@azure/arm-batch 9.2.1-alpha.20240925.1 → 10.0.0-alpha.20240926.3

package/types/arm-batch.d.ts

@@ -4,6 +4,48 @@ import { OperationState } from '@azure/core-lro';
 import { PagedAsyncIterableIterator } from '@azure/core-paging';
 import { SimplePollerLike } from '@azure/core-lro';
 
+/** Access rule in a network security perimeter configuration profile */
+export declare interface AccessRule {
+    /** Name of the access rule */
+    name?: string;
+    /** Properties of Access Rule */
+    properties?: AccessRuleProperties;
+}
+
+/**
+ * Defines values for AccessRuleDirection. \
+ * {@link KnownAccessRuleDirection} can be used interchangeably with AccessRuleDirection,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Inbound**: Applies to inbound network traffic to the secured resources. \
+ * **Outbound**: Applies to outbound network traffic from the secured resources
+ */
+export declare type AccessRuleDirection = string;
+
+/** Properties of Access Rule */
+export declare interface AccessRuleProperties {
+    /** Direction of Access Rule */
+    direction?: AccessRuleDirection;
+    /** Address prefixes in the CIDR format for inbound rules */
+    addressPrefixes?: string[];
+    /** Subscriptions for inbound rules */
+    subscriptions?: AccessRulePropertiesSubscriptionsItem[];
+    /** Network security perimeters for inbound rules */
+    networkSecurityPerimeters?: NetworkSecurityPerimeter[];
+    /** Fully qualified domain names (FQDN) for outbound rules */
+    fullyQualifiedDomainNames?: string[];
+    /** Email addresses for outbound rules */
+    emailAddresses?: string[];
+    /** Phone numbers for outbound rules */
+    phoneNumbers?: string[];
+}
+
+/** Subscription identifiers */
+export declare interface AccessRulePropertiesSubscriptionsItem {
+    /** The fully qualified Azure resource ID of the subscription e.g. ('/subscriptions/00000000-0000-0000-0000-000000000000') */
+    id?: string;
+}
+
 /** Defines values for AccountKeyType. */
 export declare type AccountKeyType = "Primary" | "Secondary";
 
@@ -17,7 +59,7 @@ export declare interface ActivateApplicationPackageParameters {
 export declare type AllocationState = "Steady" | "Resizing" | "Stopping";
 
 /** Contains information about an application in a Batch account. */
-export declare interface Application extends ProxyResource {
+export declare interface Application extends AzureProxyResource {
     /** The display name for the application. */
     displayName?: string;
     /** A value indicating whether packages within the application may be overwritten using the same version string. */
@@ -107,7 +149,7 @@ export declare interface ApplicationOperations {
 }
 
 /** An application package which represents a particular version of an application. */
-export declare interface ApplicationPackage extends ProxyResource {
+export declare interface ApplicationPackage extends AzureProxyResource {
     /**
      * The current state of the application package.
      * NOTE: This property will not be serialized. It can only be populated by the server.
@@ -352,8 +394,67 @@ export declare interface AzureFileShareConfiguration {
     mountOptions?: string;
 }
 
+/** A definition of an Azure resource. */
+export declare interface AzureProxyResource {
+    /**
+     * The ID of the resource.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly id?: string;
+    /**
+     * The name of the resource.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly name?: string;
+    /**
+     * The type of the resource.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly type?: string;
+    /**
+     * The ETag of the resource, used for concurrency statements.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly etag?: string;
+    /** The tags of the resource. */
+    tags?: {
+        [propertyName: string]: string;
+    };
+}
+
+/** A definition of an Azure resource. */
+export declare interface AzureResource {
+    /**
+     * The ID of the resource.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly id?: string;
+    /**
+     * The name of the resource.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly name?: string;
+    /**
+     * The type of the resource.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly type?: string;
+    /**
+     * The location of the resource.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly location?: string;
+    /**
+     * The tags of the resource.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly tags?: {
+        [propertyName: string]: string;
+    };
+}
+
 /** Contains information about an Azure Batch account. */
-export declare interface BatchAccount extends Resource {
+export declare interface BatchAccount extends AzureResource {
     /** The identity of the Batch account. */
     identity?: BatchAccountIdentity;
     /**
@@ -648,7 +749,7 @@ export declare interface BatchAccountOperations {
      * you must make sure your network allows outbound access to these endpoints. Failure to allow access
      * to these endpoints may cause Batch to mark the affected nodes as unusable. For more information
      * about creating a pool inside of a virtual network, see
-     * https://docs.microsoft.com/en-us/azure/batch/batch-virtual-network.
+     * https://docs.microsoft.com/azure/batch/batch-virtual-network.
      * @param resourceGroupName The name of the resource group that contains the Batch account.
      * @param accountName The name of the Batch account.
      * @param options The options parameters.
@@ -822,6 +923,7 @@ export declare class BatchManagementClient extends coreClient.ServiceClient {
     privateLinkResourceOperations: PrivateLinkResourceOperations;
     privateEndpointConnectionOperations: PrivateEndpointConnectionOperations;
     poolOperations: PoolOperations;
+    networkSecurityPerimeterOperations: NetworkSecurityPerimeterOperations;
 }
 
