import * as pulumi from "@pulumi/pulumi"; /** * Default resource settings control whether CMEK is required for new log buckets. These settings also determine the storage location for the _Default and _Required log buckets, and whether the _Default sink is enabled or disabled. * * To get more information about OrganizationSettings, see: * * * [API documentation](https://cloud.google.com/logging/docs/reference/v2/rest/v2/TopLevel/getSettings) * * How-to Guides * * [Configure default settings for organizations and folders](https://cloud.google.com/logging/docs/default-settings) * * ## Example Usage * * ### Logging Organization Settings All * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as gcp from "@pulumi/gcp"; * * const settings = gcp.logging.getOrganizationSettings({ * organization: "123456789", * }); * const iam = new gcp.kms.CryptoKeyIAMMember("iam", { * cryptoKeyId: "kms-key", * role: "roles/cloudkms.cryptoKeyEncrypterDecrypter", * member: settings.then(settings => `serviceAccount:${settings.kmsServiceAccountId}`), * }); * const example = new gcp.logging.OrganizationSettings("example", { * disableDefaultSink: true, * kmsKeyName: "kms-key", * organization: "123456789", * storageLocation: "us-central1", * }, { * dependsOn: [iam], * }); * ``` * * ## Import * * OrganizationSettings can be imported using any of these accepted formats: * * * `organizations/{{organization}}/settings` * * * `{{organization}}` * * When using the `pulumi import` command, OrganizationSettings can be imported using one of the formats above. For example: * * ```sh * $ pulumi import gcp:logging/organizationSettings:OrganizationSettings default organizations/{{organization}}/settings * ``` * * ```sh * $ pulumi import gcp:logging/organizationSettings:OrganizationSettings default {{organization}} * ``` */ export declare class OrganizationSettings extends pulumi.CustomResource { /** * Get an existing OrganizationSettings resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: OrganizationSettingsState, opts?: pulumi.CustomResourceOptions): OrganizationSettings; /** * Returns true if the given object is an instance of OrganizationSettings. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is OrganizationSettings; /** * If set to true, the _Default sink in newly created projects and folders will created in a disabled state. This can be used to automatically disable log storage if there is already an aggregated sink configured in the hierarchy. The _Default sink can be re-enabled manually if needed. */ readonly disableDefaultSink: pulumi.Output; /** * The resource name for the configured Cloud KMS key. */ readonly kmsKeyName: pulumi.Output; /** * The service account that will be used by the Log Router to access your Cloud KMS key. */ readonly kmsServiceAccountId: pulumi.Output; /** * The service account for the given container. Sinks use this service account as their writerIdentity if no custom service account is provided. */ readonly loggingServiceAccountId: pulumi.Output; /** * The resource name of the settings. */ readonly name: pulumi.Output; /** * The organization for which to retrieve or configure settings. */ readonly organization: pulumi.Output; /** * The storage location that Cloud Logging will use to create new resources when a location is needed but not explicitly provided. */ readonly storageLocation: pulumi.Output; /** * Create a OrganizationSettings resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: OrganizationSettingsArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering OrganizationSettings resources. */ export interface OrganizationSettingsState { /** * If set to true, the _Default sink in newly created projects and folders will created in a disabled state. This can be used to automatically disable log storage if there is already an aggregated sink configured in the hierarchy. The _Default sink can be re-enabled manually if needed. */ disableDefaultSink?: pulumi.Input; /** * The resource name for the configured Cloud KMS key. */ kmsKeyName?: pulumi.Input; /** * The service account that will be used by the Log Router to access your Cloud KMS key. */ kmsServiceAccountId?: pulumi.Input; /** * The service account for the given container. Sinks use this service account as their writerIdentity if no custom service account is provided. */ loggingServiceAccountId?: pulumi.Input; /** * The resource name of the settings. */ name?: pulumi.Input; /** * The organization for which to retrieve or configure settings. */ organization?: pulumi.Input; /** * The storage location that Cloud Logging will use to create new resources when a location is needed but not explicitly provided. */ storageLocation?: pulumi.Input; } /** * The set of arguments for constructing a OrganizationSettings resource. */ export interface OrganizationSettingsArgs { /** * If set to true, the _Default sink in newly created projects and folders will created in a disabled state. This can be used to automatically disable log storage if there is already an aggregated sink configured in the hierarchy. The _Default sink can be re-enabled manually if needed. */ disableDefaultSink?: pulumi.Input; /** * The resource name for the configured Cloud KMS key. */ kmsKeyName?: pulumi.Input; /** * The organization for which to retrieve or configure settings. */ organization: pulumi.Input; /** * The storage location that Cloud Logging will use to create new resources when a location is needed but not explicitly provided. */ storageLocation?: pulumi.Input; }