pool\")\n            .location(\"us-west2\")\n            .serviceLevel(\"PREMIUM\")\n            .capacityGib(2048)\n            .network(default_.id())\n            .build());\n\n        var defaultVolume = new Volume(\"defaultVolume\", VolumeArgs.builder()\n            .location(defaultStoragePool.location())\n            .name(\"test-volume\")\n            .capacityGib(100)\n            .shareName(\"test-volume\")\n            .storagePool(defaultStoragePool.name())\n            .protocols(\"NFSV3\")\n            .build());\n\n        var testSnapshot = new VolumeSnapshot(\"testSnapshot\", VolumeSnapshotArgs.builder()\n            .location(defaultVolume.location())\n            .volumeName(defaultVolume.name())\n            .name(\"testvolumesnap\")\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(defaultVolume)\n                .build());\n\n    }\n}\n```\n```yaml\nresources:\n  defaultStoragePool:\n    type: gcp:netapp:StoragePool\n    name: default\n    properties:\n      name: test-pool\n      location: us-west2\n      serviceLevel: PREMIUM\n      capacityGib: 2048\n      network: ${default.id}\n  defaultVolume:\n    type: gcp:netapp:Volume\n    name: default\n    properties:\n      location: ${defaultStoragePool.location}\n      name: test-volume\n      capacityGib: 100\n      shareName: test-volume\n      storagePool: ${defaultStoragePool.name}\n      protocols:\n        - NFSV3\n  testSnapshot:\n    type: gcp:netapp:VolumeSnapshot\n    name: test_snapshot\n    properties:\n      location: ${defaultVolume.location}\n      volumeName: ${defaultVolume.name}\n      name: testvolumesnap\n    options:\n      dependsOn:\n        - ${defaultVolume}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: test-network\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nVolumeSnapshot can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{location}}/volumes/{{volume_name}}/snapshots/{{name}}`\n\n* `{{project}}/{{location}}/{{volume_name}}/{{name}}`\n\n* `{{location}}/{{volume_name}}/{{name}}`\n\nWhen using the `pulumi import` command, VolumeSnapshot can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:netapp/volumeSnapshot:VolumeSnapshot default projects/{{project}}/locations/{{location}}/volumes/{{volume_name}}/snapshots/{{name}}\n```\n\n```sh\n$ pulumi import gcp:netapp/volumeSnapshot:VolumeSnapshot default {{project}}/{{location}}/{{volume_name}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:netapp/volumeSnapshot:VolumeSnapshot default {{location}}/{{volume_name}}/{{name}}\n```\n\n",
+            "description": "NetApp Volumes helps you manage your data usage with snapshots that can quickly restore lost data.\nSnapshots are point-in-time versions of your volume's content. They are resources of volumes and are\ninstant captures of your data that consume space only for modified data. Because data changes over\ntime, snapshots usually consume more space as they get older.\nNetApp Volumes volumes use just-in-time copy-on-write so that unmodified files in snapshots don't\nconsume any of the volume's capacity.\n\n\nTo get more information about VolumeSnapshot, see:\n\n* [API documentation](https://cloud.google.com/netapp/volumes/docs/reference/rest/v1/projects.locations.volumes.snapshots)\n* How-to Guides\n    * [Documentation](https://cloud.google.com/netapp/volumes/docs/configure-and-use/volume-snapshots/overview)\n\n## Example Usage\n\n### Volume Snapshot Create\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.compute.getNetwork({\n    name: \"test-network\",\n});\nconst defaultStoragePool = new gcp.netapp.StoragePool(\"default\", {\n    name: \"test-pool\",\n    location: \"us-west2\",\n    serviceLevel: \"PREMIUM\",\n    capacityGib: \"2048\",\n    network: _default.then(_default =\u003e _default.id),\n});\nconst defaultVolume = new gcp.netapp.Volume(\"default\", {\n    location: defaultStoragePool.location,\n    name: \"test-volume\",\n    capacityGib: \"100\",\n    shareName: \"test-volume\",\n    storagePool: defaultStoragePool.name,\n    protocols: [\"NFSV3\"],\n});\nconst testSnapshot = new gcp.netapp.VolumeSnapshot(\"test_snapshot\", {\n    location: defaultVolume.location,\n    volumeName: defaultVolume.name,\n    name: \"testvolumesnap\",\n}, {\n    dependsOn: [defaultVolume],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_network(name=\"test-network\")\ndefault_storage_pool = gcp.netapp.StoragePool(\"default\",\n    name=\"test-pool\",\n    location=\"us-west2\",\n    service_level=\"PREMIUM\",\n    capacity_gib=\"2048\",\n    network=default.id)\ndefault_volume = gcp.netapp.Volume(\"default\",\n    location=default_storage_pool.location,\n    name=\"test-volume\",\n    capacity_gib=\"100\",\n    share_name=\"test-volume\",\n    storage_pool=default_storage_pool.name,\n    protocols=[\"NFSV3\"])\ntest_snapshot = gcp.netapp.VolumeSnapshot(\"test_snapshot\",\n    location=default_volume.location,\n    volume_name=default_volume.name,\n    name=\"testvolumesnap\",\n    opts = pulumi.ResourceOptions(depends_on=[default_volume]))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"test-network\",\n    });\n\n    var defaultStoragePool = new Gcp.Netapp.StoragePool(\"default\", new()\n    {\n        Name = \"test-pool\",\n        Location = \"us-west2\",\n        ServiceLevel = \"PREMIUM\",\n        CapacityGib = \"2048\",\n        Network = @default.Apply(@default =\u003e @default.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n    });\n\n    var defaultVolume = new Gcp.Netapp.Volume(\"default\", new()\n    {\n        Location = defaultStoragePool.Location,\n        Name = \"test-volume\",\n        CapacityGib = \"100\",\n        ShareName = \"test-volume\",\n        StoragePool = defaultStoragePool.Name,\n        Protocols = new[]\n        {\n            \"NFSV3\",\n        },\n    });\n\n    var testSnapshot = new Gcp.Netapp.VolumeSnapshot(\"test_snapshot\", new()\n    {\n        Location = defaultVolume.Location,\n        VolumeName = defaultVolume.Name,\n        Name = \"testvolumesnap\",\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            defaultVolume,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/netapp\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName: \"test-network\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdefaultStoragePool, err := netapp.NewStoragePool(ctx, \"default\", \u0026netapp.StoragePoolArgs{\n\t\t\tName:         pulumi.String(\"test-pool\"),\n\t\t\tLocation:     pulumi.String(\"us-west2\"),\n\t\t\tServiceLevel: pulumi.String(\"PREMIUM\"),\n\t\t\tCapacityGib:  pulumi.String(\"2048\"),\n\t\t\tNetwork:      pulumi.String(_default.Id),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdefaultVolume, err := netapp.NewVolume(ctx, \"default\", \u0026netapp.VolumeArgs{\n\t\t\tLocation:    defaultStoragePool.Location,\n\t\t\tName:        pulumi.String(\"test-volume\"),\n\t\t\tCapacityGib: pulumi.String(\"100\"),\n\t\t\tShareName:   pulumi.String(\"test-volume\"),\n\t\t\tStoragePool: defaultStoragePool.Name,\n\t\t\tProtocols: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"NFSV3\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = netapp.NewVolumeSnapshot(ctx, \"test_snapshot\", \u0026netapp.VolumeSnapshotArgs{\n\t\t\tLocation:   defaultVolume.Location,\n\t\t\tVolumeName: defaultVolume.Name,\n\t\t\tName:       pulumi.String(\"testvolumesnap\"),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tdefaultVolume,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.netapp.StoragePool;\nimport com.pulumi.gcp.netapp.StoragePoolArgs;\nimport com.pulumi.gcp.netapp.Volume;\nimport com.pulumi.gcp.netapp.VolumeArgs;\nimport com.pulumi.gcp.netapp.VolumeSnapshot;\nimport com.pulumi.gcp.netapp.VolumeSnapshotArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"test-network\")\n            .build());\n\n        var defaultStoragePool = new StoragePool(\"defaultStoragePool\", StoragePoolArgs.builder()\n            .name(\"test-pool\")\n            .location(\"us-west2\")\n            .serviceLevel(\"PREMIUM\")\n            .capacityGib(2048)\n            .network(default_.id())\n            .build());\n\n        var defaultVolume = new Volume(\"defaultVolume\", VolumeArgs.builder()\n            .location(defaultStoragePool.location())\n            .name(\"test-volume\")\n            .capacityGib(100)\n            .shareName(\"test-volume\")\n            .storagePool(defaultStoragePool.name())\n            .protocols(\"NFSV3\")\n            .build());\n\n        var testSnapshot = new VolumeSnapshot(\"testSnapshot\", VolumeSnapshotArgs.builder()\n            .location(defaultVolume.location())\n            .volumeName(defaultVolume.name())\n            .name(\"testvolumesnap\")\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(defaultVolume)\n                .build());\n\n    }\n}\n```\n```yaml\nresources:\n  defaultStoragePool:\n    type: gcp:netapp:StoragePool\n    name: default\n    properties:\n      name: test-pool\n      location: us-west2\n      serviceLevel: PREMIUM\n      capacityGib: 2048\n      network: ${default.id}\n  defaultVolume:\n    type: gcp:netapp:Volume\n    name: default\n    properties:\n      location: ${defaultStoragePool.location}\n      name: test-volume\n      capacityGib: 100\n      shareName: test-volume\n      storagePool: ${defaultStoragePool.name}\n      protocols:\n        - NFSV3\n  testSnapshot:\n    type: gcp:netapp:VolumeSnapshot\n    name: test_snapshot\n    properties:\n      location: ${defaultVolume.location}\n      volumeName: ${defaultVolume.name}\n      name: testvolumesnap\n    options:\n      dependsOn:\n        - ${defaultVolume}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: test-network\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nVolumeSnapshot can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{location}}/volumes/{{volume_name}}/snapshots/{{name}}`\n\n* `{{project}}/{{location}}/{{volume_name}}/{{name}}`\n\n* `{{location}}/{{volume_name}}/{{name}}`\n\nWhen using the `pulumi import` command, VolumeSnapshot can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:netapp/volumeSnapshot:VolumeSnapshot default projects/{{project}}/locations/{{location}}/volumes/{{volume_name}}/snapshots/{{name}}\n```\n\n```sh\n$ pulumi import gcp:netapp/volumeSnapshot:VolumeSnapshot default {{project}}/{{location}}/{{volume_name}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:netapp/volumeSnapshot:VolumeSnapshot default {{location}}/{{volume_name}}/{{name}}\n```\n\n",
             "properties": {
                 "description": {
                     "type": "string",
@@ -255830,7 +255830,7 @@
             }
         },
         "gcp:oracledatabase/autonomousDatabase:AutonomousDatabase": {
-            "description": "An AutonomousDatabase resource.\n\n\nTo get more information about AutonomousDatabase, see:\n\n* [API documentation](https://cloud.google.com/oracle/database/docs/reference/rest/v1/projects.locations.autonomousDatabases)\n* How-to Guides\n    * [Create Autonomous databases](https://cloud.google.com/oracle/database/docs/create-databases)\n\n## Example Usage\n\n### Oracledatabase Autonomous Database Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.compute.getNetwork({\n    name: \"new\",\n    project: \"my-project\",\n});\nconst myADB = new gcp.oracledatabase.AutonomousDatabase(\"myADB\", {\n    autonomousDatabaseId: \"my-instance\",\n    location: \"us-east4\",\n    project: \"my-project\",\n    database: \"mydatabase\",\n    adminPassword: \"123Abpassword\",\n    network: _default.then(_default =\u003e _default.id),\n    cidr: \"10.5.0.0/24\",\n    properties: {\n        computeCount: 2,\n        dataStorageSizeTb: 1,\n        dbVersion: \"19c\",\n        dbWorkload: \"OLTP\",\n        licenseType: \"LICENSE_INCLUDED\",\n    },\n    deletionProtection: true,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_network(name=\"new\",\n    project=\"my-project\")\nmy_adb = gcp.oracledatabase.AutonomousDatabase(\"myADB\",\n    autonomous_database_id=\"my-instance\",\n    location=\"us-east4\",\n    project=\"my-project\",\n    database=\"mydatabase\",\n    admin_password=\"123Abpassword\",\n    network=default.id,\n    cidr=\"10.5.0.0/24\",\n    properties={\n        \"compute_count\": 2,\n        \"data_storage_size_tb\": 1,\n        \"db_version\": \"19c\",\n        \"db_workload\": \"OLTP\",\n        \"license_type\": \"LICENSE_INCLUDED\",\n    },\n    deletion_protection=True)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"new\",\n        Project = \"my-project\",\n    });\n\n    var myADB = new Gcp.OracleDatabase.AutonomousDatabase(\"myADB\", new()\n    {\n        AutonomousDatabaseId = \"my-instance\",\n        Location = \"us-east4\",\n        Project = \"my-project\",\n        Database = \"mydatabase\",\n        AdminPassword = \"123Abpassword\",\n        Network = @default.Apply(@default =\u003e @default.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n        Cidr = \"10.5.0.0/24\",\n        Properties = new Gcp.OracleDatabase.Inputs.AutonomousDatabasePropertiesArgs\n        {\n            ComputeCount = 2,\n            DataStorageSizeTb = 1,\n            DbVersion = \"19c\",\n            DbWorkload = \"OLTP\",\n            LicenseType = \"LICENSE_INCLUDED\",\n        },\n        DeletionProtection = true,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/oracledatabase\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName:    \"new\",\n\t\t\tProject: pulumi.StringRef(\"my-project\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = oracledatabase.NewAutonomousDatabase(ctx, \"myADB\", \u0026oracledatabase.AutonomousDatabaseArgs{\n\t\t\tAutonomousDatabaseId: pulumi.String(\"my-instance\"),\n\t\t\tLocation:             pulumi.String(\"us-east4\"),\n\t\t\tProject:              pulumi.String(\"my-project\"),\n\t\t\tDatabase:             pulumi.String(\"mydatabase\"),\n\t\t\tAdminPassword:        pulumi.String(\"123Abpassword\"),\n\t\t\tNetwork:              pulumi.String(_default.Id),\n\t\t\tCidr:                 pulumi.String(\"10.5.0.0/24\"),\n\t\t\tProperties: \u0026oracledatabase.AutonomousDatabasePropertiesArgs{\n\t\t\t\tComputeCount:      pulumi.Float64(2),\n\t\t\t\tDataStorageSizeTb: pulumi.Int(1),\n\t\t\t\tDbVersion:         pulumi.String(\"19c\"),\n\t\t\t\tDbWorkload:        pulumi.String(\"OLTP\"),\n\t\t\t\tLicenseType:       pulumi.String(\"LICENSE_INCLUDED\"),\n\t\t\t},\n\t\t\tDeletionProtection: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.oracledatabase.AutonomousDatabase;\nimport com.pulumi.gcp.oracledatabase.AutonomousDatabaseArgs;\nimport com.pulumi.gcp.oracledatabase.inputs.AutonomousDatabasePropertiesArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"new\")\n            .project(\"my-project\")\n            .build());\n\n        var myADB = new AutonomousDatabase(\"myADB\", AutonomousDatabaseArgs.builder()\n            .autonomousDatabaseId(\"my-instance\")\n            .location(\"us-east4\")\n            .project(\"my-project\")\n            .database(\"mydatabase\")\n            .adminPassword(\"123Abpassword\")\n            .network(default_.id())\n            .cidr(\"10.5.0.0/24\")\n            .properties(AutonomousDatabasePropertiesArgs.builder()\n                .computeCount(\"2\")\n                .dataStorageSizeTb(\"1\")\n                .dbVersion(\"19c\")\n                .dbWorkload(\"OLTP\")\n                .licenseType(\"LICENSE_INCLUDED\")\n                .build())\n            .deletionProtection(\"true\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  myADB:\n    type: gcp:oracledatabase:AutonomousDatabase\n    properties:\n      autonomousDatabaseId: my-instance\n      location: us-east4\n      project: my-project\n      database: mydatabase\n      adminPassword: 123Abpassword\n      network: ${default.id}\n      cidr: 10.5.0.0/24\n      properties:\n        computeCount: '2'\n        dataStorageSizeTb: '1'\n        dbVersion: 19c\n        dbWorkload: OLTP\n        licenseType: LICENSE_INCLUDED\n      deletionProtection: 'true'\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: new\n        project: my-project\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Oracledatabase Autonomous Database Full\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.compute.getNetwork({\n    name: \"new\",\n    project: \"my-project\",\n});\nconst myADB = new gcp.oracledatabase.AutonomousDatabase(\"myADB\", {\n    autonomousDatabaseId: \"my-instance\",\n    location: \"us-east4\",\n    project: \"my-project\",\n    displayName: \"autonomousDatabase displayname\",\n    database: \"mydatabase\",\n    adminPassword: \"123Abpassword\",\n    network: _default.then(_default =\u003e _default.id),\n    cidr: \"10.5.0.0/24\",\n    labels: {\n        \"label-one\": \"value-one\",\n    },\n    properties: {\n        computeCount: 2,\n        dataStorageSizeGb: 48,\n        dbVersion: \"19c\",\n        dbEdition: \"STANDARD_EDITION\",\n        dbWorkload: \"OLTP\",\n        isAutoScalingEnabled: true,\n        licenseType: \"BRING_YOUR_OWN_LICENSE\",\n        backupRetentionPeriodDays: 60,\n        characterSet: \"AL32UTF8\",\n        isStorageAutoScalingEnabled: false,\n        maintenanceScheduleType: \"REGULAR\",\n        mtlsConnectionRequired: false,\n        nCharacterSet: \"AL16UTF16\",\n        operationsInsightsState: \"NOT_ENABLED\",\n        customerContacts: [{\n            email: \"xyz@example.com\",\n        }],\n        privateEndpointIp: \"10.5.0.11\",\n        privateEndpointLabel: \"myendpoint\",\n    },\n    deletionProtection: true,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_network(name=\"new\",\n    project=\"my-project\")\nmy_adb = gcp.oracledatabase.AutonomousDatabase(\"myADB\",\n    autonomous_database_id=\"my-instance\",\n    location=\"us-east4\",\n    project=\"my-project\",\n    display_name=\"autonomousDatabase displayname\",\n    database=\"mydatabase\",\n    admin_password=\"123Abpassword\",\n    network=default.id,\n    cidr=\"10.5.0.0/24\",\n    labels={\n        \"label-one\": \"value-one\",\n    },\n    properties={\n        \"compute_count\": 2,\n        \"data_storage_size_gb\": 48,\n        \"db_version\": \"19c\",\n        \"db_edition\": \"STANDARD_EDITION\",\n        \"db_workload\": \"OLTP\",\n        \"is_auto_scaling_enabled\": True,\n        \"license_type\": \"BRING_YOUR_OWN_LICENSE\",\n        \"backup_retention_period_days\": 60,\n        \"character_set\": \"AL32UTF8\",\n        \"is_storage_auto_scaling_enabled\": False,\n        \"maintenance_schedule_type\": \"REGULAR\",\n        \"mtls_connection_required\": False,\n        \"n_character_set\": \"AL16UTF16\",\n        \"operations_insights_state\": \"NOT_ENABLED\",\n        \"customer_contacts\": [{\n            \"email\": \"xyz@example.com\",\n        }],\n        \"private_endpoint_ip\": \"10.5.0.11\",\n        \"private_endpoint_label\": \"myendpoint\",\n    },\n    deletion_protection=True)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"new\",\n        Project = \"my-project\",\n    });\n\n    var myADB = new Gcp.OracleDatabase.AutonomousDatabase(\"myADB\", new()\n    {\n        AutonomousDatabaseId = \"my-instance\",\n        Location = \"us-east4\",\n        Project = \"my-project\",\n        DisplayName = \"autonomousDatabase displayname\",\n        Database = \"mydatabase\",\n        AdminPassword = \"123Abpassword\",\n        Network = @default.Apply(@default =\u003e @default.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n        Cidr = \"10.5.0.0/24\",\n        Labels = \n        {\n            { \"label-one\", \"value-one\" },\n        },\n        Properties = new Gcp.OracleDatabase.Inputs.AutonomousDatabasePropertiesArgs\n        {\n            ComputeCount = 2,\n            DataStorageSizeGb = 48,\n            DbVersion = \"19c\",\n            DbEdition = \"STANDARD_EDITION\",\n            DbWorkload = \"OLTP\",\n            IsAutoScalingEnabled = true,\n            LicenseType = \"BRING_YOUR_OWN_LICENSE\",\n            BackupRetentionPeriodDays = 60,\n            CharacterSet = \"AL32UTF8\",\n            IsStorageAutoScalingEnabled = false,\n            MaintenanceScheduleType = \"REGULAR\",\n            MtlsConnectionRequired = false,\n            NCharacterSet = \"AL16UTF16\",\n            OperationsInsightsState = \"NOT_ENABLED\",\n            CustomerContacts = new[]\n            {\n                new Gcp.OracleDatabase.Inputs.AutonomousDatabasePropertiesCustomerContactArgs\n                {\n                    Email = \"xyz@example.com\",\n                },\n            },\n            PrivateEndpointIp = \"10.5.0.11\",\n            PrivateEndpointLabel = \"myendpoint\",\n        },\n        DeletionProtection = true,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/oracledatabase\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName:    \"new\",\n\t\t\tProject: pulumi.StringRef(\"my-project\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = oracledatabase.NewAutonomousDatabase(ctx, \"myADB\", \u0026oracledatabase.AutonomousDatabaseArgs{\n\t\t\tAutonomousDatabaseId: pulumi.String(\"my-instance\"),\n\t\t\tLocation:             pulumi.String(\"us-east4\"),\n\t\t\tProject:              pulumi.String(\"my-project\"),\n\t\t\tDisplayName:          pulumi.String(\"autonomousDatabase displayname\"),\n\t\t\tDatabase:             pulumi.String(\"mydatabase\"),\n\t\t\tAdminPassword:        pulumi.String(\"123Abpassword\"),\n\t\t\tNetwork:              pulumi.String(_default.Id),\n\t\t\tCidr:                 pulumi.String(\"10.5.0.0/24\"),\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"label-one\": pulumi.String(\"value-one\"),\n\t\t\t},\n\t\t\tProperties: \u0026oracledatabase.AutonomousDatabasePropertiesArgs{\n\t\t\t\tComputeCount:                pulumi.Float64(2),\n\t\t\t\tDataStorageSizeGb:           pulumi.Int(48),\n\t\t\t\tDbVersion:                   pulumi.String(\"19c\"),\n\t\t\t\tDbEdition:                   pulumi.String(\"STANDARD_EDITION\"),\n\t\t\t\tDbWorkload:                  pulumi.String(\"OLTP\"),\n\t\t\t\tIsAutoScalingEnabled:        pulumi.Bool(true),\n\t\t\t\tLicenseType:                 pulumi.String(\"BRING_YOUR_OWN_LICENSE\"),\n\t\t\t\tBackupRetentionPeriodDays:   pulumi.Int(60),\n\t\t\t\tCharacterSet:                pulumi.String(\"AL32UTF8\"),\n\t\t\t\tIsStorageAutoScalingEnabled: pulumi.Bool(false),\n\t\t\t\tMaintenanceScheduleType:     pulumi.String(\"REGULAR\"),\n\t\t\t\tMtlsConnectionRequired:      pulumi.Bool(false),\n\t\t\t\tNCharacterSet:               pulumi.String(\"AL16UTF16\"),\n\t\t\t\tOperationsInsightsState:     pulumi.String(\"NOT_ENABLED\"),\n\t\t\t\tCustomerContacts: oracledatabase.AutonomousDatabasePropertiesCustomerContactArray{\n\t\t\t\t\t\u0026oracledatabase.AutonomousDatabasePropertiesCustomerContactArgs{\n\t\t\t\t\t\tEmail: pulumi.String(\"xyz@example.com\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tPrivateEndpointIp:    pulumi.String(\"10.5.0.11\"),\n\t\t\t\tPrivateEndpointLabel: pulumi.String(\"myendpoint\"),\n\t\t\t},\n\t\t\tDeletionProtection: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.oracledatabase.AutonomousDatabase;\nimport com.pulumi.gcp.oracledatabase.AutonomousDatabaseArgs;\nimport com.pulumi.gcp.oracledatabase.inputs.AutonomousDatabasePropertiesArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"new\")\n            .project(\"my-project\")\n            .build());\n\n        var myADB = new AutonomousDatabase(\"myADB\", AutonomousDatabaseArgs.builder()\n            .autonomousDatabaseId(\"my-instance\")\n            .location(\"us-east4\")\n            .project(\"my-project\")\n            .displayName(\"autonomousDatabase displayname\")\n            .database(\"mydatabase\")\n            .adminPassword(\"123Abpassword\")\n            .network(default_.id())\n            .cidr(\"10.5.0.0/24\")\n            .labels(Map.of(\"label-one\", \"value-one\"))\n            .properties(AutonomousDatabasePropertiesArgs.builder()\n                .computeCount(\"2\")\n                .dataStorageSizeGb(\"48\")\n                .dbVersion(\"19c\")\n                .dbEdition(\"STANDARD_EDITION\")\n                .dbWorkload(\"OLTP\")\n                .isAutoScalingEnabled(\"true\")\n                .licenseType(\"BRING_YOUR_OWN_LICENSE\")\n                .backupRetentionPeriodDays(\"60\")\n                .characterSet(\"AL32UTF8\")\n                .isStorageAutoScalingEnabled(\"false\")\n                .maintenanceScheduleType(\"REGULAR\")\n                .mtlsConnectionRequired(\"false\")\n                .nCharacterSet(\"AL16UTF16\")\n                .operationsInsightsState(\"NOT_ENABLED\")\n                .customerContacts(AutonomousDatabasePropertiesCustomerContactArgs.builder()\n                    .email(\"xyz@example.com\")\n                    .build())\n                .privateEndpointIp(\"10.5.0.11\")\n                .privateEndpointLabel(\"myendpoint\")\n                .build())\n            .deletionProtection(\"true\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  myADB:\n    type: gcp:oracledatabase:AutonomousDatabase\n    properties:\n      autonomousDatabaseId: my-instance\n      location: us-east4\n      project: my-project\n      displayName: autonomousDatabase displayname\n      database: mydatabase\n      adminPassword: 123Abpassword\n      network: ${default.id}\n      cidr: 10.5.0.0/24\n      labels:\n        label-one: value-one\n      properties:\n        computeCount: '2'\n        dataStorageSizeGb: '48'\n        dbVersion: 19c\n        dbEdition: STANDARD_EDITION\n        dbWorkload: OLTP\n        isAutoScalingEnabled: 'true'\n        licenseType: BRING_YOUR_OWN_LICENSE\n        backupRetentionPeriodDays: '60'\n        characterSet: AL32UTF8\n        isStorageAutoScalingEnabled: 'false'\n        maintenanceScheduleType: REGULAR\n        mtlsConnectionRequired: 'false'\n        nCharacterSet: AL16UTF16\n        operationsInsightsState: NOT_ENABLED\n        customerContacts:\n          - email: xyz@example.com\n        privateEndpointIp: 10.5.0.11\n        privateEndpointLabel: myendpoint\n      deletionProtection: 'true'\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: new\n        project: my-project\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nAutonomousDatabase can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{location}}/autonomousDatabases/{{autonomous_database_id}}`\n\n* `{{project}}/{{location}}/{{autonomous_database_id}}`\n\n* `{{location}}/{{autonomous_database_id}}`\n\nWhen using the `pulumi import` command, AutonomousDatabase can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:oracledatabase/autonomousDatabase:AutonomousDatabase default projects/{{project}}/locations/{{location}}/autonomousDatabases/{{autonomous_database_id}}\n```\n\n```sh\n$ pulumi import gcp:oracledatabase/autonomousDatabase:AutonomousDatabase default {{project}}/{{location}}/{{autonomous_database_id}}\n```\n\n```sh\n$ pulumi import gcp:oracledatabase/autonomousDatabase:AutonomousDatabase default {{location}}/{{autonomous_database_id}}\n```\n\n",
+            "description": "An AutonomousDatabase resource.\n\n\nTo get more information about AutonomousDatabase, see:\n\n* [API documentation](https://cloud.google.com/oracle/database/docs/reference/rest/v1/projects.locations.autonomousDatabases)\n* How-to Guides\n    * [Create Autonomous databases](https://cloud.google.com/oracle/database/docs/create-databases)\n\n## Example Usage\n\n### Oracledatabase Autonomous Database Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.compute.getNetwork({\n    name: \"new\",\n    project: \"my-project\",\n});\nconst myADB = new gcp.oracledatabase.AutonomousDatabase(\"myADB\", {\n    autonomousDatabaseId: \"my-instance\",\n    location: \"us-east4\",\n    project: \"my-project\",\n    database: \"mydatabase\",\n    adminPassword: \"123Abpassword\",\n    network: _default.then(_default =\u003e _default.id),\n    cidr: \"10.5.0.0/24\",\n    properties: {\n        computeCount: 2,\n        dataStorageSizeTb: 1,\n        dbVersion: \"19c\",\n        dbWorkload: \"OLTP\",\n        licenseType: \"LICENSE_INCLUDED\",\n    },\n    deletionProtection: true,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_network(name=\"new\",\n    project=\"my-project\")\nmy_adb = gcp.oracledatabase.AutonomousDatabase(\"myADB\",\n    autonomous_database_id=\"my-instance\",\n    location=\"us-east4\",\n    project=\"my-project\",\n    database=\"mydatabase\",\n    admin_password=\"123Abpassword\",\n    network=default.id,\n    cidr=\"10.5.0.0/24\",\n    properties={\n        \"compute_count\": 2,\n        \"data_storage_size_tb\": 1,\n        \"db_version\": \"19c\",\n        \"db_workload\": \"OLTP\",\n        \"license_type\": \"LICENSE_INCLUDED\",\n    },\n    deletion_protection=True)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"new\",\n        Project = \"my-project\",\n    });\n\n    var myADB = new Gcp.OracleDatabase.AutonomousDatabase(\"myADB\", new()\n    {\n        AutonomousDatabaseId = \"my-instance\",\n        Location = \"us-east4\",\n        Project = \"my-project\",\n        Database = \"mydatabase\",\n        AdminPassword = \"123Abpassword\",\n        Network = @default.Apply(@default =\u003e @default.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n        Cidr = \"10.5.0.0/24\",\n        Properties = new Gcp.OracleDatabase.Inputs.AutonomousDatabasePropertiesArgs\n        {\n            ComputeCount = 2,\n            DataStorageSizeTb = 1,\n            DbVersion = \"19c\",\n            DbWorkload = \"OLTP\",\n            LicenseType = \"LICENSE_INCLUDED\",\n        },\n        DeletionProtection = true,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/oracledatabase\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName:    \"new\",\n\t\t\tProject: pulumi.StringRef(\"my-project\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = oracledatabase.NewAutonomousDatabase(ctx, \"myADB\", \u0026oracledatabase.AutonomousDatabaseArgs{\n\t\t\tAutonomousDatabaseId: pulumi.String(\"my-instance\"),\n\t\t\tLocation:             pulumi.String(\"us-east4\"),\n\t\t\tProject:              pulumi.String(\"my-project\"),\n\t\t\tDatabase:             pulumi.String(\"mydatabase\"),\n\t\t\tAdminPassword:        pulumi.String(\"123Abpassword\"),\n\t\t\tNetwork:              pulumi.String(_default.Id),\n\t\t\tCidr:                 pulumi.String(\"10.5.0.0/24\"),\n\t\t\tProperties: \u0026oracledatabase.AutonomousDatabasePropertiesArgs{\n\t\t\t\tComputeCount:      pulumi.Float64(2),\n\t\t\t\tDataStorageSizeTb: pulumi.Int(1),\n\t\t\t\tDbVersion:         pulumi.String(\"19c\"),\n\t\t\t\tDbWorkload:        pulumi.String(\"OLTP\"),\n\t\t\t\tLicenseType:       pulumi.String(\"LICENSE_INCLUDED\"),\n\t\t\t},\n\t\t\tDeletionProtection: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.oracledatabase.AutonomousDatabase;\nimport com.pulumi.gcp.oracledatabase.AutonomousDatabaseArgs;\nimport com.pulumi.gcp.oracledatabase.inputs.AutonomousDatabasePropertiesArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"new\")\n            .project(\"my-project\")\n            .build());\n\n        var myADB = new AutonomousDatabase(\"myADB\", AutonomousDatabaseArgs.builder()\n            .autonomousDatabaseId(\"my-instance\")\n            .location(\"us-east4\")\n            .project(\"my-project\")\n            .database(\"mydatabase\")\n            .adminPassword(\"123Abpassword\")\n            .network(default_.id())\n            .cidr(\"10.5.0.0/24\")\n            .properties(AutonomousDatabasePropertiesArgs.builder()\n                .computeCount(\"2\")\n                .dataStorageSizeTb(\"1\")\n                .dbVersion(\"19c\")\n                .dbWorkload(\"OLTP\")\n                .licenseType(\"LICENSE_INCLUDED\")\n                .build())\n            .deletionProtection(\"true\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  myADB:\n    type: gcp:oracledatabase:AutonomousDatabase\n    properties:\n      autonomousDatabaseId: my-instance\n      location: us-east4\n      project: my-project\n      database: mydatabase\n      adminPassword: 123Abpassword\n      network: ${default.id}\n      cidr: 10.5.0.0/24\n      properties:\n        computeCount: '2'\n        dataStorageSizeTb: '1'\n        dbVersion: 19c\n        dbWorkload: OLTP\n        licenseType: LICENSE_INCLUDED\n      deletionProtection: 'true'\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: new\n        project: my-project\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Oracledatabase Autonomous Database Full\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.compute.getNetwork({\n    name: \"new\",\n    project: \"my-project\",\n});\nconst myADB = new gcp.oracledatabase.AutonomousDatabase(\"myADB\", {\n    autonomousDatabaseId: \"my-instance\",\n    location: \"us-east4\",\n    project: \"my-project\",\n    displayName: \"autonomousDatabase displayname\",\n    database: \"mydatabase\",\n    adminPassword: \"123Abpassword\",\n    network: _default.then(_default =\u003e _default.id),\n    cidr: \"10.5.0.0/24\",\n    labels: {\n        \"label-one\": \"value-one\",\n    },\n    properties: {\n        computeCount: 2,\n        dataStorageSizeGb: 48,\n        dbVersion: \"19c\",\n        dbEdition: \"STANDARD_EDITION\",\n        dbWorkload: \"OLTP\",\n        isAutoScalingEnabled: true,\n        licenseType: \"BRING_YOUR_OWN_LICENSE\",\n        backupRetentionPeriodDays: 60,\n        characterSet: \"AL32UTF8\",\n        isStorageAutoScalingEnabled: false,\n        maintenanceScheduleType: \"REGULAR\",\n        mtlsConnectionRequired: false,\n        nCharacterSet: \"AL16UTF16\",\n        operationsInsightsState: \"NOT_ENABLED\",\n        customerContacts: [{\n            email: \"xyz@example.com\",\n        }],\n        privateEndpointIp: \"10.5.0.11\",\n        privateEndpointLabel: \"myendpoint\",\n    },\n    deletionProtection: true,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_network(name=\"new\",\n    project=\"my-project\")\nmy_adb = gcp.oracledatabase.AutonomousDatabase(\"myADB\",\n    autonomous_database_id=\"my-instance\",\n    location=\"us-east4\",\n    project=\"my-project\",\n    display_name=\"autonomousDatabase displayname\",\n    database=\"mydatabase\",\n    admin_password=\"123Abpassword\",\n    network=default.id,\n    cidr=\"10.5.0.0/24\",\n    labels={\n        \"label-one\": \"value-one\",\n    },\n    properties={\n        \"compute_count\": 2,\n        \"data_storage_size_gb\": 48,\n        \"db_version\": \"19c\",\n        \"db_edition\": \"STANDARD_EDITION\",\n        \"db_workload\": \"OLTP\",\n        \"is_auto_scaling_enabled\": True,\n        \"license_type\": \"BRING_YOUR_OWN_LICENSE\",\n        \"backup_retention_period_days\": 60,\n        \"character_set\": \"AL32UTF8\",\n        \"is_storage_auto_scaling_enabled\": False,\n        \"maintenance_schedule_type\": \"REGULAR\",\n        \"mtls_connection_required\": False,\n        \"n_character_set\": \"AL16UTF16\",\n        \"operations_insights_state\": \"NOT_ENABLED\",\n        \"customer_contacts\": [{\n            \"email\": \"xyz@example.com\",\n        }],\n        \"private_endpoint_ip\": \"10.5.0.11\",\n        \"private_endpoint_label\": \"myendpoint\",\n    },\n    deletion_protection=True)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"new\",\n        Project = \"my-project\",\n    });\n\n    var myADB = new Gcp.OracleDatabase.AutonomousDatabase(\"myADB\", new()\n    {\n        AutonomousDatabaseId = \"my-instance\",\n        Location = \"us-east4\",\n        Project = \"my-project\",\n        DisplayName = \"autonomousDatabase displayname\",\n        Database = \"mydatabase\",\n        AdminPassword = \"123Abpassword\",\n        Network = @default.Apply(@default =\u003e @default.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n        Cidr = \"10.5.0.0/24\",\n        Labels = \n        {\n            { \"label-one\", \"value-one\" },\n        },\n        Properties = new Gcp.OracleDatabase.Inputs.AutonomousDatabasePropertiesArgs\n        {\n            ComputeCount = 2,\n            DataStorageSizeGb = 48,\n            DbVersion = \"19c\",\n            DbEdition = \"STANDARD_EDITION\",\n            DbWorkload = \"OLTP\",\n            IsAutoScalingEnabled = true,\n            LicenseType = \"BRING_YOUR_OWN_LICENSE\",\n            BackupRetentionPeriodDays = 60,\n            CharacterSet = \"AL32UTF8\",\n            IsStorageAutoScalingEnabled = false,\n            MaintenanceScheduleType = \"REGULAR\",\n            MtlsConnectionRequired = false,\n            NCharacterSet = \"AL16UTF16\",\n            OperationsInsightsState = \"NOT_ENABLED\",\n            CustomerContacts = new[]\n            {\n                new Gcp.OracleDatabase.Inputs.AutonomousDatabasePropertiesCustomerContactArgs\n                {\n                    Email = \"xyz@example.com\",\n                },\n            },\n            PrivateEndpointIp = \"10.5.0.11\",\n            PrivateEndpointLabel = \"myendpoint\",\n        },\n        DeletionProtection = true,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/oracledatabase\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName:    \"new\",\n\t\t\tProject: pulumi.StringRef(\"my-project\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = oracledatabase.NewAutonomousDatabase(ctx, \"myADB\", \u0026oracledatabase.AutonomousDatabaseArgs{\n\t\t\tAutonomousDatabaseId: pulumi.String(\"my-instance\"),\n\t\t\tLocation:             pulumi.String(\"us-east4\"),\n\t\t\tProject:              pulumi.String(\"my-project\"),\n\t\t\tDisplayName:          pulumi.String(\"autonomousDatabase displayname\"),\n\t\t\tDatabase:             pulumi.String(\"mydatabase\"),\n\t\t\tAdminPassword:        pulumi.String(\"123Abpassword\"),\n\t\t\tNetwork:              pulumi.String(_default.Id),\n\t\t\tCidr:                 pulumi.String(\"10.5.0.0/24\"),\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"label-one\": pulumi.String(\"value-one\"),\n\t\t\t},\n\t\t\tProperties: \u0026oracledatabase.AutonomousDatabasePropertiesArgs{\n\t\t\t\tComputeCount:                pulumi.Float64(2),\n\t\t\t\tDataStorageSizeGb:           pulumi.Int(48),\n\t\t\t\tDbVersion:                   pulumi.String(\"19c\"),\n\t\t\t\tDbEdition:                   pulumi.String(\"STANDARD_EDITION\"),\n\t\t\t\tDbWorkload:                  pulumi.String(\"OLTP\"),\n\t\t\t\tIsAutoScalingEnabled:        pulumi.Bool(true),\n\t\t\t\tLicenseType:                 pulumi.String(\"BRING_YOUR_OWN_LICENSE\"),\n\t\t\t\tBackupRetentionPeriodDays:   pulumi.Int(60),\n\t\t\t\tCharacterSet:                pulumi.String(\"AL32UTF8\"),\n\t\t\t\tIsStorageAutoScalingEnabled: pulumi.Bool(false),\n\t\t\t\tMaintenanceScheduleType:     pulumi.String(\"REGULAR\"),\n\t\t\t\tMtlsConnectionRequired:      pulumi.Bool(false),\n\t\t\t\tNCharacterSet:               pulumi.String(\"AL16UTF16\"),\n\t\t\t\tOperationsInsightsState:     pulumi.String(\"NOT_ENABLED\"),\n\t\t\t\tCustomerContacts: oracledatabase.AutonomousDatabasePropertiesCustomerContactArray{\n\t\t\t\t\t\u0026oracledatabase.AutonomousDatabasePropertiesCustomerContactArgs{\n\t\t\t\t\t\tEmail: pulumi.String(\"xyz@example.com\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tPrivateEndpointIp:    pulumi.String(\"10.5.0.11\"),\n\t\t\t\tPrivateEndpointLabel: pulumi.String(\"myendpoint\"),\n\t\t\t},\n\t\t\tDeletionProtection: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.oracledatabase.AutonomousDatabase;\nimport com.pulumi.gcp.oracledatabase.AutonomousDatabaseArgs;\nimport com.pulumi.gcp.oracledatabase.inputs.AutonomousDatabasePropertiesArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"new\")\n            .project(\"my-project\")\n            .build());\n\n        var myADB = new AutonomousDatabase(\"myADB\", AutonomousDatabaseArgs.builder()\n            .autonomousDatabaseId(\"my-instance\")\n            .location(\"us-east4\")\n            .project(\"my-project\")\n            .displayName(\"autonomousDatabase displayname\")\n            .database(\"mydatabase\")\n            .adminPassword(\"123Abpassword\")\n            .network(default_.id())\n            .cidr(\"10.5.0.0/24\")\n            .labels(Map.of(\"label-one\", \"value-one\"))\n            .properties(AutonomousDatabasePropertiesArgs.builder()\n                .computeCount(\"2\")\n                .dataStorageSizeGb(\"48\")\n                .dbVersion(\"19c\")\n                .dbEdition(\"STANDARD_EDITION\")\n                .dbWorkload(\"OLTP\")\n                .isAutoScalingEnabled(\"true\")\n                .licenseType(\"BRING_YOUR_OWN_LICENSE\")\n                .backupRetentionPeriodDays(\"60\")\n                .characterSet(\"AL32UTF8\")\n                .isStorageAutoScalingEnabled(\"false\")\n                .maintenanceScheduleType(\"REGULAR\")\n                .mtlsConnectionRequired(\"false\")\n                .nCharacterSet(\"AL16UTF16\")\n                .operationsInsightsState(\"NOT_ENABLED\")\n                .customerContacts(AutonomousDatabasePropertiesCustomerContactArgs.builder()\n                    .email(\"xyz@example.com\")\n                    .build())\n                .privateEndpointIp(\"10.5.0.11\")\n                .privateEndpointLabel(\"myendpoint\")\n                .build())\n            .deletionProtection(\"true\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  myADB:\n    type: gcp:oracledatabase:AutonomousDatabase\n    properties:\n      autonomousDatabaseId: my-instance\n      location: us-east4\n      project: my-project\n      displayName: autonomousDatabase displayname\n      database: mydatabase\n      adminPassword: 123Abpassword\n      network: ${default.id}\n      cidr: 10.5.0.0/24\n      labels:\n        label-one: value-one\n      properties:\n        computeCount: '2'\n        dataStorageSizeGb: '48'\n        dbVersion: 19c\n        dbEdition: STANDARD_EDITION\n        dbWorkload: OLTP\n        isAutoScalingEnabled: 'true'\n        licenseType: BRING_YOUR_OWN_LICENSE\n        backupRetentionPeriodDays: '60'\n        characterSet: AL32UTF8\n        isStorageAutoScalingEnabled: 'false'\n        maintenanceScheduleType: REGULAR\n        mtlsConnectionRequired: 'false'\n        nCharacterSet: AL16UTF16\n        operationsInsightsState: NOT_ENABLED\n        customerContacts:\n          - email: xyz@example.com\n        privateEndpointIp: 10.5.0.11\n        privateEndpointLabel: myendpoint\n      deletionProtection: 'true'\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: new\n        project: my-project\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nAutonomousDatabase can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{location}}/autonomousDatabases/{{autonomous_database_id}}`\n\n* `{{project}}/{{location}}/{{autonomous_database_id}}`\n\n* `{{location}}/{{autonomous_database_id}}`\n\nWhen using the `pulumi import` command, AutonomousDatabase can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:oracledatabase/autonomousDatabase:AutonomousDatabase default projects/{{project}}/locations/{{location}}/autonomousDatabases/{{autonomous_database_id}}\n```\n\n```sh\n$ pulumi import gcp:oracledatabase/autonomousDatabase:AutonomousDatabase default {{project}}/{{location}}/{{autonomous_database_id}}\n```\n\n```sh\n$ pulumi import gcp:oracledatabase/autonomousDatabase:AutonomousDatabase default {{location}}/{{autonomous_database_id}}\n```\n\n",
             "properties": {
                 "adminPassword": {
                     "type": "string",
@@ -256275,7 +256275,7 @@
             }
         },
         "gcp:oracledatabase/cloudVmCluster:CloudVmCluster": {
-            "description": "A CloudVmCluster resource.\n\n\nTo get more information about CloudVmCluster, see:\n\n* [API documentation](https://cloud.google.com/oracle/database/docs/reference/rest/v1/projects.locations.cloudVmClusters)\n* How-to Guides\n    * [Create VM clusters](https://cloud.google.com/oracle/database/docs/create-clusters)\n\n## Example Usage\n\n### Oracledatabase Cloud Vmcluster Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst cloudExadataInfrastructures = new gcp.oracledatabase.CloudExadataInfrastructure(\"cloudExadataInfrastructures\", {\n    cloudExadataInfrastructureId: \"my-exadata\",\n    displayName: \"my-exadata displayname\",\n    location: \"us-east4\",\n    project: \"my-project\",\n    properties: {\n        shape: \"Exadata.X9M\",\n        computeCount: 2,\n        storageCount: 3,\n    },\n    deletionProtection: true,\n});\nconst default = gcp.compute.getNetwork({\n    name: \"new\",\n    project: \"my-project\",\n});\nconst myVmcluster = new gcp.oracledatabase.CloudVmCluster(\"my_vmcluster\", {\n    cloudVmClusterId: \"my-instance\",\n    displayName: \"my-instance displayname\",\n    location: \"us-east4\",\n    project: \"my-project\",\n    exadataInfrastructure: cloudExadataInfrastructures.id,\n    network: _default.then(_default =\u003e _default.id),\n    cidr: \"10.5.0.0/24\",\n    backupSubnetCidr: \"10.6.0.0/24\",\n    properties: {\n        licenseType: \"LICENSE_INCLUDED\",\n        sshPublicKeys: [\"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCz1X2744t+6vRLmE5u6nHi6/QWh8bQDgHmd+OIxRQIGA/IWUtCs2FnaCNZcqvZkaeyjk5v0lTA/n+9jvO42Ipib53athrfVG8gRt8fzPL66C6ZqHq+6zZophhrCdfJh/0G4x9xJh5gdMprlaCR1P8yAaVvhBQSKGc4SiIkyMNBcHJ5YTtMQMTfxaB4G1sHZ6SDAY9a6Cq/zNjDwfPapWLsiP4mRhE5SSjJX6l6EYbkm0JeLQg+AbJiNEPvrvDp1wtTxzlPJtIivthmLMThFxK7+DkrYFuLvN5AHUdo9KTDLvHtDCvV70r8v0gafsrKkM/OE9Jtzoo0e1N/5K/ZdyFRbAkFT4QSF3nwpbmBWLf2Evg//YyEuxnz4CwPqFST2mucnrCCGCVWp1vnHZ0y30nM35njLOmWdRDFy5l27pKUTwLp02y3UYiiZyP7d3/u5pKiN4vC27VuvzprSdJxWoAvluOiDeRh+/oeQDowxoT/Oop8DzB9uJmjktXw8jyMW2+Rpg+ENQqeNgF1OGlEzypaWiRskEFlkpLb4v/s3ZDYkL1oW0Nv/J8LTjTOTEaYt2Udjoe9x2xWiGnQixhdChWuG+MaoWffzUgx1tsVj/DBXijR5DjkPkrA1GA98zd3q8GKEaAdcDenJjHhNYSd4+rE9pIsnYn7fo5X/tFfcQH1XQ== nobody@google.com\"],\n        cpuCoreCount: 4,\n        giVersion: \"19.0.0.0\",\n        hostnamePrefix: \"hostname1\",\n    },\n    deletionProtection: true,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ncloud_exadata_infrastructures = gcp.oracledatabase.CloudExadataInfrastructure(\"cloudExadataInfrastructures\",\n    cloud_exadata_infrastructure_id=\"my-exadata\",\n    display_name=\"my-exadata displayname\",\n    location=\"us-east4\",\n    project=\"my-project\",\n    properties={\n        \"shape\": \"Exadata.X9M\",\n        \"compute_count\": 2,\n        \"storage_count\": 3,\n    },\n    deletion_protection=True)\ndefault = gcp.compute.get_network(name=\"new\",\n    project=\"my-project\")\nmy_vmcluster = gcp.oracledatabase.CloudVmCluster(\"my_vmcluster\",\n    cloud_vm_cluster_id=\"my-instance\",\n    display_name=\"my-instance displayname\",\n    location=\"us-east4\",\n    project=\"my-project\",\n    exadata_infrastructure=cloud_exadata_infrastructures.id,\n    network=default.id,\n    cidr=\"10.5.0.0/24\",\n    backup_subnet_cidr=\"10.6.0.0/24\",\n    properties={\n        \"license_type\": \"LICENSE_INCLUDED\",\n        \"ssh_public_keys\": [\"ssh-rsa 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 nobody@google.com\"],\n        \"cpu_core_count\": 4,\n        \"gi_version\": \"19.0.0.0\",\n        \"hostname_prefix\": \"hostname1\",\n    },\n    deletion_protection=True)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var cloudExadataInfrastructures = new Gcp.OracleDatabase.CloudExadataInfrastructure(\"cloudExadataInfrastructures\", new()\n    {\n        CloudExadataInfrastructureId = \"my-exadata\",\n        DisplayName = \"my-exadata displayname\",\n        Location = \"us-east4\",\n        Project = \"my-project\",\n        Properties = new Gcp.OracleDatabase.Inputs.CloudExadataInfrastructurePropertiesArgs\n        {\n            Shape = \"Exadata.X9M\",\n            ComputeCount = 2,\n            StorageCount = 3,\n        },\n        DeletionProtection = true,\n    });\n\n    var @default = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"new\",\n        Project = \"my-project\",\n    });\n\n    var myVmcluster = new Gcp.OracleDatabase.CloudVmCluster(\"my_vmcluster\", new()\n    {\n        CloudVmClusterId = \"my-instance\",\n        DisplayName = \"my-instance displayname\",\n        Location = \"us-east4\",\n        Project = \"my-project\",\n        ExadataInfrastructure = cloudExadataInfrastructures.Id,\n        Network = @default.Apply(@default =\u003e @default.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n        Cidr = \"10.5.0.0/24\",\n        BackupSubnetCidr = \"10.6.0.0/24\",\n        Properties = new Gcp.OracleDatabase.Inputs.CloudVmClusterPropertiesArgs\n        {\n            LicenseType = \"LICENSE_INCLUDED\",\n            SshPublicKeys = new[]\n            {\n                \"ssh-rsa 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 nobody@google.com\",\n            },\n            CpuCoreCount = 4,\n            GiVersion = \"19.0.0.0\",\n            HostnamePrefix = \"hostname1\",\n        },\n        DeletionProtection = true,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/oracledatabase\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcloudExadataInfrastructures, err := oracledatabase.NewCloudExadataInfrastructure(ctx, \"cloudExadataInfrastructures\", \u0026oracledatabase.CloudExadataInfrastructureArgs{\n\t\t\tCloudExadataInfrastructureId: pulumi.String(\"my-exadata\"),\n\t\t\tDisplayName:                  pulumi.String(\"my-exadata displayname\"),\n\t\t\tLocation:                     pulumi.String(\"us-east4\"),\n\t\t\tProject:                      pulumi.String(\"my-project\"),\n\t\t\tProperties: \u0026oracledatabase.CloudExadataInfrastructurePropertiesArgs{\n\t\t\t\tShape:        pulumi.String(\"Exadata.X9M\"),\n\t\t\t\tComputeCount: pulumi.Int(2),\n\t\t\t\tStorageCount: pulumi.Int(3),\n\t\t\t},\n\t\t\tDeletionProtection: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_default, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName:    \"new\",\n\t\t\tProject: pulumi.StringRef(\"my-project\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = oracledatabase.NewCloudVmCluster(ctx, \"my_vmcluster\", \u0026oracledatabase.CloudVmClusterArgs{\n\t\t\tCloudVmClusterId:      pulumi.String(\"my-instance\"),\n\t\t\tDisplayName:           pulumi.String(\"my-instance displayname\"),\n\t\t\tLocation:              pulumi.String(\"us-east4\"),\n\t\t\tProject:               pulumi.String(\"my-project\"),\n\t\t\tExadataInfrastructure: cloudExadataInfrastructures.ID(),\n\t\t\tNetwork:               pulumi.String(_default.Id),\n\t\t\tCidr:                  pulumi.String(\"10.5.0.0/24\"),\n\t\t\tBackupSubnetCidr:      pulumi.String(\"10.6.0.0/24\"),\n\t\t\tProperties: \u0026oracledatabase.CloudVmClusterPropertiesArgs{\n\t\t\t\tLicenseType: pulumi.String(\"LICENSE_INCLUDED\"),\n\t\t\t\tSshPublicKeys: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"ssh-rsa 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 nobody@google.com\"),\n\t\t\t\t},\n\t\t\t\tCpuCoreCount:   pulumi.Int(4),\n\t\t\t\tGiVersion:      pulumi.String(\"19.0.0.0\"),\n\t\t\t\tHostnamePrefix: pulumi.String(\"hostname1\"),\n\t\t\t},\n\t\t\tDeletionProtection: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.oracledatabase.CloudExadataInfrastructure;\nimport com.pulumi.gcp.oracledatabase.CloudExadataInfrastructureArgs;\nimport com.pulumi.gcp.oracledatabase.inputs.CloudExadataInfrastructurePropertiesArgs;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.oracledatabase.CloudVmCluster;\nimport com.pulumi.gcp.oracledatabase.CloudVmClusterArgs;\nimport com.pulumi.gcp.oracledatabase.inputs.CloudVmClusterPropertiesArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var cloudExadataInfrastructures = new CloudExadataInfrastructure(\"cloudExadataInfrastructures\", CloudExadataInfrastructureArgs.builder()\n            .cloudExadataInfrastructureId(\"my-exadata\")\n            .displayName(\"my-exadata displayname\")\n            .location(\"us-east4\")\n            .project(\"my-project\")\n            .properties(CloudExadataInfrastructurePropertiesArgs.builder()\n                .shape(\"Exadata.X9M\")\n                .computeCount(\"2\")\n                .storageCount(\"3\")\n                .build())\n            .deletionProtection(\"true\")\n            .build());\n\n        final var default = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"new\")\n            .project(\"my-project\")\n            .build());\n\n        var myVmcluster = new CloudVmCluster(\"myVmcluster\", CloudVmClusterArgs.builder()\n            .cloudVmClusterId(\"my-instance\")\n            .displayName(\"my-instance displayname\")\n            .location(\"us-east4\")\n            .project(\"my-project\")\n            .exadataInfrastructure(cloudExadataInfrastructures.id())\n            .network(default_.id())\n            .cidr(\"10.5.0.0/24\")\n            .backupSubnetCidr(\"10.6.0.0/24\")\n            .properties(CloudVmClusterPropertiesArgs.builder()\n                .licenseType(\"LICENSE_INCLUDED\")\n                .sshPublicKeys(\"ssh-rsa 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 nobody@google.com\")\n                .cpuCoreCount(\"4\")\n                .giVersion(\"19.0.0.0\")\n                .hostnamePrefix(\"hostname1\")\n                .build())\n            .deletionProtection(\"true\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  myVmcluster:\n    type: gcp:oracledatabase:CloudVmCluster\n    name: my_vmcluster\n    properties:\n      cloudVmClusterId: my-instance\n      displayName: my-instance displayname\n      location: us-east4\n      project: my-project\n      exadataInfrastructure: ${cloudExadataInfrastructures.id}\n      network: ${default.id}\n      cidr: 10.5.0.0/24\n      backupSubnetCidr: 10.6.0.0/24\n      properties:\n        licenseType: LICENSE_INCLUDED\n        sshPublicKeys:\n          - ssh-rsa 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 nobody@google.com\n        cpuCoreCount: '4'\n        giVersion: 19.0.0.0\n        hostnamePrefix: hostname1\n      deletionProtection: 'true'\n  cloudExadataInfrastructures:\n    type: gcp:oracledatabase:CloudExadataInfrastructure\n    properties:\n      cloudExadataInfrastructureId: my-exadata\n      displayName: my-exadata displayname\n      location: us-east4\n      project: my-project\n      properties:\n        shape: Exadata.X9M\n        computeCount: '2'\n        storageCount: '3'\n      deletionProtection: 'true'\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: new\n        project: my-project\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Oracledatabase Cloud Vmcluster Full\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst cloudExadataInfrastructures = new gcp.oracledatabase.CloudExadataInfrastructure(\"cloudExadataInfrastructures\", {\n    cloudExadataInfrastructureId: \"my-exadata\",\n    displayName: \"my-exadata displayname\",\n    location: \"us-east4\",\n    project: \"my-project\",\n    properties: {\n        shape: \"Exadata.X9M\",\n        computeCount: 2,\n        storageCount: 3,\n    },\n    deletionProtection: true,\n});\nconst default = gcp.compute.getNetwork({\n    name: \"new\",\n    project: \"my-project\",\n});\nconst mydbserver = gcp.oracledatabase.getDbServersOutput({\n    location: \"us-east4\",\n    project: \"my-project\",\n    cloudExadataInfrastructure: cloudExadataInfrastructures.cloudExadataInfrastructureId,\n});\nconst myVmcluster = new gcp.oracledatabase.CloudVmCluster(\"my_vmcluster\", {\n    cloudVmClusterId: \"my-instance\",\n    displayName: \"my-instance displayname\",\n    location: \"us-east4\",\n    project: \"my-project\",\n    exadataInfrastructure: cloudExadataInfrastructures.id,\n    network: _default.then(_default =\u003e _default.id),\n    cidr: \"10.5.0.0/24\",\n    backupSubnetCidr: \"10.6.0.0/24\",\n    labels: {\n        \"label-one\": \"value-one\",\n    },\n    properties: {\n        licenseType: \"LICENSE_INCLUDED\",\n        sshPublicKeys: [\"ssh-rsa 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 nobody@google.com\"],\n        cpuCoreCount: 4,\n        giVersion: \"19.0.0.0\",\n        timeZone: {\n            id: \"UTC\",\n        },\n        nodeCount: 2,\n        ocpuCount: 4,\n        dataStorageSizeTb: 2,\n        dbNodeStorageSizeGb: 120,\n        dbServerOcids: [\n            mydbserver.apply(mydbserver =\u003e mydbserver.dbServers?.[0]?.properties?.[0]?.ocid),\n            mydbserver.apply(mydbserver =\u003e mydbserver.dbServers?.[1]?.properties?.[0]?.ocid),\n        ],\n        diskRedundancy: \"HIGH\",\n        sparseDiskgroupEnabled: false,\n        localBackupEnabled: false,\n        clusterName: \"pq-ppat4\",\n        hostnamePrefix: \"hostname1\",\n        diagnosticsDataCollectionOptions: {\n            diagnosticsEventsEnabled: true,\n            healthMonitoringEnabled: true,\n            incidentLogsEnabled: true,\n        },\n        memorySizeGb: 60,\n    },\n    deletionProtection: true,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ncloud_exadata_infrastructures = gcp.oracledatabase.CloudExadataInfrastructure(\"cloudExadataInfrastructures\",\n    cloud_exadata_infrastructure_id=\"my-exadata\",\n    display_name=\"my-exadata displayname\",\n    location=\"us-east4\",\n    project=\"my-project\",\n    properties={\n        \"shape\": \"Exadata.X9M\",\n        \"compute_count\": 2,\n        \"storage_count\": 3,\n    },\n    deletion_protection=True)\ndefault = gcp.compute.get_network(name=\"new\",\n    project=\"my-project\")\nmydbserver = gcp.oracledatabase.get_db_servers_output(location=\"us-east4\",\n    project=\"my-project\",\n    cloud_exadata_infrastructure=cloud_exadata_infrastructures.cloud_exadata_infrastructure_id)\nmy_vmcluster = gcp.oracledatabase.CloudVmCluster(\"my_vmcluster\",\n    cloud_vm_cluster_id=\"my-instance\",\n    display_name=\"my-instance displayname\",\n    location=\"us-east4\",\n    project=\"my-project\",\n    exadata_infrastructure=cloud_exadata_infrastructures.id,\n    network=default.id,\n    cidr=\"10.5.0.0/24\",\n    backup_subnet_cidr=\"10.6.0.0/24\",\n    labels={\n        \"label-one\": \"value-one\",\n    },\n    properties={\n        \"license_type\": \"LICENSE_INCLUDED\",\n        \"ssh_public_keys\": [\"ssh-rsa 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 nobody@google.com\"],\n        \"cpu_core_count\": 4,\n        \"gi_version\": \"19.0.0.0\",\n        \"time_zone\": {\n            \"id\": \"UTC\",\n        },\n        \"node_count\": 2,\n        \"ocpu_count\": 4,\n        \"data_storage_size_tb\": 2,\n        \"db_node_storage_size_gb\": 120,\n        \"db_server_ocids\": [\n            mydbserver.db_servers[0].properties[0].ocid,\n            mydbserver.db_servers[1].properties[0].ocid,\n        ],\n        \"disk_redundancy\": \"HIGH\",\n        \"sparse_diskgroup_enabled\": False,\n        \"local_backup_enabled\": False,\n        \"cluster_name\": \"pq-ppat4\",\n        \"hostname_prefix\": \"hostname1\",\n        \"diagnostics_data_collection_options\": {\n            \"diagnostics_events_enabled\": True,\n            \"health_monitoring_enabled\": True,\n            \"incident_logs_enabled\": True,\n        },\n        \"memory_size_gb\": 60,\n    },\n    deletion_protection=True)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var cloudExadataInfrastructures = new Gcp.OracleDatabase.CloudExadataInfrastructure(\"cloudExadataInfrastructures\", new()\n    {\n        CloudExadataInfrastructureId = \"my-exadata\",\n        DisplayName = \"my-exadata displayname\",\n        Location = \"us-east4\",\n        Project = \"my-project\",\n        Properties = new Gcp.OracleDatabase.Inputs.CloudExadataInfrastructurePropertiesArgs\n        {\n            Shape = \"Exadata.X9M\",\n            ComputeCount = 2,\n            StorageCount = 3,\n        },\n        DeletionProtection = true,\n    });\n\n    var @default = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"new\",\n        Project = \"my-project\",\n    });\n\n    var mydbserver = Gcp.OracleDatabase.GetDbServers.Invoke(new()\n    {\n        Location = \"us-east4\",\n        Project = \"my-project\",\n        CloudExadataInfrastructure = cloudExadataInfrastructures.CloudExadataInfrastructureId,\n    });\n\n    var myVmcluster = new Gcp.OracleDatabase.CloudVmCluster(\"my_vmcluster\", new()\n    {\n        CloudVmClusterId = \"my-instance\",\n        DisplayName = \"my-instance displayname\",\n        Location = \"us-east4\",\n        Project = \"my-project\",\n        ExadataInfrastructure = cloudExadataInfrastructures.Id,\n        Network = @default.Apply(@default =\u003e @default.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n        Cidr = \"10.5.0.0/24\",\n        BackupSubnetCidr = \"10.6.0.0/24\",\n        Labels = \n        {\n            { \"label-one\", \"value-one\" },\n        },\n        Properties = new Gcp.OracleDatabase.Inputs.CloudVmClusterPropertiesArgs\n        {\n            LicenseType = \"LICENSE_INCLUDED\",\n            SshPublicKeys = new[]\n            {\n                \"ssh-rsa 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 nobody@google.com\",\n            },\n            CpuCoreCount = 4,\n            GiVersion = \"19.0.0.0\",\n            TimeZone = new Gcp.OracleDatabase.Inputs.CloudVmClusterPropertiesTimeZoneArgs\n            {\n                Id = \"UTC\",\n            },\n            NodeCount = 2,\n            OcpuCount = 4,\n            DataStorageSizeTb = 2,\n            DbNodeStorageSizeGb = 120,\n            DbServerOcids = new[]\n            {\n                mydbserver.Apply(getDbServersResult =\u003e getDbServersResult.DbServers[0]?.Properties[0]?.Ocid),\n                mydbserver.Apply(getDbServersResult =\u003e getDbServersResult.DbServers[1]?.Properties[0]?.Ocid),\n            },\n            DiskRedundancy = \"HIGH\",\n            SparseDiskgroupEnabled = false,\n            LocalBackupEnabled = false,\n            ClusterName = \"pq-ppat4\",\n            HostnamePrefix = \"hostname1\",\n            DiagnosticsDataCollectionOptions = new Gcp.OracleDatabase.Inputs.CloudVmClusterPropertiesDiagnosticsDataCollectionOptionsArgs\n            {\n                DiagnosticsEventsEnabled = true,\n                HealthMonitoringEnabled = true,\n                IncidentLogsEnabled = true,\n            },\n            MemorySizeGb = 60,\n        },\n        DeletionProtection = true,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/oracledatabase\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcloudExadataInfrastructures, err := oracledatabase.NewCloudExadataInfrastructure(ctx, \"cloudExadataInfrastructures\", \u0026oracledatabase.CloudExadataInfrastructureArgs{\n\t\t\tCloudExadataInfrastructureId: pulumi.String(\"my-exadata\"),\n\t\t\tDisplayName:                  pulumi.String(\"my-exadata displayname\"),\n\t\t\tLocation:                     pulumi.String(\"us-east4\"),\n\t\t\tProject:                      pulumi.String(\"my-project\"),\n\t\t\tProperties: \u0026oracledatabase.CloudExadataInfrastructurePropertiesArgs{\n\t\t\t\tShape:        pulumi.String(\"Exadata.X9M\"),\n\t\t\t\tComputeCount: pulumi.Int(2),\n\t\t\t\tStorageCount: pulumi.Int(3),\n\t\t\t},\n\t\t\tDeletionProtection: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_default, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName:    \"new\",\n\t\t\tProject: pulumi.StringRef(\"my-project\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tmydbserver := oracledatabase.GetDbServersOutput(ctx, oracledatabase.GetDbServersOutputArgs{\n\t\t\tLocation:                   pulumi.String(\"us-east4\"),\n\t\t\tProject:                    pulumi.String(\"my-project\"),\n\t\t\tCloudExadataInfrastructure: cloudExadataInfrastructures.CloudExadataInfrastructureId,\n\t\t}, nil)\n\t\t_, err = oracledatabase.NewCloudVmCluster(ctx, \"my_vmcluster\", \u0026oracledatabase.CloudVmClusterArgs{\n\t\t\tCloudVmClusterId:      pulumi.String(\"my-instance\"),\n\t\t\tDisplayName:           pulumi.String(\"my-instance displayname\"),\n\t\t\tLocation:              pulumi.String(\"us-east4\"),\n\t\t\tProject:               pulumi.String(\"my-project\"),\n\t\t\tExadataInfrastructure: cloudExadataInfrastructures.ID(),\n\t\t\tNetwork:               pulumi.String(_default.Id),\n\t\t\tCidr:                  pulumi.String(\"10.5.0.0/24\"),\n\t\t\tBackupSubnetCidr:      pulumi.String(\"10.6.0.0/24\"),\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"label-one\": pulumi.String(\"value-one\"),\n\t\t\t},\n\t\t\tProperties: \u0026oracledatabase.CloudVmClusterPropertiesArgs{\n\t\t\t\tLicenseType: pulumi.String(\"LICENSE_INCLUDED\"),\n\t\t\t\tSshPublicKeys: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"ssh-rsa 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 nobody@google.com\"),\n\t\t\t\t},\n\t\t\t\tCpuCoreCount: pulumi.Int(4),\n\t\t\t\tGiVersion:    pulumi.String(\"19.0.0.0\"),\n\t\t\t\tTimeZone: \u0026oracledatabase.CloudVmClusterPropertiesTimeZoneArgs{\n\t\t\t\t\tId: pulumi.String(\"UTC\"),\n\t\t\t\t},\n\t\t\t\tNodeCount:           pulumi.Int(2),\n\t\t\t\tOcpuCount:           pulumi.Float64(4),\n\t\t\t\tDataStorageSizeTb:   pulumi.Float64(2),\n\t\t\t\tDbNodeStorageSizeGb: pulumi.Int(120),\n\t\t\t\tDbServerOcids: pulumi.StringArray{\n\t\t\t\t\tmydbserver.ApplyT(func(mydbserver oracledatabase.GetDbServersResult) (*string, error) {\n\t\t\t\t\t\treturn \u0026mydbserver.DbServers[0].Properties[0].Ocid, nil\n\t\t\t\t\t}).(pulumi.StringPtrOutput),\n\t\t\t\t\tmydbserver.ApplyT(func(mydbserver oracledatabase.GetDbServersResult) (*string, error) {\n\t\t\t\t\t\treturn \u0026mydbserver.DbServers[1].Properties[0].Ocid, nil\n\t\t\t\t\t}).(pulumi.StringPtrOutput),\n\t\t\t\t},\n\t\t\t\tDiskRedundancy:         pulumi.String(\"HIGH\"),\n\t\t\t\tSparseDiskgroupEnabled: pulumi.Bool(false),\n\t\t\t\tLocalBackupEnabled:     pulumi.Bool(false),\n\t\t\t\tClusterName:            pulumi.String(\"pq-ppat4\"),\n\t\t\t\tHostnamePrefix:         pulumi.String(\"hostname1\"),\n\t\t\t\tDiagnosticsDataCollectionOptions: \u0026oracledatabase.CloudVmClusterPropertiesDiagnosticsDataCollectionOptionsArgs{\n\t\t\t\t\tDiagnosticsEventsEnabled: pulumi.Bool(true),\n\t\t\t\t\tHealthMonitoringEnabled:  pulumi.Bool(true),\n\t\t\t\t\tIncidentLogsEnabled:      pulumi.Bool(true),\n\t\t\t\t},\n\t\t\t\tMemorySizeGb: pulumi.Int(60),\n\t\t\t},\n\t\t\tDeletionProtection: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.oracledatabase.CloudExadataInfrastructure;\nimport com.pulumi.gcp.oracledatabase.CloudExadataInfrastructureArgs;\nimport com.pulumi.gcp.oracledatabase.inputs.CloudExadataInfrastructurePropertiesArgs;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.oracledatabase.OracledatabaseFunctions;\nimport com.pulumi.gcp.oracledatabase.inputs.GetDbServersArgs;\nimport com.pulumi.gcp.oracledatabase.CloudVmCluster;\nimport com.pulumi.gcp.oracledatabase.CloudVmClusterArgs;\nimport com.pulumi.gcp.oracledatabase.inputs.CloudVmClusterPropertiesArgs;\nimport com.pulumi.gcp.oracledatabase.inputs.CloudVmClusterPropertiesTimeZoneArgs;\nimport com.pulumi.gcp.oracledatabase.inputs.CloudVmClusterPropertiesDiagnosticsDataCollectionOptionsArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var cloudExadataInfrastructures = new CloudExadataInfrastructure(\"cloudExadataInfrastructures\", CloudExadataInfrastructureArgs.builder()\n            .cloudExadataInfrastructureId(\"my-exadata\")\n            .displayName(\"my-exadata displayname\")\n            .location(\"us-east4\")\n            .project(\"my-project\")\n            .properties(CloudExadataInfrastructurePropertiesArgs.builder()\n                .shape(\"Exadata.X9M\")\n                .computeCount(\"2\")\n                .storageCount(\"3\")\n                .build())\n            .deletionProtection(\"true\")\n            .build());\n\n        final var default = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"new\")\n            .project(\"my-project\")\n            .build());\n\n        final var mydbserver = OracledatabaseFunctions.getDbServers(GetDbServersArgs.builder()\n            .location(\"us-east4\")\n            .project(\"my-project\")\n            .cloudExadataInfrastructure(cloudExadataInfrastructures.cloudExadataInfrastructureId())\n            .build());\n\n        var myVmcluster = new CloudVmCluster(\"myVmcluster\", CloudVmClusterArgs.builder()\n            .cloudVmClusterId(\"my-instance\")\n            .displayName(\"my-instance displayname\")\n            .location(\"us-east4\")\n            .project(\"my-project\")\n            .exadataInfrastructure(cloudExadataInfrastructures.id())\n            .network(default_.id())\n            .cidr(\"10.5.0.0/24\")\n            .backupSubnetCidr(\"10.6.0.0/24\")\n            .labels(Map.of(\"label-one\", \"value-one\"))\n            .properties(CloudVmClusterPropertiesArgs.builder()\n                .licenseType(\"LICENSE_INCLUDED\")\n                .sshPublicKeys(\"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCz1X2744t+6vRLmE5u6nHi6/QWh8bQDgHmd+OIxRQIGA/IWUtCs2FnaCNZcqvZkaeyjk5v0lTA/n+9jvO42Ipib53athrfVG8gRt8fzPL66C6ZqHq+6zZophhrCdfJh/0G4x9xJh5gdMprlaCR1P8yAaVvhBQSKGc4SiIkyMNBcHJ5YTtMQMTfxaB4G1sHZ6SDAY9a6Cq/zNjDwfPapWLsiP4mRhE5SSjJX6l6EYbkm0JeLQg+AbJiNEPvrvDp1wtTxzlPJtIivthmLMThFxK7+DkrYFuLvN5AHUdo9KTDLvHtDCvV70r8v0gafsrKkM/OE9Jtzoo0e1N/5K/ZdyFRbAkFT4QSF3nwpbmBWLf2Evg//YyEuxnz4CwPqFST2mucnrCCGCVWp1vnHZ0y30nM35njLOmWdRDFy5l27pKUTwLp02y3UYiiZyP7d3/u5pKiN4vC27VuvzprSdJxWoAvluOiDeRh+/oeQDowxoT/Oop8DzB9uJmjktXw8jyMW2+Rpg+ENQqeNgF1OGlEzypaWiRskEFlkpLb4v/s3ZDYkL1oW0Nv/J8LTjTOTEaYt2Udjoe9x2xWiGnQixhdChWuG+MaoWffzUgx1tsVj/DBXijR5DjkPkrA1GA98zd3q8GKEaAdcDenJjHhNYSd4+rE9pIsnYn7fo5X/tFfcQH1XQ== nobody@google.com\")\n                .cpuCoreCount(\"4\")\n                .giVersion(\"19.0.0.0\")\n                .timeZone(CloudVmClusterPropertiesTimeZoneArgs.builder()\n                    .id(\"UTC\")\n                    .build())\n                .nodeCount(\"2\")\n                .ocpuCount(\"4.0\")\n                .dataStorageSizeTb(2)\n                .dbNodeStorageSizeGb(120)\n                .dbServerOcids(                \n                    mydbserver.applyValue(getDbServersResult -\u003e getDbServersResult).applyValue(mydbserver -\u003e mydbserver.applyValue(getDbServersResult -\u003e getDbServersResult.dbServers()[0].properties()[0].ocid())),\n                    mydbserver.applyValue(getDbServersResult -\u003e getDbServersResult).applyValue(mydbserver -\u003e mydbserver.applyValue(getDbServersResult -\u003e getDbServersResult.dbServers()[1].properties()[0].ocid())))\n                .diskRedundancy(\"HIGH\")\n                .sparseDiskgroupEnabled(false)\n                .localBackupEnabled(false)\n                .clusterName(\"pq-ppat4\")\n                .hostnamePrefix(\"hostname1\")\n                .diagnosticsDataCollectionOptions(CloudVmClusterPropertiesDiagnosticsDataCollectionOptionsArgs.builder()\n                    .diagnosticsEventsEnabled(true)\n                    .healthMonitoringEnabled(true)\n                    .incidentLogsEnabled(true)\n                    .build())\n                .memorySizeGb(60)\n                .build())\n            .deletionProtection(\"true\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  myVmcluster:\n    type: gcp:oracledatabase:CloudVmCluster\n    name: my_vmcluster\n    properties:\n      cloudVmClusterId: my-instance\n      displayName: my-instance displayname\n      location: us-east4\n      project: my-project\n      exadataInfrastructure: ${cloudExadataInfrastructures.id}\n      network: ${default.id}\n      cidr: 10.5.0.0/24\n      backupSubnetCidr: 10.6.0.0/24\n      labels:\n        label-one: value-one\n      properties:\n        licenseType: LICENSE_INCLUDED\n        sshPublicKeys:\n          - ssh-rsa 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 nobody@google.com\n        cpuCoreCount: '4'\n        giVersion: 19.0.0.0\n        timeZone:\n          id: UTC\n        nodeCount: '2'\n        ocpuCount: '4.0'\n        dataStorageSizeTb: 2\n        dbNodeStorageSizeGb: 120\n        dbServerOcids:\n          - ${mydbserver.dbServers[0].properties[0].ocid}\n          - ${mydbserver.dbServers[1].properties[0].ocid}\n        diskRedundancy: HIGH\n        sparseDiskgroupEnabled: false\n        localBackupEnabled: false\n        clusterName: pq-ppat4\n        hostnamePrefix: hostname1\n        diagnosticsDataCollectionOptions:\n          diagnosticsEventsEnabled: true\n          healthMonitoringEnabled: true\n          incidentLogsEnabled: true\n        memorySizeGb: 60\n      deletionProtection: 'true'\n  cloudExadataInfrastructures:\n    type: gcp:oracledatabase:CloudExadataInfrastructure\n    properties:\n      cloudExadataInfrastructureId: my-exadata\n      displayName: my-exadata displayname\n      location: us-east4\n      project: my-project\n      properties:\n        shape: Exadata.X9M\n        computeCount: '2'\n        storageCount: '3'\n      deletionProtection: 'true'\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: new\n        project: my-project\n  mydbserver:\n    fn::invoke:\n      function: gcp:oracledatabase:getDbServers\n      arguments:\n        location: us-east4\n        project: my-project\n        cloudExadataInfrastructure: ${cloudExadataInfrastructures.cloudExadataInfrastructureId}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nCloudVmCluster can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{location}}/cloudVmClusters/{{cloud_vm_cluster_id}}`\n\n* `{{project}}/{{location}}/{{cloud_vm_cluster_id}}`\n\n* `{{location}}/{{cloud_vm_cluster_id}}`\n\nWhen using the `pulumi import` command, CloudVmCluster can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:oracledatabase/cloudVmCluster:CloudVmCluster default projects/{{project}}/locations/{{location}}/cloudVmClusters/{{cloud_vm_cluster_id}}\n```\n\n```sh\n$ pulumi import gcp:oracledatabase/cloudVmCluster:CloudVmCluster default {{project}}/{{location}}/{{cloud_vm_cluster_id}}\n```\n\n```sh\n$ pulumi import gcp:oracledatabase/cloudVmCluster:CloudVmCluster default {{location}}/{{cloud_vm_cluster_id}}\n```\n\n",
+            "description": "A CloudVmCluster resource.\n\n\nTo get more information about CloudVmCluster, see:\n\n* [API documentation](https://cloud.google.com/oracle/database/docs/reference/rest/v1/projects.locations.cloudVmClusters)\n* How-to Guides\n    * [Create VM clusters](https://cloud.google.com/oracle/database/docs/create-clusters)\n\n## Example Usage\n\n### Oracledatabase Cloud Vmcluster Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst cloudExadataInfrastructures = new gcp.oracledatabase.CloudExadataInfrastructure(\"cloudExadataInfrastructures\", {\n    cloudExadataInfrastructureId: \"my-exadata\",\n    displayName: \"my-exadata displayname\",\n    location: \"us-east4\",\n    project: \"my-project\",\n    properties: {\n        shape: \"Exadata.X9M\",\n        computeCount: 2,\n        storageCount: 3,\n    },\n    deletionProtection: true,\n});\nconst _default = gcp.compute.getNetwork({\n    name: \"new\",\n    project: \"my-project\",\n});\nconst myVmcluster = new gcp.oracledatabase.CloudVmCluster(\"my_vmcluster\", {\n    cloudVmClusterId: \"my-instance\",\n    displayName: \"my-instance displayname\",\n    location: \"us-east4\",\n    project: \"my-project\",\n    exadataInfrastructure: cloudExadataInfrastructures.id,\n    network: _default.then(_default =\u003e _default.id),\n    cidr: \"10.5.0.0/24\",\n    backupSubnetCidr: \"10.6.0.0/24\",\n    properties: {\n        licenseType: \"LICENSE_INCLUDED\",\n        sshPublicKeys: [\"ssh-rsa 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 nobody@google.com\"],\n        cpuCoreCount: 4,\n        giVersion: \"19.0.0.0\",\n        hostnamePrefix: \"hostname1\",\n    },\n    deletionProtection: true,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ncloud_exadata_infrastructures = gcp.oracledatabase.CloudExadataInfrastructure(\"cloudExadataInfrastructures\",\n    cloud_exadata_infrastructure_id=\"my-exadata\",\n    display_name=\"my-exadata displayname\",\n    location=\"us-east4\",\n    project=\"my-project\",\n    properties={\n        \"shape\": \"Exadata.X9M\",\n        \"compute_count\": 2,\n        \"storage_count\": 3,\n    },\n    deletion_protection=True)\ndefault = gcp.compute.get_network(name=\"new\",\n    project=\"my-project\")\nmy_vmcluster = gcp.oracledatabase.CloudVmCluster(\"my_vmcluster\",\n    cloud_vm_cluster_id=\"my-instance\",\n    display_name=\"my-instance displayname\",\n    location=\"us-east4\",\n    project=\"my-project\",\n    exadata_infrastructure=cloud_exadata_infrastructures.id,\n    network=default.id,\n    cidr=\"10.5.0.0/24\",\n    backup_subnet_cidr=\"10.6.0.0/24\",\n    properties={\n        \"license_type\": \"LICENSE_INCLUDED\",\n        \"ssh_public_keys\": [\"ssh-rsa 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 nobody@google.com\"],\n        \"cpu_core_count\": 4,\n        \"gi_version\": \"19.0.0.0\",\n        \"hostname_prefix\": \"hostname1\",\n    },\n    deletion_protection=True)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var cloudExadataInfrastructures = new Gcp.OracleDatabase.CloudExadataInfrastructure(\"cloudExadataInfrastructures\", new()\n    {\n        CloudExadataInfrastructureId = \"my-exadata\",\n        DisplayName = \"my-exadata displayname\",\n        Location = \"us-east4\",\n        Project = \"my-project\",\n        Properties = new Gcp.OracleDatabase.Inputs.CloudExadataInfrastructurePropertiesArgs\n        {\n            Shape = \"Exadata.X9M\",\n            ComputeCount = 2,\n            StorageCount = 3,\n        },\n        DeletionProtection = true,\n    });\n\n    var @default = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"new\",\n        Project = \"my-project\",\n    });\n\n    var myVmcluster = new Gcp.OracleDatabase.CloudVmCluster(\"my_vmcluster\", new()\n    {\n        CloudVmClusterId = \"my-instance\",\n        DisplayName = \"my-instance displayname\",\n        Location = \"us-east4\",\n        Project = \"my-project\",\n        ExadataInfrastructure = cloudExadataInfrastructures.Id,\n        Network = @default.Apply(@default =\u003e @default.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n        Cidr = \"10.5.0.0/24\",\n        BackupSubnetCidr = \"10.6.0.0/24\",\n        Properties = new Gcp.OracleDatabase.Inputs.CloudVmClusterPropertiesArgs\n        {\n            LicenseType = \"LICENSE_INCLUDED\",\n            SshPublicKeys = new[]\n            {\n                \"ssh-rsa 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 nobody@google.com\",\n            },\n            CpuCoreCount = 4,\n            GiVersion = \"19.0.0.0\",\n            HostnamePrefix = \"hostname1\",\n        },\n        DeletionProtection = true,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/oracledatabase\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcloudExadataInfrastructures, err := oracledatabase.NewCloudExadataInfrastructure(ctx, \"cloudExadataInfrastructures\", \u0026oracledatabase.CloudExadataInfrastructureArgs{\n\t\t\tCloudExadataInfrastructureId: pulumi.String(\"my-exadata\"),\n\t\t\tDisplayName:                  pulumi.String(\"my-exadata displayname\"),\n\t\t\tLocation:                     pulumi.String(\"us-east4\"),\n\t\t\tProject:                      pulumi.String(\"my-project\"),\n\t\t\tProperties: \u0026oracledatabase.CloudExadataInfrastructurePropertiesArgs{\n\t\t\t\tShape:        pulumi.String(\"Exadata.X9M\"),\n\t\t\t\tComputeCount: pulumi.Int(2),\n\t\t\t\tStorageCount: pulumi.Int(3),\n\t\t\t},\n\t\t\tDeletionProtection: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_default, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName:    \"new\",\n\t\t\tProject: pulumi.StringRef(\"my-project\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = oracledatabase.NewCloudVmCluster(ctx, \"my_vmcluster\", \u0026oracledatabase.CloudVmClusterArgs{\n\t\t\tCloudVmClusterId:      pulumi.String(\"my-instance\"),\n\t\t\tDisplayName:           pulumi.String(\"my-instance displayname\"),\n\t\t\tLocation:              pulumi.String(\"us-east4\"),\n\t\t\tProject:               pulumi.String(\"my-project\"),\n\t\t\tExadataInfrastructure: cloudExadataInfrastructures.ID(),\n\t\t\tNetwork:               pulumi.String(_default.Id),\n\t\t\tCidr:                  pulumi.String(\"10.5.0.0/24\"),\n\t\t\tBackupSubnetCidr:      pulumi.String(\"10.6.0.0/24\"),\n\t\t\tProperties: \u0026oracledatabase.CloudVmClusterPropertiesArgs{\n\t\t\t\tLicenseType: pulumi.String(\"LICENSE_INCLUDED\"),\n\t\t\t\tSshPublicKeys: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"ssh-rsa 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 nobody@google.com\"),\n\t\t\t\t},\n\t\t\t\tCpuCoreCount:   pulumi.Int(4),\n\t\t\t\tGiVersion:      pulumi.String(\"19.0.0.0\"),\n\t\t\t\tHostnamePrefix: pulumi.String(\"hostname1\"),\n\t\t\t},\n\t\t\tDeletionProtection: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.oracledatabase.CloudExadataInfrastructure;\nimport com.pulumi.gcp.oracledatabase.CloudExadataInfrastructureArgs;\nimport com.pulumi.gcp.oracledatabase.inputs.CloudExadataInfrastructurePropertiesArgs;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.oracledatabase.CloudVmCluster;\nimport com.pulumi.gcp.oracledatabase.CloudVmClusterArgs;\nimport com.pulumi.gcp.oracledatabase.inputs.CloudVmClusterPropertiesArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var cloudExadataInfrastructures = new CloudExadataInfrastructure(\"cloudExadataInfrastructures\", CloudExadataInfrastructureArgs.builder()\n            .cloudExadataInfrastructureId(\"my-exadata\")\n            .displayName(\"my-exadata displayname\")\n            .location(\"us-east4\")\n            .project(\"my-project\")\n            .properties(CloudExadataInfrastructurePropertiesArgs.builder()\n                .shape(\"Exadata.X9M\")\n                .computeCount(\"2\")\n                .storageCount(\"3\")\n                .build())\n            .deletionProtection(\"true\")\n            .build());\n\n        final var default = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"new\")\n            .project(\"my-project\")\n            .build());\n\n        var myVmcluster = new CloudVmCluster(\"myVmcluster\", CloudVmClusterArgs.builder()\n            .cloudVmClusterId(\"my-instance\")\n            .displayName(\"my-instance displayname\")\n            .location(\"us-east4\")\n            .project(\"my-project\")\n            .exadataInfrastructure(cloudExadataInfrastructures.id())\n            .network(default_.id())\n            .cidr(\"10.5.0.0/24\")\n            .backupSubnetCidr(\"10.6.0.0/24\")\n            .properties(CloudVmClusterPropertiesArgs.builder()\n                .licenseType(\"LICENSE_INCLUDED\")\n                .sshPublicKeys(\"ssh-rsa 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 nobody@google.com\")\n                .cpuCoreCount(\"4\")\n                .giVersion(\"19.0.0.0\")\n                .hostnamePrefix(\"hostname1\")\n                .build())\n            .deletionProtection(\"true\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  myVmcluster:\n    type: gcp:oracledatabase:CloudVmCluster\n    name: my_vmcluster\n    properties:\n      cloudVmClusterId: my-instance\n      displayName: my-instance displayname\n      location: us-east4\n      project: my-project\n      exadataInfrastructure: ${cloudExadataInfrastructures.id}\n      network: ${default.id}\n      cidr: 10.5.0.0/24\n      backupSubnetCidr: 10.6.0.0/24\n      properties:\n        licenseType: LICENSE_INCLUDED\n        sshPublicKeys:\n          - ssh-rsa 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 nobody@google.com\n        cpuCoreCount: '4'\n        giVersion: 19.0.0.0\n        hostnamePrefix: hostname1\n      deletionProtection: 'true'\n  cloudExadataInfrastructures:\n    type: gcp:oracledatabase:CloudExadataInfrastructure\n    properties:\n      cloudExadataInfrastructureId: my-exadata\n      displayName: my-exadata displayname\n      location: us-east4\n      project: my-project\n      properties:\n        shape: Exadata.X9M\n        computeCount: '2'\n        storageCount: '3'\n      deletionProtection: 'true'\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: new\n        project: my-project\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Oracledatabase Cloud Vmcluster Full\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst cloudExadataInfrastructures = new gcp.oracledatabase.CloudExadataInfrastructure(\"cloudExadataInfrastructures\", {\n    cloudExadataInfrastructureId: \"my-exadata\",\n    displayName: \"my-exadata displayname\",\n    location: \"us-east4\",\n    project: \"my-project\",\n    properties: {\n        shape: \"Exadata.X9M\",\n        computeCount: 2,\n        storageCount: 3,\n    },\n    deletionProtection: true,\n});\nconst _default = gcp.compute.getNetwork({\n    name: \"new\",\n    project: \"my-project\",\n});\nconst mydbserver = gcp.oracledatabase.getDbServersOutput({\n    location: \"us-east4\",\n    project: \"my-project\",\n    cloudExadataInfrastructure: cloudExadataInfrastructures.cloudExadataInfrastructureId,\n});\nconst myVmcluster = new gcp.oracledatabase.CloudVmCluster(\"my_vmcluster\", {\n    cloudVmClusterId: \"my-instance\",\n    displayName: \"my-instance displayname\",\n    location: \"us-east4\",\n    project: \"my-project\",\n    exadataInfrastructure: cloudExadataInfrastructures.id,\n    network: _default.then(_default =\u003e _default.id),\n    cidr: \"10.5.0.0/24\",\n    backupSubnetCidr: \"10.6.0.0/24\",\n    labels: {\n        \"label-one\": \"value-one\",\n    },\n    properties: {\n        licenseType: \"LICENSE_INCLUDED\",\n        sshPublicKeys: [\"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCz1X2744t+6vRLmE5u6nHi6/QWh8bQDgHmd+OIxRQIGA/IWUtCs2FnaCNZcqvZkaeyjk5v0lTA/n+9jvO42Ipib53athrfVG8gRt8fzPL66C6ZqHq+6zZophhrCdfJh/0G4x9xJh5gdMprlaCR1P8yAaVvhBQSKGc4SiIkyMNBcHJ5YTtMQMTfxaB4G1sHZ6SDAY9a6Cq/zNjDwfPapWLsiP4mRhE5SSjJX6l6EYbkm0JeLQg+AbJiNEPvrvDp1wtTxzlPJtIivthmLMThFxK7+DkrYFuLvN5AHUdo9KTDLvHtDCvV70r8v0gafsrKkM/OE9Jtzoo0e1N/5K/ZdyFRbAkFT4QSF3nwpbmBWLf2Evg//YyEuxnz4CwPqFST2mucnrCCGCVWp1vnHZ0y30nM35njLOmWdRDFy5l27pKUTwLp02y3UYiiZyP7d3/u5pKiN4vC27VuvzprSdJxWoAvluOiDeRh+/oeQDowxoT/Oop8DzB9uJmjktXw8jyMW2+Rpg+ENQqeNgF1OGlEzypaWiRskEFlkpLb4v/s3ZDYkL1oW0Nv/J8LTjTOTEaYt2Udjoe9x2xWiGnQixhdChWuG+MaoWffzUgx1tsVj/DBXijR5DjkPkrA1GA98zd3q8GKEaAdcDenJjHhNYSd4+rE9pIsnYn7fo5X/tFfcQH1XQ== nobody@google.com\"],\n        cpuCoreCount: 4,\n        giVersion: \"19.0.0.0\",\n        timeZone: {\n            id: \"UTC\",\n        },\n        nodeCount: 2,\n        ocpuCount: 4,\n        dataStorageSizeTb: 2,\n        dbNodeStorageSizeGb: 120,\n        dbServerOcids: [\n            mydbserver.apply(mydbserver =\u003e mydbserver.dbServers?.[0]?.properties?.[0]?.ocid),\n            mydbserver.apply(mydbserver =\u003e mydbserver.dbServers?.[1]?.properties?.[0]?.ocid),\n        ],\n        diskRedundancy: \"HIGH\",\n        sparseDiskgroupEnabled: false,\n        localBackupEnabled: false,\n        clusterName: \"pq-ppat4\",\n        hostnamePrefix: \"hostname1\",\n        diagnosticsDataCollectionOptions: {\n            diagnosticsEventsEnabled: true,\n            healthMonitoringEnabled: true,\n            incidentLogsEnabled: true,\n        },\n        memorySizeGb: 60,\n    },\n    deletionProtection: true,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ncloud_exadata_infrastructures = gcp.oracledatabase.CloudExadataInfrastructure(\"cloudExadataInfrastructures\",\n    cloud_exadata_infrastructure_id=\"my-exadata\",\n    display_name=\"my-exadata displayname\",\n    location=\"us-east4\",\n    project=\"my-project\",\n    properties={\n        \"shape\": \"Exadata.X9M\",\n        \"compute_count\": 2,\n        \"storage_count\": 3,\n    },\n    deletion_protection=True)\ndefault = gcp.compute.get_network(name=\"new\",\n    project=\"my-project\")\nmydbserver = gcp.oracledatabase.get_db_servers_output(location=\"us-east4\",\n    project=\"my-project\",\n    cloud_exadata_infrastructure=cloud_exadata_infrastructures.cloud_exadata_infrastructure_id)\nmy_vmcluster = gcp.oracledatabase.CloudVmCluster(\"my_vmcluster\",\n    cloud_vm_cluster_id=\"my-instance\",\n    display_name=\"my-instance displayname\",\n    location=\"us-east4\",\n    project=\"my-project\",\n    exadata_infrastructure=cloud_exadata_infrastructures.id,\n    network=default.id,\n    cidr=\"10.5.0.0/24\",\n    backup_subnet_cidr=\"10.6.0.0/24\",\n    labels={\n        \"label-one\": \"value-one\",\n    },\n    properties={\n        \"license_type\": \"LICENSE_INCLUDED\",\n        \"ssh_public_keys\": [\"ssh-rsa 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 nobody@google.com\"],\n        \"cpu_core_count\": 4,\n        \"gi_version\": \"19.0.0.0\",\n        \"time_zone\": {\n            \"id\": \"UTC\",\n        },\n        \"node_count\": 2,\n        \"ocpu_count\": 4,\n        \"data_storage_size_tb\": 2,\n        \"db_node_storage_size_gb\": 120,\n        \"db_server_ocids\": [\n            mydbserver.db_servers[0].properties[0].ocid,\n            mydbserver.db_servers[1].properties[0].ocid,\n        ],\n        \"disk_redundancy\": \"HIGH\",\n        \"sparse_diskgroup_enabled\": False,\n        \"local_backup_enabled\": False,\n        \"cluster_name\": \"pq-ppat4\",\n        \"hostname_prefix\": \"hostname1\",\n        \"diagnostics_data_collection_options\": {\n            \"diagnostics_events_enabled\": True,\n            \"health_monitoring_enabled\": True,\n            \"incident_logs_enabled\": True,\n        },\n        \"memory_size_gb\": 60,\n    },\n    deletion_protection=True)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var cloudExadataInfrastructures = new Gcp.OracleDatabase.CloudExadataInfrastructure(\"cloudExadataInfrastructures\", new()\n    {\n        CloudExadataInfrastructureId = \"my-exadata\",\n        DisplayName = \"my-exadata displayname\",\n        Location = \"us-east4\",\n        Project = \"my-project\",\n        Properties = new Gcp.OracleDatabase.Inputs.CloudExadataInfrastructurePropertiesArgs\n        {\n            Shape = \"Exadata.X9M\",\n            ComputeCount = 2,\n            StorageCount = 3,\n        },\n        DeletionProtection = true,\n    });\n\n    var @default = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"new\",\n        Project = \"my-project\",\n    });\n\n    var mydbserver = Gcp.OracleDatabase.GetDbServers.Invoke(new()\n    {\n        Location = \"us-east4\",\n        Project = \"my-project\",\n        CloudExadataInfrastructure = cloudExadataInfrastructures.CloudExadataInfrastructureId,\n    });\n\n    var myVmcluster = new Gcp.OracleDatabase.CloudVmCluster(\"my_vmcluster\", new()\n    {\n        CloudVmClusterId = \"my-instance\",\n        DisplayName = \"my-instance displayname\",\n        Location = \"us-east4\",\n        Project = \"my-project\",\n        ExadataInfrastructure = cloudExadataInfrastructures.Id,\n        Network = @default.Apply(@default =\u003e @default.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n        Cidr = \"10.5.0.0/24\",\n        BackupSubnetCidr = \"10.6.0.0/24\",\n        Labels = \n        {\n            { \"label-one\", \"value-one\" },\n        },\n        Properties = new Gcp.OracleDatabase.Inputs.CloudVmClusterPropertiesArgs\n        {\n            LicenseType = \"LICENSE_INCLUDED\",\n            SshPublicKeys = new[]\n            {\n                \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCz1X2744t+6vRLmE5u6nHi6/QWh8bQDgHmd+OIxRQIGA/IWUtCs2FnaCNZcqvZkaeyjk5v0lTA/n+9jvO42Ipib53athrfVG8gRt8fzPL66C6ZqHq+6zZophhrCdfJh/0G4x9xJh5gdMprlaCR1P8yAaVvhBQSKGc4SiIkyMNBcHJ5YTtMQMTfxaB4G1sHZ6SDAY9a6Cq/zNjDwfPapWLsiP4mRhE5SSjJX6l6EYbkm0JeLQg+AbJiNEPvrvDp1wtTxzlPJtIivthmLMThFxK7+DkrYFuLvN5AHUdo9KTDLvHtDCvV70r8v0gafsrKkM/OE9Jtzoo0e1N/5K/ZdyFRbAkFT4QSF3nwpbmBWLf2Evg//YyEuxnz4CwPqFST2mucnrCCGCVWp1vnHZ0y30nM35njLOmWdRDFy5l27pKUTwLp02y3UYiiZyP7d3/u5pKiN4vC27VuvzprSdJxWoAvluOiDeRh+/oeQDowxoT/Oop8DzB9uJmjktXw8jyMW2+Rpg+ENQqeNgF1OGlEzypaWiRskEFlkpLb4v/s3ZDYkL1oW0Nv/J8LTjTOTEaYt2Udjoe9x2xWiGnQixhdChWuG+MaoWffzUgx1tsVj/DBXijR5DjkPkrA1GA98zd3q8GKEaAdcDenJjHhNYSd4+rE9pIsnYn7fo5X/tFfcQH1XQ== nobody@google.com\",\n            },\n            CpuCoreCount = 4,\n            GiVersion = \"19.0.0.0\",\n            TimeZone = new Gcp.OracleDatabase.Inputs.CloudVmClusterPropertiesTimeZoneArgs\n            {\n                Id = \"UTC\",\n            },\n            NodeCount = 2,\n            OcpuCount = 4,\n            DataStorageSizeTb = 2,\n            DbNodeStorageSizeGb = 120,\n            DbServerOcids = new[]\n            {\n                mydbserver.Apply(getDbServersResult =\u003e getDbServersResult.DbServers[0]?.Properties[0]?.Ocid),\n                mydbserver.Apply(getDbServersResult =\u003e getDbServersResult.DbServers[1]?.Properties[0]?.Ocid),\n            },\n            DiskRedundancy = \"HIGH\",\n            SparseDiskgroupEnabled = false,\n            LocalBackupEnabled = false,\n            ClusterName = \"pq-ppat4\",\n            HostnamePrefix = \"hostname1\",\n            DiagnosticsDataCollectionOptions = new Gcp.OracleDatabase.Inputs.CloudVmClusterPropertiesDiagnosticsDataCollectionOptionsArgs\n            {\n                DiagnosticsEventsEnabled = true,\n                HealthMonitoringEnabled = true,\n                IncidentLogsEnabled = true,\n            },\n            MemorySizeGb = 60,\n        },\n        DeletionProtection = true,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/oracledatabase\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcloudExadataInfrastructures, err := oracledatabase.NewCloudExadataInfrastructure(ctx, \"cloudExadataInfrastructures\", \u0026oracledatabase.CloudExadataInfrastructureArgs{\n\t\t\tCloudExadataInfrastructureId: pulumi.String(\"my-exadata\"),\n\t\t\tDisplayName:                  pulumi.String(\"my-exadata displayname\"),\n\t\t\tLocation:                     pulumi.String(\"us-east4\"),\n\t\t\tProject:                      pulumi.String(\"my-project\"),\n\t\t\tProperties: \u0026oracledatabase.CloudExadataInfrastructurePropertiesArgs{\n\t\t\t\tShape:        pulumi.String(\"Exadata.X9M\"),\n\t\t\t\tComputeCount: pulumi.Int(2),\n\t\t\t\tStorageCount: pulumi.Int(3),\n\t\t\t},\n\t\t\tDeletionProtection: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_default, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName:    \"new\",\n\t\t\tProject: pulumi.StringRef(\"my-project\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tmydbserver := oracledatabase.GetDbServersOutput(ctx, oracledatabase.GetDbServersOutputArgs{\n\t\t\tLocation:                   pulumi.String(\"us-east4\"),\n\t\t\tProject:                    pulumi.String(\"my-project\"),\n\t\t\tCloudExadataInfrastructure: cloudExadataInfrastructures.CloudExadataInfrastructureId,\n\t\t}, nil)\n\t\t_, err = oracledatabase.NewCloudVmCluster(ctx, \"my_vmcluster\", \u0026oracledatabase.CloudVmClusterArgs{\n\t\t\tCloudVmClusterId:      pulumi.String(\"my-instance\"),\n\t\t\tDisplayName:           pulumi.String(\"my-instance displayname\"),\n\t\t\tLocation:              pulumi.String(\"us-east4\"),\n\t\t\tProject:               pulumi.String(\"my-project\"),\n\t\t\tExadataInfrastructure: cloudExadataInfrastructures.ID(),\n\t\t\tNetwork:               pulumi.String(_default.Id),\n\t\t\tCidr:                  pulumi.String(\"10.5.0.0/24\"),\n\t\t\tBackupSubnetCidr:      pulumi.String(\"10.6.0.0/24\"),\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"label-one\": pulumi.String(\"value-one\"),\n\t\t\t},\n\t\t\tProperties: \u0026oracledatabase.CloudVmClusterPropertiesArgs{\n\t\t\t\tLicenseType: pulumi.String(\"LICENSE_INCLUDED\"),\n\t\t\t\tSshPublicKeys: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"ssh-rsa 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 nobody@google.com\"),\n\t\t\t\t},\n\t\t\t\tCpuCoreCount: pulumi.Int(4),\n\t\t\t\tGiVersion:    pulumi.String(\"19.0.0.0\"),\n\t\t\t\tTimeZone: \u0026oracledatabase.CloudVmClusterPropertiesTimeZoneArgs{\n\t\t\t\t\tId: pulumi.String(\"UTC\"),\n\t\t\t\t},\n\t\t\t\tNodeCount:           pulumi.Int(2),\n\t\t\t\tOcpuCount:           pulumi.Float64(4),\n\t\t\t\tDataStorageSizeTb:   pulumi.Float64(2),\n\t\t\t\tDbNodeStorageSizeGb: pulumi.Int(120),\n\t\t\t\tDbServerOcids: pulumi.StringArray{\n\t\t\t\t\tmydbserver.ApplyT(func(mydbserver oracledatabase.GetDbServersResult) (*string, error) {\n\t\t\t\t\t\treturn \u0026mydbserver.DbServers[0].Properties[0].Ocid, nil\n\t\t\t\t\t}).(pulumi.StringPtrOutput),\n\t\t\t\t\tmydbserver.ApplyT(func(mydbserver oracledatabase.GetDbServersResult) (*string, error) {\n\t\t\t\t\t\treturn \u0026mydbserver.DbServers[1].Properties[0].Ocid, nil\n\t\t\t\t\t}).(pulumi.StringPtrOutput),\n\t\t\t\t},\n\t\t\t\tDiskRedundancy:         pulumi.String(\"HIGH\"),\n\t\t\t\tSparseDiskgroupEnabled: pulumi.Bool(false),\n\t\t\t\tLocalBackupEnabled:     pulumi.Bool(false),\n\t\t\t\tClusterName:            pulumi.String(\"pq-ppat4\"),\n\t\t\t\tHostnamePrefix:         pulumi.String(\"hostname1\"),\n\t\t\t\tDiagnosticsDataCollectionOptions: \u0026oracledatabase.CloudVmClusterPropertiesDiagnosticsDataCollectionOptionsArgs{\n\t\t\t\t\tDiagnosticsEventsEnabled: pulumi.Bool(true),\n\t\t\t\t\tHealthMonitoringEnabled:  pulumi.Bool(true),\n\t\t\t\t\tIncidentLogsEnabled:      pulumi.Bool(true),\n\t\t\t\t},\n\t\t\t\tMemorySizeGb: pulumi.Int(60),\n\t\t\t},\n\t\t\tDeletionProtection: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.oracledatabase.CloudExadataInfrastructure;\nimport com.pulumi.gcp.oracledatabase.CloudExadataInfrastructureArgs;\nimport com.pulumi.gcp.oracledatabase.inputs.CloudExadataInfrastructurePropertiesArgs;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.oracledatabase.OracledatabaseFunctions;\nimport com.pulumi.gcp.oracledatabase.inputs.GetDbServersArgs;\nimport com.pulumi.gcp.oracledatabase.CloudVmCluster;\nimport com.pulumi.gcp.oracledatabase.CloudVmClusterArgs;\nimport com.pulumi.gcp.oracledatabase.inputs.CloudVmClusterPropertiesArgs;\nimport com.pulumi.gcp.oracledatabase.inputs.CloudVmClusterPropertiesTimeZoneArgs;\nimport com.pulumi.gcp.oracledatabase.inputs.CloudVmClusterPropertiesDiagnosticsDataCollectionOptionsArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var cloudExadataInfrastructures = new CloudExadataInfrastructure(\"cloudExadataInfrastructures\", CloudExadataInfrastructureArgs.builder()\n            .cloudExadataInfrastructureId(\"my-exadata\")\n            .displayName(\"my-exadata displayname\")\n            .location(\"us-east4\")\n            .project(\"my-project\")\n            .properties(CloudExadataInfrastructurePropertiesArgs.builder()\n                .shape(\"Exadata.X9M\")\n                .computeCount(\"2\")\n                .storageCount(\"3\")\n                .build())\n            .deletionProtection(\"true\")\n            .build());\n\n        final var default = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"new\")\n            .project(\"my-project\")\n            .build());\n\n        final var mydbserver = OracledatabaseFunctions.getDbServers(GetDbServersArgs.builder()\n            .location(\"us-east4\")\n            .project(\"my-project\")\n            .cloudExadataInfrastructure(cloudExadataInfrastructures.cloudExadataInfrastructureId())\n            .build());\n\n        var myVmcluster = new CloudVmCluster(\"myVmcluster\", CloudVmClusterArgs.builder()\n            .cloudVmClusterId(\"my-instance\")\n            .displayName(\"my-instance displayname\")\n            .location(\"us-east4\")\n            .project(\"my-project\")\n            .exadataInfrastructure(cloudExadataInfrastructures.id())\n            .network(default_.id())\n            .cidr(\"10.5.0.0/24\")\n            .backupSubnetCidr(\"10.6.0.0/24\")\n            .labels(Map.of(\"label-one\", \"value-one\"))\n            .properties(CloudVmClusterPropertiesArgs.builder()\n                .licenseType(\"LICENSE_INCLUDED\")\n                .sshPublicKeys(\"ssh-rsa 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 nobody@google.com\")\n                .cpuCoreCount(\"4\")\n                .giVersion(\"19.0.0.0\")\n                .timeZone(CloudVmClusterPropertiesTimeZoneArgs.builder()\n                    .id(\"UTC\")\n                    .build())\n                .nodeCount(\"2\")\n                .ocpuCount(\"4.0\")\n                .dataStorageSizeTb(2)\n                .dbNodeStorageSizeGb(120)\n                .dbServerOcids(                \n                    mydbserver.applyValue(getDbServersResult -\u003e getDbServersResult).applyValue(mydbserver -\u003e mydbserver.applyValue(getDbServersResult -\u003e getDbServersResult.dbServers()[0].properties()[0].ocid())),\n                    mydbserver.applyValue(getDbServersResult -\u003e getDbServersResult).applyValue(mydbserver -\u003e mydbserver.applyValue(getDbServersResult -\u003e getDbServersResult.dbServers()[1].properties()[0].ocid())))\n                .diskRedundancy(\"HIGH\")\n                .sparseDiskgroupEnabled(false)\n                .localBackupEnabled(false)\n                .clusterName(\"pq-ppat4\")\n                .hostnamePrefix(\"hostname1\")\n                .diagnosticsDataCollectionOptions(CloudVmClusterPropertiesDiagnosticsDataCollectionOptionsArgs.builder()\n                    .diagnosticsEventsEnabled(true)\n                    .healthMonitoringEnabled(true)\n                    .incidentLogsEnabled(true)\n                    .build())\n                .memorySizeGb(60)\n                .build())\n            .deletionProtection(\"true\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  myVmcluster:\n    type: gcp:oracledatabase:CloudVmCluster\n    name: my_vmcluster\n    properties:\n      cloudVmClusterId: my-instance\n      displayName: my-instance displayname\n      location: us-east4\n      project: my-project\n      exadataInfrastructure: ${cloudExadataInfrastructures.id}\n      network: ${default.id}\n      cidr: 10.5.0.0/24\n      backupSubnetCidr: 10.6.0.0/24\n      labels:\n        label-one: value-one\n      properties:\n        licenseType: LICENSE_INCLUDED\n        sshPublicKeys:\n          - ssh-rsa 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 nobody@google.com\n        cpuCoreCount: '4'\n        giVersion: 19.0.0.0\n        timeZone:\n          id: UTC\n        nodeCount: '2'\n        ocpuCount: '4.0'\n        dataStorageSizeTb: 2\n        dbNodeStorageSizeGb: 120\n        dbServerOcids:\n          - ${mydbserver.dbServers[0].properties[0].ocid}\n          - ${mydbserver.dbServers[1].properties[0].ocid}\n        diskRedundancy: HIGH\n        sparseDiskgroupEnabled: false\n        localBackupEnabled: false\n        clusterName: pq-ppat4\n        hostnamePrefix: hostname1\n        diagnosticsDataCollectionOptions:\n          diagnosticsEventsEnabled: true\n          healthMonitoringEnabled: true\n          incidentLogsEnabled: true\n        memorySizeGb: 60\n      deletionProtection: 'true'\n  cloudExadataInfrastructures:\n    type: gcp:oracledatabase:CloudExadataInfrastructure\n    properties:\n      cloudExadataInfrastructureId: my-exadata\n      displayName: my-exadata displayname\n      location: us-east4\n      project: my-project\n      properties:\n        shape: Exadata.X9M\n        computeCount: '2'\n        storageCount: '3'\n      deletionProtection: 'true'\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: new\n        project: my-project\n  mydbserver:\n    fn::invoke:\n      function: gcp:oracledatabase:getDbServers\n      arguments:\n        location: us-east4\n        project: my-project\n        cloudExadataInfrastructure: ${cloudExadataInfrastructures.cloudExadataInfrastructureId}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nCloudVmCluster can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{location}}/cloudVmClusters/{{cloud_vm_cluster_id}}`\n\n* `{{project}}/{{location}}/{{cloud_vm_cluster_id}}`\n\n* `{{location}}/{{cloud_vm_cluster_id}}`\n\nWhen using the `pulumi import` command, CloudVmCluster can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:oracledatabase/cloudVmCluster:CloudVmCluster default projects/{{project}}/locations/{{location}}/cloudVmClusters/{{cloud_vm_cluster_id}}\n```\n\n```sh\n$ pulumi import gcp:oracledatabase/cloudVmCluster:CloudVmCluster default {{project}}/{{location}}/{{cloud_vm_cluster_id}}\n```\n\n```sh\n$ pulumi import gcp:oracledatabase/cloudVmCluster:CloudVmCluster default {{location}}/{{cloud_vm_cluster_id}}\n```\n\n",