 /** Optional parameters. */
@@ -848,7 +950,7 @@ export declare interface BatchPoolIdentity {
 export declare type CachingType = "None" | "ReadOnly" | "ReadWrite";
 
 /** Contains information about a certificate. */
-export declare interface Certificate extends ProxyResource {
+export declare interface Certificate extends AzureProxyResource {
     /** This must match the first portion of the certificate name. Currently required to be 'SHA1'. */
     thumbprintAlgorithm?: string;
     /** This must match the thumbprint from the name. */
@@ -922,7 +1024,7 @@ export declare interface CertificateCreateOptionalParams extends coreClient.Oper
 }
 
 /** Contains information about a certificate. */
-export declare interface CertificateCreateOrUpdateParameters extends ProxyResource {
+export declare interface CertificateCreateOrUpdateParameters extends AzureProxyResource {
     /** This must match the first portion of the certificate name. Currently required to be 'SHA1'. */
     thumbprintAlgorithm?: string;
     /** This must match the thumbprint from the name. */
@@ -1130,9 +1232,9 @@ export declare type CertificateProvisioningState = "Succeeded" | "Deleting" | "F
 export declare interface CertificateReference {
     /** The fully qualified ID of the certificate to install on the pool. This must be inside the same batch account as the pool. */
     id: string;
-    /** The default value is currentUser. This property is applicable only for pools configured with Windows nodes (that is, created with cloudServiceConfiguration, or with virtualMachineConfiguration using a Windows image reference). For Linux compute nodes, the certificates are stored in a directory inside the task working directory and an environment variable AZ_BATCH_CERTIFICATES_DIR is supplied to the task to query for this location. For certificates with visibility of 'remoteUser', a 'certs' directory is created in the user's home directory (e.g., /home/{user-name}/certs) and certificates are placed in that directory. */
+    /** The default value is currentUser. This property is applicable only for pools configured with Windows compute nodes. For Linux compute nodes, the certificates are stored in a directory inside the task working directory and an environment variable AZ_BATCH_CERTIFICATES_DIR is supplied to the task to query for this location. For certificates with visibility of 'remoteUser', a 'certs' directory is created in the user's home directory (e.g., /home/{user-name}/certs) and certificates are placed in that directory. */
     storeLocation?: CertificateStoreLocation;
-    /** This property is applicable only for pools configured with Windows nodes (that is, created with cloudServiceConfiguration, or with virtualMachineConfiguration using a Windows image reference). Common store names include: My, Root, CA, Trust, Disallowed, TrustedPeople, TrustedPublisher, AuthRoot, AddressBook, but any custom store name can also be used. The default value is My. */
+    /** This property is applicable only for pools configured with Windows compute nodes. Common store names include: My, Root, CA, Trust, Disallowed, TrustedPeople, TrustedPublisher, AuthRoot, AddressBook, but any custom store name can also be used. The default value is My. */
     storeName?: string;
     /** Which user accounts on the compute node should have access to the private data of the certificate. */
     visibility?: CertificateVisibility[];
@@ -1218,14 +1320,6 @@ export declare interface CloudErrorBody {
     details?: CloudErrorBody[];
 }
 
