Merge branch 'main' into salman-mkc-code-examples

Author: salmany

bigquery/bigquery_authorized_view_tutorial/main.tf

@@ -0,0 +1,74 @@
+/**
+* Copyright 2025 Google LLC
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*      http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+
+
+# [START bigquery_authorized_view_tutorial]
+# Creates an authorized view.
+
+# Create a dataset to contain the view.
+resource "google_bigquery_dataset" "view_dataset" {
+  dataset_id  = "view_dataset"
+  description = "Dataset that contains the view"
+  location    = "us-west1"
+}
+
+# Create the view to authorize.
+resource "google_bigquery_table" "movie_view" {
+  project     = google_bigquery_dataset.view_dataset.project
+  dataset_id  = google_bigquery_dataset.view_dataset.dataset_id
+  table_id    = "movie_view"
+  description = "View to authorize"
+
+  view {
+    query          = "SELECT item_id, avg(rating) FROM `movie_project.movie_dataset.movie_ratings` GROUP BY item_id ORDER BY item_id;"
+    use_legacy_sql = false
+  }
+}
+
+
+# Authorize the view to access the dataset
+# that the query data originates from.
+resource "google_bigquery_dataset_access" "view_authorization" {
+  project    = "movie_project"
+  dataset_id = "movie_dataset"
+
+  view {
+    project_id = google_bigquery_table.movie_view.project
+    dataset_id = google_bigquery_table.movie_view.dataset_id
+    table_id   = google_bigquery_table.movie_view.table_id
+  }
+}
+
+# Specify the IAM policy for principals that can access
+# the authorized view. These users should already
+# have the roles/bigqueryUser role at the project level.
+data "google_iam_policy" "principals_policy" {
+  binding {
+    role = "roles/bigquery.dataViewer"
+    members = [
+      "group:[email protected]",
+    ]
+  }
+}
+
+# Set the IAM policy on the authorized  view.
+resource "google_bigquery_table_iam_policy" "authorized_view_policy" {
+  project     = google_bigquery_table.movie_view.project
+  dataset_id  = google_bigquery_table.movie_view.dataset_id
+  table_id    = google_bigquery_table.movie_view.table_id
+  policy_data = data.google_iam_policy.principals_policy.policy_data
+}
+# [END bigquery_authorized_view_tutorial]

bigquery/bigquery_authorized_view_tutorial/test.yaml

@@ -0,0 +1,20 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+apiVersion: blueprints.cloud.google.com/v1alpha1
+kind: BlueprintTest
+metadata:
+  name: bigquery_authorized_view_tutorial
+spec:
+  skip: true