             "properties": {
                 "backupSubnetCidr": {
                     "type": "string",
@@ -262161,7 +262161,7 @@
             }
         },
         "gcp:redis/instance:Instance": {
-            "description": "A Google Cloud Redis instance.\n\n\nTo get more information about Instance, see:\n\n* [API documentation](https://cloud.google.com/memorystore/docs/redis/reference/rest/v1/projects.locations.instances)\n* How-to Guides\n    * [Official Documentation](https://cloud.google.com/memorystore/docs/redis/)\n\n## Example Usage\n\n### Redis Instance Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst cache = new gcp.redis.Instance(\"cache\", {\n    name: \"memory-cache\",\n    memorySizeGb: 1,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ncache = gcp.redis.Instance(\"cache\",\n    name=\"memory-cache\",\n    memory_size_gb=1)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var cache = new Gcp.Redis.Instance(\"cache\", new()\n    {\n        Name = \"memory-cache\",\n        MemorySizeGb = 1,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/redis\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := redis.NewInstance(ctx, \"cache\", \u0026redis.InstanceArgs{\n\t\t\tName:         pulumi.String(\"memory-cache\"),\n\t\t\tMemorySizeGb: pulumi.Int(1),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.redis.Instance;\nimport com.pulumi.gcp.redis.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var cache = new Instance(\"cache\", InstanceArgs.builder()\n            .name(\"memory-cache\")\n            .memorySizeGb(1)\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  cache:\n    type: gcp:redis:Instance\n    properties:\n      name: memory-cache\n      memorySizeGb: 1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Redis Instance Full\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\n// This example assumes this network already exists.\n// The API creates a tenant network per network authorized for a\n// Redis instance and that network is not deleted when the user-created\n// network (authorized_network) is deleted, so this prevents issues\n// with tenant network quota.\n// If this network hasn't been created and you are using this example in your\n// config, add an additional network resource or change\n// this from \"data\"to \"resource\"\nconst redis-network = gcp.compute.getNetwork({\n    name: \"redis-test-network\",\n});\nconst cache = new gcp.redis.Instance(\"cache\", {\n    name: \"ha-memory-cache\",\n    tier: \"STANDARD_HA\",\n    memorySizeGb: 1,\n    locationId: \"us-central1-a\",\n    alternativeLocationId: \"us-central1-f\",\n    authorizedNetwork: redis_network.then(redis_network =\u003e redis_network.id),\n    redisVersion: \"REDIS_4_0\",\n    displayName: \"Test Instance\",\n    reservedIpRange: \"192.168.0.0/29\",\n    labels: {\n        my_key: \"my_val\",\n        other_key: \"other_val\",\n    },\n    maintenancePolicy: {\n        weeklyMaintenanceWindows: [{\n            day: \"TUESDAY\",\n            startTime: {\n                hours: 0,\n                minutes: 30,\n                seconds: 0,\n                nanos: 0,\n            },\n        }],\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\n# This example assumes this network already exists.\n# The API creates a tenant network per network authorized for a\n# Redis instance and that network is not deleted when the user-created\n# network (authorized_network) is deleted, so this prevents issues\n# with tenant network quota.\n# If this network hasn't been created and you are using this example in your\n# config, add an additional network resource or change\n# this from \"data\"to \"resource\"\nredis_network = gcp.compute.get_network(name=\"redis-test-network\")\ncache = gcp.redis.Instance(\"cache\",\n    name=\"ha-memory-cache\",\n    tier=\"STANDARD_HA\",\n    memory_size_gb=1,\n    location_id=\"us-central1-a\",\n    alternative_location_id=\"us-central1-f\",\n    authorized_network=redis_network.id,\n    redis_version=\"REDIS_4_0\",\n    display_name=\"Test Instance\",\n    reserved_ip_range=\"192.168.0.0/29\",\n    labels={\n        \"my_key\": \"my_val\",\n        \"other_key\": \"other_val\",\n    },\n    maintenance_policy={\n        \"weekly_maintenance_windows\": [{\n            \"day\": \"TUESDAY\",\n            \"start_time\": {\n                \"hours\": 0,\n                \"minutes\": 30,\n                \"seconds\": 0,\n                \"nanos\": 0,\n            },\n        }],\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    // This example assumes this network already exists.\n    // The API creates a tenant network per network authorized for a\n    // Redis instance and that network is not deleted when the user-created\n    // network (authorized_network) is deleted, so this prevents issues\n    // with tenant network quota.\n    // If this network hasn't been created and you are using this example in your\n    // config, add an additional network resource or change\n    // this from \"data\"to \"resource\"\n    var redis_network = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"redis-test-network\",\n    });\n\n    var cache = new Gcp.Redis.Instance(\"cache\", new()\n    {\n        Name = \"ha-memory-cache\",\n        Tier = \"STANDARD_HA\",\n        MemorySizeGb = 1,\n        LocationId = \"us-central1-a\",\n        AlternativeLocationId = \"us-central1-f\",\n        AuthorizedNetwork = redis_network.Apply(redis_network =\u003e redis_network.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n        RedisVersion = \"REDIS_4_0\",\n        DisplayName = \"Test Instance\",\n        ReservedIpRange = \"192.168.0.0/29\",\n        Labels = \n        {\n            { \"my_key\", \"my_val\" },\n            { \"other_key\", \"other_val\" },\n        },\n        MaintenancePolicy = new Gcp.Redis.Inputs.InstanceMaintenancePolicyArgs\n        {\n            WeeklyMaintenanceWindows = new[]\n            {\n                new Gcp.Redis.Inputs.InstanceMaintenancePolicyWeeklyMaintenanceWindowArgs\n                {\n                    Day = \"TUESDAY\",\n                    StartTime = new Gcp.Redis.Inputs.InstanceMaintenancePolicyWeeklyMaintenanceWindowStartTimeArgs\n                    {\n                        Hours = 0,\n                        Minutes = 30,\n                        Seconds = 0,\n                        Nanos = 0,\n                    },\n                },\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/redis\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t// This example assumes this network already exists.\n\t\t// The API creates a tenant network per network authorized for a\n\t\t// Redis instance and that network is not deleted when the user-created\n\t\t// network (authorized_network) is deleted, so this prevents issues\n\t\t// with tenant network quota.\n\t\t// If this network hasn't been created and you are using this example in your\n\t\t// config, add an additional network resource or change\n\t\t// this from \"data\"to \"resource\"\n\t\tredis_network, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName: \"redis-test-network\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = redis.NewInstance(ctx, \"cache\", \u0026redis.InstanceArgs{\n\t\t\tName:                  pulumi.String(\"ha-memory-cache\"),\n\t\t\tTier:                  pulumi.String(\"STANDARD_HA\"),\n\t\t\tMemorySizeGb:          pulumi.Int(1),\n\t\t\tLocationId:            pulumi.String(\"us-central1-a\"),\n\t\t\tAlternativeLocationId: pulumi.String(\"us-central1-f\"),\n\t\t\tAuthorizedNetwork:     pulumi.String(redis_network.Id),\n\t\t\tRedisVersion:          pulumi.String(\"REDIS_4_0\"),\n\t\t\tDisplayName:           pulumi.String(\"Test Instance\"),\n\t\t\tReservedIpRange:       pulumi.String(\"192.168.0.0/29\"),\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"my_key\":    pulumi.String(\"my_val\"),\n\t\t\t\t\"other_key\": pulumi.String(\"other_val\"),\n\t\t\t},\n\t\t\tMaintenancePolicy: \u0026redis.InstanceMaintenancePolicyArgs{\n\t\t\t\tWeeklyMaintenanceWindows: redis.InstanceMaintenancePolicyWeeklyMaintenanceWindowArray{\n\t\t\t\t\t\u0026redis.InstanceMaintenancePolicyWeeklyMaintenanceWindowArgs{\n\t\t\t\t\t\tDay: pulumi.String(\"TUESDAY\"),\n\t\t\t\t\t\tStartTime: \u0026redis.InstanceMaintenancePolicyWeeklyMaintenanceWindowStartTimeArgs{\n\t\t\t\t\t\t\tHours:   pulumi.Int(0),\n\t\t\t\t\t\t\tMinutes: pulumi.Int(30),\n\t\t\t\t\t\t\tSeconds: pulumi.Int(0),\n\t\t\t\t\t\t\tNanos:   pulumi.Int(0),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.redis.Instance;\nimport com.pulumi.gcp.redis.InstanceArgs;\nimport com.pulumi.gcp.redis.inputs.InstanceMaintenancePolicyArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        // This example assumes this network already exists.\n        // The API creates a tenant network per network authorized for a\n        // Redis instance and that network is not deleted when the user-created\n        // network (authorized_network) is deleted, so this prevents issues\n        // with tenant network quota.\n        // If this network hasn't been created and you are using this example in your\n        // config, add an additional network resource or change\n        // this from \"data\"to \"resource\"\n        final var redis-network = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"redis-test-network\")\n            .build());\n\n        var cache = new Instance(\"cache\", InstanceArgs.builder()\n            .name(\"ha-memory-cache\")\n            .tier(\"STANDARD_HA\")\n            .memorySizeGb(1)\n            .locationId(\"us-central1-a\")\n            .alternativeLocationId(\"us-central1-f\")\n            .authorizedNetwork(redis_network.id())\n            .redisVersion(\"REDIS_4_0\")\n            .displayName(\"Test Instance\")\n            .reservedIpRange(\"192.168.0.0/29\")\n            .labels(Map.ofEntries(\n                Map.entry(\"my_key\", \"my_val\"),\n                Map.entry(\"other_key\", \"other_val\")\n            ))\n            .maintenancePolicy(InstanceMaintenancePolicyArgs.builder()\n                .weeklyMaintenanceWindows(InstanceMaintenancePolicyWeeklyMaintenanceWindowArgs.builder()\n                    .day(\"TUESDAY\")\n                    .startTime(InstanceMaintenancePolicyWeeklyMaintenanceWindowStartTimeArgs.builder()\n                        .hours(0)\n                        .minutes(30)\n                        .seconds(0)\n                        .nanos(0)\n                        .build())\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  cache:\n    type: gcp:redis:Instance\n    properties:\n      name: ha-memory-cache\n      tier: STANDARD_HA\n      memorySizeGb: 1\n      locationId: us-central1-a\n      alternativeLocationId: us-central1-f\n      authorizedNetwork: ${[\"redis-network\"].id}\n      redisVersion: REDIS_4_0\n      displayName: Test Instance\n      reservedIpRange: 192.168.0.0/29\n      labels:\n        my_key: my_val\n        other_key: other_val\n      maintenancePolicy:\n        weeklyMaintenanceWindows:\n          - day: TUESDAY\n            startTime:\n              hours: 0\n              minutes: 30\n              seconds: 0\n              nanos: 0\nvariables:\n  # This example assumes this network already exists.\n  # // The API creates a tenant network per network authorized for a\n  # // Redis instance and that network is not deleted when the user-created\n  # // network (authorized_network) is deleted, so this prevents issues\n  # // with tenant network quota.\n  # // If this network hasn't been created and you are using this example in your\n  # // config, add an additional network resource or change\n  # // this from \"data\"to \"resource\"\n  redis-network:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: redis-test-network\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Redis Instance Full With Persistence Config\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst cache_persis = new gcp.redis.Instance(\"cache-persis\", {\n    name: \"ha-memory-cache-persis\",\n    tier: \"STANDARD_HA\",\n    memorySizeGb: 1,\n    locationId: \"us-central1-a\",\n    alternativeLocationId: \"us-central1-f\",\n    persistenceConfig: {\n        persistenceMode: \"RDB\",\n        rdbSnapshotPeriod: \"TWELVE_HOURS\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ncache_persis = gcp.redis.Instance(\"cache-persis\",\n    name=\"ha-memory-cache-persis\",\n    tier=\"STANDARD_HA\",\n    memory_size_gb=1,\n    location_id=\"us-central1-a\",\n    alternative_location_id=\"us-central1-f\",\n    persistence_config={\n        \"persistence_mode\": \"RDB\",\n        \"rdb_snapshot_period\": \"TWELVE_HOURS\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var cache_persis = new Gcp.Redis.Instance(\"cache-persis\", new()\n    {\n        Name = \"ha-memory-cache-persis\",\n        Tier = \"STANDARD_HA\",\n        MemorySizeGb = 1,\n        LocationId = \"us-central1-a\",\n        AlternativeLocationId = \"us-central1-f\",\n        PersistenceConfig = new Gcp.Redis.Inputs.InstancePersistenceConfigArgs\n        {\n            PersistenceMode = \"RDB\",\n            RdbSnapshotPeriod = \"TWELVE_HOURS\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/redis\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := redis.NewInstance(ctx, \"cache-persis\", \u0026redis.InstanceArgs{\n\t\t\tName:                  pulumi.String(\"ha-memory-cache-persis\"),\n\t\t\tTier:                  pulumi.String(\"STANDARD_HA\"),\n\t\t\tMemorySizeGb:          pulumi.Int(1),\n\t\t\tLocationId:            pulumi.String(\"us-central1-a\"),\n\t\t\tAlternativeLocationId: pulumi.String(\"us-central1-f\"),\n\t\t\tPersistenceConfig: \u0026redis.InstancePersistenceConfigArgs{\n\t\t\t\tPersistenceMode:   pulumi.String(\"RDB\"),\n\t\t\t\tRdbSnapshotPeriod: pulumi.String(\"TWELVE_HOURS\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.redis.Instance;\nimport com.pulumi.gcp.redis.InstanceArgs;\nimport com.pulumi.gcp.redis.inputs.InstancePersistenceConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var cache_persis = new Instance(\"cache-persis\", InstanceArgs.builder()\n            .name(\"ha-memory-cache-persis\")\n            .tier(\"STANDARD_HA\")\n            .memorySizeGb(1)\n            .locationId(\"us-central1-a\")\n            .alternativeLocationId(\"us-central1-f\")\n            .persistenceConfig(InstancePersistenceConfigArgs.builder()\n                .persistenceMode(\"RDB\")\n                .rdbSnapshotPeriod(\"TWELVE_HOURS\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  cache-persis:\n    type: gcp:redis:Instance\n    properties:\n      name: ha-memory-cache-persis\n      tier: STANDARD_HA\n      memorySizeGb: 1\n      locationId: us-central1-a\n      alternativeLocationId: us-central1-f\n      persistenceConfig:\n        persistenceMode: RDB\n        rdbSnapshotPeriod: TWELVE_HOURS\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Redis Instance Private Service\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\n// This example assumes this network already exists.\n// The API creates a tenant network per network authorized for a\n// Redis instance and that network is not deleted when the user-created\n// network (authorized_network) is deleted, so this prevents issues\n// with tenant network quota.\n// If this network hasn't been created and you are using this example in your\n// config, add an additional network resource or change\n// this from \"data\"to \"resource\"\nconst redis_network = new gcp.compute.Network(\"redis-network\", {name: \"redis-test-network\"});\nconst serviceRange = new gcp.compute.GlobalAddress(\"service_range\", {\n    name: \"address\",\n    purpose: \"VPC_PEERING\",\n    addressType: \"INTERNAL\",\n    prefixLength: 16,\n    network: redis_network.id,\n});\nconst privateServiceConnection = new gcp.servicenetworking.Connection(\"private_service_connection\", {\n    network: redis_network.id,\n    service: \"servicenetworking.googleapis.com\",\n    reservedPeeringRanges: [serviceRange.name],\n});\nconst cache = new gcp.redis.Instance(\"cache\", {\n    name: \"private-cache\",\n    tier: \"STANDARD_HA\",\n    memorySizeGb: 1,\n    locationId: \"us-central1-a\",\n    alternativeLocationId: \"us-central1-f\",\n    authorizedNetwork: redis_network.id,\n    connectMode: \"PRIVATE_SERVICE_ACCESS\",\n    redisVersion: \"REDIS_4_0\",\n    displayName: \"Test Instance\",\n}, {\n    dependsOn: [privateServiceConnection],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\n# This example assumes this network already exists.\n# The API creates a tenant network per network authorized for a\n# Redis instance and that network is not deleted when the user-created\n# network (authorized_network) is deleted, so this prevents issues\n# with tenant network quota.\n# If this network hasn't been created and you are using this example in your\n# config, add an additional network resource or change\n# this from \"data\"to \"resource\"\nredis_network = gcp.compute.Network(\"redis-network\", name=\"redis-test-network\")\nservice_range = gcp.compute.GlobalAddress(\"service_range\",\n    name=\"address\",\n    purpose=\"VPC_PEERING\",\n    address_type=\"INTERNAL\",\n    prefix_length=16,\n    network=redis_network.id)\nprivate_service_connection = gcp.servicenetworking.Connection(\"private_service_connection\",\n    network=redis_network.id,\n    service=\"servicenetworking.googleapis.com\",\n    reserved_peering_ranges=[service_range.name])\ncache = gcp.redis.Instance(\"cache\",\n    name=\"private-cache\",\n    tier=\"STANDARD_HA\",\n    memory_size_gb=1,\n    location_id=\"us-central1-a\",\n    alternative_location_id=\"us-central1-f\",\n    authorized_network=redis_network.id,\n    connect_mode=\"PRIVATE_SERVICE_ACCESS\",\n    redis_version=\"REDIS_4_0\",\n    display_name=\"Test Instance\",\n    opts = pulumi.ResourceOptions(depends_on=[private_service_connection]))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    // This example assumes this network already exists.\n    // The API creates a tenant network per network authorized for a\n    // Redis instance and that network is not deleted when the user-created\n    // network (authorized_network) is deleted, so this prevents issues\n    // with tenant network quota.\n    // If this network hasn't been created and you are using this example in your\n    // config, add an additional network resource or change\n    // this from \"data\"to \"resource\"\n    var redis_network = new Gcp.Compute.Network(\"redis-network\", new()\n    {\n        Name = \"redis-test-network\",\n    });\n\n    var serviceRange = new Gcp.Compute.GlobalAddress(\"service_range\", new()\n    {\n        Name = \"address\",\n        Purpose = \"VPC_PEERING\",\n        AddressType = \"INTERNAL\",\n        PrefixLength = 16,\n        Network = redis_network.Id,\n    });\n\n    var privateServiceConnection = new Gcp.ServiceNetworking.Connection(\"private_service_connection\", new()\n    {\n        Network = redis_network.Id,\n        Service = \"servicenetworking.googleapis.com\",\n        ReservedPeeringRanges = new[]\n        {\n            serviceRange.Name,\n        },\n    });\n\n    var cache = new Gcp.Redis.Instance(\"cache\", new()\n    {\n        Name = \"private-cache\",\n        Tier = \"STANDARD_HA\",\n        MemorySizeGb = 1,\n        LocationId = \"us-central1-a\",\n        AlternativeLocationId = \"us-central1-f\",\n        AuthorizedNetwork = redis_network.Id,\n        ConnectMode = \"PRIVATE_SERVICE_ACCESS\",\n        RedisVersion = \"REDIS_4_0\",\n        DisplayName = \"Test Instance\",\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            privateServiceConnection,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/redis\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/servicenetworking\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t// This example assumes this network already exists.\n\t\t// The API creates a tenant network per network authorized for a\n\t\t// Redis instance and that network is not deleted when the user-created\n\t\t// network (authorized_network) is deleted, so this prevents issues\n\t\t// with tenant network quota.\n\t\t// If this network hasn't been created and you are using this example in your\n\t\t// config, add an additional network resource or change\n\t\t// this from \"data\"to \"resource\"\n\t\t_, err := compute.NewNetwork(ctx, \"redis-network\", \u0026compute.NetworkArgs{\n\t\t\tName: pulumi.String(\"redis-test-network\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tserviceRange, err := compute.NewGlobalAddress(ctx, \"service_range\", \u0026compute.GlobalAddressArgs{\n\t\t\tName:         pulumi.String(\"address\"),\n\t\t\tPurpose:      pulumi.String(\"VPC_PEERING\"),\n\t\t\tAddressType:  pulumi.String(\"INTERNAL\"),\n\t\t\tPrefixLength: pulumi.Int(16),\n\t\t\tNetwork:      redis_network.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tprivateServiceConnection, err := servicenetworking.NewConnection(ctx, \"private_service_connection\", \u0026servicenetworking.ConnectionArgs{\n\t\t\tNetwork: redis_network.ID(),\n\t\t\tService: pulumi.String(\"servicenetworking.googleapis.com\"),\n\t\t\tReservedPeeringRanges: pulumi.StringArray{\n\t\t\t\tserviceRange.Name,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = redis.NewInstance(ctx, \"cache\", \u0026redis.InstanceArgs{\n\t\t\tName:                  pulumi.String(\"private-cache\"),\n\t\t\tTier:                  pulumi.String(\"STANDARD_HA\"),\n\t\t\tMemorySizeGb:          pulumi.Int(1),\n\t\t\tLocationId:            pulumi.String(\"us-central1-a\"),\n\t\t\tAlternativeLocationId: pulumi.String(\"us-central1-f\"),\n\t\t\tAuthorizedNetwork:     redis_network.ID(),\n\t\t\tConnectMode:           pulumi.String(\"PRIVATE_SERVICE_ACCESS\"),\n\t\t\tRedisVersion:          pulumi.String(\"REDIS_4_0\"),\n\t\t\tDisplayName:           pulumi.String(\"Test Instance\"),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tprivateServiceConnection,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.GlobalAddress;\nimport com.pulumi.gcp.compute.GlobalAddressArgs;\nimport com.pulumi.gcp.servicenetworking.Connection;\nimport com.pulumi.gcp.servicenetworking.ConnectionArgs;\nimport com.pulumi.gcp.redis.Instance;\nimport com.pulumi.gcp.redis.InstanceArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        // This example assumes this network already exists.\n        // The API creates a tenant network per network authorized for a\n        // Redis instance and that network is not deleted when the user-created\n        // network (authorized_network) is deleted, so this prevents issues\n        // with tenant network quota.\n        // If this network hasn't been created and you are using this example in your\n        // config, add an additional network resource or change\n        // this from \"data\"to \"resource\"\n        var redis_network = new Network(\"redis-network\", NetworkArgs.builder()\n            .name(\"redis-test-network\")\n            .build());\n\n        var serviceRange = new GlobalAddress(\"serviceRange\", GlobalAddressArgs.builder()\n            .name(\"address\")\n            .purpose(\"VPC_PEERING\")\n            .addressType(\"INTERNAL\")\n            .prefixLength(16)\n            .network(redis_network.id())\n            .build());\n\n        var privateServiceConnection = new Connection(\"privateServiceConnection\", ConnectionArgs.builder()\n            .network(redis_network.id())\n            .service(\"servicenetworking.googleapis.com\")\n            .reservedPeeringRanges(serviceRange.name())\n            .build());\n\n        var cache = new Instance(\"cache\", InstanceArgs.builder()\n            .name(\"private-cache\")\n            .tier(\"STANDARD_HA\")\n            .memorySizeGb(1)\n            .locationId(\"us-central1-a\")\n            .alternativeLocationId(\"us-central1-f\")\n            .authorizedNetwork(redis_network.id())\n            .connectMode(\"PRIVATE_SERVICE_ACCESS\")\n            .redisVersion(\"REDIS_4_0\")\n            .displayName(\"Test Instance\")\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(privateServiceConnection)\n                .build());\n\n    }\n}\n```\n```yaml\nresources:\n  # This example assumes this network already exists.\n  # // The API creates a tenant network per network authorized for a\n  # // Redis instance and that network is not deleted when the user-created\n  # // network (authorized_network) is deleted, so this prevents issues\n  # // with tenant network quota.\n  # // If this network hasn't been created and you are using this example in your\n  # // config, add an additional network resource or change\n  # // this from \"data\"to \"resource\"\n  redis-network:\n    type: gcp:compute:Network\n    properties:\n      name: redis-test-network\n  serviceRange:\n    type: gcp:compute:GlobalAddress\n    name: service_range\n    properties:\n      name: address\n      purpose: VPC_PEERING\n      addressType: INTERNAL\n      prefixLength: 16\n      network: ${[\"redis-network\"].id}\n  privateServiceConnection:\n    type: gcp:servicenetworking:Connection\n    name: private_service_connection\n    properties:\n      network: ${[\"redis-network\"].id}\n      service: servicenetworking.googleapis.com\n      reservedPeeringRanges:\n        - ${serviceRange.name}\n  cache:\n    type: gcp:redis:Instance\n    properties:\n      name: private-cache\n      tier: STANDARD_HA\n      memorySizeGb: 1\n      locationId: us-central1-a\n      alternativeLocationId: us-central1-f\n      authorizedNetwork: ${[\"redis-network\"].id}\n      connectMode: PRIVATE_SERVICE_ACCESS\n      redisVersion: REDIS_4_0\n      displayName: Test Instance\n    options:\n      dependsOn:\n        - ${privateServiceConnection}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Redis Instance Mrr\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\n// This example assumes this network already exists.\n// The API creates a tenant network per network authorized for a\n// Redis instance and that network is not deleted when the user-created\n// network (authorized_network) is deleted, so this prevents issues\n// with tenant network quota.\n// If this network hasn't been created and you are using this example in your\n// config, add an additional network resource or change\n// this from \"data\"to \"resource\"\nconst redis-network = gcp.compute.getNetwork({\n    name: \"redis-test-network\",\n});\nconst cache = new gcp.redis.Instance(\"cache\", {\n    name: \"mrr-memory-cache\",\n    tier: \"STANDARD_HA\",\n    memorySizeGb: 5,\n    locationId: \"us-central1-a\",\n    alternativeLocationId: \"us-central1-f\",\n    authorizedNetwork: redis_network.then(redis_network =\u003e redis_network.id),\n    redisVersion: \"REDIS_6_X\",\n    displayName: \"Terraform Test Instance\",\n    reservedIpRange: \"192.168.0.0/28\",\n    replicaCount: 5,\n    readReplicasMode: \"READ_REPLICAS_ENABLED\",\n    labels: {\n        my_key: \"my_val\",\n        other_key: \"other_val\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\n# This example assumes this network already exists.\n# The API creates a tenant network per network authorized for a\n# Redis instance and that network is not deleted when the user-created\n# network (authorized_network) is deleted, so this prevents issues\n# with tenant network quota.\n# If this network hasn't been created and you are using this example in your\n# config, add an additional network resource or change\n# this from \"data\"to \"resource\"\nredis_network = gcp.compute.get_network(name=\"redis-test-network\")\ncache = gcp.redis.Instance(\"cache\",\n    name=\"mrr-memory-cache\",\n    tier=\"STANDARD_HA\",\n    memory_size_gb=5,\n    location_id=\"us-central1-a\",\n    alternative_location_id=\"us-central1-f\",\n    authorized_network=redis_network.id,\n    redis_version=\"REDIS_6_X\",\n    display_name=\"Terraform Test Instance\",\n    reserved_ip_range=\"192.168.0.0/28\",\n    replica_count=5,\n    read_replicas_mode=\"READ_REPLICAS_ENABLED\",\n    labels={\n        \"my_key\": \"my_val\",\n        \"other_key\": \"other_val\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    // This example assumes this network already exists.\n    // The API creates a tenant network per network authorized for a\n    // Redis instance and that network is not deleted when the user-created\n    // network (authorized_network) is deleted, so this prevents issues\n    // with tenant network quota.\n    // If this network hasn't been created and you are using this example in your\n    // config, add an additional network resource or change\n    // this from \"data\"to \"resource\"\n    var redis_network = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"redis-test-network\",\n    });\n\n    var cache = new Gcp.Redis.Instance(\"cache\", new()\n    {\n        Name = \"mrr-memory-cache\",\n        Tier = \"STANDARD_HA\",\n        MemorySizeGb = 5,\n        LocationId = \"us-central1-a\",\n        AlternativeLocationId = \"us-central1-f\",\n        AuthorizedNetwork = redis_network.Apply(redis_network =\u003e redis_network.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n        RedisVersion = \"REDIS_6_X\",\n        DisplayName = \"Terraform Test Instance\",\n        ReservedIpRange = \"192.168.0.0/28\",\n        ReplicaCount = 5,\n        ReadReplicasMode = \"READ_REPLICAS_ENABLED\",\n        Labels = \n        {\n            { \"my_key\", \"my_val\" },\n            { \"other_key\", \"other_val\" },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/redis\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t// This example assumes this network already exists.\n\t\t// The API creates a tenant network per network authorized for a\n\t\t// Redis instance and that network is not deleted when the user-created\n\t\t// network (authorized_network) is deleted, so this prevents issues\n\t\t// with tenant network quota.\n\t\t// If this network hasn't been created and you are using this example in your\n\t\t// config, add an additional network resource or change\n\t\t// this from \"data\"to \"resource\"\n\t\tredis_network, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName: \"redis-test-network\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = redis.NewInstance(ctx, \"cache\", \u0026redis.InstanceArgs{\n\t\t\tName:                  pulumi.String(\"mrr-memory-cache\"),\n\t\t\tTier:                  pulumi.String(\"STANDARD_HA\"),\n\t\t\tMemorySizeGb:          pulumi.Int(5),\n\t\t\tLocationId:            pulumi.String(\"us-central1-a\"),\n\t\t\tAlternativeLocationId: pulumi.String(\"us-central1-f\"),\n\t\t\tAuthorizedNetwork:     pulumi.String(redis_network.Id),\n\t\t\tRedisVersion:          pulumi.String(\"REDIS_6_X\"),\n\t\t\tDisplayName:           pulumi.String(\"Terraform Test Instance\"),\n\t\t\tReservedIpRange:       pulumi.String(\"192.168.0.0/28\"),\n\t\t\tReplicaCount:          pulumi.Int(5),\n\t\t\tReadReplicasMode:      pulumi.String(\"READ_REPLICAS_ENABLED\"),\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"my_key\":    pulumi.String(\"my_val\"),\n\t\t\t\t\"other_key\": pulumi.String(\"other_val\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.redis.Instance;\nimport com.pulumi.gcp.redis.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        // This example assumes this network already exists.\n        // The API creates a tenant network per network authorized for a\n        // Redis instance and that network is not deleted when the user-created\n        // network (authorized_network) is deleted, so this prevents issues\n        // with tenant network quota.\n        // If this network hasn't been created and you are using this example in your\n        // config, add an additional network resource or change\n        // this from \"data\"to \"resource\"\n        final var redis-network = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"redis-test-network\")\n            .build());\n\n        var cache = new Instance(\"cache\", InstanceArgs.builder()\n            .name(\"mrr-memory-cache\")\n            .tier(\"STANDARD_HA\")\n            .memorySizeGb(5)\n            .locationId(\"us-central1-a\")\n            .alternativeLocationId(\"us-central1-f\")\n            .authorizedNetwork(redis_network.id())\n            .redisVersion(\"REDIS_6_X\")\n            .displayName(\"Terraform Test Instance\")\n            .reservedIpRange(\"192.168.0.0/28\")\n            .replicaCount(5)\n            .readReplicasMode(\"READ_REPLICAS_ENABLED\")\n            .labels(Map.ofEntries(\n                Map.entry(\"my_key\", \"my_val\"),\n                Map.entry(\"other_key\", \"other_val\")\n            ))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  cache:\n    type: gcp:redis:Instance\n    properties:\n      name: mrr-memory-cache\n      tier: STANDARD_HA\n      memorySizeGb: 5\n      locationId: us-central1-a\n      alternativeLocationId: us-central1-f\n      authorizedNetwork: ${[\"redis-network\"].id}\n      redisVersion: REDIS_6_X\n      displayName: Terraform Test Instance\n      reservedIpRange: 192.168.0.0/28\n      replicaCount: 5\n      readReplicasMode: READ_REPLICAS_ENABLED\n      labels:\n        my_key: my_val\n        other_key: other_val\nvariables:\n  # This example assumes this network already exists.\n  # // The API creates a tenant network per network authorized for a\n  # // Redis instance and that network is not deleted when the user-created\n  # // network (authorized_network) is deleted, so this prevents issues\n  # // with tenant network quota.\n  # // If this network hasn't been created and you are using this example in your\n  # // config, add an additional network resource or change\n  # // this from \"data\"to \"resource\"\n  redis-network:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: redis-test-network\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Redis Instance Cmek\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst redisKeyring = new gcp.kms.KeyRing(\"redis_keyring\", {\n    name: \"redis-keyring\",\n    location: \"us-central1\",\n});\nconst redisKey = new gcp.kms.CryptoKey(\"redis_key\", {\n    name: \"redis-key\",\n    keyRing: redisKeyring.id,\n});\n// This example assumes this network already exists.\n// The API creates a tenant network per network authorized for a\n// Redis instance and that network is not deleted when the user-created\n// network (authorized_network) is deleted, so this prevents issues\n// with tenant network quota.\n// If this network hasn't been created and you are using this example in your\n// config, add an additional network resource or change\n// this from \"data\"to \"resource\"\nconst redis-network = gcp.compute.getNetwork({\n    name: \"redis-test-network\",\n});\nconst cache = new gcp.redis.Instance(\"cache\", {\n    name: \"cmek-memory-cache\",\n    tier: \"STANDARD_HA\",\n    memorySizeGb: 1,\n    locationId: \"us-central1-a\",\n    alternativeLocationId: \"us-central1-f\",\n    authorizedNetwork: redis_network.then(redis_network =\u003e redis_network.id),\n    redisVersion: \"REDIS_6_X\",\n    displayName: \"Terraform Test Instance\",\n    reservedIpRange: \"192.168.0.0/29\",\n    labels: {\n        my_key: \"my_val\",\n        other_key: \"other_val\",\n    },\n    customerManagedKey: redisKey.id,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nredis_keyring = gcp.kms.KeyRing(\"redis_keyring\",\n    name=\"redis-keyring\",\n    location=\"us-central1\")\nredis_key = gcp.kms.CryptoKey(\"redis_key\",\n    name=\"redis-key\",\n    key_ring=redis_keyring.id)\n# This example assumes this network already exists.\n# The API creates a tenant network per network authorized for a\n# Redis instance and that network is not deleted when the user-created\n# network (authorized_network) is deleted, so this prevents issues\n# with tenant network quota.\n# If this network hasn't been created and you are using this example in your\n# config, add an additional network resource or change\n# this from \"data\"to \"resource\"\nredis_network = gcp.compute.get_network(name=\"redis-test-network\")\ncache = gcp.redis.Instance(\"cache\",\n    name=\"cmek-memory-cache\",\n    tier=\"STANDARD_HA\",\n    memory_size_gb=1,\n    location_id=\"us-central1-a\",\n    alternative_location_id=\"us-central1-f\",\n    authorized_network=redis_network.id,\n    redis_version=\"REDIS_6_X\",\n    display_name=\"Terraform Test Instance\",\n    reserved_ip_range=\"192.168.0.0/29\",\n    labels={\n        \"my_key\": \"my_val\",\n        \"other_key\": \"other_val\",\n    },\n    customer_managed_key=redis_key.id)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var redisKeyring = new Gcp.Kms.KeyRing(\"redis_keyring\", new()\n    {\n        Name = \"redis-keyring\",\n        Location = \"us-central1\",\n    });\n\n    var redisKey = new Gcp.Kms.CryptoKey(\"redis_key\", new()\n    {\n        Name = \"redis-key\",\n        KeyRing = redisKeyring.Id,\n    });\n\n    // This example assumes this network already exists.\n    // The API creates a tenant network per network authorized for a\n    // Redis instance and that network is not deleted when the user-created\n    // network (authorized_network) is deleted, so this prevents issues\n    // with tenant network quota.\n    // If this network hasn't been created and you are using this example in your\n    // config, add an additional network resource or change\n    // this from \"data\"to \"resource\"\n    var redis_network = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"redis-test-network\",\n    });\n\n    var cache = new Gcp.Redis.Instance(\"cache\", new()\n    {\n        Name = \"cmek-memory-cache\",\n        Tier = \"STANDARD_HA\",\n        MemorySizeGb = 1,\n        LocationId = \"us-central1-a\",\n        AlternativeLocationId = \"us-central1-f\",\n        AuthorizedNetwork = redis_network.Apply(redis_network =\u003e redis_network.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n        RedisVersion = \"REDIS_6_X\",\n        DisplayName = \"Terraform Test Instance\",\n        ReservedIpRange = \"192.168.0.0/29\",\n        Labels = \n        {\n            { \"my_key\", \"my_val\" },\n            { \"other_key\", \"other_val\" },\n        },\n        CustomerManagedKey = redisKey.Id,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/kms\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/redis\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tredisKeyring, err := kms.NewKeyRing(ctx, \"redis_keyring\", \u0026kms.KeyRingArgs{\n\t\t\tName:     pulumi.String(\"redis-keyring\"),\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tredisKey, err := kms.NewCryptoKey(ctx, \"redis_key\", \u0026kms.CryptoKeyArgs{\n\t\t\tName:    pulumi.String(\"redis-key\"),\n\t\t\tKeyRing: redisKeyring.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// This example assumes this network already exists.\n\t\t// The API creates a tenant network per network authorized for a\n\t\t// Redis instance and that network is not deleted when the user-created\n\t\t// network (authorized_network) is deleted, so this prevents issues\n\t\t// with tenant network quota.\n\t\t// If this network hasn't been created and you are using this example in your\n\t\t// config, add an additional network resource or change\n\t\t// this from \"data\"to \"resource\"\n\t\tredis_network, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName: \"redis-test-network\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = redis.NewInstance(ctx, \"cache\", \u0026redis.InstanceArgs{\n\t\t\tName:                  pulumi.String(\"cmek-memory-cache\"),\n\t\t\tTier:                  pulumi.String(\"STANDARD_HA\"),\n\t\t\tMemorySizeGb:          pulumi.Int(1),\n\t\t\tLocationId:            pulumi.String(\"us-central1-a\"),\n\t\t\tAlternativeLocationId: pulumi.String(\"us-central1-f\"),\n\t\t\tAuthorizedNetwork:     pulumi.String(redis_network.Id),\n\t\t\tRedisVersion:          pulumi.String(\"REDIS_6_X\"),\n\t\t\tDisplayName:           pulumi.String(\"Terraform Test Instance\"),\n\t\t\tReservedIpRange:       pulumi.String(\"192.168.0.0/29\"),\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"my_key\":    pulumi.String(\"my_val\"),\n\t\t\t\t\"other_key\": pulumi.String(\"other_val\"),\n\t\t\t},\n\t\t\tCustomerManagedKey: redisKey.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.kms.KeyRing;\nimport com.pulumi.gcp.kms.KeyRingArgs;\nimport com.pulumi.gcp.kms.CryptoKey;\nimport com.pulumi.gcp.kms.CryptoKeyArgs;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.redis.Instance;\nimport com.pulumi.gcp.redis.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var redisKeyring = new KeyRing(\"redisKeyring\", KeyRingArgs.builder()\n            .name(\"redis-keyring\")\n            .location(\"us-central1\")\n            .build());\n\n        var redisKey = new CryptoKey(\"redisKey\", CryptoKeyArgs.builder()\n            .name(\"redis-key\")\n            .keyRing(redisKeyring.id())\n            .build());\n\n        // This example assumes this network already exists.\n        // The API creates a tenant network per network authorized for a\n        // Redis instance and that network is not deleted when the user-created\n        // network (authorized_network) is deleted, so this prevents issues\n        // with tenant network quota.\n        // If this network hasn't been created and you are using this example in your\n        // config, add an additional network resource or change\n        // this from \"data\"to \"resource\"\n        final var redis-network = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"redis-test-network\")\n            .build());\n\n        var cache = new Instance(\"cache\", InstanceArgs.builder()\n            .name(\"cmek-memory-cache\")\n            .tier(\"STANDARD_HA\")\n            .memorySizeGb(1)\n            .locationId(\"us-central1-a\")\n            .alternativeLocationId(\"us-central1-f\")\n            .authorizedNetwork(redis_network.id())\n            .redisVersion(\"REDIS_6_X\")\n            .displayName(\"Terraform Test Instance\")\n            .reservedIpRange(\"192.168.0.0/29\")\n            .labels(Map.ofEntries(\n                Map.entry(\"my_key\", \"my_val\"),\n                Map.entry(\"other_key\", \"other_val\")\n            ))\n            .customerManagedKey(redisKey.id())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  cache:\n    type: gcp:redis:Instance\n    properties:\n      name: cmek-memory-cache\n      tier: STANDARD_HA\n      memorySizeGb: 1\n      locationId: us-central1-a\n      alternativeLocationId: us-central1-f\n      authorizedNetwork: ${[\"redis-network\"].id}\n      redisVersion: REDIS_6_X\n      displayName: Terraform Test Instance\n      reservedIpRange: 192.168.0.0/29\n      labels:\n        my_key: my_val\n        other_key: other_val\n      customerManagedKey: ${redisKey.id}\n  redisKeyring:\n    type: gcp:kms:KeyRing\n    name: redis_keyring\n    properties:\n      name: redis-keyring\n      location: us-central1\n  redisKey:\n    type: gcp:kms:CryptoKey\n    name: redis_key\n    properties:\n      name: redis-key\n      keyRing: ${redisKeyring.id}\nvariables:\n  # This example assumes this network already exists.\n  # // The API creates a tenant network per network authorized for a\n  # // Redis instance and that network is not deleted when the user-created\n  # // network (authorized_network) is deleted, so this prevents issues\n  # // with tenant network quota.\n  # // If this network hasn't been created and you are using this example in your\n  # // config, add an additional network resource or change\n  # // this from \"data\"to \"resource\"\n  redis-network:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: redis-test-network\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nInstance can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{region}}/instances/{{name}}`\n\n* `{{project}}/{{region}}/{{name}}`\n\n* `{{region}}/{{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, Instance can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:redis/instance:Instance default projects/{{project}}/locations/{{region}}/instances/{{name}}\n```\n\n```sh\n$ pulumi import gcp:redis/instance:Instance default {{project}}/{{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:redis/instance:Instance default {{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:redis/instance:Instance default {{name}}\n```\n\n",
+            "description": "A Google Cloud Redis instance.\n\n\nTo get more information about Instance, see:\n\n* [API documentation](https://cloud.google.com/memorystore/docs/redis/reference/rest/v1/projects.locations.instances)\n* How-to Guides\n    * [Official Documentation](https://cloud.google.com/memorystore/docs/redis/)\n\n## Example Usage\n\n### Redis Instance Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst cache = new gcp.redis.Instance(\"cache\", {\n    name: \"memory-cache\",\n    memorySizeGb: 1,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ncache = gcp.redis.Instance(\"cache\",\n    name=\"memory-cache\",\n    memory_size_gb=1)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var cache = new Gcp.Redis.Instance(\"cache\", new()\n    {\n        Name = \"memory-cache\",\n        MemorySizeGb = 1,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/redis\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := redis.NewInstance(ctx, \"cache\", \u0026redis.InstanceArgs{\n\t\t\tName:         pulumi.String(\"memory-cache\"),\n\t\t\tMemorySizeGb: pulumi.Int(1),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.redis.Instance;\nimport com.pulumi.gcp.redis.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var cache = new Instance(\"cache\", InstanceArgs.builder()\n            .name(\"memory-cache\")\n            .memorySizeGb(1)\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  cache:\n    type: gcp:redis:Instance\n    properties:\n      name: memory-cache\n      memorySizeGb: 1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Redis Instance Full\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\n// This example assumes this network already exists.\n// The API creates a tenant network per network authorized for a\n// Redis instance and that network is not deleted when the user-created\n// network (authorized_network) is deleted, so this prevents issues\n// with tenant network quota.\n// If this network hasn't been created and you are using this example in your\n// config, add an additional network resource or change\n// this from \"data\"to \"resource\"\nconst redis_network = gcp.compute.getNetwork({\n    name: \"redis-test-network\",\n});\nconst cache = new gcp.redis.Instance(\"cache\", {\n    name: \"ha-memory-cache\",\n    tier: \"STANDARD_HA\",\n    memorySizeGb: 1,\n    locationId: \"us-central1-a\",\n    alternativeLocationId: \"us-central1-f\",\n    authorizedNetwork: redis_network.then(redis_network =\u003e redis_network.id),\n    redisVersion: \"REDIS_4_0\",\n    displayName: \"Test Instance\",\n    reservedIpRange: \"192.168.0.0/29\",\n    labels: {\n        my_key: \"my_val\",\n        other_key: \"other_val\",\n    },\n    maintenancePolicy: {\n        weeklyMaintenanceWindows: [{\n            day: \"TUESDAY\",\n            startTime: {\n                hours: 0,\n                minutes: 30,\n                seconds: 0,\n                nanos: 0,\n            },\n        }],\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\n# This example assumes this network already exists.\n# The API creates a tenant network per network authorized for a\n# Redis instance and that network is not deleted when the user-created\n# network (authorized_network) is deleted, so this prevents issues\n# with tenant network quota.\n# If this network hasn't been created and you are using this example in your\n# config, add an additional network resource or change\n# this from \"data\"to \"resource\"\nredis_network = gcp.compute.get_network(name=\"redis-test-network\")\ncache = gcp.redis.Instance(\"cache\",\n    name=\"ha-memory-cache\",\n    tier=\"STANDARD_HA\",\n    memory_size_gb=1,\n    location_id=\"us-central1-a\",\n    alternative_location_id=\"us-central1-f\",\n    authorized_network=redis_network.id,\n    redis_version=\"REDIS_4_0\",\n    display_name=\"Test Instance\",\n    reserved_ip_range=\"192.168.0.0/29\",\n    labels={\n        \"my_key\": \"my_val\",\n        \"other_key\": \"other_val\",\n    },\n    maintenance_policy={\n        \"weekly_maintenance_windows\": [{\n            \"day\": \"TUESDAY\",\n            \"start_time\": {\n                \"hours\": 0,\n                \"minutes\": 30,\n                \"seconds\": 0,\n                \"nanos\": 0,\n            },\n        }],\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    // This example assumes this network already exists.\n    // The API creates a tenant network per network authorized for a\n    // Redis instance and that network is not deleted when the user-created\n    // network (authorized_network) is deleted, so this prevents issues\n    // with tenant network quota.\n    // If this network hasn't been created and you are using this example in your\n    // config, add an additional network resource or change\n    // this from \"data\"to \"resource\"\n    var redis_network = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"redis-test-network\",\n    });\n\n    var cache = new Gcp.Redis.Instance(\"cache\", new()\n    {\n        Name = \"ha-memory-cache\",\n        Tier = \"STANDARD_HA\",\n        MemorySizeGb = 1,\n        LocationId = \"us-central1-a\",\n        AlternativeLocationId = \"us-central1-f\",\n        AuthorizedNetwork = redis_network.Apply(redis_network =\u003e redis_network.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n        RedisVersion = \"REDIS_4_0\",\n        DisplayName = \"Test Instance\",\n        ReservedIpRange = \"192.168.0.0/29\",\n        Labels = \n        {\n            { \"my_key\", \"my_val\" },\n            { \"other_key\", \"other_val\" },\n        },\n        MaintenancePolicy = new Gcp.Redis.Inputs.InstanceMaintenancePolicyArgs\n        {\n            WeeklyMaintenanceWindows = new[]\n            {\n                new Gcp.Redis.Inputs.InstanceMaintenancePolicyWeeklyMaintenanceWindowArgs\n                {\n                    Day = \"TUESDAY\",\n                    StartTime = new Gcp.Redis.Inputs.InstanceMaintenancePolicyWeeklyMaintenanceWindowStartTimeArgs\n                    {\n                        Hours = 0,\n                        Minutes = 30,\n                        Seconds = 0,\n                        Nanos = 0,\n                    },\n                },\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/redis\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t// This example assumes this network already exists.\n\t\t// The API creates a tenant network per network authorized for a\n\t\t// Redis instance and that network is not deleted when the user-created\n\t\t// network (authorized_network) is deleted, so this prevents issues\n\t\t// with tenant network quota.\n\t\t// If this network hasn't been created and you are using this example in your\n\t\t// config, add an additional network resource or change\n\t\t// this from \"data\"to \"resource\"\n\t\tredis_network, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName: \"redis-test-network\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = redis.NewInstance(ctx, \"cache\", \u0026redis.InstanceArgs{\n\t\t\tName:                  pulumi.String(\"ha-memory-cache\"),\n\t\t\tTier:                  pulumi.String(\"STANDARD_HA\"),\n\t\t\tMemorySizeGb:          pulumi.Int(1),\n\t\t\tLocationId:            pulumi.String(\"us-central1-a\"),\n\t\t\tAlternativeLocationId: pulumi.String(\"us-central1-f\"),\n\t\t\tAuthorizedNetwork:     pulumi.String(redis_network.Id),\n\t\t\tRedisVersion:          pulumi.String(\"REDIS_4_0\"),\n\t\t\tDisplayName:           pulumi.String(\"Test Instance\"),\n\t\t\tReservedIpRange:       pulumi.String(\"192.168.0.0/29\"),\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"my_key\":    pulumi.String(\"my_val\"),\n\t\t\t\t\"other_key\": pulumi.String(\"other_val\"),\n\t\t\t},\n\t\t\tMaintenancePolicy: \u0026redis.InstanceMaintenancePolicyArgs{\n\t\t\t\tWeeklyMaintenanceWindows: redis.InstanceMaintenancePolicyWeeklyMaintenanceWindowArray{\n\t\t\t\t\t\u0026redis.InstanceMaintenancePolicyWeeklyMaintenanceWindowArgs{\n\t\t\t\t\t\tDay: pulumi.String(\"TUESDAY\"),\n\t\t\t\t\t\tStartTime: \u0026redis.InstanceMaintenancePolicyWeeklyMaintenanceWindowStartTimeArgs{\n\t\t\t\t\t\t\tHours:   pulumi.Int(0),\n\t\t\t\t\t\t\tMinutes: pulumi.Int(30),\n\t\t\t\t\t\t\tSeconds: pulumi.Int(0),\n\t\t\t\t\t\t\tNanos:   pulumi.Int(0),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.redis.Instance;\nimport com.pulumi.gcp.redis.InstanceArgs;\nimport com.pulumi.gcp.redis.inputs.InstanceMaintenancePolicyArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        // This example assumes this network already exists.\n        // The API creates a tenant network per network authorized for a\n        // Redis instance and that network is not deleted when the user-created\n        // network (authorized_network) is deleted, so this prevents issues\n        // with tenant network quota.\n        // If this network hasn't been created and you are using this example in your\n        // config, add an additional network resource or change\n        // this from \"data\"to \"resource\"\n        final var redis-network = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"redis-test-network\")\n            .build());\n\n        var cache = new Instance(\"cache\", InstanceArgs.builder()\n            .name(\"ha-memory-cache\")\n            .tier(\"STANDARD_HA\")\n            .memorySizeGb(1)\n            .locationId(\"us-central1-a\")\n            .alternativeLocationId(\"us-central1-f\")\n            .authorizedNetwork(redis_network.id())\n            .redisVersion(\"REDIS_4_0\")\n            .displayName(\"Test Instance\")\n            .reservedIpRange(\"192.168.0.0/29\")\n            .labels(Map.ofEntries(\n                Map.entry(\"my_key\", \"my_val\"),\n                Map.entry(\"other_key\", \"other_val\")\n            ))\n            .maintenancePolicy(InstanceMaintenancePolicyArgs.builder()\n                .weeklyMaintenanceWindows(InstanceMaintenancePolicyWeeklyMaintenanceWindowArgs.builder()\n                    .day(\"TUESDAY\")\n                    .startTime(InstanceMaintenancePolicyWeeklyMaintenanceWindowStartTimeArgs.builder()\n                        .hours(0)\n                        .minutes(30)\n                        .seconds(0)\n                        .nanos(0)\n                        .build())\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  cache:\n    type: gcp:redis:Instance\n    properties:\n      name: ha-memory-cache\n      tier: STANDARD_HA\n      memorySizeGb: 1\n      locationId: us-central1-a\n      alternativeLocationId: us-central1-f\n      authorizedNetwork: ${[\"redis-network\"].id}\n      redisVersion: REDIS_4_0\n      displayName: Test Instance\n      reservedIpRange: 192.168.0.0/29\n      labels:\n        my_key: my_val\n        other_key: other_val\n      maintenancePolicy:\n        weeklyMaintenanceWindows:\n          - day: TUESDAY\n            startTime:\n              hours: 0\n              minutes: 30\n              seconds: 0\n              nanos: 0\nvariables:\n  # This example assumes this network already exists.\n  # // The API creates a tenant network per network authorized for a\n  # // Redis instance and that network is not deleted when the user-created\n  # // network (authorized_network) is deleted, so this prevents issues\n  # // with tenant network quota.\n  # // If this network hasn't been created and you are using this example in your\n  # // config, add an additional network resource or change\n  # // this from \"data\"to \"resource\"\n  redis-network:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: redis-test-network\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Redis Instance Full With Persistence Config\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst cache_persis = new gcp.redis.Instance(\"cache-persis\", {\n    name: \"ha-memory-cache-persis\",\n    tier: \"STANDARD_HA\",\n    memorySizeGb: 1,\n    locationId: \"us-central1-a\",\n    alternativeLocationId: \"us-central1-f\",\n    persistenceConfig: {\n        persistenceMode: \"RDB\",\n        rdbSnapshotPeriod: \"TWELVE_HOURS\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ncache_persis = gcp.redis.Instance(\"cache-persis\",\n    name=\"ha-memory-cache-persis\",\n    tier=\"STANDARD_HA\",\n    memory_size_gb=1,\n    location_id=\"us-central1-a\",\n    alternative_location_id=\"us-central1-f\",\n    persistence_config={\n        \"persistence_mode\": \"RDB\",\n        \"rdb_snapshot_period\": \"TWELVE_HOURS\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var cache_persis = new Gcp.Redis.Instance(\"cache-persis\", new()\n    {\n        Name = \"ha-memory-cache-persis\",\n        Tier = \"STANDARD_HA\",\n        MemorySizeGb = 1,\n        LocationId = \"us-central1-a\",\n        AlternativeLocationId = \"us-central1-f\",\n        PersistenceConfig = new Gcp.Redis.Inputs.InstancePersistenceConfigArgs\n        {\n            PersistenceMode = \"RDB\",\n            RdbSnapshotPeriod = \"TWELVE_HOURS\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/redis\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := redis.NewInstance(ctx, \"cache-persis\", \u0026redis.InstanceArgs{\n\t\t\tName:                  pulumi.String(\"ha-memory-cache-persis\"),\n\t\t\tTier:                  pulumi.String(\"STANDARD_HA\"),\n\t\t\tMemorySizeGb:          pulumi.Int(1),\n\t\t\tLocationId:            pulumi.String(\"us-central1-a\"),\n\t\t\tAlternativeLocationId: pulumi.String(\"us-central1-f\"),\n\t\t\tPersistenceConfig: \u0026redis.InstancePersistenceConfigArgs{\n\t\t\t\tPersistenceMode:   pulumi.String(\"RDB\"),\n\t\t\t\tRdbSnapshotPeriod: pulumi.String(\"TWELVE_HOURS\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.redis.Instance;\nimport com.pulumi.gcp.redis.InstanceArgs;\nimport com.pulumi.gcp.redis.inputs.InstancePersistenceConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var cache_persis = new Instance(\"cache-persis\", InstanceArgs.builder()\n            .name(\"ha-memory-cache-persis\")\n            .tier(\"STANDARD_HA\")\n            .memorySizeGb(1)\n            .locationId(\"us-central1-a\")\n            .alternativeLocationId(\"us-central1-f\")\n            .persistenceConfig(InstancePersistenceConfigArgs.builder()\n                .persistenceMode(\"RDB\")\n                .rdbSnapshotPeriod(\"TWELVE_HOURS\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  cache-persis:\n    type: gcp:redis:Instance\n    properties:\n      name: ha-memory-cache-persis\n      tier: STANDARD_HA\n      memorySizeGb: 1\n      locationId: us-central1-a\n      alternativeLocationId: us-central1-f\n      persistenceConfig:\n        persistenceMode: RDB\n        rdbSnapshotPeriod: TWELVE_HOURS\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Redis Instance Private Service\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\n// This example assumes this network already exists.\n// The API creates a tenant network per network authorized for a\n// Redis instance and that network is not deleted when the user-created\n// network (authorized_network) is deleted, so this prevents issues\n// with tenant network quota.\n// If this network hasn't been created and you are using this example in your\n// config, add an additional network resource or change\n// this from \"data\"to \"resource\"\nconst redis_network = new gcp.compute.Network(\"redis-network\", {name: \"redis-test-network\"});\nconst serviceRange = new gcp.compute.GlobalAddress(\"service_range\", {\n    name: \"address\",\n    purpose: \"VPC_PEERING\",\n    addressType: \"INTERNAL\",\n    prefixLength: 16,\n    network: redis_network.id,\n});\nconst privateServiceConnection = new gcp.servicenetworking.Connection(\"private_service_connection\", {\n    network: redis_network.id,\n    service: \"servicenetworking.googleapis.com\",\n    reservedPeeringRanges: [serviceRange.name],\n});\nconst cache = new gcp.redis.Instance(\"cache\", {\n    name: \"private-cache\",\n    tier: \"STANDARD_HA\",\n    memorySizeGb: 1,\n    locationId: \"us-central1-a\",\n    alternativeLocationId: \"us-central1-f\",\n    authorizedNetwork: redis_network.id,\n    connectMode: \"PRIVATE_SERVICE_ACCESS\",\n    redisVersion: \"REDIS_4_0\",\n    displayName: \"Test Instance\",\n}, {\n    dependsOn: [privateServiceConnection],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\n# This example assumes this network already exists.\n# The API creates a tenant network per network authorized for a\n# Redis instance and that network is not deleted when the user-created\n# network (authorized_network) is deleted, so this prevents issues\n# with tenant network quota.\n# If this network hasn't been created and you are using this example in your\n# config, add an additional network resource or change\n# this from \"data\"to \"resource\"\nredis_network = gcp.compute.Network(\"redis-network\", name=\"redis-test-network\")\nservice_range = gcp.compute.GlobalAddress(\"service_range\",\n    name=\"address\",\n    purpose=\"VPC_PEERING\",\n    address_type=\"INTERNAL\",\n    prefix_length=16,\n    network=redis_network.id)\nprivate_service_connection = gcp.servicenetworking.Connection(\"private_service_connection\",\n    network=redis_network.id,\n    service=\"servicenetworking.googleapis.com\",\n    reserved_peering_ranges=[service_range.name])\ncache = gcp.redis.Instance(\"cache\",\n    name=\"private-cache\",\n    tier=\"STANDARD_HA\",\n    memory_size_gb=1,\n    location_id=\"us-central1-a\",\n    alternative_location_id=\"us-central1-f\",\n    authorized_network=redis_network.id,\n    connect_mode=\"PRIVATE_SERVICE_ACCESS\",\n    redis_version=\"REDIS_4_0\",\n    display_name=\"Test Instance\",\n    opts = pulumi.ResourceOptions(depends_on=[private_service_connection]))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    // This example assumes this network already exists.\n    // The API creates a tenant network per network authorized for a\n    // Redis instance and that network is not deleted when the user-created\n    // network (authorized_network) is deleted, so this prevents issues\n    // with tenant network quota.\n    // If this network hasn't been created and you are using this example in your\n    // config, add an additional network resource or change\n    // this from \"data\"to \"resource\"\n    var redis_network = new Gcp.Compute.Network(\"redis-network\", new()\n    {\n        Name = \"redis-test-network\",\n    });\n\n    var serviceRange = new Gcp.Compute.GlobalAddress(\"service_range\", new()\n    {\n        Name = \"address\",\n        Purpose = \"VPC_PEERING\",\n        AddressType = \"INTERNAL\",\n        PrefixLength = 16,\n        Network = redis_network.Id,\n    });\n\n    var privateServiceConnection = new Gcp.ServiceNetworking.Connection(\"private_service_connection\", new()\n    {\n        Network = redis_network.Id,\n        Service = \"servicenetworking.googleapis.com\",\n        ReservedPeeringRanges = new[]\n        {\n            serviceRange.Name,\n        },\n    });\n\n    var cache = new Gcp.Redis.Instance(\"cache\", new()\n    {\n        Name = \"private-cache\",\n        Tier = \"STANDARD_HA\",\n        MemorySizeGb = 1,\n        LocationId = \"us-central1-a\",\n        AlternativeLocationId = \"us-central1-f\",\n        AuthorizedNetwork = redis_network.Id,\n        ConnectMode = \"PRIVATE_SERVICE_ACCESS\",\n        RedisVersion = \"REDIS_4_0\",\n        DisplayName = \"Test Instance\",\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            privateServiceConnection,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/redis\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/servicenetworking\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t// This example assumes this network already exists.\n\t\t// The API creates a tenant network per network authorized for a\n\t\t// Redis instance and that network is not deleted when the user-created\n\t\t// network (authorized_network) is deleted, so this prevents issues\n\t\t// with tenant network quota.\n\t\t// If this network hasn't been created and you are using this example in your\n\t\t// config, add an additional network resource or change\n\t\t// this from \"data\"to \"resource\"\n\t\t_, err := compute.NewNetwork(ctx, \"redis-network\", \u0026compute.NetworkArgs{\n\t\t\tName: pulumi.String(\"redis-test-network\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tserviceRange, err := compute.NewGlobalAddress(ctx, \"service_range\", \u0026compute.GlobalAddressArgs{\n\t\t\tName:         pulumi.String(\"address\"),\n\t\t\tPurpose:      pulumi.String(\"VPC_PEERING\"),\n\t\t\tAddressType:  pulumi.String(\"INTERNAL\"),\n\t\t\tPrefixLength: pulumi.Int(16),\n\t\t\tNetwork:      redis_network.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tprivateServiceConnection, err := servicenetworking.NewConnection(ctx, \"private_service_connection\", \u0026servicenetworking.ConnectionArgs{\n\t\t\tNetwork: redis_network.ID(),\n\t\t\tService: pulumi.String(\"servicenetworking.googleapis.com\"),\n\t\t\tReservedPeeringRanges: pulumi.StringArray{\n\t\t\t\tserviceRange.Name,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = redis.NewInstance(ctx, \"cache\", \u0026redis.InstanceArgs{\n\t\t\tName:                  pulumi.String(\"private-cache\"),\n\t\t\tTier:                  pulumi.String(\"STANDARD_HA\"),\n\t\t\tMemorySizeGb:          pulumi.Int(1),\n\t\t\tLocationId:            pulumi.String(\"us-central1-a\"),\n\t\t\tAlternativeLocationId: pulumi.String(\"us-central1-f\"),\n\t\t\tAuthorizedNetwork:     redis_network.ID(),\n\t\t\tConnectMode:           pulumi.String(\"PRIVATE_SERVICE_ACCESS\"),\n\t\t\tRedisVersion:          pulumi.String(\"REDIS_4_0\"),\n\t\t\tDisplayName:           pulumi.String(\"Test Instance\"),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tprivateServiceConnection,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.GlobalAddress;\nimport com.pulumi.gcp.compute.GlobalAddressArgs;\nimport com.pulumi.gcp.servicenetworking.Connection;\nimport com.pulumi.gcp.servicenetworking.ConnectionArgs;\nimport com.pulumi.gcp.redis.Instance;\nimport com.pulumi.gcp.redis.InstanceArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        // This example assumes this network already exists.\n        // The API creates a tenant network per network authorized for a\n        // Redis instance and that network is not deleted when the user-created\n        // network (authorized_network) is deleted, so this prevents issues\n        // with tenant network quota.\n        // If this network hasn't been created and you are using this example in your\n        // config, add an additional network resource or change\n        // this from \"data\"to \"resource\"\n        var redis_network = new Network(\"redis-network\", NetworkArgs.builder()\n            .name(\"redis-test-network\")\n            .build());\n\n        var serviceRange = new GlobalAddress(\"serviceRange\", GlobalAddressArgs.builder()\n            .name(\"address\")\n            .purpose(\"VPC_PEERING\")\n            .addressType(\"INTERNAL\")\n            .prefixLength(16)\n            .network(redis_network.id())\n            .build());\n\n        var privateServiceConnection = new Connection(\"privateServiceConnection\", ConnectionArgs.builder()\n            .network(redis_network.id())\n            .service(\"servicenetworking.googleapis.com\")\n            .reservedPeeringRanges(serviceRange.name())\n            .build());\n\n        var cache = new Instance(\"cache\", InstanceArgs.builder()\n            .name(\"private-cache\")\n            .tier(\"STANDARD_HA\")\n            .memorySizeGb(1)\n            .locationId(\"us-central1-a\")\n            .alternativeLocationId(\"us-central1-f\")\n            .authorizedNetwork(redis_network.id())\n            .connectMode(\"PRIVATE_SERVICE_ACCESS\")\n            .redisVersion(\"REDIS_4_0\")\n            .displayName(\"Test Instance\")\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(privateServiceConnection)\n                .build());\n\n    }\n}\n```\n```yaml\nresources:\n  # This example assumes this network already exists.\n  # // The API creates a tenant network per network authorized for a\n  # // Redis instance and that network is not deleted when the user-created\n  # // network (authorized_network) is deleted, so this prevents issues\n  # // with tenant network quota.\n  # // If this network hasn't been created and you are using this example in your\n  # // config, add an additional network resource or change\n  # // this from \"data\"to \"resource\"\n  redis-network:\n    type: gcp:compute:Network\n    properties:\n      name: redis-test-network\n  serviceRange:\n    type: gcp:compute:GlobalAddress\n    name: service_range\n    properties:\n      name: address\n      purpose: VPC_PEERING\n      addressType: INTERNAL\n      prefixLength: 16\n      network: ${[\"redis-network\"].id}\n  privateServiceConnection:\n    type: gcp:servicenetworking:Connection\n    name: private_service_connection\n    properties:\n      network: ${[\"redis-network\"].id}\n      service: servicenetworking.googleapis.com\n      reservedPeeringRanges:\n        - ${serviceRange.name}\n  cache:\n    type: gcp:redis:Instance\n    properties:\n      name: private-cache\n      tier: STANDARD_HA\n      memorySizeGb: 1\n      locationId: us-central1-a\n      alternativeLocationId: us-central1-f\n      authorizedNetwork: ${[\"redis-network\"].id}\n      connectMode: PRIVATE_SERVICE_ACCESS\n      redisVersion: REDIS_4_0\n      displayName: Test Instance\n    options:\n      dependsOn:\n        - ${privateServiceConnection}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Redis Instance Mrr\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\n// This example assumes this network already exists.\n// The API creates a tenant network per network authorized for a\n// Redis instance and that network is not deleted when the user-created\n// network (authorized_network) is deleted, so this prevents issues\n// with tenant network quota.\n// If this network hasn't been created and you are using this example in your\n// config, add an additional network resource or change\n// this from \"data\"to \"resource\"\nconst redis_network = gcp.compute.getNetwork({\n    name: \"redis-test-network\",\n});\nconst cache = new gcp.redis.Instance(\"cache\", {\n    name: \"mrr-memory-cache\",\n    tier: \"STANDARD_HA\",\n    memorySizeGb: 5,\n    locationId: \"us-central1-a\",\n    alternativeLocationId: \"us-central1-f\",\n    authorizedNetwork: redis_network.then(redis_network =\u003e redis_network.id),\n    redisVersion: \"REDIS_6_X\",\n    displayName: \"Terraform Test Instance\",\n    reservedIpRange: \"192.168.0.0/28\",\n    replicaCount: 5,\n    readReplicasMode: \"READ_REPLICAS_ENABLED\",\n    labels: {\n        my_key: \"my_val\",\n        other_key: \"other_val\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\n# This example assumes this network already exists.\n# The API creates a tenant network per network authorized for a\n# Redis instance and that network is not deleted when the user-created\n# network (authorized_network) is deleted, so this prevents issues\n# with tenant network quota.\n# If this network hasn't been created and you are using this example in your\n# config, add an additional network resource or change\n# this from \"data\"to \"resource\"\nredis_network = gcp.compute.get_network(name=\"redis-test-network\")\ncache = gcp.redis.Instance(\"cache\",\n    name=\"mrr-memory-cache\",\n    tier=\"STANDARD_HA\",\n    memory_size_gb=5,\n    location_id=\"us-central1-a\",\n    alternative_location_id=\"us-central1-f\",\n    authorized_network=redis_network.id,\n    redis_version=\"REDIS_6_X\",\n    display_name=\"Terraform Test Instance\",\n    reserved_ip_range=\"192.168.0.0/28\",\n    replica_count=5,\n    read_replicas_mode=\"READ_REPLICAS_ENABLED\",\n    labels={\n        \"my_key\": \"my_val\",\n        \"other_key\": \"other_val\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    // This example assumes this network already exists.\n    // The API creates a tenant network per network authorized for a\n    // Redis instance and that network is not deleted when the user-created\n    // network (authorized_network) is deleted, so this prevents issues\n    // with tenant network quota.\n    // If this network hasn't been created and you are using this example in your\n    // config, add an additional network resource or change\n    // this from \"data\"to \"resource\"\n    var redis_network = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"redis-test-network\",\n    });\n\n    var cache = new Gcp.Redis.Instance(\"cache\", new()\n    {\n        Name = \"mrr-memory-cache\",\n        Tier = \"STANDARD_HA\",\n        MemorySizeGb = 5,\n        LocationId = \"us-central1-a\",\n        AlternativeLocationId = \"us-central1-f\",\n        AuthorizedNetwork = redis_network.Apply(redis_network =\u003e redis_network.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n        RedisVersion = \"REDIS_6_X\",\n        DisplayName = \"Terraform Test Instance\",\n        ReservedIpRange = \"192.168.0.0/28\",\n        ReplicaCount = 5,\n        ReadReplicasMode = \"READ_REPLICAS_ENABLED\",\n        Labels = \n        {\n            { \"my_key\", \"my_val\" },\n            { \"other_key\", \"other_val\" },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/redis\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t// This example assumes this network already exists.\n\t\t// The API creates a tenant network per network authorized for a\n\t\t// Redis instance and that network is not deleted when the user-created\n\t\t// network (authorized_network) is deleted, so this prevents issues\n\t\t// with tenant network quota.\n\t\t// If this network hasn't been created and you are using this example in your\n\t\t// config, add an additional network resource or change\n\t\t// this from \"data\"to \"resource\"\n\t\tredis_network, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName: \"redis-test-network\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = redis.NewInstance(ctx, \"cache\", \u0026redis.InstanceArgs{\n\t\t\tName:                  pulumi.String(\"mrr-memory-cache\"),\n\t\t\tTier:                  pulumi.String(\"STANDARD_HA\"),\n\t\t\tMemorySizeGb:          pulumi.Int(5),\n\t\t\tLocationId:            pulumi.String(\"us-central1-a\"),\n\t\t\tAlternativeLocationId: pulumi.String(\"us-central1-f\"),\n\t\t\tAuthorizedNetwork:     pulumi.String(redis_network.Id),\n\t\t\tRedisVersion:          pulumi.String(\"REDIS_6_X\"),\n\t\t\tDisplayName:           pulumi.String(\"Terraform Test Instance\"),\n\t\t\tReservedIpRange:       pulumi.String(\"192.168.0.0/28\"),\n\t\t\tReplicaCount:          pulumi.Int(5),\n\t\t\tReadReplicasMode:      pulumi.String(\"READ_REPLICAS_ENABLED\"),\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"my_key\":    pulumi.String(\"my_val\"),\n\t\t\t\t\"other_key\": pulumi.String(\"other_val\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.redis.Instance;\nimport com.pulumi.gcp.redis.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        // This example assumes this network already exists.\n        // The API creates a tenant network per network authorized for a\n        // Redis instance and that network is not deleted when the user-created\n        // network (authorized_network) is deleted, so this prevents issues\n        // with tenant network quota.\n        // If this network hasn't been created and you are using this example in your\n        // config, add an additional network resource or change\n        // this from \"data\"to \"resource\"\n        final var redis-network = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"redis-test-network\")\n            .build());\n\n        var cache = new Instance(\"cache\", InstanceArgs.builder()\n            .name(\"mrr-memory-cache\")\n            .tier(\"STANDARD_HA\")\n            .memorySizeGb(5)\n            .locationId(\"us-central1-a\")\n            .alternativeLocationId(\"us-central1-f\")\n            .authorizedNetwork(redis_network.id())\n            .redisVersion(\"REDIS_6_X\")\n            .displayName(\"Terraform Test Instance\")\n            .reservedIpRange(\"192.168.0.0/28\")\n            .replicaCount(5)\n            .readReplicasMode(\"READ_REPLICAS_ENABLED\")\n            .labels(Map.ofEntries(\n                Map.entry(\"my_key\", \"my_val\"),\n                Map.entry(\"other_key\", \"other_val\")\n            ))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  cache:\n    type: gcp:redis:Instance\n    properties:\n      name: mrr-memory-cache\n      tier: STANDARD_HA\n      memorySizeGb: 5\n      locationId: us-central1-a\n      alternativeLocationId: us-central1-f\n      authorizedNetwork: ${[\"redis-network\"].id}\n      redisVersion: REDIS_6_X\n      displayName: Terraform Test Instance\n      reservedIpRange: 192.168.0.0/28\n      replicaCount: 5\n      readReplicasMode: READ_REPLICAS_ENABLED\n      labels:\n        my_key: my_val\n        other_key: other_val\nvariables:\n  # This example assumes this network already exists.\n  # // The API creates a tenant network per network authorized for a\n  # // Redis instance and that network is not deleted when the user-created\n  # // network (authorized_network) is deleted, so this prevents issues\n  # // with tenant network quota.\n  # // If this network hasn't been created and you are using this example in your\n  # // config, add an additional network resource or change\n  # // this from \"data\"to \"resource\"\n  redis-network:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: redis-test-network\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Redis Instance Cmek\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst redisKeyring = new gcp.kms.KeyRing(\"redis_keyring\", {\n    name: \"redis-keyring\",\n    location: \"us-central1\",\n});\nconst redisKey = new gcp.kms.CryptoKey(\"redis_key\", {\n    name: \"redis-key\",\n    keyRing: redisKeyring.id,\n});\n// This example assumes this network already exists.\n// The API creates a tenant network per network authorized for a\n// Redis instance and that network is not deleted when the user-created\n// network (authorized_network) is deleted, so this prevents issues\n// with tenant network quota.\n// If this network hasn't been created and you are using this example in your\n// config, add an additional network resource or change\n// this from \"data\"to \"resource\"\nconst redis_network = gcp.compute.getNetwork({\n    name: \"redis-test-network\",\n});\nconst cache = new gcp.redis.Instance(\"cache\", {\n    name: \"cmek-memory-cache\",\n    tier: \"STANDARD_HA\",\n    memorySizeGb: 1,\n    locationId: \"us-central1-a\",\n    alternativeLocationId: \"us-central1-f\",\n    authorizedNetwork: redis_network.then(redis_network =\u003e redis_network.id),\n    redisVersion: \"REDIS_6_X\",\n    displayName: \"Terraform Test Instance\",\n    reservedIpRange: \"192.168.0.0/29\",\n    labels: {\n        my_key: \"my_val\",\n        other_key: \"other_val\",\n    },\n    customerManagedKey: redisKey.id,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nredis_keyring = gcp.kms.KeyRing(\"redis_keyring\",\n    name=\"redis-keyring\",\n    location=\"us-central1\")\nredis_key = gcp.kms.CryptoKey(\"redis_key\",\n    name=\"redis-key\",\n    key_ring=redis_keyring.id)\n# This example assumes this network already exists.\n# The API creates a tenant network per network authorized for a\n# Redis instance and that network is not deleted when the user-created\n# network (authorized_network) is deleted, so this prevents issues\n# with tenant network quota.\n# If this network hasn't been created and you are using this example in your\n# config, add an additional network resource or change\n# this from \"data\"to \"resource\"\nredis_network = gcp.compute.get_network(name=\"redis-test-network\")\ncache = gcp.redis.Instance(\"cache\",\n    name=\"cmek-memory-cache\",\n    tier=\"STANDARD_HA\",\n    memory_size_gb=1,\n    location_id=\"us-central1-a\",\n    alternative_location_id=\"us-central1-f\",\n    authorized_network=redis_network.id,\n    redis_version=\"REDIS_6_X\",\n    display_name=\"Terraform Test Instance\",\n    reserved_ip_range=\"192.168.0.0/29\",\n    labels={\n        \"my_key\": \"my_val\",\n        \"other_key\": \"other_val\",\n    },\n    customer_managed_key=redis_key.id)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var redisKeyring = new Gcp.Kms.KeyRing(\"redis_keyring\", new()\n    {\n        Name = \"redis-keyring\",\n        Location = \"us-central1\",\n    });\n\n    var redisKey = new Gcp.Kms.CryptoKey(\"redis_key\", new()\n    {\n        Name = \"redis-key\",\n        KeyRing = redisKeyring.Id,\n    });\n\n    // This example assumes this network already exists.\n    // The API creates a tenant network per network authorized for a\n    // Redis instance and that network is not deleted when the user-created\n    // network (authorized_network) is deleted, so this prevents issues\n    // with tenant network quota.\n    // If this network hasn't been created and you are using this example in your\n    // config, add an additional network resource or change\n    // this from \"data\"to \"resource\"\n    var redis_network = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"redis-test-network\",\n    });\n\n    var cache = new Gcp.Redis.Instance(\"cache\", new()\n    {\n        Name = \"cmek-memory-cache\",\n        Tier = \"STANDARD_HA\",\n        MemorySizeGb = 1,\n        LocationId = \"us-central1-a\",\n        AlternativeLocationId = \"us-central1-f\",\n        AuthorizedNetwork = redis_network.Apply(redis_network =\u003e redis_network.Apply(getNetworkResult =\u003e getNetworkResult.Id)),\n        RedisVersion = \"REDIS_6_X\",\n        DisplayName = \"Terraform Test Instance\",\n        ReservedIpRange = \"192.168.0.0/29\",\n        Labels = \n        {\n            { \"my_key\", \"my_val\" },\n            { \"other_key\", \"other_val\" },\n        },\n        CustomerManagedKey = redisKey.Id,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/kms\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/redis\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tredisKeyring, err := kms.NewKeyRing(ctx, \"redis_keyring\", \u0026kms.KeyRingArgs{\n\t\t\tName:     pulumi.String(\"redis-keyring\"),\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tredisKey, err := kms.NewCryptoKey(ctx, \"redis_key\", \u0026kms.CryptoKeyArgs{\n\t\t\tName:    pulumi.String(\"redis-key\"),\n\t\t\tKeyRing: redisKeyring.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// This example assumes this network already exists.\n\t\t// The API creates a tenant network per network authorized for a\n\t\t// Redis instance and that network is not deleted when the user-created\n\t\t// network (authorized_network) is deleted, so this prevents issues\n\t\t// with tenant network quota.\n\t\t// If this network hasn't been created and you are using this example in your\n\t\t// config, add an additional network resource or change\n\t\t// this from \"data\"to \"resource\"\n\t\tredis_network, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName: \"redis-test-network\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = redis.NewInstance(ctx, \"cache\", \u0026redis.InstanceArgs{\n\t\t\tName:                  pulumi.String(\"cmek-memory-cache\"),\n\t\t\tTier:                  pulumi.String(\"STANDARD_HA\"),\n\t\t\tMemorySizeGb:          pulumi.Int(1),\n\t\t\tLocationId:            pulumi.String(\"us-central1-a\"),\n\t\t\tAlternativeLocationId: pulumi.String(\"us-central1-f\"),\n\t\t\tAuthorizedNetwork:     pulumi.String(redis_network.Id),\n\t\t\tRedisVersion:          pulumi.String(\"REDIS_6_X\"),\n\t\t\tDisplayName:           pulumi.String(\"Terraform Test Instance\"),\n\t\t\tReservedIpRange:       pulumi.String(\"192.168.0.0/29\"),\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"my_key\":    pulumi.String(\"my_val\"),\n\t\t\t\t\"other_key\": pulumi.String(\"other_val\"),\n\t\t\t},\n\t\t\tCustomerManagedKey: redisKey.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.kms.KeyRing;\nimport com.pulumi.gcp.kms.KeyRingArgs;\nimport com.pulumi.gcp.kms.CryptoKey;\nimport com.pulumi.gcp.kms.CryptoKeyArgs;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport com.pulumi.gcp.redis.Instance;\nimport com.pulumi.gcp.redis.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var redisKeyring = new KeyRing(\"redisKeyring\", KeyRingArgs.builder()\n            .name(\"redis-keyring\")\n            .location(\"us-central1\")\n            .build());\n\n        var redisKey = new CryptoKey(\"redisKey\", CryptoKeyArgs.builder()\n            .name(\"redis-key\")\n            .keyRing(redisKeyring.id())\n            .build());\n\n        // This example assumes this network already exists.\n        // The API creates a tenant network per network authorized for a\n        // Redis instance and that network is not deleted when the user-created\n        // network (authorized_network) is deleted, so this prevents issues\n        // with tenant network quota.\n        // If this network hasn't been created and you are using this example in your\n        // config, add an additional network resource or change\n        // this from \"data\"to \"resource\"\n        final var redis-network = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"redis-test-network\")\n            .build());\n\n        var cache = new Instance(\"cache\", InstanceArgs.builder()\n            .name(\"cmek-memory-cache\")\n            .tier(\"STANDARD_HA\")\n            .memorySizeGb(1)\n            .locationId(\"us-central1-a\")\n            .alternativeLocationId(\"us-central1-f\")\n            .authorizedNetwork(redis_network.id())\n            .redisVersion(\"REDIS_6_X\")\n            .displayName(\"Terraform Test Instance\")\n            .reservedIpRange(\"192.168.0.0/29\")\n            .labels(Map.ofEntries(\n                Map.entry(\"my_key\", \"my_val\"),\n                Map.entry(\"other_key\", \"other_val\")\n            ))\n            .customerManagedKey(redisKey.id())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  cache:\n    type: gcp:redis:Instance\n    properties:\n      name: cmek-memory-cache\n      tier: STANDARD_HA\n      memorySizeGb: 1\n      locationId: us-central1-a\n      alternativeLocationId: us-central1-f\n      authorizedNetwork: ${[\"redis-network\"].id}\n      redisVersion: REDIS_6_X\n      displayName: Terraform Test Instance\n      reservedIpRange: 192.168.0.0/29\n      labels:\n        my_key: my_val\n        other_key: other_val\n      customerManagedKey: ${redisKey.id}\n  redisKeyring:\n    type: gcp:kms:KeyRing\n    name: redis_keyring\n    properties:\n      name: redis-keyring\n      location: us-central1\n  redisKey:\n    type: gcp:kms:CryptoKey\n    name: redis_key\n    properties:\n      name: redis-key\n      keyRing: ${redisKeyring.id}\nvariables:\n  # This example assumes this network already exists.\n  # // The API creates a tenant network per network authorized for a\n  # // Redis instance and that network is not deleted when the user-created\n  # // network (authorized_network) is deleted, so this prevents issues\n  # // with tenant network quota.\n  # // If this network hasn't been created and you are using this example in your\n  # // config, add an additional network resource or change\n  # // this from \"data\"to \"resource\"\n  redis-network:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: redis-test-network\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nInstance can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{region}}/instances/{{name}}`\n\n* `{{project}}/{{region}}/{{name}}`\n\n* `{{region}}/{{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, Instance can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:redis/instance:Instance default projects/{{project}}/locations/{{region}}/instances/{{name}}\n```\n\n```sh\n$ pulumi import gcp:redis/instance:Instance default {{project}}/{{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:redis/instance:Instance default {{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:redis/instance:Instance default {{name}}\n```\n\n",
             "properties": {
                 "alternativeLocationId": {
                     "type": "string",
@@ -266264,7 +266264,7 @@
             }
         },
         "gcp:securitycenter/instanceIamBinding:InstanceIamBinding": {