-/** The configuration for nodes in a pool based on the Azure Cloud Services platform. */
-export declare interface CloudServiceConfiguration {
-    /** Possible values are: 2 - OS Family 2, equivalent to Windows Server 2008 R2 SP1. 3 - OS Family 3, equivalent to Windows Server 2012. 4 - OS Family 4, equivalent to Windows Server 2012 R2. 5 - OS Family 5, equivalent to Windows Server 2016. 6 - OS Family 6, equivalent to Windows Server 2019. For more information, see Azure Guest OS Releases (https://azure.microsoft.com/documentation/articles/cloud-services-guestos-update-matrix/#releases). */
-    osFamily: string;
-    /** The default value is * which specifies the latest operating system version for the specified OS family. */
-    osVersion?: string;
-}
-
 /** Defines values for ComputeNodeDeallocationOption. */
 export declare type ComputeNodeDeallocationOption = "Requeue" | "Terminate" | "TaskCompletion" | "RetainedData";
 
@@ -1248,6 +1342,28 @@ export declare interface ContainerConfiguration {
     containerRegistries?: ContainerRegistry[];
 }
 
+/** The entry of path and mount mode you want to mount into task container. */
+export declare interface ContainerHostBatchBindMountEntry {
+    /** The paths which will be mounted to container task's container. */
+    source?: ContainerHostDataPath;
+    /** For Linux, if you mount this path as a read/write mode, this does not mean that all users in container have the read/write access for the path, it depends on the access in host VM. If this path is mounted read-only, all users within the container will not be able to modify the path. */
+    isReadOnly?: boolean;
+}
+
+/**
+ * Defines values for ContainerHostDataPath. \
+ * {@link KnownContainerHostDataPath} can be used interchangeably with ContainerHostDataPath,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Shared**: The path for multi-instances task to shared their files. \
+ * **Startup**: The path for start task. \
+ * **VfsMounts**: The path contains all virtual file systems are mounted on this node. \
+ * **Task**: The task path. \
+ * **JobPrep**: The job-prep task path. \
+ * **Applications**: The applications path.
+ */
+export declare type ContainerHostDataPath = string;
+
 /** A private container registry. */
 export declare interface ContainerRegistry {
     /** The user name to log into the registry server. */
@@ -1273,6 +1389,18 @@ export declare type ContainerType = string;
 /** Defines values for ContainerWorkingDirectory. */
 export declare type ContainerWorkingDirectory = "TaskWorkingDirectory" | "ContainerImageDefault";
 
+/**
+ * Defines values for CreatedByType. \
+ * {@link KnownCreatedByType} can be used interchangeably with CreatedByType,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **User** \
+ * **Application** \
+ * **ManagedIdentity** \
+ * **Key**
+ */
+export declare type CreatedByType = string;
+
 /** Settings which will be used by the data disks associated to Compute Nodes in the Pool. When using attached data disks, you need to mount and format the disks from within a VM to use them. */
 export declare interface DataDisk {
     /** The lun is used to uniquely identify each data disk. If attaching multiple disks, each should have a distinct lun. The value must be between 0 and 63, inclusive. */
@@ -1312,9 +1440,7 @@ export declare interface DeleteCertificateError {
 
 /** Deployment configuration properties. */
 export declare interface DeploymentConfiguration {
-    /** This property and virtualMachineConfiguration are mutually exclusive and one of the properties must be specified. This property cannot be specified if the Batch account was created with its poolAllocationMode property set to 'UserSubscription'. */
-    cloudServiceConfiguration?: CloudServiceConfiguration;
-    /** This property and cloudServiceConfiguration are mutually exclusive and one of the properties must be specified. */
+    /** The configuration for compute nodes in a pool based on the Azure Virtual Machines infrastructure. */
     virtualMachineConfiguration?: VirtualMachineConfiguration;
 }
 
@@ -1327,7 +1453,7 @@ export declare interface DetectorListResult {
 }
 
 /** Contains the information for a detector. */
-export declare interface DetectorResponse extends ProxyResource {
+export declare interface DetectorResponse extends AzureProxyResource {
     /** A base64 encoded string that represents the content of a detector. */
     value?: string;
 }
@@ -1408,6 +1534,55 @@ export declare interface EnvironmentSetting {
     value?: string;
 }
 