-            "description": "Represents a Data Fusion instance.\n\n\nTo get more information about Instance, see:\n\n* [API documentation](https://cloud.google.com/data-fusion/docs/reference/rest/v1beta1/projects.locations.instances)\n* How-to Guides\n    * [Official Documentation](https://cloud.google.com/data-fusion/docs/)\n\n## Example Usage\n\n### Data Fusion Instance Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst basicInstance = new gcp.datafusion.Instance(\"basic_instance\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nbasic_instance = gcp.datafusion.Instance(\"basic_instance\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicInstance = new Gcp.DataFusion.Instance(\"basic_instance\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"basic_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var basicInstance = new Instance(\"basicInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  basicInstance:\n    type: gcp:datafusion:Instance\n    name: basic_instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Full\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.appengine.getDefaultServiceAccount({});\nconst network = new gcp.compute.Network(\"network\", {name: \"datafusion-full-network\"});\nconst privateIpAlloc = new gcp.compute.GlobalAddress(\"private_ip_alloc\", {\n    name: \"datafusion-ip-alloc\",\n    addressType: \"INTERNAL\",\n    purpose: \"VPC_PEERING\",\n    prefixLength: 22,\n    network: network.id,\n});\nconst extendedInstance = new gcp.datafusion.Instance(\"extended_instance\", {\n    name: \"my-instance\",\n    description: \"My Data Fusion instance\",\n    displayName: \"My Data Fusion instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    enableStackdriverLogging: true,\n    enableStackdriverMonitoring: true,\n    privateInstance: true,\n    dataprocServiceAccount: _default.then(_default =\u003e _default.email),\n    labels: {\n        example_key: \"example_value\",\n    },\n    networkConfig: {\n        network: \"default\",\n        ipAllocation: pulumi.interpolate`${privateIpAlloc.address}/${privateIpAlloc.prefixLength}`,\n    },\n    accelerators: [{\n        acceleratorType: \"CDC\",\n        state: \"ENABLED\",\n    }],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.appengine.get_default_service_account()\nnetwork = gcp.compute.Network(\"network\", name=\"datafusion-full-network\")\nprivate_ip_alloc = gcp.compute.GlobalAddress(\"private_ip_alloc\",\n    name=\"datafusion-ip-alloc\",\n    address_type=\"INTERNAL\",\n    purpose=\"VPC_PEERING\",\n    prefix_length=22,\n    network=network.id)\nextended_instance = gcp.datafusion.Instance(\"extended_instance\",\n    name=\"my-instance\",\n    description=\"My Data Fusion instance\",\n    display_name=\"My Data Fusion instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    enable_stackdriver_logging=True,\n    enable_stackdriver_monitoring=True,\n    private_instance=True,\n    dataproc_service_account=default.email,\n    labels={\n        \"example_key\": \"example_value\",\n    },\n    network_config={\n        \"network\": \"default\",\n        \"ip_allocation\": pulumi.Output.all(\n            address=private_ip_alloc.address,\n            prefix_length=private_ip_alloc.prefix_length\n).apply(lambda resolved_outputs: f\"{resolved_outputs['address']}/{resolved_outputs['prefix_length']}\")\n,\n    },\n    accelerators=[{\n        \"accelerator_type\": \"CDC\",\n        \"state\": \"ENABLED\",\n    }])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.AppEngine.GetDefaultServiceAccount.Invoke();\n\n    var network = new Gcp.Compute.Network(\"network\", new()\n    {\n        Name = \"datafusion-full-network\",\n    });\n\n    var privateIpAlloc = new Gcp.Compute.GlobalAddress(\"private_ip_alloc\", new()\n    {\n        Name = \"datafusion-ip-alloc\",\n        AddressType = \"INTERNAL\",\n        Purpose = \"VPC_PEERING\",\n        PrefixLength = 22,\n        Network = network.Id,\n    });\n\n    var extendedInstance = new Gcp.DataFusion.Instance(\"extended_instance\", new()\n    {\n        Name = \"my-instance\",\n        Description = \"My Data Fusion instance\",\n        DisplayName = \"My Data Fusion instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        EnableStackdriverLogging = true,\n        EnableStackdriverMonitoring = true,\n        PrivateInstance = true,\n        DataprocServiceAccount = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Email)),\n        Labels = \n        {\n            { \"example_key\", \"example_value\" },\n        },\n        NetworkConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigArgs\n        {\n            Network = \"default\",\n            IpAllocation = Output.Tuple(privateIpAlloc.Address, privateIpAlloc.PrefixLength).Apply(values =\u003e\n            {\n                var address = values.Item1;\n                var prefixLength = values.Item2;\n                return $\"{address}/{prefixLength}\";\n            }),\n        },\n        Accelerators = new[]\n        {\n            new Gcp.DataFusion.Inputs.InstanceAcceleratorArgs\n            {\n                AcceleratorType = \"CDC\",\n                State = \"ENABLED\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/appengine\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := appengine.GetDefaultServiceAccount(ctx, \u0026appengine.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tnetwork, err := compute.NewNetwork(ctx, \"network\", \u0026compute.NetworkArgs{\n\t\t\tName: pulumi.String(\"datafusion-full-network\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tprivateIpAlloc, err := compute.NewGlobalAddress(ctx, \"private_ip_alloc\", \u0026compute.GlobalAddressArgs{\n\t\t\tName:         pulumi.String(\"datafusion-ip-alloc\"),\n\t\t\tAddressType:  pulumi.String(\"INTERNAL\"),\n\t\t\tPurpose:      pulumi.String(\"VPC_PEERING\"),\n\t\t\tPrefixLength: pulumi.Int(22),\n\t\t\tNetwork:      network.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"extended_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:                        pulumi.String(\"my-instance\"),\n\t\t\tDescription:                 pulumi.String(\"My Data Fusion instance\"),\n\t\t\tDisplayName:                 pulumi.String(\"My Data Fusion instance\"),\n\t\t\tRegion:                      pulumi.String(\"us-central1\"),\n\t\t\tType:                        pulumi.String(\"BASIC\"),\n\t\t\tEnableStackdriverLogging:    pulumi.Bool(true),\n\t\t\tEnableStackdriverMonitoring: pulumi.Bool(true),\n\t\t\tPrivateInstance:             pulumi.Bool(true),\n\t\t\tDataprocServiceAccount:      pulumi.String(_default.Email),\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"example_key\": pulumi.String(\"example_value\"),\n\t\t\t},\n\t\t\tNetworkConfig: \u0026datafusion.InstanceNetworkConfigArgs{\n\t\t\t\tNetwork: pulumi.String(\"default\"),\n\t\t\t\tIpAllocation: pulumi.All(privateIpAlloc.Address, privateIpAlloc.PrefixLength).ApplyT(func(_args []interface{}) (string, error) {\n\t\t\t\t\taddress := _args[0].(string)\n\t\t\t\t\tprefixLength := _args[1].(int)\n\t\t\t\t\treturn fmt.Sprintf(\"%v/%v\", address, prefixLength), nil\n\t\t\t\t}).(pulumi.StringOutput),\n\t\t\t},\n\t\t\tAccelerators: datafusion.InstanceAcceleratorArray{\n\t\t\t\t\u0026datafusion.InstanceAcceleratorArgs{\n\t\t\t\t\tAcceleratorType: pulumi.String(\"CDC\"),\n\t\t\t\t\tState:           pulumi.String(\"ENABLED\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.appengine.AppengineFunctions;\nimport com.pulumi.gcp.appengine.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.GlobalAddress;\nimport com.pulumi.gcp.compute.GlobalAddressArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceAcceleratorArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = AppengineFunctions.getDefaultServiceAccount();\n\n        var network = new Network(\"network\", NetworkArgs.builder()\n            .name(\"datafusion-full-network\")\n            .build());\n\n        var privateIpAlloc = new GlobalAddress(\"privateIpAlloc\", GlobalAddressArgs.builder()\n            .name(\"datafusion-ip-alloc\")\n            .addressType(\"INTERNAL\")\n            .purpose(\"VPC_PEERING\")\n            .prefixLength(22)\n            .network(network.id())\n            .build());\n\n        var extendedInstance = new Instance(\"extendedInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .description(\"My Data Fusion instance\")\n            .displayName(\"My Data Fusion instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .enableStackdriverLogging(true)\n            .enableStackdriverMonitoring(true)\n            .privateInstance(true)\n            .dataprocServiceAccount(default_.email())\n            .labels(Map.of(\"example_key\", \"example_value\"))\n            .networkConfig(InstanceNetworkConfigArgs.builder()\n                .network(\"default\")\n                .ipAllocation(Output.tuple(privateIpAlloc.address(), privateIpAlloc.prefixLength()).applyValue(values -\u003e {\n                    var address = values.t1;\n                    var prefixLength = values.t2;\n                    return String.format(\"%s/%s\", address,prefixLength);\n                }))\n                .build())\n            .accelerators(InstanceAcceleratorArgs.builder()\n                .acceleratorType(\"CDC\")\n                .state(\"ENABLED\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  extendedInstance:\n    type: gcp:datafusion:Instance\n    name: extended_instance\n    properties:\n      name: my-instance\n      description: My Data Fusion instance\n      displayName: My Data Fusion instance\n      region: us-central1\n      type: BASIC\n      enableStackdriverLogging: true\n      enableStackdriverMonitoring: true\n      privateInstance: true\n      dataprocServiceAccount: ${default.email}\n      labels:\n        example_key: example_value\n      networkConfig:\n        network: default\n        ipAllocation: ${privateIpAlloc.address}/${privateIpAlloc.prefixLength}\n      accelerators:\n        - acceleratorType: CDC\n          state: ENABLED\n  network:\n    type: gcp:compute:Network\n    properties:\n      name: datafusion-full-network\n  privateIpAlloc:\n    type: gcp:compute:GlobalAddress\n    name: private_ip_alloc\n    properties:\n      name: datafusion-ip-alloc\n      addressType: INTERNAL\n      purpose: VPC_PEERING\n      prefixLength: 22\n      network: ${network.id}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:appengine:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Psc\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst psc = new gcp.compute.Network(\"psc\", {\n    name: \"datafusion-psc-network\",\n    autoCreateSubnetworks: false,\n});\nconst pscSubnetwork = new gcp.compute.Subnetwork(\"psc\", {\n    name: \"datafusion-psc-subnet\",\n    region: \"us-central1\",\n    network: psc.id,\n    ipCidrRange: \"10.0.0.0/16\",\n});\nconst pscNetworkAttachment = new gcp.compute.NetworkAttachment(\"psc\", {\n    name: \"datafusion-psc-attachment\",\n    region: \"us-central1\",\n    connectionPreference: \"ACCEPT_AUTOMATIC\",\n    subnetworks: [pscSubnetwork.selfLink],\n});\nconst pscInstance = new gcp.datafusion.Instance(\"psc_instance\", {\n    name: \"psc-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    privateInstance: true,\n    networkConfig: {\n        connectionType: \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n        privateServiceConnectConfig: {\n            networkAttachment: pscNetworkAttachment.id,\n            unreachableCidrBlock: \"192.168.0.0/25\",\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\npsc = gcp.compute.Network(\"psc\",\n    name=\"datafusion-psc-network\",\n    auto_create_subnetworks=False)\npsc_subnetwork = gcp.compute.Subnetwork(\"psc\",\n    name=\"datafusion-psc-subnet\",\n    region=\"us-central1\",\n    network=psc.id,\n    ip_cidr_range=\"10.0.0.0/16\")\npsc_network_attachment = gcp.compute.NetworkAttachment(\"psc\",\n    name=\"datafusion-psc-attachment\",\n    region=\"us-central1\",\n    connection_preference=\"ACCEPT_AUTOMATIC\",\n    subnetworks=[psc_subnetwork.self_link])\npsc_instance = gcp.datafusion.Instance(\"psc_instance\",\n    name=\"psc-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    private_instance=True,\n    network_config={\n        \"connection_type\": \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n        \"private_service_connect_config\": {\n            \"network_attachment\": psc_network_attachment.id,\n            \"unreachable_cidr_block\": \"192.168.0.0/25\",\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var psc = new Gcp.Compute.Network(\"psc\", new()\n    {\n        Name = \"datafusion-psc-network\",\n        AutoCreateSubnetworks = false,\n    });\n\n    var pscSubnetwork = new Gcp.Compute.Subnetwork(\"psc\", new()\n    {\n        Name = \"datafusion-psc-subnet\",\n        Region = \"us-central1\",\n        Network = psc.Id,\n        IpCidrRange = \"10.0.0.0/16\",\n    });\n\n    var pscNetworkAttachment = new Gcp.Compute.NetworkAttachment(\"psc\", new()\n    {\n        Name = \"datafusion-psc-attachment\",\n        Region = \"us-central1\",\n        ConnectionPreference = \"ACCEPT_AUTOMATIC\",\n        Subnetworks = new[]\n        {\n            pscSubnetwork.SelfLink,\n        },\n    });\n\n    var pscInstance = new Gcp.DataFusion.Instance(\"psc_instance\", new()\n    {\n        Name = \"psc-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        PrivateInstance = true,\n        NetworkConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigArgs\n        {\n            ConnectionType = \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n            PrivateServiceConnectConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigPrivateServiceConnectConfigArgs\n            {\n                NetworkAttachment = pscNetworkAttachment.Id,\n                UnreachableCidrBlock = \"192.168.0.0/25\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tpsc, err := compute.NewNetwork(ctx, \"psc\", \u0026compute.NetworkArgs{\n\t\t\tName:                  pulumi.String(\"datafusion-psc-network\"),\n\t\t\tAutoCreateSubnetworks: pulumi.Bool(false),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tpscSubnetwork, err := compute.NewSubnetwork(ctx, \"psc\", \u0026compute.SubnetworkArgs{\n\t\t\tName:        pulumi.String(\"datafusion-psc-subnet\"),\n\t\t\tRegion:      pulumi.String(\"us-central1\"),\n\t\t\tNetwork:     psc.ID(),\n\t\t\tIpCidrRange: pulumi.String(\"10.0.0.0/16\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tpscNetworkAttachment, err := compute.NewNetworkAttachment(ctx, \"psc\", \u0026compute.NetworkAttachmentArgs{\n\t\t\tName:                 pulumi.String(\"datafusion-psc-attachment\"),\n\t\t\tRegion:               pulumi.String(\"us-central1\"),\n\t\t\tConnectionPreference: pulumi.String(\"ACCEPT_AUTOMATIC\"),\n\t\t\tSubnetworks: pulumi.StringArray{\n\t\t\t\tpscSubnetwork.SelfLink,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"psc_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:            pulumi.String(\"psc-instance\"),\n\t\t\tRegion:          pulumi.String(\"us-central1\"),\n\t\t\tType:            pulumi.String(\"BASIC\"),\n\t\t\tPrivateInstance: pulumi.Bool(true),\n\t\t\tNetworkConfig: \u0026datafusion.InstanceNetworkConfigArgs{\n\t\t\t\tConnectionType: pulumi.String(\"PRIVATE_SERVICE_CONNECT_INTERFACES\"),\n\t\t\t\tPrivateServiceConnectConfig: \u0026datafusion.InstanceNetworkConfigPrivateServiceConnectConfigArgs{\n\t\t\t\t\tNetworkAttachment:    pscNetworkAttachment.ID(),\n\t\t\t\t\tUnreachableCidrBlock: pulumi.String(\"192.168.0.0/25\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.Subnetwork;\nimport com.pulumi.gcp.compute.SubnetworkArgs;\nimport com.pulumi.gcp.compute.NetworkAttachment;\nimport com.pulumi.gcp.compute.NetworkAttachmentArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigPrivateServiceConnectConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var psc = new Network(\"psc\", NetworkArgs.builder()\n            .name(\"datafusion-psc-network\")\n            .autoCreateSubnetworks(false)\n            .build());\n\n        var pscSubnetwork = new Subnetwork(\"pscSubnetwork\", SubnetworkArgs.builder()\n            .name(\"datafusion-psc-subnet\")\n            .region(\"us-central1\")\n            .network(psc.id())\n            .ipCidrRange(\"10.0.0.0/16\")\n            .build());\n\n        var pscNetworkAttachment = new NetworkAttachment(\"pscNetworkAttachment\", NetworkAttachmentArgs.builder()\n            .name(\"datafusion-psc-attachment\")\n            .region(\"us-central1\")\n            .connectionPreference(\"ACCEPT_AUTOMATIC\")\n            .subnetworks(pscSubnetwork.selfLink())\n            .build());\n\n        var pscInstance = new Instance(\"pscInstance\", InstanceArgs.builder()\n            .name(\"psc-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .privateInstance(true)\n            .networkConfig(InstanceNetworkConfigArgs.builder()\n                .connectionType(\"PRIVATE_SERVICE_CONNECT_INTERFACES\")\n                .privateServiceConnectConfig(InstanceNetworkConfigPrivateServiceConnectConfigArgs.builder()\n                    .networkAttachment(pscNetworkAttachment.id())\n                    .unreachableCidrBlock(\"192.168.0.0/25\")\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  pscInstance:\n    type: gcp:datafusion:Instance\n    name: psc_instance\n    properties:\n      name: psc-instance\n      region: us-central1\n      type: BASIC\n      privateInstance: true\n      networkConfig:\n        connectionType: PRIVATE_SERVICE_CONNECT_INTERFACES\n        privateServiceConnectConfig:\n          networkAttachment: ${pscNetworkAttachment.id}\n          unreachableCidrBlock: 192.168.0.0/25\n  psc:\n    type: gcp:compute:Network\n    properties:\n      name: datafusion-psc-network\n      autoCreateSubnetworks: false\n  pscSubnetwork:\n    type: gcp:compute:Subnetwork\n    name: psc\n    properties:\n      name: datafusion-psc-subnet\n      region: us-central1\n      network: ${psc.id}\n      ipCidrRange: 10.0.0.0/16\n  pscNetworkAttachment:\n    type: gcp:compute:NetworkAttachment\n    name: psc\n    properties:\n      name: datafusion-psc-attachment\n      region: us-central1\n      connectionPreference: ACCEPT_AUTOMATIC\n      subnetworks:\n        - ${pscSubnetwork.selfLink}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Cmek\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst keyRing = new gcp.kms.KeyRing(\"key_ring\", {\n    name: \"my-instance\",\n    location: \"us-central1\",\n});\nconst cryptoKey = new gcp.kms.CryptoKey(\"crypto_key\", {\n    name: \"my-instance\",\n    keyRing: keyRing.id,\n});\nconst project = gcp.organizations.getProject({});\nconst cryptoKeyMember = new gcp.kms.CryptoKeyIAMMember(\"crypto_key_member\", {\n    cryptoKeyId: cryptoKey.id,\n    role: \"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n    member: project.then(project =\u003e `serviceAccount:service-${project.number}@gcp-sa-datafusion.iam.gserviceaccount.com`),\n});\nconst cmek = new gcp.datafusion.Instance(\"cmek\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    cryptoKeyConfig: {\n        keyReference: cryptoKey.id,\n    },\n}, {\n    dependsOn: [cryptoKeyMember],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nkey_ring = gcp.kms.KeyRing(\"key_ring\",\n    name=\"my-instance\",\n    location=\"us-central1\")\ncrypto_key = gcp.kms.CryptoKey(\"crypto_key\",\n    name=\"my-instance\",\n    key_ring=key_ring.id)\nproject = gcp.organizations.get_project()\ncrypto_key_member = gcp.kms.CryptoKeyIAMMember(\"crypto_key_member\",\n    crypto_key_id=crypto_key.id,\n    role=\"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n    member=f\"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com\")\ncmek = gcp.datafusion.Instance(\"cmek\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    crypto_key_config={\n        \"key_reference\": crypto_key.id,\n    },\n    opts = pulumi.ResourceOptions(depends_on=[crypto_key_member]))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var keyRing = new Gcp.Kms.KeyRing(\"key_ring\", new()\n    {\n        Name = \"my-instance\",\n        Location = \"us-central1\",\n    });\n\n    var cryptoKey = new Gcp.Kms.CryptoKey(\"crypto_key\", new()\n    {\n        Name = \"my-instance\",\n        KeyRing = keyRing.Id,\n    });\n\n    var project = Gcp.Organizations.GetProject.Invoke();\n\n    var cryptoKeyMember = new Gcp.Kms.CryptoKeyIAMMember(\"crypto_key_member\", new()\n    {\n        CryptoKeyId = cryptoKey.Id,\n        Role = \"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n        Member = $\"serviceAccount:service-{project.Apply(getProjectResult =\u003e getProjectResult.Number)}@gcp-sa-datafusion.iam.gserviceaccount.com\",\n    });\n\n    var cmek = new Gcp.DataFusion.Instance(\"cmek\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        CryptoKeyConfig = new Gcp.DataFusion.Inputs.InstanceCryptoKeyConfigArgs\n        {\n            KeyReference = cryptoKey.Id,\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            cryptoKeyMember,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/kms\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tkeyRing, err := kms.NewKeyRing(ctx, \"key_ring\", \u0026kms.KeyRingArgs{\n\t\t\tName:     pulumi.String(\"my-instance\"),\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcryptoKey, err := kms.NewCryptoKey(ctx, \"crypto_key\", \u0026kms.CryptoKeyArgs{\n\t\t\tName:    pulumi.String(\"my-instance\"),\n\t\t\tKeyRing: keyRing.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tproject, err := organizations.LookupProject(ctx, \u0026organizations.LookupProjectArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcryptoKeyMember, err := kms.NewCryptoKeyIAMMember(ctx, \"crypto_key_member\", \u0026kms.CryptoKeyIAMMemberArgs{\n\t\t\tCryptoKeyId: cryptoKey.ID(),\n\t\t\tRole:        pulumi.String(\"roles/cloudkms.cryptoKeyEncrypterDecrypter\"),\n\t\t\tMember:      pulumi.Sprintf(\"serviceAccount:service-%v@gcp-sa-datafusion.iam.gserviceaccount.com\", project.Number),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"cmek\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t\tCryptoKeyConfig: \u0026datafusion.InstanceCryptoKeyConfigArgs{\n\t\t\t\tKeyReference: cryptoKey.ID(),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tcryptoKeyMember,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.kms.KeyRing;\nimport com.pulumi.gcp.kms.KeyRingArgs;\nimport com.pulumi.gcp.kms.CryptoKey;\nimport com.pulumi.gcp.kms.CryptoKeyArgs;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetProjectArgs;\nimport com.pulumi.gcp.kms.CryptoKeyIAMMember;\nimport com.pulumi.gcp.kms.CryptoKeyIAMMemberArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceCryptoKeyConfigArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var keyRing = new KeyRing(\"keyRing\", KeyRingArgs.builder()\n            .name(\"my-instance\")\n            .location(\"us-central1\")\n            .build());\n\n        var cryptoKey = new CryptoKey(\"cryptoKey\", CryptoKeyArgs.builder()\n            .name(\"my-instance\")\n            .keyRing(keyRing.id())\n            .build());\n\n        final var project = OrganizationsFunctions.getProject();\n\n        var cryptoKeyMember = new CryptoKeyIAMMember(\"cryptoKeyMember\", CryptoKeyIAMMemberArgs.builder()\n            .cryptoKeyId(cryptoKey.id())\n            .role(\"roles/cloudkms.cryptoKeyEncrypterDecrypter\")\n            .member(String.format(\"serviceAccount:service-%s@gcp-sa-datafusion.iam.gserviceaccount.com\", project.applyValue(getProjectResult -\u003e getProjectResult.number())))\n            .build());\n\n        var cmek = new Instance(\"cmek\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .cryptoKeyConfig(InstanceCryptoKeyConfigArgs.builder()\n                .keyReference(cryptoKey.id())\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(cryptoKeyMember)\n                .build());\n\n    }\n}\n```\n```yaml\nresources:\n  cmek:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n      cryptoKeyConfig:\n        keyReference: ${cryptoKey.id}\n    options:\n      dependsOn:\n        - ${cryptoKeyMember}\n  cryptoKey:\n    type: gcp:kms:CryptoKey\n    name: crypto_key\n    properties:\n      name: my-instance\n      keyRing: ${keyRing.id}\n  keyRing:\n    type: gcp:kms:KeyRing\n    name: key_ring\n    properties:\n      name: my-instance\n      location: us-central1\n  cryptoKeyMember:\n    type: gcp:kms:CryptoKeyIAMMember\n    name: crypto_key_member\n    properties:\n      cryptoKeyId: ${cryptoKey.id}\n      role: roles/cloudkms.cryptoKeyEncrypterDecrypter\n      member: serviceAccount:service-${project.number}@gcp-sa-datafusion.iam.gserviceaccount.com\nvariables:\n  project:\n    fn::invoke:\n      function: gcp:organizations:getProject\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Enterprise\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst enterpriseInstance = new gcp.datafusion.Instance(\"enterprise_instance\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"ENTERPRISE\",\n    enableRbac: true,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nenterprise_instance = gcp.datafusion.Instance(\"enterprise_instance\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"ENTERPRISE\",\n    enable_rbac=True)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var enterpriseInstance = new Gcp.DataFusion.Instance(\"enterprise_instance\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"ENTERPRISE\",\n        EnableRbac = true,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"enterprise_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:       pulumi.String(\"my-instance\"),\n\t\t\tRegion:     pulumi.String(\"us-central1\"),\n\t\t\tType:       pulumi.String(\"ENTERPRISE\"),\n\t\t\tEnableRbac: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var enterpriseInstance = new Instance(\"enterpriseInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"ENTERPRISE\")\n            .enableRbac(true)\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  enterpriseInstance:\n    type: gcp:datafusion:Instance\n    name: enterprise_instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: ENTERPRISE\n      enableRbac: true\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Event\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst eventTopic = new gcp.pubsub.Topic(\"event\", {name: \"my-instance\"});\nconst event = new gcp.datafusion.Instance(\"event\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    eventPublishConfig: {\n        enabled: true,\n        topic: eventTopic.id,\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nevent_topic = gcp.pubsub.Topic(\"event\", name=\"my-instance\")\nevent = gcp.datafusion.Instance(\"event\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    event_publish_config={\n        \"enabled\": True,\n        \"topic\": event_topic.id,\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var eventTopic = new Gcp.PubSub.Topic(\"event\", new()\n    {\n        Name = \"my-instance\",\n    });\n\n    var @event = new Gcp.DataFusion.Instance(\"event\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        EventPublishConfig = new Gcp.DataFusion.Inputs.InstanceEventPublishConfigArgs\n        {\n            Enabled = true,\n            Topic = eventTopic.Id,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/pubsub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\teventTopic, err := pubsub.NewTopic(ctx, \"event\", \u0026pubsub.TopicArgs{\n\t\t\tName: pulumi.String(\"my-instance\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"event\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t\tEventPublishConfig: \u0026datafusion.InstanceEventPublishConfigArgs{\n\t\t\t\tEnabled: pulumi.Bool(true),\n\t\t\t\tTopic:   eventTopic.ID(),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.pubsub.Topic;\nimport com.pulumi.gcp.pubsub.TopicArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceEventPublishConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var eventTopic = new Topic(\"eventTopic\", TopicArgs.builder()\n            .name(\"my-instance\")\n            .build());\n\n        var event = new Instance(\"event\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .eventPublishConfig(InstanceEventPublishConfigArgs.builder()\n                .enabled(true)\n                .topic(eventTopic.id())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  event:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n      eventPublishConfig:\n        enabled: true\n        topic: ${eventTopic.id}\n  eventTopic:\n    type: gcp:pubsub:Topic\n    name: event\n    properties:\n      name: my-instance\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Zone\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst zone = new gcp.datafusion.Instance(\"zone\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    zone: \"us-central1-a\",\n    type: \"DEVELOPER\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nzone = gcp.datafusion.Instance(\"zone\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    zone=\"us-central1-a\",\n    type=\"DEVELOPER\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var zone = new Gcp.DataFusion.Instance(\"zone\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Zone = \"us-central1-a\",\n        Type = \"DEVELOPER\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"zone\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tZone:   pulumi.String(\"us-central1-a\"),\n\t\t\tType:   pulumi.String(\"DEVELOPER\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var zone = new Instance(\"zone\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .zone(\"us-central1-a\")\n            .type(\"DEVELOPER\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  zone:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      zone: us-central1-a\n      type: DEVELOPER\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nInstance can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{region}}/instances/{{name}}`\n\n* `{{project}}/{{region}}/{{name}}`\n\n* `{{region}}/{{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, Instance can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamBinding:InstanceIamBinding default projects/{{project}}/locations/{{region}}/instances/{{name}}\n```\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamBinding:InstanceIamBinding default {{project}}/{{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamBinding:InstanceIamBinding default {{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamBinding:InstanceIamBinding default {{name}}\n```\n\n",
+            "description": "Represents a Data Fusion instance.\n\n\nTo get more information about Instance, see:\n\n* [API documentation](https://cloud.google.com/data-fusion/docs/reference/rest/v1beta1/projects.locations.instances)\n* How-to Guides\n    * [Official Documentation](https://cloud.google.com/data-fusion/docs/)\n\n## Example Usage\n\n### Data Fusion Instance Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst basicInstance = new gcp.datafusion.Instance(\"basic_instance\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nbasic_instance = gcp.datafusion.Instance(\"basic_instance\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicInstance = new Gcp.DataFusion.Instance(\"basic_instance\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"basic_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var basicInstance = new Instance(\"basicInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  basicInstance:\n    type: gcp:datafusion:Instance\n    name: basic_instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Full\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.appengine.getDefaultServiceAccount({});\nconst network = new gcp.compute.Network(\"network\", {name: \"datafusion-full-network\"});\nconst privateIpAlloc = new gcp.compute.GlobalAddress(\"private_ip_alloc\", {\n    name: \"datafusion-ip-alloc\",\n    addressType: \"INTERNAL\",\n    purpose: \"VPC_PEERING\",\n    prefixLength: 22,\n    network: network.id,\n});\nconst extendedInstance = new gcp.datafusion.Instance(\"extended_instance\", {\n    name: \"my-instance\",\n    description: \"My Data Fusion instance\",\n    displayName: \"My Data Fusion instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    enableStackdriverLogging: true,\n    enableStackdriverMonitoring: true,\n    privateInstance: true,\n    dataprocServiceAccount: _default.then(_default =\u003e _default.email),\n    labels: {\n        example_key: \"example_value\",\n    },\n    networkConfig: {\n        network: \"default\",\n        ipAllocation: pulumi.interpolate`${privateIpAlloc.address}/${privateIpAlloc.prefixLength}`,\n    },\n    accelerators: [{\n        acceleratorType: \"CDC\",\n        state: \"ENABLED\",\n    }],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.appengine.get_default_service_account()\nnetwork = gcp.compute.Network(\"network\", name=\"datafusion-full-network\")\nprivate_ip_alloc = gcp.compute.GlobalAddress(\"private_ip_alloc\",\n    name=\"datafusion-ip-alloc\",\n    address_type=\"INTERNAL\",\n    purpose=\"VPC_PEERING\",\n    prefix_length=22,\n    network=network.id)\nextended_instance = gcp.datafusion.Instance(\"extended_instance\",\n    name=\"my-instance\",\n    description=\"My Data Fusion instance\",\n    display_name=\"My Data Fusion instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    enable_stackdriver_logging=True,\n    enable_stackdriver_monitoring=True,\n    private_instance=True,\n    dataproc_service_account=default.email,\n    labels={\n        \"example_key\": \"example_value\",\n    },\n    network_config={\n        \"network\": \"default\",\n        \"ip_allocation\": pulumi.Output.all(\n            address=private_ip_alloc.address,\n            prefix_length=private_ip_alloc.prefix_length\n).apply(lambda resolved_outputs: f\"{resolved_outputs['address']}/{resolved_outputs['prefix_length']}\")\n,\n    },\n    accelerators=[{\n        \"accelerator_type\": \"CDC\",\n        \"state\": \"ENABLED\",\n    }])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.AppEngine.GetDefaultServiceAccount.Invoke();\n\n    var network = new Gcp.Compute.Network(\"network\", new()\n    {\n        Name = \"datafusion-full-network\",\n    });\n\n    var privateIpAlloc = new Gcp.Compute.GlobalAddress(\"private_ip_alloc\", new()\n    {\n        Name = \"datafusion-ip-alloc\",\n        AddressType = \"INTERNAL\",\n        Purpose = \"VPC_PEERING\",\n        PrefixLength = 22,\n        Network = network.Id,\n    });\n\n    var extendedInstance = new Gcp.DataFusion.Instance(\"extended_instance\", new()\n    {\n        Name = \"my-instance\",\n        Description = \"My Data Fusion instance\",\n        DisplayName = \"My Data Fusion instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        EnableStackdriverLogging = true,\n        EnableStackdriverMonitoring = true,\n        PrivateInstance = true,\n        DataprocServiceAccount = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Email)),\n        Labels = \n        {\n            { \"example_key\", \"example_value\" },\n        },\n        NetworkConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigArgs\n        {\n            Network = \"default\",\n            IpAllocation = Output.Tuple(privateIpAlloc.Address, privateIpAlloc.PrefixLength).Apply(values =\u003e\n            {\n                var address = values.Item1;\n                var prefixLength = values.Item2;\n                return $\"{address}/{prefixLength}\";\n            }),\n        },\n        Accelerators = new[]\n        {\n            new Gcp.DataFusion.Inputs.InstanceAcceleratorArgs\n            {\n                AcceleratorType = \"CDC\",\n                State = \"ENABLED\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/appengine\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := appengine.GetDefaultServiceAccount(ctx, \u0026appengine.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tnetwork, err := compute.NewNetwork(ctx, \"network\", \u0026compute.NetworkArgs{\n\t\t\tName: pulumi.String(\"datafusion-full-network\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tprivateIpAlloc, err := compute.NewGlobalAddress(ctx, \"private_ip_alloc\", \u0026compute.GlobalAddressArgs{\n\t\t\tName:         pulumi.String(\"datafusion-ip-alloc\"),\n\t\t\tAddressType:  pulumi.String(\"INTERNAL\"),\n\t\t\tPurpose:      pulumi.String(\"VPC_PEERING\"),\n\t\t\tPrefixLength: pulumi.Int(22),\n\t\t\tNetwork:      network.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"extended_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:                        pulumi.String(\"my-instance\"),\n\t\t\tDescription:                 pulumi.String(\"My Data Fusion instance\"),\n\t\t\tDisplayName:                 pulumi.String(\"My Data Fusion instance\"),\n\t\t\tRegion:                      pulumi.String(\"us-central1\"),\n\t\t\tType:                        pulumi.String(\"BASIC\"),\n\t\t\tEnableStackdriverLogging:    pulumi.Bool(true),\n\t\t\tEnableStackdriverMonitoring: pulumi.Bool(true),\n\t\t\tPrivateInstance:             pulumi.Bool(true),\n\t\t\tDataprocServiceAccount:      pulumi.String(_default.Email),\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"example_key\": pulumi.String(\"example_value\"),\n\t\t\t},\n\t\t\tNetworkConfig: \u0026datafusion.InstanceNetworkConfigArgs{\n\t\t\t\tNetwork: pulumi.String(\"default\"),\n\t\t\t\tIpAllocation: pulumi.All(privateIpAlloc.Address, privateIpAlloc.PrefixLength).ApplyT(func(_args []interface{}) (string, error) {\n\t\t\t\t\taddress := _args[0].(string)\n\t\t\t\t\tprefixLength := _args[1].(int)\n\t\t\t\t\treturn fmt.Sprintf(\"%v/%v\", address, prefixLength), nil\n\t\t\t\t}).(pulumi.StringOutput),\n\t\t\t},\n\t\t\tAccelerators: datafusion.InstanceAcceleratorArray{\n\t\t\t\t\u0026datafusion.InstanceAcceleratorArgs{\n\t\t\t\t\tAcceleratorType: pulumi.String(\"CDC\"),\n\t\t\t\t\tState:           pulumi.String(\"ENABLED\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.appengine.AppengineFunctions;\nimport com.pulumi.gcp.appengine.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.GlobalAddress;\nimport com.pulumi.gcp.compute.GlobalAddressArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceAcceleratorArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = AppengineFunctions.getDefaultServiceAccount();\n\n        var network = new Network(\"network\", NetworkArgs.builder()\n            .name(\"datafusion-full-network\")\n            .build());\n\n        var privateIpAlloc = new GlobalAddress(\"privateIpAlloc\", GlobalAddressArgs.builder()\n            .name(\"datafusion-ip-alloc\")\n            .addressType(\"INTERNAL\")\n            .purpose(\"VPC_PEERING\")\n            .prefixLength(22)\n            .network(network.id())\n            .build());\n\n        var extendedInstance = new Instance(\"extendedInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .description(\"My Data Fusion instance\")\n            .displayName(\"My Data Fusion instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .enableStackdriverLogging(true)\n            .enableStackdriverMonitoring(true)\n            .privateInstance(true)\n            .dataprocServiceAccount(default_.email())\n            .labels(Map.of(\"example_key\", \"example_value\"))\n            .networkConfig(InstanceNetworkConfigArgs.builder()\n                .network(\"default\")\n                .ipAllocation(Output.tuple(privateIpAlloc.address(), privateIpAlloc.prefixLength()).applyValue(values -\u003e {\n                    var address = values.t1;\n                    var prefixLength = values.t2;\n                    return String.format(\"%s/%s\", address,prefixLength);\n                }))\n                .build())\n            .accelerators(InstanceAcceleratorArgs.builder()\n                .acceleratorType(\"CDC\")\n                .state(\"ENABLED\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  extendedInstance:\n    type: gcp:datafusion:Instance\n    name: extended_instance\n    properties:\n      name: my-instance\n      description: My Data Fusion instance\n      displayName: My Data Fusion instance\n      region: us-central1\n      type: BASIC\n      enableStackdriverLogging: true\n      enableStackdriverMonitoring: true\n      privateInstance: true\n      dataprocServiceAccount: ${default.email}\n      labels:\n        example_key: example_value\n      networkConfig:\n        network: default\n        ipAllocation: ${privateIpAlloc.address}/${privateIpAlloc.prefixLength}\n      accelerators:\n        - acceleratorType: CDC\n          state: ENABLED\n  network:\n    type: gcp:compute:Network\n    properties:\n      name: datafusion-full-network\n  privateIpAlloc:\n    type: gcp:compute:GlobalAddress\n    name: private_ip_alloc\n    properties:\n      name: datafusion-ip-alloc\n      addressType: INTERNAL\n      purpose: VPC_PEERING\n      prefixLength: 22\n      network: ${network.id}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:appengine:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Psc\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst psc = new gcp.compute.Network(\"psc\", {\n    name: \"datafusion-psc-network\",\n    autoCreateSubnetworks: false,\n});\nconst pscSubnetwork = new gcp.compute.Subnetwork(\"psc\", {\n    name: \"datafusion-psc-subnet\",\n    region: \"us-central1\",\n    network: psc.id,\n    ipCidrRange: \"10.0.0.0/16\",\n});\nconst pscNetworkAttachment = new gcp.compute.NetworkAttachment(\"psc\", {\n    name: \"datafusion-psc-attachment\",\n    region: \"us-central1\",\n    connectionPreference: \"ACCEPT_AUTOMATIC\",\n    subnetworks: [pscSubnetwork.selfLink],\n});\nconst pscInstance = new gcp.datafusion.Instance(\"psc_instance\", {\n    name: \"psc-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    privateInstance: true,\n    networkConfig: {\n        connectionType: \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n        privateServiceConnectConfig: {\n            networkAttachment: pscNetworkAttachment.id,\n            unreachableCidrBlock: \"192.168.0.0/25\",\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\npsc = gcp.compute.Network(\"psc\",\n    name=\"datafusion-psc-network\",\n    auto_create_subnetworks=False)\npsc_subnetwork = gcp.compute.Subnetwork(\"psc\",\n    name=\"datafusion-psc-subnet\",\n    region=\"us-central1\",\n    network=psc.id,\n    ip_cidr_range=\"10.0.0.0/16\")\npsc_network_attachment = gcp.compute.NetworkAttachment(\"psc\",\n    name=\"datafusion-psc-attachment\",\n    region=\"us-central1\",\n    connection_preference=\"ACCEPT_AUTOMATIC\",\n    subnetworks=[psc_subnetwork.self_link])\npsc_instance = gcp.datafusion.Instance(\"psc_instance\",\n    name=\"psc-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    private_instance=True,\n    network_config={\n        \"connection_type\": \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n        \"private_service_connect_config\": {\n            \"network_attachment\": psc_network_attachment.id,\n            \"unreachable_cidr_block\": \"192.168.0.0/25\",\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var psc = new Gcp.Compute.Network(\"psc\", new()\n    {\n        Name = \"datafusion-psc-network\",\n        AutoCreateSubnetworks = false,\n    });\n\n    var pscSubnetwork = new Gcp.Compute.Subnetwork(\"psc\", new()\n    {\n        Name = \"datafusion-psc-subnet\",\n        Region = \"us-central1\",\n        Network = psc.Id,\n        IpCidrRange = \"10.0.0.0/16\",\n    });\n\n    var pscNetworkAttachment = new Gcp.Compute.NetworkAttachment(\"psc\", new()\n    {\n        Name = \"datafusion-psc-attachment\",\n        Region = \"us-central1\",\n        ConnectionPreference = \"ACCEPT_AUTOMATIC\",\n        Subnetworks = new[]\n        {\n            pscSubnetwork.SelfLink,\n        },\n    });\n\n    var pscInstance = new Gcp.DataFusion.Instance(\"psc_instance\", new()\n    {\n        Name = \"psc-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        PrivateInstance = true,\n        NetworkConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigArgs\n        {\n            ConnectionType = \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n            PrivateServiceConnectConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigPrivateServiceConnectConfigArgs\n            {\n                NetworkAttachment = pscNetworkAttachment.Id,\n                UnreachableCidrBlock = \"192.168.0.0/25\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tpsc, err := compute.NewNetwork(ctx, \"psc\", \u0026compute.NetworkArgs{\n\t\t\tName:                  pulumi.String(\"datafusion-psc-network\"),\n\t\t\tAutoCreateSubnetworks: pulumi.Bool(false),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tpscSubnetwork, err := compute.NewSubnetwork(ctx, \"psc\", \u0026compute.SubnetworkArgs{\n\t\t\tName:        pulumi.String(\"datafusion-psc-subnet\"),\n\t\t\tRegion:      pulumi.String(\"us-central1\"),\n\t\t\tNetwork:     psc.ID(),\n\t\t\tIpCidrRange: pulumi.String(\"10.0.0.0/16\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tpscNetworkAttachment, err := compute.NewNetworkAttachment(ctx, \"psc\", \u0026compute.NetworkAttachmentArgs{\n\t\t\tName:                 pulumi.String(\"datafusion-psc-attachment\"),\n\t\t\tRegion:               pulumi.String(\"us-central1\"),\n\t\t\tConnectionPreference: pulumi.String(\"ACCEPT_AUTOMATIC\"),\n\t\t\tSubnetworks: pulumi.StringArray{\n\t\t\t\tpscSubnetwork.SelfLink,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"psc_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:            pulumi.String(\"psc-instance\"),\n\t\t\tRegion:          pulumi.String(\"us-central1\"),\n\t\t\tType:            pulumi.String(\"BASIC\"),\n\t\t\tPrivateInstance: pulumi.Bool(true),\n\t\t\tNetworkConfig: \u0026datafusion.InstanceNetworkConfigArgs{\n\t\t\t\tConnectionType: pulumi.String(\"PRIVATE_SERVICE_CONNECT_INTERFACES\"),\n\t\t\t\tPrivateServiceConnectConfig: \u0026datafusion.InstanceNetworkConfigPrivateServiceConnectConfigArgs{\n\t\t\t\t\tNetworkAttachment:    pscNetworkAttachment.ID(),\n\t\t\t\t\tUnreachableCidrBlock: pulumi.String(\"192.168.0.0/25\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.Subnetwork;\nimport com.pulumi.gcp.compute.SubnetworkArgs;\nimport com.pulumi.gcp.compute.NetworkAttachment;\nimport com.pulumi.gcp.compute.NetworkAttachmentArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigPrivateServiceConnectConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var psc = new Network(\"psc\", NetworkArgs.builder()\n            .name(\"datafusion-psc-network\")\n            .autoCreateSubnetworks(false)\n            .build());\n\n        var pscSubnetwork = new Subnetwork(\"pscSubnetwork\", SubnetworkArgs.builder()\n            .name(\"datafusion-psc-subnet\")\n            .region(\"us-central1\")\n            .network(psc.id())\n            .ipCidrRange(\"10.0.0.0/16\")\n            .build());\n\n        var pscNetworkAttachment = new NetworkAttachment(\"pscNetworkAttachment\", NetworkAttachmentArgs.builder()\n            .name(\"datafusion-psc-attachment\")\n            .region(\"us-central1\")\n            .connectionPreference(\"ACCEPT_AUTOMATIC\")\n            .subnetworks(pscSubnetwork.selfLink())\n            .build());\n\n        var pscInstance = new Instance(\"pscInstance\", InstanceArgs.builder()\n            .name(\"psc-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .privateInstance(true)\n            .networkConfig(InstanceNetworkConfigArgs.builder()\n                .connectionType(\"PRIVATE_SERVICE_CONNECT_INTERFACES\")\n                .privateServiceConnectConfig(InstanceNetworkConfigPrivateServiceConnectConfigArgs.builder()\n                    .networkAttachment(pscNetworkAttachment.id())\n                    .unreachableCidrBlock(\"192.168.0.0/25\")\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  pscInstance:\n    type: gcp:datafusion:Instance\n    name: psc_instance\n    properties:\n      name: psc-instance\n      region: us-central1\n      type: BASIC\n      privateInstance: true\n      networkConfig:\n        connectionType: PRIVATE_SERVICE_CONNECT_INTERFACES\n        privateServiceConnectConfig:\n          networkAttachment: ${pscNetworkAttachment.id}\n          unreachableCidrBlock: 192.168.0.0/25\n  psc:\n    type: gcp:compute:Network\n    properties:\n      name: datafusion-psc-network\n      autoCreateSubnetworks: false\n  pscSubnetwork:\n    type: gcp:compute:Subnetwork\n    name: psc\n    properties:\n      name: datafusion-psc-subnet\n      region: us-central1\n      network: ${psc.id}\n      ipCidrRange: 10.0.0.0/16\n  pscNetworkAttachment:\n    type: gcp:compute:NetworkAttachment\n    name: psc\n    properties:\n      name: datafusion-psc-attachment\n      region: us-central1\n      connectionPreference: ACCEPT_AUTOMATIC\n      subnetworks:\n        - ${pscSubnetwork.selfLink}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Cmek\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst keyRing = new gcp.kms.KeyRing(\"key_ring\", {\n    name: \"my-instance\",\n    location: \"us-central1\",\n});\nconst cryptoKey = new gcp.kms.CryptoKey(\"crypto_key\", {\n    name: \"my-instance\",\n    keyRing: keyRing.id,\n});\nconst project = gcp.organizations.getProject({});\nconst cryptoKeyMember = new gcp.kms.CryptoKeyIAMMember(\"crypto_key_member\", {\n    cryptoKeyId: cryptoKey.id,\n    role: \"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n    member: project.then(project =\u003e `serviceAccount:service-${project.number}@gcp-sa-datafusion.iam.gserviceaccount.com`),\n});\nconst cmek = new gcp.datafusion.Instance(\"cmek\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    cryptoKeyConfig: {\n        keyReference: cryptoKey.id,\n    },\n}, {\n    dependsOn: [cryptoKeyMember],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nkey_ring = gcp.kms.KeyRing(\"key_ring\",\n    name=\"my-instance\",\n    location=\"us-central1\")\ncrypto_key = gcp.kms.CryptoKey(\"crypto_key\",\n    name=\"my-instance\",\n    key_ring=key_ring.id)\nproject = gcp.organizations.get_project()\ncrypto_key_member = gcp.kms.CryptoKeyIAMMember(\"crypto_key_member\",\n    crypto_key_id=crypto_key.id,\n    role=\"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n    member=f\"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com\")\ncmek = gcp.datafusion.Instance(\"cmek\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    crypto_key_config={\n        \"key_reference\": crypto_key.id,\n    },\n    opts = pulumi.ResourceOptions(depends_on=[crypto_key_member]))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var keyRing = new Gcp.Kms.KeyRing(\"key_ring\", new()\n    {\n        Name = \"my-instance\",\n        Location = \"us-central1\",\n    });\n\n    var cryptoKey = new Gcp.Kms.CryptoKey(\"crypto_key\", new()\n    {\n        Name = \"my-instance\",\n        KeyRing = keyRing.Id,\n    });\n\n    var project = Gcp.Organizations.GetProject.Invoke();\n\n    var cryptoKeyMember = new Gcp.Kms.CryptoKeyIAMMember(\"crypto_key_member\", new()\n    {\n        CryptoKeyId = cryptoKey.Id,\n        Role = \"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n        Member = $\"serviceAccount:service-{project.Apply(getProjectResult =\u003e getProjectResult.Number)}@gcp-sa-datafusion.iam.gserviceaccount.com\",\n    });\n\n    var cmek = new Gcp.DataFusion.Instance(\"cmek\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        CryptoKeyConfig = new Gcp.DataFusion.Inputs.InstanceCryptoKeyConfigArgs\n        {\n            KeyReference = cryptoKey.Id,\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            cryptoKeyMember,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/kms\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tkeyRing, err := kms.NewKeyRing(ctx, \"key_ring\", \u0026kms.KeyRingArgs{\n\t\t\tName:     pulumi.String(\"my-instance\"),\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcryptoKey, err := kms.NewCryptoKey(ctx, \"crypto_key\", \u0026kms.CryptoKeyArgs{\n\t\t\tName:    pulumi.String(\"my-instance\"),\n\t\t\tKeyRing: keyRing.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tproject, err := organizations.LookupProject(ctx, \u0026organizations.LookupProjectArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcryptoKeyMember, err := kms.NewCryptoKeyIAMMember(ctx, \"crypto_key_member\", \u0026kms.CryptoKeyIAMMemberArgs{\n\t\t\tCryptoKeyId: cryptoKey.ID(),\n\t\t\tRole:        pulumi.String(\"roles/cloudkms.cryptoKeyEncrypterDecrypter\"),\n\t\t\tMember:      pulumi.Sprintf(\"serviceAccount:service-%v@gcp-sa-datafusion.iam.gserviceaccount.com\", project.Number),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"cmek\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t\tCryptoKeyConfig: \u0026datafusion.InstanceCryptoKeyConfigArgs{\n\t\t\t\tKeyReference: cryptoKey.ID(),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tcryptoKeyMember,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.kms.KeyRing;\nimport com.pulumi.gcp.kms.KeyRingArgs;\nimport com.pulumi.gcp.kms.CryptoKey;\nimport com.pulumi.gcp.kms.CryptoKeyArgs;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetProjectArgs;\nimport com.pulumi.gcp.kms.CryptoKeyIAMMember;\nimport com.pulumi.gcp.kms.CryptoKeyIAMMemberArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceCryptoKeyConfigArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var keyRing = new KeyRing(\"keyRing\", KeyRingArgs.builder()\n            .name(\"my-instance\")\n            .location(\"us-central1\")\n            .build());\n\n        var cryptoKey = new CryptoKey(\"cryptoKey\", CryptoKeyArgs.builder()\n            .name(\"my-instance\")\n            .keyRing(keyRing.id())\n            .build());\n\n        final var project = OrganizationsFunctions.getProject();\n\n        var cryptoKeyMember = new CryptoKeyIAMMember(\"cryptoKeyMember\", CryptoKeyIAMMemberArgs.builder()\n            .cryptoKeyId(cryptoKey.id())\n            .role(\"roles/cloudkms.cryptoKeyEncrypterDecrypter\")\n            .member(String.format(\"serviceAccount:service-%s@gcp-sa-datafusion.iam.gserviceaccount.com\", project.applyValue(getProjectResult -\u003e getProjectResult.number())))\n            .build());\n\n        var cmek = new Instance(\"cmek\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .cryptoKeyConfig(InstanceCryptoKeyConfigArgs.builder()\n                .keyReference(cryptoKey.id())\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(cryptoKeyMember)\n                .build());\n\n    }\n}\n```\n```yaml\nresources:\n  cmek:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n      cryptoKeyConfig:\n        keyReference: ${cryptoKey.id}\n    options:\n      dependsOn:\n        - ${cryptoKeyMember}\n  cryptoKey:\n    type: gcp:kms:CryptoKey\n    name: crypto_key\n    properties:\n      name: my-instance\n      keyRing: ${keyRing.id}\n  keyRing:\n    type: gcp:kms:KeyRing\n    name: key_ring\n    properties:\n      name: my-instance\n      location: us-central1\n  cryptoKeyMember:\n    type: gcp:kms:CryptoKeyIAMMember\n    name: crypto_key_member\n    properties:\n      cryptoKeyId: ${cryptoKey.id}\n      role: roles/cloudkms.cryptoKeyEncrypterDecrypter\n      member: serviceAccount:service-${project.number}@gcp-sa-datafusion.iam.gserviceaccount.com\nvariables:\n  project:\n    fn::invoke:\n      function: gcp:organizations:getProject\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Enterprise\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst enterpriseInstance = new gcp.datafusion.Instance(\"enterprise_instance\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"ENTERPRISE\",\n    enableRbac: true,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nenterprise_instance = gcp.datafusion.Instance(\"enterprise_instance\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"ENTERPRISE\",\n    enable_rbac=True)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var enterpriseInstance = new Gcp.DataFusion.Instance(\"enterprise_instance\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"ENTERPRISE\",\n        EnableRbac = true,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"enterprise_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:       pulumi.String(\"my-instance\"),\n\t\t\tRegion:     pulumi.String(\"us-central1\"),\n\t\t\tType:       pulumi.String(\"ENTERPRISE\"),\n\t\t\tEnableRbac: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var enterpriseInstance = new Instance(\"enterpriseInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"ENTERPRISE\")\n            .enableRbac(true)\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  enterpriseInstance:\n    type: gcp:datafusion:Instance\n    name: enterprise_instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: ENTERPRISE\n      enableRbac: true\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Event\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst eventTopic = new gcp.pubsub.Topic(\"event\", {name: \"my-instance\"});\nconst event = new gcp.datafusion.Instance(\"event\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    eventPublishConfig: {\n        enabled: true,\n        topic: eventTopic.id,\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nevent_topic = gcp.pubsub.Topic(\"event\", name=\"my-instance\")\nevent = gcp.datafusion.Instance(\"event\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    event_publish_config={\n        \"enabled\": True,\n        \"topic\": event_topic.id,\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var eventTopic = new Gcp.PubSub.Topic(\"event\", new()\n    {\n        Name = \"my-instance\",\n    });\n\n    var @event = new Gcp.DataFusion.Instance(\"event\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        EventPublishConfig = new Gcp.DataFusion.Inputs.InstanceEventPublishConfigArgs\n        {\n            Enabled = true,\n            Topic = eventTopic.Id,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/pubsub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\teventTopic, err := pubsub.NewTopic(ctx, \"event\", \u0026pubsub.TopicArgs{\n\t\t\tName: pulumi.String(\"my-instance\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"event\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t\tEventPublishConfig: \u0026datafusion.InstanceEventPublishConfigArgs{\n\t\t\t\tEnabled: pulumi.Bool(true),\n\t\t\t\tTopic:   eventTopic.ID(),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.pubsub.Topic;\nimport com.pulumi.gcp.pubsub.TopicArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceEventPublishConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var eventTopic = new Topic(\"eventTopic\", TopicArgs.builder()\n            .name(\"my-instance\")\n            .build());\n\n        var event = new Instance(\"event\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .eventPublishConfig(InstanceEventPublishConfigArgs.builder()\n                .enabled(true)\n                .topic(eventTopic.id())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  event:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n      eventPublishConfig:\n        enabled: true\n        topic: ${eventTopic.id}\n  eventTopic:\n    type: gcp:pubsub:Topic\n    name: event\n    properties:\n      name: my-instance\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Zone\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst zone = new gcp.datafusion.Instance(\"zone\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    zone: \"us-central1-a\",\n    type: \"DEVELOPER\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nzone = gcp.datafusion.Instance(\"zone\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    zone=\"us-central1-a\",\n    type=\"DEVELOPER\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var zone = new Gcp.DataFusion.Instance(\"zone\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Zone = \"us-central1-a\",\n        Type = \"DEVELOPER\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"zone\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tZone:   pulumi.String(\"us-central1-a\"),\n\t\t\tType:   pulumi.String(\"DEVELOPER\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var zone = new Instance(\"zone\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .zone(\"us-central1-a\")\n            .type(\"DEVELOPER\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  zone:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      zone: us-central1-a\n      type: DEVELOPER\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nInstance can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{region}}/instances/{{name}}`\n\n* `{{project}}/{{region}}/{{name}}`\n\n* `{{region}}/{{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, Instance can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamBinding:InstanceIamBinding default projects/{{project}}/locations/{{region}}/instances/{{name}}\n```\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamBinding:InstanceIamBinding default {{project}}/{{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamBinding:InstanceIamBinding default {{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamBinding:InstanceIamBinding default {{name}}\n```\n\n",
             "properties": {
                 "condition": {
                     "$ref": "#/types/gcp:securitycenter/InstanceIamBindingCondition:InstanceIamBindingCondition"
@@ -266377,7 +266377,7 @@
             }
         },
         "gcp:securitycenter/instanceIamMember:InstanceIamMember": {
-            "description": "Represents a Data Fusion instance.\n\n\nTo get more information about Instance, see:\n\n* [API documentation](https://cloud.google.com/data-fusion/docs/reference/rest/v1beta1/projects.locations.instances)\n* How-to Guides\n    * [Official Documentation](https://cloud.google.com/data-fusion/docs/)\n\n## Example Usage\n\n### Data Fusion Instance Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst basicInstance = new gcp.datafusion.Instance(\"basic_instance\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nbasic_instance = gcp.datafusion.Instance(\"basic_instance\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicInstance = new Gcp.DataFusion.Instance(\"basic_instance\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"basic_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var basicInstance = new Instance(\"basicInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  basicInstance:\n    type: gcp:datafusion:Instance\n    name: basic_instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Full\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.appengine.getDefaultServiceAccount({});\nconst network = new gcp.compute.Network(\"network\", {name: \"datafusion-full-network\"});\nconst privateIpAlloc = new gcp.compute.GlobalAddress(\"private_ip_alloc\", {\n    name: \"datafusion-ip-alloc\",\n    addressType: \"INTERNAL\",\n    purpose: \"VPC_PEERING\",\n    prefixLength: 22,\n    network: network.id,\n});\nconst extendedInstance = new gcp.datafusion.Instance(\"extended_instance\", {\n    name: \"my-instance\",\n    description: \"My Data Fusion instance\",\n    displayName: \"My Data Fusion instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    enableStackdriverLogging: true,\n    enableStackdriverMonitoring: true,\n    privateInstance: true,\n    dataprocServiceAccount: _default.then(_default =\u003e _default.email),\n    labels: {\n        example_key: \"example_value\",\n    },\n    networkConfig: {\n        network: \"default\",\n        ipAllocation: pulumi.interpolate`${privateIpAlloc.address}/${privateIpAlloc.prefixLength}`,\n    },\n    accelerators: [{\n        acceleratorType: \"CDC\",\n        state: \"ENABLED\",\n    }],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.appengine.get_default_service_account()\nnetwork = gcp.compute.Network(\"network\", name=\"datafusion-full-network\")\nprivate_ip_alloc = gcp.compute.GlobalAddress(\"private_ip_alloc\",\n    name=\"datafusion-ip-alloc\",\n    address_type=\"INTERNAL\",\n    purpose=\"VPC_PEERING\",\n    prefix_length=22,\n    network=network.id)\nextended_instance = gcp.datafusion.Instance(\"extended_instance\",\n    name=\"my-instance\",\n    description=\"My Data Fusion instance\",\n    display_name=\"My Data Fusion instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    enable_stackdriver_logging=True,\n    enable_stackdriver_monitoring=True,\n    private_instance=True,\n    dataproc_service_account=default.email,\n    labels={\n        \"example_key\": \"example_value\",\n    },\n    network_config={\n        \"network\": \"default\",\n        \"ip_allocation\": pulumi.Output.all(\n            address=private_ip_alloc.address,\n            prefix_length=private_ip_alloc.prefix_length\n).apply(lambda resolved_outputs: f\"{resolved_outputs['address']}/{resolved_outputs['prefix_length']}\")\n,\n    },\n    accelerators=[{\n        \"accelerator_type\": \"CDC\",\n        \"state\": \"ENABLED\",\n    }])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.AppEngine.GetDefaultServiceAccount.Invoke();\n\n    var network = new Gcp.Compute.Network(\"network\", new()\n    {\n        Name = \"datafusion-full-network\",\n    });\n\n    var privateIpAlloc = new Gcp.Compute.GlobalAddress(\"private_ip_alloc\", new()\n    {\n        Name = \"datafusion-ip-alloc\",\n        AddressType = \"INTERNAL\",\n        Purpose = \"VPC_PEERING\",\n        PrefixLength = 22,\n        Network = network.Id,\n    });\n\n    var extendedInstance = new Gcp.DataFusion.Instance(\"extended_instance\", new()\n    {\n        Name = \"my-instance\",\n        Description = \"My Data Fusion instance\",\n        DisplayName = \"My Data Fusion instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        EnableStackdriverLogging = true,\n        EnableStackdriverMonitoring = true,\n        PrivateInstance = true,\n        DataprocServiceAccount = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Email)),\n        Labels = \n        {\n            { \"example_key\", \"example_value\" },\n        },\n        NetworkConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigArgs\n        {\n            Network = \"default\",\n            IpAllocation = Output.Tuple(privateIpAlloc.Address, privateIpAlloc.PrefixLength).Apply(values =\u003e\n            {\n                var address = values.Item1;\n                var prefixLength = values.Item2;\n                return $\"{address}/{prefixLength}\";\n            }),\n        },\n        Accelerators = new[]\n        {\n            new Gcp.DataFusion.Inputs.InstanceAcceleratorArgs\n            {\n                AcceleratorType = \"CDC\",\n                State = \"ENABLED\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/appengine\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := appengine.GetDefaultServiceAccount(ctx, \u0026appengine.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tnetwork, err := compute.NewNetwork(ctx, \"network\", \u0026compute.NetworkArgs{\n\t\t\tName: pulumi.String(\"datafusion-full-network\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tprivateIpAlloc, err := compute.NewGlobalAddress(ctx, \"private_ip_alloc\", \u0026compute.GlobalAddressArgs{\n\t\t\tName:         pulumi.String(\"datafusion-ip-alloc\"),\n\t\t\tAddressType:  pulumi.String(\"INTERNAL\"),\n\t\t\tPurpose:      pulumi.String(\"VPC_PEERING\"),\n\t\t\tPrefixLength: pulumi.Int(22),\n\t\t\tNetwork:      network.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"extended_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:                        pulumi.String(\"my-instance\"),\n\t\t\tDescription:                 pulumi.String(\"My Data Fusion instance\"),\n\t\t\tDisplayName:                 pulumi.String(\"My Data Fusion instance\"),\n\t\t\tRegion:                      pulumi.String(\"us-central1\"),\n\t\t\tType:                        pulumi.String(\"BASIC\"),\n\t\t\tEnableStackdriverLogging:    pulumi.Bool(true),\n\t\t\tEnableStackdriverMonitoring: pulumi.Bool(true),\n\t\t\tPrivateInstance:             pulumi.Bool(true),\n\t\t\tDataprocServiceAccount:      pulumi.String(_default.Email),\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"example_key\": pulumi.String(\"example_value\"),\n\t\t\t},\n\t\t\tNetworkConfig: \u0026datafusion.InstanceNetworkConfigArgs{\n\t\t\t\tNetwork: pulumi.String(\"default\"),\n\t\t\t\tIpAllocation: pulumi.All(privateIpAlloc.Address, privateIpAlloc.PrefixLength).ApplyT(func(_args []interface{}) (string, error) {\n\t\t\t\t\taddress := _args[0].(string)\n\t\t\t\t\tprefixLength := _args[1].(int)\n\t\t\t\t\treturn fmt.Sprintf(\"%v/%v\", address, prefixLength), nil\n\t\t\t\t}).(pulumi.StringOutput),\n\t\t\t},\n\t\t\tAccelerators: datafusion.InstanceAcceleratorArray{\n\t\t\t\t\u0026datafusion.InstanceAcceleratorArgs{\n\t\t\t\t\tAcceleratorType: pulumi.String(\"CDC\"),\n\t\t\t\t\tState:           pulumi.String(\"ENABLED\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.appengine.AppengineFunctions;\nimport com.pulumi.gcp.appengine.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.GlobalAddress;\nimport com.pulumi.gcp.compute.GlobalAddressArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceAcceleratorArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = AppengineFunctions.getDefaultServiceAccount();\n\n        var network = new Network(\"network\", NetworkArgs.builder()\n            .name(\"datafusion-full-network\")\n            .build());\n\n        var privateIpAlloc = new GlobalAddress(\"privateIpAlloc\", GlobalAddressArgs.builder()\n            .name(\"datafusion-ip-alloc\")\n            .addressType(\"INTERNAL\")\n            .purpose(\"VPC_PEERING\")\n            .prefixLength(22)\n            .network(network.id())\n            .build());\n\n        var extendedInstance = new Instance(\"extendedInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .description(\"My Data Fusion instance\")\n            .displayName(\"My Data Fusion instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .enableStackdriverLogging(true)\n            .enableStackdriverMonitoring(true)\n            .privateInstance(true)\n            .dataprocServiceAccount(default_.email())\n            .labels(Map.of(\"example_key\", \"example_value\"))\n            .networkConfig(InstanceNetworkConfigArgs.builder()\n                .network(\"default\")\n                .ipAllocation(Output.tuple(privateIpAlloc.address(), privateIpAlloc.prefixLength()).applyValue(values -\u003e {\n                    var address = values.t1;\n                    var prefixLength = values.t2;\n                    return String.format(\"%s/%s\", address,prefixLength);\n                }))\n                .build())\n            .accelerators(InstanceAcceleratorArgs.builder()\n                .acceleratorType(\"CDC\")\n                .state(\"ENABLED\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  extendedInstance:\n    type: gcp:datafusion:Instance\n    name: extended_instance\n    properties:\n      name: my-instance\n      description: My Data Fusion instance\n      displayName: My Data Fusion instance\n      region: us-central1\n      type: BASIC\n      enableStackdriverLogging: true\n      enableStackdriverMonitoring: true\n      privateInstance: true\n      dataprocServiceAccount: ${default.email}\n      labels:\n        example_key: example_value\n      networkConfig:\n        network: default\n        ipAllocation: ${privateIpAlloc.address}/${privateIpAlloc.prefixLength}\n      accelerators:\n        - acceleratorType: CDC\n          state: ENABLED\n  network:\n    type: gcp:compute:Network\n    properties:\n      name: datafusion-full-network\n  privateIpAlloc:\n    type: gcp:compute:GlobalAddress\n    name: private_ip_alloc\n    properties:\n      name: datafusion-ip-alloc\n      addressType: INTERNAL\n      purpose: VPC_PEERING\n      prefixLength: 22\n      network: ${network.id}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:appengine:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Psc\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst psc = new gcp.compute.Network(\"psc\", {\n    name: \"datafusion-psc-network\",\n    autoCreateSubnetworks: false,\n});\nconst pscSubnetwork = new gcp.compute.Subnetwork(\"psc\", {\n    name: \"datafusion-psc-subnet\",\n    region: \"us-central1\",\n    network: psc.id,\n    ipCidrRange: \"10.0.0.0/16\",\n});\nconst pscNetworkAttachment = new gcp.compute.NetworkAttachment(\"psc\", {\n    name: \"datafusion-psc-attachment\",\n    region: \"us-central1\",\n    connectionPreference: \"ACCEPT_AUTOMATIC\",\n    subnetworks: [pscSubnetwork.selfLink],\n});\nconst pscInstance = new gcp.datafusion.Instance(\"psc_instance\", {\n    name: \"psc-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    privateInstance: true,\n    networkConfig: {\n        connectionType: \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n        privateServiceConnectConfig: {\n            networkAttachment: pscNetworkAttachment.id,\n            unreachableCidrBlock: \"192.168.0.0/25\",\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\npsc = gcp.compute.Network(\"psc\",\n    name=\"datafusion-psc-network\",\n    auto_create_subnetworks=False)\npsc_subnetwork = gcp.compute.Subnetwork(\"psc\",\n    name=\"datafusion-psc-subnet\",\n    region=\"us-central1\",\n    network=psc.id,\n    ip_cidr_range=\"10.0.0.0/16\")\npsc_network_attachment = gcp.compute.NetworkAttachment(\"psc\",\n    name=\"datafusion-psc-attachment\",\n    region=\"us-central1\",\n    connection_preference=\"ACCEPT_AUTOMATIC\",\n    subnetworks=[psc_subnetwork.self_link])\npsc_instance = gcp.datafusion.Instance(\"psc_instance\",\n    name=\"psc-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    private_instance=True,\n    network_config={\n        \"connection_type\": \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n        \"private_service_connect_config\": {\n            \"network_attachment\": psc_network_attachment.id,\n            \"unreachable_cidr_block\": \"192.168.0.0/25\",\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var psc = new Gcp.Compute.Network(\"psc\", new()\n    {\n        Name = \"datafusion-psc-network\",\n        AutoCreateSubnetworks = false,\n    });\n\n    var pscSubnetwork = new Gcp.Compute.Subnetwork(\"psc\", new()\n    {\n        Name = \"datafusion-psc-subnet\",\n        Region = \"us-central1\",\n        Network = psc.Id,\n        IpCidrRange = \"10.0.0.0/16\",\n    });\n\n    var pscNetworkAttachment = new Gcp.Compute.NetworkAttachment(\"psc\", new()\n    {\n        Name = \"datafusion-psc-attachment\",\n        Region = \"us-central1\",\n        ConnectionPreference = \"ACCEPT_AUTOMATIC\",\n        Subnetworks = new[]\n        {\n            pscSubnetwork.SelfLink,\n        },\n    });\n\n    var pscInstance = new Gcp.DataFusion.Instance(\"psc_instance\", new()\n    {\n        Name = \"psc-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        PrivateInstance = true,\n        NetworkConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigArgs\n        {\n            ConnectionType = \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n            PrivateServiceConnectConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigPrivateServiceConnectConfigArgs\n            {\n                NetworkAttachment = pscNetworkAttachment.Id,\n                UnreachableCidrBlock = \"192.168.0.0/25\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tpsc, err := compute.NewNetwork(ctx, \"psc\", \u0026compute.NetworkArgs{\n\t\t\tName:                  pulumi.String(\"datafusion-psc-network\"),\n\t\t\tAutoCreateSubnetworks: pulumi.Bool(false),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tpscSubnetwork, err := compute.NewSubnetwork(ctx, \"psc\", \u0026compute.SubnetworkArgs{\n\t\t\tName:        pulumi.String(\"datafusion-psc-subnet\"),\n\t\t\tRegion:      pulumi.String(\"us-central1\"),\n\t\t\tNetwork:     psc.ID(),\n\t\t\tIpCidrRange: pulumi.String(\"10.0.0.0/16\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tpscNetworkAttachment, err := compute.NewNetworkAttachment(ctx, \"psc\", \u0026compute.NetworkAttachmentArgs{\n\t\t\tName:                 pulumi.String(\"datafusion-psc-attachment\"),\n\t\t\tRegion:               pulumi.String(\"us-central1\"),\n\t\t\tConnectionPreference: pulumi.String(\"ACCEPT_AUTOMATIC\"),\n\t\t\tSubnetworks: pulumi.StringArray{\n\t\t\t\tpscSubnetwork.SelfLink,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"psc_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:            pulumi.String(\"psc-instance\"),\n\t\t\tRegion:          pulumi.String(\"us-central1\"),\n\t\t\tType:            pulumi.String(\"BASIC\"),\n\t\t\tPrivateInstance: pulumi.Bool(true),\n\t\t\tNetworkConfig: \u0026datafusion.InstanceNetworkConfigArgs{\n\t\t\t\tConnectionType: pulumi.String(\"PRIVATE_SERVICE_CONNECT_INTERFACES\"),\n\t\t\t\tPrivateServiceConnectConfig: \u0026datafusion.InstanceNetworkConfigPrivateServiceConnectConfigArgs{\n\t\t\t\t\tNetworkAttachment:    pscNetworkAttachment.ID(),\n\t\t\t\t\tUnreachableCidrBlock: pulumi.String(\"192.168.0.0/25\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.Subnetwork;\nimport com.pulumi.gcp.compute.SubnetworkArgs;\nimport com.pulumi.gcp.compute.NetworkAttachment;\nimport com.pulumi.gcp.compute.NetworkAttachmentArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigPrivateServiceConnectConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var psc = new Network(\"psc\", NetworkArgs.builder()\n            .name(\"datafusion-psc-network\")\n            .autoCreateSubnetworks(false)\n            .build());\n\n        var pscSubnetwork = new Subnetwork(\"pscSubnetwork\", SubnetworkArgs.builder()\n            .name(\"datafusion-psc-subnet\")\n            .region(\"us-central1\")\n            .network(psc.id())\n            .ipCidrRange(\"10.0.0.0/16\")\n            .build());\n\n        var pscNetworkAttachment = new NetworkAttachment(\"pscNetworkAttachment\", NetworkAttachmentArgs.builder()\n            .name(\"datafusion-psc-attachment\")\n            .region(\"us-central1\")\n            .connectionPreference(\"ACCEPT_AUTOMATIC\")\n            .subnetworks(pscSubnetwork.selfLink())\n            .build());\n\n        var pscInstance = new Instance(\"pscInstance\", InstanceArgs.builder()\n            .name(\"psc-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .privateInstance(true)\n            .networkConfig(InstanceNetworkConfigArgs.builder()\n                .connectionType(\"PRIVATE_SERVICE_CONNECT_INTERFACES\")\n                .privateServiceConnectConfig(InstanceNetworkConfigPrivateServiceConnectConfigArgs.builder()\n                    .networkAttachment(pscNetworkAttachment.id())\n                    .unreachableCidrBlock(\"192.168.0.0/25\")\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  pscInstance:\n    type: gcp:datafusion:Instance\n    name: psc_instance\n    properties:\n      name: psc-instance\n      region: us-central1\n      type: BASIC\n      privateInstance: true\n      networkConfig:\n        connectionType: PRIVATE_SERVICE_CONNECT_INTERFACES\n        privateServiceConnectConfig:\n          networkAttachment: ${pscNetworkAttachment.id}\n          unreachableCidrBlock: 192.168.0.0/25\n  psc:\n    type: gcp:compute:Network\n    properties:\n      name: datafusion-psc-network\n      autoCreateSubnetworks: false\n  pscSubnetwork:\n    type: gcp:compute:Subnetwork\n    name: psc\n    properties:\n      name: datafusion-psc-subnet\n      region: us-central1\n      network: ${psc.id}\n      ipCidrRange: 10.0.0.0/16\n  pscNetworkAttachment:\n    type: gcp:compute:NetworkAttachment\n    name: psc\n    properties:\n      name: datafusion-psc-attachment\n      region: us-central1\n      connectionPreference: ACCEPT_AUTOMATIC\n      subnetworks:\n        - ${pscSubnetwork.selfLink}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Cmek\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst keyRing = new gcp.kms.KeyRing(\"key_ring\", {\n    name: \"my-instance\",\n    location: \"us-central1\",\n});\nconst cryptoKey = new gcp.kms.CryptoKey(\"crypto_key\", {\n    name: \"my-instance\",\n    keyRing: keyRing.id,\n});\nconst project = gcp.organizations.getProject({});\nconst cryptoKeyMember = new gcp.kms.CryptoKeyIAMMember(\"crypto_key_member\", {\n    cryptoKeyId: cryptoKey.id,\n    role: \"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n    member: project.then(project =\u003e `serviceAccount:service-${project.number}@gcp-sa-datafusion.iam.gserviceaccount.com`),\n});\nconst cmek = new gcp.datafusion.Instance(\"cmek\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    cryptoKeyConfig: {\n        keyReference: cryptoKey.id,\n    },\n}, {\n    dependsOn: [cryptoKeyMember],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nkey_ring = gcp.kms.KeyRing(\"key_ring\",\n    name=\"my-instance\",\n    location=\"us-central1\")\ncrypto_key = gcp.kms.CryptoKey(\"crypto_key\",\n    name=\"my-instance\",\n    key_ring=key_ring.id)\nproject = gcp.organizations.get_project()\ncrypto_key_member = gcp.kms.CryptoKeyIAMMember(\"crypto_key_member\",\n    crypto_key_id=crypto_key.id,\n    role=\"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n    member=f\"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com\")\ncmek = gcp.datafusion.Instance(\"cmek\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    crypto_key_config={\n        \"key_reference\": crypto_key.id,\n    },\n    opts = pulumi.ResourceOptions(depends_on=[crypto_key_member]))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var keyRing = new Gcp.Kms.KeyRing(\"key_ring\", new()\n    {\n        Name = \"my-instance\",\n        Location = \"us-central1\",\n    });\n\n    var cryptoKey = new Gcp.Kms.CryptoKey(\"crypto_key\", new()\n    {\n        Name = \"my-instance\",\n        KeyRing = keyRing.Id,\n    });\n\n    var project = Gcp.Organizations.GetProject.Invoke();\n\n    var cryptoKeyMember = new Gcp.Kms.CryptoKeyIAMMember(\"crypto_key_member\", new()\n    {\n        CryptoKeyId = cryptoKey.Id,\n        Role = \"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n        Member = $\"serviceAccount:service-{project.Apply(getProjectResult =\u003e getProjectResult.Number)}@gcp-sa-datafusion.iam.gserviceaccount.com\",\n    });\n\n    var cmek = new Gcp.DataFusion.Instance(\"cmek\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        CryptoKeyConfig = new Gcp.DataFusion.Inputs.InstanceCryptoKeyConfigArgs\n        {\n            KeyReference = cryptoKey.Id,\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            cryptoKeyMember,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/kms\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tkeyRing, err := kms.NewKeyRing(ctx, \"key_ring\", \u0026kms.KeyRingArgs{\n\t\t\tName:     pulumi.String(\"my-instance\"),\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcryptoKey, err := kms.NewCryptoKey(ctx, \"crypto_key\", \u0026kms.CryptoKeyArgs{\n\t\t\tName:    pulumi.String(\"my-instance\"),\n\t\t\tKeyRing: keyRing.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tproject, err := organizations.LookupProject(ctx, \u0026organizations.LookupProjectArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcryptoKeyMember, err := kms.NewCryptoKeyIAMMember(ctx, \"crypto_key_member\", \u0026kms.CryptoKeyIAMMemberArgs{\n\t\t\tCryptoKeyId: cryptoKey.ID(),\n\t\t\tRole:        pulumi.String(\"roles/cloudkms.cryptoKeyEncrypterDecrypter\"),\n\t\t\tMember:      pulumi.Sprintf(\"serviceAccount:service-%v@gcp-sa-datafusion.iam.gserviceaccount.com\", project.Number),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"cmek\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t\tCryptoKeyConfig: \u0026datafusion.InstanceCryptoKeyConfigArgs{\n\t\t\t\tKeyReference: cryptoKey.ID(),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tcryptoKeyMember,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.kms.KeyRing;\nimport com.pulumi.gcp.kms.KeyRingArgs;\nimport com.pulumi.gcp.kms.CryptoKey;\nimport com.pulumi.gcp.kms.CryptoKeyArgs;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetProjectArgs;\nimport com.pulumi.gcp.kms.CryptoKeyIAMMember;\nimport com.pulumi.gcp.kms.CryptoKeyIAMMemberArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceCryptoKeyConfigArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var keyRing = new KeyRing(\"keyRing\", KeyRingArgs.builder()\n            .name(\"my-instance\")\n            .location(\"us-central1\")\n            .build());\n\n        var cryptoKey = new CryptoKey(\"cryptoKey\", CryptoKeyArgs.builder()\n            .name(\"my-instance\")\n            .keyRing(keyRing.id())\n            .build());\n\n        final var project = OrganizationsFunctions.getProject();\n\n        var cryptoKeyMember = new CryptoKeyIAMMember(\"cryptoKeyMember\", CryptoKeyIAMMemberArgs.builder()\n            .cryptoKeyId(cryptoKey.id())\n            .role(\"roles/cloudkms.cryptoKeyEncrypterDecrypter\")\n            .member(String.format(\"serviceAccount:service-%s@gcp-sa-datafusion.iam.gserviceaccount.com\", project.applyValue(getProjectResult -\u003e getProjectResult.number())))\n            .build());\n\n        var cmek = new Instance(\"cmek\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .cryptoKeyConfig(InstanceCryptoKeyConfigArgs.builder()\n                .keyReference(cryptoKey.id())\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(cryptoKeyMember)\n                .build());\n\n    }\n}\n```\n```yaml\nresources:\n  cmek:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n      cryptoKeyConfig:\n        keyReference: ${cryptoKey.id}\n    options:\n      dependsOn:\n        - ${cryptoKeyMember}\n  cryptoKey:\n    type: gcp:kms:CryptoKey\n    name: crypto_key\n    properties:\n      name: my-instance\n      keyRing: ${keyRing.id}\n  keyRing:\n    type: gcp:kms:KeyRing\n    name: key_ring\n    properties:\n      name: my-instance\n      location: us-central1\n  cryptoKeyMember:\n    type: gcp:kms:CryptoKeyIAMMember\n    name: crypto_key_member\n    properties:\n      cryptoKeyId: ${cryptoKey.id}\n      role: roles/cloudkms.cryptoKeyEncrypterDecrypter\n      member: serviceAccount:service-${project.number}@gcp-sa-datafusion.iam.gserviceaccount.com\nvariables:\n  project:\n    fn::invoke:\n      function: gcp:organizations:getProject\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Enterprise\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst enterpriseInstance = new gcp.datafusion.Instance(\"enterprise_instance\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"ENTERPRISE\",\n    enableRbac: true,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nenterprise_instance = gcp.datafusion.Instance(\"enterprise_instance\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"ENTERPRISE\",\n    enable_rbac=True)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var enterpriseInstance = new Gcp.DataFusion.Instance(\"enterprise_instance\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"ENTERPRISE\",\n        EnableRbac = true,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"enterprise_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:       pulumi.String(\"my-instance\"),\n\t\t\tRegion:     pulumi.String(\"us-central1\"),\n\t\t\tType:       pulumi.String(\"ENTERPRISE\"),\n\t\t\tEnableRbac: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var enterpriseInstance = new Instance(\"enterpriseInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"ENTERPRISE\")\n            .enableRbac(true)\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  enterpriseInstance:\n    type: gcp:datafusion:Instance\n    name: enterprise_instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: ENTERPRISE\n      enableRbac: true\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Event\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst eventTopic = new gcp.pubsub.Topic(\"event\", {name: \"my-instance\"});\nconst event = new gcp.datafusion.Instance(\"event\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    eventPublishConfig: {\n        enabled: true,\n        topic: eventTopic.id,\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nevent_topic = gcp.pubsub.Topic(\"event\", name=\"my-instance\")\nevent = gcp.datafusion.Instance(\"event\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    event_publish_config={\n        \"enabled\": True,\n        \"topic\": event_topic.id,\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var eventTopic = new Gcp.PubSub.Topic(\"event\", new()\n    {\n        Name = \"my-instance\",\n    });\n\n    var @event = new Gcp.DataFusion.Instance(\"event\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        EventPublishConfig = new Gcp.DataFusion.Inputs.InstanceEventPublishConfigArgs\n        {\n            Enabled = true,\n            Topic = eventTopic.Id,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/pubsub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\teventTopic, err := pubsub.NewTopic(ctx, \"event\", \u0026pubsub.TopicArgs{\n\t\t\tName: pulumi.String(\"my-instance\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"event\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t\tEventPublishConfig: \u0026datafusion.InstanceEventPublishConfigArgs{\n\t\t\t\tEnabled: pulumi.Bool(true),\n\t\t\t\tTopic:   eventTopic.ID(),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.pubsub.Topic;\nimport com.pulumi.gcp.pubsub.TopicArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceEventPublishConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var eventTopic = new Topic(\"eventTopic\", TopicArgs.builder()\n            .name(\"my-instance\")\n            .build());\n\n        var event = new Instance(\"event\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .eventPublishConfig(InstanceEventPublishConfigArgs.builder()\n                .enabled(true)\n                .topic(eventTopic.id())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  event:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n      eventPublishConfig:\n        enabled: true\n        topic: ${eventTopic.id}\n  eventTopic:\n    type: gcp:pubsub:Topic\n    name: event\n    properties:\n      name: my-instance\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Zone\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst zone = new gcp.datafusion.Instance(\"zone\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    zone: \"us-central1-a\",\n    type: \"DEVELOPER\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nzone = gcp.datafusion.Instance(\"zone\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    zone=\"us-central1-a\",\n    type=\"DEVELOPER\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var zone = new Gcp.DataFusion.Instance(\"zone\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Zone = \"us-central1-a\",\n        Type = \"DEVELOPER\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"zone\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tZone:   pulumi.String(\"us-central1-a\"),\n\t\t\tType:   pulumi.String(\"DEVELOPER\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var zone = new Instance(\"zone\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .zone(\"us-central1-a\")\n            .type(\"DEVELOPER\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  zone:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      zone: us-central1-a\n      type: DEVELOPER\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nInstance can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{region}}/instances/{{name}}`\n\n* `{{project}}/{{region}}/{{name}}`\n\n* `{{region}}/{{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, Instance can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamMember:InstanceIamMember default projects/{{project}}/locations/{{region}}/instances/{{name}}\n```\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamMember:InstanceIamMember default {{project}}/{{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamMember:InstanceIamMember default {{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamMember:InstanceIamMember default {{name}}\n```\n\n",
+            "description": "Represents a Data Fusion instance.\n\n\nTo get more information about Instance, see:\n\n* [API documentation](https://cloud.google.com/data-fusion/docs/reference/rest/v1beta1/projects.locations.instances)\n* How-to Guides\n    * [Official Documentation](https://cloud.google.com/data-fusion/docs/)\n\n## Example Usage\n\n### Data Fusion Instance Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst basicInstance = new gcp.datafusion.Instance(\"basic_instance\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nbasic_instance = gcp.datafusion.Instance(\"basic_instance\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicInstance = new Gcp.DataFusion.Instance(\"basic_instance\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"basic_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var basicInstance = new Instance(\"basicInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  basicInstance:\n    type: gcp:datafusion:Instance\n    name: basic_instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Full\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.appengine.getDefaultServiceAccount({});\nconst network = new gcp.compute.Network(\"network\", {name: \"datafusion-full-network\"});\nconst privateIpAlloc = new gcp.compute.GlobalAddress(\"private_ip_alloc\", {\n    name: \"datafusion-ip-alloc\",\n    addressType: \"INTERNAL\",\n    purpose: \"VPC_PEERING\",\n    prefixLength: 22,\n    network: network.id,\n});\nconst extendedInstance = new gcp.datafusion.Instance(\"extended_instance\", {\n    name: \"my-instance\",\n    description: \"My Data Fusion instance\",\n    displayName: \"My Data Fusion instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    enableStackdriverLogging: true,\n    enableStackdriverMonitoring: true,\n    privateInstance: true,\n    dataprocServiceAccount: _default.then(_default =\u003e _default.email),\n    labels: {\n        example_key: \"example_value\",\n    },\n    networkConfig: {\n        network: \"default\",\n        ipAllocation: pulumi.interpolate`${privateIpAlloc.address}/${privateIpAlloc.prefixLength}`,\n    },\n    accelerators: [{\n        acceleratorType: \"CDC\",\n        state: \"ENABLED\",\n    }],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.appengine.get_default_service_account()\nnetwork = gcp.compute.Network(\"network\", name=\"datafusion-full-network\")\nprivate_ip_alloc = gcp.compute.GlobalAddress(\"private_ip_alloc\",\n    name=\"datafusion-ip-alloc\",\n    address_type=\"INTERNAL\",\n    purpose=\"VPC_PEERING\",\n    prefix_length=22,\n    network=network.id)\nextended_instance = gcp.datafusion.Instance(\"extended_instance\",\n    name=\"my-instance\",\n    description=\"My Data Fusion instance\",\n    display_name=\"My Data Fusion instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    enable_stackdriver_logging=True,\n    enable_stackdriver_monitoring=True,\n    private_instance=True,\n    dataproc_service_account=default.email,\n    labels={\n        \"example_key\": \"example_value\",\n    },\n    network_config={\n        \"network\": \"default\",\n        \"ip_allocation\": pulumi.Output.all(\n            address=private_ip_alloc.address,\n            prefix_length=private_ip_alloc.prefix_length\n).apply(lambda resolved_outputs: f\"{resolved_outputs['address']}/{resolved_outputs['prefix_length']}\")\n,\n    },\n    accelerators=[{\n        \"accelerator_type\": \"CDC\",\n        \"state\": \"ENABLED\",\n    }])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.AppEngine.GetDefaultServiceAccount.Invoke();\n\n    var network = new Gcp.Compute.Network(\"network\", new()\n    {\n        Name = \"datafusion-full-network\",\n    });\n\n    var privateIpAlloc = new Gcp.Compute.GlobalAddress(\"private_ip_alloc\", new()\n    {\n        Name = \"datafusion-ip-alloc\",\n        AddressType = \"INTERNAL\",\n        Purpose = \"VPC_PEERING\",\n        PrefixLength = 22,\n        Network = network.Id,\n    });\n\n    var extendedInstance = new Gcp.DataFusion.Instance(\"extended_instance\", new()\n    {\n        Name = \"my-instance\",\n        Description = \"My Data Fusion instance\",\n        DisplayName = \"My Data Fusion instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        EnableStackdriverLogging = true,\n        EnableStackdriverMonitoring = true,\n        PrivateInstance = true,\n        DataprocServiceAccount = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Email)),\n        Labels = \n        {\n            { \"example_key\", \"example_value\" },\n        },\n        NetworkConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigArgs\n        {\n            Network = \"default\",\n            IpAllocation = Output.Tuple(privateIpAlloc.Address, privateIpAlloc.PrefixLength).Apply(values =\u003e\n            {\n                var address = values.Item1;\n                var prefixLength = values.Item2;\n                return $\"{address}/{prefixLength}\";\n            }),\n        },\n        Accelerators = new[]\n        {\n            new Gcp.DataFusion.Inputs.InstanceAcceleratorArgs\n            {\n                AcceleratorType = \"CDC\",\n                State = \"ENABLED\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/appengine\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := appengine.GetDefaultServiceAccount(ctx, \u0026appengine.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tnetwork, err := compute.NewNetwork(ctx, \"network\", \u0026compute.NetworkArgs{\n\t\t\tName: pulumi.String(\"datafusion-full-network\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tprivateIpAlloc, err := compute.NewGlobalAddress(ctx, \"private_ip_alloc\", \u0026compute.GlobalAddressArgs{\n\t\t\tName:         pulumi.String(\"datafusion-ip-alloc\"),\n\t\t\tAddressType:  pulumi.String(\"INTERNAL\"),\n\t\t\tPurpose:      pulumi.String(\"VPC_PEERING\"),\n\t\t\tPrefixLength: pulumi.Int(22),\n\t\t\tNetwork:      network.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"extended_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:                        pulumi.String(\"my-instance\"),\n\t\t\tDescription:                 pulumi.String(\"My Data Fusion instance\"),\n\t\t\tDisplayName:                 pulumi.String(\"My Data Fusion instance\"),\n\t\t\tRegion:                      pulumi.String(\"us-central1\"),\n\t\t\tType:                        pulumi.String(\"BASIC\"),\n\t\t\tEnableStackdriverLogging:    pulumi.Bool(true),\n\t\t\tEnableStackdriverMonitoring: pulumi.Bool(true),\n\t\t\tPrivateInstance:             pulumi.Bool(true),\n\t\t\tDataprocServiceAccount:      pulumi.String(_default.Email),\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"example_key\": pulumi.String(\"example_value\"),\n\t\t\t},\n\t\t\tNetworkConfig: \u0026datafusion.InstanceNetworkConfigArgs{\n\t\t\t\tNetwork: pulumi.String(\"default\"),\n\t\t\t\tIpAllocation: pulumi.All(privateIpAlloc.Address, privateIpAlloc.PrefixLength).ApplyT(func(_args []interface{}) (string, error) {\n\t\t\t\t\taddress := _args[0].(string)\n\t\t\t\t\tprefixLength := _args[1].(int)\n\t\t\t\t\treturn fmt.Sprintf(\"%v/%v\", address, prefixLength), nil\n\t\t\t\t}).(pulumi.StringOutput),\n\t\t\t},\n\t\t\tAccelerators: datafusion.InstanceAcceleratorArray{\n\t\t\t\t\u0026datafusion.InstanceAcceleratorArgs{\n\t\t\t\t\tAcceleratorType: pulumi.String(\"CDC\"),\n\t\t\t\t\tState:           pulumi.String(\"ENABLED\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.appengine.AppengineFunctions;\nimport com.pulumi.gcp.appengine.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.GlobalAddress;\nimport com.pulumi.gcp.compute.GlobalAddressArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceAcceleratorArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = AppengineFunctions.getDefaultServiceAccount();\n\n        var network = new Network(\"network\", NetworkArgs.builder()\n            .name(\"datafusion-full-network\")\n            .build());\n\n        var privateIpAlloc = new GlobalAddress(\"privateIpAlloc\", GlobalAddressArgs.builder()\n            .name(\"datafusion-ip-alloc\")\n            .addressType(\"INTERNAL\")\n            .purpose(\"VPC_PEERING\")\n            .prefixLength(22)\n            .network(network.id())\n            .build());\n\n        var extendedInstance = new Instance(\"extendedInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .description(\"My Data Fusion instance\")\n            .displayName(\"My Data Fusion instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .enableStackdriverLogging(true)\n            .enableStackdriverMonitoring(true)\n            .privateInstance(true)\n            .dataprocServiceAccount(default_.email())\n            .labels(Map.of(\"example_key\", \"example_value\"))\n            .networkConfig(InstanceNetworkConfigArgs.builder()\n                .network(\"default\")\n                .ipAllocation(Output.tuple(privateIpAlloc.address(), privateIpAlloc.prefixLength()).applyValue(values -\u003e {\n                    var address = values.t1;\n                    var prefixLength = values.t2;\n                    return String.format(\"%s/%s\", address,prefixLength);\n                }))\n                .build())\n            .accelerators(InstanceAcceleratorArgs.builder()\n                .acceleratorType(\"CDC\")\n                .state(\"ENABLED\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  extendedInstance:\n    type: gcp:datafusion:Instance\n    name: extended_instance\n    properties:\n      name: my-instance\n      description: My Data Fusion instance\n      displayName: My Data Fusion instance\n      region: us-central1\n      type: BASIC\n      enableStackdriverLogging: true\n      enableStackdriverMonitoring: true\n      privateInstance: true\n      dataprocServiceAccount: ${default.email}\n      labels:\n        example_key: example_value\n      networkConfig:\n        network: default\n        ipAllocation: ${privateIpAlloc.address}/${privateIpAlloc.prefixLength}\n      accelerators:\n        - acceleratorType: CDC\n          state: ENABLED\n  network:\n    type: gcp:compute:Network\n    properties:\n      name: datafusion-full-network\n  privateIpAlloc:\n    type: gcp:compute:GlobalAddress\n    name: private_ip_alloc\n    properties:\n      name: datafusion-ip-alloc\n      addressType: INTERNAL\n      purpose: VPC_PEERING\n      prefixLength: 22\n      network: ${network.id}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:appengine:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Psc\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst psc = new gcp.compute.Network(\"psc\", {\n    name: \"datafusion-psc-network\",\n    autoCreateSubnetworks: false,\n});\nconst pscSubnetwork = new gcp.compute.Subnetwork(\"psc\", {\n    name: \"datafusion-psc-subnet\",\n    region: \"us-central1\",\n    network: psc.id,\n    ipCidrRange: \"10.0.0.0/16\",\n});\nconst pscNetworkAttachment = new gcp.compute.NetworkAttachment(\"psc\", {\n    name: \"datafusion-psc-attachment\",\n    region: \"us-central1\",\n    connectionPreference: \"ACCEPT_AUTOMATIC\",\n    subnetworks: [pscSubnetwork.selfLink],\n});\nconst pscInstance = new gcp.datafusion.Instance(\"psc_instance\", {\n    name: \"psc-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    privateInstance: true,\n    networkConfig: {\n        connectionType: \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n        privateServiceConnectConfig: {\n            networkAttachment: pscNetworkAttachment.id,\n            unreachableCidrBlock: \"192.168.0.0/25\",\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\npsc = gcp.compute.Network(\"psc\",\n    name=\"datafusion-psc-network\",\n    auto_create_subnetworks=False)\npsc_subnetwork = gcp.compute.Subnetwork(\"psc\",\n    name=\"datafusion-psc-subnet\",\n    region=\"us-central1\",\n    network=psc.id,\n    ip_cidr_range=\"10.0.0.0/16\")\npsc_network_attachment = gcp.compute.NetworkAttachment(\"psc\",\n    name=\"datafusion-psc-attachment\",\n    region=\"us-central1\",\n    connection_preference=\"ACCEPT_AUTOMATIC\",\n    subnetworks=[psc_subnetwork.self_link])\npsc_instance = gcp.datafusion.Instance(\"psc_instance\",\n    name=\"psc-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    private_instance=True,\n    network_config={\n        \"connection_type\": \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n        \"private_service_connect_config\": {\n            \"network_attachment\": psc_network_attachment.id,\n            \"unreachable_cidr_block\": \"192.168.0.0/25\",\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var psc = new Gcp.Compute.Network(\"psc\", new()\n    {\n        Name = \"datafusion-psc-network\",\n        AutoCreateSubnetworks = false,\n    });\n\n    var pscSubnetwork = new Gcp.Compute.Subnetwork(\"psc\", new()\n    {\n        Name = \"datafusion-psc-subnet\",\n        Region = \"us-central1\",\n        Network = psc.Id,\n        IpCidrRange = \"10.0.0.0/16\",\n    });\n\n    var pscNetworkAttachment = new Gcp.Compute.NetworkAttachment(\"psc\", new()\n    {\n        Name = \"datafusion-psc-attachment\",\n        Region = \"us-central1\",\n        ConnectionPreference = \"ACCEPT_AUTOMATIC\",\n        Subnetworks = new[]\n        {\n            pscSubnetwork.SelfLink,\n        },\n    });\n\n    var pscInstance = new Gcp.DataFusion.Instance(\"psc_instance\", new()\n    {\n        Name = \"psc-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        PrivateInstance = true,\n        NetworkConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigArgs\n        {\n            ConnectionType = \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n            PrivateServiceConnectConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigPrivateServiceConnectConfigArgs\n            {\n                NetworkAttachment = pscNetworkAttachment.Id,\n                UnreachableCidrBlock = \"192.168.0.0/25\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tpsc, err := compute.NewNetwork(ctx, \"psc\", \u0026compute.NetworkArgs{\n\t\t\tName:                  pulumi.String(\"datafusion-psc-network\"),\n\t\t\tAutoCreateSubnetworks: pulumi.Bool(false),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tpscSubnetwork, err := compute.NewSubnetwork(ctx, \"psc\", \u0026compute.SubnetworkArgs{\n\t\t\tName:        pulumi.String(\"datafusion-psc-subnet\"),\n\t\t\tRegion:      pulumi.String(\"us-central1\"),\n\t\t\tNetwork:     psc.ID(),\n\t\t\tIpCidrRange: pulumi.String(\"10.0.0.0/16\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tpscNetworkAttachment, err := compute.NewNetworkAttachment(ctx, \"psc\", \u0026compute.NetworkAttachmentArgs{\n\t\t\tName:                 pulumi.String(\"datafusion-psc-attachment\"),\n\t\t\tRegion:               pulumi.String(\"us-central1\"),\n\t\t\tConnectionPreference: pulumi.String(\"ACCEPT_AUTOMATIC\"),\n\t\t\tSubnetworks: pulumi.StringArray{\n\t\t\t\tpscSubnetwork.SelfLink,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"psc_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:            pulumi.String(\"psc-instance\"),\n\t\t\tRegion:          pulumi.String(\"us-central1\"),\n\t\t\tType:            pulumi.String(\"BASIC\"),\n\t\t\tPrivateInstance: pulumi.Bool(true),\n\t\t\tNetworkConfig: \u0026datafusion.InstanceNetworkConfigArgs{\n\t\t\t\tConnectionType: pulumi.String(\"PRIVATE_SERVICE_CONNECT_INTERFACES\"),\n\t\t\t\tPrivateServiceConnectConfig: \u0026datafusion.InstanceNetworkConfigPrivateServiceConnectConfigArgs{\n\t\t\t\t\tNetworkAttachment:    pscNetworkAttachment.ID(),\n\t\t\t\t\tUnreachableCidrBlock: pulumi.String(\"192.168.0.0/25\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.Subnetwork;\nimport com.pulumi.gcp.compute.SubnetworkArgs;\nimport com.pulumi.gcp.compute.NetworkAttachment;\nimport com.pulumi.gcp.compute.NetworkAttachmentArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigPrivateServiceConnectConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var psc = new Network(\"psc\", NetworkArgs.builder()\n            .name(\"datafusion-psc-network\")\n            .autoCreateSubnetworks(false)\n            .build());\n\n        var pscSubnetwork = new Subnetwork(\"pscSubnetwork\", SubnetworkArgs.builder()\n            .name(\"datafusion-psc-subnet\")\n            .region(\"us-central1\")\n            .network(psc.id())\n            .ipCidrRange(\"10.0.0.0/16\")\n            .build());\n\n        var pscNetworkAttachment = new NetworkAttachment(\"pscNetworkAttachment\", NetworkAttachmentArgs.builder()\n            .name(\"datafusion-psc-attachment\")\n            .region(\"us-central1\")\n            .connectionPreference(\"ACCEPT_AUTOMATIC\")\n            .subnetworks(pscSubnetwork.selfLink())\n            .build());\n\n        var pscInstance = new Instance(\"pscInstance\", InstanceArgs.builder()\n            .name(\"psc-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .privateInstance(true)\n            .networkConfig(InstanceNetworkConfigArgs.builder()\n                .connectionType(\"PRIVATE_SERVICE_CONNECT_INTERFACES\")\n                .privateServiceConnectConfig(InstanceNetworkConfigPrivateServiceConnectConfigArgs.builder()\n                    .networkAttachment(pscNetworkAttachment.id())\n                    .unreachableCidrBlock(\"192.168.0.0/25\")\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  pscInstance:\n    type: gcp:datafusion:Instance\n    name: psc_instance\n    properties:\n      name: psc-instance\n      region: us-central1\n      type: BASIC\n      privateInstance: true\n      networkConfig:\n        connectionType: PRIVATE_SERVICE_CONNECT_INTERFACES\n        privateServiceConnectConfig:\n          networkAttachment: ${pscNetworkAttachment.id}\n          unreachableCidrBlock: 192.168.0.0/25\n  psc:\n    type: gcp:compute:Network\n    properties:\n      name: datafusion-psc-network\n      autoCreateSubnetworks: false\n  pscSubnetwork:\n    type: gcp:compute:Subnetwork\n    name: psc\n    properties:\n      name: datafusion-psc-subnet\n      region: us-central1\n      network: ${psc.id}\n      ipCidrRange: 10.0.0.0/16\n  pscNetworkAttachment:\n    type: gcp:compute:NetworkAttachment\n    name: psc\n    properties:\n      name: datafusion-psc-attachment\n      region: us-central1\n      connectionPreference: ACCEPT_AUTOMATIC\n      subnetworks:\n        - ${pscSubnetwork.selfLink}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Cmek\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst keyRing = new gcp.kms.KeyRing(\"key_ring\", {\n    name: \"my-instance\",\n    location: \"us-central1\",\n});\nconst cryptoKey = new gcp.kms.CryptoKey(\"crypto_key\", {\n    name: \"my-instance\",\n    keyRing: keyRing.id,\n});\nconst project = gcp.organizations.getProject({});\nconst cryptoKeyMember = new gcp.kms.CryptoKeyIAMMember(\"crypto_key_member\", {\n    cryptoKeyId: cryptoKey.id,\n    role: \"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n    member: project.then(project =\u003e `serviceAccount:service-${project.number}@gcp-sa-datafusion.iam.gserviceaccount.com`),\n});\nconst cmek = new gcp.datafusion.Instance(\"cmek\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    cryptoKeyConfig: {\n        keyReference: cryptoKey.id,\n    },\n}, {\n    dependsOn: [cryptoKeyMember],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nkey_ring = gcp.kms.KeyRing(\"key_ring\",\n    name=\"my-instance\",\n    location=\"us-central1\")\ncrypto_key = gcp.kms.CryptoKey(\"crypto_key\",\n    name=\"my-instance\",\n    key_ring=key_ring.id)\nproject = gcp.organizations.get_project()\ncrypto_key_member = gcp.kms.CryptoKeyIAMMember(\"crypto_key_member\",\n    crypto_key_id=crypto_key.id,\n    role=\"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n    member=f\"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com\")\ncmek = gcp.datafusion.Instance(\"cmek\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    crypto_key_config={\n        \"key_reference\": crypto_key.id,\n    },\n    opts = pulumi.ResourceOptions(depends_on=[crypto_key_member]))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var keyRing = new Gcp.Kms.KeyRing(\"key_ring\", new()\n    {\n        Name = \"my-instance\",\n        Location = \"us-central1\",\n    });\n\n    var cryptoKey = new Gcp.Kms.CryptoKey(\"crypto_key\", new()\n    {\n        Name = \"my-instance\",\n        KeyRing = keyRing.Id,\n    });\n\n    var project = Gcp.Organizations.GetProject.Invoke();\n\n    var cryptoKeyMember = new Gcp.Kms.CryptoKeyIAMMember(\"crypto_key_member\", new()\n    {\n        CryptoKeyId = cryptoKey.Id,\n        Role = \"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n        Member = $\"serviceAccount:service-{project.Apply(getProjectResult =\u003e getProjectResult.Number)}@gcp-sa-datafusion.iam.gserviceaccount.com\",\n    });\n\n    var cmek = new Gcp.DataFusion.Instance(\"cmek\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        CryptoKeyConfig = new Gcp.DataFusion.Inputs.InstanceCryptoKeyConfigArgs\n        {\n            KeyReference = cryptoKey.Id,\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            cryptoKeyMember,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/kms\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tkeyRing, err := kms.NewKeyRing(ctx, \"key_ring\", \u0026kms.KeyRingArgs{\n\t\t\tName:     pulumi.String(\"my-instance\"),\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcryptoKey, err := kms.NewCryptoKey(ctx, \"crypto_key\", \u0026kms.CryptoKeyArgs{\n\t\t\tName:    pulumi.String(\"my-instance\"),\n\t\t\tKeyRing: keyRing.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tproject, err := organizations.LookupProject(ctx, \u0026organizations.LookupProjectArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcryptoKeyMember, err := kms.NewCryptoKeyIAMMember(ctx, \"crypto_key_member\", \u0026kms.CryptoKeyIAMMemberArgs{\n\t\t\tCryptoKeyId: cryptoKey.ID(),\n\t\t\tRole:        pulumi.String(\"roles/cloudkms.cryptoKeyEncrypterDecrypter\"),\n\t\t\tMember:      pulumi.Sprintf(\"serviceAccount:service-%v@gcp-sa-datafusion.iam.gserviceaccount.com\", project.Number),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"cmek\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t\tCryptoKeyConfig: \u0026datafusion.InstanceCryptoKeyConfigArgs{\n\t\t\t\tKeyReference: cryptoKey.ID(),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tcryptoKeyMember,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.kms.KeyRing;\nimport com.pulumi.gcp.kms.KeyRingArgs;\nimport com.pulumi.gcp.kms.CryptoKey;\nimport com.pulumi.gcp.kms.CryptoKeyArgs;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetProjectArgs;\nimport com.pulumi.gcp.kms.CryptoKeyIAMMember;\nimport com.pulumi.gcp.kms.CryptoKeyIAMMemberArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceCryptoKeyConfigArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var keyRing = new KeyRing(\"keyRing\", KeyRingArgs.builder()\n            .name(\"my-instance\")\n            .location(\"us-central1\")\n            .build());\n\n        var cryptoKey = new CryptoKey(\"cryptoKey\", CryptoKeyArgs.builder()\n            .name(\"my-instance\")\n            .keyRing(keyRing.id())\n            .build());\n\n        final var project = OrganizationsFunctions.getProject();\n\n        var cryptoKeyMember = new CryptoKeyIAMMember(\"cryptoKeyMember\", CryptoKeyIAMMemberArgs.builder()\n            .cryptoKeyId(cryptoKey.id())\n            .role(\"roles/cloudkms.cryptoKeyEncrypterDecrypter\")\n            .member(String.format(\"serviceAccount:service-%s@gcp-sa-datafusion.iam.gserviceaccount.com\", project.applyValue(getProjectResult -\u003e getProjectResult.number())))\n            .build());\n\n        var cmek = new Instance(\"cmek\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .cryptoKeyConfig(InstanceCryptoKeyConfigArgs.builder()\n                .keyReference(cryptoKey.id())\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(cryptoKeyMember)\n                .build());\n\n    }\n}\n```\n```yaml\nresources:\n  cmek:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n      cryptoKeyConfig:\n        keyReference: ${cryptoKey.id}\n    options:\n      dependsOn:\n        - ${cryptoKeyMember}\n  cryptoKey:\n    type: gcp:kms:CryptoKey\n    name: crypto_key\n    properties:\n      name: my-instance\n      keyRing: ${keyRing.id}\n  keyRing:\n    type: gcp:kms:KeyRing\n    name: key_ring\n    properties:\n      name: my-instance\n      location: us-central1\n  cryptoKeyMember:\n    type: gcp:kms:CryptoKeyIAMMember\n    name: crypto_key_member\n    properties:\n      cryptoKeyId: ${cryptoKey.id}\n      role: roles/cloudkms.cryptoKeyEncrypterDecrypter\n      member: serviceAccount:service-${project.number}@gcp-sa-datafusion.iam.gserviceaccount.com\nvariables:\n  project:\n    fn::invoke:\n      function: gcp:organizations:getProject\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Enterprise\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst enterpriseInstance = new gcp.datafusion.Instance(\"enterprise_instance\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"ENTERPRISE\",\n    enableRbac: true,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nenterprise_instance = gcp.datafusion.Instance(\"enterprise_instance\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"ENTERPRISE\",\n    enable_rbac=True)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var enterpriseInstance = new Gcp.DataFusion.Instance(\"enterprise_instance\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"ENTERPRISE\",\n        EnableRbac = true,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"enterprise_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:       pulumi.String(\"my-instance\"),\n\t\t\tRegion:     pulumi.String(\"us-central1\"),\n\t\t\tType:       pulumi.String(\"ENTERPRISE\"),\n\t\t\tEnableRbac: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var enterpriseInstance = new Instance(\"enterpriseInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"ENTERPRISE\")\n            .enableRbac(true)\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  enterpriseInstance:\n    type: gcp:datafusion:Instance\n    name: enterprise_instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: ENTERPRISE\n      enableRbac: true\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Event\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst eventTopic = new gcp.pubsub.Topic(\"event\", {name: \"my-instance\"});\nconst event = new gcp.datafusion.Instance(\"event\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    eventPublishConfig: {\n        enabled: true,\n        topic: eventTopic.id,\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nevent_topic = gcp.pubsub.Topic(\"event\", name=\"my-instance\")\nevent = gcp.datafusion.Instance(\"event\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    event_publish_config={\n        \"enabled\": True,\n        \"topic\": event_topic.id,\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var eventTopic = new Gcp.PubSub.Topic(\"event\", new()\n    {\n        Name = \"my-instance\",\n    });\n\n    var @event = new Gcp.DataFusion.Instance(\"event\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        EventPublishConfig = new Gcp.DataFusion.Inputs.InstanceEventPublishConfigArgs\n        {\n            Enabled = true,\n            Topic = eventTopic.Id,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/pubsub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\teventTopic, err := pubsub.NewTopic(ctx, \"event\", \u0026pubsub.TopicArgs{\n\t\t\tName: pulumi.String(\"my-instance\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"event\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t\tEventPublishConfig: \u0026datafusion.InstanceEventPublishConfigArgs{\n\t\t\t\tEnabled: pulumi.Bool(true),\n\t\t\t\tTopic:   eventTopic.ID(),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.pubsub.Topic;\nimport com.pulumi.gcp.pubsub.TopicArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceEventPublishConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var eventTopic = new Topic(\"eventTopic\", TopicArgs.builder()\n            .name(\"my-instance\")\n            .build());\n\n        var event = new Instance(\"event\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .eventPublishConfig(InstanceEventPublishConfigArgs.builder()\n                .enabled(true)\n                .topic(eventTopic.id())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  event:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n      eventPublishConfig:\n        enabled: true\n        topic: ${eventTopic.id}\n  eventTopic:\n    type: gcp:pubsub:Topic\n    name: event\n    properties:\n      name: my-instance\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Zone\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst zone = new gcp.datafusion.Instance(\"zone\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    zone: \"us-central1-a\",\n    type: \"DEVELOPER\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nzone = gcp.datafusion.Instance(\"zone\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    zone=\"us-central1-a\",\n    type=\"DEVELOPER\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var zone = new Gcp.DataFusion.Instance(\"zone\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Zone = \"us-central1-a\",\n        Type = \"DEVELOPER\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"zone\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tZone:   pulumi.String(\"us-central1-a\"),\n\t\t\tType:   pulumi.String(\"DEVELOPER\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var zone = new Instance(\"zone\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .zone(\"us-central1-a\")\n            .type(\"DEVELOPER\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  zone:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      zone: us-central1-a\n      type: DEVELOPER\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nInstance can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{region}}/instances/{{name}}`\n\n* `{{project}}/{{region}}/{{name}}`\n\n* `{{region}}/{{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, Instance can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamMember:InstanceIamMember default projects/{{project}}/locations/{{region}}/instances/{{name}}\n```\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamMember:InstanceIamMember default {{project}}/{{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamMember:InstanceIamMember default {{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamMember:InstanceIamMember default {{name}}\n```\n\n",