+/** The resource management error additional info. */
+export declare interface ErrorAdditionalInfo {
+    /**
+     * The additional info type.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly type?: string;
+    /**
+     * The additional info.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly info?: Record<string, unknown>;
+}
+
+/** The error detail. */
+export declare interface ErrorDetail {
+    /**
+     * The error code.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly code?: string;
+    /**
+     * The error message.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly message?: string;
+    /**
+     * The error target.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly target?: string;
+    /**
+     * The error details.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly details?: ErrorDetail[];
+    /**
+     * The error additional info.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly additionalInfo?: ErrorAdditionalInfo[];
+}
+
+/** Common error response for all Azure Resource Manager APIs to return error details for failed operations. (This also follows the OData error response format.). */
+export declare interface ErrorResponse {
+    /** The error object. */
+    error?: ErrorDetail;
+}
+
 /** Fixed scale settings for the pool. */
 export declare interface FixedScaleSettings {
     /** The default value is 15 minutes. Timeout values use ISO 8601 format. For example, use PT10M for 10 minutes. The minimum value is 5 minutes. If you specify a value less than 5 minutes, the Batch service rejects the request with an error; if you are calling the REST API directly, the HTTP status code is 400 (Bad Request). */
@@ -1441,6 +1616,10 @@ export declare interface ImageReference {
     version?: string;
     /** This property is mutually exclusive with other properties. The Azure Compute Gallery Image must have replicas in the same region as the Azure Batch account. For information about the firewall settings for the Batch node agent to communicate with the Batch service see https://docs.microsoft.com/en-us/azure/batch/batch-api-basics#virtual-network-vnet-and-firewall-configuration. */
     id?: string;
+    /** This property is mutually exclusive with other properties and can be fetched from shared gallery image GET call. */
+    sharedGalleryImageId?: string;
+    /** This property is mutually exclusive with other properties and can be fetched from community gallery image GET call. */
+    communityGalleryImageId?: string;
 }
 
 /** Defines values for InboundEndpointProtocol. */
@@ -1476,6 +1655,18 @@ export declare interface IPRule {
     value: string;
 }
 
+/**
+ * Defines values for IssueType. \
+ * {@link KnownIssueType} can be used interchangeably with IssueType,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Unknown**: Unknown issue type \
+ * **ConfigurationPropagationFailure**: An error occurred while applying the network security perimeter (NSP) configuration. \
+ * **MissingPerimeterConfiguration**: A network connectivity issue is happening on the resource which could be addressed either by adding new resources to the network security perimeter (NSP) or by modifying access rules. \
+ * **MissingIdentityConfiguration**: An managed identity hasn't been associated with the resource. The resource will still be able to validate inbound traffic from the network security perimeter (NSP) or matching inbound access rules, but it won't be able to perform outbound access as a member of the NSP.
+ */
+export declare type IssueType = string;
+
 /** Defines values for KeySource. */
 export declare type KeySource = "Microsoft.Batch" | "Microsoft.KeyVault";
 
@@ -1499,6 +1690,30 @@ export declare interface KeyVaultReference {
     url: string;
 }
 
+/** Known values of {@link AccessRuleDirection} that the service accepts. */
+export declare enum KnownAccessRuleDirection {
+    /** Applies to inbound network traffic to the secured resources. */
+    Inbound = "Inbound",
+    /** Applies to outbound network traffic from the secured resources */
+    Outbound = "Outbound"
+}
+
+/** Known values of {@link ContainerHostDataPath} that the service accepts. */
+export declare enum KnownContainerHostDataPath {
+    /** The path for multi-instances task to shared their files. */
+    Shared = "Shared",
+    /** The path for start task. */
+    Startup = "Startup",
+    /** The path contains all virtual file systems are mounted on this node. */
+    VfsMounts = "VfsMounts",
+    /** The task path. */
+    Task = "Task",
+    /** The job-prep task path. */
+    JobPrep = "JobPrep",
+    /** The applications path. */
+    Applications = "Applications"
+}
+
 /** Known values of {@link ContainerType} that the service accepts. */
 export declare enum KnownContainerType {
     /** A Docker compatible container technology will be used to launch the containers. */
@@ -1507,6 +1722,74 @@ export declare enum KnownContainerType {
     CriCompatible = "CriCompatible"
 }
 
+/** Known values of {@link CreatedByType} that the service accepts. */
+export declare enum KnownCreatedByType {
+    /** User */
+    User = "User",
+    /** Application */
+    Application = "Application",
+    /** ManagedIdentity */
+    ManagedIdentity = "ManagedIdentity",
+    /** Key */
+    Key = "Key"
+}
+
+/** Known values of {@link IssueType} that the service accepts. */
+export declare enum KnownIssueType {
+    /** Unknown issue type */
+    Unknown = "Unknown",
+    /** An error occurred while applying the network security perimeter (NSP) configuration. */
+    ConfigurationPropagationFailure = "ConfigurationPropagationFailure",
+    /** A network connectivity issue is happening on the resource which could be addressed either by adding new resources to the network security perimeter (NSP) or by modifying access rules. */
+    MissingPerimeterConfiguration = "MissingPerimeterConfiguration",
+    /** An managed identity hasn't been associated with the resource. The resource will still be able to validate inbound traffic from the network security perimeter (NSP) or matching inbound access rules, but it won't be able to perform outbound access as a member of the NSP. */
+    MissingIdentityConfiguration = "MissingIdentityConfiguration"
+}
+
+/** Known values of {@link NetworkSecurityPerimeterConfigurationProvisioningState} that the service accepts. */
+export declare enum KnownNetworkSecurityPerimeterConfigurationProvisioningState {
+    /** Succeeded */
+    Succeeded = "Succeeded",
+    /** Creating */
+    Creating = "Creating",
+    /** Updating */
+    Updating = "Updating",
+    /** Deleting */
+    Deleting = "Deleting",
+    /** Accepted */
+    Accepted = "Accepted",
+    /** Failed */
+    Failed = "Failed",
+    /** Canceled */
+    Canceled = "Canceled"
+}
+
+/** Known values of {@link ResourceAssociationAccessMode} that the service accepts. */
+export declare enum KnownResourceAssociationAccessMode {
+    /** Enforced access mode - traffic to the resource that failed access checks is blocked */
+    Enforced = "Enforced",
+    /** Learning access mode - traffic to the resource is enabled for analysis but not blocked */
+    Learning = "Learning",
+    /** Audit access mode - traffic to the resource that fails access checks is logged but not blocked */
+    Audit = "Audit"
+}
+
+/** Known values of {@link SecurityEncryptionTypes} that the service accepts. */
+export declare enum KnownSecurityEncryptionTypes {
+    /** NonPersistedTPM */
+    NonPersistedTPM = "NonPersistedTPM",
+    /** VMGuestStateOnly */
+    VMGuestStateOnly = "VMGuestStateOnly"
+}
+
+/** Known values of {@link Severity} that the service accepts. */
+export declare enum KnownSeverity {
+    /** Warning */
+    Warning = "Warning",
+    /** Error */
+    Error = "Error"
+}
+
 /** Properties used to create a user account on a Linux node. */
 export declare interface LinuxUserConfiguration {
     /** The uid and gid properties must be specified together or not at all. If not specified the underlying operating system picks the uid. */
@@ -1573,12 +1856,6 @@ declare interface Location_2 {
      * @param options The options parameters.
      */
     listSupportedVirtualMachineSkus(locationName: string, options?: LocationListSupportedVirtualMachineSkusOptionalParams): PagedAsyncIterableIterator<SupportedSku>;
-    /**
-     * Gets the list of Batch supported Cloud Service VM sizes available at the given location.
-     * @param locationName The region for which to retrieve Batch service supported SKUs.
-     * @param options The options parameters.
-     */
-    listSupportedCloudServiceSkus(locationName: string, options?: LocationListSupportedCloudServiceSkusOptionalParams): PagedAsyncIterableIterator<SupportedSku>;
     /**
      * Gets the Batch service quotas for the specified subscription at the given location.
      * @param locationName The region for which to retrieve Batch service quotas.
@@ -1609,24 +1886,6 @@ export declare interface LocationGetQuotasOptionalParams extends coreClient.Oper
 /** Contains response data for the getQuotas operation. */
 export declare type LocationGetQuotasResponse = BatchLocationQuota;
 
-/** Optional parameters. */
-export declare interface LocationListSupportedCloudServiceSkusNextOptionalParams extends coreClient.OperationOptions {
-}
-
-/** Contains response data for the listSupportedCloudServiceSkusNext operation. */
-export declare type LocationListSupportedCloudServiceSkusNextResponse = SupportedSkusResult;
-
-/** Optional parameters. */
-export declare interface LocationListSupportedCloudServiceSkusOptionalParams extends coreClient.OperationOptions {
-    /** The maximum number of items to return in the response. */
-    maxresults?: number;
-    /** OData filter expression. Valid properties for filtering are "familyName". */
-    filter?: string;
-}
-
-/** Contains response data for the listSupportedCloudServiceSkus operation. */
-export declare type LocationListSupportedCloudServiceSkusResponse = SupportedSkusResult;
-
 /** Optional parameters. */
 export declare interface LocationListSupportedVirtualMachineSkusNextOptionalParams extends coreClient.OperationOptions {
 }
@@ -1651,6 +1910,8 @@ export declare type LoginMode = "Batch" | "Interactive";
 export declare interface ManagedDisk {
     /** The storage account type for use in creating data disks or OS disk. */
     storageAccountType?: StorageAccountType;
+    /** Specifies the security profile settings for the managed disk. **Note**: It can only be set for Confidential VMs and is required when using Confidential VMs. */
+    securityProfile?: VMDiskSecurityProfile;
 }
 