             "properties": {
                 "condition": {
                     "$ref": "#/types/gcp:securitycenter/InstanceIamMemberCondition:InstanceIamMemberCondition"
@@ -266483,7 +266483,7 @@
             }
         },
         "gcp:securitycenter/instanceIamPolicy:InstanceIamPolicy": {
-            "description": "Represents a Data Fusion instance.\n\n\nTo get more information about Instance, see:\n\n* [API documentation](https://cloud.google.com/data-fusion/docs/reference/rest/v1beta1/projects.locations.instances)\n* How-to Guides\n    * [Official Documentation](https://cloud.google.com/data-fusion/docs/)\n\n## Example Usage\n\n### Data Fusion Instance Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst basicInstance = new gcp.datafusion.Instance(\"basic_instance\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nbasic_instance = gcp.datafusion.Instance(\"basic_instance\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicInstance = new Gcp.DataFusion.Instance(\"basic_instance\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"basic_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var basicInstance = new Instance(\"basicInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  basicInstance:\n    type: gcp:datafusion:Instance\n    name: basic_instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Full\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.appengine.getDefaultServiceAccount({});\nconst network = new gcp.compute.Network(\"network\", {name: \"datafusion-full-network\"});\nconst privateIpAlloc = new gcp.compute.GlobalAddress(\"private_ip_alloc\", {\n    name: \"datafusion-ip-alloc\",\n    addressType: \"INTERNAL\",\n    purpose: \"VPC_PEERING\",\n    prefixLength: 22,\n    network: network.id,\n});\nconst extendedInstance = new gcp.datafusion.Instance(\"extended_instance\", {\n    name: \"my-instance\",\n    description: \"My Data Fusion instance\",\n    displayName: \"My Data Fusion instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    enableStackdriverLogging: true,\n    enableStackdriverMonitoring: true,\n    privateInstance: true,\n    dataprocServiceAccount: _default.then(_default =\u003e _default.email),\n    labels: {\n        example_key: \"example_value\",\n    },\n    networkConfig: {\n        network: \"default\",\n        ipAllocation: pulumi.interpolate`${privateIpAlloc.address}/${privateIpAlloc.prefixLength}`,\n    },\n    accelerators: [{\n        acceleratorType: \"CDC\",\n        state: \"ENABLED\",\n    }],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.appengine.get_default_service_account()\nnetwork = gcp.compute.Network(\"network\", name=\"datafusion-full-network\")\nprivate_ip_alloc = gcp.compute.GlobalAddress(\"private_ip_alloc\",\n    name=\"datafusion-ip-alloc\",\n    address_type=\"INTERNAL\",\n    purpose=\"VPC_PEERING\",\n    prefix_length=22,\n    network=network.id)\nextended_instance = gcp.datafusion.Instance(\"extended_instance\",\n    name=\"my-instance\",\n    description=\"My Data Fusion instance\",\n    display_name=\"My Data Fusion instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    enable_stackdriver_logging=True,\n    enable_stackdriver_monitoring=True,\n    private_instance=True,\n    dataproc_service_account=default.email,\n    labels={\n        \"example_key\": \"example_value\",\n    },\n    network_config={\n        \"network\": \"default\",\n        \"ip_allocation\": pulumi.Output.all(\n            address=private_ip_alloc.address,\n            prefix_length=private_ip_alloc.prefix_length\n).apply(lambda resolved_outputs: f\"{resolved_outputs['address']}/{resolved_outputs['prefix_length']}\")\n,\n    },\n    accelerators=[{\n        \"accelerator_type\": \"CDC\",\n        \"state\": \"ENABLED\",\n    }])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.AppEngine.GetDefaultServiceAccount.Invoke();\n\n    var network = new Gcp.Compute.Network(\"network\", new()\n    {\n        Name = \"datafusion-full-network\",\n    });\n\n    var privateIpAlloc = new Gcp.Compute.GlobalAddress(\"private_ip_alloc\", new()\n    {\n        Name = \"datafusion-ip-alloc\",\n        AddressType = \"INTERNAL\",\n        Purpose = \"VPC_PEERING\",\n        PrefixLength = 22,\n        Network = network.Id,\n    });\n\n    var extendedInstance = new Gcp.DataFusion.Instance(\"extended_instance\", new()\n    {\n        Name = \"my-instance\",\n        Description = \"My Data Fusion instance\",\n        DisplayName = \"My Data Fusion instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        EnableStackdriverLogging = true,\n        EnableStackdriverMonitoring = true,\n        PrivateInstance = true,\n        DataprocServiceAccount = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Email)),\n        Labels = \n        {\n            { \"example_key\", \"example_value\" },\n        },\n        NetworkConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigArgs\n        {\n            Network = \"default\",\n            IpAllocation = Output.Tuple(privateIpAlloc.Address, privateIpAlloc.PrefixLength).Apply(values =\u003e\n            {\n                var address = values.Item1;\n                var prefixLength = values.Item2;\n                return $\"{address}/{prefixLength}\";\n            }),\n        },\n        Accelerators = new[]\n        {\n            new Gcp.DataFusion.Inputs.InstanceAcceleratorArgs\n            {\n                AcceleratorType = \"CDC\",\n                State = \"ENABLED\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/appengine\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := appengine.GetDefaultServiceAccount(ctx, \u0026appengine.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tnetwork, err := compute.NewNetwork(ctx, \"network\", \u0026compute.NetworkArgs{\n\t\t\tName: pulumi.String(\"datafusion-full-network\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tprivateIpAlloc, err := compute.NewGlobalAddress(ctx, \"private_ip_alloc\", \u0026compute.GlobalAddressArgs{\n\t\t\tName:         pulumi.String(\"datafusion-ip-alloc\"),\n\t\t\tAddressType:  pulumi.String(\"INTERNAL\"),\n\t\t\tPurpose:      pulumi.String(\"VPC_PEERING\"),\n\t\t\tPrefixLength: pulumi.Int(22),\n\t\t\tNetwork:      network.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"extended_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:                        pulumi.String(\"my-instance\"),\n\t\t\tDescription:                 pulumi.String(\"My Data Fusion instance\"),\n\t\t\tDisplayName:                 pulumi.String(\"My Data Fusion instance\"),\n\t\t\tRegion:                      pulumi.String(\"us-central1\"),\n\t\t\tType:                        pulumi.String(\"BASIC\"),\n\t\t\tEnableStackdriverLogging:    pulumi.Bool(true),\n\t\t\tEnableStackdriverMonitoring: pulumi.Bool(true),\n\t\t\tPrivateInstance:             pulumi.Bool(true),\n\t\t\tDataprocServiceAccount:      pulumi.String(_default.Email),\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"example_key\": pulumi.String(\"example_value\"),\n\t\t\t},\n\t\t\tNetworkConfig: \u0026datafusion.InstanceNetworkConfigArgs{\n\t\t\t\tNetwork: pulumi.String(\"default\"),\n\t\t\t\tIpAllocation: pulumi.All(privateIpAlloc.Address, privateIpAlloc.PrefixLength).ApplyT(func(_args []interface{}) (string, error) {\n\t\t\t\t\taddress := _args[0].(string)\n\t\t\t\t\tprefixLength := _args[1].(int)\n\t\t\t\t\treturn fmt.Sprintf(\"%v/%v\", address, prefixLength), nil\n\t\t\t\t}).(pulumi.StringOutput),\n\t\t\t},\n\t\t\tAccelerators: datafusion.InstanceAcceleratorArray{\n\t\t\t\t\u0026datafusion.InstanceAcceleratorArgs{\n\t\t\t\t\tAcceleratorType: pulumi.String(\"CDC\"),\n\t\t\t\t\tState:           pulumi.String(\"ENABLED\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.appengine.AppengineFunctions;\nimport com.pulumi.gcp.appengine.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.GlobalAddress;\nimport com.pulumi.gcp.compute.GlobalAddressArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceAcceleratorArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = AppengineFunctions.getDefaultServiceAccount();\n\n        var network = new Network(\"network\", NetworkArgs.builder()\n            .name(\"datafusion-full-network\")\n            .build());\n\n        var privateIpAlloc = new GlobalAddress(\"privateIpAlloc\", GlobalAddressArgs.builder()\n            .name(\"datafusion-ip-alloc\")\n            .addressType(\"INTERNAL\")\n            .purpose(\"VPC_PEERING\")\n            .prefixLength(22)\n            .network(network.id())\n            .build());\n\n        var extendedInstance = new Instance(\"extendedInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .description(\"My Data Fusion instance\")\n            .displayName(\"My Data Fusion instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .enableStackdriverLogging(true)\n            .enableStackdriverMonitoring(true)\n            .privateInstance(true)\n            .dataprocServiceAccount(default_.email())\n            .labels(Map.of(\"example_key\", \"example_value\"))\n            .networkConfig(InstanceNetworkConfigArgs.builder()\n                .network(\"default\")\n                .ipAllocation(Output.tuple(privateIpAlloc.address(), privateIpAlloc.prefixLength()).applyValue(values -\u003e {\n                    var address = values.t1;\n                    var prefixLength = values.t2;\n                    return String.format(\"%s/%s\", address,prefixLength);\n                }))\n                .build())\n            .accelerators(InstanceAcceleratorArgs.builder()\n                .acceleratorType(\"CDC\")\n                .state(\"ENABLED\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  extendedInstance:\n    type: gcp:datafusion:Instance\n    name: extended_instance\n    properties:\n      name: my-instance\n      description: My Data Fusion instance\n      displayName: My Data Fusion instance\n      region: us-central1\n      type: BASIC\n      enableStackdriverLogging: true\n      enableStackdriverMonitoring: true\n      privateInstance: true\n      dataprocServiceAccount: ${default.email}\n      labels:\n        example_key: example_value\n      networkConfig:\n        network: default\n        ipAllocation: ${privateIpAlloc.address}/${privateIpAlloc.prefixLength}\n      accelerators:\n        - acceleratorType: CDC\n          state: ENABLED\n  network:\n    type: gcp:compute:Network\n    properties:\n      name: datafusion-full-network\n  privateIpAlloc:\n    type: gcp:compute:GlobalAddress\n    name: private_ip_alloc\n    properties:\n      name: datafusion-ip-alloc\n      addressType: INTERNAL\n      purpose: VPC_PEERING\n      prefixLength: 22\n      network: ${network.id}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:appengine:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Psc\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst psc = new gcp.compute.Network(\"psc\", {\n    name: \"datafusion-psc-network\",\n    autoCreateSubnetworks: false,\n});\nconst pscSubnetwork = new gcp.compute.Subnetwork(\"psc\", {\n    name: \"datafusion-psc-subnet\",\n    region: \"us-central1\",\n    network: psc.id,\n    ipCidrRange: \"10.0.0.0/16\",\n});\nconst pscNetworkAttachment = new gcp.compute.NetworkAttachment(\"psc\", {\n    name: \"datafusion-psc-attachment\",\n    region: \"us-central1\",\n    connectionPreference: \"ACCEPT_AUTOMATIC\",\n    subnetworks: [pscSubnetwork.selfLink],\n});\nconst pscInstance = new gcp.datafusion.Instance(\"psc_instance\", {\n    name: \"psc-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    privateInstance: true,\n    networkConfig: {\n        connectionType: \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n        privateServiceConnectConfig: {\n            networkAttachment: pscNetworkAttachment.id,\n            unreachableCidrBlock: \"192.168.0.0/25\",\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\npsc = gcp.compute.Network(\"psc\",\n    name=\"datafusion-psc-network\",\n    auto_create_subnetworks=False)\npsc_subnetwork = gcp.compute.Subnetwork(\"psc\",\n    name=\"datafusion-psc-subnet\",\n    region=\"us-central1\",\n    network=psc.id,\n    ip_cidr_range=\"10.0.0.0/16\")\npsc_network_attachment = gcp.compute.NetworkAttachment(\"psc\",\n    name=\"datafusion-psc-attachment\",\n    region=\"us-central1\",\n    connection_preference=\"ACCEPT_AUTOMATIC\",\n    subnetworks=[psc_subnetwork.self_link])\npsc_instance = gcp.datafusion.Instance(\"psc_instance\",\n    name=\"psc-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    private_instance=True,\n    network_config={\n        \"connection_type\": \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n        \"private_service_connect_config\": {\n            \"network_attachment\": psc_network_attachment.id,\n            \"unreachable_cidr_block\": \"192.168.0.0/25\",\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var psc = new Gcp.Compute.Network(\"psc\", new()\n    {\n        Name = \"datafusion-psc-network\",\n        AutoCreateSubnetworks = false,\n    });\n\n    var pscSubnetwork = new Gcp.Compute.Subnetwork(\"psc\", new()\n    {\n        Name = \"datafusion-psc-subnet\",\n        Region = \"us-central1\",\n        Network = psc.Id,\n        IpCidrRange = \"10.0.0.0/16\",\n    });\n\n    var pscNetworkAttachment = new Gcp.Compute.NetworkAttachment(\"psc\", new()\n    {\n        Name = \"datafusion-psc-attachment\",\n        Region = \"us-central1\",\n        ConnectionPreference = \"ACCEPT_AUTOMATIC\",\n        Subnetworks = new[]\n        {\n            pscSubnetwork.SelfLink,\n        },\n    });\n\n    var pscInstance = new Gcp.DataFusion.Instance(\"psc_instance\", new()\n    {\n        Name = \"psc-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        PrivateInstance = true,\n        NetworkConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigArgs\n        {\n            ConnectionType = \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n            PrivateServiceConnectConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigPrivateServiceConnectConfigArgs\n            {\n                NetworkAttachment = pscNetworkAttachment.Id,\n                UnreachableCidrBlock = \"192.168.0.0/25\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tpsc, err := compute.NewNetwork(ctx, \"psc\", \u0026compute.NetworkArgs{\n\t\t\tName:                  pulumi.String(\"datafusion-psc-network\"),\n\t\t\tAutoCreateSubnetworks: pulumi.Bool(false),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tpscSubnetwork, err := compute.NewSubnetwork(ctx, \"psc\", \u0026compute.SubnetworkArgs{\n\t\t\tName:        pulumi.String(\"datafusion-psc-subnet\"),\n\t\t\tRegion:      pulumi.String(\"us-central1\"),\n\t\t\tNetwork:     psc.ID(),\n\t\t\tIpCidrRange: pulumi.String(\"10.0.0.0/16\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tpscNetworkAttachment, err := compute.NewNetworkAttachment(ctx, \"psc\", \u0026compute.NetworkAttachmentArgs{\n\t\t\tName:                 pulumi.String(\"datafusion-psc-attachment\"),\n\t\t\tRegion:               pulumi.String(\"us-central1\"),\n\t\t\tConnectionPreference: pulumi.String(\"ACCEPT_AUTOMATIC\"),\n\t\t\tSubnetworks: pulumi.StringArray{\n\t\t\t\tpscSubnetwork.SelfLink,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"psc_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:            pulumi.String(\"psc-instance\"),\n\t\t\tRegion:          pulumi.String(\"us-central1\"),\n\t\t\tType:            pulumi.String(\"BASIC\"),\n\t\t\tPrivateInstance: pulumi.Bool(true),\n\t\t\tNetworkConfig: \u0026datafusion.InstanceNetworkConfigArgs{\n\t\t\t\tConnectionType: pulumi.String(\"PRIVATE_SERVICE_CONNECT_INTERFACES\"),\n\t\t\t\tPrivateServiceConnectConfig: \u0026datafusion.InstanceNetworkConfigPrivateServiceConnectConfigArgs{\n\t\t\t\t\tNetworkAttachment:    pscNetworkAttachment.ID(),\n\t\t\t\t\tUnreachableCidrBlock: pulumi.String(\"192.168.0.0/25\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.Subnetwork;\nimport com.pulumi.gcp.compute.SubnetworkArgs;\nimport com.pulumi.gcp.compute.NetworkAttachment;\nimport com.pulumi.gcp.compute.NetworkAttachmentArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigPrivateServiceConnectConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var psc = new Network(\"psc\", NetworkArgs.builder()\n            .name(\"datafusion-psc-network\")\n            .autoCreateSubnetworks(false)\n            .build());\n\n        var pscSubnetwork = new Subnetwork(\"pscSubnetwork\", SubnetworkArgs.builder()\n            .name(\"datafusion-psc-subnet\")\n            .region(\"us-central1\")\n            .network(psc.id())\n            .ipCidrRange(\"10.0.0.0/16\")\n            .build());\n\n        var pscNetworkAttachment = new NetworkAttachment(\"pscNetworkAttachment\", NetworkAttachmentArgs.builder()\n            .name(\"datafusion-psc-attachment\")\n            .region(\"us-central1\")\n            .connectionPreference(\"ACCEPT_AUTOMATIC\")\n            .subnetworks(pscSubnetwork.selfLink())\n            .build());\n\n        var pscInstance = new Instance(\"pscInstance\", InstanceArgs.builder()\n            .name(\"psc-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .privateInstance(true)\n            .networkConfig(InstanceNetworkConfigArgs.builder()\n                .connectionType(\"PRIVATE_SERVICE_CONNECT_INTERFACES\")\n                .privateServiceConnectConfig(InstanceNetworkConfigPrivateServiceConnectConfigArgs.builder()\n                    .networkAttachment(pscNetworkAttachment.id())\n                    .unreachableCidrBlock(\"192.168.0.0/25\")\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  pscInstance:\n    type: gcp:datafusion:Instance\n    name: psc_instance\n    properties:\n      name: psc-instance\n      region: us-central1\n      type: BASIC\n      privateInstance: true\n      networkConfig:\n        connectionType: PRIVATE_SERVICE_CONNECT_INTERFACES\n        privateServiceConnectConfig:\n          networkAttachment: ${pscNetworkAttachment.id}\n          unreachableCidrBlock: 192.168.0.0/25\n  psc:\n    type: gcp:compute:Network\n    properties:\n      name: datafusion-psc-network\n      autoCreateSubnetworks: false\n  pscSubnetwork:\n    type: gcp:compute:Subnetwork\n    name: psc\n    properties:\n      name: datafusion-psc-subnet\n      region: us-central1\n      network: ${psc.id}\n      ipCidrRange: 10.0.0.0/16\n  pscNetworkAttachment:\n    type: gcp:compute:NetworkAttachment\n    name: psc\n    properties:\n      name: datafusion-psc-attachment\n      region: us-central1\n      connectionPreference: ACCEPT_AUTOMATIC\n      subnetworks:\n        - ${pscSubnetwork.selfLink}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Cmek\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst keyRing = new gcp.kms.KeyRing(\"key_ring\", {\n    name: \"my-instance\",\n    location: \"us-central1\",\n});\nconst cryptoKey = new gcp.kms.CryptoKey(\"crypto_key\", {\n    name: \"my-instance\",\n    keyRing: keyRing.id,\n});\nconst project = gcp.organizations.getProject({});\nconst cryptoKeyMember = new gcp.kms.CryptoKeyIAMMember(\"crypto_key_member\", {\n    cryptoKeyId: cryptoKey.id,\n    role: \"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n    member: project.then(project =\u003e `serviceAccount:service-${project.number}@gcp-sa-datafusion.iam.gserviceaccount.com`),\n});\nconst cmek = new gcp.datafusion.Instance(\"cmek\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    cryptoKeyConfig: {\n        keyReference: cryptoKey.id,\n    },\n}, {\n    dependsOn: [cryptoKeyMember],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nkey_ring = gcp.kms.KeyRing(\"key_ring\",\n    name=\"my-instance\",\n    location=\"us-central1\")\ncrypto_key = gcp.kms.CryptoKey(\"crypto_key\",\n    name=\"my-instance\",\n    key_ring=key_ring.id)\nproject = gcp.organizations.get_project()\ncrypto_key_member = gcp.kms.CryptoKeyIAMMember(\"crypto_key_member\",\n    crypto_key_id=crypto_key.id,\n    role=\"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n    member=f\"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com\")\ncmek = gcp.datafusion.Instance(\"cmek\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    crypto_key_config={\n        \"key_reference\": crypto_key.id,\n    },\n    opts = pulumi.ResourceOptions(depends_on=[crypto_key_member]))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var keyRing = new Gcp.Kms.KeyRing(\"key_ring\", new()\n    {\n        Name = \"my-instance\",\n        Location = \"us-central1\",\n    });\n\n    var cryptoKey = new Gcp.Kms.CryptoKey(\"crypto_key\", new()\n    {\n        Name = \"my-instance\",\n        KeyRing = keyRing.Id,\n    });\n\n    var project = Gcp.Organizations.GetProject.Invoke();\n\n    var cryptoKeyMember = new Gcp.Kms.CryptoKeyIAMMember(\"crypto_key_member\", new()\n    {\n        CryptoKeyId = cryptoKey.Id,\n        Role = \"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n        Member = $\"serviceAccount:service-{project.Apply(getProjectResult =\u003e getProjectResult.Number)}@gcp-sa-datafusion.iam.gserviceaccount.com\",\n    });\n\n    var cmek = new Gcp.DataFusion.Instance(\"cmek\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        CryptoKeyConfig = new Gcp.DataFusion.Inputs.InstanceCryptoKeyConfigArgs\n        {\n            KeyReference = cryptoKey.Id,\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            cryptoKeyMember,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/kms\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tkeyRing, err := kms.NewKeyRing(ctx, \"key_ring\", \u0026kms.KeyRingArgs{\n\t\t\tName:     pulumi.String(\"my-instance\"),\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcryptoKey, err := kms.NewCryptoKey(ctx, \"crypto_key\", \u0026kms.CryptoKeyArgs{\n\t\t\tName:    pulumi.String(\"my-instance\"),\n\t\t\tKeyRing: keyRing.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tproject, err := organizations.LookupProject(ctx, \u0026organizations.LookupProjectArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcryptoKeyMember, err := kms.NewCryptoKeyIAMMember(ctx, \"crypto_key_member\", \u0026kms.CryptoKeyIAMMemberArgs{\n\t\t\tCryptoKeyId: cryptoKey.ID(),\n\t\t\tRole:        pulumi.String(\"roles/cloudkms.cryptoKeyEncrypterDecrypter\"),\n\t\t\tMember:      pulumi.Sprintf(\"serviceAccount:service-%v@gcp-sa-datafusion.iam.gserviceaccount.com\", project.Number),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"cmek\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t\tCryptoKeyConfig: \u0026datafusion.InstanceCryptoKeyConfigArgs{\n\t\t\t\tKeyReference: cryptoKey.ID(),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tcryptoKeyMember,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.kms.KeyRing;\nimport com.pulumi.gcp.kms.KeyRingArgs;\nimport com.pulumi.gcp.kms.CryptoKey;\nimport com.pulumi.gcp.kms.CryptoKeyArgs;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetProjectArgs;\nimport com.pulumi.gcp.kms.CryptoKeyIAMMember;\nimport com.pulumi.gcp.kms.CryptoKeyIAMMemberArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceCryptoKeyConfigArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var keyRing = new KeyRing(\"keyRing\", KeyRingArgs.builder()\n            .name(\"my-instance\")\n            .location(\"us-central1\")\n            .build());\n\n        var cryptoKey = new CryptoKey(\"cryptoKey\", CryptoKeyArgs.builder()\n            .name(\"my-instance\")\n            .keyRing(keyRing.id())\n            .build());\n\n        final var project = OrganizationsFunctions.getProject();\n\n        var cryptoKeyMember = new CryptoKeyIAMMember(\"cryptoKeyMember\", CryptoKeyIAMMemberArgs.builder()\n            .cryptoKeyId(cryptoKey.id())\n            .role(\"roles/cloudkms.cryptoKeyEncrypterDecrypter\")\n            .member(String.format(\"serviceAccount:service-%s@gcp-sa-datafusion.iam.gserviceaccount.com\", project.applyValue(getProjectResult -\u003e getProjectResult.number())))\n            .build());\n\n        var cmek = new Instance(\"cmek\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .cryptoKeyConfig(InstanceCryptoKeyConfigArgs.builder()\n                .keyReference(cryptoKey.id())\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(cryptoKeyMember)\n                .build());\n\n    }\n}\n```\n```yaml\nresources:\n  cmek:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n      cryptoKeyConfig:\n        keyReference: ${cryptoKey.id}\n    options:\n      dependsOn:\n        - ${cryptoKeyMember}\n  cryptoKey:\n    type: gcp:kms:CryptoKey\n    name: crypto_key\n    properties:\n      name: my-instance\n      keyRing: ${keyRing.id}\n  keyRing:\n    type: gcp:kms:KeyRing\n    name: key_ring\n    properties:\n      name: my-instance\n      location: us-central1\n  cryptoKeyMember:\n    type: gcp:kms:CryptoKeyIAMMember\n    name: crypto_key_member\n    properties:\n      cryptoKeyId: ${cryptoKey.id}\n      role: roles/cloudkms.cryptoKeyEncrypterDecrypter\n      member: serviceAccount:service-${project.number}@gcp-sa-datafusion.iam.gserviceaccount.com\nvariables:\n  project:\n    fn::invoke:\n      function: gcp:organizations:getProject\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Enterprise\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst enterpriseInstance = new gcp.datafusion.Instance(\"enterprise_instance\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"ENTERPRISE\",\n    enableRbac: true,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nenterprise_instance = gcp.datafusion.Instance(\"enterprise_instance\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"ENTERPRISE\",\n    enable_rbac=True)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var enterpriseInstance = new Gcp.DataFusion.Instance(\"enterprise_instance\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"ENTERPRISE\",\n        EnableRbac = true,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"enterprise_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:       pulumi.String(\"my-instance\"),\n\t\t\tRegion:     pulumi.String(\"us-central1\"),\n\t\t\tType:       pulumi.String(\"ENTERPRISE\"),\n\t\t\tEnableRbac: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var enterpriseInstance = new Instance(\"enterpriseInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"ENTERPRISE\")\n            .enableRbac(true)\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  enterpriseInstance:\n    type: gcp:datafusion:Instance\n    name: enterprise_instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: ENTERPRISE\n      enableRbac: true\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Event\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst eventTopic = new gcp.pubsub.Topic(\"event\", {name: \"my-instance\"});\nconst event = new gcp.datafusion.Instance(\"event\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    eventPublishConfig: {\n        enabled: true,\n        topic: eventTopic.id,\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nevent_topic = gcp.pubsub.Topic(\"event\", name=\"my-instance\")\nevent = gcp.datafusion.Instance(\"event\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    event_publish_config={\n        \"enabled\": True,\n        \"topic\": event_topic.id,\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var eventTopic = new Gcp.PubSub.Topic(\"event\", new()\n    {\n        Name = \"my-instance\",\n    });\n\n    var @event = new Gcp.DataFusion.Instance(\"event\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        EventPublishConfig = new Gcp.DataFusion.Inputs.InstanceEventPublishConfigArgs\n        {\n            Enabled = true,\n            Topic = eventTopic.Id,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/pubsub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\teventTopic, err := pubsub.NewTopic(ctx, \"event\", \u0026pubsub.TopicArgs{\n\t\t\tName: pulumi.String(\"my-instance\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"event\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t\tEventPublishConfig: \u0026datafusion.InstanceEventPublishConfigArgs{\n\t\t\t\tEnabled: pulumi.Bool(true),\n\t\t\t\tTopic:   eventTopic.ID(),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.pubsub.Topic;\nimport com.pulumi.gcp.pubsub.TopicArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceEventPublishConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var eventTopic = new Topic(\"eventTopic\", TopicArgs.builder()\n            .name(\"my-instance\")\n            .build());\n\n        var event = new Instance(\"event\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .eventPublishConfig(InstanceEventPublishConfigArgs.builder()\n                .enabled(true)\n                .topic(eventTopic.id())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  event:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n      eventPublishConfig:\n        enabled: true\n        topic: ${eventTopic.id}\n  eventTopic:\n    type: gcp:pubsub:Topic\n    name: event\n    properties:\n      name: my-instance\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Zone\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst zone = new gcp.datafusion.Instance(\"zone\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    zone: \"us-central1-a\",\n    type: \"DEVELOPER\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nzone = gcp.datafusion.Instance(\"zone\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    zone=\"us-central1-a\",\n    type=\"DEVELOPER\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var zone = new Gcp.DataFusion.Instance(\"zone\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Zone = \"us-central1-a\",\n        Type = \"DEVELOPER\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"zone\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tZone:   pulumi.String(\"us-central1-a\"),\n\t\t\tType:   pulumi.String(\"DEVELOPER\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var zone = new Instance(\"zone\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .zone(\"us-central1-a\")\n            .type(\"DEVELOPER\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  zone:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      zone: us-central1-a\n      type: DEVELOPER\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nInstance can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{region}}/instances/{{name}}`\n\n* `{{project}}/{{region}}/{{name}}`\n\n* `{{region}}/{{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, Instance can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamPolicy:InstanceIamPolicy default projects/{{project}}/locations/{{region}}/instances/{{name}}\n```\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamPolicy:InstanceIamPolicy default {{project}}/{{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamPolicy:InstanceIamPolicy default {{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamPolicy:InstanceIamPolicy default {{name}}\n```\n\n",
+            "description": "Represents a Data Fusion instance.\n\n\nTo get more information about Instance, see:\n\n* [API documentation](https://cloud.google.com/data-fusion/docs/reference/rest/v1beta1/projects.locations.instances)\n* How-to Guides\n    * [Official Documentation](https://cloud.google.com/data-fusion/docs/)\n\n## Example Usage\n\n### Data Fusion Instance Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst basicInstance = new gcp.datafusion.Instance(\"basic_instance\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nbasic_instance = gcp.datafusion.Instance(\"basic_instance\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicInstance = new Gcp.DataFusion.Instance(\"basic_instance\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"basic_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var basicInstance = new Instance(\"basicInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  basicInstance:\n    type: gcp:datafusion:Instance\n    name: basic_instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Full\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.appengine.getDefaultServiceAccount({});\nconst network = new gcp.compute.Network(\"network\", {name: \"datafusion-full-network\"});\nconst privateIpAlloc = new gcp.compute.GlobalAddress(\"private_ip_alloc\", {\n    name: \"datafusion-ip-alloc\",\n    addressType: \"INTERNAL\",\n    purpose: \"VPC_PEERING\",\n    prefixLength: 22,\n    network: network.id,\n});\nconst extendedInstance = new gcp.datafusion.Instance(\"extended_instance\", {\n    name: \"my-instance\",\n    description: \"My Data Fusion instance\",\n    displayName: \"My Data Fusion instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    enableStackdriverLogging: true,\n    enableStackdriverMonitoring: true,\n    privateInstance: true,\n    dataprocServiceAccount: _default.then(_default =\u003e _default.email),\n    labels: {\n        example_key: \"example_value\",\n    },\n    networkConfig: {\n        network: \"default\",\n        ipAllocation: pulumi.interpolate`${privateIpAlloc.address}/${privateIpAlloc.prefixLength}`,\n    },\n    accelerators: [{\n        acceleratorType: \"CDC\",\n        state: \"ENABLED\",\n    }],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.appengine.get_default_service_account()\nnetwork = gcp.compute.Network(\"network\", name=\"datafusion-full-network\")\nprivate_ip_alloc = gcp.compute.GlobalAddress(\"private_ip_alloc\",\n    name=\"datafusion-ip-alloc\",\n    address_type=\"INTERNAL\",\n    purpose=\"VPC_PEERING\",\n    prefix_length=22,\n    network=network.id)\nextended_instance = gcp.datafusion.Instance(\"extended_instance\",\n    name=\"my-instance\",\n    description=\"My Data Fusion instance\",\n    display_name=\"My Data Fusion instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    enable_stackdriver_logging=True,\n    enable_stackdriver_monitoring=True,\n    private_instance=True,\n    dataproc_service_account=default.email,\n    labels={\n        \"example_key\": \"example_value\",\n    },\n    network_config={\n        \"network\": \"default\",\n        \"ip_allocation\": pulumi.Output.all(\n            address=private_ip_alloc.address,\n            prefix_length=private_ip_alloc.prefix_length\n).apply(lambda resolved_outputs: f\"{resolved_outputs['address']}/{resolved_outputs['prefix_length']}\")\n,\n    },\n    accelerators=[{\n        \"accelerator_type\": \"CDC\",\n        \"state\": \"ENABLED\",\n    }])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.AppEngine.GetDefaultServiceAccount.Invoke();\n\n    var network = new Gcp.Compute.Network(\"network\", new()\n    {\n        Name = \"datafusion-full-network\",\n    });\n\n    var privateIpAlloc = new Gcp.Compute.GlobalAddress(\"private_ip_alloc\", new()\n    {\n        Name = \"datafusion-ip-alloc\",\n        AddressType = \"INTERNAL\",\n        Purpose = \"VPC_PEERING\",\n        PrefixLength = 22,\n        Network = network.Id,\n    });\n\n    var extendedInstance = new Gcp.DataFusion.Instance(\"extended_instance\", new()\n    {\n        Name = \"my-instance\",\n        Description = \"My Data Fusion instance\",\n        DisplayName = \"My Data Fusion instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        EnableStackdriverLogging = true,\n        EnableStackdriverMonitoring = true,\n        PrivateInstance = true,\n        DataprocServiceAccount = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Email)),\n        Labels = \n        {\n            { \"example_key\", \"example_value\" },\n        },\n        NetworkConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigArgs\n        {\n            Network = \"default\",\n            IpAllocation = Output.Tuple(privateIpAlloc.Address, privateIpAlloc.PrefixLength).Apply(values =\u003e\n            {\n                var address = values.Item1;\n                var prefixLength = values.Item2;\n                return $\"{address}/{prefixLength}\";\n            }),\n        },\n        Accelerators = new[]\n        {\n            new Gcp.DataFusion.Inputs.InstanceAcceleratorArgs\n            {\n                AcceleratorType = \"CDC\",\n                State = \"ENABLED\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/appengine\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := appengine.GetDefaultServiceAccount(ctx, \u0026appengine.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tnetwork, err := compute.NewNetwork(ctx, \"network\", \u0026compute.NetworkArgs{\n\t\t\tName: pulumi.String(\"datafusion-full-network\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tprivateIpAlloc, err := compute.NewGlobalAddress(ctx, \"private_ip_alloc\", \u0026compute.GlobalAddressArgs{\n\t\t\tName:         pulumi.String(\"datafusion-ip-alloc\"),\n\t\t\tAddressType:  pulumi.String(\"INTERNAL\"),\n\t\t\tPurpose:      pulumi.String(\"VPC_PEERING\"),\n\t\t\tPrefixLength: pulumi.Int(22),\n\t\t\tNetwork:      network.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"extended_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:                        pulumi.String(\"my-instance\"),\n\t\t\tDescription:                 pulumi.String(\"My Data Fusion instance\"),\n\t\t\tDisplayName:                 pulumi.String(\"My Data Fusion instance\"),\n\t\t\tRegion:                      pulumi.String(\"us-central1\"),\n\t\t\tType:                        pulumi.String(\"BASIC\"),\n\t\t\tEnableStackdriverLogging:    pulumi.Bool(true),\n\t\t\tEnableStackdriverMonitoring: pulumi.Bool(true),\n\t\t\tPrivateInstance:             pulumi.Bool(true),\n\t\t\tDataprocServiceAccount:      pulumi.String(_default.Email),\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"example_key\": pulumi.String(\"example_value\"),\n\t\t\t},\n\t\t\tNetworkConfig: \u0026datafusion.InstanceNetworkConfigArgs{\n\t\t\t\tNetwork: pulumi.String(\"default\"),\n\t\t\t\tIpAllocation: pulumi.All(privateIpAlloc.Address, privateIpAlloc.PrefixLength).ApplyT(func(_args []interface{}) (string, error) {\n\t\t\t\t\taddress := _args[0].(string)\n\t\t\t\t\tprefixLength := _args[1].(int)\n\t\t\t\t\treturn fmt.Sprintf(\"%v/%v\", address, prefixLength), nil\n\t\t\t\t}).(pulumi.StringOutput),\n\t\t\t},\n\t\t\tAccelerators: datafusion.InstanceAcceleratorArray{\n\t\t\t\t\u0026datafusion.InstanceAcceleratorArgs{\n\t\t\t\t\tAcceleratorType: pulumi.String(\"CDC\"),\n\t\t\t\t\tState:           pulumi.String(\"ENABLED\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.appengine.AppengineFunctions;\nimport com.pulumi.gcp.appengine.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.GlobalAddress;\nimport com.pulumi.gcp.compute.GlobalAddressArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceAcceleratorArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = AppengineFunctions.getDefaultServiceAccount();\n\n        var network = new Network(\"network\", NetworkArgs.builder()\n            .name(\"datafusion-full-network\")\n            .build());\n\n        var privateIpAlloc = new GlobalAddress(\"privateIpAlloc\", GlobalAddressArgs.builder()\n            .name(\"datafusion-ip-alloc\")\n            .addressType(\"INTERNAL\")\n            .purpose(\"VPC_PEERING\")\n            .prefixLength(22)\n            .network(network.id())\n            .build());\n\n        var extendedInstance = new Instance(\"extendedInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .description(\"My Data Fusion instance\")\n            .displayName(\"My Data Fusion instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .enableStackdriverLogging(true)\n            .enableStackdriverMonitoring(true)\n            .privateInstance(true)\n            .dataprocServiceAccount(default_.email())\n            .labels(Map.of(\"example_key\", \"example_value\"))\n            .networkConfig(InstanceNetworkConfigArgs.builder()\n                .network(\"default\")\n                .ipAllocation(Output.tuple(privateIpAlloc.address(), privateIpAlloc.prefixLength()).applyValue(values -\u003e {\n                    var address = values.t1;\n                    var prefixLength = values.t2;\n                    return String.format(\"%s/%s\", address,prefixLength);\n                }))\n                .build())\n            .accelerators(InstanceAcceleratorArgs.builder()\n                .acceleratorType(\"CDC\")\n                .state(\"ENABLED\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  extendedInstance:\n    type: gcp:datafusion:Instance\n    name: extended_instance\n    properties:\n      name: my-instance\n      description: My Data Fusion instance\n      displayName: My Data Fusion instance\n      region: us-central1\n      type: BASIC\n      enableStackdriverLogging: true\n      enableStackdriverMonitoring: true\n      privateInstance: true\n      dataprocServiceAccount: ${default.email}\n      labels:\n        example_key: example_value\n      networkConfig:\n        network: default\n        ipAllocation: ${privateIpAlloc.address}/${privateIpAlloc.prefixLength}\n      accelerators:\n        - acceleratorType: CDC\n          state: ENABLED\n  network:\n    type: gcp:compute:Network\n    properties:\n      name: datafusion-full-network\n  privateIpAlloc:\n    type: gcp:compute:GlobalAddress\n    name: private_ip_alloc\n    properties:\n      name: datafusion-ip-alloc\n      addressType: INTERNAL\n      purpose: VPC_PEERING\n      prefixLength: 22\n      network: ${network.id}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:appengine:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Psc\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst psc = new gcp.compute.Network(\"psc\", {\n    name: \"datafusion-psc-network\",\n    autoCreateSubnetworks: false,\n});\nconst pscSubnetwork = new gcp.compute.Subnetwork(\"psc\", {\n    name: \"datafusion-psc-subnet\",\n    region: \"us-central1\",\n    network: psc.id,\n    ipCidrRange: \"10.0.0.0/16\",\n});\nconst pscNetworkAttachment = new gcp.compute.NetworkAttachment(\"psc\", {\n    name: \"datafusion-psc-attachment\",\n    region: \"us-central1\",\n    connectionPreference: \"ACCEPT_AUTOMATIC\",\n    subnetworks: [pscSubnetwork.selfLink],\n});\nconst pscInstance = new gcp.datafusion.Instance(\"psc_instance\", {\n    name: \"psc-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    privateInstance: true,\n    networkConfig: {\n        connectionType: \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n        privateServiceConnectConfig: {\n            networkAttachment: pscNetworkAttachment.id,\n            unreachableCidrBlock: \"192.168.0.0/25\",\n        },\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\npsc = gcp.compute.Network(\"psc\",\n    name=\"datafusion-psc-network\",\n    auto_create_subnetworks=False)\npsc_subnetwork = gcp.compute.Subnetwork(\"psc\",\n    name=\"datafusion-psc-subnet\",\n    region=\"us-central1\",\n    network=psc.id,\n    ip_cidr_range=\"10.0.0.0/16\")\npsc_network_attachment = gcp.compute.NetworkAttachment(\"psc\",\n    name=\"datafusion-psc-attachment\",\n    region=\"us-central1\",\n    connection_preference=\"ACCEPT_AUTOMATIC\",\n    subnetworks=[psc_subnetwork.self_link])\npsc_instance = gcp.datafusion.Instance(\"psc_instance\",\n    name=\"psc-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    private_instance=True,\n    network_config={\n        \"connection_type\": \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n        \"private_service_connect_config\": {\n            \"network_attachment\": psc_network_attachment.id,\n            \"unreachable_cidr_block\": \"192.168.0.0/25\",\n        },\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var psc = new Gcp.Compute.Network(\"psc\", new()\n    {\n        Name = \"datafusion-psc-network\",\n        AutoCreateSubnetworks = false,\n    });\n\n    var pscSubnetwork = new Gcp.Compute.Subnetwork(\"psc\", new()\n    {\n        Name = \"datafusion-psc-subnet\",\n        Region = \"us-central1\",\n        Network = psc.Id,\n        IpCidrRange = \"10.0.0.0/16\",\n    });\n\n    var pscNetworkAttachment = new Gcp.Compute.NetworkAttachment(\"psc\", new()\n    {\n        Name = \"datafusion-psc-attachment\",\n        Region = \"us-central1\",\n        ConnectionPreference = \"ACCEPT_AUTOMATIC\",\n        Subnetworks = new[]\n        {\n            pscSubnetwork.SelfLink,\n        },\n    });\n\n    var pscInstance = new Gcp.DataFusion.Instance(\"psc_instance\", new()\n    {\n        Name = \"psc-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        PrivateInstance = true,\n        NetworkConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigArgs\n        {\n            ConnectionType = \"PRIVATE_SERVICE_CONNECT_INTERFACES\",\n            PrivateServiceConnectConfig = new Gcp.DataFusion.Inputs.InstanceNetworkConfigPrivateServiceConnectConfigArgs\n            {\n                NetworkAttachment = pscNetworkAttachment.Id,\n                UnreachableCidrBlock = \"192.168.0.0/25\",\n            },\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tpsc, err := compute.NewNetwork(ctx, \"psc\", \u0026compute.NetworkArgs{\n\t\t\tName:                  pulumi.String(\"datafusion-psc-network\"),\n\t\t\tAutoCreateSubnetworks: pulumi.Bool(false),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tpscSubnetwork, err := compute.NewSubnetwork(ctx, \"psc\", \u0026compute.SubnetworkArgs{\n\t\t\tName:        pulumi.String(\"datafusion-psc-subnet\"),\n\t\t\tRegion:      pulumi.String(\"us-central1\"),\n\t\t\tNetwork:     psc.ID(),\n\t\t\tIpCidrRange: pulumi.String(\"10.0.0.0/16\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tpscNetworkAttachment, err := compute.NewNetworkAttachment(ctx, \"psc\", \u0026compute.NetworkAttachmentArgs{\n\t\t\tName:                 pulumi.String(\"datafusion-psc-attachment\"),\n\t\t\tRegion:               pulumi.String(\"us-central1\"),\n\t\t\tConnectionPreference: pulumi.String(\"ACCEPT_AUTOMATIC\"),\n\t\t\tSubnetworks: pulumi.StringArray{\n\t\t\t\tpscSubnetwork.SelfLink,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"psc_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:            pulumi.String(\"psc-instance\"),\n\t\t\tRegion:          pulumi.String(\"us-central1\"),\n\t\t\tType:            pulumi.String(\"BASIC\"),\n\t\t\tPrivateInstance: pulumi.Bool(true),\n\t\t\tNetworkConfig: \u0026datafusion.InstanceNetworkConfigArgs{\n\t\t\t\tConnectionType: pulumi.String(\"PRIVATE_SERVICE_CONNECT_INTERFACES\"),\n\t\t\t\tPrivateServiceConnectConfig: \u0026datafusion.InstanceNetworkConfigPrivateServiceConnectConfigArgs{\n\t\t\t\t\tNetworkAttachment:    pscNetworkAttachment.ID(),\n\t\t\t\t\tUnreachableCidrBlock: pulumi.String(\"192.168.0.0/25\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.Subnetwork;\nimport com.pulumi.gcp.compute.SubnetworkArgs;\nimport com.pulumi.gcp.compute.NetworkAttachment;\nimport com.pulumi.gcp.compute.NetworkAttachmentArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceNetworkConfigPrivateServiceConnectConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var psc = new Network(\"psc\", NetworkArgs.builder()\n            .name(\"datafusion-psc-network\")\n            .autoCreateSubnetworks(false)\n            .build());\n\n        var pscSubnetwork = new Subnetwork(\"pscSubnetwork\", SubnetworkArgs.builder()\n            .name(\"datafusion-psc-subnet\")\n            .region(\"us-central1\")\n            .network(psc.id())\n            .ipCidrRange(\"10.0.0.0/16\")\n            .build());\n\n        var pscNetworkAttachment = new NetworkAttachment(\"pscNetworkAttachment\", NetworkAttachmentArgs.builder()\n            .name(\"datafusion-psc-attachment\")\n            .region(\"us-central1\")\n            .connectionPreference(\"ACCEPT_AUTOMATIC\")\n            .subnetworks(pscSubnetwork.selfLink())\n            .build());\n\n        var pscInstance = new Instance(\"pscInstance\", InstanceArgs.builder()\n            .name(\"psc-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .privateInstance(true)\n            .networkConfig(InstanceNetworkConfigArgs.builder()\n                .connectionType(\"PRIVATE_SERVICE_CONNECT_INTERFACES\")\n                .privateServiceConnectConfig(InstanceNetworkConfigPrivateServiceConnectConfigArgs.builder()\n                    .networkAttachment(pscNetworkAttachment.id())\n                    .unreachableCidrBlock(\"192.168.0.0/25\")\n                    .build())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  pscInstance:\n    type: gcp:datafusion:Instance\n    name: psc_instance\n    properties:\n      name: psc-instance\n      region: us-central1\n      type: BASIC\n      privateInstance: true\n      networkConfig:\n        connectionType: PRIVATE_SERVICE_CONNECT_INTERFACES\n        privateServiceConnectConfig:\n          networkAttachment: ${pscNetworkAttachment.id}\n          unreachableCidrBlock: 192.168.0.0/25\n  psc:\n    type: gcp:compute:Network\n    properties:\n      name: datafusion-psc-network\n      autoCreateSubnetworks: false\n  pscSubnetwork:\n    type: gcp:compute:Subnetwork\n    name: psc\n    properties:\n      name: datafusion-psc-subnet\n      region: us-central1\n      network: ${psc.id}\n      ipCidrRange: 10.0.0.0/16\n  pscNetworkAttachment:\n    type: gcp:compute:NetworkAttachment\n    name: psc\n    properties:\n      name: datafusion-psc-attachment\n      region: us-central1\n      connectionPreference: ACCEPT_AUTOMATIC\n      subnetworks:\n        - ${pscSubnetwork.selfLink}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Cmek\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst keyRing = new gcp.kms.KeyRing(\"key_ring\", {\n    name: \"my-instance\",\n    location: \"us-central1\",\n});\nconst cryptoKey = new gcp.kms.CryptoKey(\"crypto_key\", {\n    name: \"my-instance\",\n    keyRing: keyRing.id,\n});\nconst project = gcp.organizations.getProject({});\nconst cryptoKeyMember = new gcp.kms.CryptoKeyIAMMember(\"crypto_key_member\", {\n    cryptoKeyId: cryptoKey.id,\n    role: \"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n    member: project.then(project =\u003e `serviceAccount:service-${project.number}@gcp-sa-datafusion.iam.gserviceaccount.com`),\n});\nconst cmek = new gcp.datafusion.Instance(\"cmek\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    cryptoKeyConfig: {\n        keyReference: cryptoKey.id,\n    },\n}, {\n    dependsOn: [cryptoKeyMember],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nkey_ring = gcp.kms.KeyRing(\"key_ring\",\n    name=\"my-instance\",\n    location=\"us-central1\")\ncrypto_key = gcp.kms.CryptoKey(\"crypto_key\",\n    name=\"my-instance\",\n    key_ring=key_ring.id)\nproject = gcp.organizations.get_project()\ncrypto_key_member = gcp.kms.CryptoKeyIAMMember(\"crypto_key_member\",\n    crypto_key_id=crypto_key.id,\n    role=\"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n    member=f\"serviceAccount:service-{project.number}@gcp-sa-datafusion.iam.gserviceaccount.com\")\ncmek = gcp.datafusion.Instance(\"cmek\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    crypto_key_config={\n        \"key_reference\": crypto_key.id,\n    },\n    opts = pulumi.ResourceOptions(depends_on=[crypto_key_member]))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var keyRing = new Gcp.Kms.KeyRing(\"key_ring\", new()\n    {\n        Name = \"my-instance\",\n        Location = \"us-central1\",\n    });\n\n    var cryptoKey = new Gcp.Kms.CryptoKey(\"crypto_key\", new()\n    {\n        Name = \"my-instance\",\n        KeyRing = keyRing.Id,\n    });\n\n    var project = Gcp.Organizations.GetProject.Invoke();\n\n    var cryptoKeyMember = new Gcp.Kms.CryptoKeyIAMMember(\"crypto_key_member\", new()\n    {\n        CryptoKeyId = cryptoKey.Id,\n        Role = \"roles/cloudkms.cryptoKeyEncrypterDecrypter\",\n        Member = $\"serviceAccount:service-{project.Apply(getProjectResult =\u003e getProjectResult.Number)}@gcp-sa-datafusion.iam.gserviceaccount.com\",\n    });\n\n    var cmek = new Gcp.DataFusion.Instance(\"cmek\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        CryptoKeyConfig = new Gcp.DataFusion.Inputs.InstanceCryptoKeyConfigArgs\n        {\n            KeyReference = cryptoKey.Id,\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            cryptoKeyMember,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/kms\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tkeyRing, err := kms.NewKeyRing(ctx, \"key_ring\", \u0026kms.KeyRingArgs{\n\t\t\tName:     pulumi.String(\"my-instance\"),\n\t\t\tLocation: pulumi.String(\"us-central1\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcryptoKey, err := kms.NewCryptoKey(ctx, \"crypto_key\", \u0026kms.CryptoKeyArgs{\n\t\t\tName:    pulumi.String(\"my-instance\"),\n\t\t\tKeyRing: keyRing.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tproject, err := organizations.LookupProject(ctx, \u0026organizations.LookupProjectArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcryptoKeyMember, err := kms.NewCryptoKeyIAMMember(ctx, \"crypto_key_member\", \u0026kms.CryptoKeyIAMMemberArgs{\n\t\t\tCryptoKeyId: cryptoKey.ID(),\n\t\t\tRole:        pulumi.String(\"roles/cloudkms.cryptoKeyEncrypterDecrypter\"),\n\t\t\tMember:      pulumi.Sprintf(\"serviceAccount:service-%v@gcp-sa-datafusion.iam.gserviceaccount.com\", project.Number),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"cmek\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t\tCryptoKeyConfig: \u0026datafusion.InstanceCryptoKeyConfigArgs{\n\t\t\t\tKeyReference: cryptoKey.ID(),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tcryptoKeyMember,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.kms.KeyRing;\nimport com.pulumi.gcp.kms.KeyRingArgs;\nimport com.pulumi.gcp.kms.CryptoKey;\nimport com.pulumi.gcp.kms.CryptoKeyArgs;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetProjectArgs;\nimport com.pulumi.gcp.kms.CryptoKeyIAMMember;\nimport com.pulumi.gcp.kms.CryptoKeyIAMMemberArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceCryptoKeyConfigArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var keyRing = new KeyRing(\"keyRing\", KeyRingArgs.builder()\n            .name(\"my-instance\")\n            .location(\"us-central1\")\n            .build());\n\n        var cryptoKey = new CryptoKey(\"cryptoKey\", CryptoKeyArgs.builder()\n            .name(\"my-instance\")\n            .keyRing(keyRing.id())\n            .build());\n\n        final var project = OrganizationsFunctions.getProject();\n\n        var cryptoKeyMember = new CryptoKeyIAMMember(\"cryptoKeyMember\", CryptoKeyIAMMemberArgs.builder()\n            .cryptoKeyId(cryptoKey.id())\n            .role(\"roles/cloudkms.cryptoKeyEncrypterDecrypter\")\n            .member(String.format(\"serviceAccount:service-%s@gcp-sa-datafusion.iam.gserviceaccount.com\", project.applyValue(getProjectResult -\u003e getProjectResult.number())))\n            .build());\n\n        var cmek = new Instance(\"cmek\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .cryptoKeyConfig(InstanceCryptoKeyConfigArgs.builder()\n                .keyReference(cryptoKey.id())\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(cryptoKeyMember)\n                .build());\n\n    }\n}\n```\n```yaml\nresources:\n  cmek:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n      cryptoKeyConfig:\n        keyReference: ${cryptoKey.id}\n    options:\n      dependsOn:\n        - ${cryptoKeyMember}\n  cryptoKey:\n    type: gcp:kms:CryptoKey\n    name: crypto_key\n    properties:\n      name: my-instance\n      keyRing: ${keyRing.id}\n  keyRing:\n    type: gcp:kms:KeyRing\n    name: key_ring\n    properties:\n      name: my-instance\n      location: us-central1\n  cryptoKeyMember:\n    type: gcp:kms:CryptoKeyIAMMember\n    name: crypto_key_member\n    properties:\n      cryptoKeyId: ${cryptoKey.id}\n      role: roles/cloudkms.cryptoKeyEncrypterDecrypter\n      member: serviceAccount:service-${project.number}@gcp-sa-datafusion.iam.gserviceaccount.com\nvariables:\n  project:\n    fn::invoke:\n      function: gcp:organizations:getProject\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Enterprise\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst enterpriseInstance = new gcp.datafusion.Instance(\"enterprise_instance\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"ENTERPRISE\",\n    enableRbac: true,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nenterprise_instance = gcp.datafusion.Instance(\"enterprise_instance\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"ENTERPRISE\",\n    enable_rbac=True)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var enterpriseInstance = new Gcp.DataFusion.Instance(\"enterprise_instance\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"ENTERPRISE\",\n        EnableRbac = true,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"enterprise_instance\", \u0026datafusion.InstanceArgs{\n\t\t\tName:       pulumi.String(\"my-instance\"),\n\t\t\tRegion:     pulumi.String(\"us-central1\"),\n\t\t\tType:       pulumi.String(\"ENTERPRISE\"),\n\t\t\tEnableRbac: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var enterpriseInstance = new Instance(\"enterpriseInstance\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"ENTERPRISE\")\n            .enableRbac(true)\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  enterpriseInstance:\n    type: gcp:datafusion:Instance\n    name: enterprise_instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: ENTERPRISE\n      enableRbac: true\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Event\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst eventTopic = new gcp.pubsub.Topic(\"event\", {name: \"my-instance\"});\nconst event = new gcp.datafusion.Instance(\"event\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    type: \"BASIC\",\n    eventPublishConfig: {\n        enabled: true,\n        topic: eventTopic.id,\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nevent_topic = gcp.pubsub.Topic(\"event\", name=\"my-instance\")\nevent = gcp.datafusion.Instance(\"event\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    type=\"BASIC\",\n    event_publish_config={\n        \"enabled\": True,\n        \"topic\": event_topic.id,\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var eventTopic = new Gcp.PubSub.Topic(\"event\", new()\n    {\n        Name = \"my-instance\",\n    });\n\n    var @event = new Gcp.DataFusion.Instance(\"event\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Type = \"BASIC\",\n        EventPublishConfig = new Gcp.DataFusion.Inputs.InstanceEventPublishConfigArgs\n        {\n            Enabled = true,\n            Topic = eventTopic.Id,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/pubsub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\teventTopic, err := pubsub.NewTopic(ctx, \"event\", \u0026pubsub.TopicArgs{\n\t\t\tName: pulumi.String(\"my-instance\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = datafusion.NewInstance(ctx, \"event\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tType:   pulumi.String(\"BASIC\"),\n\t\t\tEventPublishConfig: \u0026datafusion.InstanceEventPublishConfigArgs{\n\t\t\t\tEnabled: pulumi.Bool(true),\n\t\t\t\tTopic:   eventTopic.ID(),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.pubsub.Topic;\nimport com.pulumi.gcp.pubsub.TopicArgs;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport com.pulumi.gcp.datafusion.inputs.InstanceEventPublishConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var eventTopic = new Topic(\"eventTopic\", TopicArgs.builder()\n            .name(\"my-instance\")\n            .build());\n\n        var event = new Instance(\"event\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .type(\"BASIC\")\n            .eventPublishConfig(InstanceEventPublishConfigArgs.builder()\n                .enabled(true)\n                .topic(eventTopic.id())\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  event:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      type: BASIC\n      eventPublishConfig:\n        enabled: true\n        topic: ${eventTopic.id}\n  eventTopic:\n    type: gcp:pubsub:Topic\n    name: event\n    properties:\n      name: my-instance\n```\n\u003c!--End PulumiCodeChooser --\u003e\n### Data Fusion Instance Zone\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst zone = new gcp.datafusion.Instance(\"zone\", {\n    name: \"my-instance\",\n    region: \"us-central1\",\n    zone: \"us-central1-a\",\n    type: \"DEVELOPER\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nzone = gcp.datafusion.Instance(\"zone\",\n    name=\"my-instance\",\n    region=\"us-central1\",\n    zone=\"us-central1-a\",\n    type=\"DEVELOPER\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var zone = new Gcp.DataFusion.Instance(\"zone\", new()\n    {\n        Name = \"my-instance\",\n        Region = \"us-central1\",\n        Zone = \"us-central1-a\",\n        Type = \"DEVELOPER\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/datafusion\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datafusion.NewInstance(ctx, \"zone\", \u0026datafusion.InstanceArgs{\n\t\t\tName:   pulumi.String(\"my-instance\"),\n\t\t\tRegion: pulumi.String(\"us-central1\"),\n\t\t\tZone:   pulumi.String(\"us-central1-a\"),\n\t\t\tType:   pulumi.String(\"DEVELOPER\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.datafusion.Instance;\nimport com.pulumi.gcp.datafusion.InstanceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var zone = new Instance(\"zone\", InstanceArgs.builder()\n            .name(\"my-instance\")\n            .region(\"us-central1\")\n            .zone(\"us-central1-a\")\n            .type(\"DEVELOPER\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  zone:\n    type: gcp:datafusion:Instance\n    properties:\n      name: my-instance\n      region: us-central1\n      zone: us-central1-a\n      type: DEVELOPER\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nInstance can be imported using any of these accepted formats:\n\n* `projects/{{project}}/locations/{{region}}/instances/{{name}}`\n\n* `{{project}}/{{region}}/{{name}}`\n\n* `{{region}}/{{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, Instance can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamPolicy:InstanceIamPolicy default projects/{{project}}/locations/{{region}}/instances/{{name}}\n```\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamPolicy:InstanceIamPolicy default {{project}}/{{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamPolicy:InstanceIamPolicy default {{region}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:securitycenter/instanceIamPolicy:InstanceIamPolicy default {{name}}\n```\n\n",
             "properties": {
                 "etag": {
                     "type": "string"
@@ -270368,7 +270368,7 @@
             ]
         },
         "gcp:serviceaccount/iAMBinding:IAMBinding": {
-            "description": "When managing IAM roles, you can treat a service account either as a resource or as an identity. This resource is to add iam policy bindings to a service account resource, such as allowing the members to run operations as or modify the service account. To configure permissions for a service account on other GCP resources, use the google_project_iam set of resources.\n\nThree different resources help you manage your IAM policy for a service account. Each of these resources serves a different use case:\n\n* `gcp.serviceaccount.IAMPolicy`: Authoritative. Sets the IAM policy for the service account and replaces any existing policy already attached.\n* `gcp.serviceaccount.IAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the service account are preserved.\n* `gcp.serviceaccount.IAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the service account are preserved.\n\n\u003e **Note:** `gcp.serviceaccount.IAMPolicy` **cannot** be used in conjunction with `gcp.serviceaccount.IAMBinding` and `gcp.serviceaccount.IAMMember` or they will fight over what your policy should be.\n\n\u003e **Note:** `gcp.serviceaccount.IAMBinding` resources **can be** used in conjunction with `gcp.serviceaccount.IAMMember` resources **only if** they do not grant privilege to the same role.\n\n## Example Usage\n\n### Service Account IAM Policy\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst admin = gcp.organizations.getIAMPolicy({\n    bindings: [{\n        role: \"roles/iam.serviceAccountUser\",\n        members: [\"user:jane@example.com\"],\n    }],\n});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can interact with\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMPolicy(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    policyData: admin.then(admin =\u003e admin.policyData),\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nadmin = gcp.organizations.get_iam_policy(bindings=[{\n    \"role\": \"roles/iam.serviceAccountUser\",\n    \"members\": [\"user:jane@example.com\"],\n}])\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can interact with\")\nadmin_account_iam = gcp.serviceaccount.IAMPolicy(\"admin-account-iam\",\n    service_account_id=sa.name,\n    policy_data=admin.policy_data)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var admin = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/iam.serviceAccountUser\",\n                Members = new[]\n                {\n                    \"user:jane@example.com\",\n                },\n            },\n        },\n    });\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can interact with\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMPolicy(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        PolicyData = admin.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tadmin, err := organizations.LookupIAMPolicy(ctx, \u0026organizations.LookupIAMPolicyArgs{\n\t\t\tBindings: []organizations.GetIAMPolicyBinding{\n\t\t\t\t{\n\t\t\t\t\tRole: \"roles/iam.serviceAccountUser\",\n\t\t\t\t\tMembers: []string{\n\t\t\t\t\t\t\"user:jane@example.com\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can interact with\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMPolicy(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMPolicyArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tPolicyData:       pulumi.String(admin.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMPolicy;\nimport com.pulumi.gcp.serviceaccount.IAMPolicyArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var admin = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/iam.serviceAccountUser\")\n                .members(\"user:jane@example.com\")\n                .build())\n            .build());\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can interact with\")\n            .build());\n\n        var admin_account_iam = new IAMPolicy(\"admin-account-iam\", IAMPolicyArgs.builder()\n            .serviceAccountId(sa.name())\n            .policyData(admin.applyValue(getIAMPolicyResult -\u003e getIAMPolicyResult.policyData()))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can interact with\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMPolicy\n    properties:\n      serviceAccountId: ${sa.name}\n      policyData: ${admin.policyData}\nvariables:\n  admin:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/iam.serviceAccountUser\n            members:\n              - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"],\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n        Condition = new Gcp.ServiceAccount.Inputs.IAMBindingConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t\tCondition: \u0026serviceaccount.IAMBindingConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMBindingConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .condition(IAMBindingConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.compute.getDefaultServiceAccount({});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n});\n// Allow SA service account use the default GCE account\nconst gce_default_account_iam = new gcp.serviceaccount.IAMMember(\"gce-default-account-iam\", {\n    serviceAccountId: _default.then(_default =\u003e _default.name),\n    role: \"roles/iam.serviceAccountUser\",\n    member: pulumi.interpolate`serviceAccount:${sa.email}`,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_default_service_account()\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\")\n# Allow SA service account use the default GCE account\ngce_default_account_iam = gcp.serviceaccount.IAMMember(\"gce-default-account-iam\",\n    service_account_id=default.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=sa.email.apply(lambda email: f\"serviceAccount:{email}\"))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetDefaultServiceAccount.Invoke();\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n    });\n\n    // Allow SA service account use the default GCE account\n    var gce_default_account_iam = new Gcp.ServiceAccount.IAMMember(\"gce-default-account-iam\", new()\n    {\n        ServiceAccountId = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Name)),\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = sa.Email.Apply(email =\u003e $\"serviceAccount:{email}\"),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.GetDefaultServiceAccount(ctx, \u0026compute.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// Allow SA service account use the default GCE account\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"gce-default-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: pulumi.String(_default.Name),\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember: sa.Email.ApplyT(func(email string) (string, error) {\n\t\t\t\treturn fmt.Sprintf(\"serviceAccount:%v\", email), nil\n\t\t\t}).(pulumi.StringOutput),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getDefaultServiceAccount();\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .build());\n\n        // Allow SA service account use the default GCE account\n        var gce_default_account_iam = new IAMMember(\"gce-default-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(default_.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(sa.email().applyValue(email -\u003e String.format(\"serviceAccount:%s\", email)))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n  # Allow SA service account use the default GCE account\n  gce-default-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${default.name}\n      role: roles/iam.serviceAccountUser\n      member: serviceAccount:${sa.email}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\",\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n        Condition = new Gcp.ServiceAccount.Inputs.IAMMemberConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t\tCondition: \u0026serviceaccount.IAMMemberConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMMemberConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .condition(IAMMemberConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n\n### Additional Examples\n\n### Service Account IAM Policy\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst admin = gcp.organizations.getIAMPolicy({\n    bindings: [{\n        role: \"roles/iam.serviceAccountUser\",\n        members: [\"user:jane@example.com\"],\n    }],\n});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can interact with\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMPolicy(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    policyData: admin.then(admin =\u003e admin.policyData),\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nadmin = gcp.organizations.get_iam_policy(bindings=[{\n    \"role\": \"roles/iam.serviceAccountUser\",\n    \"members\": [\"user:jane@example.com\"],\n}])\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can interact with\")\nadmin_account_iam = gcp.serviceaccount.IAMPolicy(\"admin-account-iam\",\n    service_account_id=sa.name,\n    policy_data=admin.policy_data)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var admin = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/iam.serviceAccountUser\",\n                Members = new[]\n                {\n                    \"user:jane@example.com\",\n                },\n            },\n        },\n    });\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can interact with\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMPolicy(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        PolicyData = admin.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tadmin, err := organizations.LookupIAMPolicy(ctx, \u0026organizations.LookupIAMPolicyArgs{\n\t\t\tBindings: []organizations.GetIAMPolicyBinding{\n\t\t\t\t{\n\t\t\t\t\tRole: \"roles/iam.serviceAccountUser\",\n\t\t\t\t\tMembers: []string{\n\t\t\t\t\t\t\"user:jane@example.com\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can interact with\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMPolicy(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMPolicyArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tPolicyData:       pulumi.String(admin.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMPolicy;\nimport com.pulumi.gcp.serviceaccount.IAMPolicyArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var admin = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/iam.serviceAccountUser\")\n                .members(\"user:jane@example.com\")\n                .build())\n            .build());\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can interact with\")\n            .build());\n\n        var admin_account_iam = new IAMPolicy(\"admin-account-iam\", IAMPolicyArgs.builder()\n            .serviceAccountId(sa.name())\n            .policyData(admin.applyValue(getIAMPolicyResult -\u003e getIAMPolicyResult.policyData()))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can interact with\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMPolicy\n    properties:\n      serviceAccountId: ${sa.name}\n      policyData: ${admin.policyData}\nvariables:\n  admin:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/iam.serviceAccountUser\n            members:\n              - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"],\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n        Condition = new Gcp.ServiceAccount.Inputs.IAMBindingConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t\tCondition: \u0026serviceaccount.IAMBindingConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMBindingConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .condition(IAMBindingConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.compute.getDefaultServiceAccount({});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n});\n// Allow SA service account use the default GCE account\nconst gce_default_account_iam = new gcp.serviceaccount.IAMMember(\"gce-default-account-iam\", {\n    serviceAccountId: _default.then(_default =\u003e _default.name),\n    role: \"roles/iam.serviceAccountUser\",\n    member: pulumi.interpolate`serviceAccount:${sa.email}`,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_default_service_account()\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\")\n# Allow SA service account use the default GCE account\ngce_default_account_iam = gcp.serviceaccount.IAMMember(\"gce-default-account-iam\",\n    service_account_id=default.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=sa.email.apply(lambda email: f\"serviceAccount:{email}\"))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetDefaultServiceAccount.Invoke();\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n    });\n\n    // Allow SA service account use the default GCE account\n    var gce_default_account_iam = new Gcp.ServiceAccount.IAMMember(\"gce-default-account-iam\", new()\n    {\n        ServiceAccountId = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Name)),\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = sa.Email.Apply(email =\u003e $\"serviceAccount:{email}\"),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.GetDefaultServiceAccount(ctx, \u0026compute.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// Allow SA service account use the default GCE account\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"gce-default-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: pulumi.String(_default.Name),\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember: sa.Email.ApplyT(func(email string) (string, error) {\n\t\t\t\treturn fmt.Sprintf(\"serviceAccount:%v\", email), nil\n\t\t\t}).(pulumi.StringOutput),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getDefaultServiceAccount();\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .build());\n\n        // Allow SA service account use the default GCE account\n        var gce_default_account_iam = new IAMMember(\"gce-default-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(default_.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(sa.email().applyValue(email -\u003e String.format(\"serviceAccount:%s\", email)))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n  # Allow SA service account use the default GCE account\n  gce-default-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${default.name}\n      role: roles/iam.serviceAccountUser\n      member: serviceAccount:${sa.email}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\",\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n        Condition = new Gcp.ServiceAccount.Inputs.IAMMemberConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t\tCondition: \u0026serviceaccount.IAMMemberConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMMemberConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .condition(IAMMemberConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\n### Importing with conditions:\n\nHere are examples of importing IAM memberships and bindings that include conditions:\n\n```sh\n$ pulumi import gcp:serviceaccount/iAMBinding:IAMBinding admin-account-iam \"projects/{your-project-id}/serviceAccounts/{your-service-account-email} roles/iam.serviceAccountUser expires_after_2019_12_31\"\n```\n\n```sh\n$ pulumi import gcp:serviceaccount/iAMBinding:IAMBinding admin-account-iam \"projects/{your-project-id}/serviceAccounts/{your-service-account-email} roles/iam.serviceAccountUser user:foo@example.com expires_after_2019_12_31\"\n```\n\n",
+            "description": "When managing IAM roles, you can treat a service account either as a resource or as an identity. This resource is to add iam policy bindings to a service account resource, such as allowing the members to run operations as or modify the service account. To configure permissions for a service account on other GCP resources, use the google_project_iam set of resources.\n\nThree different resources help you manage your IAM policy for a service account. Each of these resources serves a different use case:\n\n* `gcp.serviceaccount.IAMPolicy`: Authoritative. Sets the IAM policy for the service account and replaces any existing policy already attached.\n* `gcp.serviceaccount.IAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the service account are preserved.\n* `gcp.serviceaccount.IAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the service account are preserved.\n\n\u003e **Note:** `gcp.serviceaccount.IAMPolicy` **cannot** be used in conjunction with `gcp.serviceaccount.IAMBinding` and `gcp.serviceaccount.IAMMember` or they will fight over what your policy should be.\n\n\u003e **Note:** `gcp.serviceaccount.IAMBinding` resources **can be** used in conjunction with `gcp.serviceaccount.IAMMember` resources **only if** they do not grant privilege to the same role.\n\n## Example Usage\n\n### Service Account IAM Policy\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst admin = gcp.organizations.getIAMPolicy({\n    bindings: [{\n        role: \"roles/iam.serviceAccountUser\",\n        members: [\"user:jane@example.com\"],\n    }],\n});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can interact with\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMPolicy(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    policyData: admin.then(admin =\u003e admin.policyData),\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nadmin = gcp.organizations.get_iam_policy(bindings=[{\n    \"role\": \"roles/iam.serviceAccountUser\",\n    \"members\": [\"user:jane@example.com\"],\n}])\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can interact with\")\nadmin_account_iam = gcp.serviceaccount.IAMPolicy(\"admin-account-iam\",\n    service_account_id=sa.name,\n    policy_data=admin.policy_data)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var admin = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/iam.serviceAccountUser\",\n                Members = new[]\n                {\n                    \"user:jane@example.com\",\n                },\n            },\n        },\n    });\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can interact with\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMPolicy(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        PolicyData = admin.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tadmin, err := organizations.LookupIAMPolicy(ctx, \u0026organizations.LookupIAMPolicyArgs{\n\t\t\tBindings: []organizations.GetIAMPolicyBinding{\n\t\t\t\t{\n\t\t\t\t\tRole: \"roles/iam.serviceAccountUser\",\n\t\t\t\t\tMembers: []string{\n\t\t\t\t\t\t\"user:jane@example.com\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can interact with\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMPolicy(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMPolicyArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tPolicyData:       pulumi.String(admin.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMPolicy;\nimport com.pulumi.gcp.serviceaccount.IAMPolicyArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var admin = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/iam.serviceAccountUser\")\n                .members(\"user:jane@example.com\")\n                .build())\n            .build());\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can interact with\")\n            .build());\n\n        var admin_account_iam = new IAMPolicy(\"admin-account-iam\", IAMPolicyArgs.builder()\n            .serviceAccountId(sa.name())\n            .policyData(admin.applyValue(getIAMPolicyResult -\u003e getIAMPolicyResult.policyData()))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can interact with\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMPolicy\n    properties:\n      serviceAccountId: ${sa.name}\n      policyData: ${admin.policyData}\nvariables:\n  admin:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/iam.serviceAccountUser\n            members:\n              - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"],\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n        Condition = new Gcp.ServiceAccount.Inputs.IAMBindingConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t\tCondition: \u0026serviceaccount.IAMBindingConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMBindingConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .condition(IAMBindingConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.compute.getDefaultServiceAccount({});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n});\n// Allow SA service account use the default GCE account\nconst gce_default_account_iam = new gcp.serviceaccount.IAMMember(\"gce-default-account-iam\", {\n    serviceAccountId: _default.then(_default =\u003e _default.name),\n    role: \"roles/iam.serviceAccountUser\",\n    member: pulumi.interpolate`serviceAccount:${sa.email}`,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_default_service_account()\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\")\n# Allow SA service account use the default GCE account\ngce_default_account_iam = gcp.serviceaccount.IAMMember(\"gce-default-account-iam\",\n    service_account_id=default.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=sa.email.apply(lambda email: f\"serviceAccount:{email}\"))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetDefaultServiceAccount.Invoke();\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n    });\n\n    // Allow SA service account use the default GCE account\n    var gce_default_account_iam = new Gcp.ServiceAccount.IAMMember(\"gce-default-account-iam\", new()\n    {\n        ServiceAccountId = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Name)),\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = sa.Email.Apply(email =\u003e $\"serviceAccount:{email}\"),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.GetDefaultServiceAccount(ctx, \u0026compute.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// Allow SA service account use the default GCE account\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"gce-default-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: pulumi.String(_default.Name),\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember: sa.Email.ApplyT(func(email string) (string, error) {\n\t\t\t\treturn fmt.Sprintf(\"serviceAccount:%v\", email), nil\n\t\t\t}).(pulumi.StringOutput),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getDefaultServiceAccount();\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .build());\n\n        // Allow SA service account use the default GCE account\n        var gce_default_account_iam = new IAMMember(\"gce-default-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(default_.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(sa.email().applyValue(email -\u003e String.format(\"serviceAccount:%s\", email)))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n  # Allow SA service account use the default GCE account\n  gce-default-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${default.name}\n      role: roles/iam.serviceAccountUser\n      member: serviceAccount:${sa.email}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\",\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n        Condition = new Gcp.ServiceAccount.Inputs.IAMMemberConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t\tCondition: \u0026serviceaccount.IAMMemberConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMMemberConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .condition(IAMMemberConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n\n### Additional Examples\n\n### Service Account IAM Policy\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst admin = gcp.organizations.getIAMPolicy({\n    bindings: [{\n        role: \"roles/iam.serviceAccountUser\",\n        members: [\"user:jane@example.com\"],\n    }],\n});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can interact with\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMPolicy(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    policyData: admin.then(admin =\u003e admin.policyData),\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nadmin = gcp.organizations.get_iam_policy(bindings=[{\n    \"role\": \"roles/iam.serviceAccountUser\",\n    \"members\": [\"user:jane@example.com\"],\n}])\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can interact with\")\nadmin_account_iam = gcp.serviceaccount.IAMPolicy(\"admin-account-iam\",\n    service_account_id=sa.name,\n    policy_data=admin.policy_data)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var admin = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/iam.serviceAccountUser\",\n                Members = new[]\n                {\n                    \"user:jane@example.com\",\n                },\n            },\n        },\n    });\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can interact with\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMPolicy(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        PolicyData = admin.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tadmin, err := organizations.LookupIAMPolicy(ctx, \u0026organizations.LookupIAMPolicyArgs{\n\t\t\tBindings: []organizations.GetIAMPolicyBinding{\n\t\t\t\t{\n\t\t\t\t\tRole: \"roles/iam.serviceAccountUser\",\n\t\t\t\t\tMembers: []string{\n\t\t\t\t\t\t\"user:jane@example.com\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can interact with\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMPolicy(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMPolicyArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tPolicyData:       pulumi.String(admin.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMPolicy;\nimport com.pulumi.gcp.serviceaccount.IAMPolicyArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var admin = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/iam.serviceAccountUser\")\n                .members(\"user:jane@example.com\")\n                .build())\n            .build());\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can interact with\")\n            .build());\n\n        var admin_account_iam = new IAMPolicy(\"admin-account-iam\", IAMPolicyArgs.builder()\n            .serviceAccountId(sa.name())\n            .policyData(admin.applyValue(getIAMPolicyResult -\u003e getIAMPolicyResult.policyData()))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can interact with\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMPolicy\n    properties:\n      serviceAccountId: ${sa.name}\n      policyData: ${admin.policyData}\nvariables:\n  admin:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/iam.serviceAccountUser\n            members:\n              - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"],\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n        Condition = new Gcp.ServiceAccount.Inputs.IAMBindingConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t\tCondition: \u0026serviceaccount.IAMBindingConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMBindingConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .condition(IAMBindingConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.compute.getDefaultServiceAccount({});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n});\n// Allow SA service account use the default GCE account\nconst gce_default_account_iam = new gcp.serviceaccount.IAMMember(\"gce-default-account-iam\", {\n    serviceAccountId: _default.then(_default =\u003e _default.name),\n    role: \"roles/iam.serviceAccountUser\",\n    member: pulumi.interpolate`serviceAccount:${sa.email}`,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_default_service_account()\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\")\n# Allow SA service account use the default GCE account\ngce_default_account_iam = gcp.serviceaccount.IAMMember(\"gce-default-account-iam\",\n    service_account_id=default.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=sa.email.apply(lambda email: f\"serviceAccount:{email}\"))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetDefaultServiceAccount.Invoke();\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n    });\n\n    // Allow SA service account use the default GCE account\n    var gce_default_account_iam = new Gcp.ServiceAccount.IAMMember(\"gce-default-account-iam\", new()\n    {\n        ServiceAccountId = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Name)),\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = sa.Email.Apply(email =\u003e $\"serviceAccount:{email}\"),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.GetDefaultServiceAccount(ctx, \u0026compute.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// Allow SA service account use the default GCE account\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"gce-default-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: pulumi.String(_default.Name),\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember: sa.Email.ApplyT(func(email string) (string, error) {\n\t\t\t\treturn fmt.Sprintf(\"serviceAccount:%v\", email), nil\n\t\t\t}).(pulumi.StringOutput),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getDefaultServiceAccount();\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .build());\n\n        // Allow SA service account use the default GCE account\n        var gce_default_account_iam = new IAMMember(\"gce-default-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(default_.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(sa.email().applyValue(email -\u003e String.format(\"serviceAccount:%s\", email)))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n  # Allow SA service account use the default GCE account\n  gce-default-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${default.name}\n      role: roles/iam.serviceAccountUser\n      member: serviceAccount:${sa.email}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\",\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n        Condition = new Gcp.ServiceAccount.Inputs.IAMMemberConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t\tCondition: \u0026serviceaccount.IAMMemberConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMMemberConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .condition(IAMMemberConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\n### Importing with conditions:\n\nHere are examples of importing IAM memberships and bindings that include conditions:\n\n```sh\n$ pulumi import gcp:serviceaccount/iAMBinding:IAMBinding admin-account-iam \"projects/{your-project-id}/serviceAccounts/{your-service-account-email} roles/iam.serviceAccountUser expires_after_2019_12_31\"\n```\n\n```sh\n$ pulumi import gcp:serviceaccount/iAMBinding:IAMBinding admin-account-iam \"projects/{your-project-id}/serviceAccounts/{your-service-account-email} roles/iam.serviceAccountUser user:foo@example.com expires_after_2019_12_31\"\n```\n\n",
             "properties": {
                 "condition": {
                     "$ref": "#/types/gcp:serviceaccount/IAMBindingCondition:IAMBindingCondition",
@@ -270468,7 +270468,7 @@
             ]
         },
         "gcp:serviceaccount/iAMMember:IAMMember": {
-            "description": "When managing IAM roles, you can treat a service account either as a resource or as an identity. This resource is to add iam policy bindings to a service account resource, such as allowing the members to run operations as or modify the service account. To configure permissions for a service account on other GCP resources, use the google_project_iam set of resources.\n\nThree different resources help you manage your IAM policy for a service account. Each of these resources serves a different use case:\n\n* `gcp.serviceaccount.IAMPolicy`: Authoritative. Sets the IAM policy for the service account and replaces any existing policy already attached.\n* `gcp.serviceaccount.IAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the service account are preserved.\n* `gcp.serviceaccount.IAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the service account are preserved.\n\n\u003e **Note:** `gcp.serviceaccount.IAMPolicy` **cannot** be used in conjunction with `gcp.serviceaccount.IAMBinding` and `gcp.serviceaccount.IAMMember` or they will fight over what your policy should be.\n\n\u003e **Note:** `gcp.serviceaccount.IAMBinding` resources **can be** used in conjunction with `gcp.serviceaccount.IAMMember` resources **only if** they do not grant privilege to the same role.\n\n## Example Usage\n\n### Service Account IAM Policy\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst admin = gcp.organizations.getIAMPolicy({\n    bindings: [{\n        role: \"roles/iam.serviceAccountUser\",\n        members: [\"user:jane@example.com\"],\n    }],\n});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can interact with\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMPolicy(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    policyData: admin.then(admin =\u003e admin.policyData),\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nadmin = gcp.organizations.get_iam_policy(bindings=[{\n    \"role\": \"roles/iam.serviceAccountUser\",\n    \"members\": [\"user:jane@example.com\"],\n}])\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can interact with\")\nadmin_account_iam = gcp.serviceaccount.IAMPolicy(\"admin-account-iam\",\n    service_account_id=sa.name,\n    policy_data=admin.policy_data)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var admin = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/iam.serviceAccountUser\",\n                Members = new[]\n                {\n                    \"user:jane@example.com\",\n                },\n            },\n        },\n    });\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can interact with\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMPolicy(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        PolicyData = admin.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tadmin, err := organizations.LookupIAMPolicy(ctx, \u0026organizations.LookupIAMPolicyArgs{\n\t\t\tBindings: []organizations.GetIAMPolicyBinding{\n\t\t\t\t{\n\t\t\t\t\tRole: \"roles/iam.serviceAccountUser\",\n\t\t\t\t\tMembers: []string{\n\t\t\t\t\t\t\"user:jane@example.com\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can interact with\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMPolicy(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMPolicyArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tPolicyData:       pulumi.String(admin.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMPolicy;\nimport com.pulumi.gcp.serviceaccount.IAMPolicyArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var admin = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/iam.serviceAccountUser\")\n                .members(\"user:jane@example.com\")\n                .build())\n            .build());\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can interact with\")\n            .build());\n\n        var admin_account_iam = new IAMPolicy(\"admin-account-iam\", IAMPolicyArgs.builder()\n            .serviceAccountId(sa.name())\n            .policyData(admin.applyValue(getIAMPolicyResult -\u003e getIAMPolicyResult.policyData()))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can interact with\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMPolicy\n    properties:\n      serviceAccountId: ${sa.name}\n      policyData: ${admin.policyData}\nvariables:\n  admin:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/iam.serviceAccountUser\n            members:\n              - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"],\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n        Condition = new Gcp.ServiceAccount.Inputs.IAMBindingConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t\tCondition: \u0026serviceaccount.IAMBindingConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMBindingConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .condition(IAMBindingConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.compute.getDefaultServiceAccount({});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n});\n// Allow SA service account use the default GCE account\nconst gce_default_account_iam = new gcp.serviceaccount.IAMMember(\"gce-default-account-iam\", {\n    serviceAccountId: _default.then(_default =\u003e _default.name),\n    role: \"roles/iam.serviceAccountUser\",\n    member: pulumi.interpolate`serviceAccount:${sa.email}`,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_default_service_account()\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\")\n# Allow SA service account use the default GCE account\ngce_default_account_iam = gcp.serviceaccount.IAMMember(\"gce-default-account-iam\",\n    service_account_id=default.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=sa.email.apply(lambda email: f\"serviceAccount:{email}\"))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetDefaultServiceAccount.Invoke();\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n    });\n\n    // Allow SA service account use the default GCE account\n    var gce_default_account_iam = new Gcp.ServiceAccount.IAMMember(\"gce-default-account-iam\", new()\n    {\n        ServiceAccountId = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Name)),\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = sa.Email.Apply(email =\u003e $\"serviceAccount:{email}\"),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.GetDefaultServiceAccount(ctx, \u0026compute.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// Allow SA service account use the default GCE account\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"gce-default-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: pulumi.String(_default.Name),\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember: sa.Email.ApplyT(func(email string) (string, error) {\n\t\t\t\treturn fmt.Sprintf(\"serviceAccount:%v\", email), nil\n\t\t\t}).(pulumi.StringOutput),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getDefaultServiceAccount();\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .build());\n\n        // Allow SA service account use the default GCE account\n        var gce_default_account_iam = new IAMMember(\"gce-default-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(default_.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(sa.email().applyValue(email -\u003e String.format(\"serviceAccount:%s\", email)))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n  # Allow SA service account use the default GCE account\n  gce-default-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${default.name}\n      role: roles/iam.serviceAccountUser\n      member: serviceAccount:${sa.email}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\",\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n        Condition = new Gcp.ServiceAccount.Inputs.IAMMemberConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t\tCondition: \u0026serviceaccount.IAMMemberConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMMemberConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .condition(IAMMemberConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n\n### Additional Examples\n\n### Service Account IAM Policy\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst admin = gcp.organizations.getIAMPolicy({\n    bindings: [{\n        role: \"roles/iam.serviceAccountUser\",\n        members: [\"user:jane@example.com\"],\n    }],\n});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can interact with\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMPolicy(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    policyData: admin.then(admin =\u003e admin.policyData),\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nadmin = gcp.organizations.get_iam_policy(bindings=[{\n    \"role\": \"roles/iam.serviceAccountUser\",\n    \"members\": [\"user:jane@example.com\"],\n}])\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can interact with\")\nadmin_account_iam = gcp.serviceaccount.IAMPolicy(\"admin-account-iam\",\n    service_account_id=sa.name,\n    policy_data=admin.policy_data)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var admin = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/iam.serviceAccountUser\",\n                Members = new[]\n                {\n                    \"user:jane@example.com\",\n                },\n            },\n        },\n    });\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can interact with\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMPolicy(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        PolicyData = admin.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tadmin, err := organizations.LookupIAMPolicy(ctx, \u0026organizations.LookupIAMPolicyArgs{\n\t\t\tBindings: []organizations.GetIAMPolicyBinding{\n\t\t\t\t{\n\t\t\t\t\tRole: \"roles/iam.serviceAccountUser\",\n\t\t\t\t\tMembers: []string{\n\t\t\t\t\t\t\"user:jane@example.com\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can interact with\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMPolicy(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMPolicyArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tPolicyData:       pulumi.String(admin.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMPolicy;\nimport com.pulumi.gcp.serviceaccount.IAMPolicyArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var admin = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/iam.serviceAccountUser\")\n                .members(\"user:jane@example.com\")\n                .build())\n            .build());\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can interact with\")\n            .build());\n\n        var admin_account_iam = new IAMPolicy(\"admin-account-iam\", IAMPolicyArgs.builder()\n            .serviceAccountId(sa.name())\n            .policyData(admin.applyValue(getIAMPolicyResult -\u003e getIAMPolicyResult.policyData()))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can interact with\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMPolicy\n    properties:\n      serviceAccountId: ${sa.name}\n      policyData: ${admin.policyData}\nvariables:\n  admin:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/iam.serviceAccountUser\n            members:\n              - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"],\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n        Condition = new Gcp.ServiceAccount.Inputs.IAMBindingConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t\tCondition: \u0026serviceaccount.IAMBindingConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMBindingConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .condition(IAMBindingConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.compute.getDefaultServiceAccount({});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n});\n// Allow SA service account use the default GCE account\nconst gce_default_account_iam = new gcp.serviceaccount.IAMMember(\"gce-default-account-iam\", {\n    serviceAccountId: _default.then(_default =\u003e _default.name),\n    role: \"roles/iam.serviceAccountUser\",\n    member: pulumi.interpolate`serviceAccount:${sa.email}`,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_default_service_account()\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\")\n# Allow SA service account use the default GCE account\ngce_default_account_iam = gcp.serviceaccount.IAMMember(\"gce-default-account-iam\",\n    service_account_id=default.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=sa.email.apply(lambda email: f\"serviceAccount:{email}\"))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetDefaultServiceAccount.Invoke();\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n    });\n\n    // Allow SA service account use the default GCE account\n    var gce_default_account_iam = new Gcp.ServiceAccount.IAMMember(\"gce-default-account-iam\", new()\n    {\n        ServiceAccountId = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Name)),\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = sa.Email.Apply(email =\u003e $\"serviceAccount:{email}\"),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.GetDefaultServiceAccount(ctx, \u0026compute.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// Allow SA service account use the default GCE account\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"gce-default-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: pulumi.String(_default.Name),\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember: sa.Email.ApplyT(func(email string) (string, error) {\n\t\t\t\treturn fmt.Sprintf(\"serviceAccount:%v\", email), nil\n\t\t\t}).(pulumi.StringOutput),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getDefaultServiceAccount();\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .build());\n\n        // Allow SA service account use the default GCE account\n        var gce_default_account_iam = new IAMMember(\"gce-default-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(default_.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(sa.email().applyValue(email -\u003e String.format(\"serviceAccount:%s\", email)))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n  # Allow SA service account use the default GCE account\n  gce-default-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${default.name}\n      role: roles/iam.serviceAccountUser\n      member: serviceAccount:${sa.email}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\",\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n        Condition = new Gcp.ServiceAccount.Inputs.IAMMemberConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t\tCondition: \u0026serviceaccount.IAMMemberConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMMemberConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .condition(IAMMemberConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\n### Importing with conditions:\n\nHere are examples of importing IAM memberships and bindings that include conditions:\n\n```sh\n$ pulumi import gcp:serviceaccount/iAMMember:IAMMember admin-account-iam \"projects/{your-project-id}/serviceAccounts/{your-service-account-email} roles/iam.serviceAccountUser expires_after_2019_12_31\"\n```\n\n```sh\n$ pulumi import gcp:serviceaccount/iAMMember:IAMMember admin-account-iam \"projects/{your-project-id}/serviceAccounts/{your-service-account-email} roles/iam.serviceAccountUser user:foo@example.com expires_after_2019_12_31\"\n```\n\n",
+            "description": "When managing IAM roles, you can treat a service account either as a resource or as an identity. This resource is to add iam policy bindings to a service account resource, such as allowing the members to run operations as or modify the service account. To configure permissions for a service account on other GCP resources, use the google_project_iam set of resources.\n\nThree different resources help you manage your IAM policy for a service account. Each of these resources serves a different use case:\n\n* `gcp.serviceaccount.IAMPolicy`: Authoritative. Sets the IAM policy for the service account and replaces any existing policy already attached.\n* `gcp.serviceaccount.IAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the service account are preserved.\n* `gcp.serviceaccount.IAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the service account are preserved.\n\n\u003e **Note:** `gcp.serviceaccount.IAMPolicy` **cannot** be used in conjunction with `gcp.serviceaccount.IAMBinding` and `gcp.serviceaccount.IAMMember` or they will fight over what your policy should be.\n\n\u003e **Note:** `gcp.serviceaccount.IAMBinding` resources **can be** used in conjunction with `gcp.serviceaccount.IAMMember` resources **only if** they do not grant privilege to the same role.\n\n## Example Usage\n\n### Service Account IAM Policy\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst admin = gcp.organizations.getIAMPolicy({\n    bindings: [{\n        role: \"roles/iam.serviceAccountUser\",\n        members: [\"user:jane@example.com\"],\n    }],\n});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can interact with\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMPolicy(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    policyData: admin.then(admin =\u003e admin.policyData),\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nadmin = gcp.organizations.get_iam_policy(bindings=[{\n    \"role\": \"roles/iam.serviceAccountUser\",\n    \"members\": [\"user:jane@example.com\"],\n}])\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can interact with\")\nadmin_account_iam = gcp.serviceaccount.IAMPolicy(\"admin-account-iam\",\n    service_account_id=sa.name,\n    policy_data=admin.policy_data)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var admin = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/iam.serviceAccountUser\",\n                Members = new[]\n                {\n                    \"user:jane@example.com\",\n                },\n            },\n        },\n    });\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can interact with\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMPolicy(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        PolicyData = admin.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tadmin, err := organizations.LookupIAMPolicy(ctx, \u0026organizations.LookupIAMPolicyArgs{\n\t\t\tBindings: []organizations.GetIAMPolicyBinding{\n\t\t\t\t{\n\t\t\t\t\tRole: \"roles/iam.serviceAccountUser\",\n\t\t\t\t\tMembers: []string{\n\t\t\t\t\t\t\"user:jane@example.com\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can interact with\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMPolicy(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMPolicyArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tPolicyData:       pulumi.String(admin.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMPolicy;\nimport com.pulumi.gcp.serviceaccount.IAMPolicyArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var admin = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/iam.serviceAccountUser\")\n                .members(\"user:jane@example.com\")\n                .build())\n            .build());\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can interact with\")\n            .build());\n\n        var admin_account_iam = new IAMPolicy(\"admin-account-iam\", IAMPolicyArgs.builder()\n            .serviceAccountId(sa.name())\n            .policyData(admin.applyValue(getIAMPolicyResult -\u003e getIAMPolicyResult.policyData()))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can interact with\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMPolicy\n    properties:\n      serviceAccountId: ${sa.name}\n      policyData: ${admin.policyData}\nvariables:\n  admin:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/iam.serviceAccountUser\n            members:\n              - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"],\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n        Condition = new Gcp.ServiceAccount.Inputs.IAMBindingConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t\tCondition: \u0026serviceaccount.IAMBindingConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMBindingConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .condition(IAMBindingConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.compute.getDefaultServiceAccount({});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n});\n// Allow SA service account use the default GCE account\nconst gce_default_account_iam = new gcp.serviceaccount.IAMMember(\"gce-default-account-iam\", {\n    serviceAccountId: _default.then(_default =\u003e _default.name),\n    role: \"roles/iam.serviceAccountUser\",\n    member: pulumi.interpolate`serviceAccount:${sa.email}`,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_default_service_account()\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\")\n# Allow SA service account use the default GCE account\ngce_default_account_iam = gcp.serviceaccount.IAMMember(\"gce-default-account-iam\",\n    service_account_id=default.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=sa.email.apply(lambda email: f\"serviceAccount:{email}\"))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetDefaultServiceAccount.Invoke();\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n    });\n\n    // Allow SA service account use the default GCE account\n    var gce_default_account_iam = new Gcp.ServiceAccount.IAMMember(\"gce-default-account-iam\", new()\n    {\n        ServiceAccountId = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Name)),\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = sa.Email.Apply(email =\u003e $\"serviceAccount:{email}\"),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.GetDefaultServiceAccount(ctx, \u0026compute.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// Allow SA service account use the default GCE account\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"gce-default-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: pulumi.String(_default.Name),\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember: sa.Email.ApplyT(func(email string) (string, error) {\n\t\t\t\treturn fmt.Sprintf(\"serviceAccount:%v\", email), nil\n\t\t\t}).(pulumi.StringOutput),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getDefaultServiceAccount();\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .build());\n\n        // Allow SA service account use the default GCE account\n        var gce_default_account_iam = new IAMMember(\"gce-default-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(default_.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(sa.email().applyValue(email -\u003e String.format(\"serviceAccount:%s\", email)))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n  # Allow SA service account use the default GCE account\n  gce-default-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${default.name}\n      role: roles/iam.serviceAccountUser\n      member: serviceAccount:${sa.email}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\",\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n        Condition = new Gcp.ServiceAccount.Inputs.IAMMemberConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t\tCondition: \u0026serviceaccount.IAMMemberConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMMemberConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .condition(IAMMemberConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n\n### Additional Examples\n\n### Service Account IAM Policy\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst admin = gcp.organizations.getIAMPolicy({\n    bindings: [{\n        role: \"roles/iam.serviceAccountUser\",\n        members: [\"user:jane@example.com\"],\n    }],\n});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can interact with\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMPolicy(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    policyData: admin.then(admin =\u003e admin.policyData),\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nadmin = gcp.organizations.get_iam_policy(bindings=[{\n    \"role\": \"roles/iam.serviceAccountUser\",\n    \"members\": [\"user:jane@example.com\"],\n}])\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can interact with\")\nadmin_account_iam = gcp.serviceaccount.IAMPolicy(\"admin-account-iam\",\n    service_account_id=sa.name,\n    policy_data=admin.policy_data)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var admin = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/iam.serviceAccountUser\",\n                Members = new[]\n                {\n                    \"user:jane@example.com\",\n                },\n            },\n        },\n    });\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can interact with\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMPolicy(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        PolicyData = admin.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tadmin, err := organizations.LookupIAMPolicy(ctx, \u0026organizations.LookupIAMPolicyArgs{\n\t\t\tBindings: []organizations.GetIAMPolicyBinding{\n\t\t\t\t{\n\t\t\t\t\tRole: \"roles/iam.serviceAccountUser\",\n\t\t\t\t\tMembers: []string{\n\t\t\t\t\t\t\"user:jane@example.com\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can interact with\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMPolicy(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMPolicyArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tPolicyData:       pulumi.String(admin.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMPolicy;\nimport com.pulumi.gcp.serviceaccount.IAMPolicyArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var admin = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/iam.serviceAccountUser\")\n                .members(\"user:jane@example.com\")\n                .build())\n            .build());\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can interact with\")\n            .build());\n\n        var admin_account_iam = new IAMPolicy(\"admin-account-iam\", IAMPolicyArgs.builder()\n            .serviceAccountId(sa.name())\n            .policyData(admin.applyValue(getIAMPolicyResult -\u003e getIAMPolicyResult.policyData()))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can interact with\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMPolicy\n    properties:\n      serviceAccountId: ${sa.name}\n      policyData: ${admin.policyData}\nvariables:\n  admin:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/iam.serviceAccountUser\n            members:\n              - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"],\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n        Condition = new Gcp.ServiceAccount.Inputs.IAMBindingConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t\tCondition: \u0026serviceaccount.IAMBindingConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMBindingConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .condition(IAMBindingConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.compute.getDefaultServiceAccount({});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n});\n// Allow SA service account use the default GCE account\nconst gce_default_account_iam = new gcp.serviceaccount.IAMMember(\"gce-default-account-iam\", {\n    serviceAccountId: _default.then(_default =\u003e _default.name),\n    role: \"roles/iam.serviceAccountUser\",\n    member: pulumi.interpolate`serviceAccount:${sa.email}`,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_default_service_account()\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\")\n# Allow SA service account use the default GCE account\ngce_default_account_iam = gcp.serviceaccount.IAMMember(\"gce-default-account-iam\",\n    service_account_id=default.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=sa.email.apply(lambda email: f\"serviceAccount:{email}\"))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetDefaultServiceAccount.Invoke();\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n    });\n\n    // Allow SA service account use the default GCE account\n    var gce_default_account_iam = new Gcp.ServiceAccount.IAMMember(\"gce-default-account-iam\", new()\n    {\n        ServiceAccountId = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Name)),\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = sa.Email.Apply(email =\u003e $\"serviceAccount:{email}\"),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.GetDefaultServiceAccount(ctx, \u0026compute.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// Allow SA service account use the default GCE account\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"gce-default-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: pulumi.String(_default.Name),\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember: sa.Email.ApplyT(func(email string) (string, error) {\n\t\t\t\treturn fmt.Sprintf(\"serviceAccount:%v\", email), nil\n\t\t\t}).(pulumi.StringOutput),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getDefaultServiceAccount();\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .build());\n\n        // Allow SA service account use the default GCE account\n        var gce_default_account_iam = new IAMMember(\"gce-default-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(default_.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(sa.email().applyValue(email -\u003e String.format(\"serviceAccount:%s\", email)))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n  # Allow SA service account use the default GCE account\n  gce-default-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${default.name}\n      role: roles/iam.serviceAccountUser\n      member: serviceAccount:${sa.email}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\",\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n        Condition = new Gcp.ServiceAccount.Inputs.IAMMemberConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t\tCondition: \u0026serviceaccount.IAMMemberConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMMemberConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .condition(IAMMemberConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\n### Importing with conditions:\n\nHere are examples of importing IAM memberships and bindings that include conditions:\n\n```sh\n$ pulumi import gcp:serviceaccount/iAMMember:IAMMember admin-account-iam \"projects/{your-project-id}/serviceAccounts/{your-service-account-email} roles/iam.serviceAccountUser expires_after_2019_12_31\"\n```\n\n```sh\n$ pulumi import gcp:serviceaccount/iAMMember:IAMMember admin-account-iam \"projects/{your-project-id}/serviceAccounts/{your-service-account-email} roles/iam.serviceAccountUser user:foo@example.com expires_after_2019_12_31\"\n```\n\n",
             "properties": {
                 "condition": {
                     "$ref": "#/types/gcp:serviceaccount/IAMMemberCondition:IAMMemberCondition",
@@ -270561,7 +270561,7 @@
             ]
         },
         "gcp:serviceaccount/iAMPolicy:IAMPolicy": {
-            "description": "When managing IAM roles, you can treat a service account either as a resource or as an identity. This resource is to add iam policy bindings to a service account resource, such as allowing the members to run operations as or modify the service account. To configure permissions for a service account on other GCP resources, use the google_project_iam set of resources.\n\nThree different resources help you manage your IAM policy for a service account. Each of these resources serves a different use case:\n\n* `gcp.serviceaccount.IAMPolicy`: Authoritative. Sets the IAM policy for the service account and replaces any existing policy already attached.\n* `gcp.serviceaccount.IAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the service account are preserved.\n* `gcp.serviceaccount.IAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the service account are preserved.\n\n\u003e **Note:** `gcp.serviceaccount.IAMPolicy` **cannot** be used in conjunction with `gcp.serviceaccount.IAMBinding` and `gcp.serviceaccount.IAMMember` or they will fight over what your policy should be.\n\n\u003e **Note:** `gcp.serviceaccount.IAMBinding` resources **can be** used in conjunction with `gcp.serviceaccount.IAMMember` resources **only if** they do not grant privilege to the same role.\n\n## Example Usage\n\n### Service Account IAM Policy\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst admin = gcp.organizations.getIAMPolicy({\n    bindings: [{\n        role: \"roles/iam.serviceAccountUser\",\n        members: [\"user:jane@example.com\"],\n    }],\n});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can interact with\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMPolicy(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    policyData: admin.then(admin =\u003e admin.policyData),\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nadmin = gcp.organizations.get_iam_policy(bindings=[{\n    \"role\": \"roles/iam.serviceAccountUser\",\n    \"members\": [\"user:jane@example.com\"],\n}])\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can interact with\")\nadmin_account_iam = gcp.serviceaccount.IAMPolicy(\"admin-account-iam\",\n    service_account_id=sa.name,\n    policy_data=admin.policy_data)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var admin = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/iam.serviceAccountUser\",\n                Members = new[]\n                {\n                    \"user:jane@example.com\",\n                },\n            },\n        },\n    });\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can interact with\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMPolicy(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        PolicyData = admin.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tadmin, err := organizations.LookupIAMPolicy(ctx, \u0026organizations.LookupIAMPolicyArgs{\n\t\t\tBindings: []organizations.GetIAMPolicyBinding{\n\t\t\t\t{\n\t\t\t\t\tRole: \"roles/iam.serviceAccountUser\",\n\t\t\t\t\tMembers: []string{\n\t\t\t\t\t\t\"user:jane@example.com\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can interact with\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMPolicy(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMPolicyArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tPolicyData:       pulumi.String(admin.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMPolicy;\nimport com.pulumi.gcp.serviceaccount.IAMPolicyArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var admin = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/iam.serviceAccountUser\")\n                .members(\"user:jane@example.com\")\n                .build())\n            .build());\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can interact with\")\n            .build());\n\n        var admin_account_iam = new IAMPolicy(\"admin-account-iam\", IAMPolicyArgs.builder()\n            .serviceAccountId(sa.name())\n            .policyData(admin.applyValue(getIAMPolicyResult -\u003e getIAMPolicyResult.policyData()))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can interact with\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMPolicy\n    properties:\n      serviceAccountId: ${sa.name}\n      policyData: ${admin.policyData}\nvariables:\n  admin:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/iam.serviceAccountUser\n            members:\n              - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"],\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n        Condition = new Gcp.ServiceAccount.Inputs.IAMBindingConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t\tCondition: \u0026serviceaccount.IAMBindingConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMBindingConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .condition(IAMBindingConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.compute.getDefaultServiceAccount({});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n});\n// Allow SA service account use the default GCE account\nconst gce_default_account_iam = new gcp.serviceaccount.IAMMember(\"gce-default-account-iam\", {\n    serviceAccountId: _default.then(_default =\u003e _default.name),\n    role: \"roles/iam.serviceAccountUser\",\n    member: pulumi.interpolate`serviceAccount:${sa.email}`,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_default_service_account()\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\")\n# Allow SA service account use the default GCE account\ngce_default_account_iam = gcp.serviceaccount.IAMMember(\"gce-default-account-iam\",\n    service_account_id=default.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=sa.email.apply(lambda email: f\"serviceAccount:{email}\"))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetDefaultServiceAccount.Invoke();\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n    });\n\n    // Allow SA service account use the default GCE account\n    var gce_default_account_iam = new Gcp.ServiceAccount.IAMMember(\"gce-default-account-iam\", new()\n    {\n        ServiceAccountId = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Name)),\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = sa.Email.Apply(email =\u003e $\"serviceAccount:{email}\"),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.GetDefaultServiceAccount(ctx, \u0026compute.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// Allow SA service account use the default GCE account\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"gce-default-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: pulumi.String(_default.Name),\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember: sa.Email.ApplyT(func(email string) (string, error) {\n\t\t\t\treturn fmt.Sprintf(\"serviceAccount:%v\", email), nil\n\t\t\t}).(pulumi.StringOutput),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getDefaultServiceAccount();\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .build());\n\n        // Allow SA service account use the default GCE account\n        var gce_default_account_iam = new IAMMember(\"gce-default-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(default_.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(sa.email().applyValue(email -\u003e String.format(\"serviceAccount:%s\", email)))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n  # Allow SA service account use the default GCE account\n  gce-default-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${default.name}\n      role: roles/iam.serviceAccountUser\n      member: serviceAccount:${sa.email}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\",\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n        Condition = new Gcp.ServiceAccount.Inputs.IAMMemberConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t\tCondition: \u0026serviceaccount.IAMMemberConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMMemberConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .condition(IAMMemberConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n\n### Additional Examples\n\n### Service Account IAM Policy\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst admin = gcp.organizations.getIAMPolicy({\n    bindings: [{\n        role: \"roles/iam.serviceAccountUser\",\n        members: [\"user:jane@example.com\"],\n    }],\n});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can interact with\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMPolicy(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    policyData: admin.then(admin =\u003e admin.policyData),\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nadmin = gcp.organizations.get_iam_policy(bindings=[{\n    \"role\": \"roles/iam.serviceAccountUser\",\n    \"members\": [\"user:jane@example.com\"],\n}])\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can interact with\")\nadmin_account_iam = gcp.serviceaccount.IAMPolicy(\"admin-account-iam\",\n    service_account_id=sa.name,\n    policy_data=admin.policy_data)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var admin = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/iam.serviceAccountUser\",\n                Members = new[]\n                {\n                    \"user:jane@example.com\",\n                },\n            },\n        },\n    });\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can interact with\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMPolicy(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        PolicyData = admin.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tadmin, err := organizations.LookupIAMPolicy(ctx, \u0026organizations.LookupIAMPolicyArgs{\n\t\t\tBindings: []organizations.GetIAMPolicyBinding{\n\t\t\t\t{\n\t\t\t\t\tRole: \"roles/iam.serviceAccountUser\",\n\t\t\t\t\tMembers: []string{\n\t\t\t\t\t\t\"user:jane@example.com\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can interact with\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMPolicy(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMPolicyArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tPolicyData:       pulumi.String(admin.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMPolicy;\nimport com.pulumi.gcp.serviceaccount.IAMPolicyArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var admin = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/iam.serviceAccountUser\")\n                .members(\"user:jane@example.com\")\n                .build())\n            .build());\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can interact with\")\n            .build());\n\n        var admin_account_iam = new IAMPolicy(\"admin-account-iam\", IAMPolicyArgs.builder()\n            .serviceAccountId(sa.name())\n            .policyData(admin.applyValue(getIAMPolicyResult -\u003e getIAMPolicyResult.policyData()))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can interact with\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMPolicy\n    properties:\n      serviceAccountId: ${sa.name}\n      policyData: ${admin.policyData}\nvariables:\n  admin:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/iam.serviceAccountUser\n            members:\n              - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"],\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n        Condition = new Gcp.ServiceAccount.Inputs.IAMBindingConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t\tCondition: \u0026serviceaccount.IAMBindingConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMBindingConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .condition(IAMBindingConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.compute.getDefaultServiceAccount({});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n});\n// Allow SA service account use the default GCE account\nconst gce_default_account_iam = new gcp.serviceaccount.IAMMember(\"gce-default-account-iam\", {\n    serviceAccountId: _default.then(_default =\u003e _default.name),\n    role: \"roles/iam.serviceAccountUser\",\n    member: pulumi.interpolate`serviceAccount:${sa.email}`,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_default_service_account()\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\")\n# Allow SA service account use the default GCE account\ngce_default_account_iam = gcp.serviceaccount.IAMMember(\"gce-default-account-iam\",\n    service_account_id=default.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=sa.email.apply(lambda email: f\"serviceAccount:{email}\"))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetDefaultServiceAccount.Invoke();\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n    });\n\n    // Allow SA service account use the default GCE account\n    var gce_default_account_iam = new Gcp.ServiceAccount.IAMMember(\"gce-default-account-iam\", new()\n    {\n        ServiceAccountId = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Name)),\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = sa.Email.Apply(email =\u003e $\"serviceAccount:{email}\"),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.GetDefaultServiceAccount(ctx, \u0026compute.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// Allow SA service account use the default GCE account\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"gce-default-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: pulumi.String(_default.Name),\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember: sa.Email.ApplyT(func(email string) (string, error) {\n\t\t\t\treturn fmt.Sprintf(\"serviceAccount:%v\", email), nil\n\t\t\t}).(pulumi.StringOutput),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getDefaultServiceAccount();\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .build());\n\n        // Allow SA service account use the default GCE account\n        var gce_default_account_iam = new IAMMember(\"gce-default-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(default_.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(sa.email().applyValue(email -\u003e String.format(\"serviceAccount:%s\", email)))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n  # Allow SA service account use the default GCE account\n  gce-default-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${default.name}\n      role: roles/iam.serviceAccountUser\n      member: serviceAccount:${sa.email}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\",\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n        Condition = new Gcp.ServiceAccount.Inputs.IAMMemberConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t\tCondition: \u0026serviceaccount.IAMMemberConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMMemberConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .condition(IAMMemberConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\n### Importing with conditions:\n\nHere are examples of importing IAM memberships and bindings that include conditions:\n\n```sh\n$ pulumi import gcp:serviceaccount/iAMPolicy:IAMPolicy admin-account-iam \"projects/{your-project-id}/serviceAccounts/{your-service-account-email} roles/iam.serviceAccountUser expires_after_2019_12_31\"\n```\n\n```sh\n$ pulumi import gcp:serviceaccount/iAMPolicy:IAMPolicy admin-account-iam \"projects/{your-project-id}/serviceAccounts/{your-service-account-email} roles/iam.serviceAccountUser user:foo@example.com expires_after_2019_12_31\"\n```\n\n",
+            "description": "When managing IAM roles, you can treat a service account either as a resource or as an identity. This resource is to add iam policy bindings to a service account resource, such as allowing the members to run operations as or modify the service account. To configure permissions for a service account on other GCP resources, use the google_project_iam set of resources.\n\nThree different resources help you manage your IAM policy for a service account. Each of these resources serves a different use case:\n\n* `gcp.serviceaccount.IAMPolicy`: Authoritative. Sets the IAM policy for the service account and replaces any existing policy already attached.\n* `gcp.serviceaccount.IAMBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the service account are preserved.\n* `gcp.serviceaccount.IAMMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the service account are preserved.\n\n\u003e **Note:** `gcp.serviceaccount.IAMPolicy` **cannot** be used in conjunction with `gcp.serviceaccount.IAMBinding` and `gcp.serviceaccount.IAMMember` or they will fight over what your policy should be.\n\n\u003e **Note:** `gcp.serviceaccount.IAMBinding` resources **can be** used in conjunction with `gcp.serviceaccount.IAMMember` resources **only if** they do not grant privilege to the same role.\n\n## Example Usage\n\n### Service Account IAM Policy\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst admin = gcp.organizations.getIAMPolicy({\n    bindings: [{\n        role: \"roles/iam.serviceAccountUser\",\n        members: [\"user:jane@example.com\"],\n    }],\n});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can interact with\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMPolicy(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    policyData: admin.then(admin =\u003e admin.policyData),\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nadmin = gcp.organizations.get_iam_policy(bindings=[{\n    \"role\": \"roles/iam.serviceAccountUser\",\n    \"members\": [\"user:jane@example.com\"],\n}])\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can interact with\")\nadmin_account_iam = gcp.serviceaccount.IAMPolicy(\"admin-account-iam\",\n    service_account_id=sa.name,\n    policy_data=admin.policy_data)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var admin = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/iam.serviceAccountUser\",\n                Members = new[]\n                {\n                    \"user:jane@example.com\",\n                },\n            },\n        },\n    });\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can interact with\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMPolicy(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        PolicyData = admin.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tadmin, err := organizations.LookupIAMPolicy(ctx, \u0026organizations.LookupIAMPolicyArgs{\n\t\t\tBindings: []organizations.GetIAMPolicyBinding{\n\t\t\t\t{\n\t\t\t\t\tRole: \"roles/iam.serviceAccountUser\",\n\t\t\t\t\tMembers: []string{\n\t\t\t\t\t\t\"user:jane@example.com\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can interact with\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMPolicy(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMPolicyArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tPolicyData:       pulumi.String(admin.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMPolicy;\nimport com.pulumi.gcp.serviceaccount.IAMPolicyArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var admin = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/iam.serviceAccountUser\")\n                .members(\"user:jane@example.com\")\n                .build())\n            .build());\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can interact with\")\n            .build());\n\n        var admin_account_iam = new IAMPolicy(\"admin-account-iam\", IAMPolicyArgs.builder()\n            .serviceAccountId(sa.name())\n            .policyData(admin.applyValue(getIAMPolicyResult -\u003e getIAMPolicyResult.policyData()))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can interact with\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMPolicy\n    properties:\n      serviceAccountId: ${sa.name}\n      policyData: ${admin.policyData}\nvariables:\n  admin:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/iam.serviceAccountUser\n            members:\n              - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"],\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n        Condition = new Gcp.ServiceAccount.Inputs.IAMBindingConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t\tCondition: \u0026serviceaccount.IAMBindingConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMBindingConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .condition(IAMBindingConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.compute.getDefaultServiceAccount({});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n});\n// Allow SA service account use the default GCE account\nconst gce_default_account_iam = new gcp.serviceaccount.IAMMember(\"gce-default-account-iam\", {\n    serviceAccountId: _default.then(_default =\u003e _default.name),\n    role: \"roles/iam.serviceAccountUser\",\n    member: pulumi.interpolate`serviceAccount:${sa.email}`,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_default_service_account()\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\")\n# Allow SA service account use the default GCE account\ngce_default_account_iam = gcp.serviceaccount.IAMMember(\"gce-default-account-iam\",\n    service_account_id=default.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=sa.email.apply(lambda email: f\"serviceAccount:{email}\"))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetDefaultServiceAccount.Invoke();\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n    });\n\n    // Allow SA service account use the default GCE account\n    var gce_default_account_iam = new Gcp.ServiceAccount.IAMMember(\"gce-default-account-iam\", new()\n    {\n        ServiceAccountId = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Name)),\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = sa.Email.Apply(email =\u003e $\"serviceAccount:{email}\"),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.GetDefaultServiceAccount(ctx, \u0026compute.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// Allow SA service account use the default GCE account\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"gce-default-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: pulumi.String(_default.Name),\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember: sa.Email.ApplyT(func(email string) (string, error) {\n\t\t\t\treturn fmt.Sprintf(\"serviceAccount:%v\", email), nil\n\t\t\t}).(pulumi.StringOutput),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getDefaultServiceAccount();\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .build());\n\n        // Allow SA service account use the default GCE account\n        var gce_default_account_iam = new IAMMember(\"gce-default-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(default_.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(sa.email().applyValue(email -\u003e String.format(\"serviceAccount:%s\", email)))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n  # Allow SA service account use the default GCE account\n  gce-default-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${default.name}\n      role: roles/iam.serviceAccountUser\n      member: serviceAccount:${sa.email}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\",\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n        Condition = new Gcp.ServiceAccount.Inputs.IAMMemberConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t\tCondition: \u0026serviceaccount.IAMMemberConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMMemberConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .condition(IAMMemberConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n\n### Additional Examples\n\n### Service Account IAM Policy\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst admin = gcp.organizations.getIAMPolicy({\n    bindings: [{\n        role: \"roles/iam.serviceAccountUser\",\n        members: [\"user:jane@example.com\"],\n    }],\n});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can interact with\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMPolicy(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    policyData: admin.then(admin =\u003e admin.policyData),\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nadmin = gcp.organizations.get_iam_policy(bindings=[{\n    \"role\": \"roles/iam.serviceAccountUser\",\n    \"members\": [\"user:jane@example.com\"],\n}])\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can interact with\")\nadmin_account_iam = gcp.serviceaccount.IAMPolicy(\"admin-account-iam\",\n    service_account_id=sa.name,\n    policy_data=admin.policy_data)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var admin = Gcp.Organizations.GetIAMPolicy.Invoke(new()\n    {\n        Bindings = new[]\n        {\n            new Gcp.Organizations.Inputs.GetIAMPolicyBindingInputArgs\n            {\n                Role = \"roles/iam.serviceAccountUser\",\n                Members = new[]\n                {\n                    \"user:jane@example.com\",\n                },\n            },\n        },\n    });\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can interact with\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMPolicy(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        PolicyData = admin.Apply(getIAMPolicyResult =\u003e getIAMPolicyResult.PolicyData),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tadmin, err := organizations.LookupIAMPolicy(ctx, \u0026organizations.LookupIAMPolicyArgs{\n\t\t\tBindings: []organizations.GetIAMPolicyBinding{\n\t\t\t\t{\n\t\t\t\t\tRole: \"roles/iam.serviceAccountUser\",\n\t\t\t\t\tMembers: []string{\n\t\t\t\t\t\t\"user:jane@example.com\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can interact with\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMPolicy(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMPolicyArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tPolicyData:       pulumi.String(admin.PolicyData),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMPolicy;\nimport com.pulumi.gcp.serviceaccount.IAMPolicyArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var admin = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder()\n            .bindings(GetIAMPolicyBindingArgs.builder()\n                .role(\"roles/iam.serviceAccountUser\")\n                .members(\"user:jane@example.com\")\n                .build())\n            .build());\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can interact with\")\n            .build());\n\n        var admin_account_iam = new IAMPolicy(\"admin-account-iam\", IAMPolicyArgs.builder()\n            .serviceAccountId(sa.name())\n            .policyData(admin.applyValue(getIAMPolicyResult -\u003e getIAMPolicyResult.policyData()))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can interact with\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMPolicy\n    properties:\n      serviceAccountId: ${sa.name}\n      policyData: ${admin.policyData}\nvariables:\n  admin:\n    fn::invoke:\n      function: gcp:organizations:getIAMPolicy\n      arguments:\n        bindings:\n          - role: roles/iam.serviceAccountUser\n            members:\n              - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Binding With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that only Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMBinding(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    members: [\"user:jane@example.com\"],\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that only Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMBinding(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    members=[\"user:jane@example.com\"],\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that only Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMBinding(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Members = new[]\n        {\n            \"user:jane@example.com\",\n        },\n        Condition = new Gcp.ServiceAccount.Inputs.IAMBindingConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that only Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMBinding(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"user:jane@example.com\"),\n\t\t\t},\n\t\t\tCondition: \u0026serviceaccount.IAMBindingConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMBindingConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that only Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMBinding(\"admin-account-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .members(\"user:jane@example.com\")\n            .condition(IAMBindingConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that only Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      members:\n        - user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.compute.getDefaultServiceAccount({});\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n});\n// Allow SA service account use the default GCE account\nconst gce_default_account_iam = new gcp.serviceaccount.IAMMember(\"gce-default-account-iam\", {\n    serviceAccountId: _default.then(_default =\u003e _default.name),\n    role: \"roles/iam.serviceAccountUser\",\n    member: pulumi.interpolate`serviceAccount:${sa.email}`,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_default_service_account()\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\")\n# Allow SA service account use the default GCE account\ngce_default_account_iam = gcp.serviceaccount.IAMMember(\"gce-default-account-iam\",\n    service_account_id=default.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=sa.email.apply(lambda email: f\"serviceAccount:{email}\"))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetDefaultServiceAccount.Invoke();\n\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n    });\n\n    // Allow SA service account use the default GCE account\n    var gce_default_account_iam = new Gcp.ServiceAccount.IAMMember(\"gce-default-account-iam\", new()\n    {\n        ServiceAccountId = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Name)),\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = sa.Email.Apply(email =\u003e $\"serviceAccount:{email}\"),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.GetDefaultServiceAccount(ctx, \u0026compute.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// Allow SA service account use the default GCE account\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"gce-default-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: pulumi.String(_default.Name),\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember: sa.Email.ApplyT(func(email string) (string, error) {\n\t\t\t\treturn fmt.Sprintf(\"serviceAccount:%v\", email), nil\n\t\t\t}).(pulumi.StringOutput),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDefaultServiceAccountArgs;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getDefaultServiceAccount();\n\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .build());\n\n        // Allow SA service account use the default GCE account\n        var gce_default_account_iam = new IAMMember(\"gce-default-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(default_.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(sa.email().applyValue(email -\u003e String.format(\"serviceAccount:%s\", email)))\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n  # Allow SA service account use the default GCE account\n  gce-default-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${default.name}\n      role: roles/iam.serviceAccountUser\n      member: serviceAccount:${sa.email}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getDefaultServiceAccount\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Service Account IAM Member With IAM Conditions:\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst sa = new gcp.serviceaccount.Account(\"sa\", {\n    accountId: \"my-service-account\",\n    displayName: \"A service account that Jane can use\",\n});\nconst admin_account_iam = new gcp.serviceaccount.IAMMember(\"admin-account-iam\", {\n    serviceAccountId: sa.name,\n    role: \"roles/iam.serviceAccountUser\",\n    member: \"user:jane@example.com\",\n    condition: {\n        title: \"expires_after_2019_12_31\",\n        description: \"Expiring at midnight of 2019-12-31\",\n        expression: \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    },\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nsa = gcp.serviceaccount.Account(\"sa\",\n    account_id=\"my-service-account\",\n    display_name=\"A service account that Jane can use\")\nadmin_account_iam = gcp.serviceaccount.IAMMember(\"admin-account-iam\",\n    service_account_id=sa.name,\n    role=\"roles/iam.serviceAccountUser\",\n    member=\"user:jane@example.com\",\n    condition={\n        \"title\": \"expires_after_2019_12_31\",\n        \"description\": \"Expiring at midnight of 2019-12-31\",\n        \"expression\": \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n    })\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sa = new Gcp.ServiceAccount.Account(\"sa\", new()\n    {\n        AccountId = \"my-service-account\",\n        DisplayName = \"A service account that Jane can use\",\n    });\n\n    var admin_account_iam = new Gcp.ServiceAccount.IAMMember(\"admin-account-iam\", new()\n    {\n        ServiceAccountId = sa.Name,\n        Role = \"roles/iam.serviceAccountUser\",\n        Member = \"user:jane@example.com\",\n        Condition = new Gcp.ServiceAccount.Inputs.IAMMemberConditionArgs\n        {\n            Title = \"expires_after_2019_12_31\",\n            Description = \"Expiring at midnight of 2019-12-31\",\n            Expression = \"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsa, err := serviceaccount.NewAccount(ctx, \"sa\", \u0026serviceaccount.AccountArgs{\n\t\t\tAccountId:   pulumi.String(\"my-service-account\"),\n\t\t\tDisplayName: pulumi.String(\"A service account that Jane can use\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.NewIAMMember(ctx, \"admin-account-iam\", \u0026serviceaccount.IAMMemberArgs{\n\t\t\tServiceAccountId: sa.Name,\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountUser\"),\n\t\t\tMember:           pulumi.String(\"user:jane@example.com\"),\n\t\t\tCondition: \u0026serviceaccount.IAMMemberConditionArgs{\n\t\t\t\tTitle:       pulumi.String(\"expires_after_2019_12_31\"),\n\t\t\t\tDescription: pulumi.String(\"Expiring at midnight of 2019-12-31\"),\n\t\t\t\tExpression:  pulumi.String(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.Account;\nimport com.pulumi.gcp.serviceaccount.AccountArgs;\nimport com.pulumi.gcp.serviceaccount.IAMMember;\nimport com.pulumi.gcp.serviceaccount.IAMMemberArgs;\nimport com.pulumi.gcp.serviceaccount.inputs.IAMMemberConditionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var sa = new Account(\"sa\", AccountArgs.builder()\n            .accountId(\"my-service-account\")\n            .displayName(\"A service account that Jane can use\")\n            .build());\n\n        var admin_account_iam = new IAMMember(\"admin-account-iam\", IAMMemberArgs.builder()\n            .serviceAccountId(sa.name())\n            .role(\"roles/iam.serviceAccountUser\")\n            .member(\"user:jane@example.com\")\n            .condition(IAMMemberConditionArgs.builder()\n                .title(\"expires_after_2019_12_31\")\n                .description(\"Expiring at midnight of 2019-12-31\")\n                .expression(\"request.time \u003c timestamp(\\\"2020-01-01T00:00:00Z\\\")\")\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  sa:\n    type: gcp:serviceaccount:Account\n    properties:\n      accountId: my-service-account\n      displayName: A service account that Jane can use\n  admin-account-iam:\n    type: gcp:serviceaccount:IAMMember\n    properties:\n      serviceAccountId: ${sa.name}\n      role: roles/iam.serviceAccountUser\n      member: user:jane@example.com\n      condition:\n        title: expires_after_2019_12_31\n        description: Expiring at midnight of 2019-12-31\n        expression: request.time \u003c timestamp(\"2020-01-01T00:00:00Z\")\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\n### Importing with conditions:\n\nHere are examples of importing IAM memberships and bindings that include conditions:\n\n```sh\n$ pulumi import gcp:serviceaccount/iAMPolicy:IAMPolicy admin-account-iam \"projects/{your-project-id}/serviceAccounts/{your-service-account-email} roles/iam.serviceAccountUser expires_after_2019_12_31\"\n```\n\n```sh\n$ pulumi import gcp:serviceaccount/iAMPolicy:IAMPolicy admin-account-iam \"projects/{your-project-id}/serviceAccounts/{your-service-account-email} roles/iam.serviceAccountUser user:foo@example.com expires_after_2019_12_31\"\n```\n\n",
             "properties": {
                 "etag": {
                     "type": "string",
@@ -277005,7 +277005,7 @@
             }
         },
         "gcp:storage/transferAgentPool:TransferAgentPool": {
-            "description": "Represents an On-Premises Agent pool.\n\n\nTo get more information about AgentPool, see:\n\n* [API documentation](https://cloud.google.com/storage-transfer/docs/reference/rest/v1/projects.agentPools)\n* How-to Guides\n    * [Official Documentation](https://cloud.google.com/storage-transfer/docs/on-prem-agent-pools)\n\n## Example Usage\n\n### Agent Pool Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.storage.getTransferProjectServiceAccount({\n    project: \"my-project-name\",\n});\nconst pubsubEditorRole = new gcp.projects.IAMMember(\"pubsub_editor_role\", {\n    project: \"my-project-name\",\n    role: \"roles/pubsub.editor\",\n    member: _default.then(_default =\u003e `serviceAccount:${_default.email}`),\n});\nconst example = new gcp.storage.TransferAgentPool(\"example\", {\n    name: \"agent-pool-example\",\n    displayName: \"Source A to destination Z\",\n    bandwidthLimit: {\n        limitMbps: \"120\",\n    },\n}, {\n    dependsOn: [pubsubEditorRole],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.storage.get_transfer_project_service_account(project=\"my-project-name\")\npubsub_editor_role = gcp.projects.IAMMember(\"pubsub_editor_role\",\n    project=\"my-project-name\",\n    role=\"roles/pubsub.editor\",\n    member=f\"serviceAccount:{default.email}\")\nexample = gcp.storage.TransferAgentPool(\"example\",\n    name=\"agent-pool-example\",\n    display_name=\"Source A to destination Z\",\n    bandwidth_limit={\n        \"limit_mbps\": \"120\",\n    },\n    opts = pulumi.ResourceOptions(depends_on=[pubsub_editor_role]))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Storage.GetTransferProjectServiceAccount.Invoke(new()\n    {\n        Project = \"my-project-name\",\n    });\n\n    var pubsubEditorRole = new Gcp.Projects.IAMMember(\"pubsub_editor_role\", new()\n    {\n        Project = \"my-project-name\",\n        Role = \"roles/pubsub.editor\",\n        Member = @default.Apply(@default =\u003e $\"serviceAccount:{@default.Apply(getTransferProjectServiceAccountResult =\u003e getTransferProjectServiceAccountResult.Email)}\"),\n    });\n\n    var example = new Gcp.Storage.TransferAgentPool(\"example\", new()\n    {\n        Name = \"agent-pool-example\",\n        DisplayName = \"Source A to destination Z\",\n        BandwidthLimit = new Gcp.Storage.Inputs.TransferAgentPoolBandwidthLimitArgs\n        {\n            LimitMbps = \"120\",\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            pubsubEditorRole,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/storage\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := storage.GetTransferProjectServiceAccount(ctx, \u0026storage.GetTransferProjectServiceAccountArgs{\n\t\t\tProject: pulumi.StringRef(\"my-project-name\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tpubsubEditorRole, err := projects.NewIAMMember(ctx, \"pubsub_editor_role\", \u0026projects.IAMMemberArgs{\n\t\t\tProject: pulumi.String(\"my-project-name\"),\n\t\t\tRole:    pulumi.String(\"roles/pubsub.editor\"),\n\t\t\tMember:  pulumi.Sprintf(\"serviceAccount:%v\", _default.Email),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = storage.NewTransferAgentPool(ctx, \"example\", \u0026storage.TransferAgentPoolArgs{\n\t\t\tName:        pulumi.String(\"agent-pool-example\"),\n\t\t\tDisplayName: pulumi.String(\"Source A to destination Z\"),\n\t\t\tBandwidthLimit: \u0026storage.TransferAgentPoolBandwidthLimitArgs{\n\t\t\t\tLimitMbps: pulumi.String(\"120\"),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tpubsubEditorRole,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.storage.StorageFunctions;\nimport com.pulumi.gcp.storage.inputs.GetTransferProjectServiceAccountArgs;\nimport com.pulumi.gcp.projects.IAMMember;\nimport com.pulumi.gcp.projects.IAMMemberArgs;\nimport com.pulumi.gcp.storage.TransferAgentPool;\nimport com.pulumi.gcp.storage.TransferAgentPoolArgs;\nimport com.pulumi.gcp.storage.inputs.TransferAgentPoolBandwidthLimitArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = StorageFunctions.getTransferProjectServiceAccount(GetTransferProjectServiceAccountArgs.builder()\n            .project(\"my-project-name\")\n            .build());\n\n        var pubsubEditorRole = new IAMMember(\"pubsubEditorRole\", IAMMemberArgs.builder()\n            .project(\"my-project-name\")\n            .role(\"roles/pubsub.editor\")\n            .member(String.format(\"serviceAccount:%s\", default_.email()))\n            .build());\n\n        var example = new TransferAgentPool(\"example\", TransferAgentPoolArgs.builder()\n            .name(\"agent-pool-example\")\n            .displayName(\"Source A to destination Z\")\n            .bandwidthLimit(TransferAgentPoolBandwidthLimitArgs.builder()\n                .limitMbps(\"120\")\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(pubsubEditorRole)\n                .build());\n\n    }\n}\n```\n```yaml\nresources:\n  pubsubEditorRole:\n    type: gcp:projects:IAMMember\n    name: pubsub_editor_role\n    properties:\n      project: my-project-name\n      role: roles/pubsub.editor\n      member: serviceAccount:${default.email}\n  example:\n    type: gcp:storage:TransferAgentPool\n    properties:\n      name: agent-pool-example\n      displayName: Source A to destination Z\n      bandwidthLimit:\n        limitMbps: '120'\n    options:\n      dependsOn:\n        - ${pubsubEditorRole}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:storage:getTransferProjectServiceAccount\n      arguments:\n        project: my-project-name\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nAgentPool can be imported using any of these accepted formats:\n\n* `projects/{{project}}/agentPools/{{name}}`\n\n* `{{project}}/{{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, AgentPool can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:storage/transferAgentPool:TransferAgentPool default projects/{{project}}/agentPools/{{name}}\n```\n\n```sh\n$ pulumi import gcp:storage/transferAgentPool:TransferAgentPool default {{project}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:storage/transferAgentPool:TransferAgentPool default {{name}}\n```\n\n",
+            "description": "Represents an On-Premises Agent pool.\n\n\nTo get more information about AgentPool, see:\n\n* [API documentation](https://cloud.google.com/storage-transfer/docs/reference/rest/v1/projects.agentPools)\n* How-to Guides\n    * [Official Documentation](https://cloud.google.com/storage-transfer/docs/on-prem-agent-pools)\n\n## Example Usage\n\n### Agent Pool Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.storage.getTransferProjectServiceAccount({\n    project: \"my-project-name\",\n});\nconst pubsubEditorRole = new gcp.projects.IAMMember(\"pubsub_editor_role\", {\n    project: \"my-project-name\",\n    role: \"roles/pubsub.editor\",\n    member: _default.then(_default =\u003e `serviceAccount:${_default.email}`),\n});\nconst example = new gcp.storage.TransferAgentPool(\"example\", {\n    name: \"agent-pool-example\",\n    displayName: \"Source A to destination Z\",\n    bandwidthLimit: {\n        limitMbps: \"120\",\n    },\n}, {\n    dependsOn: [pubsubEditorRole],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.storage.get_transfer_project_service_account(project=\"my-project-name\")\npubsub_editor_role = gcp.projects.IAMMember(\"pubsub_editor_role\",\n    project=\"my-project-name\",\n    role=\"roles/pubsub.editor\",\n    member=f\"serviceAccount:{default.email}\")\nexample = gcp.storage.TransferAgentPool(\"example\",\n    name=\"agent-pool-example\",\n    display_name=\"Source A to destination Z\",\n    bandwidth_limit={\n        \"limit_mbps\": \"120\",\n    },\n    opts = pulumi.ResourceOptions(depends_on=[pubsub_editor_role]))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Storage.GetTransferProjectServiceAccount.Invoke(new()\n    {\n        Project = \"my-project-name\",\n    });\n\n    var pubsubEditorRole = new Gcp.Projects.IAMMember(\"pubsub_editor_role\", new()\n    {\n        Project = \"my-project-name\",\n        Role = \"roles/pubsub.editor\",\n        Member = @default.Apply(@default =\u003e $\"serviceAccount:{@default.Apply(getTransferProjectServiceAccountResult =\u003e getTransferProjectServiceAccountResult.Email)}\"),\n    });\n\n    var example = new Gcp.Storage.TransferAgentPool(\"example\", new()\n    {\n        Name = \"agent-pool-example\",\n        DisplayName = \"Source A to destination Z\",\n        BandwidthLimit = new Gcp.Storage.Inputs.TransferAgentPoolBandwidthLimitArgs\n        {\n            LimitMbps = \"120\",\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            pubsubEditorRole,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/storage\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := storage.GetTransferProjectServiceAccount(ctx, \u0026storage.GetTransferProjectServiceAccountArgs{\n\t\t\tProject: pulumi.StringRef(\"my-project-name\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tpubsubEditorRole, err := projects.NewIAMMember(ctx, \"pubsub_editor_role\", \u0026projects.IAMMemberArgs{\n\t\t\tProject: pulumi.String(\"my-project-name\"),\n\t\t\tRole:    pulumi.String(\"roles/pubsub.editor\"),\n\t\t\tMember:  pulumi.Sprintf(\"serviceAccount:%v\", _default.Email),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = storage.NewTransferAgentPool(ctx, \"example\", \u0026storage.TransferAgentPoolArgs{\n\t\t\tName:        pulumi.String(\"agent-pool-example\"),\n\t\t\tDisplayName: pulumi.String(\"Source A to destination Z\"),\n\t\t\tBandwidthLimit: \u0026storage.TransferAgentPoolBandwidthLimitArgs{\n\t\t\t\tLimitMbps: pulumi.String(\"120\"),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tpubsubEditorRole,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.storage.StorageFunctions;\nimport com.pulumi.gcp.storage.inputs.GetTransferProjectServiceAccountArgs;\nimport com.pulumi.gcp.projects.IAMMember;\nimport com.pulumi.gcp.projects.IAMMemberArgs;\nimport com.pulumi.gcp.storage.TransferAgentPool;\nimport com.pulumi.gcp.storage.TransferAgentPoolArgs;\nimport com.pulumi.gcp.storage.inputs.TransferAgentPoolBandwidthLimitArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = StorageFunctions.getTransferProjectServiceAccount(GetTransferProjectServiceAccountArgs.builder()\n            .project(\"my-project-name\")\n            .build());\n\n        var pubsubEditorRole = new IAMMember(\"pubsubEditorRole\", IAMMemberArgs.builder()\n            .project(\"my-project-name\")\n            .role(\"roles/pubsub.editor\")\n            .member(String.format(\"serviceAccount:%s\", default_.email()))\n            .build());\n\n        var example = new TransferAgentPool(\"example\", TransferAgentPoolArgs.builder()\n            .name(\"agent-pool-example\")\n            .displayName(\"Source A to destination Z\")\n            .bandwidthLimit(TransferAgentPoolBandwidthLimitArgs.builder()\n                .limitMbps(\"120\")\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(pubsubEditorRole)\n                .build());\n\n    }\n}\n```\n```yaml\nresources:\n  pubsubEditorRole:\n    type: gcp:projects:IAMMember\n    name: pubsub_editor_role\n    properties:\n      project: my-project-name\n      role: roles/pubsub.editor\n      member: serviceAccount:${default.email}\n  example:\n    type: gcp:storage:TransferAgentPool\n    properties:\n      name: agent-pool-example\n      displayName: Source A to destination Z\n      bandwidthLimit:\n        limitMbps: '120'\n    options:\n      dependsOn:\n        - ${pubsubEditorRole}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:storage:getTransferProjectServiceAccount\n      arguments:\n        project: my-project-name\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nAgentPool can be imported using any of these accepted formats:\n\n* `projects/{{project}}/agentPools/{{name}}`\n\n* `{{project}}/{{name}}`\n\n* `{{name}}`\n\nWhen using the `pulumi import` command, AgentPool can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:storage/transferAgentPool:TransferAgentPool default projects/{{project}}/agentPools/{{name}}\n```\n\n```sh\n$ pulumi import gcp:storage/transferAgentPool:TransferAgentPool default {{project}}/{{name}}\n```\n\n```sh\n$ pulumi import gcp:storage/transferAgentPool:TransferAgentPool default {{name}}\n```\n\n",
             "properties": {
                 "bandwidthLimit": {
                     "$ref": "#/types/gcp:storage/TransferAgentPoolBandwidthLimit:TransferAgentPoolBandwidthLimit",
@@ -277083,7 +277083,7 @@
             }
         },
         "gcp:storage/transferJob:TransferJob": {
-            "description": "Creates a new Transfer Job in Google Cloud Storage Transfer.\n\nTo get more information about Google Cloud Storage Transfer, see:\n\n* [Overview](https://cloud.google.com/storage-transfer/docs/overview)\n* [API documentation](https://cloud.google.com/storage-transfer/docs/reference/rest/v1/transferJobs)\n* How-to Guides\n    * [Configuring Access to Data Sources and Sinks](https://cloud.google.com/storage-transfer/docs/configure-access)\n\n## Example Usage\n\nExample creating a nightly Transfer Job from an AWS S3 Bucket to a GCS bucket.\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.storage.getTransferProjectServiceAccount({\n    project: project,\n});\nconst s3_backup_bucket = new gcp.storage.Bucket(\"s3-backup-bucket\", {\n    name: `${awsS3Bucket}-backup`,\n    storageClass: \"NEARLINE\",\n    project: project,\n    location: \"US\",\n});\nconst s3_backup_bucketBucketIAMMember = new gcp.storage.BucketIAMMember(\"s3-backup-bucket\", {\n    bucket: s3_backup_bucket.name,\n    role: \"roles/storage.admin\",\n    member: _default.then(_default =\u003e `serviceAccount:${_default.email}`),\n}, {\n    dependsOn: [s3_backup_bucket],\n});\nconst topic = new gcp.pubsub.Topic(\"topic\", {name: pubsubTopicName});\nconst notificationConfig = new gcp.pubsub.TopicIAMMember(\"notification_config\", {\n    topic: topic.id,\n    role: \"roles/pubsub.publisher\",\n    member: _default.then(_default =\u003e `serviceAccount:${_default.email}`),\n});\nconst s3_bucket_nightly_backup = new gcp.storage.TransferJob(\"s3-bucket-nightly-backup\", {\n    description: \"Nightly backup of S3 bucket\",\n    project: project,\n    transferSpec: {\n        objectConditions: {\n            maxTimeElapsedSinceLastModification: \"600s\",\n            excludePrefixes: [\"requests.gz\"],\n        },\n        transferOptions: {\n            deleteObjectsUniqueInSink: false,\n        },\n        awsS3DataSource: {\n            bucketName: awsS3Bucket,\n            awsAccessKey: {\n                accessKeyId: awsAccessKey,\n                secretAccessKey: awsSecretKey,\n            },\n        },\n        gcsDataSink: {\n            bucketName: s3_backup_bucket.name,\n            path: \"foo/bar/\",\n        },\n    },\n    schedule: {\n        scheduleStartDate: {\n            year: 2018,\n            month: 10,\n            day: 1,\n        },\n        scheduleEndDate: {\n            year: 2019,\n            month: 1,\n            day: 15,\n        },\n        startTimeOfDay: {\n            hours: 23,\n            minutes: 30,\n            seconds: 0,\n            nanos: 0,\n        },\n        repeatInterval: \"604800s\",\n    },\n    notificationConfig: {\n        pubsubTopic: topic.id,\n        eventTypes: [\n            \"TRANSFER_OPERATION_SUCCESS\",\n            \"TRANSFER_OPERATION_FAILED\",\n        ],\n        payloadFormat: \"JSON\",\n    },\n}, {\n    dependsOn: [\n        s3_backup_bucketBucketIAMMember,\n        notificationConfig,\n    ],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.storage.get_transfer_project_service_account(project=project)\ns3_backup_bucket = gcp.storage.Bucket(\"s3-backup-bucket\",\n    name=f\"{aws_s3_bucket}-backup\",\n    storage_class=\"NEARLINE\",\n    project=project,\n    location=\"US\")\ns3_backup_bucket_bucket_iam_member = gcp.storage.BucketIAMMember(\"s3-backup-bucket\",\n    bucket=s3_backup_bucket.name,\n    role=\"roles/storage.admin\",\n    member=f\"serviceAccount:{default.email}\",\n    opts = pulumi.ResourceOptions(depends_on=[s3_backup_bucket]))\ntopic = gcp.pubsub.Topic(\"topic\", name=pubsub_topic_name)\nnotification_config = gcp.pubsub.TopicIAMMember(\"notification_config\",\n    topic=topic.id,\n    role=\"roles/pubsub.publisher\",\n    member=f\"serviceAccount:{default.email}\")\ns3_bucket_nightly_backup = gcp.storage.TransferJob(\"s3-bucket-nightly-backup\",\n    description=\"Nightly backup of S3 bucket\",\n    project=project,\n    transfer_spec={\n        \"object_conditions\": {\n            \"max_time_elapsed_since_last_modification\": \"600s\",\n            \"exclude_prefixes\": [\"requests.gz\"],\n        },\n        \"transfer_options\": {\n            \"delete_objects_unique_in_sink\": False,\n        },\n        \"aws_s3_data_source\": {\n            \"bucket_name\": aws_s3_bucket,\n            \"aws_access_key\": {\n                \"access_key_id\": aws_access_key,\n                \"secret_access_key\": aws_secret_key,\n            },\n        },\n        \"gcs_data_sink\": {\n            \"bucket_name\": s3_backup_bucket.name,\n            \"path\": \"foo/bar/\",\n        },\n    },\n    schedule={\n        \"schedule_start_date\": {\n            \"year\": 2018,\n            \"month\": 10,\n            \"day\": 1,\n        },\n        \"schedule_end_date\": {\n            \"year\": 2019,\n            \"month\": 1,\n            \"day\": 15,\n        },\n        \"start_time_of_day\": {\n            \"hours\": 23,\n            \"minutes\": 30,\n            \"seconds\": 0,\n            \"nanos\": 0,\n        },\n        \"repeat_interval\": \"604800s\",\n    },\n    notification_config={\n        \"pubsub_topic\": topic.id,\n        \"event_types\": [\n            \"TRANSFER_OPERATION_SUCCESS\",\n            \"TRANSFER_OPERATION_FAILED\",\n        ],\n        \"payload_format\": \"JSON\",\n    },\n    opts = pulumi.ResourceOptions(depends_on=[\n            s3_backup_bucket_bucket_iam_member,\n            notification_config,\n        ]))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Storage.GetTransferProjectServiceAccount.Invoke(new()\n    {\n        Project = project,\n    });\n\n    var s3_backup_bucket = new Gcp.Storage.Bucket(\"s3-backup-bucket\", new()\n    {\n        Name = $\"{awsS3Bucket}-backup\",\n        StorageClass = \"NEARLINE\",\n        Project = project,\n        Location = \"US\",\n    });\n\n    var s3_backup_bucketBucketIAMMember = new Gcp.Storage.BucketIAMMember(\"s3-backup-bucket\", new()\n    {\n        Bucket = s3_backup_bucket.Name,\n        Role = \"roles/storage.admin\",\n        Member = @default.Apply(@default =\u003e $\"serviceAccount:{@default.Apply(getTransferProjectServiceAccountResult =\u003e getTransferProjectServiceAccountResult.Email)}\"),\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            s3_backup_bucket,\n        },\n    });\n\n    var topic = new Gcp.PubSub.Topic(\"topic\", new()\n    {\n        Name = pubsubTopicName,\n    });\n\n    var notificationConfig = new Gcp.PubSub.TopicIAMMember(\"notification_config\", new()\n    {\n        Topic = topic.Id,\n        Role = \"roles/pubsub.publisher\",\n        Member = @default.Apply(@default =\u003e $\"serviceAccount:{@default.Apply(getTransferProjectServiceAccountResult =\u003e getTransferProjectServiceAccountResult.Email)}\"),\n    });\n\n    var s3_bucket_nightly_backup = new Gcp.Storage.TransferJob(\"s3-bucket-nightly-backup\", new()\n    {\n        Description = \"Nightly backup of S3 bucket\",\n        Project = project,\n        TransferSpec = new Gcp.Storage.Inputs.TransferJobTransferSpecArgs\n        {\n            ObjectConditions = new Gcp.Storage.Inputs.TransferJobTransferSpecObjectConditionsArgs\n            {\n                MaxTimeElapsedSinceLastModification = \"600s\",\n                ExcludePrefixes = new[]\n                {\n                    \"requests.gz\",\n                },\n            },\n            TransferOptions = new Gcp.Storage.Inputs.TransferJobTransferSpecTransferOptionsArgs\n            {\n                DeleteObjectsUniqueInSink = false,\n            },\n            AwsS3DataSource = new Gcp.Storage.Inputs.TransferJobTransferSpecAwsS3DataSourceArgs\n            {\n                BucketName = awsS3Bucket,\n                AwsAccessKey = new Gcp.Storage.Inputs.TransferJobTransferSpecAwsS3DataSourceAwsAccessKeyArgs\n                {\n                    AccessKeyId = awsAccessKey,\n                    SecretAccessKey = awsSecretKey,\n                },\n            },\n            GcsDataSink = new Gcp.Storage.Inputs.TransferJobTransferSpecGcsDataSinkArgs\n            {\n                BucketName = s3_backup_bucket.Name,\n                Path = \"foo/bar/\",\n            },\n        },\n        Schedule = new Gcp.Storage.Inputs.TransferJobScheduleArgs\n        {\n            ScheduleStartDate = new Gcp.Storage.Inputs.TransferJobScheduleScheduleStartDateArgs\n            {\n                Year = 2018,\n                Month = 10,\n                Day = 1,\n            },\n            ScheduleEndDate = new Gcp.Storage.Inputs.TransferJobScheduleScheduleEndDateArgs\n            {\n                Year = 2019,\n                Month = 1,\n                Day = 15,\n            },\n            StartTimeOfDay = new Gcp.Storage.Inputs.TransferJobScheduleStartTimeOfDayArgs\n            {\n                Hours = 23,\n                Minutes = 30,\n                Seconds = 0,\n                Nanos = 0,\n            },\n            RepeatInterval = \"604800s\",\n        },\n        NotificationConfig = new Gcp.Storage.Inputs.TransferJobNotificationConfigArgs\n        {\n            PubsubTopic = topic.Id,\n            EventTypes = new[]\n            {\n                \"TRANSFER_OPERATION_SUCCESS\",\n                \"TRANSFER_OPERATION_FAILED\",\n            },\n            PayloadFormat = \"JSON\",\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            s3_backup_bucketBucketIAMMember,\n            notificationConfig,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/pubsub\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/storage\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := storage.GetTransferProjectServiceAccount(ctx, \u0026storage.GetTransferProjectServiceAccountArgs{\n\t\t\tProject: pulumi.StringRef(project),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = storage.NewBucket(ctx, \"s3-backup-bucket\", \u0026storage.BucketArgs{\n\t\t\tName:         pulumi.Sprintf(\"%v-backup\", awsS3Bucket),\n\t\t\tStorageClass: pulumi.String(\"NEARLINE\"),\n\t\t\tProject:      pulumi.Any(project),\n\t\t\tLocation:     pulumi.String(\"US\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = storage.NewBucketIAMMember(ctx, \"s3-backup-bucket\", \u0026storage.BucketIAMMemberArgs{\n\t\t\tBucket: s3_backup_bucket.Name,\n\t\t\tRole:   pulumi.String(\"roles/storage.admin\"),\n\t\t\tMember: pulumi.Sprintf(\"serviceAccount:%v\", _default.Email),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\ts3_backup_bucket,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\ttopic, err := pubsub.NewTopic(ctx, \"topic\", \u0026pubsub.TopicArgs{\n\t\t\tName: pulumi.Any(pubsubTopicName),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tnotificationConfig, err := pubsub.NewTopicIAMMember(ctx, \"notification_config\", \u0026pubsub.TopicIAMMemberArgs{\n\t\t\tTopic:  topic.ID(),\n\t\t\tRole:   pulumi.String(\"roles/pubsub.publisher\"),\n\t\t\tMember: pulumi.Sprintf(\"serviceAccount:%v\", _default.Email),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = storage.NewTransferJob(ctx, \"s3-bucket-nightly-backup\", \u0026storage.TransferJobArgs{\n\t\t\tDescription: pulumi.String(\"Nightly backup of S3 bucket\"),\n\t\t\tProject:     pulumi.Any(project),\n\t\t\tTransferSpec: \u0026storage.TransferJobTransferSpecArgs{\n\t\t\t\tObjectConditions: \u0026storage.TransferJobTransferSpecObjectConditionsArgs{\n\t\t\t\t\tMaxTimeElapsedSinceLastModification: pulumi.String(\"600s\"),\n\t\t\t\t\tExcludePrefixes: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"requests.gz\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tTransferOptions: \u0026storage.TransferJobTransferSpecTransferOptionsArgs{\n\t\t\t\t\tDeleteObjectsUniqueInSink: pulumi.Bool(false),\n\t\t\t\t},\n\t\t\t\tAwsS3DataSource: \u0026storage.TransferJobTransferSpecAwsS3DataSourceArgs{\n\t\t\t\t\tBucketName: pulumi.Any(awsS3Bucket),\n\t\t\t\t\tAwsAccessKey: \u0026storage.TransferJobTransferSpecAwsS3DataSourceAwsAccessKeyArgs{\n\t\t\t\t\t\tAccessKeyId:     pulumi.Any(awsAccessKey),\n\t\t\t\t\t\tSecretAccessKey: pulumi.Any(awsSecretKey),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tGcsDataSink: \u0026storage.TransferJobTransferSpecGcsDataSinkArgs{\n\t\t\t\t\tBucketName: s3_backup_bucket.Name,\n\t\t\t\t\tPath:       pulumi.String(\"foo/bar/\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tSchedule: \u0026storage.TransferJobScheduleArgs{\n\t\t\t\tScheduleStartDate: \u0026storage.TransferJobScheduleScheduleStartDateArgs{\n\t\t\t\t\tYear:  pulumi.Int(2018),\n\t\t\t\t\tMonth: pulumi.Int(10),\n\t\t\t\t\tDay:   pulumi.Int(1),\n\t\t\t\t},\n\t\t\t\tScheduleEndDate: \u0026storage.TransferJobScheduleScheduleEndDateArgs{\n\t\t\t\t\tYear:  pulumi.Int(2019),\n\t\t\t\t\tMonth: pulumi.Int(1),\n\t\t\t\t\tDay:   pulumi.Int(15),\n\t\t\t\t},\n\t\t\t\tStartTimeOfDay: \u0026storage.TransferJobScheduleStartTimeOfDayArgs{\n\t\t\t\t\tHours:   pulumi.Int(23),\n\t\t\t\t\tMinutes: pulumi.Int(30),\n\t\t\t\t\tSeconds: pulumi.Int(0),\n\t\t\t\t\tNanos:   pulumi.Int(0),\n\t\t\t\t},\n\t\t\t\tRepeatInterval: pulumi.String(\"604800s\"),\n\t\t\t},\n\t\t\tNotificationConfig: \u0026storage.TransferJobNotificationConfigArgs{\n\t\t\t\tPubsubTopic: topic.ID(),\n\t\t\t\tEventTypes: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"TRANSFER_OPERATION_SUCCESS\"),\n\t\t\t\t\tpulumi.String(\"TRANSFER_OPERATION_FAILED\"),\n\t\t\t\t},\n\t\t\t\tPayloadFormat: pulumi.String(\"JSON\"),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\ts3_backup_bucketBucketIAMMember,\n\t\t\tnotificationConfig,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.storage.StorageFunctions;\nimport com.pulumi.gcp.storage.inputs.GetTransferProjectServiceAccountArgs;\nimport com.pulumi.gcp.storage.Bucket;\nimport com.pulumi.gcp.storage.BucketArgs;\nimport com.pulumi.gcp.storage.BucketIAMMember;\nimport com.pulumi.gcp.storage.BucketIAMMemberArgs;\nimport com.pulumi.gcp.pubsub.Topic;\nimport com.pulumi.gcp.pubsub.TopicArgs;\nimport com.pulumi.gcp.pubsub.TopicIAMMember;\nimport com.pulumi.gcp.pubsub.TopicIAMMemberArgs;\nimport com.pulumi.gcp.storage.TransferJob;\nimport com.pulumi.gcp.storage.TransferJobArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobTransferSpecArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobTransferSpecObjectConditionsArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobTransferSpecTransferOptionsArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobTransferSpecAwsS3DataSourceArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobTransferSpecAwsS3DataSourceAwsAccessKeyArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobTransferSpecGcsDataSinkArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobScheduleArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobScheduleScheduleStartDateArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobScheduleScheduleEndDateArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobScheduleStartTimeOfDayArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobNotificationConfigArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = StorageFunctions.getTransferProjectServiceAccount(GetTransferProjectServiceAccountArgs.builder()\n            .project(project)\n            .build());\n\n        var s3_backup_bucket = new Bucket(\"s3-backup-bucket\", BucketArgs.builder()\n            .name(String.format(\"%s-backup\", awsS3Bucket))\n            .storageClass(\"NEARLINE\")\n            .project(project)\n            .location(\"US\")\n            .build());\n\n        var s3_backup_bucketBucketIAMMember = new BucketIAMMember(\"s3-backup-bucketBucketIAMMember\", BucketIAMMemberArgs.builder()\n            .bucket(s3_backup_bucket.name())\n            .role(\"roles/storage.admin\")\n            .member(String.format(\"serviceAccount:%s\", default_.email()))\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(s3_backup_bucket)\n                .build());\n\n        var topic = new Topic(\"topic\", TopicArgs.builder()\n            .name(pubsubTopicName)\n            .build());\n\n        var notificationConfig = new TopicIAMMember(\"notificationConfig\", TopicIAMMemberArgs.builder()\n            .topic(topic.id())\n            .role(\"roles/pubsub.publisher\")\n            .member(String.format(\"serviceAccount:%s\", default_.email()))\n            .build());\n\n        var s3_bucket_nightly_backup = new TransferJob(\"s3-bucket-nightly-backup\", TransferJobArgs.builder()\n            .description(\"Nightly backup of S3 bucket\")\n            .project(project)\n            .transferSpec(TransferJobTransferSpecArgs.builder()\n                .objectConditions(TransferJobTransferSpecObjectConditionsArgs.builder()\n                    .maxTimeElapsedSinceLastModification(\"600s\")\n                    .excludePrefixes(\"requests.gz\")\n                    .build())\n                .transferOptions(TransferJobTransferSpecTransferOptionsArgs.builder()\n                    .deleteObjectsUniqueInSink(false)\n                    .build())\n                .awsS3DataSource(TransferJobTransferSpecAwsS3DataSourceArgs.builder()\n                    .bucketName(awsS3Bucket)\n                    .awsAccessKey(TransferJobTransferSpecAwsS3DataSourceAwsAccessKeyArgs.builder()\n                        .accessKeyId(awsAccessKey)\n                        .secretAccessKey(awsSecretKey)\n                        .build())\n                    .build())\n                .gcsDataSink(TransferJobTransferSpecGcsDataSinkArgs.builder()\n                    .bucketName(s3_backup_bucket.name())\n                    .path(\"foo/bar/\")\n                    .build())\n                .build())\n            .schedule(TransferJobScheduleArgs.builder()\n                .scheduleStartDate(TransferJobScheduleScheduleStartDateArgs.builder()\n                    .year(2018)\n                    .month(10)\n                    .day(1)\n                    .build())\n                .scheduleEndDate(TransferJobScheduleScheduleEndDateArgs.builder()\n                    .year(2019)\n                    .month(1)\n                    .day(15)\n                    .build())\n                .startTimeOfDay(TransferJobScheduleStartTimeOfDayArgs.builder()\n                    .hours(23)\n                    .minutes(30)\n                    .seconds(0)\n                    .nanos(0)\n                    .build())\n                .repeatInterval(\"604800s\")\n                .build())\n            .notificationConfig(TransferJobNotificationConfigArgs.builder()\n                .pubsubTopic(topic.id())\n                .eventTypes(                \n                    \"TRANSFER_OPERATION_SUCCESS\",\n                    \"TRANSFER_OPERATION_FAILED\")\n                .payloadFormat(\"JSON\")\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(                \n                    s3_backup_bucketBucketIAMMember,\n                    notificationConfig)\n                .build());\n\n    }\n}\n```\n```yaml\nresources:\n  s3-backup-bucket:\n    type: gcp:storage:Bucket\n    properties:\n      name: ${awsS3Bucket}-backup\n      storageClass: NEARLINE\n      project: ${project}\n      location: US\n  s3-backup-bucketBucketIAMMember:\n    type: gcp:storage:BucketIAMMember\n    name: s3-backup-bucket\n    properties:\n      bucket: ${[\"s3-backup-bucket\"].name}\n      role: roles/storage.admin\n      member: serviceAccount:${default.email}\n    options:\n      dependsOn:\n        - ${[\"s3-backup-bucket\"]}\n  topic:\n    type: gcp:pubsub:Topic\n    properties:\n      name: ${pubsubTopicName}\n  notificationConfig:\n    type: gcp:pubsub:TopicIAMMember\n    name: notification_config\n    properties:\n      topic: ${topic.id}\n      role: roles/pubsub.publisher\n      member: serviceAccount:${default.email}\n  s3-bucket-nightly-backup:\n    type: gcp:storage:TransferJob\n    properties:\n      description: Nightly backup of S3 bucket\n      project: ${project}\n      transferSpec:\n        objectConditions:\n          maxTimeElapsedSinceLastModification: 600s\n          excludePrefixes:\n            - requests.gz\n        transferOptions:\n          deleteObjectsUniqueInSink: false\n        awsS3DataSource:\n          bucketName: ${awsS3Bucket}\n          awsAccessKey:\n            accessKeyId: ${awsAccessKey}\n            secretAccessKey: ${awsSecretKey}\n        gcsDataSink:\n          bucketName: ${[\"s3-backup-bucket\"].name}\n          path: foo/bar/\n      schedule:\n        scheduleStartDate:\n          year: 2018\n          month: 10\n          day: 1\n        scheduleEndDate:\n          year: 2019\n          month: 1\n          day: 15\n        startTimeOfDay:\n          hours: 23\n          minutes: 30\n          seconds: 0\n          nanos: 0\n        repeatInterval: 604800s\n      notificationConfig:\n        pubsubTopic: ${topic.id}\n        eventTypes:\n          - TRANSFER_OPERATION_SUCCESS\n          - TRANSFER_OPERATION_FAILED\n        payloadFormat: JSON\n    options:\n      dependsOn:\n        - ${[\"s3-backup-bucketBucketIAMMember\"]}\n        - ${notificationConfig}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:storage:getTransferProjectServiceAccount\n      arguments:\n        project: ${project}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nStorage Transfer Jobs can be imported using the Transfer Job's `project` and `name` (without the `transferJob/` prefix), e.g.\n\n* `{{project_id}}/{{name}}`, where `name` is a numeric value.\n\nWhen using the `pulumi import` command, Storage Transfer Jobs can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:storage/transferJob:TransferJob default {{project_id}}/123456789\n```\n\n",