 /** The Batch service does not assign any meaning to this metadata; it is solely for the use of user code. */
@@ -1678,13 +1939,13 @@ export declare type NameAvailabilityReason = "Invalid" | "AlreadyExists";
 
 /** The network configuration for a pool. */
 export declare interface NetworkConfiguration {
-    /** The virtual network must be in the same region and subscription as the Azure Batch account. The specified subnet should have enough free IP addresses to accommodate the number of nodes in the pool. If the subnet doesn't have enough free IP addresses, the pool will partially allocate compute nodes and a resize error will occur. The 'MicrosoftAzureBatch' service principal must have the 'Classic Virtual Machine Contributor' Role-Based Access Control (RBAC) role for the specified VNet. The specified subnet must allow communication from the Azure Batch service to be able to schedule tasks on the compute nodes. This can be verified by checking if the specified VNet has any associated Network Security Groups (NSG). If communication to the compute nodes in the specified subnet is denied by an NSG, then the Batch service will set the state of the compute nodes to unusable. If the specified VNet has any associated Network Security Groups (NSG), then a few reserved system ports must be enabled for inbound communication. For pools created with a virtual machine configuration, enable ports 29876 and 29877, as well as port 22 for Linux and port 3389 for Windows. For pools created with a cloud service configuration, enable ports 10100, 20100, and 30100. Also enable outbound connections to Azure Storage on port 443. For cloudServiceConfiguration pools, only 'classic' VNETs are supported. For more details see: https://docs.microsoft.com/en-us/azure/batch/batch-api-basics#virtual-network-vnet-and-firewall-configuration */
+    /** The virtual network must be in the same region and subscription as the Azure Batch account. The specified subnet should have enough free IP addresses to accommodate the number of nodes in the pool. If the subnet doesn't have enough free IP addresses, the pool will partially allocate compute nodes and a resize error will occur. The 'MicrosoftAzureBatch' service principal must have the 'Classic Virtual Machine Contributor' Role-Based Access Control (RBAC) role for the specified VNet. The specified subnet must allow communication from the Azure Batch service to be able to schedule tasks on the compute nodes. This can be verified by checking if the specified VNet has any associated Network Security Groups (NSG). If communication to the compute nodes in the specified subnet is denied by an NSG, then the Batch service will set the state of the compute nodes to unusable. If the specified VNet has any associated Network Security Groups (NSG), then a few reserved system ports must be enabled for inbound communication. Enable ports 29876 and 29877, as well as port 22 for Linux and port 3389 for Windows. Also enable outbound connections to Azure Storage on port 443. For more details see: https://docs.microsoft.com/en-us/azure/batch/batch-api-basics#virtual-network-vnet-and-firewall-configuration */
     subnetId?: string;
     /** The scope of dynamic vnet assignment. */
     dynamicVnetAssignmentScope?: DynamicVNetAssignmentScope;
-    /** Pool endpoint configuration is only supported on pools with the virtualMachineConfiguration property. */
+    /** The endpoint configuration for a pool. */
     endpointConfiguration?: PoolEndpointConfiguration;
-    /** This property is only supported on Pools with the virtualMachineConfiguration property. */
+    /** The public IP Address configuration of the networking configuration of a Pool. */
     publicIPAddressConfiguration?: PublicIPAddressConfiguration;
     /** Accelerated networking enables single root I/O virtualization (SR-IOV) to a VM, which may lead to improved networking performance. For more details, see: https://learn.microsoft.com/azure/virtual-network/accelerated-networking-overview. */
     enableAcceleratedNetworking?: boolean;
@@ -1713,6 +1974,157 @@ export declare interface NetworkSecurityGroupRule {
 /** Defines values for NetworkSecurityGroupRuleAccess. */
 export declare type NetworkSecurityGroupRuleAccess = "Allow" | "Deny";
 