+            "description": "Creates a new Transfer Job in Google Cloud Storage Transfer.\n\nTo get more information about Google Cloud Storage Transfer, see:\n\n* [Overview](https://cloud.google.com/storage-transfer/docs/overview)\n* [API documentation](https://cloud.google.com/storage-transfer/docs/reference/rest/v1/transferJobs)\n* How-to Guides\n    * [Configuring Access to Data Sources and Sinks](https://cloud.google.com/storage-transfer/docs/configure-access)\n\n## Example Usage\n\nExample creating a nightly Transfer Job from an AWS S3 Bucket to a GCS bucket.\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.storage.getTransferProjectServiceAccount({\n    project: project,\n});\nconst s3_backup_bucket = new gcp.storage.Bucket(\"s3-backup-bucket\", {\n    name: `${awsS3Bucket}-backup`,\n    storageClass: \"NEARLINE\",\n    project: project,\n    location: \"US\",\n});\nconst s3_backup_bucketBucketIAMMember = new gcp.storage.BucketIAMMember(\"s3-backup-bucket\", {\n    bucket: s3_backup_bucket.name,\n    role: \"roles/storage.admin\",\n    member: _default.then(_default =\u003e `serviceAccount:${_default.email}`),\n}, {\n    dependsOn: [s3_backup_bucket],\n});\nconst topic = new gcp.pubsub.Topic(\"topic\", {name: pubsubTopicName});\nconst notificationConfig = new gcp.pubsub.TopicIAMMember(\"notification_config\", {\n    topic: topic.id,\n    role: \"roles/pubsub.publisher\",\n    member: _default.then(_default =\u003e `serviceAccount:${_default.email}`),\n});\nconst s3_bucket_nightly_backup = new gcp.storage.TransferJob(\"s3-bucket-nightly-backup\", {\n    description: \"Nightly backup of S3 bucket\",\n    project: project,\n    transferSpec: {\n        objectConditions: {\n            maxTimeElapsedSinceLastModification: \"600s\",\n            excludePrefixes: [\"requests.gz\"],\n        },\n        transferOptions: {\n            deleteObjectsUniqueInSink: false,\n        },\n        awsS3DataSource: {\n            bucketName: awsS3Bucket,\n            awsAccessKey: {\n                accessKeyId: awsAccessKey,\n                secretAccessKey: awsSecretKey,\n            },\n        },\n        gcsDataSink: {\n            bucketName: s3_backup_bucket.name,\n            path: \"foo/bar/\",\n        },\n    },\n    schedule: {\n        scheduleStartDate: {\n            year: 2018,\n            month: 10,\n            day: 1,\n        },\n        scheduleEndDate: {\n            year: 2019,\n            month: 1,\n            day: 15,\n        },\n        startTimeOfDay: {\n            hours: 23,\n            minutes: 30,\n            seconds: 0,\n            nanos: 0,\n        },\n        repeatInterval: \"604800s\",\n    },\n    notificationConfig: {\n        pubsubTopic: topic.id,\n        eventTypes: [\n            \"TRANSFER_OPERATION_SUCCESS\",\n            \"TRANSFER_OPERATION_FAILED\",\n        ],\n        payloadFormat: \"JSON\",\n    },\n}, {\n    dependsOn: [\n        s3_backup_bucketBucketIAMMember,\n        notificationConfig,\n    ],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.storage.get_transfer_project_service_account(project=project)\ns3_backup_bucket = gcp.storage.Bucket(\"s3-backup-bucket\",\n    name=f\"{aws_s3_bucket}-backup\",\n    storage_class=\"NEARLINE\",\n    project=project,\n    location=\"US\")\ns3_backup_bucket_bucket_iam_member = gcp.storage.BucketIAMMember(\"s3-backup-bucket\",\n    bucket=s3_backup_bucket.name,\n    role=\"roles/storage.admin\",\n    member=f\"serviceAccount:{default.email}\",\n    opts = pulumi.ResourceOptions(depends_on=[s3_backup_bucket]))\ntopic = gcp.pubsub.Topic(\"topic\", name=pubsub_topic_name)\nnotification_config = gcp.pubsub.TopicIAMMember(\"notification_config\",\n    topic=topic.id,\n    role=\"roles/pubsub.publisher\",\n    member=f\"serviceAccount:{default.email}\")\ns3_bucket_nightly_backup = gcp.storage.TransferJob(\"s3-bucket-nightly-backup\",\n    description=\"Nightly backup of S3 bucket\",\n    project=project,\n    transfer_spec={\n        \"object_conditions\": {\n            \"max_time_elapsed_since_last_modification\": \"600s\",\n            \"exclude_prefixes\": [\"requests.gz\"],\n        },\n        \"transfer_options\": {\n            \"delete_objects_unique_in_sink\": False,\n        },\n        \"aws_s3_data_source\": {\n            \"bucket_name\": aws_s3_bucket,\n            \"aws_access_key\": {\n                \"access_key_id\": aws_access_key,\n                \"secret_access_key\": aws_secret_key,\n            },\n        },\n        \"gcs_data_sink\": {\n            \"bucket_name\": s3_backup_bucket.name,\n            \"path\": \"foo/bar/\",\n        },\n    },\n    schedule={\n        \"schedule_start_date\": {\n            \"year\": 2018,\n            \"month\": 10,\n            \"day\": 1,\n        },\n        \"schedule_end_date\": {\n            \"year\": 2019,\n            \"month\": 1,\n            \"day\": 15,\n        },\n        \"start_time_of_day\": {\n            \"hours\": 23,\n            \"minutes\": 30,\n            \"seconds\": 0,\n            \"nanos\": 0,\n        },\n        \"repeat_interval\": \"604800s\",\n    },\n    notification_config={\n        \"pubsub_topic\": topic.id,\n        \"event_types\": [\n            \"TRANSFER_OPERATION_SUCCESS\",\n            \"TRANSFER_OPERATION_FAILED\",\n        ],\n        \"payload_format\": \"JSON\",\n    },\n    opts = pulumi.ResourceOptions(depends_on=[\n            s3_backup_bucket_bucket_iam_member,\n            notification_config,\n        ]))\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Storage.GetTransferProjectServiceAccount.Invoke(new()\n    {\n        Project = project,\n    });\n\n    var s3_backup_bucket = new Gcp.Storage.Bucket(\"s3-backup-bucket\", new()\n    {\n        Name = $\"{awsS3Bucket}-backup\",\n        StorageClass = \"NEARLINE\",\n        Project = project,\n        Location = \"US\",\n    });\n\n    var s3_backup_bucketBucketIAMMember = new Gcp.Storage.BucketIAMMember(\"s3-backup-bucket\", new()\n    {\n        Bucket = s3_backup_bucket.Name,\n        Role = \"roles/storage.admin\",\n        Member = @default.Apply(@default =\u003e $\"serviceAccount:{@default.Apply(getTransferProjectServiceAccountResult =\u003e getTransferProjectServiceAccountResult.Email)}\"),\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            s3_backup_bucket,\n        },\n    });\n\n    var topic = new Gcp.PubSub.Topic(\"topic\", new()\n    {\n        Name = pubsubTopicName,\n    });\n\n    var notificationConfig = new Gcp.PubSub.TopicIAMMember(\"notification_config\", new()\n    {\n        Topic = topic.Id,\n        Role = \"roles/pubsub.publisher\",\n        Member = @default.Apply(@default =\u003e $\"serviceAccount:{@default.Apply(getTransferProjectServiceAccountResult =\u003e getTransferProjectServiceAccountResult.Email)}\"),\n    });\n\n    var s3_bucket_nightly_backup = new Gcp.Storage.TransferJob(\"s3-bucket-nightly-backup\", new()\n    {\n        Description = \"Nightly backup of S3 bucket\",\n        Project = project,\n        TransferSpec = new Gcp.Storage.Inputs.TransferJobTransferSpecArgs\n        {\n            ObjectConditions = new Gcp.Storage.Inputs.TransferJobTransferSpecObjectConditionsArgs\n            {\n                MaxTimeElapsedSinceLastModification = \"600s\",\n                ExcludePrefixes = new[]\n                {\n                    \"requests.gz\",\n                },\n            },\n            TransferOptions = new Gcp.Storage.Inputs.TransferJobTransferSpecTransferOptionsArgs\n            {\n                DeleteObjectsUniqueInSink = false,\n            },\n            AwsS3DataSource = new Gcp.Storage.Inputs.TransferJobTransferSpecAwsS3DataSourceArgs\n            {\n                BucketName = awsS3Bucket,\n                AwsAccessKey = new Gcp.Storage.Inputs.TransferJobTransferSpecAwsS3DataSourceAwsAccessKeyArgs\n                {\n                    AccessKeyId = awsAccessKey,\n                    SecretAccessKey = awsSecretKey,\n                },\n            },\n            GcsDataSink = new Gcp.Storage.Inputs.TransferJobTransferSpecGcsDataSinkArgs\n            {\n                BucketName = s3_backup_bucket.Name,\n                Path = \"foo/bar/\",\n            },\n        },\n        Schedule = new Gcp.Storage.Inputs.TransferJobScheduleArgs\n        {\n            ScheduleStartDate = new Gcp.Storage.Inputs.TransferJobScheduleScheduleStartDateArgs\n            {\n                Year = 2018,\n                Month = 10,\n                Day = 1,\n            },\n            ScheduleEndDate = new Gcp.Storage.Inputs.TransferJobScheduleScheduleEndDateArgs\n            {\n                Year = 2019,\n                Month = 1,\n                Day = 15,\n            },\n            StartTimeOfDay = new Gcp.Storage.Inputs.TransferJobScheduleStartTimeOfDayArgs\n            {\n                Hours = 23,\n                Minutes = 30,\n                Seconds = 0,\n                Nanos = 0,\n            },\n            RepeatInterval = \"604800s\",\n        },\n        NotificationConfig = new Gcp.Storage.Inputs.TransferJobNotificationConfigArgs\n        {\n            PubsubTopic = topic.Id,\n            EventTypes = new[]\n            {\n                \"TRANSFER_OPERATION_SUCCESS\",\n                \"TRANSFER_OPERATION_FAILED\",\n            },\n            PayloadFormat = \"JSON\",\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            s3_backup_bucketBucketIAMMember,\n            notificationConfig,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/pubsub\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/storage\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := storage.GetTransferProjectServiceAccount(ctx, \u0026storage.GetTransferProjectServiceAccountArgs{\n\t\t\tProject: pulumi.StringRef(project),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = storage.NewBucket(ctx, \"s3-backup-bucket\", \u0026storage.BucketArgs{\n\t\t\tName:         pulumi.Sprintf(\"%v-backup\", awsS3Bucket),\n\t\t\tStorageClass: pulumi.String(\"NEARLINE\"),\n\t\t\tProject:      pulumi.Any(project),\n\t\t\tLocation:     pulumi.String(\"US\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = storage.NewBucketIAMMember(ctx, \"s3-backup-bucket\", \u0026storage.BucketIAMMemberArgs{\n\t\t\tBucket: s3_backup_bucket.Name,\n\t\t\tRole:   pulumi.String(\"roles/storage.admin\"),\n\t\t\tMember: pulumi.Sprintf(\"serviceAccount:%v\", _default.Email),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\ts3_backup_bucket,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\ttopic, err := pubsub.NewTopic(ctx, \"topic\", \u0026pubsub.TopicArgs{\n\t\t\tName: pulumi.Any(pubsubTopicName),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tnotificationConfig, err := pubsub.NewTopicIAMMember(ctx, \"notification_config\", \u0026pubsub.TopicIAMMemberArgs{\n\t\t\tTopic:  topic.ID(),\n\t\t\tRole:   pulumi.String(\"roles/pubsub.publisher\"),\n\t\t\tMember: pulumi.Sprintf(\"serviceAccount:%v\", _default.Email),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = storage.NewTransferJob(ctx, \"s3-bucket-nightly-backup\", \u0026storage.TransferJobArgs{\n\t\t\tDescription: pulumi.String(\"Nightly backup of S3 bucket\"),\n\t\t\tProject:     pulumi.Any(project),\n\t\t\tTransferSpec: \u0026storage.TransferJobTransferSpecArgs{\n\t\t\t\tObjectConditions: \u0026storage.TransferJobTransferSpecObjectConditionsArgs{\n\t\t\t\t\tMaxTimeElapsedSinceLastModification: pulumi.String(\"600s\"),\n\t\t\t\t\tExcludePrefixes: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"requests.gz\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tTransferOptions: \u0026storage.TransferJobTransferSpecTransferOptionsArgs{\n\t\t\t\t\tDeleteObjectsUniqueInSink: pulumi.Bool(false),\n\t\t\t\t},\n\t\t\t\tAwsS3DataSource: \u0026storage.TransferJobTransferSpecAwsS3DataSourceArgs{\n\t\t\t\t\tBucketName: pulumi.Any(awsS3Bucket),\n\t\t\t\t\tAwsAccessKey: \u0026storage.TransferJobTransferSpecAwsS3DataSourceAwsAccessKeyArgs{\n\t\t\t\t\t\tAccessKeyId:     pulumi.Any(awsAccessKey),\n\t\t\t\t\t\tSecretAccessKey: pulumi.Any(awsSecretKey),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tGcsDataSink: \u0026storage.TransferJobTransferSpecGcsDataSinkArgs{\n\t\t\t\t\tBucketName: s3_backup_bucket.Name,\n\t\t\t\t\tPath:       pulumi.String(\"foo/bar/\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tSchedule: \u0026storage.TransferJobScheduleArgs{\n\t\t\t\tScheduleStartDate: \u0026storage.TransferJobScheduleScheduleStartDateArgs{\n\t\t\t\t\tYear:  pulumi.Int(2018),\n\t\t\t\t\tMonth: pulumi.Int(10),\n\t\t\t\t\tDay:   pulumi.Int(1),\n\t\t\t\t},\n\t\t\t\tScheduleEndDate: \u0026storage.TransferJobScheduleScheduleEndDateArgs{\n\t\t\t\t\tYear:  pulumi.Int(2019),\n\t\t\t\t\tMonth: pulumi.Int(1),\n\t\t\t\t\tDay:   pulumi.Int(15),\n\t\t\t\t},\n\t\t\t\tStartTimeOfDay: \u0026storage.TransferJobScheduleStartTimeOfDayArgs{\n\t\t\t\t\tHours:   pulumi.Int(23),\n\t\t\t\t\tMinutes: pulumi.Int(30),\n\t\t\t\t\tSeconds: pulumi.Int(0),\n\t\t\t\t\tNanos:   pulumi.Int(0),\n\t\t\t\t},\n\t\t\t\tRepeatInterval: pulumi.String(\"604800s\"),\n\t\t\t},\n\t\t\tNotificationConfig: \u0026storage.TransferJobNotificationConfigArgs{\n\t\t\t\tPubsubTopic: topic.ID(),\n\t\t\t\tEventTypes: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"TRANSFER_OPERATION_SUCCESS\"),\n\t\t\t\t\tpulumi.String(\"TRANSFER_OPERATION_FAILED\"),\n\t\t\t\t},\n\t\t\t\tPayloadFormat: pulumi.String(\"JSON\"),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\ts3_backup_bucketBucketIAMMember,\n\t\t\tnotificationConfig,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.storage.StorageFunctions;\nimport com.pulumi.gcp.storage.inputs.GetTransferProjectServiceAccountArgs;\nimport com.pulumi.gcp.storage.Bucket;\nimport com.pulumi.gcp.storage.BucketArgs;\nimport com.pulumi.gcp.storage.BucketIAMMember;\nimport com.pulumi.gcp.storage.BucketIAMMemberArgs;\nimport com.pulumi.gcp.pubsub.Topic;\nimport com.pulumi.gcp.pubsub.TopicArgs;\nimport com.pulumi.gcp.pubsub.TopicIAMMember;\nimport com.pulumi.gcp.pubsub.TopicIAMMemberArgs;\nimport com.pulumi.gcp.storage.TransferJob;\nimport com.pulumi.gcp.storage.TransferJobArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobTransferSpecArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobTransferSpecObjectConditionsArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobTransferSpecTransferOptionsArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobTransferSpecAwsS3DataSourceArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobTransferSpecAwsS3DataSourceAwsAccessKeyArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobTransferSpecGcsDataSinkArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobScheduleArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobScheduleScheduleStartDateArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobScheduleScheduleEndDateArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobScheduleStartTimeOfDayArgs;\nimport com.pulumi.gcp.storage.inputs.TransferJobNotificationConfigArgs;\nimport com.pulumi.resources.CustomResourceOptions;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = StorageFunctions.getTransferProjectServiceAccount(GetTransferProjectServiceAccountArgs.builder()\n            .project(project)\n            .build());\n\n        var s3_backup_bucket = new Bucket(\"s3-backup-bucket\", BucketArgs.builder()\n            .name(String.format(\"%s-backup\", awsS3Bucket))\n            .storageClass(\"NEARLINE\")\n            .project(project)\n            .location(\"US\")\n            .build());\n\n        var s3_backup_bucketBucketIAMMember = new BucketIAMMember(\"s3-backup-bucketBucketIAMMember\", BucketIAMMemberArgs.builder()\n            .bucket(s3_backup_bucket.name())\n            .role(\"roles/storage.admin\")\n            .member(String.format(\"serviceAccount:%s\", default_.email()))\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(s3_backup_bucket)\n                .build());\n\n        var topic = new Topic(\"topic\", TopicArgs.builder()\n            .name(pubsubTopicName)\n            .build());\n\n        var notificationConfig = new TopicIAMMember(\"notificationConfig\", TopicIAMMemberArgs.builder()\n            .topic(topic.id())\n            .role(\"roles/pubsub.publisher\")\n            .member(String.format(\"serviceAccount:%s\", default_.email()))\n            .build());\n\n        var s3_bucket_nightly_backup = new TransferJob(\"s3-bucket-nightly-backup\", TransferJobArgs.builder()\n            .description(\"Nightly backup of S3 bucket\")\n            .project(project)\n            .transferSpec(TransferJobTransferSpecArgs.builder()\n                .objectConditions(TransferJobTransferSpecObjectConditionsArgs.builder()\n                    .maxTimeElapsedSinceLastModification(\"600s\")\n                    .excludePrefixes(\"requests.gz\")\n                    .build())\n                .transferOptions(TransferJobTransferSpecTransferOptionsArgs.builder()\n                    .deleteObjectsUniqueInSink(false)\n                    .build())\n                .awsS3DataSource(TransferJobTransferSpecAwsS3DataSourceArgs.builder()\n                    .bucketName(awsS3Bucket)\n                    .awsAccessKey(TransferJobTransferSpecAwsS3DataSourceAwsAccessKeyArgs.builder()\n                        .accessKeyId(awsAccessKey)\n                        .secretAccessKey(awsSecretKey)\n                        .build())\n                    .build())\n                .gcsDataSink(TransferJobTransferSpecGcsDataSinkArgs.builder()\n                    .bucketName(s3_backup_bucket.name())\n                    .path(\"foo/bar/\")\n                    .build())\n                .build())\n            .schedule(TransferJobScheduleArgs.builder()\n                .scheduleStartDate(TransferJobScheduleScheduleStartDateArgs.builder()\n                    .year(2018)\n                    .month(10)\n                    .day(1)\n                    .build())\n                .scheduleEndDate(TransferJobScheduleScheduleEndDateArgs.builder()\n                    .year(2019)\n                    .month(1)\n                    .day(15)\n                    .build())\n                .startTimeOfDay(TransferJobScheduleStartTimeOfDayArgs.builder()\n                    .hours(23)\n                    .minutes(30)\n                    .seconds(0)\n                    .nanos(0)\n                    .build())\n                .repeatInterval(\"604800s\")\n                .build())\n            .notificationConfig(TransferJobNotificationConfigArgs.builder()\n                .pubsubTopic(topic.id())\n                .eventTypes(                \n                    \"TRANSFER_OPERATION_SUCCESS\",\n                    \"TRANSFER_OPERATION_FAILED\")\n                .payloadFormat(\"JSON\")\n                .build())\n            .build(), CustomResourceOptions.builder()\n                .dependsOn(                \n                    s3_backup_bucketBucketIAMMember,\n                    notificationConfig)\n                .build());\n\n    }\n}\n```\n```yaml\nresources:\n  s3-backup-bucket:\n    type: gcp:storage:Bucket\n    properties:\n      name: ${awsS3Bucket}-backup\n      storageClass: NEARLINE\n      project: ${project}\n      location: US\n  s3-backup-bucketBucketIAMMember:\n    type: gcp:storage:BucketIAMMember\n    name: s3-backup-bucket\n    properties:\n      bucket: ${[\"s3-backup-bucket\"].name}\n      role: roles/storage.admin\n      member: serviceAccount:${default.email}\n    options:\n      dependsOn:\n        - ${[\"s3-backup-bucket\"]}\n  topic:\n    type: gcp:pubsub:Topic\n    properties:\n      name: ${pubsubTopicName}\n  notificationConfig:\n    type: gcp:pubsub:TopicIAMMember\n    name: notification_config\n    properties:\n      topic: ${topic.id}\n      role: roles/pubsub.publisher\n      member: serviceAccount:${default.email}\n  s3-bucket-nightly-backup:\n    type: gcp:storage:TransferJob\n    properties:\n      description: Nightly backup of S3 bucket\n      project: ${project}\n      transferSpec:\n        objectConditions:\n          maxTimeElapsedSinceLastModification: 600s\n          excludePrefixes:\n            - requests.gz\n        transferOptions:\n          deleteObjectsUniqueInSink: false\n        awsS3DataSource:\n          bucketName: ${awsS3Bucket}\n          awsAccessKey:\n            accessKeyId: ${awsAccessKey}\n            secretAccessKey: ${awsSecretKey}\n        gcsDataSink:\n          bucketName: ${[\"s3-backup-bucket\"].name}\n          path: foo/bar/\n      schedule:\n        scheduleStartDate:\n          year: 2018\n          month: 10\n          day: 1\n        scheduleEndDate:\n          year: 2019\n          month: 1\n          day: 15\n        startTimeOfDay:\n          hours: 23\n          minutes: 30\n          seconds: 0\n          nanos: 0\n        repeatInterval: 604800s\n      notificationConfig:\n        pubsubTopic: ${topic.id}\n        eventTypes:\n          - TRANSFER_OPERATION_SUCCESS\n          - TRANSFER_OPERATION_FAILED\n        payloadFormat: JSON\n    options:\n      dependsOn:\n        - ${[\"s3-backup-bucketBucketIAMMember\"]}\n        - ${notificationConfig}\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:storage:getTransferProjectServiceAccount\n      arguments:\n        project: ${project}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n## Import\n\nStorage Transfer Jobs can be imported using the Transfer Job's `project` and `name` (without the `transferJob/` prefix), e.g.\n\n* `{{project_id}}/{{name}}`, where `name` is a numeric value.\n\nWhen using the `pulumi import` command, Storage Transfer Jobs can be imported using one of the formats above. For example:\n\n```sh\n$ pulumi import gcp:storage/transferJob:TransferJob default {{project_id}}/123456789\n```\n\n",
             "properties": {
                 "creationTime": {
                     "type": "string",
@@ -287028,7 +287028,7 @@
             }
         },
         "gcp:accesscontextmanager/getAccessPolicy:getAccessPolicy": {
-            "description": "Get information about an Access Context Manager AccessPolicy.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst policy-org = gcp.accesscontextmanager.getAccessPolicy({\n    parent: \"organizations/1234567\",\n});\nconst policy-scoped = gcp.accesscontextmanager.getAccessPolicy({\n    parent: \"organizations/1234567\",\n    scopes: [\"projects/1234567\"],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\npolicy_org = gcp.accesscontextmanager.get_access_policy(parent=\"organizations/1234567\")\npolicy_scoped = gcp.accesscontextmanager.get_access_policy(parent=\"organizations/1234567\",\n    scopes=[\"projects/1234567\"])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var policy_org = Gcp.AccessContextManager.GetAccessPolicy.Invoke(new()\n    {\n        Parent = \"organizations/1234567\",\n    });\n\n    var policy_scoped = Gcp.AccessContextManager.GetAccessPolicy.Invoke(new()\n    {\n        Parent = \"organizations/1234567\",\n        Scopes = new[]\n        {\n            \"projects/1234567\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := accesscontextmanager.LookupAccessPolicy(ctx, \u0026accesscontextmanager.LookupAccessPolicyArgs{\n\t\t\tParent: \"organizations/1234567\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = accesscontextmanager.LookupAccessPolicy(ctx, \u0026accesscontextmanager.LookupAccessPolicyArgs{\n\t\t\tParent: \"organizations/1234567\",\n\t\t\tScopes: []string{\n\t\t\t\t\"projects/1234567\",\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.accesscontextmanager.AccesscontextmanagerFunctions;\nimport com.pulumi.gcp.accesscontextmanager.inputs.GetAccessPolicyArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var policy-org = AccesscontextmanagerFunctions.getAccessPolicy(GetAccessPolicyArgs.builder()\n            .parent(\"organizations/1234567\")\n            .build());\n\n        final var policy-scoped = AccesscontextmanagerFunctions.getAccessPolicy(GetAccessPolicyArgs.builder()\n            .parent(\"organizations/1234567\")\n            .scopes(\"projects/1234567\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  policy-org:\n    fn::invoke:\n      function: gcp:accesscontextmanager:getAccessPolicy\n      arguments:\n        parent: organizations/1234567\n  policy-scoped:\n    fn::invoke:\n      function: gcp:accesscontextmanager:getAccessPolicy\n      arguments:\n        parent: organizations/1234567\n        scopes:\n          - projects/1234567\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get information about an Access Context Manager AccessPolicy.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst policy_org = gcp.accesscontextmanager.getAccessPolicy({\n    parent: \"organizations/1234567\",\n});\nconst policy_scoped = gcp.accesscontextmanager.getAccessPolicy({\n    parent: \"organizations/1234567\",\n    scopes: [\"projects/1234567\"],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\npolicy_org = gcp.accesscontextmanager.get_access_policy(parent=\"organizations/1234567\")\npolicy_scoped = gcp.accesscontextmanager.get_access_policy(parent=\"organizations/1234567\",\n    scopes=[\"projects/1234567\"])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var policy_org = Gcp.AccessContextManager.GetAccessPolicy.Invoke(new()\n    {\n        Parent = \"organizations/1234567\",\n    });\n\n    var policy_scoped = Gcp.AccessContextManager.GetAccessPolicy.Invoke(new()\n    {\n        Parent = \"organizations/1234567\",\n        Scopes = new[]\n        {\n            \"projects/1234567\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/accesscontextmanager\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := accesscontextmanager.LookupAccessPolicy(ctx, \u0026accesscontextmanager.LookupAccessPolicyArgs{\n\t\t\tParent: \"organizations/1234567\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = accesscontextmanager.LookupAccessPolicy(ctx, \u0026accesscontextmanager.LookupAccessPolicyArgs{\n\t\t\tParent: \"organizations/1234567\",\n\t\t\tScopes: []string{\n\t\t\t\t\"projects/1234567\",\n\t\t\t},\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.accesscontextmanager.AccesscontextmanagerFunctions;\nimport com.pulumi.gcp.accesscontextmanager.inputs.GetAccessPolicyArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var policy-org = AccesscontextmanagerFunctions.getAccessPolicy(GetAccessPolicyArgs.builder()\n            .parent(\"organizations/1234567\")\n            .build());\n\n        final var policy-scoped = AccesscontextmanagerFunctions.getAccessPolicy(GetAccessPolicyArgs.builder()\n            .parent(\"organizations/1234567\")\n            .scopes(\"projects/1234567\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  policy-org:\n    fn::invoke:\n      function: gcp:accesscontextmanager:getAccessPolicy\n      arguments:\n        parent: organizations/1234567\n  policy-scoped:\n    fn::invoke:\n      function: gcp:accesscontextmanager:getAccessPolicy\n      arguments:\n        parent: organizations/1234567\n        scopes:\n          - projects/1234567\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getAccessPolicy.\n",
                 "properties": {
@@ -287439,7 +287439,7 @@
             }
         },
         "gcp:appengine/getDefaultServiceAccount:getDefaultServiceAccount": {
-            "description": "Use this data source to retrieve the default App Engine service account for the specified project.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.appengine.getDefaultServiceAccount({});\nexport const defaultAccount = _default.then(_default =\u003e _default.email);\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.appengine.get_default_service_account()\npulumi.export(\"defaultAccount\", default.email)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.AppEngine.GetDefaultServiceAccount.Invoke();\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"defaultAccount\"] = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Email)),\n    };\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/appengine\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := appengine.GetDefaultServiceAccount(ctx, \u0026appengine.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"defaultAccount\", _default.Email)\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.appengine.AppengineFunctions;\nimport com.pulumi.gcp.appengine.inputs.GetDefaultServiceAccountArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = AppengineFunctions.getDefaultServiceAccount();\n\n        ctx.export(\"defaultAccount\", default_.email());\n    }\n}\n```\n```yaml\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:appengine:getDefaultServiceAccount\n      arguments: {}\noutputs:\n  defaultAccount: ${default.email}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Use this data source to retrieve the default App Engine service account for the specified project.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.appengine.getDefaultServiceAccount({});\nexport const defaultAccount = _default.then(_default =\u003e _default.email);\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.appengine.get_default_service_account()\npulumi.export(\"defaultAccount\", default.email)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.AppEngine.GetDefaultServiceAccount.Invoke();\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"defaultAccount\"] = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Email)),\n    };\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/appengine\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := appengine.GetDefaultServiceAccount(ctx, \u0026appengine.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"defaultAccount\", _default.Email)\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.appengine.AppengineFunctions;\nimport com.pulumi.gcp.appengine.inputs.GetDefaultServiceAccountArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = AppengineFunctions.getDefaultServiceAccount();\n\n        ctx.export(\"defaultAccount\", default_.email());\n    }\n}\n```\n```yaml\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:appengine:getDefaultServiceAccount\n      arguments: {}\noutputs:\n  defaultAccount: ${default.email}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getDefaultServiceAccount.\n",
                 "properties": {
@@ -287584,7 +287584,7 @@
             }
         },
         "gcp:apphub/getDiscoveredService:getDiscoveredService": {
-            "description": "Get information about a discovered service from its uri.\n\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-service = gcp.apphub.getDiscoveredService({\n    location: \"my-location\",\n    serviceUri: \"my-service-uri\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_service = gcp.apphub.get_discovered_service(location=\"my-location\",\n    service_uri=\"my-service-uri\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_service = Gcp.Apphub.GetDiscoveredService.Invoke(new()\n    {\n        Location = \"my-location\",\n        ServiceUri = \"my-service-uri\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/apphub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := apphub.GetDiscoveredService(ctx, \u0026apphub.GetDiscoveredServiceArgs{\n\t\t\tLocation:   \"my-location\",\n\t\t\tServiceUri: \"my-service-uri\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.apphub.ApphubFunctions;\nimport com.pulumi.gcp.apphub.inputs.GetDiscoveredServiceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-service = ApphubFunctions.getDiscoveredService(GetDiscoveredServiceArgs.builder()\n            .location(\"my-location\")\n            .serviceUri(\"my-service-uri\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-service:\n    fn::invoke:\n      function: gcp:apphub:getDiscoveredService\n      arguments:\n        location: my-location\n        serviceUri: my-service-uri\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get information about a discovered service from its uri.\n\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_service = gcp.apphub.getDiscoveredService({\n    location: \"my-location\",\n    serviceUri: \"my-service-uri\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_service = gcp.apphub.get_discovered_service(location=\"my-location\",\n    service_uri=\"my-service-uri\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_service = Gcp.Apphub.GetDiscoveredService.Invoke(new()\n    {\n        Location = \"my-location\",\n        ServiceUri = \"my-service-uri\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/apphub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := apphub.GetDiscoveredService(ctx, \u0026apphub.GetDiscoveredServiceArgs{\n\t\t\tLocation:   \"my-location\",\n\t\t\tServiceUri: \"my-service-uri\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.apphub.ApphubFunctions;\nimport com.pulumi.gcp.apphub.inputs.GetDiscoveredServiceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-service = ApphubFunctions.getDiscoveredService(GetDiscoveredServiceArgs.builder()\n            .location(\"my-location\")\n            .serviceUri(\"my-service-uri\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-service:\n    fn::invoke:\n      function: gcp:apphub:getDiscoveredService\n      arguments:\n        location: my-location\n        serviceUri: my-service-uri\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getDiscoveredService.\n",
                 "properties": {
@@ -287655,7 +287655,7 @@
             }
         },
         "gcp:apphub/getDiscoveredWorkload:getDiscoveredWorkload": {
-            "description": "Get information about a discovered workload from its uri.\n\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-workload = gcp.apphub.getDiscoveredWorkload({\n    location: \"us-central1\",\n    workloadUri: \"my-workload-uri\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_workload = gcp.apphub.get_discovered_workload(location=\"us-central1\",\n    workload_uri=\"my-workload-uri\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_workload = Gcp.Apphub.GetDiscoveredWorkload.Invoke(new()\n    {\n        Location = \"us-central1\",\n        WorkloadUri = \"my-workload-uri\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/apphub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := apphub.GetDiscoveredWorkload(ctx, \u0026apphub.GetDiscoveredWorkloadArgs{\n\t\t\tLocation:    \"us-central1\",\n\t\t\tWorkloadUri: \"my-workload-uri\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.apphub.ApphubFunctions;\nimport com.pulumi.gcp.apphub.inputs.GetDiscoveredWorkloadArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-workload = ApphubFunctions.getDiscoveredWorkload(GetDiscoveredWorkloadArgs.builder()\n            .location(\"us-central1\")\n            .workloadUri(\"my-workload-uri\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-workload:\n    fn::invoke:\n      function: gcp:apphub:getDiscoveredWorkload\n      arguments:\n        location: us-central1\n        workloadUri: my-workload-uri\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get information about a discovered workload from its uri.\n\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_workload = gcp.apphub.getDiscoveredWorkload({\n    location: \"us-central1\",\n    workloadUri: \"my-workload-uri\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_workload = gcp.apphub.get_discovered_workload(location=\"us-central1\",\n    workload_uri=\"my-workload-uri\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_workload = Gcp.Apphub.GetDiscoveredWorkload.Invoke(new()\n    {\n        Location = \"us-central1\",\n        WorkloadUri = \"my-workload-uri\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/apphub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := apphub.GetDiscoveredWorkload(ctx, \u0026apphub.GetDiscoveredWorkloadArgs{\n\t\t\tLocation:    \"us-central1\",\n\t\t\tWorkloadUri: \"my-workload-uri\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.apphub.ApphubFunctions;\nimport com.pulumi.gcp.apphub.inputs.GetDiscoveredWorkloadArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-workload = ApphubFunctions.getDiscoveredWorkload(GetDiscoveredWorkloadArgs.builder()\n            .location(\"us-central1\")\n            .workloadUri(\"my-workload-uri\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-workload:\n    fn::invoke:\n      function: gcp:apphub:getDiscoveredWorkload\n      arguments:\n        location: us-central1\n        workloadUri: my-workload-uri\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getDiscoveredWorkload.\n",
                 "properties": {
@@ -287865,7 +287865,7 @@
             }
         },
         "gcp:artifactregistry/getRepository:getRepository": {
-            "description": "Get information about a Google Artifact Registry Repository. For more information see\nthe [official documentation](https://cloud.google.com/artifact-registry/docs/)\nand [API](https://cloud.google.com/artifact-registry/docs/apis).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-repo = gcp.artifactregistry.getRepository({\n    location: \"us-central1\",\n    repositoryId: \"my-repository\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_repo = gcp.artifactregistry.get_repository(location=\"us-central1\",\n    repository_id=\"my-repository\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_repo = Gcp.ArtifactRegistry.GetRepository.Invoke(new()\n    {\n        Location = \"us-central1\",\n        RepositoryId = \"my-repository\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/artifactregistry\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := artifactregistry.LookupRepository(ctx, \u0026artifactregistry.LookupRepositoryArgs{\n\t\t\tLocation:     \"us-central1\",\n\t\t\tRepositoryId: \"my-repository\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.artifactregistry.ArtifactregistryFunctions;\nimport com.pulumi.gcp.artifactregistry.inputs.GetRepositoryArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-repo = ArtifactregistryFunctions.getRepository(GetRepositoryArgs.builder()\n            .location(\"us-central1\")\n            .repositoryId(\"my-repository\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-repo:\n    fn::invoke:\n      function: gcp:artifactregistry:getRepository\n      arguments:\n        location: us-central1\n        repositoryId: my-repository\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get information about a Google Artifact Registry Repository. For more information see\nthe [official documentation](https://cloud.google.com/artifact-registry/docs/)\nand [API](https://cloud.google.com/artifact-registry/docs/apis).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_repo = gcp.artifactregistry.getRepository({\n    location: \"us-central1\",\n    repositoryId: \"my-repository\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_repo = gcp.artifactregistry.get_repository(location=\"us-central1\",\n    repository_id=\"my-repository\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_repo = Gcp.ArtifactRegistry.GetRepository.Invoke(new()\n    {\n        Location = \"us-central1\",\n        RepositoryId = \"my-repository\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/artifactregistry\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := artifactregistry.LookupRepository(ctx, \u0026artifactregistry.LookupRepositoryArgs{\n\t\t\tLocation:     \"us-central1\",\n\t\t\tRepositoryId: \"my-repository\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.artifactregistry.ArtifactregistryFunctions;\nimport com.pulumi.gcp.artifactregistry.inputs.GetRepositoryArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-repo = ArtifactregistryFunctions.getRepository(GetRepositoryArgs.builder()\n            .location(\"us-central1\")\n            .repositoryId(\"my-repository\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-repo:\n    fn::invoke:\n      function: gcp:artifactregistry:getRepository\n      arguments:\n        location: us-central1\n        repositoryId: my-repository\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getRepository.\n",
                 "properties": {
@@ -288224,7 +288224,7 @@
             }
         },
         "gcp:backupdisasterrecovery/getBackupPlanAssociation:getBackupPlanAssociation": {
-            "description": "## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-backupplan-association = gcp.backupdisasterrecovery.getBackupPlanAssociation({\n    location: \"us-central1\",\n    backupPlanAssociationId: \"bpa-id\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_backupplan_association = gcp.backupdisasterrecovery.get_backup_plan_association(location=\"us-central1\",\n    backup_plan_association_id=\"bpa-id\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_backupplan_association = Gcp.BackupDisasterRecovery.GetBackupPlanAssociation.Invoke(new()\n    {\n        Location = \"us-central1\",\n        BackupPlanAssociationId = \"bpa-id\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/backupdisasterrecovery\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := backupdisasterrecovery.LookupBackupPlanAssociation(ctx, \u0026backupdisasterrecovery.LookupBackupPlanAssociationArgs{\n\t\t\tLocation:                \"us-central1\",\n\t\t\tBackupPlanAssociationId: \"bpa-id\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.backupdisasterrecovery.BackupdisasterrecoveryFunctions;\nimport com.pulumi.gcp.backupdisasterrecovery.inputs.GetBackupPlanAssociationArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-backupplan-association = BackupdisasterrecoveryFunctions.getBackupPlanAssociation(GetBackupPlanAssociationArgs.builder()\n            .location(\"us-central1\")\n            .backupPlanAssociationId(\"bpa-id\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-backupplan-association:\n    fn::invoke:\n      function: gcp:backupdisasterrecovery:getBackupPlanAssociation\n      arguments:\n        location: us-central1\n        backupPlanAssociationId: bpa-id\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_backupplan_association = gcp.backupdisasterrecovery.getBackupPlanAssociation({\n    location: \"us-central1\",\n    backupPlanAssociationId: \"bpa-id\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_backupplan_association = gcp.backupdisasterrecovery.get_backup_plan_association(location=\"us-central1\",\n    backup_plan_association_id=\"bpa-id\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_backupplan_association = Gcp.BackupDisasterRecovery.GetBackupPlanAssociation.Invoke(new()\n    {\n        Location = \"us-central1\",\n        BackupPlanAssociationId = \"bpa-id\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/backupdisasterrecovery\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := backupdisasterrecovery.LookupBackupPlanAssociation(ctx, \u0026backupdisasterrecovery.LookupBackupPlanAssociationArgs{\n\t\t\tLocation:                \"us-central1\",\n\t\t\tBackupPlanAssociationId: \"bpa-id\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.backupdisasterrecovery.BackupdisasterrecoveryFunctions;\nimport com.pulumi.gcp.backupdisasterrecovery.inputs.GetBackupPlanAssociationArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-backupplan-association = BackupdisasterrecoveryFunctions.getBackupPlanAssociation(GetBackupPlanAssociationArgs.builder()\n            .location(\"us-central1\")\n            .backupPlanAssociationId(\"bpa-id\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-backupplan-association:\n    fn::invoke:\n      function: gcp:backupdisasterrecovery:getBackupPlanAssociation\n      arguments:\n        location: us-central1\n        backupPlanAssociationId: bpa-id\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getBackupPlanAssociation.\n",
                 "properties": {
@@ -288311,7 +288311,7 @@
             }
         },
         "gcp:backupdisasterrecovery/getBackupVault:getBackupVault": {
-            "description": "A Backup and DRBackupVault.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-backup-vault = gcp.backupdisasterrecovery.getBackupVault({\n    location: \"us-central1\",\n    backupVaultId: \"bv-1\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_backup_vault = gcp.backupdisasterrecovery.get_backup_vault(location=\"us-central1\",\n    backup_vault_id=\"bv-1\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_backup_vault = Gcp.BackupDisasterRecovery.GetBackupVault.Invoke(new()\n    {\n        Location = \"us-central1\",\n        BackupVaultId = \"bv-1\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/backupdisasterrecovery\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := backupdisasterrecovery.LookupBackupVault(ctx, \u0026backupdisasterrecovery.LookupBackupVaultArgs{\n\t\t\tLocation:      \"us-central1\",\n\t\t\tBackupVaultId: \"bv-1\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.backupdisasterrecovery.BackupdisasterrecoveryFunctions;\nimport com.pulumi.gcp.backupdisasterrecovery.inputs.GetBackupVaultArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-backup-vault = BackupdisasterrecoveryFunctions.getBackupVault(GetBackupVaultArgs.builder()\n            .location(\"us-central1\")\n            .backupVaultId(\"bv-1\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-backup-vault:\n    fn::invoke:\n      function: gcp:backupdisasterrecovery:getBackupVault\n      arguments:\n        location: us-central1\n        backupVaultId: bv-1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "A Backup and DRBackupVault.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_backup_vault = gcp.backupdisasterrecovery.getBackupVault({\n    location: \"us-central1\",\n    backupVaultId: \"bv-1\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_backup_vault = gcp.backupdisasterrecovery.get_backup_vault(location=\"us-central1\",\n    backup_vault_id=\"bv-1\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_backup_vault = Gcp.BackupDisasterRecovery.GetBackupVault.Invoke(new()\n    {\n        Location = \"us-central1\",\n        BackupVaultId = \"bv-1\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/backupdisasterrecovery\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := backupdisasterrecovery.LookupBackupVault(ctx, \u0026backupdisasterrecovery.LookupBackupVaultArgs{\n\t\t\tLocation:      \"us-central1\",\n\t\t\tBackupVaultId: \"bv-1\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.backupdisasterrecovery.BackupdisasterrecoveryFunctions;\nimport com.pulumi.gcp.backupdisasterrecovery.inputs.GetBackupVaultArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-backup-vault = BackupdisasterrecoveryFunctions.getBackupVault(GetBackupVaultArgs.builder()\n            .location(\"us-central1\")\n            .backupVaultId(\"bv-1\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-backup-vault:\n    fn::invoke:\n      function: gcp:backupdisasterrecovery:getBackupVault\n      arguments:\n        location: us-central1\n        backupVaultId: bv-1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getBackupVault.\n",
                 "properties": {
@@ -288593,7 +288593,7 @@
             }
         },
         "gcp:backupdisasterrecovery/getManagementServer:getManagementServer": {
-            "description": "## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-backup-dr-management-server = gcp.backupdisasterrecovery.getManagementServer({\n    location: \"us-central1\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_backup_dr_management_server = gcp.backupdisasterrecovery.get_management_server(location=\"us-central1\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_backup_dr_management_server = Gcp.BackupDisasterRecovery.GetManagementServer.Invoke(new()\n    {\n        Location = \"us-central1\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/backupdisasterrecovery\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := backupdisasterrecovery.LookupManagementServer(ctx, \u0026backupdisasterrecovery.LookupManagementServerArgs{\n\t\t\tLocation: \"us-central1\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.backupdisasterrecovery.BackupdisasterrecoveryFunctions;\nimport com.pulumi.gcp.backupdisasterrecovery.inputs.GetManagementServerArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-backup-dr-management-server = BackupdisasterrecoveryFunctions.getManagementServer(GetManagementServerArgs.builder()\n            .location(\"us-central1\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-backup-dr-management-server:\n    fn::invoke:\n      function: gcp:backupdisasterrecovery:getManagementServer\n      arguments:\n        location: us-central1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_backup_dr_management_server = gcp.backupdisasterrecovery.getManagementServer({\n    location: \"us-central1\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_backup_dr_management_server = gcp.backupdisasterrecovery.get_management_server(location=\"us-central1\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_backup_dr_management_server = Gcp.BackupDisasterRecovery.GetManagementServer.Invoke(new()\n    {\n        Location = \"us-central1\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/backupdisasterrecovery\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := backupdisasterrecovery.LookupManagementServer(ctx, \u0026backupdisasterrecovery.LookupManagementServerArgs{\n\t\t\tLocation: \"us-central1\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.backupdisasterrecovery.BackupdisasterrecoveryFunctions;\nimport com.pulumi.gcp.backupdisasterrecovery.inputs.GetManagementServerArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-backup-dr-management-server = BackupdisasterrecoveryFunctions.getManagementServer(GetManagementServerArgs.builder()\n            .location(\"us-central1\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-backup-dr-management-server:\n    fn::invoke:\n      function: gcp:backupdisasterrecovery:getManagementServer\n      arguments:\n        location: us-central1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getManagementServer.\n",
                 "properties": {
@@ -288655,7 +288655,7 @@
             }
         },
         "gcp:beyondcorp/getAppConnection:getAppConnection": {
-            "description": "Get information about a Google BeyondCorp App Connection.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-beyondcorp-app-connection = gcp.beyondcorp.getAppConnection({\n    name: \"my-beyondcorp-app-connection\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_beyondcorp_app_connection = gcp.beyondcorp.get_app_connection(name=\"my-beyondcorp-app-connection\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_beyondcorp_app_connection = Gcp.Beyondcorp.GetAppConnection.Invoke(new()\n    {\n        Name = \"my-beyondcorp-app-connection\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/beyondcorp\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := beyondcorp.LookupAppConnection(ctx, \u0026beyondcorp.LookupAppConnectionArgs{\n\t\t\tName: \"my-beyondcorp-app-connection\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.beyondcorp.BeyondcorpFunctions;\nimport com.pulumi.gcp.beyondcorp.inputs.GetAppConnectionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-beyondcorp-app-connection = BeyondcorpFunctions.getAppConnection(GetAppConnectionArgs.builder()\n            .name(\"my-beyondcorp-app-connection\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-beyondcorp-app-connection:\n    fn::invoke:\n      function: gcp:beyondcorp:getAppConnection\n      arguments:\n        name: my-beyondcorp-app-connection\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get information about a Google BeyondCorp App Connection.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_beyondcorp_app_connection = gcp.beyondcorp.getAppConnection({\n    name: \"my-beyondcorp-app-connection\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_beyondcorp_app_connection = gcp.beyondcorp.get_app_connection(name=\"my-beyondcorp-app-connection\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_beyondcorp_app_connection = Gcp.Beyondcorp.GetAppConnection.Invoke(new()\n    {\n        Name = \"my-beyondcorp-app-connection\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/beyondcorp\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := beyondcorp.LookupAppConnection(ctx, \u0026beyondcorp.LookupAppConnectionArgs{\n\t\t\tName: \"my-beyondcorp-app-connection\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.beyondcorp.BeyondcorpFunctions;\nimport com.pulumi.gcp.beyondcorp.inputs.GetAppConnectionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-beyondcorp-app-connection = BeyondcorpFunctions.getAppConnection(GetAppConnectionArgs.builder()\n            .name(\"my-beyondcorp-app-connection\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-beyondcorp-app-connection:\n    fn::invoke:\n      function: gcp:beyondcorp:getAppConnection\n      arguments:\n        name: my-beyondcorp-app-connection\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getAppConnection.\n",
                 "properties": {
@@ -288754,7 +288754,7 @@
             }
         },
         "gcp:beyondcorp/getAppConnector:getAppConnector": {
-            "description": "Get information about a Google BeyondCorp App Connector.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-beyondcorp-app-connector = gcp.beyondcorp.getAppConnector({\n    name: \"my-beyondcorp-app-connector\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_beyondcorp_app_connector = gcp.beyondcorp.get_app_connector(name=\"my-beyondcorp-app-connector\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_beyondcorp_app_connector = Gcp.Beyondcorp.GetAppConnector.Invoke(new()\n    {\n        Name = \"my-beyondcorp-app-connector\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/beyondcorp\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := beyondcorp.LookupAppConnector(ctx, \u0026beyondcorp.LookupAppConnectorArgs{\n\t\t\tName: \"my-beyondcorp-app-connector\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.beyondcorp.BeyondcorpFunctions;\nimport com.pulumi.gcp.beyondcorp.inputs.GetAppConnectorArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-beyondcorp-app-connector = BeyondcorpFunctions.getAppConnector(GetAppConnectorArgs.builder()\n            .name(\"my-beyondcorp-app-connector\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-beyondcorp-app-connector:\n    fn::invoke:\n      function: gcp:beyondcorp:getAppConnector\n      arguments:\n        name: my-beyondcorp-app-connector\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get information about a Google BeyondCorp App Connector.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_beyondcorp_app_connector = gcp.beyondcorp.getAppConnector({\n    name: \"my-beyondcorp-app-connector\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_beyondcorp_app_connector = gcp.beyondcorp.get_app_connector(name=\"my-beyondcorp-app-connector\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_beyondcorp_app_connector = Gcp.Beyondcorp.GetAppConnector.Invoke(new()\n    {\n        Name = \"my-beyondcorp-app-connector\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/beyondcorp\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := beyondcorp.LookupAppConnector(ctx, \u0026beyondcorp.LookupAppConnectorArgs{\n\t\t\tName: \"my-beyondcorp-app-connector\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.beyondcorp.BeyondcorpFunctions;\nimport com.pulumi.gcp.beyondcorp.inputs.GetAppConnectorArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-beyondcorp-app-connector = BeyondcorpFunctions.getAppConnector(GetAppConnectorArgs.builder()\n            .name(\"my-beyondcorp-app-connector\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-beyondcorp-app-connector:\n    fn::invoke:\n      function: gcp:beyondcorp:getAppConnector\n      arguments:\n        name: my-beyondcorp-app-connector\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getAppConnector.\n",
                 "properties": {
@@ -288839,7 +288839,7 @@
             }
         },
         "gcp:beyondcorp/getAppGateway:getAppGateway": {
-            "description": "Get information about a Google BeyondCorp App Gateway.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-beyondcorp-app-gateway = gcp.beyondcorp.getAppGateway({\n    name: \"my-beyondcorp-app-gateway\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_beyondcorp_app_gateway = gcp.beyondcorp.get_app_gateway(name=\"my-beyondcorp-app-gateway\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_beyondcorp_app_gateway = Gcp.Beyondcorp.GetAppGateway.Invoke(new()\n    {\n        Name = \"my-beyondcorp-app-gateway\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/beyondcorp\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := beyondcorp.LookupAppGateway(ctx, \u0026beyondcorp.LookupAppGatewayArgs{\n\t\t\tName: \"my-beyondcorp-app-gateway\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.beyondcorp.BeyondcorpFunctions;\nimport com.pulumi.gcp.beyondcorp.inputs.GetAppGatewayArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-beyondcorp-app-gateway = BeyondcorpFunctions.getAppGateway(GetAppGatewayArgs.builder()\n            .name(\"my-beyondcorp-app-gateway\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-beyondcorp-app-gateway:\n    fn::invoke:\n      function: gcp:beyondcorp:getAppGateway\n      arguments:\n        name: my-beyondcorp-app-gateway\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get information about a Google BeyondCorp App Gateway.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_beyondcorp_app_gateway = gcp.beyondcorp.getAppGateway({\n    name: \"my-beyondcorp-app-gateway\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_beyondcorp_app_gateway = gcp.beyondcorp.get_app_gateway(name=\"my-beyondcorp-app-gateway\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_beyondcorp_app_gateway = Gcp.Beyondcorp.GetAppGateway.Invoke(new()\n    {\n        Name = \"my-beyondcorp-app-gateway\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/beyondcorp\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := beyondcorp.LookupAppGateway(ctx, \u0026beyondcorp.LookupAppGatewayArgs{\n\t\t\tName: \"my-beyondcorp-app-gateway\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.beyondcorp.BeyondcorpFunctions;\nimport com.pulumi.gcp.beyondcorp.inputs.GetAppGatewayArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-beyondcorp-app-gateway = BeyondcorpFunctions.getAppGateway(GetAppGatewayArgs.builder()\n            .name(\"my-beyondcorp-app-gateway\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-beyondcorp-app-gateway:\n    fn::invoke:\n      function: gcp:beyondcorp:getAppGateway\n      arguments:\n        name: my-beyondcorp-app-gateway\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getAppGateway.\n",
                 "properties": {
@@ -289760,7 +289760,7 @@
             }
         },
         "gcp:certificateauthority/getAuthority:getAuthority": {
-            "description": "Get info about a Google CAS Certificate Authority.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.certificateauthority.getAuthority({\n    location: \"us-west1\",\n    pool: \"pool-name\",\n    certificateAuthorityId: \"ca-id\",\n});\nexport const csr = _default.then(_default =\u003e _default.pemCsr);\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.certificateauthority.get_authority(location=\"us-west1\",\n    pool=\"pool-name\",\n    certificate_authority_id=\"ca-id\")\npulumi.export(\"csr\", default.pem_csr)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.CertificateAuthority.GetAuthority.Invoke(new()\n    {\n        Location = \"us-west1\",\n        Pool = \"pool-name\",\n        CertificateAuthorityId = \"ca-id\",\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"csr\"] = @default.Apply(@default =\u003e @default.Apply(getAuthorityResult =\u003e getAuthorityResult.PemCsr)),\n    };\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/certificateauthority\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := certificateauthority.LookupAuthority(ctx, \u0026certificateauthority.LookupAuthorityArgs{\n\t\t\tLocation:               pulumi.StringRef(\"us-west1\"),\n\t\t\tPool:                   pulumi.StringRef(\"pool-name\"),\n\t\t\tCertificateAuthorityId: pulumi.StringRef(\"ca-id\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"csr\", _default.PemCsr)\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.certificateauthority.CertificateauthorityFunctions;\nimport com.pulumi.gcp.certificateauthority.inputs.GetAuthorityArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = CertificateauthorityFunctions.getAuthority(GetAuthorityArgs.builder()\n            .location(\"us-west1\")\n            .pool(\"pool-name\")\n            .certificateAuthorityId(\"ca-id\")\n            .build());\n\n        ctx.export(\"csr\", default_.pemCsr());\n    }\n}\n```\n```yaml\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:certificateauthority:getAuthority\n      arguments:\n        location: us-west1\n        pool: pool-name\n        certificateAuthorityId: ca-id\noutputs:\n  csr: ${default.pemCsr}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get info about a Google CAS Certificate Authority.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.certificateauthority.getAuthority({\n    location: \"us-west1\",\n    pool: \"pool-name\",\n    certificateAuthorityId: \"ca-id\",\n});\nexport const csr = _default.then(_default =\u003e _default.pemCsr);\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.certificateauthority.get_authority(location=\"us-west1\",\n    pool=\"pool-name\",\n    certificate_authority_id=\"ca-id\")\npulumi.export(\"csr\", default.pem_csr)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.CertificateAuthority.GetAuthority.Invoke(new()\n    {\n        Location = \"us-west1\",\n        Pool = \"pool-name\",\n        CertificateAuthorityId = \"ca-id\",\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"csr\"] = @default.Apply(@default =\u003e @default.Apply(getAuthorityResult =\u003e getAuthorityResult.PemCsr)),\n    };\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/certificateauthority\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := certificateauthority.LookupAuthority(ctx, \u0026certificateauthority.LookupAuthorityArgs{\n\t\t\tLocation:               pulumi.StringRef(\"us-west1\"),\n\t\t\tPool:                   pulumi.StringRef(\"pool-name\"),\n\t\t\tCertificateAuthorityId: pulumi.StringRef(\"ca-id\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"csr\", _default.PemCsr)\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.certificateauthority.CertificateauthorityFunctions;\nimport com.pulumi.gcp.certificateauthority.inputs.GetAuthorityArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = CertificateauthorityFunctions.getAuthority(GetAuthorityArgs.builder()\n            .location(\"us-west1\")\n            .pool(\"pool-name\")\n            .certificateAuthorityId(\"ca-id\")\n            .build());\n\n        ctx.export(\"csr\", default_.pemCsr());\n    }\n}\n```\n```yaml\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:certificateauthority:getAuthority\n      arguments:\n        location: us-west1\n        pool: pool-name\n        certificateAuthorityId: ca-id\noutputs:\n  csr: ${default.pemCsr}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getAuthority.\n",
                 "properties": {
@@ -290045,7 +290045,7 @@
             }
         },
         "gcp:certificatemanager/getCertificateMap:getCertificateMap": {
-            "description": "Get info about a Google Certificate Manager Certificate Map resource.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.certificatemanager.getCertificateMap({\n    name: \"cert-map\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.certificatemanager.get_certificate_map(name=\"cert-map\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.CertificateManager.GetCertificateMap.Invoke(new()\n    {\n        Name = \"cert-map\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/certificatemanager\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := certificatemanager.GetCertificateMap(ctx, \u0026certificatemanager.GetCertificateMapArgs{\n\t\t\tName: \"cert-map\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.certificatemanager.CertificatemanagerFunctions;\nimport com.pulumi.gcp.certificatemanager.inputs.GetCertificateMapArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = CertificatemanagerFunctions.getCertificateMap(GetCertificateMapArgs.builder()\n            .name(\"cert-map\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:certificatemanager:getCertificateMap\n      arguments:\n        name: cert-map\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get info about a Google Certificate Manager Certificate Map resource.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.certificatemanager.getCertificateMap({\n    name: \"cert-map\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.certificatemanager.get_certificate_map(name=\"cert-map\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.CertificateManager.GetCertificateMap.Invoke(new()\n    {\n        Name = \"cert-map\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/certificatemanager\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := certificatemanager.GetCertificateMap(ctx, \u0026certificatemanager.GetCertificateMapArgs{\n\t\t\tName: \"cert-map\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.certificatemanager.CertificatemanagerFunctions;\nimport com.pulumi.gcp.certificatemanager.inputs.GetCertificateMapArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = CertificatemanagerFunctions.getCertificateMap(GetCertificateMapArgs.builder()\n            .name(\"cert-map\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:certificatemanager:getCertificateMap\n      arguments:\n        name: cert-map\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getCertificateMap.\n",
                 "properties": {
@@ -290127,7 +290127,7 @@
             }
         },
         "gcp:certificatemanager/getCertificates:getCertificates": {
-            "description": "List all certificates within Google Certificate Manager for a given project, region or filter.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.certificatemanager.getCertificates({});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.certificatemanager.get_certificates()\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.CertificateManager.GetCertificates.Invoke();\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/certificatemanager\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := certificatemanager.GetCertificates(ctx, \u0026certificatemanager.GetCertificatesArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.certificatemanager.CertificatemanagerFunctions;\nimport com.pulumi.gcp.certificatemanager.inputs.GetCertificatesArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = CertificatemanagerFunctions.getCertificates();\n\n    }\n}\n```\n```yaml\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:certificatemanager:getCertificates\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### With A Filter\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.certificatemanager.getCertificates({\n    filter: \"name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.certificatemanager.get_certificates(filter=\"name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.CertificateManager.GetCertificates.Invoke(new()\n    {\n        Filter = \"name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/certificatemanager\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := certificatemanager.GetCertificates(ctx, \u0026certificatemanager.GetCertificatesArgs{\n\t\t\tFilter: pulumi.StringRef(\"name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.certificatemanager.CertificatemanagerFunctions;\nimport com.pulumi.gcp.certificatemanager.inputs.GetCertificatesArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = CertificatemanagerFunctions.getCertificates(GetCertificatesArgs.builder()\n            .filter(\"name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:certificatemanager:getCertificates\n      arguments:\n        filter: name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "List all certificates within Google Certificate Manager for a given project, region or filter.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.certificatemanager.getCertificates({});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.certificatemanager.get_certificates()\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.CertificateManager.GetCertificates.Invoke();\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/certificatemanager\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := certificatemanager.GetCertificates(ctx, \u0026certificatemanager.GetCertificatesArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.certificatemanager.CertificatemanagerFunctions;\nimport com.pulumi.gcp.certificatemanager.inputs.GetCertificatesArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = CertificatemanagerFunctions.getCertificates();\n\n    }\n}\n```\n```yaml\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:certificatemanager:getCertificates\n      arguments: {}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### With A Filter\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.certificatemanager.getCertificates({\n    filter: \"name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.certificatemanager.get_certificates(filter=\"name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.CertificateManager.GetCertificates.Invoke(new()\n    {\n        Filter = \"name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/certificatemanager\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := certificatemanager.GetCertificates(ctx, \u0026certificatemanager.GetCertificatesArgs{\n\t\t\tFilter: pulumi.StringRef(\"name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.certificatemanager.CertificatemanagerFunctions;\nimport com.pulumi.gcp.certificatemanager.inputs.GetCertificatesArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = CertificatemanagerFunctions.getCertificates(GetCertificatesArgs.builder()\n            .filter(\"name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:certificatemanager:getCertificates\n      arguments:\n        filter: name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getCertificates.\n",
                 "properties": {
@@ -290717,7 +290717,7 @@
             }
         },
         "gcp:cloudfunctions/getFunction:getFunction": {
-            "description": "Get information about a Google Cloud Function. For more information see\nthe [official documentation](https://cloud.google.com/functions/docs/)\nand [API](https://cloud.google.com/functions/docs/apis).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-function = gcp.cloudfunctions.getFunction({\n    name: \"function\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_function = gcp.cloudfunctions.get_function(name=\"function\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_function = Gcp.CloudFunctions.GetFunction.Invoke(new()\n    {\n        Name = \"function\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudfunctions\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudfunctions.LookupFunction(ctx, \u0026cloudfunctions.LookupFunctionArgs{\n\t\t\tName: \"function\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.cloudfunctions.CloudfunctionsFunctions;\nimport com.pulumi.gcp.cloudfunctions.inputs.GetFunctionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-function = CloudfunctionsFunctions.getFunction(GetFunctionArgs.builder()\n            .name(\"function\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-function:\n    fn::invoke:\n      function: gcp:cloudfunctions:getFunction\n      arguments:\n        name: function\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get information about a Google Cloud Function. For more information see\nthe [official documentation](https://cloud.google.com/functions/docs/)\nand [API](https://cloud.google.com/functions/docs/apis).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_function = gcp.cloudfunctions.getFunction({\n    name: \"function\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_function = gcp.cloudfunctions.get_function(name=\"function\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_function = Gcp.CloudFunctions.GetFunction.Invoke(new()\n    {\n        Name = \"function\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudfunctions\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudfunctions.LookupFunction(ctx, \u0026cloudfunctions.LookupFunctionArgs{\n\t\t\tName: \"function\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.cloudfunctions.CloudfunctionsFunctions;\nimport com.pulumi.gcp.cloudfunctions.inputs.GetFunctionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-function = CloudfunctionsFunctions.getFunction(GetFunctionArgs.builder()\n            .name(\"function\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-function:\n    fn::invoke:\n      function: gcp:cloudfunctions:getFunction\n      arguments:\n        name: function\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getFunction.\n",
                 "properties": {
@@ -291001,7 +291001,7 @@
             }
         },
         "gcp:cloudfunctionsv2/getFunction:getFunction": {
-            "description": "Get information about a Google Cloud Function (2nd gen). For more information see:\n\n* [API documentation](https://cloud.google.com/functions/docs/reference/rest/v2beta/projects.locations.functions).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-function = gcp.cloudfunctionsv2.getFunction({\n    name: \"function\",\n    location: \"us-central1\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_function = gcp.cloudfunctionsv2.get_function(name=\"function\",\n    location=\"us-central1\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_function = Gcp.CloudFunctionsV2.GetFunction.Invoke(new()\n    {\n        Name = \"function\",\n        Location = \"us-central1\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudfunctionsv2\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudfunctionsv2.LookupFunction(ctx, \u0026cloudfunctionsv2.LookupFunctionArgs{\n\t\t\tName:     \"function\",\n\t\t\tLocation: \"us-central1\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.cloudfunctionsv2.Cloudfunctionsv2Functions;\nimport com.pulumi.gcp.cloudfunctionsv2.inputs.GetFunctionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-function = Cloudfunctionsv2Functions.getFunction(GetFunctionArgs.builder()\n            .name(\"function\")\n            .location(\"us-central1\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-function:\n    fn::invoke:\n      function: gcp:cloudfunctionsv2:getFunction\n      arguments:\n        name: function\n        location: us-central1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get information about a Google Cloud Function (2nd gen). For more information see:\n\n* [API documentation](https://cloud.google.com/functions/docs/reference/rest/v2beta/projects.locations.functions).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_function = gcp.cloudfunctionsv2.getFunction({\n    name: \"function\",\n    location: \"us-central1\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_function = gcp.cloudfunctionsv2.get_function(name=\"function\",\n    location=\"us-central1\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_function = Gcp.CloudFunctionsV2.GetFunction.Invoke(new()\n    {\n        Name = \"function\",\n        Location = \"us-central1\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudfunctionsv2\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudfunctionsv2.LookupFunction(ctx, \u0026cloudfunctionsv2.LookupFunctionArgs{\n\t\t\tName:     \"function\",\n\t\t\tLocation: \"us-central1\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.cloudfunctionsv2.Cloudfunctionsv2Functions;\nimport com.pulumi.gcp.cloudfunctionsv2.inputs.GetFunctionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-function = Cloudfunctionsv2Functions.getFunction(GetFunctionArgs.builder()\n            .name(\"function\")\n            .location(\"us-central1\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-function:\n    fn::invoke:\n      function: gcp:cloudfunctionsv2:getFunction\n      arguments:\n        name: function\n        location: us-central1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getFunction.\n",
                 "properties": {
@@ -291559,7 +291559,7 @@
             }
         },
         "gcp:cloudrun/getService:getService": {
-            "description": "Get information about a Google Cloud Run Service. For more information see\nthe [official documentation](https://cloud.google.com/run/docs/)\nand [API](https://cloud.google.com/run/docs/apis).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst run-service = gcp.cloudrun.getService({\n    name: \"my-service\",\n    location: \"us-central1\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nrun_service = gcp.cloudrun.get_service(name=\"my-service\",\n    location=\"us-central1\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var run_service = Gcp.CloudRun.GetService.Invoke(new()\n    {\n        Name = \"my-service\",\n        Location = \"us-central1\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudrun\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudrun.LookupService(ctx, \u0026cloudrun.LookupServiceArgs{\n\t\t\tName:     \"my-service\",\n\t\t\tLocation: \"us-central1\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.cloudrun.CloudrunFunctions;\nimport com.pulumi.gcp.cloudrun.inputs.GetServiceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var run-service = CloudrunFunctions.getService(GetServiceArgs.builder()\n            .name(\"my-service\")\n            .location(\"us-central1\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  run-service:\n    fn::invoke:\n      function: gcp:cloudrun:getService\n      arguments:\n        name: my-service\n        location: us-central1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get information about a Google Cloud Run Service. For more information see\nthe [official documentation](https://cloud.google.com/run/docs/)\nand [API](https://cloud.google.com/run/docs/apis).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst run_service = gcp.cloudrun.getService({\n    name: \"my-service\",\n    location: \"us-central1\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nrun_service = gcp.cloudrun.get_service(name=\"my-service\",\n    location=\"us-central1\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var run_service = Gcp.CloudRun.GetService.Invoke(new()\n    {\n        Name = \"my-service\",\n        Location = \"us-central1\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/cloudrun\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudrun.LookupService(ctx, \u0026cloudrun.LookupServiceArgs{\n\t\t\tName:     \"my-service\",\n\t\t\tLocation: \"us-central1\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.cloudrun.CloudrunFunctions;\nimport com.pulumi.gcp.cloudrun.inputs.GetServiceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var run-service = CloudrunFunctions.getService(GetServiceArgs.builder()\n            .name(\"my-service\")\n            .location(\"us-central1\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  run-service:\n    fn::invoke:\n      function: gcp:cloudrun:getService\n      arguments:\n        name: my-service\n        location: us-central1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getService.\n",
                 "properties": {
@@ -292717,7 +292717,7 @@
             }
         },
         "gcp:compute/getBackendBucket:getBackendBucket": {
-            "description": "Get information about a BackendBucket.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-backend-bucket = gcp.compute.getBackendBucket({\n    name: \"my-backend\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_backend_bucket = gcp.compute.get_backend_bucket(name=\"my-backend\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_backend_bucket = Gcp.Compute.GetBackendBucket.Invoke(new()\n    {\n        Name = \"my-backend\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.LookupBackendBucket(ctx, \u0026compute.LookupBackendBucketArgs{\n\t\t\tName: \"my-backend\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetBackendBucketArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-backend-bucket = ComputeFunctions.getBackendBucket(GetBackendBucketArgs.builder()\n            .name(\"my-backend\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-backend-bucket:\n    fn::invoke:\n      function: gcp:compute:getBackendBucket\n      arguments:\n        name: my-backend\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get information about a BackendBucket.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_backend_bucket = gcp.compute.getBackendBucket({\n    name: \"my-backend\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_backend_bucket = gcp.compute.get_backend_bucket(name=\"my-backend\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_backend_bucket = Gcp.Compute.GetBackendBucket.Invoke(new()\n    {\n        Name = \"my-backend\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.LookupBackendBucket(ctx, \u0026compute.LookupBackendBucketArgs{\n\t\t\tName: \"my-backend\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetBackendBucketArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-backend-bucket = ComputeFunctions.getBackendBucket(GetBackendBucketArgs.builder()\n            .name(\"my-backend\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-backend-bucket:\n    fn::invoke:\n      function: gcp:compute:getBackendBucket\n      arguments:\n        name: my-backend\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getBackendBucket.\n",
                 "properties": {
@@ -293194,7 +293194,7 @@
             }
         },
         "gcp:compute/getDefaultServiceAccount:getDefaultServiceAccount": {
-            "description": "Use this data source to retrieve default service account for this project\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.compute.getDefaultServiceAccount({});\nexport const defaultAccount = _default.then(_default =\u003e _default.email);\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_default_service_account()\npulumi.export(\"defaultAccount\", default.email)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetDefaultServiceAccount.Invoke();\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"defaultAccount\"] = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Email)),\n    };\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.GetDefaultServiceAccount(ctx, \u0026compute.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"defaultAccount\", _default.Email)\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDefaultServiceAccountArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getDefaultServiceAccount();\n\n        ctx.export(\"defaultAccount\", default_.email());\n    }\n}\n```\n```yaml\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getDefaultServiceAccount\n      arguments: {}\noutputs:\n  defaultAccount: ${default.email}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Use this data source to retrieve default service account for this project\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.compute.getDefaultServiceAccount({});\nexport const defaultAccount = _default.then(_default =\u003e _default.email);\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.compute.get_default_service_account()\npulumi.export(\"defaultAccount\", default.email)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Compute.GetDefaultServiceAccount.Invoke();\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"defaultAccount\"] = @default.Apply(@default =\u003e @default.Apply(getDefaultServiceAccountResult =\u003e getDefaultServiceAccountResult.Email)),\n    };\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := compute.GetDefaultServiceAccount(ctx, \u0026compute.GetDefaultServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"defaultAccount\", _default.Email)\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDefaultServiceAccountArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = ComputeFunctions.getDefaultServiceAccount();\n\n        ctx.export(\"defaultAccount\", default_.email());\n    }\n}\n```\n```yaml\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:compute:getDefaultServiceAccount\n      arguments: {}\noutputs:\n  defaultAccount: ${default.email}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getDefaultServiceAccount.\n",
                 "properties": {
@@ -293249,7 +293249,7 @@
             }
         },
         "gcp:compute/getDisk:getDisk": {
-            "description": "Get information about a Google Compute Persistent disks.\n\n[the official documentation](https://cloud.google.com/compute/docs/disks) and its [API](https://cloud.google.com/compute/docs/reference/latest/disks).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst persistent-boot-disk = gcp.compute.getDisk({\n    name: \"persistent-boot-disk\",\n    project: \"example\",\n});\nconst _default = new gcp.compute.Instance(\"default\", {bootDisk: {\n    source: persistent_boot_disk.then(persistent_boot_disk =\u003e persistent_boot_disk.selfLink),\n    autoDelete: false,\n}});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\npersistent_boot_disk = gcp.compute.get_disk(name=\"persistent-boot-disk\",\n    project=\"example\")\ndefault = gcp.compute.Instance(\"default\", boot_disk={\n    \"source\": persistent_boot_disk.self_link,\n    \"auto_delete\": False,\n})\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var persistent_boot_disk = Gcp.Compute.GetDisk.Invoke(new()\n    {\n        Name = \"persistent-boot-disk\",\n        Project = \"example\",\n    });\n\n    var @default = new Gcp.Compute.Instance(\"default\", new()\n    {\n        BootDisk = new Gcp.Compute.Inputs.InstanceBootDiskArgs\n        {\n            Source = persistent_boot_disk.Apply(persistent_boot_disk =\u003e persistent_boot_disk.Apply(getDiskResult =\u003e getDiskResult.SelfLink)),\n            AutoDelete = false,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tpersistent_boot_disk, err := compute.LookupDisk(ctx, \u0026compute.LookupDiskArgs{\n\t\t\tName:    \"persistent-boot-disk\",\n\t\t\tProject: pulumi.StringRef(\"example\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewInstance(ctx, \"default\", \u0026compute.InstanceArgs{\n\t\t\tBootDisk: \u0026compute.InstanceBootDiskArgs{\n\t\t\t\tSource:     pulumi.String(persistent_boot_disk.SelfLink),\n\t\t\t\tAutoDelete: pulumi.Bool(false),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDiskArgs;\nimport com.pulumi.gcp.compute.Instance;\nimport com.pulumi.gcp.compute.InstanceArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceBootDiskArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var persistent-boot-disk = ComputeFunctions.getDisk(GetDiskArgs.builder()\n            .name(\"persistent-boot-disk\")\n            .project(\"example\")\n            .build());\n\n        var default_ = new Instance(\"default\", InstanceArgs.builder()\n            .bootDisk(InstanceBootDiskArgs.builder()\n                .source(persistent_boot_disk.selfLink())\n                .autoDelete(false)\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  default:\n    type: gcp:compute:Instance\n    properties:\n      bootDisk:\n        source: ${[\"persistent-boot-disk\"].selfLink}\n        autoDelete: false\nvariables:\n  persistent-boot-disk:\n    fn::invoke:\n      function: gcp:compute:getDisk\n      arguments:\n        name: persistent-boot-disk\n        project: example\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get information about a Google Compute Persistent disks.\n\n[the official documentation](https://cloud.google.com/compute/docs/disks) and its [API](https://cloud.google.com/compute/docs/reference/latest/disks).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst persistent_boot_disk = gcp.compute.getDisk({\n    name: \"persistent-boot-disk\",\n    project: \"example\",\n});\nconst _default = new gcp.compute.Instance(\"default\", {bootDisk: {\n    source: persistent_boot_disk.then(persistent_boot_disk =\u003e persistent_boot_disk.selfLink),\n    autoDelete: false,\n}});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\npersistent_boot_disk = gcp.compute.get_disk(name=\"persistent-boot-disk\",\n    project=\"example\")\ndefault = gcp.compute.Instance(\"default\", boot_disk={\n    \"source\": persistent_boot_disk.self_link,\n    \"auto_delete\": False,\n})\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var persistent_boot_disk = Gcp.Compute.GetDisk.Invoke(new()\n    {\n        Name = \"persistent-boot-disk\",\n        Project = \"example\",\n    });\n\n    var @default = new Gcp.Compute.Instance(\"default\", new()\n    {\n        BootDisk = new Gcp.Compute.Inputs.InstanceBootDiskArgs\n        {\n            Source = persistent_boot_disk.Apply(persistent_boot_disk =\u003e persistent_boot_disk.Apply(getDiskResult =\u003e getDiskResult.SelfLink)),\n            AutoDelete = false,\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tpersistent_boot_disk, err := compute.LookupDisk(ctx, \u0026compute.LookupDiskArgs{\n\t\t\tName:    \"persistent-boot-disk\",\n\t\t\tProject: pulumi.StringRef(\"example\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewInstance(ctx, \"default\", \u0026compute.InstanceArgs{\n\t\t\tBootDisk: \u0026compute.InstanceBootDiskArgs{\n\t\t\t\tSource:     pulumi.String(persistent_boot_disk.SelfLink),\n\t\t\t\tAutoDelete: pulumi.Bool(false),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetDiskArgs;\nimport com.pulumi.gcp.compute.Instance;\nimport com.pulumi.gcp.compute.InstanceArgs;\nimport com.pulumi.gcp.compute.inputs.InstanceBootDiskArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var persistent-boot-disk = ComputeFunctions.getDisk(GetDiskArgs.builder()\n            .name(\"persistent-boot-disk\")\n            .project(\"example\")\n            .build());\n\n        var default_ = new Instance(\"default\", InstanceArgs.builder()\n            .bootDisk(InstanceBootDiskArgs.builder()\n                .source(persistent_boot_disk.selfLink())\n                .autoDelete(false)\n                .build())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  default:\n    type: gcp:compute:Instance\n    properties:\n      bootDisk:\n        source: ${[\"persistent-boot-disk\"].selfLink}\n        autoDelete: false\nvariables:\n  persistent-boot-disk:\n    fn::invoke:\n      function: gcp:compute:getDisk\n      arguments:\n        name: persistent-boot-disk\n        project: example\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getDisk.\n",
                 "properties": {
@@ -293547,7 +293547,7 @@
             }
         },
         "gcp:compute/getForwardingRule:getForwardingRule": {
-            "description": "Get a forwarding rule within GCE from its name.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-forwarding-rule = gcp.compute.getForwardingRule({\n    name: \"forwarding-rule-us-east1\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_forwarding_rule = gcp.compute.get_forwarding_rule(name=\"forwarding-rule-us-east1\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_forwarding_rule = Gcp.Compute.GetForwardingRule.Invoke(new()\n    {\n        Name = \"forwarding-rule-us-east1\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.LookupForwardingRule(ctx, \u0026compute.LookupForwardingRuleArgs{\n\t\t\tName: \"forwarding-rule-us-east1\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetForwardingRuleArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-forwarding-rule = ComputeFunctions.getForwardingRule(GetForwardingRuleArgs.builder()\n            .name(\"forwarding-rule-us-east1\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-forwarding-rule:\n    fn::invoke:\n      function: gcp:compute:getForwardingRule\n      arguments:\n        name: forwarding-rule-us-east1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get a forwarding rule within GCE from its name.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_forwarding_rule = gcp.compute.getForwardingRule({\n    name: \"forwarding-rule-us-east1\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_forwarding_rule = gcp.compute.get_forwarding_rule(name=\"forwarding-rule-us-east1\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_forwarding_rule = Gcp.Compute.GetForwardingRule.Invoke(new()\n    {\n        Name = \"forwarding-rule-us-east1\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.LookupForwardingRule(ctx, \u0026compute.LookupForwardingRuleArgs{\n\t\t\tName: \"forwarding-rule-us-east1\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetForwardingRuleArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-forwarding-rule = ComputeFunctions.getForwardingRule(GetForwardingRuleArgs.builder()\n            .name(\"forwarding-rule-us-east1\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-forwarding-rule:\n    fn::invoke:\n      function: gcp:compute:getForwardingRule\n      arguments:\n        name: forwarding-rule-us-east1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getForwardingRule.\n",
                 "properties": {
@@ -293742,7 +293742,7 @@
             }
         },
         "gcp:compute/getForwardingRules:getForwardingRules": {
-            "description": "List all networks in a specified Google Cloud project.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-forwarding-rules = gcp.compute.getForwardingRules({\n    project: \"my-cloud-project\",\n    region: \"us-central1\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_forwarding_rules = gcp.compute.get_forwarding_rules(project=\"my-cloud-project\",\n    region=\"us-central1\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_forwarding_rules = Gcp.Compute.GetForwardingRules.Invoke(new()\n    {\n        Project = \"my-cloud-project\",\n        Region = \"us-central1\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.GetForwardingRules(ctx, \u0026compute.GetForwardingRulesArgs{\n\t\t\tProject: pulumi.StringRef(\"my-cloud-project\"),\n\t\t\tRegion:  pulumi.StringRef(\"us-central1\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetForwardingRulesArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-forwarding-rules = ComputeFunctions.getForwardingRules(GetForwardingRulesArgs.builder()\n            .project(\"my-cloud-project\")\n            .region(\"us-central1\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-forwarding-rules:\n    fn::invoke:\n      function: gcp:compute:getForwardingRules\n      arguments:\n        project: my-cloud-project\n        region: us-central1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "List all networks in a specified Google Cloud project.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_forwarding_rules = gcp.compute.getForwardingRules({\n    project: \"my-cloud-project\",\n    region: \"us-central1\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_forwarding_rules = gcp.compute.get_forwarding_rules(project=\"my-cloud-project\",\n    region=\"us-central1\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_forwarding_rules = Gcp.Compute.GetForwardingRules.Invoke(new()\n    {\n        Project = \"my-cloud-project\",\n        Region = \"us-central1\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.GetForwardingRules(ctx, \u0026compute.GetForwardingRulesArgs{\n\t\t\tProject: pulumi.StringRef(\"my-cloud-project\"),\n\t\t\tRegion:  pulumi.StringRef(\"us-central1\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetForwardingRulesArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-forwarding-rules = ComputeFunctions.getForwardingRules(GetForwardingRulesArgs.builder()\n            .project(\"my-cloud-project\")\n            .region(\"us-central1\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-forwarding-rules:\n    fn::invoke:\n      function: gcp:compute:getForwardingRules\n      arguments:\n        project: my-cloud-project\n        region: us-central1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getForwardingRules.\n",
                 "properties": {
@@ -293872,7 +293872,7 @@
             }
         },
         "gcp:compute/getGlobalForwardingRule:getGlobalForwardingRule": {
-            "description": "Get a global forwarding rule within GCE from its name.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-forwarding-rule = gcp.compute.getGlobalForwardingRule({\n    name: \"forwarding-rule-global\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_forwarding_rule = gcp.compute.get_global_forwarding_rule(name=\"forwarding-rule-global\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_forwarding_rule = Gcp.Compute.GetGlobalForwardingRule.Invoke(new()\n    {\n        Name = \"forwarding-rule-global\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.LookupGlobalForwardingRule(ctx, \u0026compute.LookupGlobalForwardingRuleArgs{\n\t\t\tName: \"forwarding-rule-global\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetGlobalForwardingRuleArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-forwarding-rule = ComputeFunctions.getGlobalForwardingRule(GetGlobalForwardingRuleArgs.builder()\n            .name(\"forwarding-rule-global\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-forwarding-rule:\n    fn::invoke:\n      function: gcp:compute:getGlobalForwardingRule\n      arguments:\n        name: forwarding-rule-global\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get a global forwarding rule within GCE from its name.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_forwarding_rule = gcp.compute.getGlobalForwardingRule({\n    name: \"forwarding-rule-global\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_forwarding_rule = gcp.compute.get_global_forwarding_rule(name=\"forwarding-rule-global\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_forwarding_rule = Gcp.Compute.GetGlobalForwardingRule.Invoke(new()\n    {\n        Name = \"forwarding-rule-global\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.LookupGlobalForwardingRule(ctx, \u0026compute.LookupGlobalForwardingRuleArgs{\n\t\t\tName: \"forwarding-rule-global\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetGlobalForwardingRuleArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-forwarding-rule = ComputeFunctions.getGlobalForwardingRule(GetGlobalForwardingRuleArgs.builder()\n            .name(\"forwarding-rule-global\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-forwarding-rule:\n    fn::invoke:\n      function: gcp:compute:getGlobalForwardingRule\n      arguments:\n        name: forwarding-rule-global\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getGlobalForwardingRule.\n",
                 "properties": {
@@ -295614,7 +295614,7 @@
             }
         },
         "gcp:compute/getNetblockIPRanges:getNetblockIPRanges": {
-            "description": "Use this data source to get the IP addresses from different special IP ranges on Google Cloud Platform.\n\n## Example Usage\n\n### Cloud Ranges\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst netblock = gcp.compute.getNetblockIPRanges({});\nexport const cidrBlocks = netblock.then(netblock =\u003e netblock.cidrBlocks);\nexport const cidrBlocksIpv4 = netblock.then(netblock =\u003e netblock.cidrBlocksIpv4s);\nexport const cidrBlocksIpv6 = netblock.then(netblock =\u003e netblock.cidrBlocksIpv6s);\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nnetblock = gcp.compute.get_netblock_ip_ranges()\npulumi.export(\"cidrBlocks\", netblock.cidr_blocks)\npulumi.export(\"cidrBlocksIpv4\", netblock.cidr_blocks_ipv4s)\npulumi.export(\"cidrBlocksIpv6\", netblock.cidr_blocks_ipv6s)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var netblock = Gcp.Compute.GetNetblockIPRanges.Invoke();\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"cidrBlocks\"] = netblock.Apply(getNetblockIPRangesResult =\u003e getNetblockIPRangesResult.CidrBlocks),\n        [\"cidrBlocksIpv4\"] = netblock.Apply(getNetblockIPRangesResult =\u003e getNetblockIPRangesResult.CidrBlocksIpv4s),\n        [\"cidrBlocksIpv6\"] = netblock.Apply(getNetblockIPRangesResult =\u003e getNetblockIPRangesResult.CidrBlocksIpv6s),\n    };\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tnetblock, err := compute.GetNetblockIPRanges(ctx, \u0026compute.GetNetblockIPRangesArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"cidrBlocks\", netblock.CidrBlocks)\n\t\tctx.Export(\"cidrBlocksIpv4\", netblock.CidrBlocksIpv4s)\n\t\tctx.Export(\"cidrBlocksIpv6\", netblock.CidrBlocksIpv6s)\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetblockIPRangesArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var netblock = ComputeFunctions.getNetblockIPRanges();\n\n        ctx.export(\"cidrBlocks\", netblock.applyValue(getNetblockIPRangesResult -\u003e getNetblockIPRangesResult.cidrBlocks()));\n        ctx.export(\"cidrBlocksIpv4\", netblock.applyValue(getNetblockIPRangesResult -\u003e getNetblockIPRangesResult.cidrBlocksIpv4s()));\n        ctx.export(\"cidrBlocksIpv6\", netblock.applyValue(getNetblockIPRangesResult -\u003e getNetblockIPRangesResult.cidrBlocksIpv6s()));\n    }\n}\n```\n```yaml\nvariables:\n  netblock:\n    fn::invoke:\n      function: gcp:compute:getNetblockIPRanges\n      arguments: {}\noutputs:\n  cidrBlocks: ${netblock.cidrBlocks}\n  cidrBlocksIpv4: ${netblock.cidrBlocksIpv4s}\n  cidrBlocksIpv6: ${netblock.cidrBlocksIpv6s}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Allow Health Checks\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst legacy-hcs = gcp.compute.getNetblockIPRanges({\n    rangeType: \"legacy-health-checkers\",\n});\nconst _default = new gcp.compute.Network(\"default\", {name: \"test-network\"});\nconst allow_hcs = new gcp.compute.Firewall(\"allow-hcs\", {\n    name: \"allow-hcs\",\n    network: _default.name,\n    allows: [{\n        protocol: \"tcp\",\n        ports: [\"80\"],\n    }],\n    sourceRanges: legacy_hcs.then(legacy_hcs =\u003e legacy_hcs.cidrBlocksIpv4s),\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nlegacy_hcs = gcp.compute.get_netblock_ip_ranges(range_type=\"legacy-health-checkers\")\ndefault = gcp.compute.Network(\"default\", name=\"test-network\")\nallow_hcs = gcp.compute.Firewall(\"allow-hcs\",\n    name=\"allow-hcs\",\n    network=default.name,\n    allows=[{\n        \"protocol\": \"tcp\",\n        \"ports\": [\"80\"],\n    }],\n    source_ranges=legacy_hcs.cidr_blocks_ipv4s)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var legacy_hcs = Gcp.Compute.GetNetblockIPRanges.Invoke(new()\n    {\n        RangeType = \"legacy-health-checkers\",\n    });\n\n    var @default = new Gcp.Compute.Network(\"default\", new()\n    {\n        Name = \"test-network\",\n    });\n\n    var allow_hcs = new Gcp.Compute.Firewall(\"allow-hcs\", new()\n    {\n        Name = \"allow-hcs\",\n        Network = @default.Name,\n        Allows = new[]\n        {\n            new Gcp.Compute.Inputs.FirewallAllowArgs\n            {\n                Protocol = \"tcp\",\n                Ports = new[]\n                {\n                    \"80\",\n                },\n            },\n        },\n        SourceRanges = legacy_hcs.Apply(legacy_hcs =\u003e legacy_hcs.Apply(getNetblockIPRangesResult =\u003e getNetblockIPRangesResult.CidrBlocksIpv4s)),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tlegacy_hcs, err := compute.GetNetblockIPRanges(ctx, \u0026compute.GetNetblockIPRangesArgs{\n\t\t\tRangeType: pulumi.StringRef(\"legacy-health-checkers\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewNetwork(ctx, \"default\", \u0026compute.NetworkArgs{\n\t\t\tName: pulumi.String(\"test-network\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewFirewall(ctx, \"allow-hcs\", \u0026compute.FirewallArgs{\n\t\t\tName:    pulumi.String(\"allow-hcs\"),\n\t\t\tNetwork: _default.Name,\n\t\t\tAllows: compute.FirewallAllowArray{\n\t\t\t\t\u0026compute.FirewallAllowArgs{\n\t\t\t\t\tProtocol: pulumi.String(\"tcp\"),\n\t\t\t\t\tPorts: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"80\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tSourceRanges: interface{}(legacy_hcs.CidrBlocksIpv4s),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetblockIPRangesArgs;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.Firewall;\nimport com.pulumi.gcp.compute.FirewallArgs;\nimport com.pulumi.gcp.compute.inputs.FirewallAllowArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var legacy-hcs = ComputeFunctions.getNetblockIPRanges(GetNetblockIPRangesArgs.builder()\n            .rangeType(\"legacy-health-checkers\")\n            .build());\n\n        var default_ = new Network(\"default\", NetworkArgs.builder()\n            .name(\"test-network\")\n            .build());\n\n        var allow_hcs = new Firewall(\"allow-hcs\", FirewallArgs.builder()\n            .name(\"allow-hcs\")\n            .network(default_.name())\n            .allows(FirewallAllowArgs.builder()\n                .protocol(\"tcp\")\n                .ports(\"80\")\n                .build())\n            .sourceRanges(legacy_hcs.cidrBlocksIpv4s())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  allow-hcs:\n    type: gcp:compute:Firewall\n    properties:\n      name: allow-hcs\n      network: ${default.name}\n      allows:\n        - protocol: tcp\n          ports:\n            - '80'\n      sourceRanges: ${[\"legacy-hcs\"].cidrBlocksIpv4s}\n  default:\n    type: gcp:compute:Network\n    properties:\n      name: test-network\nvariables:\n  legacy-hcs:\n    fn::invoke:\n      function: gcp:compute:getNetblockIPRanges\n      arguments:\n        rangeType: legacy-health-checkers\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Use this data source to get the IP addresses from different special IP ranges on Google Cloud Platform.\n\n## Example Usage\n\n### Cloud Ranges\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst netblock = gcp.compute.getNetblockIPRanges({});\nexport const cidrBlocks = netblock.then(netblock =\u003e netblock.cidrBlocks);\nexport const cidrBlocksIpv4 = netblock.then(netblock =\u003e netblock.cidrBlocksIpv4s);\nexport const cidrBlocksIpv6 = netblock.then(netblock =\u003e netblock.cidrBlocksIpv6s);\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nnetblock = gcp.compute.get_netblock_ip_ranges()\npulumi.export(\"cidrBlocks\", netblock.cidr_blocks)\npulumi.export(\"cidrBlocksIpv4\", netblock.cidr_blocks_ipv4s)\npulumi.export(\"cidrBlocksIpv6\", netblock.cidr_blocks_ipv6s)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var netblock = Gcp.Compute.GetNetblockIPRanges.Invoke();\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"cidrBlocks\"] = netblock.Apply(getNetblockIPRangesResult =\u003e getNetblockIPRangesResult.CidrBlocks),\n        [\"cidrBlocksIpv4\"] = netblock.Apply(getNetblockIPRangesResult =\u003e getNetblockIPRangesResult.CidrBlocksIpv4s),\n        [\"cidrBlocksIpv6\"] = netblock.Apply(getNetblockIPRangesResult =\u003e getNetblockIPRangesResult.CidrBlocksIpv6s),\n    };\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tnetblock, err := compute.GetNetblockIPRanges(ctx, \u0026compute.GetNetblockIPRangesArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"cidrBlocks\", netblock.CidrBlocks)\n\t\tctx.Export(\"cidrBlocksIpv4\", netblock.CidrBlocksIpv4s)\n\t\tctx.Export(\"cidrBlocksIpv6\", netblock.CidrBlocksIpv6s)\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetblockIPRangesArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var netblock = ComputeFunctions.getNetblockIPRanges();\n\n        ctx.export(\"cidrBlocks\", netblock.applyValue(getNetblockIPRangesResult -\u003e getNetblockIPRangesResult.cidrBlocks()));\n        ctx.export(\"cidrBlocksIpv4\", netblock.applyValue(getNetblockIPRangesResult -\u003e getNetblockIPRangesResult.cidrBlocksIpv4s()));\n        ctx.export(\"cidrBlocksIpv6\", netblock.applyValue(getNetblockIPRangesResult -\u003e getNetblockIPRangesResult.cidrBlocksIpv6s()));\n    }\n}\n```\n```yaml\nvariables:\n  netblock:\n    fn::invoke:\n      function: gcp:compute:getNetblockIPRanges\n      arguments: {}\noutputs:\n  cidrBlocks: ${netblock.cidrBlocks}\n  cidrBlocksIpv4: ${netblock.cidrBlocksIpv4s}\n  cidrBlocksIpv6: ${netblock.cidrBlocksIpv6s}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n### Allow Health Checks\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst legacy_hcs = gcp.compute.getNetblockIPRanges({\n    rangeType: \"legacy-health-checkers\",\n});\nconst _default = new gcp.compute.Network(\"default\", {name: \"test-network\"});\nconst allow_hcs = new gcp.compute.Firewall(\"allow-hcs\", {\n    name: \"allow-hcs\",\n    network: _default.name,\n    allows: [{\n        protocol: \"tcp\",\n        ports: [\"80\"],\n    }],\n    sourceRanges: legacy_hcs.then(legacy_hcs =\u003e legacy_hcs.cidrBlocksIpv4s),\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nlegacy_hcs = gcp.compute.get_netblock_ip_ranges(range_type=\"legacy-health-checkers\")\ndefault = gcp.compute.Network(\"default\", name=\"test-network\")\nallow_hcs = gcp.compute.Firewall(\"allow-hcs\",\n    name=\"allow-hcs\",\n    network=default.name,\n    allows=[{\n        \"protocol\": \"tcp\",\n        \"ports\": [\"80\"],\n    }],\n    source_ranges=legacy_hcs.cidr_blocks_ipv4s)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var legacy_hcs = Gcp.Compute.GetNetblockIPRanges.Invoke(new()\n    {\n        RangeType = \"legacy-health-checkers\",\n    });\n\n    var @default = new Gcp.Compute.Network(\"default\", new()\n    {\n        Name = \"test-network\",\n    });\n\n    var allow_hcs = new Gcp.Compute.Firewall(\"allow-hcs\", new()\n    {\n        Name = \"allow-hcs\",\n        Network = @default.Name,\n        Allows = new[]\n        {\n            new Gcp.Compute.Inputs.FirewallAllowArgs\n            {\n                Protocol = \"tcp\",\n                Ports = new[]\n                {\n                    \"80\",\n                },\n            },\n        },\n        SourceRanges = legacy_hcs.Apply(legacy_hcs =\u003e legacy_hcs.Apply(getNetblockIPRangesResult =\u003e getNetblockIPRangesResult.CidrBlocksIpv4s)),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tlegacy_hcs, err := compute.GetNetblockIPRanges(ctx, \u0026compute.GetNetblockIPRangesArgs{\n\t\t\tRangeType: pulumi.StringRef(\"legacy-health-checkers\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewNetwork(ctx, \"default\", \u0026compute.NetworkArgs{\n\t\t\tName: pulumi.String(\"test-network\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = compute.NewFirewall(ctx, \"allow-hcs\", \u0026compute.FirewallArgs{\n\t\t\tName:    pulumi.String(\"allow-hcs\"),\n\t\t\tNetwork: _default.Name,\n\t\t\tAllows: compute.FirewallAllowArray{\n\t\t\t\t\u0026compute.FirewallAllowArgs{\n\t\t\t\t\tProtocol: pulumi.String(\"tcp\"),\n\t\t\t\t\tPorts: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"80\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tSourceRanges: interface{}(legacy_hcs.CidrBlocksIpv4s),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetblockIPRangesArgs;\nimport com.pulumi.gcp.compute.Network;\nimport com.pulumi.gcp.compute.NetworkArgs;\nimport com.pulumi.gcp.compute.Firewall;\nimport com.pulumi.gcp.compute.FirewallArgs;\nimport com.pulumi.gcp.compute.inputs.FirewallAllowArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var legacy-hcs = ComputeFunctions.getNetblockIPRanges(GetNetblockIPRangesArgs.builder()\n            .rangeType(\"legacy-health-checkers\")\n            .build());\n\n        var default_ = new Network(\"default\", NetworkArgs.builder()\n            .name(\"test-network\")\n            .build());\n\n        var allow_hcs = new Firewall(\"allow-hcs\", FirewallArgs.builder()\n            .name(\"allow-hcs\")\n            .network(default_.name())\n            .allows(FirewallAllowArgs.builder()\n                .protocol(\"tcp\")\n                .ports(\"80\")\n                .build())\n            .sourceRanges(legacy_hcs.cidrBlocksIpv4s())\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  allow-hcs:\n    type: gcp:compute:Firewall\n    properties:\n      name: allow-hcs\n      network: ${default.name}\n      allows:\n        - protocol: tcp\n          ports:\n            - '80'\n      sourceRanges: ${[\"legacy-hcs\"].cidrBlocksIpv4s}\n  default:\n    type: gcp:compute:Network\n    properties:\n      name: test-network\nvariables:\n  legacy-hcs:\n    fn::invoke:\n      function: gcp:compute:getNetblockIPRanges\n      arguments:\n        rangeType: legacy-health-checkers\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getNetblockIPRanges.\n",
                 "properties": {
@@ -295667,7 +295667,7 @@
             }
         },
         "gcp:compute/getNetwork:getNetwork": {
-            "description": "Get a network within GCE from its name.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-network = gcp.compute.getNetwork({\n    name: \"default-us-east1\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_network = gcp.compute.get_network(name=\"default-us-east1\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_network = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"default-us-east1\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName: \"default-us-east1\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-network = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"default-us-east1\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-network:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: default-us-east1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get a network within GCE from its name.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_network = gcp.compute.getNetwork({\n    name: \"default-us-east1\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_network = gcp.compute.get_network(name=\"default-us-east1\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_network = Gcp.Compute.GetNetwork.Invoke(new()\n    {\n        Name = \"default-us-east1\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.LookupNetwork(ctx, \u0026compute.LookupNetworkArgs{\n\t\t\tName: \"default-us-east1\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworkArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-network = ComputeFunctions.getNetwork(GetNetworkArgs.builder()\n            .name(\"default-us-east1\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-network:\n    fn::invoke:\n      function: gcp:compute:getNetwork\n      arguments:\n        name: default-us-east1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getNetwork.\n",
                 "properties": {
@@ -295908,7 +295908,7 @@
             }
         },
         "gcp:compute/getNetworks:getNetworks": {
-            "description": "List all networks in a specified Google Cloud project.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-networks = gcp.compute.getNetworks({\n    project: \"my-cloud-project\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_networks = gcp.compute.get_networks(project=\"my-cloud-project\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_networks = Gcp.Compute.GetNetworks.Invoke(new()\n    {\n        Project = \"my-cloud-project\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.GetNetworks(ctx, \u0026compute.GetNetworksArgs{\n\t\t\tProject: pulumi.StringRef(\"my-cloud-project\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworksArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-networks = ComputeFunctions.getNetworks(GetNetworksArgs.builder()\n            .project(\"my-cloud-project\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-networks:\n    fn::invoke:\n      function: gcp:compute:getNetworks\n      arguments:\n        project: my-cloud-project\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "List all networks in a specified Google Cloud project.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_networks = gcp.compute.getNetworks({\n    project: \"my-cloud-project\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_networks = gcp.compute.get_networks(project=\"my-cloud-project\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_networks = Gcp.Compute.GetNetworks.Invoke(new()\n    {\n        Project = \"my-cloud-project\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.GetNetworks(ctx, \u0026compute.GetNetworksArgs{\n\t\t\tProject: pulumi.StringRef(\"my-cloud-project\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetNetworksArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-networks = ComputeFunctions.getNetworks(GetNetworksArgs.builder()\n            .project(\"my-cloud-project\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-networks:\n    fn::invoke:\n      function: gcp:compute:getNetworks\n      arguments:\n        project: my-cloud-project\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getNetworks.\n",
                 "properties": {
@@ -296573,7 +296573,7 @@
             }
         },
         "gcp:compute/getRegionInstanceTemplate:getRegionInstanceTemplate": {
-            "description": "Get information about a VM instance template resource within GCE. For more information see\n[the official documentation](https://cloud.google.com/compute/docs/instance-templates)\nand\n[API](https://cloud.google.com/compute/docs/reference/rest/v1/regionInstanceTemplates).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\n// by name\nconst generic = gcp.compute.getRegionInstanceTemplate({\n    name: \"generic-tpl-20200107\",\n});\n// using a filter\nconst generic-regex = gcp.compute.getRegionInstanceTemplate({\n    filter: \"name != generic-tpl-20200107\",\n    mostRecent: true,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\n# by name\ngeneric = gcp.compute.get_region_instance_template(name=\"generic-tpl-20200107\")\n# using a filter\ngeneric_regex = gcp.compute.get_region_instance_template(filter=\"name != generic-tpl-20200107\",\n    most_recent=True)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    // by name\n    var generic = Gcp.Compute.GetRegionInstanceTemplate.Invoke(new()\n    {\n        Name = \"generic-tpl-20200107\",\n    });\n\n    // using a filter\n    var generic_regex = Gcp.Compute.GetRegionInstanceTemplate.Invoke(new()\n    {\n        Filter = \"name != generic-tpl-20200107\",\n        MostRecent = true,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t// by name\n\t\t_, err := compute.LookupRegionInstanceTemplate(ctx, \u0026compute.LookupRegionInstanceTemplateArgs{\n\t\t\tName: pulumi.StringRef(\"generic-tpl-20200107\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// using a filter\n\t\t_, err = compute.LookupRegionInstanceTemplate(ctx, \u0026compute.LookupRegionInstanceTemplateArgs{\n\t\t\tFilter:     pulumi.StringRef(\"name != generic-tpl-20200107\"),\n\t\t\tMostRecent: pulumi.BoolRef(true),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetRegionInstanceTemplateArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        // by name\n        final var generic = ComputeFunctions.getRegionInstanceTemplate(GetRegionInstanceTemplateArgs.builder()\n            .name(\"generic-tpl-20200107\")\n            .build());\n\n        // using a filter\n        final var generic-regex = ComputeFunctions.getRegionInstanceTemplate(GetRegionInstanceTemplateArgs.builder()\n            .filter(\"name != generic-tpl-20200107\")\n            .mostRecent(true)\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  # by name\n  generic:\n    fn::invoke:\n      function: gcp:compute:getRegionInstanceTemplate\n      arguments:\n        name: generic-tpl-20200107\n  # using a filter\n  generic-regex:\n    fn::invoke:\n      function: gcp:compute:getRegionInstanceTemplate\n      arguments:\n        filter: name != generic-tpl-20200107\n        mostRecent: true\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get information about a VM instance template resource within GCE. For more information see\n[the official documentation](https://cloud.google.com/compute/docs/instance-templates)\nand\n[API](https://cloud.google.com/compute/docs/reference/rest/v1/regionInstanceTemplates).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\n// by name\nconst generic = gcp.compute.getRegionInstanceTemplate({\n    name: \"generic-tpl-20200107\",\n});\n// using a filter\nconst generic_regex = gcp.compute.getRegionInstanceTemplate({\n    filter: \"name != generic-tpl-20200107\",\n    mostRecent: true,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\n# by name\ngeneric = gcp.compute.get_region_instance_template(name=\"generic-tpl-20200107\")\n# using a filter\ngeneric_regex = gcp.compute.get_region_instance_template(filter=\"name != generic-tpl-20200107\",\n    most_recent=True)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    // by name\n    var generic = Gcp.Compute.GetRegionInstanceTemplate.Invoke(new()\n    {\n        Name = \"generic-tpl-20200107\",\n    });\n\n    // using a filter\n    var generic_regex = Gcp.Compute.GetRegionInstanceTemplate.Invoke(new()\n    {\n        Filter = \"name != generic-tpl-20200107\",\n        MostRecent = true,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t// by name\n\t\t_, err := compute.LookupRegionInstanceTemplate(ctx, \u0026compute.LookupRegionInstanceTemplateArgs{\n\t\t\tName: pulumi.StringRef(\"generic-tpl-20200107\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// using a filter\n\t\t_, err = compute.LookupRegionInstanceTemplate(ctx, \u0026compute.LookupRegionInstanceTemplateArgs{\n\t\t\tFilter:     pulumi.StringRef(\"name != generic-tpl-20200107\"),\n\t\t\tMostRecent: pulumi.BoolRef(true),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetRegionInstanceTemplateArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        // by name\n        final var generic = ComputeFunctions.getRegionInstanceTemplate(GetRegionInstanceTemplateArgs.builder()\n            .name(\"generic-tpl-20200107\")\n            .build());\n\n        // using a filter\n        final var generic-regex = ComputeFunctions.getRegionInstanceTemplate(GetRegionInstanceTemplateArgs.builder()\n            .filter(\"name != generic-tpl-20200107\")\n            .mostRecent(true)\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  # by name\n  generic:\n    fn::invoke:\n      function: gcp:compute:getRegionInstanceTemplate\n      arguments:\n        name: generic-tpl-20200107\n  # using a filter\n  generic-regex:\n    fn::invoke:\n      function: gcp:compute:getRegionInstanceTemplate\n      arguments:\n        filter: name != generic-tpl-20200107\n        mostRecent: true\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getRegionInstanceTemplate.\n",
                 "properties": {
@@ -297242,7 +297242,7 @@
             }
         },
         "gcp:compute/getRouter:getRouter": {
-            "description": "Get a router within GCE from its name and VPC.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-router = gcp.compute.getRouter({\n    name: \"myrouter-us-east1\",\n    network: \"my-network\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_router = gcp.compute.get_router(name=\"myrouter-us-east1\",\n    network=\"my-network\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_router = Gcp.Compute.GetRouter.Invoke(new()\n    {\n        Name = \"myrouter-us-east1\",\n        Network = \"my-network\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.LookupRouter(ctx, \u0026compute.LookupRouterArgs{\n\t\t\tName:    \"myrouter-us-east1\",\n\t\t\tNetwork: \"my-network\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetRouterArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-router = ComputeFunctions.getRouter(GetRouterArgs.builder()\n            .name(\"myrouter-us-east1\")\n            .network(\"my-network\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-router:\n    fn::invoke:\n      function: gcp:compute:getRouter\n      arguments:\n        name: myrouter-us-east1\n        network: my-network\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get a router within GCE from its name and VPC.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_router = gcp.compute.getRouter({\n    name: \"myrouter-us-east1\",\n    network: \"my-network\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_router = gcp.compute.get_router(name=\"myrouter-us-east1\",\n    network=\"my-network\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_router = Gcp.Compute.GetRouter.Invoke(new()\n    {\n        Name = \"myrouter-us-east1\",\n        Network = \"my-network\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.LookupRouter(ctx, \u0026compute.LookupRouterArgs{\n\t\t\tName:    \"myrouter-us-east1\",\n\t\t\tNetwork: \"my-network\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetRouterArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-router = ComputeFunctions.getRouter(GetRouterArgs.builder()\n            .name(\"myrouter-us-east1\")\n            .network(\"my-network\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-router:\n    fn::invoke:\n      function: gcp:compute:getRouter\n      arguments:\n        name: myrouter-us-east1\n        network: my-network\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getRouter.\n",
                 "properties": {
@@ -297478,7 +297478,7 @@
             }
         },
         "gcp:compute/getRouterStatus:getRouterStatus": {
-            "description": "Get a Cloud Router's status within GCE from its name and region. This data source exposes the\nroutes learned by a Cloud Router via BGP peers.\n\nFor more information see [the official documentation](https://cloud.google.com/network-connectivity/docs/router/how-to/viewing-router-details)\nand\n[API](https://cloud.google.com/compute/docs/reference/rest/v1/routers/getRouterStatus).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-router = gcp.compute.getRouterStatus({\n    name: \"myrouter\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_router = gcp.compute.get_router_status(name=\"myrouter\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_router = Gcp.Compute.GetRouterStatus.Invoke(new()\n    {\n        Name = \"myrouter\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.GetRouterStatus(ctx, \u0026compute.GetRouterStatusArgs{\n\t\t\tName: \"myrouter\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetRouterStatusArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-router = ComputeFunctions.getRouterStatus(GetRouterStatusArgs.builder()\n            .name(\"myrouter\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-router:\n    fn::invoke:\n      function: gcp:compute:getRouterStatus\n      arguments:\n        name: myrouter\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get a Cloud Router's status within GCE from its name and region. This data source exposes the\nroutes learned by a Cloud Router via BGP peers.\n\nFor more information see [the official documentation](https://cloud.google.com/network-connectivity/docs/router/how-to/viewing-router-details)\nand\n[API](https://cloud.google.com/compute/docs/reference/rest/v1/routers/getRouterStatus).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_router = gcp.compute.getRouterStatus({\n    name: \"myrouter\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_router = gcp.compute.get_router_status(name=\"myrouter\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_router = Gcp.Compute.GetRouterStatus.Invoke(new()\n    {\n        Name = \"myrouter\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.GetRouterStatus(ctx, \u0026compute.GetRouterStatusArgs{\n\t\t\tName: \"myrouter\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetRouterStatusArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-router = ComputeFunctions.getRouterStatus(GetRouterStatusArgs.builder()\n            .name(\"myrouter\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-router:\n    fn::invoke:\n      function: gcp:compute:getRouterStatus\n      arguments:\n        name: myrouter\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getRouterStatus.\n",
                 "properties": {
@@ -297547,7 +297547,7 @@
             }
         },
         "gcp:compute/getSSLPolicy:getSSLPolicy": {
-            "description": "Gets an SSL Policy within GCE from its name, for use with Target HTTPS and Target SSL Proxies.\n    For more information see [the official documentation](https://cloud.google.com/compute/docs/load-balancing/ssl-policies).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-ssl-policy = gcp.compute.getSSLPolicy({\n    name: \"production-ssl-policy\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_ssl_policy = gcp.compute.get_ssl_policy(name=\"production-ssl-policy\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_ssl_policy = Gcp.Compute.GetSSLPolicy.Invoke(new()\n    {\n        Name = \"production-ssl-policy\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.LookupSSLPolicy(ctx, \u0026compute.LookupSSLPolicyArgs{\n\t\t\tName: \"production-ssl-policy\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetSSLPolicyArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-ssl-policy = ComputeFunctions.getSSLPolicy(GetSSLPolicyArgs.builder()\n            .name(\"production-ssl-policy\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-ssl-policy:\n    fn::invoke:\n      function: gcp:compute:getSSLPolicy\n      arguments:\n        name: production-ssl-policy\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Gets an SSL Policy within GCE from its name, for use with Target HTTPS and Target SSL Proxies.\n    For more information see [the official documentation](https://cloud.google.com/compute/docs/load-balancing/ssl-policies).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_ssl_policy = gcp.compute.getSSLPolicy({\n    name: \"production-ssl-policy\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_ssl_policy = gcp.compute.get_ssl_policy(name=\"production-ssl-policy\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_ssl_policy = Gcp.Compute.GetSSLPolicy.Invoke(new()\n    {\n        Name = \"production-ssl-policy\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.LookupSSLPolicy(ctx, \u0026compute.LookupSSLPolicyArgs{\n\t\t\tName: \"production-ssl-policy\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetSSLPolicyArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-ssl-policy = ComputeFunctions.getSSLPolicy(GetSSLPolicyArgs.builder()\n            .name(\"production-ssl-policy\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-ssl-policy:\n    fn::invoke:\n      function: gcp:compute:getSSLPolicy\n      arguments:\n        name: production-ssl-policy\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getSSLPolicy.\n",
                 "properties": {
@@ -297715,7 +297715,7 @@
             }
         },
         "gcp:compute/getSnapshot:getSnapshot": {
-            "description": "To get more information about Snapshot, see:\n\n* [API documentation](https://cloud.google.com/compute/docs/reference/rest/v1/snapshots)\n* How-to Guides\n    * [Official Documentation](https://cloud.google.com/compute/docs/disks/create-snapshots)\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\n//by name \nconst snapshot = gcp.compute.getSnapshot({\n    name: \"my-snapshot\",\n});\n// using a filter\nconst latest-snapshot = gcp.compute.getSnapshot({\n    filter: \"name != my-snapshot\",\n    mostRecent: true,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\n#by name \nsnapshot = gcp.compute.get_snapshot(name=\"my-snapshot\")\n# using a filter\nlatest_snapshot = gcp.compute.get_snapshot(filter=\"name != my-snapshot\",\n    most_recent=True)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    //by name \n    var snapshot = Gcp.Compute.GetSnapshot.Invoke(new()\n    {\n        Name = \"my-snapshot\",\n    });\n\n    // using a filter\n    var latest_snapshot = Gcp.Compute.GetSnapshot.Invoke(new()\n    {\n        Filter = \"name != my-snapshot\",\n        MostRecent = true,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t// by name\n\t\t_, err := compute.LookupSnapshot(ctx, \u0026compute.LookupSnapshotArgs{\n\t\t\tName: pulumi.StringRef(\"my-snapshot\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// using a filter\n\t\t_, err = compute.LookupSnapshot(ctx, \u0026compute.LookupSnapshotArgs{\n\t\t\tFilter:     pulumi.StringRef(\"name != my-snapshot\"),\n\t\t\tMostRecent: pulumi.BoolRef(true),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetSnapshotArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        //by name \n        final var snapshot = ComputeFunctions.getSnapshot(GetSnapshotArgs.builder()\n            .name(\"my-snapshot\")\n            .build());\n\n        // using a filter\n        final var latest-snapshot = ComputeFunctions.getSnapshot(GetSnapshotArgs.builder()\n            .filter(\"name != my-snapshot\")\n            .mostRecent(true)\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  #by name\n  snapshot:\n    fn::invoke:\n      function: gcp:compute:getSnapshot\n      arguments:\n        name: my-snapshot\n  # using a filter\n  latest-snapshot:\n    fn::invoke:\n      function: gcp:compute:getSnapshot\n      arguments:\n        filter: name != my-snapshot\n        mostRecent: true\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "To get more information about Snapshot, see:\n\n* [API documentation](https://cloud.google.com/compute/docs/reference/rest/v1/snapshots)\n* How-to Guides\n    * [Official Documentation](https://cloud.google.com/compute/docs/disks/create-snapshots)\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\n//by name \nconst snapshot = gcp.compute.getSnapshot({\n    name: \"my-snapshot\",\n});\n// using a filter\nconst latest_snapshot = gcp.compute.getSnapshot({\n    filter: \"name != my-snapshot\",\n    mostRecent: true,\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\n#by name \nsnapshot = gcp.compute.get_snapshot(name=\"my-snapshot\")\n# using a filter\nlatest_snapshot = gcp.compute.get_snapshot(filter=\"name != my-snapshot\",\n    most_recent=True)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    //by name \n    var snapshot = Gcp.Compute.GetSnapshot.Invoke(new()\n    {\n        Name = \"my-snapshot\",\n    });\n\n    // using a filter\n    var latest_snapshot = Gcp.Compute.GetSnapshot.Invoke(new()\n    {\n        Filter = \"name != my-snapshot\",\n        MostRecent = true,\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t// by name\n\t\t_, err := compute.LookupSnapshot(ctx, \u0026compute.LookupSnapshotArgs{\n\t\t\tName: pulumi.StringRef(\"my-snapshot\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t// using a filter\n\t\t_, err = compute.LookupSnapshot(ctx, \u0026compute.LookupSnapshotArgs{\n\t\t\tFilter:     pulumi.StringRef(\"name != my-snapshot\"),\n\t\t\tMostRecent: pulumi.BoolRef(true),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetSnapshotArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        //by name \n        final var snapshot = ComputeFunctions.getSnapshot(GetSnapshotArgs.builder()\n            .name(\"my-snapshot\")\n            .build());\n\n        // using a filter\n        final var latest-snapshot = ComputeFunctions.getSnapshot(GetSnapshotArgs.builder()\n            .filter(\"name != my-snapshot\")\n            .mostRecent(true)\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  #by name\n  snapshot:\n    fn::invoke:\n      function: gcp:compute:getSnapshot\n      arguments:\n        name: my-snapshot\n  # using a filter\n  latest-snapshot:\n    fn::invoke:\n      function: gcp:compute:getSnapshot\n      arguments:\n        filter: name != my-snapshot\n        mostRecent: true\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getSnapshot.\n",
                 "properties": {
@@ -297909,7 +297909,7 @@
             }
         },
         "gcp:compute/getSubnetwork:getSubnetwork": {
-            "description": "Get a subnetwork within GCE from its name and region.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-subnetwork = gcp.compute.getSubnetwork({\n    name: \"default-us-east1\",\n    region: \"us-east1\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_subnetwork = gcp.compute.get_subnetwork(name=\"default-us-east1\",\n    region=\"us-east1\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_subnetwork = Gcp.Compute.GetSubnetwork.Invoke(new()\n    {\n        Name = \"default-us-east1\",\n        Region = \"us-east1\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.LookupSubnetwork(ctx, \u0026compute.LookupSubnetworkArgs{\n\t\t\tName:   pulumi.StringRef(\"default-us-east1\"),\n\t\t\tRegion: pulumi.StringRef(\"us-east1\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetSubnetworkArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-subnetwork = ComputeFunctions.getSubnetwork(GetSubnetworkArgs.builder()\n            .name(\"default-us-east1\")\n            .region(\"us-east1\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-subnetwork:\n    fn::invoke:\n      function: gcp:compute:getSubnetwork\n      arguments:\n        name: default-us-east1\n        region: us-east1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get a subnetwork within GCE from its name and region.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_subnetwork = gcp.compute.getSubnetwork({\n    name: \"default-us-east1\",\n    region: \"us-east1\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_subnetwork = gcp.compute.get_subnetwork(name=\"default-us-east1\",\n    region=\"us-east1\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_subnetwork = Gcp.Compute.GetSubnetwork.Invoke(new()\n    {\n        Name = \"default-us-east1\",\n        Region = \"us-east1\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.LookupSubnetwork(ctx, \u0026compute.LookupSubnetworkArgs{\n\t\t\tName:   pulumi.StringRef(\"default-us-east1\"),\n\t\t\tRegion: pulumi.StringRef(\"us-east1\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetSubnetworkArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-subnetwork = ComputeFunctions.getSubnetwork(GetSubnetworkArgs.builder()\n            .name(\"default-us-east1\")\n            .region(\"us-east1\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-subnetwork:\n    fn::invoke:\n      function: gcp:compute:getSubnetwork\n      arguments:\n        name: default-us-east1\n        region: us-east1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getSubnetwork.\n",
                 "properties": {
@@ -298067,7 +298067,7 @@
             }
         },
         "gcp:compute/getSubnetworks:getSubnetworks": {
-            "description": "Get subnetworks within GCE.\nSee [the official documentation](https://cloud.google.com/vpc/docs/subnets)\nand [API](https://cloud.google.com/compute/docs/reference/rest/v1/subnetworks/list).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-subnetworks = gcp.compute.getSubnetworks({\n    filter: \"ipCidrRange eq 192.168.178.0/24\",\n    project: \"my-project\",\n    region: \"us-east1\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_subnetworks = gcp.compute.get_subnetworks(filter=\"ipCidrRange eq 192.168.178.0/24\",\n    project=\"my-project\",\n    region=\"us-east1\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_subnetworks = Gcp.Compute.GetSubnetworks.Invoke(new()\n    {\n        Filter = \"ipCidrRange eq 192.168.178.0/24\",\n        Project = \"my-project\",\n        Region = \"us-east1\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.GetSubnetworks(ctx, \u0026compute.GetSubnetworksArgs{\n\t\t\tFilter:  pulumi.StringRef(\"ipCidrRange eq 192.168.178.0/24\"),\n\t\t\tProject: pulumi.StringRef(\"my-project\"),\n\t\t\tRegion:  pulumi.StringRef(\"us-east1\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetSubnetworksArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-subnetworks = ComputeFunctions.getSubnetworks(GetSubnetworksArgs.builder()\n            .filter(\"ipCidrRange eq 192.168.178.0/24\")\n            .project(\"my-project\")\n            .region(\"us-east1\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-subnetworks:\n    fn::invoke:\n      function: gcp:compute:getSubnetworks\n      arguments:\n        filter: ipCidrRange eq 192.168.178.0/24\n        project: my-project\n        region: us-east1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get subnetworks within GCE.\nSee [the official documentation](https://cloud.google.com/vpc/docs/subnets)\nand [API](https://cloud.google.com/compute/docs/reference/rest/v1/subnetworks/list).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_subnetworks = gcp.compute.getSubnetworks({\n    filter: \"ipCidrRange eq 192.168.178.0/24\",\n    project: \"my-project\",\n    region: \"us-east1\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_subnetworks = gcp.compute.get_subnetworks(filter=\"ipCidrRange eq 192.168.178.0/24\",\n    project=\"my-project\",\n    region=\"us-east1\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_subnetworks = Gcp.Compute.GetSubnetworks.Invoke(new()\n    {\n        Filter = \"ipCidrRange eq 192.168.178.0/24\",\n        Project = \"my-project\",\n        Region = \"us-east1\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.GetSubnetworks(ctx, \u0026compute.GetSubnetworksArgs{\n\t\t\tFilter:  pulumi.StringRef(\"ipCidrRange eq 192.168.178.0/24\"),\n\t\t\tProject: pulumi.StringRef(\"my-project\"),\n\t\t\tRegion:  pulumi.StringRef(\"us-east1\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetSubnetworksArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-subnetworks = ComputeFunctions.getSubnetworks(GetSubnetworksArgs.builder()\n            .filter(\"ipCidrRange eq 192.168.178.0/24\")\n            .project(\"my-project\")\n            .region(\"us-east1\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-subnetworks:\n    fn::invoke:\n      function: gcp:compute:getSubnetworks\n      arguments:\n        filter: ipCidrRange eq 192.168.178.0/24\n        project: my-project\n        region: us-east1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getSubnetworks.\n",
                 "properties": {
@@ -298118,7 +298118,7 @@
             }
         },
         "gcp:compute/getVPNGateway:getVPNGateway": {
-            "description": "Get a VPN gateway within GCE from its name.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-vpn-gateway = gcp.compute.getVPNGateway({\n    name: \"vpn-gateway-us-east1\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_vpn_gateway = gcp.compute.get_vpn_gateway(name=\"vpn-gateway-us-east1\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_vpn_gateway = Gcp.Compute.GetVPNGateway.Invoke(new()\n    {\n        Name = \"vpn-gateway-us-east1\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.LookupVPNGateway(ctx, \u0026compute.LookupVPNGatewayArgs{\n\t\t\tName: \"vpn-gateway-us-east1\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetVPNGatewayArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-vpn-gateway = ComputeFunctions.getVPNGateway(GetVPNGatewayArgs.builder()\n            .name(\"vpn-gateway-us-east1\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-vpn-gateway:\n    fn::invoke:\n      function: gcp:compute:getVPNGateway\n      arguments:\n        name: vpn-gateway-us-east1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get a VPN gateway within GCE from its name.\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_vpn_gateway = gcp.compute.getVPNGateway({\n    name: \"vpn-gateway-us-east1\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_vpn_gateway = gcp.compute.get_vpn_gateway(name=\"vpn-gateway-us-east1\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_vpn_gateway = Gcp.Compute.GetVPNGateway.Invoke(new()\n    {\n        Name = \"vpn-gateway-us-east1\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.LookupVPNGateway(ctx, \u0026compute.LookupVPNGatewayArgs{\n\t\t\tName: \"vpn-gateway-us-east1\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetVPNGatewayArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-vpn-gateway = ComputeFunctions.getVPNGateway(GetVPNGatewayArgs.builder()\n            .name(\"vpn-gateway-us-east1\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-vpn-gateway:\n    fn::invoke:\n      function: gcp:compute:getVPNGateway\n      arguments:\n        name: vpn-gateway-us-east1\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getVPNGateway.\n",
                 "properties": {
@@ -298236,7 +298236,7 @@
         },
         "gcp:compute/routerStatus:RouterStatus": {
             "deprecationMessage": "gcp.compute.RouterStatus has been deprecated in favor of gcp.compute.getRouterStatus",
-            "description": "Get a Cloud Router's status within GCE from its name and region. This data source exposes the\nroutes learned by a Cloud Router via BGP peers.\n\nFor more information see [the official documentation](https://cloud.google.com/network-connectivity/docs/router/how-to/viewing-router-details)\nand\n[API](https://cloud.google.com/compute/docs/reference/rest/v1/routers/getRouterStatus).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-router = gcp.compute.getRouterStatus({\n    name: \"myrouter\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_router = gcp.compute.get_router_status(name=\"myrouter\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_router = Gcp.Compute.GetRouterStatus.Invoke(new()\n    {\n        Name = \"myrouter\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.GetRouterStatus(ctx, \u0026compute.GetRouterStatusArgs{\n\t\t\tName: \"myrouter\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetRouterStatusArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-router = ComputeFunctions.getRouterStatus(GetRouterStatusArgs.builder()\n            .name(\"myrouter\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-router:\n    fn::invoke:\n      function: gcp:compute:getRouterStatus\n      arguments:\n        name: myrouter\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get a Cloud Router's status within GCE from its name and region. This data source exposes the\nroutes learned by a Cloud Router via BGP peers.\n\nFor more information see [the official documentation](https://cloud.google.com/network-connectivity/docs/router/how-to/viewing-router-details)\nand\n[API](https://cloud.google.com/compute/docs/reference/rest/v1/routers/getRouterStatus).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_router = gcp.compute.getRouterStatus({\n    name: \"myrouter\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_router = gcp.compute.get_router_status(name=\"myrouter\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_router = Gcp.Compute.GetRouterStatus.Invoke(new()\n    {\n        Name = \"myrouter\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := compute.GetRouterStatus(ctx, \u0026compute.GetRouterStatusArgs{\n\t\t\tName: \"myrouter\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.compute.ComputeFunctions;\nimport com.pulumi.gcp.compute.inputs.GetRouterStatusArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-router = ComputeFunctions.getRouterStatus(GetRouterStatusArgs.builder()\n            .name(\"myrouter\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-router:\n    fn::invoke:\n      function: gcp:compute:getRouterStatus\n      arguments:\n        name: myrouter\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking RouterStatus.\n",
                 "properties": {
@@ -304651,7 +304651,7 @@
             }
         },
         "gcp:logging/getSink:getSink": {
-            "description": "Use this data source to get a project, folder, organization or billing account logging sink details.\nTo get more information about Service, see:\n\n[API documentation](https://cloud.google.com/logging/docs/reference/v2/rest/v2/sinks)\n\n## Example Usage\n\n### Retrieve Project Logging Sink Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst project-sink = gcp.logging.getSink({\n    id: \"projects/0123456789/sinks/my-sink-name\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nproject_sink = gcp.logging.get_sink(id=\"projects/0123456789/sinks/my-sink-name\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var project_sink = Gcp.Logging.GetSink.Invoke(new()\n    {\n        Id = \"projects/0123456789/sinks/my-sink-name\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/logging\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := logging.GetSink(ctx, \u0026logging.GetSinkArgs{\n\t\t\tId: \"projects/0123456789/sinks/my-sink-name\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.logging.LoggingFunctions;\nimport com.pulumi.gcp.logging.inputs.GetSinkArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var project-sink = LoggingFunctions.getSink(GetSinkArgs.builder()\n            .id(\"projects/0123456789/sinks/my-sink-name\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  project-sink:\n    fn::invoke:\n      function: gcp:logging:getSink\n      arguments:\n        id: projects/0123456789/sinks/my-sink-name\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Use this data source to get a project, folder, organization or billing account logging sink details.\nTo get more information about Service, see:\n\n[API documentation](https://cloud.google.com/logging/docs/reference/v2/rest/v2/sinks)\n\n## Example Usage\n\n### Retrieve Project Logging Sink Basic\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst project_sink = gcp.logging.getSink({\n    id: \"projects/0123456789/sinks/my-sink-name\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nproject_sink = gcp.logging.get_sink(id=\"projects/0123456789/sinks/my-sink-name\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var project_sink = Gcp.Logging.GetSink.Invoke(new()\n    {\n        Id = \"projects/0123456789/sinks/my-sink-name\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/logging\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := logging.GetSink(ctx, \u0026logging.GetSinkArgs{\n\t\t\tId: \"projects/0123456789/sinks/my-sink-name\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.logging.LoggingFunctions;\nimport com.pulumi.gcp.logging.inputs.GetSinkArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var project-sink = LoggingFunctions.getSink(GetSinkArgs.builder()\n            .id(\"projects/0123456789/sinks/my-sink-name\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  project-sink:\n    fn::invoke:\n      function: gcp:logging:getSink\n      arguments:\n        id: projects/0123456789/sinks/my-sink-name\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getSink.\n",
                 "properties": {
@@ -304794,7 +304794,7 @@
             }
         },
         "gcp:monitoring/getClusterIstioService:getClusterIstioService": {
-            "description": "A Monitoring Service is the root resource under which operational aspects of a\ngeneric service are accessible. A service is some discrete, autonomous, and\nnetwork-accessible unit, designed to solve an individual concern\n\nAn Cluster Istio monitoring service is automatically created by GCP to monitor\nCluster Istio services.\n\n\nTo get more information about Service, see:\n\n* [API documentation](https://cloud.google.com/monitoring/api/ref_v3/rest/v3/services)\n* How-to Guides\n    * [Service Monitoring](https://cloud.google.com/monitoring/service-monitoring)\n    * [Monitoring API Documentation](https://cloud.google.com/monitoring/api/v3/)\n\n## Example Usage\n\n### Monitoring Cluster Istio Service\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\n// Monitors the default ClusterIstio service\nconst default = gcp.monitoring.getClusterIstioService({\n    location: \"us-west2-a\",\n    clusterName: \"west\",\n    serviceNamespace: \"istio-system\",\n    serviceName: \"istio-policy\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\n# Monitors the default ClusterIstio service\ndefault = gcp.monitoring.get_cluster_istio_service(location=\"us-west2-a\",\n    cluster_name=\"west\",\n    service_namespace=\"istio-system\",\n    service_name=\"istio-policy\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    // Monitors the default ClusterIstio service\n    var @default = Gcp.Monitoring.GetClusterIstioService.Invoke(new()\n    {\n        Location = \"us-west2-a\",\n        ClusterName = \"west\",\n        ServiceNamespace = \"istio-system\",\n        ServiceName = \"istio-policy\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/monitoring\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t// Monitors the default ClusterIstio service\n\t\t_, err := monitoring.GetClusterIstioService(ctx, \u0026monitoring.GetClusterIstioServiceArgs{\n\t\t\tLocation:         \"us-west2-a\",\n\t\t\tClusterName:      \"west\",\n\t\t\tServiceNamespace: \"istio-system\",\n\t\t\tServiceName:      \"istio-policy\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.monitoring.MonitoringFunctions;\nimport com.pulumi.gcp.monitoring.inputs.GetClusterIstioServiceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        // Monitors the default ClusterIstio service\n        final var default = MonitoringFunctions.getClusterIstioService(GetClusterIstioServiceArgs.builder()\n            .location(\"us-west2-a\")\n            .clusterName(\"west\")\n            .serviceNamespace(\"istio-system\")\n            .serviceName(\"istio-policy\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  # Monitors the default ClusterIstio service\n  default:\n    fn::invoke:\n      function: gcp:monitoring:getClusterIstioService\n      arguments:\n        location: us-west2-a\n        clusterName: west\n        serviceNamespace: istio-system\n        serviceName: istio-policy\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "A Monitoring Service is the root resource under which operational aspects of a\ngeneric service are accessible. A service is some discrete, autonomous, and\nnetwork-accessible unit, designed to solve an individual concern\n\nAn Cluster Istio monitoring service is automatically created by GCP to monitor\nCluster Istio services.\n\n\nTo get more information about Service, see:\n\n* [API documentation](https://cloud.google.com/monitoring/api/ref_v3/rest/v3/services)\n* How-to Guides\n    * [Service Monitoring](https://cloud.google.com/monitoring/service-monitoring)\n    * [Monitoring API Documentation](https://cloud.google.com/monitoring/api/v3/)\n\n## Example Usage\n\n### Monitoring Cluster Istio Service\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\n// Monitors the default ClusterIstio service\nconst _default = gcp.monitoring.getClusterIstioService({\n    location: \"us-west2-a\",\n    clusterName: \"west\",\n    serviceNamespace: \"istio-system\",\n    serviceName: \"istio-policy\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\n# Monitors the default ClusterIstio service\ndefault = gcp.monitoring.get_cluster_istio_service(location=\"us-west2-a\",\n    cluster_name=\"west\",\n    service_namespace=\"istio-system\",\n    service_name=\"istio-policy\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    // Monitors the default ClusterIstio service\n    var @default = Gcp.Monitoring.GetClusterIstioService.Invoke(new()\n    {\n        Location = \"us-west2-a\",\n        ClusterName = \"west\",\n        ServiceNamespace = \"istio-system\",\n        ServiceName = \"istio-policy\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/monitoring\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t// Monitors the default ClusterIstio service\n\t\t_, err := monitoring.GetClusterIstioService(ctx, \u0026monitoring.GetClusterIstioServiceArgs{\n\t\t\tLocation:         \"us-west2-a\",\n\t\t\tClusterName:      \"west\",\n\t\t\tServiceNamespace: \"istio-system\",\n\t\t\tServiceName:      \"istio-policy\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.monitoring.MonitoringFunctions;\nimport com.pulumi.gcp.monitoring.inputs.GetClusterIstioServiceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        // Monitors the default ClusterIstio service\n        final var default = MonitoringFunctions.getClusterIstioService(GetClusterIstioServiceArgs.builder()\n            .location(\"us-west2-a\")\n            .clusterName(\"west\")\n            .serviceNamespace(\"istio-system\")\n            .serviceName(\"istio-policy\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  # Monitors the default ClusterIstio service\n  default:\n    fn::invoke:\n      function: gcp:monitoring:getClusterIstioService\n      arguments:\n        location: us-west2-a\n        clusterName: west\n        serviceNamespace: istio-system\n        serviceName: istio-policy\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getClusterIstioService.\n",
                 "properties": {
@@ -304890,7 +304890,7 @@
             }
         },
         "gcp:monitoring/getIstioCanonicalService:getIstioCanonicalService": {
-            "description": "A Monitoring Service is the root resource under which operational aspects of a\ngeneric service are accessible. A service is some discrete, autonomous, and\nnetwork-accessible unit, designed to solve an individual concern\n\nA monitoring Istio Canonical Service is automatically created by GCP to monitor\nIstio Canonical Services.\n\n\nTo get more information about Service, see:\n\n* [API documentation](https://cloud.google.com/monitoring/api/ref_v3/rest/v3/services)\n* How-to Guides\n    * [Service Monitoring](https://cloud.google.com/monitoring/service-monitoring)\n    * [Monitoring API Documentation](https://cloud.google.com/monitoring/api/v3/)\n\n## Example Usage\n\n### Monitoring Istio Canonical Service\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\n// Monitors the default MeshIstio service\nconst default = gcp.monitoring.getIstioCanonicalService({\n    meshUid: \"proj-573164786102\",\n    canonicalServiceNamespace: \"istio-system\",\n    canonicalService: \"prometheus\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\n# Monitors the default MeshIstio service\ndefault = gcp.monitoring.get_istio_canonical_service(mesh_uid=\"proj-573164786102\",\n    canonical_service_namespace=\"istio-system\",\n    canonical_service=\"prometheus\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    // Monitors the default MeshIstio service\n    var @default = Gcp.Monitoring.GetIstioCanonicalService.Invoke(new()\n    {\n        MeshUid = \"proj-573164786102\",\n        CanonicalServiceNamespace = \"istio-system\",\n        CanonicalService = \"prometheus\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/monitoring\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t// Monitors the default MeshIstio service\n\t\t_, err := monitoring.GetIstioCanonicalService(ctx, \u0026monitoring.GetIstioCanonicalServiceArgs{\n\t\t\tMeshUid:                   \"proj-573164786102\",\n\t\t\tCanonicalServiceNamespace: \"istio-system\",\n\t\t\tCanonicalService:          \"prometheus\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.monitoring.MonitoringFunctions;\nimport com.pulumi.gcp.monitoring.inputs.GetIstioCanonicalServiceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        // Monitors the default MeshIstio service\n        final var default = MonitoringFunctions.getIstioCanonicalService(GetIstioCanonicalServiceArgs.builder()\n            .meshUid(\"proj-573164786102\")\n            .canonicalServiceNamespace(\"istio-system\")\n            .canonicalService(\"prometheus\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  # Monitors the default MeshIstio service\n  default:\n    fn::invoke:\n      function: gcp:monitoring:getIstioCanonicalService\n      arguments:\n        meshUid: proj-573164786102\n        canonicalServiceNamespace: istio-system\n        canonicalService: prometheus\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "A Monitoring Service is the root resource under which operational aspects of a\ngeneric service are accessible. A service is some discrete, autonomous, and\nnetwork-accessible unit, designed to solve an individual concern\n\nA monitoring Istio Canonical Service is automatically created by GCP to monitor\nIstio Canonical Services.\n\n\nTo get more information about Service, see:\n\n* [API documentation](https://cloud.google.com/monitoring/api/ref_v3/rest/v3/services)\n* How-to Guides\n    * [Service Monitoring](https://cloud.google.com/monitoring/service-monitoring)\n    * [Monitoring API Documentation](https://cloud.google.com/monitoring/api/v3/)\n\n## Example Usage\n\n### Monitoring Istio Canonical Service\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\n// Monitors the default MeshIstio service\nconst _default = gcp.monitoring.getIstioCanonicalService({\n    meshUid: \"proj-573164786102\",\n    canonicalServiceNamespace: \"istio-system\",\n    canonicalService: \"prometheus\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\n# Monitors the default MeshIstio service\ndefault = gcp.monitoring.get_istio_canonical_service(mesh_uid=\"proj-573164786102\",\n    canonical_service_namespace=\"istio-system\",\n    canonical_service=\"prometheus\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    // Monitors the default MeshIstio service\n    var @default = Gcp.Monitoring.GetIstioCanonicalService.Invoke(new()\n    {\n        MeshUid = \"proj-573164786102\",\n        CanonicalServiceNamespace = \"istio-system\",\n        CanonicalService = \"prometheus\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/monitoring\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t// Monitors the default MeshIstio service\n\t\t_, err := monitoring.GetIstioCanonicalService(ctx, \u0026monitoring.GetIstioCanonicalServiceArgs{\n\t\t\tMeshUid:                   \"proj-573164786102\",\n\t\t\tCanonicalServiceNamespace: \"istio-system\",\n\t\t\tCanonicalService:          \"prometheus\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.monitoring.MonitoringFunctions;\nimport com.pulumi.gcp.monitoring.inputs.GetIstioCanonicalServiceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        // Monitors the default MeshIstio service\n        final var default = MonitoringFunctions.getIstioCanonicalService(GetIstioCanonicalServiceArgs.builder()\n            .meshUid(\"proj-573164786102\")\n            .canonicalServiceNamespace(\"istio-system\")\n            .canonicalService(\"prometheus\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  # Monitors the default MeshIstio service\n  default:\n    fn::invoke:\n      function: gcp:monitoring:getIstioCanonicalService\n      arguments:\n        meshUid: proj-573164786102\n        canonicalServiceNamespace: istio-system\n        canonicalService: prometheus\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getIstioCanonicalService.\n",
                 "properties": {
@@ -304977,7 +304977,7 @@
             }
         },
         "gcp:monitoring/getMeshIstioService:getMeshIstioService": {
-            "description": "A Monitoring Service is the root resource under which operational aspects of a\ngeneric service are accessible. A service is some discrete, autonomous, and\nnetwork-accessible unit, designed to solve an individual concern\n\nAn Mesh Istio monitoring service is automatically created by GCP to monitor\nMesh Istio services.\n\n\nTo get more information about Service, see:\n\n* [API documentation](https://cloud.google.com/monitoring/api/ref_v3/rest/v3/services)\n* How-to Guides\n    * [Service Monitoring](https://cloud.google.com/monitoring/service-monitoring)\n    * [Monitoring API Documentation](https://cloud.google.com/monitoring/api/v3/)\n\n## Example Usage\n\n### Monitoring Mesh Istio Service\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\n// Monitors the default MeshIstio service\nconst default = gcp.monitoring.getMeshIstioService({\n    meshUid: \"proj-573164786102\",\n    serviceNamespace: \"istio-system\",\n    serviceName: \"prometheus\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\n# Monitors the default MeshIstio service\ndefault = gcp.monitoring.get_mesh_istio_service(mesh_uid=\"proj-573164786102\",\n    service_namespace=\"istio-system\",\n    service_name=\"prometheus\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    // Monitors the default MeshIstio service\n    var @default = Gcp.Monitoring.GetMeshIstioService.Invoke(new()\n    {\n        MeshUid = \"proj-573164786102\",\n        ServiceNamespace = \"istio-system\",\n        ServiceName = \"prometheus\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/monitoring\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t// Monitors the default MeshIstio service\n\t\t_, err := monitoring.GetMeshIstioService(ctx, \u0026monitoring.GetMeshIstioServiceArgs{\n\t\t\tMeshUid:          \"proj-573164786102\",\n\t\t\tServiceNamespace: \"istio-system\",\n\t\t\tServiceName:      \"prometheus\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.monitoring.MonitoringFunctions;\nimport com.pulumi.gcp.monitoring.inputs.GetMeshIstioServiceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        // Monitors the default MeshIstio service\n        final var default = MonitoringFunctions.getMeshIstioService(GetMeshIstioServiceArgs.builder()\n            .meshUid(\"proj-573164786102\")\n            .serviceNamespace(\"istio-system\")\n            .serviceName(\"prometheus\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  # Monitors the default MeshIstio service\n  default:\n    fn::invoke:\n      function: gcp:monitoring:getMeshIstioService\n      arguments:\n        meshUid: proj-573164786102\n        serviceNamespace: istio-system\n        serviceName: prometheus\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "A Monitoring Service is the root resource under which operational aspects of a\ngeneric service are accessible. A service is some discrete, autonomous, and\nnetwork-accessible unit, designed to solve an individual concern\n\nAn Mesh Istio monitoring service is automatically created by GCP to monitor\nMesh Istio services.\n\n\nTo get more information about Service, see:\n\n* [API documentation](https://cloud.google.com/monitoring/api/ref_v3/rest/v3/services)\n* How-to Guides\n    * [Service Monitoring](https://cloud.google.com/monitoring/service-monitoring)\n    * [Monitoring API Documentation](https://cloud.google.com/monitoring/api/v3/)\n\n## Example Usage\n\n### Monitoring Mesh Istio Service\n\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\n// Monitors the default MeshIstio service\nconst _default = gcp.monitoring.getMeshIstioService({\n    meshUid: \"proj-573164786102\",\n    serviceNamespace: \"istio-system\",\n    serviceName: \"prometheus\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\n# Monitors the default MeshIstio service\ndefault = gcp.monitoring.get_mesh_istio_service(mesh_uid=\"proj-573164786102\",\n    service_namespace=\"istio-system\",\n    service_name=\"prometheus\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    // Monitors the default MeshIstio service\n    var @default = Gcp.Monitoring.GetMeshIstioService.Invoke(new()\n    {\n        MeshUid = \"proj-573164786102\",\n        ServiceNamespace = \"istio-system\",\n        ServiceName = \"prometheus\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/monitoring\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t// Monitors the default MeshIstio service\n\t\t_, err := monitoring.GetMeshIstioService(ctx, \u0026monitoring.GetMeshIstioServiceArgs{\n\t\t\tMeshUid:          \"proj-573164786102\",\n\t\t\tServiceNamespace: \"istio-system\",\n\t\t\tServiceName:      \"prometheus\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.monitoring.MonitoringFunctions;\nimport com.pulumi.gcp.monitoring.inputs.GetMeshIstioServiceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        // Monitors the default MeshIstio service\n        final var default = MonitoringFunctions.getMeshIstioService(GetMeshIstioServiceArgs.builder()\n            .meshUid(\"proj-573164786102\")\n            .serviceNamespace(\"istio-system\")\n            .serviceName(\"prometheus\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  # Monitors the default MeshIstio service\n  default:\n    fn::invoke:\n      function: gcp:monitoring:getMeshIstioService\n      arguments:\n        meshUid: proj-573164786102\n        serviceNamespace: istio-system\n        serviceName: prometheus\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getMeshIstioService.\n",
                 "properties": {
@@ -305459,7 +305459,7 @@
             }
         },
         "gcp:oracledatabase/getAutonomousDatabase:getAutonomousDatabase": {
-            "description": "Get information about an AutonomousDatabase.\n\nFor more information see the\n[API](https://cloud.google.com/oracle/database/docs/reference/rest/v1/projects.locations.autonomousDatabases).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-instance = gcp.oracledatabase.getAutonomousDatabase({\n    location: \"us-east4\",\n    autonomousDatabaseId: \"autonomous_database_id\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_instance = gcp.oracledatabase.get_autonomous_database(location=\"us-east4\",\n    autonomous_database_id=\"autonomous_database_id\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_instance = Gcp.OracleDatabase.GetAutonomousDatabase.Invoke(new()\n    {\n        Location = \"us-east4\",\n        AutonomousDatabaseId = \"autonomous_database_id\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/oracledatabase\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := oracledatabase.LookupAutonomousDatabase(ctx, \u0026oracledatabase.LookupAutonomousDatabaseArgs{\n\t\t\tLocation:             \"us-east4\",\n\t\t\tAutonomousDatabaseId: \"autonomous_database_id\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.oracledatabase.OracledatabaseFunctions;\nimport com.pulumi.gcp.oracledatabase.inputs.GetAutonomousDatabaseArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-instance = OracledatabaseFunctions.getAutonomousDatabase(GetAutonomousDatabaseArgs.builder()\n            .location(\"us-east4\")\n            .autonomousDatabaseId(\"autonomous_database_id\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-instance:\n    fn::invoke:\n      function: gcp:oracledatabase:getAutonomousDatabase\n      arguments:\n        location: us-east4\n        autonomousDatabaseId: autonomous_database_id\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get information about an AutonomousDatabase.\n\nFor more information see the\n[API](https://cloud.google.com/oracle/database/docs/reference/rest/v1/projects.locations.autonomousDatabases).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_instance = gcp.oracledatabase.getAutonomousDatabase({\n    location: \"us-east4\",\n    autonomousDatabaseId: \"autonomous_database_id\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_instance = gcp.oracledatabase.get_autonomous_database(location=\"us-east4\",\n    autonomous_database_id=\"autonomous_database_id\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_instance = Gcp.OracleDatabase.GetAutonomousDatabase.Invoke(new()\n    {\n        Location = \"us-east4\",\n        AutonomousDatabaseId = \"autonomous_database_id\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/oracledatabase\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := oracledatabase.LookupAutonomousDatabase(ctx, \u0026oracledatabase.LookupAutonomousDatabaseArgs{\n\t\t\tLocation:             \"us-east4\",\n\t\t\tAutonomousDatabaseId: \"autonomous_database_id\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.oracledatabase.OracledatabaseFunctions;\nimport com.pulumi.gcp.oracledatabase.inputs.GetAutonomousDatabaseArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-instance = OracledatabaseFunctions.getAutonomousDatabase(GetAutonomousDatabaseArgs.builder()\n            .location(\"us-east4\")\n            .autonomousDatabaseId(\"autonomous_database_id\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-instance:\n    fn::invoke:\n      function: gcp:oracledatabase:getAutonomousDatabase\n      arguments:\n        location: us-east4\n        autonomousDatabaseId: autonomous_database_id\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getAutonomousDatabase.\n",
                 "properties": {
@@ -305574,7 +305574,7 @@
             }
         },
         "gcp:oracledatabase/getAutonomousDatabases:getAutonomousDatabases": {
-            "description": "List all AutonomousDatabases.\n\nFor more information see the\n[API](https://cloud.google.com/oracle/database/docs/reference/rest/v1/projects.locations.autonomousDatabases).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-adbs = gcp.oracledatabase.getAutonomousDatabases({\n    location: \"us-east4\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_adbs = gcp.oracledatabase.get_autonomous_databases(location=\"us-east4\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_adbs = Gcp.OracleDatabase.GetAutonomousDatabases.Invoke(new()\n    {\n        Location = \"us-east4\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/oracledatabase\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := oracledatabase.GetAutonomousDatabases(ctx, \u0026oracledatabase.GetAutonomousDatabasesArgs{\n\t\t\tLocation: \"us-east4\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.oracledatabase.OracledatabaseFunctions;\nimport com.pulumi.gcp.oracledatabase.inputs.GetAutonomousDatabasesArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-adbs = OracledatabaseFunctions.getAutonomousDatabases(GetAutonomousDatabasesArgs.builder()\n            .location(\"us-east4\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-adbs:\n    fn::invoke:\n      function: gcp:oracledatabase:getAutonomousDatabases\n      arguments:\n        location: us-east4\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "List all AutonomousDatabases.\n\nFor more information see the\n[API](https://cloud.google.com/oracle/database/docs/reference/rest/v1/projects.locations.autonomousDatabases).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_adbs = gcp.oracledatabase.getAutonomousDatabases({\n    location: \"us-east4\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_adbs = gcp.oracledatabase.get_autonomous_databases(location=\"us-east4\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_adbs = Gcp.OracleDatabase.GetAutonomousDatabases.Invoke(new()\n    {\n        Location = \"us-east4\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/oracledatabase\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := oracledatabase.GetAutonomousDatabases(ctx, \u0026oracledatabase.GetAutonomousDatabasesArgs{\n\t\t\tLocation: \"us-east4\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.oracledatabase.OracledatabaseFunctions;\nimport com.pulumi.gcp.oracledatabase.inputs.GetAutonomousDatabasesArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-adbs = OracledatabaseFunctions.getAutonomousDatabases(GetAutonomousDatabasesArgs.builder()\n            .location(\"us-east4\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-adbs:\n    fn::invoke:\n      function: gcp:oracledatabase:getAutonomousDatabases\n      arguments:\n        location: us-east4\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getAutonomousDatabases.\n",
                 "properties": {
@@ -305621,7 +305621,7 @@
             }
         },
         "gcp:oracledatabase/getCloudExadataInfrastructure:getCloudExadataInfrastructure": {
-            "description": "Get information about an ExadataInfrastructure.\n\nFor more information see the\n[API](https://cloud.google.com/oracle/database/docs/reference/rest/v1/projects.locations.cloudExadataInfrastructures).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-instance = gcp.oracledatabase.getCloudExadataInfrastructure({\n    location: \"us-east4\",\n    cloudExadataInfrastructureId: \"exadata-id\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_instance = gcp.oracledatabase.get_cloud_exadata_infrastructure(location=\"us-east4\",\n    cloud_exadata_infrastructure_id=\"exadata-id\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_instance = Gcp.OracleDatabase.GetCloudExadataInfrastructure.Invoke(new()\n    {\n        Location = \"us-east4\",\n        CloudExadataInfrastructureId = \"exadata-id\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/oracledatabase\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := oracledatabase.LookupCloudExadataInfrastructure(ctx, \u0026oracledatabase.LookupCloudExadataInfrastructureArgs{\n\t\t\tLocation:                     \"us-east4\",\n\t\t\tCloudExadataInfrastructureId: \"exadata-id\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.oracledatabase.OracledatabaseFunctions;\nimport com.pulumi.gcp.oracledatabase.inputs.GetCloudExadataInfrastructureArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-instance = OracledatabaseFunctions.getCloudExadataInfrastructure(GetCloudExadataInfrastructureArgs.builder()\n            .location(\"us-east4\")\n            .cloudExadataInfrastructureId(\"exadata-id\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-instance:\n    fn::invoke:\n      function: gcp:oracledatabase:getCloudExadataInfrastructure\n      arguments:\n        location: us-east4\n        cloudExadataInfrastructureId: exadata-id\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get information about an ExadataInfrastructure.\n\nFor more information see the\n[API](https://cloud.google.com/oracle/database/docs/reference/rest/v1/projects.locations.cloudExadataInfrastructures).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_instance = gcp.oracledatabase.getCloudExadataInfrastructure({\n    location: \"us-east4\",\n    cloudExadataInfrastructureId: \"exadata-id\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_instance = gcp.oracledatabase.get_cloud_exadata_infrastructure(location=\"us-east4\",\n    cloud_exadata_infrastructure_id=\"exadata-id\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_instance = Gcp.OracleDatabase.GetCloudExadataInfrastructure.Invoke(new()\n    {\n        Location = \"us-east4\",\n        CloudExadataInfrastructureId = \"exadata-id\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/oracledatabase\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := oracledatabase.LookupCloudExadataInfrastructure(ctx, \u0026oracledatabase.LookupCloudExadataInfrastructureArgs{\n\t\t\tLocation:                     \"us-east4\",\n\t\t\tCloudExadataInfrastructureId: \"exadata-id\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.oracledatabase.OracledatabaseFunctions;\nimport com.pulumi.gcp.oracledatabase.inputs.GetCloudExadataInfrastructureArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-instance = OracledatabaseFunctions.getCloudExadataInfrastructure(GetCloudExadataInfrastructureArgs.builder()\n            .location(\"us-east4\")\n            .cloudExadataInfrastructureId(\"exadata-id\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-instance:\n    fn::invoke:\n      function: gcp:oracledatabase:getCloudExadataInfrastructure\n      arguments:\n        location: us-east4\n        cloudExadataInfrastructureId: exadata-id\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getCloudExadataInfrastructure.\n",
                 "properties": {
@@ -305771,7 +305771,7 @@
             }
         },
         "gcp:oracledatabase/getCloudVmCluster:getCloudVmCluster": {
-            "description": "Get information about a CloudVmCluster.\n\nFor more information see the\n[API](https://cloud.google.com/oracle/database/docs/reference/rest/v1/projects.locations.cloudVmClusters).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-vmcluster = gcp.oracledatabase.getCloudVmCluster({\n    location: \"us-east4\",\n    cloudVmClusterId: \"vmcluster-id\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_vmcluster = gcp.oracledatabase.get_cloud_vm_cluster(location=\"us-east4\",\n    cloud_vm_cluster_id=\"vmcluster-id\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_vmcluster = Gcp.OracleDatabase.GetCloudVmCluster.Invoke(new()\n    {\n        Location = \"us-east4\",\n        CloudVmClusterId = \"vmcluster-id\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/oracledatabase\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := oracledatabase.LookupCloudVmCluster(ctx, \u0026oracledatabase.LookupCloudVmClusterArgs{\n\t\t\tLocation:         \"us-east4\",\n\t\t\tCloudVmClusterId: \"vmcluster-id\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.oracledatabase.OracledatabaseFunctions;\nimport com.pulumi.gcp.oracledatabase.inputs.GetCloudVmClusterArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-vmcluster = OracledatabaseFunctions.getCloudVmCluster(GetCloudVmClusterArgs.builder()\n            .location(\"us-east4\")\n            .cloudVmClusterId(\"vmcluster-id\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-vmcluster:\n    fn::invoke:\n      function: gcp:oracledatabase:getCloudVmCluster\n      arguments:\n        location: us-east4\n        cloudVmClusterId: vmcluster-id\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get information about a CloudVmCluster.\n\nFor more information see the\n[API](https://cloud.google.com/oracle/database/docs/reference/rest/v1/projects.locations.cloudVmClusters).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_vmcluster = gcp.oracledatabase.getCloudVmCluster({\n    location: \"us-east4\",\n    cloudVmClusterId: \"vmcluster-id\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_vmcluster = gcp.oracledatabase.get_cloud_vm_cluster(location=\"us-east4\",\n    cloud_vm_cluster_id=\"vmcluster-id\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_vmcluster = Gcp.OracleDatabase.GetCloudVmCluster.Invoke(new()\n    {\n        Location = \"us-east4\",\n        CloudVmClusterId = \"vmcluster-id\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/oracledatabase\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := oracledatabase.LookupCloudVmCluster(ctx, \u0026oracledatabase.LookupCloudVmClusterArgs{\n\t\t\tLocation:         \"us-east4\",\n\t\t\tCloudVmClusterId: \"vmcluster-id\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.oracledatabase.OracledatabaseFunctions;\nimport com.pulumi.gcp.oracledatabase.inputs.GetCloudVmClusterArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-vmcluster = OracledatabaseFunctions.getCloudVmCluster(GetCloudVmClusterArgs.builder()\n            .location(\"us-east4\")\n            .cloudVmClusterId(\"vmcluster-id\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-vmcluster:\n    fn::invoke:\n      function: gcp:oracledatabase:getCloudVmCluster\n      arguments:\n        location: us-east4\n        cloudVmClusterId: vmcluster-id\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getCloudVmCluster.\n",
                 "properties": {
@@ -306306,7 +306306,7 @@
             }
         },
         "gcp:organizations/getFolders:getFolders": {
-            "description": "Retrieve information about a set of folders based on a parent ID. See the\n[REST API](https://cloud.google.com/resource-manager/reference/rest/v3/folders/list)\nfor more details.\n\n## Example Usage\n\n### Searching For Folders At The Root Of An Org\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-org-folders = gcp.organizations.getFolders({\n    parentId: `organizations/${organizationId}`,\n});\nconst first-folder = my_org_folders.then(my_org_folders =\u003e gcp.organizations.getFolder({\n    folder: my_org_folders.folders?.[0]?.name,\n}));\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_org_folders = gcp.organizations.get_folders(parent_id=f\"organizations/{organization_id}\")\nfirst_folder = gcp.organizations.get_folder(folder=my_org_folders.folders[0].name)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_org_folders = Gcp.Organizations.GetFolders.Invoke(new()\n    {\n        ParentId = $\"organizations/{organizationId}\",\n    });\n\n    var first_folder = Gcp.Organizations.GetFolder.Invoke(new()\n    {\n        Folder = my_org_folders.Apply(getFoldersResult =\u003e getFoldersResult.Folders[0]?.Name),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmy_org_folders, err := organizations.GetFolders(ctx, \u0026organizations.GetFoldersArgs{\n\t\t\tParentId: fmt.Sprintf(\"organizations/%v\", organizationId),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = organizations.LookupFolder(ctx, \u0026organizations.LookupFolderArgs{\n\t\t\tFolder: my_org_folders.Folders[0].Name,\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetFoldersArgs;\nimport com.pulumi.gcp.organizations.inputs.GetFolderArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-org-folders = OrganizationsFunctions.getFolders(GetFoldersArgs.builder()\n            .parentId(String.format(\"organizations/%s\", organizationId))\n            .build());\n\n        final var first-folder = OrganizationsFunctions.getFolder(GetFolderArgs.builder()\n            .folder(my_org_folders.folders()[0].name())\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-org-folders:\n    fn::invoke:\n      function: gcp:organizations:getFolders\n      arguments:\n        parentId: organizations/${organizationId}\n  first-folder:\n    fn::invoke:\n      function: gcp:organizations:getFolder\n      arguments:\n        folder: ${[\"my-org-folders\"].folders[0].name}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Retrieve information about a set of folders based on a parent ID. See the\n[REST API](https://cloud.google.com/resource-manager/reference/rest/v3/folders/list)\nfor more details.\n\n## Example Usage\n\n### Searching For Folders At The Root Of An Org\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_org_folders = gcp.organizations.getFolders({\n    parentId: `organizations/${organizationId}`,\n});\nconst first_folder = my_org_folders.then(my_org_folders =\u003e gcp.organizations.getFolder({\n    folder: my_org_folders.folders?.[0]?.name,\n}));\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_org_folders = gcp.organizations.get_folders(parent_id=f\"organizations/{organization_id}\")\nfirst_folder = gcp.organizations.get_folder(folder=my_org_folders.folders[0].name)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_org_folders = Gcp.Organizations.GetFolders.Invoke(new()\n    {\n        ParentId = $\"organizations/{organizationId}\",\n    });\n\n    var first_folder = Gcp.Organizations.GetFolder.Invoke(new()\n    {\n        Folder = my_org_folders.Apply(getFoldersResult =\u003e getFoldersResult.Folders[0]?.Name),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmy_org_folders, err := organizations.GetFolders(ctx, \u0026organizations.GetFoldersArgs{\n\t\t\tParentId: fmt.Sprintf(\"organizations/%v\", organizationId),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = organizations.LookupFolder(ctx, \u0026organizations.LookupFolderArgs{\n\t\t\tFolder: my_org_folders.Folders[0].Name,\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetFoldersArgs;\nimport com.pulumi.gcp.organizations.inputs.GetFolderArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-org-folders = OrganizationsFunctions.getFolders(GetFoldersArgs.builder()\n            .parentId(String.format(\"organizations/%s\", organizationId))\n            .build());\n\n        final var first-folder = OrganizationsFunctions.getFolder(GetFolderArgs.builder()\n            .folder(my_org_folders.folders()[0].name())\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-org-folders:\n    fn::invoke:\n      function: gcp:organizations:getFolders\n      arguments:\n        parentId: organizations/${organizationId}\n  first-folder:\n    fn::invoke:\n      function: gcp:organizations:getFolder\n      arguments:\n        folder: ${[\"my-org-folders\"].folders[0].name}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getFolders.\n",
                 "properties": {
@@ -306550,7 +306550,7 @@
             }
         },
         "gcp:privilegedaccessmanager/getEntitlement:getEntitlement": {
-            "description": "Use this data source to get information about a Google Cloud Privileged Access Manager Entitlement.\n\nTo get more information about Privileged Access Manager, see:\n\n* [API Documentation](https://cloud.google.com/iam/docs/reference/pam/rest)\n* How-to guides\n  * [Official documentation](https://cloud.google.com/iam/docs/pam-overview)\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-entitlement = gcp.privilegedaccessmanager.getEntitlement({\n    parent: \"projects/my-project\",\n    location: \"global\",\n    entitlementId: \"my-entitlement\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_entitlement = gcp.privilegedaccessmanager.get_entitlement(parent=\"projects/my-project\",\n    location=\"global\",\n    entitlement_id=\"my-entitlement\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_entitlement = Gcp.PrivilegedAccessManager.GetEntitlement.Invoke(new()\n    {\n        Parent = \"projects/my-project\",\n        Location = \"global\",\n        EntitlementId = \"my-entitlement\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/privilegedaccessmanager\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := privilegedaccessmanager.LookupEntitlement(ctx, \u0026privilegedaccessmanager.LookupEntitlementArgs{\n\t\t\tParent:        pulumi.StringRef(\"projects/my-project\"),\n\t\t\tLocation:      pulumi.StringRef(\"global\"),\n\t\t\tEntitlementId: pulumi.StringRef(\"my-entitlement\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.privilegedaccessmanager.PrivilegedaccessmanagerFunctions;\nimport com.pulumi.gcp.privilegedaccessmanager.inputs.GetEntitlementArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-entitlement = PrivilegedaccessmanagerFunctions.getEntitlement(GetEntitlementArgs.builder()\n            .parent(\"projects/my-project\")\n            .location(\"global\")\n            .entitlementId(\"my-entitlement\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-entitlement:\n    fn::invoke:\n      function: gcp:privilegedaccessmanager:getEntitlement\n      arguments:\n        parent: projects/my-project\n        location: global\n        entitlementId: my-entitlement\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Use this data source to get information about a Google Cloud Privileged Access Manager Entitlement.\n\nTo get more information about Privileged Access Manager, see:\n\n* [API Documentation](https://cloud.google.com/iam/docs/reference/pam/rest)\n* How-to guides\n  * [Official documentation](https://cloud.google.com/iam/docs/pam-overview)\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_entitlement = gcp.privilegedaccessmanager.getEntitlement({\n    parent: \"projects/my-project\",\n    location: \"global\",\n    entitlementId: \"my-entitlement\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_entitlement = gcp.privilegedaccessmanager.get_entitlement(parent=\"projects/my-project\",\n    location=\"global\",\n    entitlement_id=\"my-entitlement\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_entitlement = Gcp.PrivilegedAccessManager.GetEntitlement.Invoke(new()\n    {\n        Parent = \"projects/my-project\",\n        Location = \"global\",\n        EntitlementId = \"my-entitlement\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/privilegedaccessmanager\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := privilegedaccessmanager.LookupEntitlement(ctx, \u0026privilegedaccessmanager.LookupEntitlementArgs{\n\t\t\tParent:        pulumi.StringRef(\"projects/my-project\"),\n\t\t\tLocation:      pulumi.StringRef(\"global\"),\n\t\t\tEntitlementId: pulumi.StringRef(\"my-entitlement\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.privilegedaccessmanager.PrivilegedaccessmanagerFunctions;\nimport com.pulumi.gcp.privilegedaccessmanager.inputs.GetEntitlementArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-entitlement = PrivilegedaccessmanagerFunctions.getEntitlement(GetEntitlementArgs.builder()\n            .parent(\"projects/my-project\")\n            .location(\"global\")\n            .entitlementId(\"my-entitlement\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-entitlement:\n    fn::invoke:\n      function: gcp:privilegedaccessmanager:getEntitlement\n      arguments:\n        parent: projects/my-project\n        location: global\n        entitlementId: my-entitlement\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getEntitlement.\n",
                 "properties": {
@@ -306771,7 +306771,7 @@
             }
         },
         "gcp:projects/getProject:getProject": {
-            "description": "Retrieve information about a set of projects based on a filter. See the\n[REST API](https://cloud.google.com/resource-manager/reference/rest/v1/projects/list)\nfor more details.\n\n## Example Usage\n\n### Searching For Projects About To Be Deleted In An Org\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-org-projects = gcp.projects.getProject({\n    filter: \"parent.id:012345678910 lifecycleState:DELETE_REQUESTED\",\n});\nconst deletion-candidate = my_org_projects.then(my_org_projects =\u003e gcp.organizations.getProject({\n    projectId: my_org_projects.projects?.[0]?.projectId,\n}));\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_org_projects = gcp.projects.get_project(filter=\"parent.id:012345678910 lifecycleState:DELETE_REQUESTED\")\ndeletion_candidate = gcp.organizations.get_project(project_id=my_org_projects.projects[0].project_id)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_org_projects = Gcp.Projects.GetProject.Invoke(new()\n    {\n        Filter = \"parent.id:012345678910 lifecycleState:DELETE_REQUESTED\",\n    });\n\n    var deletion_candidate = Gcp.Organizations.GetProject.Invoke(new()\n    {\n        ProjectId = my_org_projects.Apply(getProjectResult =\u003e getProjectResult.Projects[0]?.ProjectId),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmy_org_projects, err := projects.GetProject(ctx, \u0026projects.GetProjectArgs{\n\t\t\tFilter: \"parent.id:012345678910 lifecycleState:DELETE_REQUESTED\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = organizations.LookupProject(ctx, \u0026organizations.LookupProjectArgs{\n\t\t\tProjectId: pulumi.StringRef(my_org_projects.Projects[0].ProjectId),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.projects.ProjectsFunctions;\nimport com.pulumi.gcp.projects.inputs.GetProjectArgs;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetProjectArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-org-projects = ProjectsFunctions.getProject(GetProjectArgs.builder()\n            .filter(\"parent.id:012345678910 lifecycleState:DELETE_REQUESTED\")\n            .build());\n\n        final var deletion-candidate = OrganizationsFunctions.getProject(GetProjectArgs.builder()\n            .projectId(my_org_projects.projects()[0].projectId())\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-org-projects:\n    fn::invoke:\n      function: gcp:projects:getProject\n      arguments:\n        filter: parent.id:012345678910 lifecycleState:DELETE_REQUESTED\n  deletion-candidate:\n    fn::invoke:\n      function: gcp:organizations:getProject\n      arguments:\n        projectId: ${[\"my-org-projects\"].projects[0].projectId}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Retrieve information about a set of projects based on a filter. See the\n[REST API](https://cloud.google.com/resource-manager/reference/rest/v1/projects/list)\nfor more details.\n\n## Example Usage\n\n### Searching For Projects About To Be Deleted In An Org\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_org_projects = gcp.projects.getProject({\n    filter: \"parent.id:012345678910 lifecycleState:DELETE_REQUESTED\",\n});\nconst deletion_candidate = my_org_projects.then(my_org_projects =\u003e gcp.organizations.getProject({\n    projectId: my_org_projects.projects?.[0]?.projectId,\n}));\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_org_projects = gcp.projects.get_project(filter=\"parent.id:012345678910 lifecycleState:DELETE_REQUESTED\")\ndeletion_candidate = gcp.organizations.get_project(project_id=my_org_projects.projects[0].project_id)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_org_projects = Gcp.Projects.GetProject.Invoke(new()\n    {\n        Filter = \"parent.id:012345678910 lifecycleState:DELETE_REQUESTED\",\n    });\n\n    var deletion_candidate = Gcp.Organizations.GetProject.Invoke(new()\n    {\n        ProjectId = my_org_projects.Apply(getProjectResult =\u003e getProjectResult.Projects[0]?.ProjectId),\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmy_org_projects, err := projects.GetProject(ctx, \u0026projects.GetProjectArgs{\n\t\t\tFilter: \"parent.id:012345678910 lifecycleState:DELETE_REQUESTED\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = organizations.LookupProject(ctx, \u0026organizations.LookupProjectArgs{\n\t\t\tProjectId: pulumi.StringRef(my_org_projects.Projects[0].ProjectId),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.projects.ProjectsFunctions;\nimport com.pulumi.gcp.projects.inputs.GetProjectArgs;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.organizations.inputs.GetProjectArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-org-projects = ProjectsFunctions.getProject(GetProjectArgs.builder()\n            .filter(\"parent.id:012345678910 lifecycleState:DELETE_REQUESTED\")\n            .build());\n\n        final var deletion-candidate = OrganizationsFunctions.getProject(GetProjectArgs.builder()\n            .projectId(my_org_projects.projects()[0].projectId())\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-org-projects:\n    fn::invoke:\n      function: gcp:projects:getProject\n      arguments:\n        filter: parent.id:012345678910 lifecycleState:DELETE_REQUESTED\n  deletion-candidate:\n    fn::invoke:\n      function: gcp:organizations:getProject\n      arguments:\n        projectId: ${[\"my-org-projects\"].projects[0].projectId}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getProject.\n",
                 "properties": {
@@ -306812,7 +306812,7 @@
             }
         },
         "gcp:projects/getProjectService:getProjectService": {
-            "description": "Verify the API service for the Google Cloud Platform project to see if it is enabled or not.\n\nFor a list of services available, visit the [API library page](https://console.cloud.google.com/apis/library)\nor run `gcloud services list --available`.\n\nThis datasource requires the [Service Usage API](https://console.cloud.google.com/apis/library/serviceusage.googleapis.com)\nto use.\n\n\nTo get more information about `gcp.projects.Service`, see:\n\n* [API documentation](https://cloud.google.com/service-usage/docs/reference/rest/v1/services)\n* How-to Guides\n    * [Enabling and Disabling Services](https://cloud.google.com/service-usage/docs/enable-disable)\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-project-service = gcp.projects.getProjectService({\n    service: \"my-project-service\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_project_service = gcp.projects.get_project_service(service=\"my-project-service\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_project_service = Gcp.Projects.GetProjectService.Invoke(new()\n    {\n        Service = \"my-project-service\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := projects.GetProjectService(ctx, \u0026projects.GetProjectServiceArgs{\n\t\t\tService: \"my-project-service\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.projects.ProjectsFunctions;\nimport com.pulumi.gcp.projects.inputs.GetProjectServiceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-project-service = ProjectsFunctions.getProjectService(GetProjectServiceArgs.builder()\n            .service(\"my-project-service\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-project-service:\n    fn::invoke:\n      function: gcp:projects:getProjectService\n      arguments:\n        service: my-project-service\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Verify the API service for the Google Cloud Platform project to see if it is enabled or not.\n\nFor a list of services available, visit the [API library page](https://console.cloud.google.com/apis/library)\nor run `gcloud services list --available`.\n\nThis datasource requires the [Service Usage API](https://console.cloud.google.com/apis/library/serviceusage.googleapis.com)\nto use.\n\n\nTo get more information about `gcp.projects.Service`, see:\n\n* [API documentation](https://cloud.google.com/service-usage/docs/reference/rest/v1/services)\n* How-to Guides\n    * [Enabling and Disabling Services](https://cloud.google.com/service-usage/docs/enable-disable)\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_project_service = gcp.projects.getProjectService({\n    service: \"my-project-service\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_project_service = gcp.projects.get_project_service(service=\"my-project-service\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_project_service = Gcp.Projects.GetProjectService.Invoke(new()\n    {\n        Service = \"my-project-service\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/projects\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := projects.GetProjectService(ctx, \u0026projects.GetProjectServiceArgs{\n\t\t\tService: \"my-project-service\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.projects.ProjectsFunctions;\nimport com.pulumi.gcp.projects.inputs.GetProjectServiceArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-project-service = ProjectsFunctions.getProjectService(GetProjectServiceArgs.builder()\n            .service(\"my-project-service\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-project-service:\n    fn::invoke:\n      function: gcp:projects:getProjectService\n      arguments:\n        service: my-project-service\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getProjectService.\n",
                 "properties": {
@@ -306917,7 +306917,7 @@
             }
         },
         "gcp:pubsub/getSubscription:getSubscription": {
-            "description": "Get information about a Google Cloud Pub/Sub Subscription. For more information see\nthe [official documentation](https://cloud.google.com/pubsub/docs/)\nand [API](https://cloud.google.com/pubsub/docs/apis).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-pubsub-subscription = gcp.pubsub.getSubscription({\n    name: \"my-pubsub-subscription\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_pubsub_subscription = gcp.pubsub.get_subscription(name=\"my-pubsub-subscription\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_pubsub_subscription = Gcp.PubSub.GetSubscription.Invoke(new()\n    {\n        Name = \"my-pubsub-subscription\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/pubsub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := pubsub.LookupSubscription(ctx, \u0026pubsub.LookupSubscriptionArgs{\n\t\t\tName: \"my-pubsub-subscription\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.pubsub.PubsubFunctions;\nimport com.pulumi.gcp.pubsub.inputs.GetSubscriptionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-pubsub-subscription = PubsubFunctions.getSubscription(GetSubscriptionArgs.builder()\n            .name(\"my-pubsub-subscription\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-pubsub-subscription:\n    fn::invoke:\n      function: gcp:pubsub:getSubscription\n      arguments:\n        name: my-pubsub-subscription\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get information about a Google Cloud Pub/Sub Subscription. For more information see\nthe [official documentation](https://cloud.google.com/pubsub/docs/)\nand [API](https://cloud.google.com/pubsub/docs/apis).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_pubsub_subscription = gcp.pubsub.getSubscription({\n    name: \"my-pubsub-subscription\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_pubsub_subscription = gcp.pubsub.get_subscription(name=\"my-pubsub-subscription\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_pubsub_subscription = Gcp.PubSub.GetSubscription.Invoke(new()\n    {\n        Name = \"my-pubsub-subscription\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/pubsub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := pubsub.LookupSubscription(ctx, \u0026pubsub.LookupSubscriptionArgs{\n\t\t\tName: \"my-pubsub-subscription\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.pubsub.PubsubFunctions;\nimport com.pulumi.gcp.pubsub.inputs.GetSubscriptionArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-pubsub-subscription = PubsubFunctions.getSubscription(GetSubscriptionArgs.builder()\n            .name(\"my-pubsub-subscription\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-pubsub-subscription:\n    fn::invoke:\n      function: gcp:pubsub:getSubscription\n      arguments:\n        name: my-pubsub-subscription\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getSubscription.\n",
                 "properties": {
@@ -307103,7 +307103,7 @@
             }
         },
         "gcp:pubsub/getTopic:getTopic": {
-            "description": "Get information about a Google Cloud Pub/Sub Topic. For more information see\nthe [official documentation](https://cloud.google.com/pubsub/docs/)\nand [API](https://cloud.google.com/pubsub/docs/apis).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-pubsub-topic = gcp.pubsub.getTopic({\n    name: \"my-pubsub-topic\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_pubsub_topic = gcp.pubsub.get_topic(name=\"my-pubsub-topic\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_pubsub_topic = Gcp.PubSub.GetTopic.Invoke(new()\n    {\n        Name = \"my-pubsub-topic\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/pubsub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := pubsub.LookupTopic(ctx, \u0026pubsub.LookupTopicArgs{\n\t\t\tName: \"my-pubsub-topic\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.pubsub.PubsubFunctions;\nimport com.pulumi.gcp.pubsub.inputs.GetTopicArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-pubsub-topic = PubsubFunctions.getTopic(GetTopicArgs.builder()\n            .name(\"my-pubsub-topic\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-pubsub-topic:\n    fn::invoke:\n      function: gcp:pubsub:getTopic\n      arguments:\n        name: my-pubsub-topic\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get information about a Google Cloud Pub/Sub Topic. For more information see\nthe [official documentation](https://cloud.google.com/pubsub/docs/)\nand [API](https://cloud.google.com/pubsub/docs/apis).\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_pubsub_topic = gcp.pubsub.getTopic({\n    name: \"my-pubsub-topic\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_pubsub_topic = gcp.pubsub.get_topic(name=\"my-pubsub-topic\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_pubsub_topic = Gcp.PubSub.GetTopic.Invoke(new()\n    {\n        Name = \"my-pubsub-topic\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/pubsub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := pubsub.LookupTopic(ctx, \u0026pubsub.LookupTopicArgs{\n\t\t\tName: \"my-pubsub-topic\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.pubsub.PubsubFunctions;\nimport com.pulumi.gcp.pubsub.inputs.GetTopicArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-pubsub-topic = PubsubFunctions.getTopic(GetTopicArgs.builder()\n            .name(\"my-pubsub-topic\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-pubsub-topic:\n    fn::invoke:\n      function: gcp:pubsub:getTopic\n      arguments:\n        name: my-pubsub-topic\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getTopic.\n",
                 "properties": {
@@ -307456,7 +307456,7 @@
             }
         },
         "gcp:runtimeconfig/getConfig:getConfig": {
-            "description": "## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst run-service = gcp.runtimeconfig.getConfig({\n    name: \"my-service\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nrun_service = gcp.runtimeconfig.get_config(name=\"my-service\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var run_service = Gcp.RuntimeConfig.GetConfig.Invoke(new()\n    {\n        Name = \"my-service\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/runtimeconfig\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := runtimeconfig.LookupConfig(ctx, \u0026runtimeconfig.LookupConfigArgs{\n\t\t\tName: \"my-service\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.runtimeconfig.RuntimeconfigFunctions;\nimport com.pulumi.gcp.runtimeconfig.inputs.GetConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var run-service = RuntimeconfigFunctions.getConfig(GetConfigArgs.builder()\n            .name(\"my-service\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  run-service:\n    fn::invoke:\n      function: gcp:runtimeconfig:getConfig\n      arguments:\n        name: my-service\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst run_service = gcp.runtimeconfig.getConfig({\n    name: \"my-service\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nrun_service = gcp.runtimeconfig.get_config(name=\"my-service\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var run_service = Gcp.RuntimeConfig.GetConfig.Invoke(new()\n    {\n        Name = \"my-service\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/runtimeconfig\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := runtimeconfig.LookupConfig(ctx, \u0026runtimeconfig.LookupConfigArgs{\n\t\t\tName: \"my-service\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.runtimeconfig.RuntimeconfigFunctions;\nimport com.pulumi.gcp.runtimeconfig.inputs.GetConfigArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var run-service = RuntimeconfigFunctions.getConfig(GetConfigArgs.builder()\n            .name(\"my-service\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  run-service:\n    fn::invoke:\n      function: gcp:runtimeconfig:getConfig\n      arguments:\n        name: my-service\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getConfig.\n",
                 "properties": {
@@ -307552,7 +307552,7 @@
             }
         },
         "gcp:runtimeconfig/getVariable:getVariable": {