+/** Information about a network security perimeter (NSP) */
+export declare interface NetworkSecurityPerimeter {
+    /** Fully qualified Azure resource ID of the NSP resource */
+    id?: string;
+    /** Universal unique ID (UUID) of the network security perimeter */
+    perimeterGuid?: string;
+    /** Location of the network security perimeter */
+    location?: string;
+}
+
+/** Network security perimeter (NSP) configuration resource */
+export declare interface NetworkSecurityPerimeterConfiguration extends ProxyResource {
+    /** Network security configuration properties. */
+    properties?: NetworkSecurityPerimeterConfigurationProperties;
+}
+
+/** Result of a list NSP (network security perimeter) configurations request. */
+export declare interface NetworkSecurityPerimeterConfigurationListResult {
+    /** Array of network security perimeter results. */
+    value?: NetworkSecurityPerimeterConfiguration[];
+    /** The link used to get the next page of results. */
+    nextLink?: string;
+}
+
+/** Network security configuration properties. */
+export declare interface NetworkSecurityPerimeterConfigurationProperties {
+    /**
+     * Provisioning state of a network security perimeter configuration that is being created or updated.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly provisioningState?: NetworkSecurityPerimeterConfigurationProvisioningState;
+    /**
+     * List of provisioning issues, if any
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly provisioningIssues?: ProvisioningIssue[];
+    /** Information about a network security perimeter (NSP) */
+    networkSecurityPerimeter?: NetworkSecurityPerimeter;
+    /** Information about resource association */
+    resourceAssociation?: ResourceAssociation;
+    /** Network security perimeter configuration profile */
+    profile?: NetworkSecurityProfile;
+}
+
+/**
+ * Defines values for NetworkSecurityPerimeterConfigurationProvisioningState. \
+ * {@link KnownNetworkSecurityPerimeterConfigurationProvisioningState} can be used interchangeably with NetworkSecurityPerimeterConfigurationProvisioningState,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Succeeded** \
+ * **Creating** \
+ * **Updating** \
+ * **Deleting** \
+ * **Accepted** \
+ * **Failed** \
+ * **Canceled**
+ */
+export declare type NetworkSecurityPerimeterConfigurationProvisioningState = string;
+
+/** Optional parameters. */
+export declare interface NetworkSecurityPerimeterGetConfigurationOptionalParams extends coreClient.OperationOptions {
+}
+
+/** Contains response data for the getConfiguration operation. */
+export declare type NetworkSecurityPerimeterGetConfigurationResponse = NetworkSecurityPerimeterConfiguration;
+
+/** Optional parameters. */
+export declare interface NetworkSecurityPerimeterListConfigurationsNextOptionalParams extends coreClient.OperationOptions {
+}
+
+/** Contains response data for the listConfigurationsNext operation. */
+export declare type NetworkSecurityPerimeterListConfigurationsNextResponse = NetworkSecurityPerimeterConfigurationListResult;
+
+/** Optional parameters. */
+export declare interface NetworkSecurityPerimeterListConfigurationsOptionalParams extends coreClient.OperationOptions {
+}
+
+/** Contains response data for the listConfigurations operation. */
+export declare type NetworkSecurityPerimeterListConfigurationsResponse = NetworkSecurityPerimeterConfigurationListResult;
+
+/** Interface representing a NetworkSecurityPerimeterOperations. */
+export declare interface NetworkSecurityPerimeterOperations {
+    /**
+     * Lists all of the NSP configurations in the specified account.
+     * @param resourceGroupName The name of the resource group that contains the Batch account.
+     * @param accountName The name of the Batch account.
+     * @param options The options parameters.
+     */
+    listConfigurations(resourceGroupName: string, accountName: string, options?: NetworkSecurityPerimeterListConfigurationsOptionalParams): PagedAsyncIterableIterator<NetworkSecurityPerimeterConfiguration>;
+    /**
+     * Gets information about the specified NSP configuration.
+     * @param resourceGroupName The name of the resource group that contains the Batch account.
+     * @param accountName The name of the Batch account.
+     * @param networkSecurityPerimeterConfigurationName The name for Network Security Perimeter
+     *                                                  configuration
+     * @param options The options parameters.
+     */
+    getConfiguration(resourceGroupName: string, accountName: string, networkSecurityPerimeterConfigurationName: string, options?: NetworkSecurityPerimeterGetConfigurationOptionalParams): Promise<NetworkSecurityPerimeterGetConfigurationResponse>;
+    /**
+     * Reconciles the specified NSP configuration.
+     * @param resourceGroupName The name of the resource group that contains the Batch account.
+     * @param accountName The name of the Batch account.
+     * @param networkSecurityPerimeterConfigurationName The name for Network Security Perimeter
+     *                                                  configuration
+     * @param options The options parameters.
+     */
+    beginReconcileConfiguration(resourceGroupName: string, accountName: string, networkSecurityPerimeterConfigurationName: string, options?: NetworkSecurityPerimeterReconcileConfigurationOptionalParams): Promise<SimplePollerLike<OperationState<NetworkSecurityPerimeterReconcileConfigurationResponse>, NetworkSecurityPerimeterReconcileConfigurationResponse>>;
+    /**
+     * Reconciles the specified NSP configuration.
+     * @param resourceGroupName The name of the resource group that contains the Batch account.
+     * @param accountName The name of the Batch account.
+     * @param networkSecurityPerimeterConfigurationName The name for Network Security Perimeter
+     *                                                  configuration
+     * @param options The options parameters.
+     */
+    beginReconcileConfigurationAndWait(resourceGroupName: string, accountName: string, networkSecurityPerimeterConfigurationName: string, options?: NetworkSecurityPerimeterReconcileConfigurationOptionalParams): Promise<NetworkSecurityPerimeterReconcileConfigurationResponse>;
+}
+
+/** Defines headers for NetworkSecurityPerimeter_reconcileConfiguration operation. */
+export declare interface NetworkSecurityPerimeterReconcileConfigurationHeaders {
+    /** The URL of the resource used to check the status of the asynchronous operation. */
+    location?: string;
+    /** Suggested delay to check the status of the asynchronous operation. The value is an integer that specifies the delay in seconds. */
+    retryAfter?: number;
+}
+
+/** Optional parameters. */
+export declare interface NetworkSecurityPerimeterReconcileConfigurationOptionalParams extends coreClient.OperationOptions {
+    /** Delay to wait until next poll, in milliseconds. */
+    updateIntervalInMs?: number;
+    /** A serialized poller which can be used to resume an existing paused Long-Running-Operation. */
+    resumeFrom?: string;
+}
+
+/** Contains response data for the reconcileConfiguration operation. */
+export declare type NetworkSecurityPerimeterReconcileConfigurationResponse = NetworkSecurityPerimeterReconcileConfigurationHeaders;
+
+/** Network security perimeter configuration profile */
+export declare interface NetworkSecurityProfile {
+    /** Name of the profile */
+    name?: string;
+    /** Current access rules version */
+    accessRulesVersion?: number;
+    /** List of Access Rules */
+    accessRules?: AccessRule[];
+    /** Current diagnostic settings version */
+    diagnosticSettingsVersion?: number;
+    /** List of log categories that are enabled */
+    enabledLogCategories?: string[];
+}
+
 /** Information used to connect to an NFS file system. */
 export declare interface NFSMountConfiguration {
     /** The URI of the file system to mount. */
@@ -1834,7 +2246,7 @@ export declare interface OutboundEnvironmentEndpointCollection {
 export declare type PackageState = "Pending" | "Active";
 