-            "description": "## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst run-service = gcp.runtimeconfig.getVariable({\n    parent: \"my-service\",\n    name: \"prod-variables/hostname\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nrun_service = gcp.runtimeconfig.get_variable(parent=\"my-service\",\n    name=\"prod-variables/hostname\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var run_service = Gcp.RuntimeConfig.GetVariable.Invoke(new()\n    {\n        Parent = \"my-service\",\n        Name = \"prod-variables/hostname\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/runtimeconfig\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := runtimeconfig.LookupVariable(ctx, \u0026runtimeconfig.LookupVariableArgs{\n\t\t\tParent: \"my-service\",\n\t\t\tName:   \"prod-variables/hostname\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.runtimeconfig.RuntimeconfigFunctions;\nimport com.pulumi.gcp.runtimeconfig.inputs.GetVariableArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var run-service = RuntimeconfigFunctions.getVariable(GetVariableArgs.builder()\n            .parent(\"my-service\")\n            .name(\"prod-variables/hostname\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  run-service:\n    fn::invoke:\n      function: gcp:runtimeconfig:getVariable\n      arguments:\n        parent: my-service\n        name: prod-variables/hostname\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst run_service = gcp.runtimeconfig.getVariable({\n    parent: \"my-service\",\n    name: \"prod-variables/hostname\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nrun_service = gcp.runtimeconfig.get_variable(parent=\"my-service\",\n    name=\"prod-variables/hostname\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var run_service = Gcp.RuntimeConfig.GetVariable.Invoke(new()\n    {\n        Parent = \"my-service\",\n        Name = \"prod-variables/hostname\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/runtimeconfig\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := runtimeconfig.LookupVariable(ctx, \u0026runtimeconfig.LookupVariableArgs{\n\t\t\tParent: \"my-service\",\n\t\t\tName:   \"prod-variables/hostname\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.runtimeconfig.RuntimeconfigFunctions;\nimport com.pulumi.gcp.runtimeconfig.inputs.GetVariableArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var run-service = RuntimeconfigFunctions.getVariable(GetVariableArgs.builder()\n            .parent(\"my-service\")\n            .name(\"prod-variables/hostname\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  run-service:\n    fn::invoke:\n      function: gcp:runtimeconfig:getVariable\n      arguments:\n        parent: my-service\n        name: prod-variables/hostname\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getVariable.\n",
                 "properties": {
@@ -308711,7 +308711,7 @@
             }
         },
         "gcp:serviceaccount/getAccountAccessToken:getAccountAccessToken": {
-            "description": "This data source provides a google `oauth2` `access_token` for a different service account than the one initially running the script.\n\nFor more information see\n[the official documentation](https://cloud.google.com/iam/docs/creating-short-lived-service-account-credentials) as well as [iamcredentials.generateAccessToken()](https://cloud.google.com/iam/credentials/reference/rest/v1/projects.serviceAccounts/generateAccessToken)\n\n## Example Usage\n\nTo allow `service_A` to impersonate `service_B`, grant the [Service Account Token Creator](https://cloud.google.com/iam/docs/service-accounts#the_service_account_token_creator_role) on B to A. \n\nIn the IAM policy below, `service_A` is given the Token Creator role impersonate `service_B`\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst token_creator_iam = new gcp.serviceaccount.IAMBinding(\"token-creator-iam\", {\n    serviceAccountId: \"projects/-/serviceAccounts/service_B@projectB.iam.gserviceaccount.com\",\n    role: \"roles/iam.serviceAccountTokenCreator\",\n    members: [\"serviceAccount:service_A@projectA.iam.gserviceaccount.com\"],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ntoken_creator_iam = gcp.serviceaccount.IAMBinding(\"token-creator-iam\",\n    service_account_id=\"projects/-/serviceAccounts/service_B@projectB.iam.gserviceaccount.com\",\n    role=\"roles/iam.serviceAccountTokenCreator\",\n    members=[\"serviceAccount:service_A@projectA.iam.gserviceaccount.com\"])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var token_creator_iam = new Gcp.ServiceAccount.IAMBinding(\"token-creator-iam\", new()\n    {\n        ServiceAccountId = \"projects/-/serviceAccounts/service_B@projectB.iam.gserviceaccount.com\",\n        Role = \"roles/iam.serviceAccountTokenCreator\",\n        Members = new[]\n        {\n            \"serviceAccount:service_A@projectA.iam.gserviceaccount.com\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := serviceaccount.NewIAMBinding(ctx, \"token-creator-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: pulumi.String(\"projects/-/serviceAccounts/service_B@projectB.iam.gserviceaccount.com\"),\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountTokenCreator\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"serviceAccount:service_A@projectA.iam.gserviceaccount.com\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var token_creator_iam = new IAMBinding(\"token-creator-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(\"projects/-/serviceAccounts/service_B@projectB.iam.gserviceaccount.com\")\n            .role(\"roles/iam.serviceAccountTokenCreator\")\n            .members(\"serviceAccount:service_A@projectA.iam.gserviceaccount.com\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  token-creator-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: projects/-/serviceAccounts/service_B@projectB.iam.gserviceaccount.com\n      role: roles/iam.serviceAccountTokenCreator\n      members:\n        - serviceAccount:service_A@projectA.iam.gserviceaccount.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\nOnce the IAM permissions are set, you can apply the new token to a provider bootstrapped with it.  Any resources that references the aliased provider will run as the new identity.\n\nIn the example below, `gcp.organizations.Project` will run as `service_B`.\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nexport = async () =\u003e {\n    const default = await gcp.organizations.getClientConfig({});\n    const defaultGetAccountAccessToken = await gcp.serviceaccount.getAccountAccessToken({\n        targetServiceAccount: \"service_B@projectB.iam.gserviceaccount.com\",\n        scopes: [\n            \"userinfo-email\",\n            \"cloud-platform\",\n        ],\n        lifetime: \"300s\",\n    });\n    const me = await gcp.organizations.getClientOpenIdUserInfo({});\n    return {\n        \"target-email\": me.email,\n    };\n}\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.organizations.get_client_config()\ndefault_get_account_access_token = gcp.serviceaccount.get_account_access_token(target_service_account=\"service_B@projectB.iam.gserviceaccount.com\",\n    scopes=[\n        \"userinfo-email\",\n        \"cloud-platform\",\n    ],\n    lifetime=\"300s\")\nme = gcp.organizations.get_client_open_id_user_info()\npulumi.export(\"target-email\", me.email)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Organizations.GetClientConfig.Invoke();\n\n    var defaultGetAccountAccessToken = Gcp.ServiceAccount.GetAccountAccessToken.Invoke(new()\n    {\n        TargetServiceAccount = \"service_B@projectB.iam.gserviceaccount.com\",\n        Scopes = new[]\n        {\n            \"userinfo-email\",\n            \"cloud-platform\",\n        },\n        Lifetime = \"300s\",\n    });\n\n    var me = Gcp.Organizations.GetClientOpenIdUserInfo.Invoke();\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"target-email\"] = me.Apply(getClientOpenIdUserInfoResult =\u003e getClientOpenIdUserInfoResult.Email),\n    };\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := organizations.GetClientConfig(ctx, map[string]interface{}{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.GetAccountAccessToken(ctx, \u0026serviceaccount.GetAccountAccessTokenArgs{\n\t\t\tTargetServiceAccount: \"service_B@projectB.iam.gserviceaccount.com\",\n\t\t\tScopes: []string{\n\t\t\t\t\"userinfo-email\",\n\t\t\t\t\"cloud-platform\",\n\t\t\t},\n\t\t\tLifetime: pulumi.StringRef(\"300s\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tme, err := organizations.GetClientOpenIdUserInfo(ctx, map[string]interface{}{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"target-email\", me.Email)\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.serviceaccount.ServiceaccountFunctions;\nimport com.pulumi.gcp.serviceaccount.inputs.GetAccountAccessTokenArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = OrganizationsFunctions.getClientConfig();\n\n        final var defaultGetAccountAccessToken = ServiceaccountFunctions.getAccountAccessToken(GetAccountAccessTokenArgs.builder()\n            .targetServiceAccount(\"service_B@projectB.iam.gserviceaccount.com\")\n            .scopes(            \n                \"userinfo-email\",\n                \"cloud-platform\")\n            .lifetime(\"300s\")\n            .build());\n\n        final var me = OrganizationsFunctions.getClientOpenIdUserInfo();\n\n        ctx.export(\"target-email\", me.applyValue(getClientOpenIdUserInfoResult -\u003e getClientOpenIdUserInfoResult.email()));\n    }\n}\n```\n```yaml\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:organizations:getClientConfig\n      arguments: {}\n  defaultGetAccountAccessToken:\n    fn::invoke:\n      function: gcp:serviceaccount:getAccountAccessToken\n      arguments:\n        targetServiceAccount: service_B@projectB.iam.gserviceaccount.com\n        scopes:\n          - userinfo-email\n          - cloud-platform\n        lifetime: 300s\n  me:\n    fn::invoke:\n      function: gcp:organizations:getClientOpenIdUserInfo\n      arguments: {}\noutputs:\n  target-email: ${me.email}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n\u003e *Note*: the generated token is non-refreshable and can have a maximum `lifetime` of `3600` seconds.\n",
+            "description": "This data source provides a google `oauth2` `access_token` for a different service account than the one initially running the script.\n\nFor more information see\n[the official documentation](https://cloud.google.com/iam/docs/creating-short-lived-service-account-credentials) as well as [iamcredentials.generateAccessToken()](https://cloud.google.com/iam/credentials/reference/rest/v1/projects.serviceAccounts/generateAccessToken)\n\n## Example Usage\n\nTo allow `service_A` to impersonate `service_B`, grant the [Service Account Token Creator](https://cloud.google.com/iam/docs/service-accounts#the_service_account_token_creator_role) on B to A. \n\nIn the IAM policy below, `service_A` is given the Token Creator role impersonate `service_B`\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst token_creator_iam = new gcp.serviceaccount.IAMBinding(\"token-creator-iam\", {\n    serviceAccountId: \"projects/-/serviceAccounts/service_B@projectB.iam.gserviceaccount.com\",\n    role: \"roles/iam.serviceAccountTokenCreator\",\n    members: [\"serviceAccount:service_A@projectA.iam.gserviceaccount.com\"],\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ntoken_creator_iam = gcp.serviceaccount.IAMBinding(\"token-creator-iam\",\n    service_account_id=\"projects/-/serviceAccounts/service_B@projectB.iam.gserviceaccount.com\",\n    role=\"roles/iam.serviceAccountTokenCreator\",\n    members=[\"serviceAccount:service_A@projectA.iam.gserviceaccount.com\"])\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var token_creator_iam = new Gcp.ServiceAccount.IAMBinding(\"token-creator-iam\", new()\n    {\n        ServiceAccountId = \"projects/-/serviceAccounts/service_B@projectB.iam.gserviceaccount.com\",\n        Role = \"roles/iam.serviceAccountTokenCreator\",\n        Members = new[]\n        {\n            \"serviceAccount:service_A@projectA.iam.gserviceaccount.com\",\n        },\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := serviceaccount.NewIAMBinding(ctx, \"token-creator-iam\", \u0026serviceaccount.IAMBindingArgs{\n\t\t\tServiceAccountId: pulumi.String(\"projects/-/serviceAccounts/service_B@projectB.iam.gserviceaccount.com\"),\n\t\t\tRole:             pulumi.String(\"roles/iam.serviceAccountTokenCreator\"),\n\t\t\tMembers: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"serviceAccount:service_A@projectA.iam.gserviceaccount.com\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.serviceaccount.IAMBinding;\nimport com.pulumi.gcp.serviceaccount.IAMBindingArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        var token_creator_iam = new IAMBinding(\"token-creator-iam\", IAMBindingArgs.builder()\n            .serviceAccountId(\"projects/-/serviceAccounts/service_B@projectB.iam.gserviceaccount.com\")\n            .role(\"roles/iam.serviceAccountTokenCreator\")\n            .members(\"serviceAccount:service_A@projectA.iam.gserviceaccount.com\")\n            .build());\n\n    }\n}\n```\n```yaml\nresources:\n  token-creator-iam:\n    type: gcp:serviceaccount:IAMBinding\n    properties:\n      serviceAccountId: projects/-/serviceAccounts/service_B@projectB.iam.gserviceaccount.com\n      role: roles/iam.serviceAccountTokenCreator\n      members:\n        - serviceAccount:service_A@projectA.iam.gserviceaccount.com\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\nOnce the IAM permissions are set, you can apply the new token to a provider bootstrapped with it.  Any resources that references the aliased provider will run as the new identity.\n\nIn the example below, `gcp.organizations.Project` will run as `service_B`.\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nexport = async () =\u003e {\n    const _default = await gcp.organizations.getClientConfig({});\n    const defaultGetAccountAccessToken = await gcp.serviceaccount.getAccountAccessToken({\n        targetServiceAccount: \"service_B@projectB.iam.gserviceaccount.com\",\n        scopes: [\n            \"userinfo-email\",\n            \"cloud-platform\",\n        ],\n        lifetime: \"300s\",\n    });\n    const me = await gcp.organizations.getClientOpenIdUserInfo({});\n    return {\n        \"target-email\": me.email,\n    };\n}\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.organizations.get_client_config()\ndefault_get_account_access_token = gcp.serviceaccount.get_account_access_token(target_service_account=\"service_B@projectB.iam.gserviceaccount.com\",\n    scopes=[\n        \"userinfo-email\",\n        \"cloud-platform\",\n    ],\n    lifetime=\"300s\")\nme = gcp.organizations.get_client_open_id_user_info()\npulumi.export(\"target-email\", me.email)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Organizations.GetClientConfig.Invoke();\n\n    var defaultGetAccountAccessToken = Gcp.ServiceAccount.GetAccountAccessToken.Invoke(new()\n    {\n        TargetServiceAccount = \"service_B@projectB.iam.gserviceaccount.com\",\n        Scopes = new[]\n        {\n            \"userinfo-email\",\n            \"cloud-platform\",\n        },\n        Lifetime = \"300s\",\n    });\n\n    var me = Gcp.Organizations.GetClientOpenIdUserInfo.Invoke();\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"target-email\"] = me.Apply(getClientOpenIdUserInfoResult =\u003e getClientOpenIdUserInfoResult.Email),\n    };\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/organizations\"\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/serviceaccount\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := organizations.GetClientConfig(ctx, map[string]interface{}{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = serviceaccount.GetAccountAccessToken(ctx, \u0026serviceaccount.GetAccountAccessTokenArgs{\n\t\t\tTargetServiceAccount: \"service_B@projectB.iam.gserviceaccount.com\",\n\t\t\tScopes: []string{\n\t\t\t\t\"userinfo-email\",\n\t\t\t\t\"cloud-platform\",\n\t\t\t},\n\t\t\tLifetime: pulumi.StringRef(\"300s\"),\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tme, err := organizations.GetClientOpenIdUserInfo(ctx, map[string]interface{}{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"target-email\", me.Email)\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.organizations.OrganizationsFunctions;\nimport com.pulumi.gcp.serviceaccount.ServiceaccountFunctions;\nimport com.pulumi.gcp.serviceaccount.inputs.GetAccountAccessTokenArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = OrganizationsFunctions.getClientConfig();\n\n        final var defaultGetAccountAccessToken = ServiceaccountFunctions.getAccountAccessToken(GetAccountAccessTokenArgs.builder()\n            .targetServiceAccount(\"service_B@projectB.iam.gserviceaccount.com\")\n            .scopes(            \n                \"userinfo-email\",\n                \"cloud-platform\")\n            .lifetime(\"300s\")\n            .build());\n\n        final var me = OrganizationsFunctions.getClientOpenIdUserInfo();\n\n        ctx.export(\"target-email\", me.applyValue(getClientOpenIdUserInfoResult -\u003e getClientOpenIdUserInfoResult.email()));\n    }\n}\n```\n```yaml\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:organizations:getClientConfig\n      arguments: {}\n  defaultGetAccountAccessToken:\n    fn::invoke:\n      function: gcp:serviceaccount:getAccountAccessToken\n      arguments:\n        targetServiceAccount: service_B@projectB.iam.gserviceaccount.com\n        scopes:\n          - userinfo-email\n          - cloud-platform\n        lifetime: 300s\n  me:\n    fn::invoke:\n      function: gcp:organizations:getClientOpenIdUserInfo\n      arguments: {}\noutputs:\n  target-email: ${me.email}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n\n\u003e *Note*: the generated token is non-refreshable and can have a maximum `lifetime` of `3600` seconds.\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getAccountAccessToken.\n",
                 "properties": {
@@ -309264,7 +309264,7 @@
             }
         },
         "gcp:sourcerepo/getRepository:getRepository": {
-            "description": "Get infomation about an existing Google Cloud Source Repository.\nFor more information see [the official documentation](https://cloud.google.com/source-repositories)\nand\n[API](https://cloud.google.com/source-repositories/docs/reference/rest/v1/projects.repos).\n\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-repo = gcp.sourcerepo.getRepository({\n    name: \"my-repository\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_repo = gcp.sourcerepo.get_repository(name=\"my-repository\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_repo = Gcp.SourceRepo.GetRepository.Invoke(new()\n    {\n        Name = \"my-repository\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/sourcerepo\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := sourcerepo.LookupRepository(ctx, \u0026sourcerepo.LookupRepositoryArgs{\n\t\t\tName: \"my-repository\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.sourcerepo.SourcerepoFunctions;\nimport com.pulumi.gcp.sourcerepo.inputs.GetRepositoryArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-repo = SourcerepoFunctions.getRepository(GetRepositoryArgs.builder()\n            .name(\"my-repository\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-repo:\n    fn::invoke:\n      function: gcp:sourcerepo:getRepository\n      arguments:\n        name: my-repository\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get infomation about an existing Google Cloud Source Repository.\nFor more information see [the official documentation](https://cloud.google.com/source-repositories)\nand\n[API](https://cloud.google.com/source-repositories/docs/reference/rest/v1/projects.repos).\n\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_repo = gcp.sourcerepo.getRepository({\n    name: \"my-repository\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_repo = gcp.sourcerepo.get_repository(name=\"my-repository\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_repo = Gcp.SourceRepo.GetRepository.Invoke(new()\n    {\n        Name = \"my-repository\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/sourcerepo\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := sourcerepo.LookupRepository(ctx, \u0026sourcerepo.LookupRepositoryArgs{\n\t\t\tName: \"my-repository\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.sourcerepo.SourcerepoFunctions;\nimport com.pulumi.gcp.sourcerepo.inputs.GetRepositoryArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-repo = SourcerepoFunctions.getRepository(GetRepositoryArgs.builder()\n            .name(\"my-repository\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-repo:\n    fn::invoke:\n      function: gcp:sourcerepo:getRepository\n      arguments:\n        name: my-repository\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getRepository.\n",
                 "properties": {
@@ -310032,7 +310032,7 @@
             }
         },
         "gcp:sql/getDatabaseInstanceLatestRecoveryTime:getDatabaseInstanceLatestRecoveryTime": {
-            "description": "Get Latest Recovery Time for a given instance. For more information see the\n[official documentation](https://cloud.google.com/sql/)\nand\n[API](https://cloud.google.com/sql/docs/postgres/backup-recovery/pitr#get-the-latest-recovery-time).\n\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.sql.getDatabaseInstanceLatestRecoveryTime({\n    instance: \"sample-instance\",\n});\nexport const latestRecoveryTime = _default;\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.sql.get_database_instance_latest_recovery_time(instance=\"sample-instance\")\npulumi.export(\"latestRecoveryTime\", default)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Sql.GetDatabaseInstanceLatestRecoveryTime.Invoke(new()\n    {\n        Instance = \"sample-instance\",\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"latestRecoveryTime\"] = @default,\n    };\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/sql\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := sql.GetDatabaseInstanceLatestRecoveryTime(ctx, \u0026sql.GetDatabaseInstanceLatestRecoveryTimeArgs{\n\t\t\tInstance: \"sample-instance\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"latestRecoveryTime\", _default)\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.sql.SqlFunctions;\nimport com.pulumi.gcp.sql.inputs.GetDatabaseInstanceLatestRecoveryTimeArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = SqlFunctions.getDatabaseInstanceLatestRecoveryTime(GetDatabaseInstanceLatestRecoveryTimeArgs.builder()\n            .instance(\"sample-instance\")\n            .build());\n\n        ctx.export(\"latestRecoveryTime\", default_);\n    }\n}\n```\n```yaml\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:sql:getDatabaseInstanceLatestRecoveryTime\n      arguments:\n        instance: sample-instance\noutputs:\n  latestRecoveryTime: ${default}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Get Latest Recovery Time for a given instance. For more information see the\n[official documentation](https://cloud.google.com/sql/)\nand\n[API](https://cloud.google.com/sql/docs/postgres/backup-recovery/pitr#get-the-latest-recovery-time).\n\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.sql.getDatabaseInstanceLatestRecoveryTime({\n    instance: \"sample-instance\",\n});\nexport const latestRecoveryTime = _default;\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.sql.get_database_instance_latest_recovery_time(instance=\"sample-instance\")\npulumi.export(\"latestRecoveryTime\", default)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Sql.GetDatabaseInstanceLatestRecoveryTime.Invoke(new()\n    {\n        Instance = \"sample-instance\",\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"latestRecoveryTime\"] = @default,\n    };\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/sql\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := sql.GetDatabaseInstanceLatestRecoveryTime(ctx, \u0026sql.GetDatabaseInstanceLatestRecoveryTimeArgs{\n\t\t\tInstance: \"sample-instance\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"latestRecoveryTime\", _default)\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.sql.SqlFunctions;\nimport com.pulumi.gcp.sql.inputs.GetDatabaseInstanceLatestRecoveryTimeArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = SqlFunctions.getDatabaseInstanceLatestRecoveryTime(GetDatabaseInstanceLatestRecoveryTimeArgs.builder()\n            .instance(\"sample-instance\")\n            .build());\n\n        ctx.export(\"latestRecoveryTime\", default_);\n    }\n}\n```\n```yaml\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:sql:getDatabaseInstanceLatestRecoveryTime\n      arguments:\n        instance: sample-instance\noutputs:\n  latestRecoveryTime: ${default}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getDatabaseInstanceLatestRecoveryTime.\n",
                 "properties": {
@@ -310238,7 +310238,7 @@
             }
         },
         "gcp:storage/getBucket:getBucket": {
-            "description": "Gets an existing bucket in Google Cloud Storage service (GCS).\nSee [the official documentation](https://cloud.google.com/storage/docs/key-terms#buckets)\nand\n[API](https://cloud.google.com/storage/docs/json_api/v1/buckets).\n\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my-bucket = gcp.storage.getBucket({\n    name: \"my-bucket\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_bucket = gcp.storage.get_bucket(name=\"my-bucket\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_bucket = Gcp.Storage.GetBucket.Invoke(new()\n    {\n        Name = \"my-bucket\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/storage\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := storage.LookupBucket(ctx, \u0026storage.LookupBucketArgs{\n\t\t\tName: \"my-bucket\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.storage.StorageFunctions;\nimport com.pulumi.gcp.storage.inputs.GetBucketArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-bucket = StorageFunctions.getBucket(GetBucketArgs.builder()\n            .name(\"my-bucket\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-bucket:\n    fn::invoke:\n      function: gcp:storage:getBucket\n      arguments:\n        name: my-bucket\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Gets an existing bucket in Google Cloud Storage service (GCS).\nSee [the official documentation](https://cloud.google.com/storage/docs/key-terms#buckets)\nand\n[API](https://cloud.google.com/storage/docs/json_api/v1/buckets).\n\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst my_bucket = gcp.storage.getBucket({\n    name: \"my-bucket\",\n});\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\nmy_bucket = gcp.storage.get_bucket(name=\"my-bucket\")\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var my_bucket = Gcp.Storage.GetBucket.Invoke(new()\n    {\n        Name = \"my-bucket\",\n    });\n\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/storage\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := storage.LookupBucket(ctx, \u0026storage.LookupBucketArgs{\n\t\t\tName: \"my-bucket\",\n\t\t}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.storage.StorageFunctions;\nimport com.pulumi.gcp.storage.inputs.GetBucketArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var my-bucket = StorageFunctions.getBucket(GetBucketArgs.builder()\n            .name(\"my-bucket\")\n            .build());\n\n    }\n}\n```\n```yaml\nvariables:\n  my-bucket:\n    fn::invoke:\n      function: gcp:storage:getBucket\n      arguments:\n        name: my-bucket\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getBucket.\n",
                 "properties": {
@@ -311045,7 +311045,7 @@
             }
         },
         "gcp:storage/getTransferProjectServiceAccount:getTransferProjectServiceAccount": {
-            "description": "Use this data source to retrieve Storage Transfer service account for this project\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.storage.getTransferProjectServiceAccount({});\nexport const defaultAccount = _default.then(_default =\u003e _default.email);\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.storage.get_transfer_project_service_account()\npulumi.export(\"defaultAccount\", default.email)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Storage.GetTransferProjectServiceAccount.Invoke();\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"defaultAccount\"] = @default.Apply(@default =\u003e @default.Apply(getTransferProjectServiceAccountResult =\u003e getTransferProjectServiceAccountResult.Email)),\n    };\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/storage\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := storage.GetTransferProjectServiceAccount(ctx, \u0026storage.GetTransferProjectServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"defaultAccount\", _default.Email)\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.storage.StorageFunctions;\nimport com.pulumi.gcp.storage.inputs.GetTransferProjectServiceAccountArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = StorageFunctions.getTransferProjectServiceAccount();\n\n        ctx.export(\"defaultAccount\", default_.email());\n    }\n}\n```\n```yaml\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:storage:getTransferProjectServiceAccount\n      arguments: {}\noutputs:\n  defaultAccount: ${default.email}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Use this data source to retrieve Storage Transfer service account for this project\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.storage.getTransferProjectServiceAccount({});\nexport const defaultAccount = _default.then(_default =\u003e _default.email);\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.storage.get_transfer_project_service_account()\npulumi.export(\"defaultAccount\", default.email)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Storage.GetTransferProjectServiceAccount.Invoke();\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"defaultAccount\"] = @default.Apply(@default =\u003e @default.Apply(getTransferProjectServiceAccountResult =\u003e getTransferProjectServiceAccountResult.Email)),\n    };\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/storage\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := storage.GetTransferProjectServiceAccount(ctx, \u0026storage.GetTransferProjectServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"defaultAccount\", _default.Email)\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.storage.StorageFunctions;\nimport com.pulumi.gcp.storage.inputs.GetTransferProjectServiceAccountArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = StorageFunctions.getTransferProjectServiceAccount();\n\n        ctx.export(\"defaultAccount\", default_.email());\n    }\n}\n```\n```yaml\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:storage:getTransferProjectServiceAccount\n      arguments: {}\noutputs:\n  defaultAccount: ${default.email}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getTransferProjectServiceAccount.\n",
                 "properties": {
@@ -311091,7 +311091,7 @@
         },
         "gcp:storage/getTransferProjectServieAccount:getTransferProjectServieAccount": {
             "deprecationMessage": "gcp.storage.getTransferProjectServieAccount has been deprecated in favor of gcp.storage.getTransferProjectServiceAccount",
-            "description": "Use this data source to retrieve Storage Transfer service account for this project\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst default = gcp.storage.getTransferProjectServiceAccount({});\nexport const defaultAccount = _default.then(_default =\u003e _default.email);\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.storage.get_transfer_project_service_account()\npulumi.export(\"defaultAccount\", default.email)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Storage.GetTransferProjectServiceAccount.Invoke();\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"defaultAccount\"] = @default.Apply(@default =\u003e @default.Apply(getTransferProjectServiceAccountResult =\u003e getTransferProjectServiceAccountResult.Email)),\n    };\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/storage\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := storage.GetTransferProjectServiceAccount(ctx, \u0026storage.GetTransferProjectServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"defaultAccount\", _default.Email)\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.storage.StorageFunctions;\nimport com.pulumi.gcp.storage.inputs.GetTransferProjectServiceAccountArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = StorageFunctions.getTransferProjectServiceAccount();\n\n        ctx.export(\"defaultAccount\", default_.email());\n    }\n}\n```\n```yaml\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:storage:getTransferProjectServiceAccount\n      arguments: {}\noutputs:\n  defaultAccount: ${default.email}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
+            "description": "Use this data source to retrieve Storage Transfer service account for this project\n\n## Example Usage\n\n\u003c!--Start PulumiCodeChooser --\u003e\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as gcp from \"@pulumi/gcp\";\n\nconst _default = gcp.storage.getTransferProjectServiceAccount({});\nexport const defaultAccount = _default.then(_default =\u003e _default.email);\n```\n```python\nimport pulumi\nimport pulumi_gcp as gcp\n\ndefault = gcp.storage.get_transfer_project_service_account()\npulumi.export(\"defaultAccount\", default.email)\n```\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing Gcp = Pulumi.Gcp;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var @default = Gcp.Storage.GetTransferProjectServiceAccount.Invoke();\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"defaultAccount\"] = @default.Apply(@default =\u003e @default.Apply(getTransferProjectServiceAccountResult =\u003e getTransferProjectServiceAccountResult.Email)),\n    };\n});\n```\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/storage\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_default, err := storage.GetTransferProjectServiceAccount(ctx, \u0026storage.GetTransferProjectServiceAccountArgs{}, nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"defaultAccount\", _default.Email)\n\t\treturn nil\n\t})\n}\n```\n```java\npackage generated_program;\n\nimport com.pulumi.Context;\nimport com.pulumi.Pulumi;\nimport com.pulumi.core.Output;\nimport com.pulumi.gcp.storage.StorageFunctions;\nimport com.pulumi.gcp.storage.inputs.GetTransferProjectServiceAccountArgs;\nimport java.util.List;\nimport java.util.ArrayList;\nimport java.util.Map;\nimport java.io.File;\nimport java.nio.file.Files;\nimport java.nio.file.Paths;\n\npublic class App {\n    public static void main(String[] args) {\n        Pulumi.run(App::stack);\n    }\n\n    public static void stack(Context ctx) {\n        final var default = StorageFunctions.getTransferProjectServiceAccount();\n\n        ctx.export(\"defaultAccount\", default_.email());\n    }\n}\n```\n```yaml\nvariables:\n  default:\n    fn::invoke:\n      function: gcp:storage:getTransferProjectServiceAccount\n      arguments: {}\noutputs:\n  defaultAccount: ${default.email}\n```\n\u003c!--End PulumiCodeChooser --\u003e\n",
             "inputs": {
                 "description": "A collection of arguments for invoking getTransferProjectServieAccount.\n",
                 "properties": {
diff --git a/provider/go.mod b/provider/go.mod
index ad3b7d805e..7090377e00 100644
--- a/provider/go.mod
+++ b/provider/go.mod
@@ -281,3 +281,7 @@ require (
 	lukechampine.com/frand v1.4.2 // indirect
 	mvdan.cc/gofumpt v0.5.0 // indirect
 )
+
+replace github.com/pulumi/pulumi/pkg/v3 => github.com/pulumi/pulumi/pkg/v3 v3.145.1-0.20250110044622-fecabf53b218
+
+replace github.com/pulumi/pulumi/sdk/v3 => github.com/pulumi/pulumi/sdk/v3 v3.145.1-0.20250110044622-fecabf53b218
diff --git a/provider/go.sum b/provider/go.sum
index 9fe51914e4..c96e82e579 100644
--- a/provider/go.sum
+++ b/provider/go.sum
@@ -1999,10 +1999,10 @@ github.com/pulumi/pulumi-terraform-bridge/v3 v3.100.0 h1:L03nXHLprXuF0wIihoKFIjp
 github.com/pulumi/pulumi-terraform-bridge/v3 v3.100.0/go.mod h1:r+cxSrRxwCRbHMdKMKWU3NKDcUTm9xa9PcBDuHQnRkI=
 github.com/pulumi/pulumi-yaml v1.12.0 h1:ThJP+EBqeJyCnS6w6/PwcEFOT5o112qv0lObhefmFCk=
 github.com/pulumi/pulumi-yaml v1.12.0/go.mod h1:EhZd1XDfuLa15O51qVVE16U6r8ldK9mLIBclqWCX27Y=
-github.com/pulumi/pulumi/pkg/v3 v3.145.0 h1:hAhFLieunnCKuMd3GbLqE5uWQ1hpNLdl6+bCDFSF4YQ=
-github.com/pulumi/pulumi/pkg/v3 v3.145.0/go.mod h1:N19IsMJ3GyYO5N2JfpsCAVk0eH1NKkF05fZGn5dnhBE=
-github.com/pulumi/pulumi/sdk/v3 v3.145.0 h1:r5iOgz67RElFXJt4GVVY2SBGh5sR24mL9NOcKBiBi/k=
-github.com/pulumi/pulumi/sdk/v3 v3.145.0/go.mod h1:5pZySnw3RiQKddx8orThjEFmWsXkGAY3ktKOxZj2Ym4=
+github.com/pulumi/pulumi/pkg/v3 v3.145.1-0.20250110044622-fecabf53b218 h1:8UJToXuturGQYOSJ3nrYzO7NXNOU9fjYtbPmdIJ/lYE=
+github.com/pulumi/pulumi/pkg/v3 v3.145.1-0.20250110044622-fecabf53b218/go.mod h1:N19IsMJ3GyYO5N2JfpsCAVk0eH1NKkF05fZGn5dnhBE=
+github.com/pulumi/pulumi/sdk/v3 v3.145.1-0.20250110044622-fecabf53b218 h1:FIr7pnIQ0kMCWfr4mRFKT04FjmV/vpo+2MQd2sVVgxE=
+github.com/pulumi/pulumi/sdk/v3 v3.145.1-0.20250110044622-fecabf53b218/go.mod h1:5pZySnw3RiQKddx8orThjEFmWsXkGAY3ktKOxZj2Ym4=
 github.com/pulumi/schema-tools v0.1.2 h1:Fd9xvUjgck4NA+7/jSk7InqCUT4Kj940+EcnbQKpfZo=
 github.com/pulumi/schema-tools v0.1.2/go.mod h1:62lgj52Tzq11eqWTIaKd+EVyYAu5dEcDJxMhTjvMO/k=
 github.com/pulumi/terraform-diff-reader v0.0.2 h1:kTE4nEXU3/SYXESvAIem+wyHMI3abqkI3OhJ0G04LLI=
diff --git a/sdk/go.mod b/sdk/go.mod
index b4071176b3..0bab8179ad 100644
--- a/sdk/go.mod
+++ b/sdk/go.mod
@@ -89,3 +89,7 @@ require (
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 	lukechampine.com/frand v1.4.2 // indirect
 )
+
+replace github.com/pulumi/pulumi/pkg/v3 => github.com/pulumi/pulumi/pkg/v3 v3.145.1-0.20250110044622-fecabf53b218
+
+replace github.com/pulumi/pulumi/sdk/v3 => github.com/pulumi/pulumi/sdk/v3 v3.145.1-0.20250110044622-fecabf53b218
diff --git a/sdk/go.sum b/sdk/go.sum
index 1a37eeaaf5..a817d581e3 100644
--- a/sdk/go.sum
+++ b/sdk/go.sum
@@ -150,8 +150,8 @@ github.com/pulumi/appdash v0.0.0-20231130102222-75f619a67231 h1:vkHw5I/plNdTr435
 github.com/pulumi/appdash v0.0.0-20231130102222-75f619a67231/go.mod h1:murToZ2N9hNJzewjHBgfFdXhZKjY3z5cYC1VXk+lbFE=
 github.com/pulumi/esc v0.9.1 h1:HH5eEv8sgyxSpY5a8yePyqFXzA8cvBvapfH8457+mIs=
 github.com/pulumi/esc v0.9.1/go.mod h1:oEJ6bOsjYlQUpjf70GiX+CXn3VBmpwFDxUTlmtUN84c=
-github.com/pulumi/pulumi/sdk/v3 v3.145.0 h1:r5iOgz67RElFXJt4GVVY2SBGh5sR24mL9NOcKBiBi/k=
-github.com/pulumi/pulumi/sdk/v3 v3.145.0/go.mod h1:5pZySnw3RiQKddx8orThjEFmWsXkGAY3ktKOxZj2Ym4=
+github.com/pulumi/pulumi/sdk/v3 v3.145.1-0.20250110044622-fecabf53b218 h1:FIr7pnIQ0kMCWfr4mRFKT04FjmV/vpo+2MQd2sVVgxE=
+github.com/pulumi/pulumi/sdk/v3 v3.145.1-0.20250110044622-fecabf53b218/go.mod h1:5pZySnw3RiQKddx8orThjEFmWsXkGAY3ktKOxZj2Ym4=
 github.com/rivo/uniseg v0.1.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=
 github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=
 github.com/rivo/uniseg v0.4.4 h1:8TfxU8dW6PdqD27gjM8MVNuicgxIjxpm4K7x4jp8sis=
diff --git a/sdk/nodejs/accesscontextmanager/getAccessPolicy.ts b/sdk/nodejs/accesscontextmanager/getAccessPolicy.ts
index 8e0657c454..6ff95d5ff9 100644
--- a/sdk/nodejs/accesscontextmanager/getAccessPolicy.ts
+++ b/sdk/nodejs/accesscontextmanager/getAccessPolicy.ts
@@ -13,10 +13,10 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const policy-org = gcp.accesscontextmanager.getAccessPolicy({
+ * const policy_org = gcp.accesscontextmanager.getAccessPolicy({
  *     parent: "organizations/1234567",
  * });
- * const policy-scoped = gcp.accesscontextmanager.getAccessPolicy({
+ * const policy_scoped = gcp.accesscontextmanager.getAccessPolicy({
  *     parent: "organizations/1234567",
  *     scopes: ["projects/1234567"],
  * });
@@ -72,10 +72,10 @@ export interface GetAccessPolicyResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const policy-org = gcp.accesscontextmanager.getAccessPolicy({
+ * const policy_org = gcp.accesscontextmanager.getAccessPolicy({
  *     parent: "organizations/1234567",
  * });
- * const policy-scoped = gcp.accesscontextmanager.getAccessPolicy({
+ * const policy_scoped = gcp.accesscontextmanager.getAccessPolicy({
  *     parent: "organizations/1234567",
  *     scopes: ["projects/1234567"],
  * });
diff --git a/sdk/nodejs/appengine/getDefaultServiceAccount.ts b/sdk/nodejs/appengine/getDefaultServiceAccount.ts
index ac8ebc4563..ed28fd1046 100644
--- a/sdk/nodejs/appengine/getDefaultServiceAccount.ts
+++ b/sdk/nodejs/appengine/getDefaultServiceAccount.ts
@@ -13,7 +13,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.appengine.getDefaultServiceAccount({});
+ * const _default = gcp.appengine.getDefaultServiceAccount({});
  * export const defaultAccount = _default.then(_default => _default.email);
  * ```
  */
@@ -74,7 +74,7 @@ export interface GetDefaultServiceAccountResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.appengine.getDefaultServiceAccount({});
+ * const _default = gcp.appengine.getDefaultServiceAccount({});
  * export const defaultAccount = _default.then(_default => _default.email);
  * ```
  */
diff --git a/sdk/nodejs/apphub/getDiscoveredService.ts b/sdk/nodejs/apphub/getDiscoveredService.ts
index 0fc3ec4546..d8e91ff67c 100644
--- a/sdk/nodejs/apphub/getDiscoveredService.ts
+++ b/sdk/nodejs/apphub/getDiscoveredService.ts
@@ -15,7 +15,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-service = gcp.apphub.getDiscoveredService({
+ * const my_service = gcp.apphub.getDiscoveredService({
  *     location: "my-location",
  *     serviceUri: "my-service-uri",
  * });
@@ -84,7 +84,7 @@ export interface GetDiscoveredServiceResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-service = gcp.apphub.getDiscoveredService({
+ * const my_service = gcp.apphub.getDiscoveredService({
  *     location: "my-location",
  *     serviceUri: "my-service-uri",
  * });
diff --git a/sdk/nodejs/apphub/getDiscoveredWorkload.ts b/sdk/nodejs/apphub/getDiscoveredWorkload.ts
index 7a7aedf586..e9ae867f7b 100644
--- a/sdk/nodejs/apphub/getDiscoveredWorkload.ts
+++ b/sdk/nodejs/apphub/getDiscoveredWorkload.ts
@@ -15,7 +15,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-workload = gcp.apphub.getDiscoveredWorkload({
+ * const my_workload = gcp.apphub.getDiscoveredWorkload({
  *     location: "us-central1",
  *     workloadUri: "my-workload-uri",
  * });
@@ -84,7 +84,7 @@ export interface GetDiscoveredWorkloadResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-workload = gcp.apphub.getDiscoveredWorkload({
+ * const my_workload = gcp.apphub.getDiscoveredWorkload({
  *     location: "us-central1",
  *     workloadUri: "my-workload-uri",
  * });
diff --git a/sdk/nodejs/apphub/service.ts b/sdk/nodejs/apphub/service.ts
index c02a33e509..5f27ba69c5 100644
--- a/sdk/nodejs/apphub/service.ts
+++ b/sdk/nodejs/apphub/service.ts
@@ -91,7 +91,7 @@ import * as utilities from "../utilities";
  *     subnetwork: ilbSubnet.id,
  * });
  * // discovered service block
- * const catalog-service = gcp.apphub.getDiscoveredServiceOutput({
+ * const catalog_service = gcp.apphub.getDiscoveredServiceOutput({
  *     location: "us-central1",
  *     serviceUri: pulumi.interpolate`//compute.googleapis.com/${forwardingRule.id}`,
  * });
@@ -185,7 +185,7 @@ import * as utilities from "../utilities";
  *     subnetwork: ilbSubnet.id,
  * });
  * // discovered service block
- * const catalog-service = gcp.apphub.getDiscoveredServiceOutput({
+ * const catalog_service = gcp.apphub.getDiscoveredServiceOutput({
  *     location: "us-central1",
  *     serviceUri: pulumi.interpolate`//compute.googleapis.com/${forwardingRule.id}`,
  * });
diff --git a/sdk/nodejs/artifactregistry/getRepository.ts b/sdk/nodejs/artifactregistry/getRepository.ts
index c9f74fceda..7fbe926c94 100644
--- a/sdk/nodejs/artifactregistry/getRepository.ts
+++ b/sdk/nodejs/artifactregistry/getRepository.ts
@@ -17,7 +17,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-repo = gcp.artifactregistry.getRepository({
+ * const my_repo = gcp.artifactregistry.getRepository({
  *     location: "us-central1",
  *     repositoryId: "my-repository",
  * });
@@ -93,7 +93,7 @@ export interface GetRepositoryResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-repo = gcp.artifactregistry.getRepository({
+ * const my_repo = gcp.artifactregistry.getRepository({
  *     location: "us-central1",
  *     repositoryId: "my-repository",
  * });
diff --git a/sdk/nodejs/backupdisasterrecovery/getBackupPlanAssociation.ts b/sdk/nodejs/backupdisasterrecovery/getBackupPlanAssociation.ts
index 3409005cc8..e540d72c4d 100644
--- a/sdk/nodejs/backupdisasterrecovery/getBackupPlanAssociation.ts
+++ b/sdk/nodejs/backupdisasterrecovery/getBackupPlanAssociation.ts
@@ -13,7 +13,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-backupplan-association = gcp.backupdisasterrecovery.getBackupPlanAssociation({
+ * const my_backupplan_association = gcp.backupdisasterrecovery.getBackupPlanAssociation({
  *     location: "us-central1",
  *     backupPlanAssociationId: "bpa-id",
  * });
@@ -73,7 +73,7 @@ export interface GetBackupPlanAssociationResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-backupplan-association = gcp.backupdisasterrecovery.getBackupPlanAssociation({
+ * const my_backupplan_association = gcp.backupdisasterrecovery.getBackupPlanAssociation({
  *     location: "us-central1",
  *     backupPlanAssociationId: "bpa-id",
  * });
diff --git a/sdk/nodejs/backupdisasterrecovery/getBackupVault.ts b/sdk/nodejs/backupdisasterrecovery/getBackupVault.ts
index b2df7e4070..824a1c562f 100644
--- a/sdk/nodejs/backupdisasterrecovery/getBackupVault.ts
+++ b/sdk/nodejs/backupdisasterrecovery/getBackupVault.ts
@@ -13,7 +13,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-backup-vault = gcp.backupdisasterrecovery.getBackupVault({
+ * const my_backup_vault = gcp.backupdisasterrecovery.getBackupVault({
  *     location: "us-central1",
  *     backupVaultId: "bv-1",
  * });
@@ -94,7 +94,7 @@ export interface GetBackupVaultResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-backup-vault = gcp.backupdisasterrecovery.getBackupVault({
+ * const my_backup_vault = gcp.backupdisasterrecovery.getBackupVault({
  *     location: "us-central1",
  *     backupVaultId: "bv-1",
  * });
diff --git a/sdk/nodejs/backupdisasterrecovery/getManagementServer.ts b/sdk/nodejs/backupdisasterrecovery/getManagementServer.ts
index 6522061ec0..1cb6fffc5b 100644
--- a/sdk/nodejs/backupdisasterrecovery/getManagementServer.ts
+++ b/sdk/nodejs/backupdisasterrecovery/getManagementServer.ts
@@ -13,7 +13,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-backup-dr-management-server = gcp.backupdisasterrecovery.getManagementServer({
+ * const my_backup_dr_management_server = gcp.backupdisasterrecovery.getManagementServer({
  *     location: "us-central1",
  * });
  * ```
@@ -55,7 +55,7 @@ export interface GetManagementServerResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-backup-dr-management-server = gcp.backupdisasterrecovery.getManagementServer({
+ * const my_backup_dr_management_server = gcp.backupdisasterrecovery.getManagementServer({
  *     location: "us-central1",
  * });
  * ```
diff --git a/sdk/nodejs/beyondcorp/getAppConnection.ts b/sdk/nodejs/beyondcorp/getAppConnection.ts
index 77e7e7c0d2..bcf96348ce 100644
--- a/sdk/nodejs/beyondcorp/getAppConnection.ts
+++ b/sdk/nodejs/beyondcorp/getAppConnection.ts
@@ -15,7 +15,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-beyondcorp-app-connection = gcp.beyondcorp.getAppConnection({
+ * const my_beyondcorp_app_connection = gcp.beyondcorp.getAppConnection({
  *     name: "my-beyondcorp-app-connection",
  * });
  * ```
@@ -80,7 +80,7 @@ export interface GetAppConnectionResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-beyondcorp-app-connection = gcp.beyondcorp.getAppConnection({
+ * const my_beyondcorp_app_connection = gcp.beyondcorp.getAppConnection({
  *     name: "my-beyondcorp-app-connection",
  * });
  * ```
diff --git a/sdk/nodejs/beyondcorp/getAppConnector.ts b/sdk/nodejs/beyondcorp/getAppConnector.ts
index f957d6f818..3ce0348c8f 100644
--- a/sdk/nodejs/beyondcorp/getAppConnector.ts
+++ b/sdk/nodejs/beyondcorp/getAppConnector.ts
@@ -15,7 +15,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-beyondcorp-app-connector = gcp.beyondcorp.getAppConnector({
+ * const my_beyondcorp_app_connector = gcp.beyondcorp.getAppConnector({
  *     name: "my-beyondcorp-app-connector",
  * });
  * ```
@@ -78,7 +78,7 @@ export interface GetAppConnectorResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-beyondcorp-app-connector = gcp.beyondcorp.getAppConnector({
+ * const my_beyondcorp_app_connector = gcp.beyondcorp.getAppConnector({
  *     name: "my-beyondcorp-app-connector",
  * });
  * ```
diff --git a/sdk/nodejs/beyondcorp/getAppGateway.ts b/sdk/nodejs/beyondcorp/getAppGateway.ts
index d9446afb71..3bde82591b 100644
--- a/sdk/nodejs/beyondcorp/getAppGateway.ts
+++ b/sdk/nodejs/beyondcorp/getAppGateway.ts
@@ -15,7 +15,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-beyondcorp-app-gateway = gcp.beyondcorp.getAppGateway({
+ * const my_beyondcorp_app_gateway = gcp.beyondcorp.getAppGateway({
  *     name: "my-beyondcorp-app-gateway",
  * });
  * ```
@@ -81,7 +81,7 @@ export interface GetAppGatewayResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-beyondcorp-app-gateway = gcp.beyondcorp.getAppGateway({
+ * const my_beyondcorp_app_gateway = gcp.beyondcorp.getAppGateway({
  *     name: "my-beyondcorp-app-gateway",
  * });
  * ```
diff --git a/sdk/nodejs/certificateauthority/getAuthority.ts b/sdk/nodejs/certificateauthority/getAuthority.ts
index 39114bf1b3..bb2e752857 100644
--- a/sdk/nodejs/certificateauthority/getAuthority.ts
+++ b/sdk/nodejs/certificateauthority/getAuthority.ts
@@ -15,7 +15,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.certificateauthority.getAuthority({
+ * const _default = gcp.certificateauthority.getAuthority({
  *     location: "us-west1",
  *     pool: "pool-name",
  *     certificateAuthorityId: "ca-id",
@@ -105,7 +105,7 @@ export interface GetAuthorityResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.certificateauthority.getAuthority({
+ * const _default = gcp.certificateauthority.getAuthority({
  *     location: "us-west1",
  *     pool: "pool-name",
  *     certificateAuthorityId: "ca-id",
diff --git a/sdk/nodejs/certificatemanager/getCertificateMap.ts b/sdk/nodejs/certificatemanager/getCertificateMap.ts
index f19903dc8b..5d84c973cb 100644
--- a/sdk/nodejs/certificatemanager/getCertificateMap.ts
+++ b/sdk/nodejs/certificatemanager/getCertificateMap.ts
@@ -15,7 +15,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.certificatemanager.getCertificateMap({
+ * const _default = gcp.certificatemanager.getCertificateMap({
  *     name: "cert-map",
  * });
  * ```
@@ -72,7 +72,7 @@ export interface GetCertificateMapResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.certificatemanager.getCertificateMap({
+ * const _default = gcp.certificatemanager.getCertificateMap({
  *     name: "cert-map",
  * });
  * ```
diff --git a/sdk/nodejs/certificatemanager/getCertificates.ts b/sdk/nodejs/certificatemanager/getCertificates.ts
index e218b525d2..2067822928 100644
--- a/sdk/nodejs/certificatemanager/getCertificates.ts
+++ b/sdk/nodejs/certificatemanager/getCertificates.ts
@@ -15,7 +15,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.certificatemanager.getCertificates({});
+ * const _default = gcp.certificatemanager.getCertificates({});
  * ```
  *
  * ### With A Filter
@@ -24,7 +24,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.certificatemanager.getCertificates({
+ * const _default = gcp.certificatemanager.getCertificates({
  *     filter: "name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*",
  * });
  * ```
@@ -73,7 +73,7 @@ export interface GetCertificatesResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.certificatemanager.getCertificates({});
+ * const _default = gcp.certificatemanager.getCertificates({});
  * ```
  *
  * ### With A Filter
@@ -82,7 +82,7 @@ export interface GetCertificatesResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.certificatemanager.getCertificates({
+ * const _default = gcp.certificatemanager.getCertificates({
  *     filter: "name:projects/PROJECT_ID/locations/REGION/certificates/certificate-name-*",
  * });
  * ```
diff --git a/sdk/nodejs/cloudbuildv2/connection.ts b/sdk/nodejs/cloudbuildv2/connection.ts
index 18c9efbbc8..f601e97aa8 100644
--- a/sdk/nodejs/cloudbuildv2/connection.ts
+++ b/sdk/nodejs/cloudbuildv2/connection.ts
@@ -63,7 +63,7 @@ import * as utilities from "../utilities";
  *     secret: webhook_secret_secret.id,
  *     secretData: "<webhook-secret-data>",
  * });
- * const p4sa-secretAccessor = gcp.organizations.getIAMPolicy({
+ * const p4sa_secretAccessor = gcp.organizations.getIAMPolicy({
  *     bindings: [{
  *         role: "roles/secretmanager.secretAccessor",
  *         members: ["serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com"],
@@ -114,7 +114,7 @@ import * as utilities from "../utilities";
  *         input: "my-github-token.txt",
  *     }).then(invoke => invoke.result),
  * });
- * const p4sa-secretAccessor = gcp.organizations.getIAMPolicy({
+ * const p4sa_secretAccessor = gcp.organizations.getIAMPolicy({
  *     bindings: [{
  *         role: "roles/secretmanager.secretAccessor",
  *         members: ["serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com"],
diff --git a/sdk/nodejs/cloudbuildv2/repository.ts b/sdk/nodejs/cloudbuildv2/repository.ts
index dda0aa1536..dc13c38ef7 100644
--- a/sdk/nodejs/cloudbuildv2/repository.ts
+++ b/sdk/nodejs/cloudbuildv2/repository.ts
@@ -44,7 +44,7 @@ import * as utilities from "../utilities";
  *     secret: webhook_secret_secret.id,
  *     secretData: "<webhook-secret-data>",
  * });
- * const p4sa-secretAccessor = gcp.organizations.getIAMPolicy({
+ * const p4sa_secretAccessor = gcp.organizations.getIAMPolicy({
  *     bindings: [{
  *         role: "roles/secretmanager.secretAccessor",
  *         members: ["serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com"],
@@ -101,7 +101,7 @@ import * as utilities from "../utilities";
  *         input: "my-github-token.txt",
  *     }).then(invoke => invoke.result),
  * });
- * const p4sa-secretAccessor = gcp.organizations.getIAMPolicy({
+ * const p4sa_secretAccessor = gcp.organizations.getIAMPolicy({
  *     bindings: [{
  *         role: "roles/secretmanager.secretAccessor",
  *         members: ["serviceAccount:service-123456789@gcp-sa-cloudbuild.iam.gserviceaccount.com"],
diff --git a/sdk/nodejs/cloudfunctions/getFunction.ts b/sdk/nodejs/cloudfunctions/getFunction.ts
index da29058862..26a3f9fcbd 100644
--- a/sdk/nodejs/cloudfunctions/getFunction.ts
+++ b/sdk/nodejs/cloudfunctions/getFunction.ts
@@ -17,7 +17,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-function = gcp.cloudfunctions.getFunction({
+ * const my_function = gcp.cloudfunctions.getFunction({
  *     name: "function",
  * });
  * ```
@@ -162,7 +162,7 @@ export interface GetFunctionResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-function = gcp.cloudfunctions.getFunction({
+ * const my_function = gcp.cloudfunctions.getFunction({
  *     name: "function",
  * });
  * ```
diff --git a/sdk/nodejs/cloudfunctionsv2/getFunction.ts b/sdk/nodejs/cloudfunctionsv2/getFunction.ts
index 6f93bd0f05..d91eee7564 100644
--- a/sdk/nodejs/cloudfunctionsv2/getFunction.ts
+++ b/sdk/nodejs/cloudfunctionsv2/getFunction.ts
@@ -17,7 +17,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-function = gcp.cloudfunctionsv2.getFunction({
+ * const my_function = gcp.cloudfunctionsv2.getFunction({
  *     name: "function",
  *     location: "us-central1",
  * });
@@ -88,7 +88,7 @@ export interface GetFunctionResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-function = gcp.cloudfunctionsv2.getFunction({
+ * const my_function = gcp.cloudfunctionsv2.getFunction({
  *     name: "function",
  *     location: "us-central1",
  * });
diff --git a/sdk/nodejs/cloudrun/getService.ts b/sdk/nodejs/cloudrun/getService.ts
index 69ce1cd69f..5282e6ad63 100644
--- a/sdk/nodejs/cloudrun/getService.ts
+++ b/sdk/nodejs/cloudrun/getService.ts
@@ -17,7 +17,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const run-service = gcp.cloudrun.getService({
+ * const run_service = gcp.cloudrun.getService({
  *     name: "my-service",
  *     location: "us-central1",
  * });
@@ -81,7 +81,7 @@ export interface GetServiceResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const run-service = gcp.cloudrun.getService({
+ * const run_service = gcp.cloudrun.getService({
  *     name: "my-service",
  *     location: "us-central1",
  * });
diff --git a/sdk/nodejs/cloudscheduler/job.ts b/sdk/nodejs/cloudscheduler/job.ts
index ed69b35969..107e43da4b 100644
--- a/sdk/nodejs/cloudscheduler/job.ts
+++ b/sdk/nodejs/cloudscheduler/job.ts
@@ -130,7 +130,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.compute.getDefaultServiceAccount({});
+ * const _default = gcp.compute.getDefaultServiceAccount({});
  * const job = new gcp.cloudscheduler.Job("job", {
  *     name: "test-job",
  *     description: "test http job",
@@ -152,7 +152,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.compute.getDefaultServiceAccount({});
+ * const _default = gcp.compute.getDefaultServiceAccount({});
  * const job = new gcp.cloudscheduler.Job("job", {
  *     name: "test-job",
  *     description: "test http job",
diff --git a/sdk/nodejs/compute/getBackendBucket.ts b/sdk/nodejs/compute/getBackendBucket.ts
index d932d23623..6ee8d2ffa5 100644
--- a/sdk/nodejs/compute/getBackendBucket.ts
+++ b/sdk/nodejs/compute/getBackendBucket.ts
@@ -15,7 +15,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-backend-bucket = gcp.compute.getBackendBucket({
+ * const my_backend_bucket = gcp.compute.getBackendBucket({
  *     name: "my-backend",
  * });
  * ```
@@ -74,7 +74,7 @@ export interface GetBackendBucketResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-backend-bucket = gcp.compute.getBackendBucket({
+ * const my_backend_bucket = gcp.compute.getBackendBucket({
  *     name: "my-backend",
  * });
  * ```
diff --git a/sdk/nodejs/compute/getDefaultServiceAccount.ts b/sdk/nodejs/compute/getDefaultServiceAccount.ts
index 42dfdcecac..318790ec59 100644
--- a/sdk/nodejs/compute/getDefaultServiceAccount.ts
+++ b/sdk/nodejs/compute/getDefaultServiceAccount.ts
@@ -13,7 +13,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.compute.getDefaultServiceAccount({});
+ * const _default = gcp.compute.getDefaultServiceAccount({});
  * export const defaultAccount = _default.then(_default => _default.email);
  * ```
  */
@@ -74,7 +74,7 @@ export interface GetDefaultServiceAccountResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.compute.getDefaultServiceAccount({});
+ * const _default = gcp.compute.getDefaultServiceAccount({});
  * export const defaultAccount = _default.then(_default => _default.email);
  * ```
  */
diff --git a/sdk/nodejs/compute/getDisk.ts b/sdk/nodejs/compute/getDisk.ts
index ff41da0863..a46143cbf0 100644
--- a/sdk/nodejs/compute/getDisk.ts
+++ b/sdk/nodejs/compute/getDisk.ts
@@ -17,7 +17,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const persistent-boot-disk = gcp.compute.getDisk({
+ * const persistent_boot_disk = gcp.compute.getDisk({
  *     name: "persistent-boot-disk",
  *     project: "example",
  * });
@@ -180,7 +180,7 @@ export interface GetDiskResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const persistent-boot-disk = gcp.compute.getDisk({
+ * const persistent_boot_disk = gcp.compute.getDisk({
  *     name: "persistent-boot-disk",
  *     project: "example",
  * });
diff --git a/sdk/nodejs/compute/getForwardingRule.ts b/sdk/nodejs/compute/getForwardingRule.ts
index 15fa178451..8d3e676726 100644
--- a/sdk/nodejs/compute/getForwardingRule.ts
+++ b/sdk/nodejs/compute/getForwardingRule.ts
@@ -15,7 +15,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-forwarding-rule = gcp.compute.getForwardingRule({
+ * const my_forwarding_rule = gcp.compute.getForwardingRule({
  *     name: "forwarding-rule-us-east1",
  * });
  * ```
@@ -105,7 +105,7 @@ export interface GetForwardingRuleResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-forwarding-rule = gcp.compute.getForwardingRule({
+ * const my_forwarding_rule = gcp.compute.getForwardingRule({
  *     name: "forwarding-rule-us-east1",
  * });
  * ```
diff --git a/sdk/nodejs/compute/getForwardingRules.ts b/sdk/nodejs/compute/getForwardingRules.ts
index ee3fb6a4a9..17ca0be21c 100644
--- a/sdk/nodejs/compute/getForwardingRules.ts
+++ b/sdk/nodejs/compute/getForwardingRules.ts
@@ -15,7 +15,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-forwarding-rules = gcp.compute.getForwardingRules({
+ * const my_forwarding_rules = gcp.compute.getForwardingRules({
  *     project: "my-cloud-project",
  *     region: "us-central1",
  * });
@@ -76,7 +76,7 @@ export interface GetForwardingRulesResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-forwarding-rules = gcp.compute.getForwardingRules({
+ * const my_forwarding_rules = gcp.compute.getForwardingRules({
  *     project: "my-cloud-project",
  *     region: "us-central1",
  * });
diff --git a/sdk/nodejs/compute/getGlobalForwardingRule.ts b/sdk/nodejs/compute/getGlobalForwardingRule.ts
index 5e1898645e..cfd133f688 100644
--- a/sdk/nodejs/compute/getGlobalForwardingRule.ts
+++ b/sdk/nodejs/compute/getGlobalForwardingRule.ts
@@ -15,7 +15,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-forwarding-rule = gcp.compute.getGlobalForwardingRule({
+ * const my_forwarding_rule = gcp.compute.getGlobalForwardingRule({
  *     name: "forwarding-rule-global",
  * });
  * ```
@@ -89,7 +89,7 @@ export interface GetGlobalForwardingRuleResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-forwarding-rule = gcp.compute.getGlobalForwardingRule({
+ * const my_forwarding_rule = gcp.compute.getGlobalForwardingRule({
  *     name: "forwarding-rule-global",
  * });
  * ```
diff --git a/sdk/nodejs/compute/getNetblockIPRanges.ts b/sdk/nodejs/compute/getNetblockIPRanges.ts
index dbc443052e..91f03a2c52 100644
--- a/sdk/nodejs/compute/getNetblockIPRanges.ts
+++ b/sdk/nodejs/compute/getNetblockIPRanges.ts
@@ -27,7 +27,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const legacy-hcs = gcp.compute.getNetblockIPRanges({
+ * const legacy_hcs = gcp.compute.getNetblockIPRanges({
  *     rangeType: "legacy-health-checkers",
  * });
  * const _default = new gcp.compute.Network("default", {name: "test-network"});
@@ -123,7 +123,7 @@ export interface GetNetblockIPRangesResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const legacy-hcs = gcp.compute.getNetblockIPRanges({
+ * const legacy_hcs = gcp.compute.getNetblockIPRanges({
  *     rangeType: "legacy-health-checkers",
  * });
  * const _default = new gcp.compute.Network("default", {name: "test-network"});
diff --git a/sdk/nodejs/compute/getNetwork.ts b/sdk/nodejs/compute/getNetwork.ts
index 3d0b51a802..4e146887da 100644
--- a/sdk/nodejs/compute/getNetwork.ts
+++ b/sdk/nodejs/compute/getNetwork.ts
@@ -13,7 +13,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-network = gcp.compute.getNetwork({
+ * const my_network = gcp.compute.getNetwork({
  *     name: "default-us-east1",
  * });
  * ```
@@ -103,7 +103,7 @@ export interface GetNetworkResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-network = gcp.compute.getNetwork({
+ * const my_network = gcp.compute.getNetwork({
  *     name: "default-us-east1",
  * });
  * ```
diff --git a/sdk/nodejs/compute/getNetworks.ts b/sdk/nodejs/compute/getNetworks.ts
index 00dd656874..fd71b6117d 100644
--- a/sdk/nodejs/compute/getNetworks.ts
+++ b/sdk/nodejs/compute/getNetworks.ts
@@ -13,7 +13,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-networks = gcp.compute.getNetworks({
+ * const my_networks = gcp.compute.getNetworks({
  *     project: "my-cloud-project",
  * });
  * ```
@@ -66,7 +66,7 @@ export interface GetNetworksResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-networks = gcp.compute.getNetworks({
+ * const my_networks = gcp.compute.getNetworks({
  *     project: "my-cloud-project",
  * });
  * ```
diff --git a/sdk/nodejs/compute/getRegionInstanceTemplate.ts b/sdk/nodejs/compute/getRegionInstanceTemplate.ts
index 439417905f..6d0de080cc 100644
--- a/sdk/nodejs/compute/getRegionInstanceTemplate.ts
+++ b/sdk/nodejs/compute/getRegionInstanceTemplate.ts
@@ -23,7 +23,7 @@ import * as utilities from "../utilities";
  *     name: "generic-tpl-20200107",
  * });
  * // using a filter
- * const generic-regex = gcp.compute.getRegionInstanceTemplate({
+ * const generic_regex = gcp.compute.getRegionInstanceTemplate({
  *     filter: "name != generic-tpl-20200107",
  *     mostRecent: true,
  * });
@@ -229,7 +229,7 @@ export interface GetRegionInstanceTemplateResult {
  *     name: "generic-tpl-20200107",
  * });
  * // using a filter
- * const generic-regex = gcp.compute.getRegionInstanceTemplate({
+ * const generic_regex = gcp.compute.getRegionInstanceTemplate({
  *     filter: "name != generic-tpl-20200107",
  *     mostRecent: true,
  * });
diff --git a/sdk/nodejs/compute/getRouter.ts b/sdk/nodejs/compute/getRouter.ts
index 863f106ba5..b73602277c 100644
--- a/sdk/nodejs/compute/getRouter.ts
+++ b/sdk/nodejs/compute/getRouter.ts
@@ -15,7 +15,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-router = gcp.compute.getRouter({
+ * const my_router = gcp.compute.getRouter({
  *     name: "myrouter-us-east1",
  *     network: "my-network",
  * });
@@ -82,7 +82,7 @@ export interface GetRouterResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-router = gcp.compute.getRouter({
+ * const my_router = gcp.compute.getRouter({
  *     name: "myrouter-us-east1",
  *     network: "my-network",
  * });
diff --git a/sdk/nodejs/compute/getRouterStatus.ts b/sdk/nodejs/compute/getRouterStatus.ts
index 4d8a53cdaa..b65ada001a 100644
--- a/sdk/nodejs/compute/getRouterStatus.ts
+++ b/sdk/nodejs/compute/getRouterStatus.ts
@@ -20,7 +20,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-router = gcp.compute.getRouterStatus({
+ * const my_router = gcp.compute.getRouterStatus({
  *     name: "myrouter",
  * });
  * ```
@@ -93,7 +93,7 @@ export interface GetRouterStatusResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-router = gcp.compute.getRouterStatus({
+ * const my_router = gcp.compute.getRouterStatus({
  *     name: "myrouter",
  * });
  * ```
diff --git a/sdk/nodejs/compute/getSSLPolicy.ts b/sdk/nodejs/compute/getSSLPolicy.ts
index ca437965f1..89d6fff79d 100644
--- a/sdk/nodejs/compute/getSSLPolicy.ts
+++ b/sdk/nodejs/compute/getSSLPolicy.ts
@@ -14,7 +14,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-ssl-policy = gcp.compute.getSSLPolicy({
+ * const my_ssl_policy = gcp.compute.getSSLPolicy({
  *     name: "production-ssl-policy",
  * });
  * ```
@@ -96,7 +96,7 @@ export interface GetSSLPolicyResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-ssl-policy = gcp.compute.getSSLPolicy({
+ * const my_ssl_policy = gcp.compute.getSSLPolicy({
  *     name: "production-ssl-policy",
  * });
  * ```
diff --git a/sdk/nodejs/compute/getSnapshot.ts b/sdk/nodejs/compute/getSnapshot.ts
index 2a13e2c98d..5718be8deb 100644
--- a/sdk/nodejs/compute/getSnapshot.ts
+++ b/sdk/nodejs/compute/getSnapshot.ts
@@ -24,7 +24,7 @@ import * as utilities from "../utilities";
  *     name: "my-snapshot",
  * });
  * // using a filter
- * const latest-snapshot = gcp.compute.getSnapshot({
+ * const latest_snapshot = gcp.compute.getSnapshot({
  *     filter: "name != my-snapshot",
  *     mostRecent: true,
  * });
@@ -117,7 +117,7 @@ export interface GetSnapshotResult {
  *     name: "my-snapshot",
  * });
  * // using a filter
- * const latest-snapshot = gcp.compute.getSnapshot({
+ * const latest_snapshot = gcp.compute.getSnapshot({
  *     filter: "name != my-snapshot",
  *     mostRecent: true,
  * });
diff --git a/sdk/nodejs/compute/getSubnetwork.ts b/sdk/nodejs/compute/getSubnetwork.ts
index 0e247b520f..8dc1ae0621 100644
--- a/sdk/nodejs/compute/getSubnetwork.ts
+++ b/sdk/nodejs/compute/getSubnetwork.ts
@@ -15,7 +15,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-subnetwork = gcp.compute.getSubnetwork({
+ * const my_subnetwork = gcp.compute.getSubnetwork({
  *     name: "default-us-east1",
  *     region: "us-east1",
  * });
@@ -117,7 +117,7 @@ export interface GetSubnetworkResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-subnetwork = gcp.compute.getSubnetwork({
+ * const my_subnetwork = gcp.compute.getSubnetwork({
  *     name: "default-us-east1",
  *     region: "us-east1",
  * });
diff --git a/sdk/nodejs/compute/getSubnetworks.ts b/sdk/nodejs/compute/getSubnetworks.ts
index cf7e991f57..0b14253fb1 100644
--- a/sdk/nodejs/compute/getSubnetworks.ts
+++ b/sdk/nodejs/compute/getSubnetworks.ts
@@ -17,7 +17,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-subnetworks = gcp.compute.getSubnetworks({
+ * const my_subnetworks = gcp.compute.getSubnetworks({
  *     filter: "ipCidrRange eq 192.168.178.0/24",
  *     project: "my-project",
  *     region: "us-east1",
@@ -81,7 +81,7 @@ export interface GetSubnetworksResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-subnetworks = gcp.compute.getSubnetworks({
+ * const my_subnetworks = gcp.compute.getSubnetworks({
  *     filter: "ipCidrRange eq 192.168.178.0/24",
  *     project: "my-project",
  *     region: "us-east1",
diff --git a/sdk/nodejs/compute/getVPNGateway.ts b/sdk/nodejs/compute/getVPNGateway.ts
index 8d5e60c3f3..f4ae5863c9 100644
--- a/sdk/nodejs/compute/getVPNGateway.ts
+++ b/sdk/nodejs/compute/getVPNGateway.ts
@@ -13,7 +13,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-vpn-gateway = gcp.compute.getVPNGateway({
+ * const my_vpn_gateway = gcp.compute.getVPNGateway({
  *     name: "vpn-gateway-us-east1",
  * });
  * ```
@@ -86,7 +86,7 @@ export interface GetVPNGatewayResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-vpn-gateway = gcp.compute.getVPNGateway({
+ * const my_vpn_gateway = gcp.compute.getVPNGateway({
  *     name: "vpn-gateway-us-east1",
  * });
  * ```
diff --git a/sdk/nodejs/compute/instanceTemplate.ts b/sdk/nodejs/compute/instanceTemplate.ts
index c2b46f5f03..6028cff0f9 100644
--- a/sdk/nodejs/compute/instanceTemplate.ts
+++ b/sdk/nodejs/compute/instanceTemplate.ts
@@ -96,7 +96,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.compute.getDefaultServiceAccount({});
+ * const _default = gcp.compute.getDefaultServiceAccount({});
  * const myImage = gcp.compute.getImage({
  *     family: "debian-11",
  *     project: "debian-cloud",
diff --git a/sdk/nodejs/compute/routerStatus.ts b/sdk/nodejs/compute/routerStatus.ts
index 2035df2f7f..b8164b3445 100644
--- a/sdk/nodejs/compute/routerStatus.ts
+++ b/sdk/nodejs/compute/routerStatus.ts
@@ -20,7 +20,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-router = gcp.compute.getRouterStatus({
+ * const my_router = gcp.compute.getRouterStatus({
  *     name: "myrouter",
  * });
  * ```
@@ -95,7 +95,7 @@ export interface RouterStatusResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-router = gcp.compute.getRouterStatus({
+ * const my_router = gcp.compute.getRouterStatus({
  *     name: "myrouter",
  * });
  * ```
diff --git a/sdk/nodejs/compute/targetInstance.ts b/sdk/nodejs/compute/targetInstance.ts
index 354bf80449..8e77682840 100644
--- a/sdk/nodejs/compute/targetInstance.ts
+++ b/sdk/nodejs/compute/targetInstance.ts
@@ -54,7 +54,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const target-vm = gcp.compute.getNetwork({
+ * const target_vm = gcp.compute.getNetwork({
  *     name: "default",
  * });
  * const vmimage = gcp.compute.getImage({
diff --git a/sdk/nodejs/datafusion/instance.ts b/sdk/nodejs/datafusion/instance.ts
index 58f9771418..7aadfa9999 100644
--- a/sdk/nodejs/datafusion/instance.ts
+++ b/sdk/nodejs/datafusion/instance.ts
@@ -35,7 +35,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.appengine.getDefaultServiceAccount({});
+ * const _default = gcp.appengine.getDefaultServiceAccount({});
  * const network = new gcp.compute.Network("network", {name: "datafusion-full-network"});
  * const privateIpAlloc = new gcp.compute.GlobalAddress("private_ip_alloc", {
  *     name: "datafusion-ip-alloc",
diff --git a/sdk/nodejs/developerconnect/connection.ts b/sdk/nodejs/developerconnect/connection.ts
index aaf51f718b..ad7ddf9ccb 100644
--- a/sdk/nodejs/developerconnect/connection.ts
+++ b/sdk/nodejs/developerconnect/connection.ts
@@ -71,7 +71,7 @@ import * as utilities from "../utilities";
  *     }).then(invoke => invoke.result),
  * });
  * const devconnect_p4sa = new gcp.projects.ServiceIdentity("devconnect-p4sa", {service: "developerconnect.googleapis.com"});
- * const p4sa-secretAccessor = gcp.organizations.getIAMPolicyOutput({
+ * const p4sa_secretAccessor = gcp.organizations.getIAMPolicyOutput({
  *     bindings: [{
  *         role: "roles/secretmanager.secretAccessor",
  *         members: [devconnect_p4sa.member],
diff --git a/sdk/nodejs/logging/billingAccountBucketConfig.ts b/sdk/nodejs/logging/billingAccountBucketConfig.ts
index 003466c1a5..1b0d5fd268 100644
--- a/sdk/nodejs/logging/billingAccountBucketConfig.ts
+++ b/sdk/nodejs/logging/billingAccountBucketConfig.ts
@@ -19,7 +19,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.organizations.getBillingAccount({
+ * const _default = gcp.organizations.getBillingAccount({
  *     billingAccount: "00AA00-000AAA-00AA0A",
  * });
  * const basic = new gcp.logging.BillingAccountBucketConfig("basic", {
diff --git a/sdk/nodejs/logging/getSink.ts b/sdk/nodejs/logging/getSink.ts
index 19ef404ba5..f4253b162d 100644
--- a/sdk/nodejs/logging/getSink.ts
+++ b/sdk/nodejs/logging/getSink.ts
@@ -20,7 +20,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const project-sink = gcp.logging.getSink({
+ * const project_sink = gcp.logging.getSink({
  *     id: "projects/0123456789/sinks/my-sink-name",
  * });
  * ```
@@ -100,7 +100,7 @@ export interface GetSinkResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const project-sink = gcp.logging.getSink({
+ * const project_sink = gcp.logging.getSink({
  *     id: "projects/0123456789/sinks/my-sink-name",
  * });
  * ```
diff --git a/sdk/nodejs/logging/organizationBucketConfig.ts b/sdk/nodejs/logging/organizationBucketConfig.ts
index b96357913f..f4f2b2df7e 100644
--- a/sdk/nodejs/logging/organizationBucketConfig.ts
+++ b/sdk/nodejs/logging/organizationBucketConfig.ts
@@ -19,7 +19,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.organizations.getOrganization({
+ * const _default = gcp.organizations.getOrganization({
  *     organization: "123456789",
  * });
  * const basic = new gcp.logging.OrganizationBucketConfig("basic", {
diff --git a/sdk/nodejs/monitoring/getClusterIstioService.ts b/sdk/nodejs/monitoring/getClusterIstioService.ts
index fec552be30..a2a93b6ffb 100644
--- a/sdk/nodejs/monitoring/getClusterIstioService.ts
+++ b/sdk/nodejs/monitoring/getClusterIstioService.ts
@@ -30,7 +30,7 @@ import * as utilities from "../utilities";
  * import * as gcp from "@pulumi/gcp";
  *
  * // Monitors the default ClusterIstio service
- * const default = gcp.monitoring.getClusterIstioService({
+ * const _default = gcp.monitoring.getClusterIstioService({
  *     location: "us-west2-a",
  *     clusterName: "west",
  *     serviceNamespace: "istio-system",
@@ -137,7 +137,7 @@ export interface GetClusterIstioServiceResult {
  * import * as gcp from "@pulumi/gcp";
  *
  * // Monitors the default ClusterIstio service
- * const default = gcp.monitoring.getClusterIstioService({
+ * const _default = gcp.monitoring.getClusterIstioService({
  *     location: "us-west2-a",
  *     clusterName: "west",
  *     serviceNamespace: "istio-system",
diff --git a/sdk/nodejs/monitoring/getIstioCanonicalService.ts b/sdk/nodejs/monitoring/getIstioCanonicalService.ts
index f895530712..1071e312bd 100644
--- a/sdk/nodejs/monitoring/getIstioCanonicalService.ts
+++ b/sdk/nodejs/monitoring/getIstioCanonicalService.ts
@@ -30,7 +30,7 @@ import * as utilities from "../utilities";
  * import * as gcp from "@pulumi/gcp";
  *
  * // Monitors the default MeshIstio service
- * const default = gcp.monitoring.getIstioCanonicalService({
+ * const _default = gcp.monitoring.getIstioCanonicalService({
  *     meshUid: "proj-573164786102",
  *     canonicalServiceNamespace: "istio-system",
  *     canonicalService: "prometheus",
@@ -129,7 +129,7 @@ export interface GetIstioCanonicalServiceResult {
  * import * as gcp from "@pulumi/gcp";
  *
  * // Monitors the default MeshIstio service
- * const default = gcp.monitoring.getIstioCanonicalService({
+ * const _default = gcp.monitoring.getIstioCanonicalService({
  *     meshUid: "proj-573164786102",
  *     canonicalServiceNamespace: "istio-system",
  *     canonicalService: "prometheus",
diff --git a/sdk/nodejs/monitoring/getMeshIstioService.ts b/sdk/nodejs/monitoring/getMeshIstioService.ts
index 8dcaeb99a9..c66bf2aaf9 100644
--- a/sdk/nodejs/monitoring/getMeshIstioService.ts
+++ b/sdk/nodejs/monitoring/getMeshIstioService.ts
@@ -30,7 +30,7 @@ import * as utilities from "../utilities";
  * import * as gcp from "@pulumi/gcp";
  *
  * // Monitors the default MeshIstio service
- * const default = gcp.monitoring.getMeshIstioService({
+ * const _default = gcp.monitoring.getMeshIstioService({
  *     meshUid: "proj-573164786102",
  *     serviceNamespace: "istio-system",
  *     serviceName: "prometheus",
@@ -129,7 +129,7 @@ export interface GetMeshIstioServiceResult {
  * import * as gcp from "@pulumi/gcp";
  *
  * // Monitors the default MeshIstio service
- * const default = gcp.monitoring.getMeshIstioService({
+ * const _default = gcp.monitoring.getMeshIstioService({
  *     meshUid: "proj-573164786102",
  *     serviceNamespace: "istio-system",
  *     serviceName: "prometheus",
diff --git a/sdk/nodejs/monitoring/slo.ts b/sdk/nodejs/monitoring/slo.ts
index 22225acda8..7338c1c32a 100644
--- a/sdk/nodejs/monitoring/slo.ts
+++ b/sdk/nodejs/monitoring/slo.ts
@@ -30,7 +30,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.monitoring.getAppEngineService({
+ * const _default = gcp.monitoring.getAppEngineService({
  *     moduleId: "default",
  * });
  * const appengSlo = new gcp.monitoring.Slo("appeng_slo", {
diff --git a/sdk/nodejs/netapp/backup.ts b/sdk/nodejs/netapp/backup.ts
index 294fbbdf35..bb49b9d348 100644
--- a/sdk/nodejs/netapp/backup.ts
+++ b/sdk/nodejs/netapp/backup.ts
@@ -34,7 +34,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.compute.getNetwork({
+ * const _default = gcp.compute.getNetwork({
  *     name: "",
  * });
  * const defaultStoragePool = new gcp.netapp.StoragePool("default", {
diff --git a/sdk/nodejs/netapp/volume.ts b/sdk/nodejs/netapp/volume.ts
index fba861279f..5d2cdcdf82 100644
--- a/sdk/nodejs/netapp/volume.ts
+++ b/sdk/nodejs/netapp/volume.ts
@@ -28,7 +28,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.compute.getNetwork({
+ * const _default = gcp.compute.getNetwork({
  *     name: "test-network",
  * });
  * const defaultStoragePool = new gcp.netapp.StoragePool("default", {
diff --git a/sdk/nodejs/netapp/volumeReplication.ts b/sdk/nodejs/netapp/volumeReplication.ts
index a69606ddfc..84f6343a73 100644
--- a/sdk/nodejs/netapp/volumeReplication.ts
+++ b/sdk/nodejs/netapp/volumeReplication.ts
@@ -15,7 +15,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.compute.getNetwork({
+ * const _default = gcp.compute.getNetwork({
  *     name: "test-network",
  * });
  * const sourcePool = new gcp.netapp.StoragePool("source_pool", {
diff --git a/sdk/nodejs/netapp/volumeSnapshot.ts b/sdk/nodejs/netapp/volumeSnapshot.ts
index 477e88d648..898528187b 100644
--- a/sdk/nodejs/netapp/volumeSnapshot.ts
+++ b/sdk/nodejs/netapp/volumeSnapshot.ts
@@ -26,7 +26,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.compute.getNetwork({
+ * const _default = gcp.compute.getNetwork({
  *     name: "test-network",
  * });
  * const defaultStoragePool = new gcp.netapp.StoragePool("default", {
diff --git a/sdk/nodejs/oracledatabase/autonomousDatabase.ts b/sdk/nodejs/oracledatabase/autonomousDatabase.ts
index b0d81484c3..0d744062c6 100644
--- a/sdk/nodejs/oracledatabase/autonomousDatabase.ts
+++ b/sdk/nodejs/oracledatabase/autonomousDatabase.ts
@@ -23,7 +23,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.compute.getNetwork({
+ * const _default = gcp.compute.getNetwork({
  *     name: "new",
  *     project: "my-project",
  * });
@@ -51,7 +51,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.compute.getNetwork({
+ * const _default = gcp.compute.getNetwork({
  *     name: "new",
  *     project: "my-project",
  * });
diff --git a/sdk/nodejs/oracledatabase/cloudVmCluster.ts b/sdk/nodejs/oracledatabase/cloudVmCluster.ts
index be832d7a2a..1b4d36eb47 100644
--- a/sdk/nodejs/oracledatabase/cloudVmCluster.ts
+++ b/sdk/nodejs/oracledatabase/cloudVmCluster.ts
@@ -35,7 +35,7 @@ import * as utilities from "../utilities";
  *     },
  *     deletionProtection: true,
  * });
- * const default = gcp.compute.getNetwork({
+ * const _default = gcp.compute.getNetwork({
  *     name: "new",
  *     project: "my-project",
  * });
@@ -76,7 +76,7 @@ import * as utilities from "../utilities";
  *     },
  *     deletionProtection: true,
  * });
- * const default = gcp.compute.getNetwork({
+ * const _default = gcp.compute.getNetwork({
  *     name: "new",
  *     project: "my-project",
  * });
diff --git a/sdk/nodejs/oracledatabase/getAutonomousDatabase.ts b/sdk/nodejs/oracledatabase/getAutonomousDatabase.ts
index bbf0c3b96b..46fb394bdd 100644
--- a/sdk/nodejs/oracledatabase/getAutonomousDatabase.ts
+++ b/sdk/nodejs/oracledatabase/getAutonomousDatabase.ts
@@ -18,7 +18,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-instance = gcp.oracledatabase.getAutonomousDatabase({
+ * const my_instance = gcp.oracledatabase.getAutonomousDatabase({
  *     location: "us-east4",
  *     autonomousDatabaseId: "autonomous_database_id",
  * });
@@ -91,7 +91,7 @@ export interface GetAutonomousDatabaseResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-instance = gcp.oracledatabase.getAutonomousDatabase({
+ * const my_instance = gcp.oracledatabase.getAutonomousDatabase({
  *     location: "us-east4",
  *     autonomousDatabaseId: "autonomous_database_id",
  * });
diff --git a/sdk/nodejs/oracledatabase/getAutonomousDatabases.ts b/sdk/nodejs/oracledatabase/getAutonomousDatabases.ts
index e1a6ab1668..aa0fea8fb5 100644
--- a/sdk/nodejs/oracledatabase/getAutonomousDatabases.ts
+++ b/sdk/nodejs/oracledatabase/getAutonomousDatabases.ts
@@ -18,7 +18,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-adbs = gcp.oracledatabase.getAutonomousDatabases({
+ * const my_adbs = gcp.oracledatabase.getAutonomousDatabases({
  *     location: "us-east4",
  * });
  * ```
@@ -72,7 +72,7 @@ export interface GetAutonomousDatabasesResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-adbs = gcp.oracledatabase.getAutonomousDatabases({
+ * const my_adbs = gcp.oracledatabase.getAutonomousDatabases({
  *     location: "us-east4",
  * });
  * ```
diff --git a/sdk/nodejs/oracledatabase/getCloudExadataInfrastructure.ts b/sdk/nodejs/oracledatabase/getCloudExadataInfrastructure.ts
index 76d697b3c0..cb4f0273bd 100644
--- a/sdk/nodejs/oracledatabase/getCloudExadataInfrastructure.ts
+++ b/sdk/nodejs/oracledatabase/getCloudExadataInfrastructure.ts
@@ -18,7 +18,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-instance = gcp.oracledatabase.getCloudExadataInfrastructure({
+ * const my_instance = gcp.oracledatabase.getCloudExadataInfrastructure({
  *     location: "us-east4",
  *     cloudExadataInfrastructureId: "exadata-id",
  * });
@@ -88,7 +88,7 @@ export interface GetCloudExadataInfrastructureResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-instance = gcp.oracledatabase.getCloudExadataInfrastructure({
+ * const my_instance = gcp.oracledatabase.getCloudExadataInfrastructure({
  *     location: "us-east4",
  *     cloudExadataInfrastructureId: "exadata-id",
  * });
diff --git a/sdk/nodejs/oracledatabase/getCloudVmCluster.ts b/sdk/nodejs/oracledatabase/getCloudVmCluster.ts
index cc04a4ac38..7a17081fde 100644
--- a/sdk/nodejs/oracledatabase/getCloudVmCluster.ts
+++ b/sdk/nodejs/oracledatabase/getCloudVmCluster.ts
@@ -18,7 +18,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-vmcluster = gcp.oracledatabase.getCloudVmCluster({
+ * const my_vmcluster = gcp.oracledatabase.getCloudVmCluster({
  *     location: "us-east4",
  *     cloudVmClusterId: "vmcluster-id",
  * });
@@ -91,7 +91,7 @@ export interface GetCloudVmClusterResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-vmcluster = gcp.oracledatabase.getCloudVmCluster({
+ * const my_vmcluster = gcp.oracledatabase.getCloudVmCluster({
  *     location: "us-east4",
  *     cloudVmClusterId: "vmcluster-id",
  * });
diff --git a/sdk/nodejs/organizations/getFolders.ts b/sdk/nodejs/organizations/getFolders.ts
index bf3db95392..5f70630bf6 100644
--- a/sdk/nodejs/organizations/getFolders.ts
+++ b/sdk/nodejs/organizations/getFolders.ts
@@ -19,10 +19,10 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-org-folders = gcp.organizations.getFolders({
+ * const my_org_folders = gcp.organizations.getFolders({
  *     parentId: `organizations/${organizationId}`,
  * });
- * const first-folder = my_org_folders.then(my_org_folders => gcp.organizations.getFolder({
+ * const first_folder = my_org_folders.then(my_org_folders => gcp.organizations.getFolder({
  *     folder: my_org_folders.folders?.[0]?.name,
  * }));
  * ```
@@ -71,10 +71,10 @@ export interface GetFoldersResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-org-folders = gcp.organizations.getFolders({
+ * const my_org_folders = gcp.organizations.getFolders({
  *     parentId: `organizations/${organizationId}`,
  * });
- * const first-folder = my_org_folders.then(my_org_folders => gcp.organizations.getFolder({
+ * const first_folder = my_org_folders.then(my_org_folders => gcp.organizations.getFolder({
  *     folder: my_org_folders.folders?.[0]?.name,
  * }));
  * ```
diff --git a/sdk/nodejs/privilegedaccessmanager/getEntitlement.ts b/sdk/nodejs/privilegedaccessmanager/getEntitlement.ts
index 45d3f8a097..5520ebfea8 100644
--- a/sdk/nodejs/privilegedaccessmanager/getEntitlement.ts
+++ b/sdk/nodejs/privilegedaccessmanager/getEntitlement.ts
@@ -21,7 +21,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-entitlement = gcp.privilegedaccessmanager.getEntitlement({
+ * const my_entitlement = gcp.privilegedaccessmanager.getEntitlement({
  *     parent: "projects/my-project",
  *     location: "global",
  *     entitlementId: "my-entitlement",
@@ -94,7 +94,7 @@ export interface GetEntitlementResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-entitlement = gcp.privilegedaccessmanager.getEntitlement({
+ * const my_entitlement = gcp.privilegedaccessmanager.getEntitlement({
  *     parent: "projects/my-project",
  *     location: "global",
  *     entitlementId: "my-entitlement",
diff --git a/sdk/nodejs/projects/getProject.ts b/sdk/nodejs/projects/getProject.ts
index 472640476e..3e2eb9ea04 100644
--- a/sdk/nodejs/projects/getProject.ts
+++ b/sdk/nodejs/projects/getProject.ts
@@ -19,10 +19,10 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-org-projects = gcp.projects.getProject({
+ * const my_org_projects = gcp.projects.getProject({
  *     filter: "parent.id:012345678910 lifecycleState:DELETE_REQUESTED",
  * });
- * const deletion-candidate = my_org_projects.then(my_org_projects => gcp.organizations.getProject({
+ * const deletion_candidate = my_org_projects.then(my_org_projects => gcp.organizations.getProject({
  *     projectId: my_org_projects.projects?.[0]?.projectId,
  * }));
  * ```
@@ -71,10 +71,10 @@ export interface GetProjectResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-org-projects = gcp.projects.getProject({
+ * const my_org_projects = gcp.projects.getProject({
  *     filter: "parent.id:012345678910 lifecycleState:DELETE_REQUESTED",
  * });
- * const deletion-candidate = my_org_projects.then(my_org_projects => gcp.organizations.getProject({
+ * const deletion_candidate = my_org_projects.then(my_org_projects => gcp.organizations.getProject({
  *     projectId: my_org_projects.projects?.[0]?.projectId,
  * }));
  * ```
diff --git a/sdk/nodejs/projects/getProjectService.ts b/sdk/nodejs/projects/getProjectService.ts
index 5b94bed99f..b0b78b63ea 100644
--- a/sdk/nodejs/projects/getProjectService.ts
+++ b/sdk/nodejs/projects/getProjectService.ts
@@ -25,7 +25,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-project-service = gcp.projects.getProjectService({
+ * const my_project_service = gcp.projects.getProjectService({
  *     service: "my-project-service",
  * });
  * ```
@@ -90,7 +90,7 @@ export interface GetProjectServiceResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-project-service = gcp.projects.getProjectService({
+ * const my_project_service = gcp.projects.getProjectService({
  *     service: "my-project-service",
  * });
  * ```
diff --git a/sdk/nodejs/pubsub/getSubscription.ts b/sdk/nodejs/pubsub/getSubscription.ts
index d81a0c02bb..8175080704 100644
--- a/sdk/nodejs/pubsub/getSubscription.ts
+++ b/sdk/nodejs/pubsub/getSubscription.ts
@@ -17,7 +17,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-pubsub-subscription = gcp.pubsub.getSubscription({
+ * const my_pubsub_subscription = gcp.pubsub.getSubscription({
  *     name: "my-pubsub-subscription",
  * });
  * ```
@@ -85,7 +85,7 @@ export interface GetSubscriptionResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-pubsub-subscription = gcp.pubsub.getSubscription({
+ * const my_pubsub_subscription = gcp.pubsub.getSubscription({
  *     name: "my-pubsub-subscription",
  * });
  * ```
diff --git a/sdk/nodejs/pubsub/getTopic.ts b/sdk/nodejs/pubsub/getTopic.ts
index 9864413469..d133658eed 100644
--- a/sdk/nodejs/pubsub/getTopic.ts
+++ b/sdk/nodejs/pubsub/getTopic.ts
@@ -17,7 +17,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-pubsub-topic = gcp.pubsub.getTopic({
+ * const my_pubsub_topic = gcp.pubsub.getTopic({
  *     name: "my-pubsub-topic",
  * });
  * ```
@@ -77,7 +77,7 @@ export interface GetTopicResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-pubsub-topic = gcp.pubsub.getTopic({
+ * const my_pubsub_topic = gcp.pubsub.getTopic({
  *     name: "my-pubsub-topic",
  * });
  * ```
diff --git a/sdk/nodejs/redis/instance.ts b/sdk/nodejs/redis/instance.ts
index 24a751bf69..f85be9a546 100644
--- a/sdk/nodejs/redis/instance.ts
+++ b/sdk/nodejs/redis/instance.ts
@@ -42,7 +42,7 @@ import * as utilities from "../utilities";
  * // If this network hasn't been created and you are using this example in your
  * // config, add an additional network resource or change
  * // this from "data"to "resource"
- * const redis-network = gcp.compute.getNetwork({
+ * const redis_network = gcp.compute.getNetwork({
  *     name: "redis-test-network",
  * });
  * const cache = new gcp.redis.Instance("cache", {
@@ -145,7 +145,7 @@ import * as utilities from "../utilities";
  * // If this network hasn't been created and you are using this example in your
  * // config, add an additional network resource or change
  * // this from "data"to "resource"
- * const redis-network = gcp.compute.getNetwork({
+ * const redis_network = gcp.compute.getNetwork({
  *     name: "redis-test-network",
  * });
  * const cache = new gcp.redis.Instance("cache", {
@@ -188,7 +188,7 @@ import * as utilities from "../utilities";
  * // If this network hasn't been created and you are using this example in your
  * // config, add an additional network resource or change
  * // this from "data"to "resource"
- * const redis-network = gcp.compute.getNetwork({
+ * const redis_network = gcp.compute.getNetwork({
  *     name: "redis-test-network",
  * });
  * const cache = new gcp.redis.Instance("cache", {
diff --git a/sdk/nodejs/runtimeconfig/getConfig.ts b/sdk/nodejs/runtimeconfig/getConfig.ts
index f2652b7230..68c58dbd22 100644
--- a/sdk/nodejs/runtimeconfig/getConfig.ts
+++ b/sdk/nodejs/runtimeconfig/getConfig.ts
@@ -11,7 +11,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const run-service = gcp.runtimeconfig.getConfig({
+ * const run_service = gcp.runtimeconfig.getConfig({
  *     name: "my-service",
  * });
  * ```
@@ -60,7 +60,7 @@ export interface GetConfigResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const run-service = gcp.runtimeconfig.getConfig({
+ * const run_service = gcp.runtimeconfig.getConfig({
  *     name: "my-service",
  * });
  * ```
diff --git a/sdk/nodejs/runtimeconfig/getVariable.ts b/sdk/nodejs/runtimeconfig/getVariable.ts
index 736577fb08..65056b607d 100644
--- a/sdk/nodejs/runtimeconfig/getVariable.ts
+++ b/sdk/nodejs/runtimeconfig/getVariable.ts
@@ -11,7 +11,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const run-service = gcp.runtimeconfig.getVariable({
+ * const run_service = gcp.runtimeconfig.getVariable({
  *     parent: "my-service",
  *     name: "prod-variables/hostname",
  * });
@@ -69,7 +69,7 @@ export interface GetVariableResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const run-service = gcp.runtimeconfig.getVariable({
+ * const run_service = gcp.runtimeconfig.getVariable({
  *     parent: "my-service",
  *     name: "prod-variables/hostname",
  * });
diff --git a/sdk/nodejs/securitycenter/instanceIamBinding.ts b/sdk/nodejs/securitycenter/instanceIamBinding.ts
index 708ae638ab..025022f548 100644
--- a/sdk/nodejs/securitycenter/instanceIamBinding.ts
+++ b/sdk/nodejs/securitycenter/instanceIamBinding.ts
@@ -35,7 +35,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.appengine.getDefaultServiceAccount({});
+ * const _default = gcp.appengine.getDefaultServiceAccount({});
  * const network = new gcp.compute.Network("network", {name: "datafusion-full-network"});
  * const privateIpAlloc = new gcp.compute.GlobalAddress("private_ip_alloc", {
  *     name: "datafusion-ip-alloc",
diff --git a/sdk/nodejs/securitycenter/instanceIamMember.ts b/sdk/nodejs/securitycenter/instanceIamMember.ts
index f1f3e7df16..1d8330ed53 100644
--- a/sdk/nodejs/securitycenter/instanceIamMember.ts
+++ b/sdk/nodejs/securitycenter/instanceIamMember.ts
@@ -35,7 +35,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.appengine.getDefaultServiceAccount({});
+ * const _default = gcp.appengine.getDefaultServiceAccount({});
  * const network = new gcp.compute.Network("network", {name: "datafusion-full-network"});
  * const privateIpAlloc = new gcp.compute.GlobalAddress("private_ip_alloc", {
  *     name: "datafusion-ip-alloc",
diff --git a/sdk/nodejs/securitycenter/instanceIamPolicy.ts b/sdk/nodejs/securitycenter/instanceIamPolicy.ts
index a813af1cdd..25831c6dc9 100644
--- a/sdk/nodejs/securitycenter/instanceIamPolicy.ts
+++ b/sdk/nodejs/securitycenter/instanceIamPolicy.ts
@@ -33,7 +33,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.appengine.getDefaultServiceAccount({});
+ * const _default = gcp.appengine.getDefaultServiceAccount({});
  * const network = new gcp.compute.Network("network", {name: "datafusion-full-network"});
  * const privateIpAlloc = new gcp.compute.GlobalAddress("private_ip_alloc", {
  *     name: "datafusion-ip-alloc",
diff --git a/sdk/nodejs/serviceaccount/getAccountAccessToken.ts b/sdk/nodejs/serviceaccount/getAccountAccessToken.ts
index 5b8dd5bb35..333ebec92f 100644
--- a/sdk/nodejs/serviceaccount/getAccountAccessToken.ts
+++ b/sdk/nodejs/serviceaccount/getAccountAccessToken.ts
@@ -36,7 +36,7 @@ import * as utilities from "../utilities";
  * import * as gcp from "@pulumi/gcp";
  *
  * export = async () => {
- *     const default = await gcp.organizations.getClientConfig({});
+ *     const _default = await gcp.organizations.getClientConfig({});
  *     const defaultGetAccountAccessToken = await gcp.serviceaccount.getAccountAccessToken({
  *         targetServiceAccount: "service_B@projectB.iam.gserviceaccount.com",
  *         scopes: [
@@ -135,7 +135,7 @@ export interface GetAccountAccessTokenResult {
  * import * as gcp from "@pulumi/gcp";
  *
  * export = async () => {
- *     const default = await gcp.organizations.getClientConfig({});
+ *     const _default = await gcp.organizations.getClientConfig({});
  *     const defaultGetAccountAccessToken = await gcp.serviceaccount.getAccountAccessToken({
  *         targetServiceAccount: "service_B@projectB.iam.gserviceaccount.com",
  *         scopes: [
diff --git a/sdk/nodejs/serviceaccount/iambinding.ts b/sdk/nodejs/serviceaccount/iambinding.ts
index d5513de192..9c48103b1b 100644
--- a/sdk/nodejs/serviceaccount/iambinding.ts
+++ b/sdk/nodejs/serviceaccount/iambinding.ts
@@ -88,7 +88,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.compute.getDefaultServiceAccount({});
+ * const _default = gcp.compute.getDefaultServiceAccount({});
  * const sa = new gcp.serviceaccount.Account("sa", {
  *     accountId: "my-service-account",
  *     displayName: "A service account that Jane can use",
@@ -197,7 +197,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.compute.getDefaultServiceAccount({});
+ * const _default = gcp.compute.getDefaultServiceAccount({});
  * const sa = new gcp.serviceaccount.Account("sa", {
  *     accountId: "my-service-account",
  *     displayName: "A service account that Jane can use",
diff --git a/sdk/nodejs/serviceaccount/iammember.ts b/sdk/nodejs/serviceaccount/iammember.ts
index 1a37dfa122..492757ecb4 100644
--- a/sdk/nodejs/serviceaccount/iammember.ts
+++ b/sdk/nodejs/serviceaccount/iammember.ts
@@ -88,7 +88,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.compute.getDefaultServiceAccount({});
+ * const _default = gcp.compute.getDefaultServiceAccount({});
  * const sa = new gcp.serviceaccount.Account("sa", {
  *     accountId: "my-service-account",
  *     displayName: "A service account that Jane can use",
@@ -197,7 +197,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.compute.getDefaultServiceAccount({});
+ * const _default = gcp.compute.getDefaultServiceAccount({});
  * const sa = new gcp.serviceaccount.Account("sa", {
  *     accountId: "my-service-account",
  *     displayName: "A service account that Jane can use",
diff --git a/sdk/nodejs/serviceaccount/iampolicy.ts b/sdk/nodejs/serviceaccount/iampolicy.ts
index 890864c84e..c77e76a77c 100644
--- a/sdk/nodejs/serviceaccount/iampolicy.ts
+++ b/sdk/nodejs/serviceaccount/iampolicy.ts
@@ -86,7 +86,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.compute.getDefaultServiceAccount({});
+ * const _default = gcp.compute.getDefaultServiceAccount({});
  * const sa = new gcp.serviceaccount.Account("sa", {
  *     accountId: "my-service-account",
  *     displayName: "A service account that Jane can use",
@@ -195,7 +195,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.compute.getDefaultServiceAccount({});
+ * const _default = gcp.compute.getDefaultServiceAccount({});
  * const sa = new gcp.serviceaccount.Account("sa", {
  *     accountId: "my-service-account",
  *     displayName: "A service account that Jane can use",
diff --git a/sdk/nodejs/sourcerepo/getRepository.ts b/sdk/nodejs/sourcerepo/getRepository.ts
index 1bdf24e0ae..18cea0ea76 100644
--- a/sdk/nodejs/sourcerepo/getRepository.ts
+++ b/sdk/nodejs/sourcerepo/getRepository.ts
@@ -18,7 +18,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-repo = gcp.sourcerepo.getRepository({
+ * const my_repo = gcp.sourcerepo.getRepository({
  *     name: "my-repository",
  * });
  * ```
@@ -72,7 +72,7 @@ export interface GetRepositoryResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-repo = gcp.sourcerepo.getRepository({
+ * const my_repo = gcp.sourcerepo.getRepository({
  *     name: "my-repository",
  * });
  * ```
diff --git a/sdk/nodejs/sql/getDatabaseInstanceLatestRecoveryTime.ts b/sdk/nodejs/sql/getDatabaseInstanceLatestRecoveryTime.ts
index 8da3f99046..4538e98ad0 100644
--- a/sdk/nodejs/sql/getDatabaseInstanceLatestRecoveryTime.ts
+++ b/sdk/nodejs/sql/getDatabaseInstanceLatestRecoveryTime.ts
@@ -16,7 +16,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.sql.getDatabaseInstanceLatestRecoveryTime({
+ * const _default = gcp.sql.getDatabaseInstanceLatestRecoveryTime({
  *     instance: "sample-instance",
  * });
  * export const latestRecoveryTime = _default;
@@ -77,7 +77,7 @@ export interface GetDatabaseInstanceLatestRecoveryTimeResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.sql.getDatabaseInstanceLatestRecoveryTime({
+ * const _default = gcp.sql.getDatabaseInstanceLatestRecoveryTime({
  *     instance: "sample-instance",
  * });
  * export const latestRecoveryTime = _default;
diff --git a/sdk/nodejs/storage/getBucket.ts b/sdk/nodejs/storage/getBucket.ts
index 4d8c46f93a..516dfdc153 100644
--- a/sdk/nodejs/storage/getBucket.ts
+++ b/sdk/nodejs/storage/getBucket.ts
@@ -18,7 +18,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-bucket = gcp.storage.getBucket({
+ * const my_bucket = gcp.storage.getBucket({
  *     name: "my-bucket",
  * });
  * ```
@@ -94,7 +94,7 @@ export interface GetBucketResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const my-bucket = gcp.storage.getBucket({
+ * const my_bucket = gcp.storage.getBucket({
  *     name: "my-bucket",
  * });
  * ```
diff --git a/sdk/nodejs/storage/getTransferProjectServiceAccount.ts b/sdk/nodejs/storage/getTransferProjectServiceAccount.ts
index 55c7390c93..4718160df9 100644
--- a/sdk/nodejs/storage/getTransferProjectServiceAccount.ts
+++ b/sdk/nodejs/storage/getTransferProjectServiceAccount.ts
@@ -13,7 +13,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.storage.getTransferProjectServiceAccount({});
+ * const _default = gcp.storage.getTransferProjectServiceAccount({});
  * export const defaultAccount = _default.then(_default => _default.email);
  * ```
  */
@@ -66,7 +66,7 @@ export interface GetTransferProjectServiceAccountResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.storage.getTransferProjectServiceAccount({});
+ * const _default = gcp.storage.getTransferProjectServiceAccount({});
  * export const defaultAccount = _default.then(_default => _default.email);
  * ```
  */
diff --git a/sdk/nodejs/storage/getTransferProjectServieAccount.ts b/sdk/nodejs/storage/getTransferProjectServieAccount.ts
index 47de3455f9..77c757d0e2 100644
--- a/sdk/nodejs/storage/getTransferProjectServieAccount.ts
+++ b/sdk/nodejs/storage/getTransferProjectServieAccount.ts
@@ -13,7 +13,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.storage.getTransferProjectServiceAccount({});
+ * const _default = gcp.storage.getTransferProjectServiceAccount({});
  * export const defaultAccount = _default.then(_default => _default.email);
  * ```
  */
@@ -68,7 +68,7 @@ export interface GetTransferProjectServieAccountResult {
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.storage.getTransferProjectServiceAccount({});
+ * const _default = gcp.storage.getTransferProjectServiceAccount({});
  * export const defaultAccount = _default.then(_default => _default.email);
  * ```
  */
diff --git a/sdk/nodejs/storage/transferAgentPool.ts b/sdk/nodejs/storage/transferAgentPool.ts
index 3154ae335e..c08313155c 100644
--- a/sdk/nodejs/storage/transferAgentPool.ts
+++ b/sdk/nodejs/storage/transferAgentPool.ts
@@ -23,7 +23,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.storage.getTransferProjectServiceAccount({
+ * const _default = gcp.storage.getTransferProjectServiceAccount({
  *     project: "my-project-name",
  * });
  * const pubsubEditorRole = new gcp.projects.IAMMember("pubsub_editor_role", {
diff --git a/sdk/nodejs/storage/transferJob.ts b/sdk/nodejs/storage/transferJob.ts
index 17f2ebc147..497ccc3c0b 100644
--- a/sdk/nodejs/storage/transferJob.ts
+++ b/sdk/nodejs/storage/transferJob.ts
@@ -24,7 +24,7 @@ import * as utilities from "../utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as gcp from "@pulumi/gcp";
  *
- * const default = gcp.storage.getTransferProjectServiceAccount({
+ * const _default = gcp.storage.getTransferProjectServiceAccount({
  *     project: project,
  * });
  * const s3_backup_bucket = new gcp.storage.Bucket("s3-backup-bucket", {