 /** Contains information about a pool. */
-export declare interface Pool extends ProxyResource {
+export declare interface Pool extends AzureProxyResource {
     /** The type of identity used for the Batch Pool. */
     identity?: BatchPoolIdentity;
     /** The display name need not be unique and can contain any Unicode characters up to a maximum length of 1024. */
@@ -1869,9 +2281,9 @@ export declare interface Pool extends ProxyResource {
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly allocationStateTransitionTime?: Date;
-    /** For information about available sizes of virtual machines for Cloud Services pools (pools created with cloudServiceConfiguration), see Sizes for Cloud Services (https://azure.microsoft.com/documentation/articles/cloud-services-sizes-specs/). Batch supports all Cloud Services VM sizes except ExtraSmall. For information about available VM sizes for pools using images from the Virtual Machines Marketplace (pools created with virtualMachineConfiguration) see Sizes for Virtual Machines (Linux) (https://azure.microsoft.com/documentation/articles/virtual-machines-linux-sizes/) or Sizes for Virtual Machines (Windows) (https://azure.microsoft.com/documentation/articles/virtual-machines-windows-sizes/). Batch supports all Azure VM sizes except STANDARD_A0 and those with premium storage (STANDARD_GS, STANDARD_DS, and STANDARD_DSV2 series). */
+    /** For information about available VM sizes, see Sizes for Virtual Machines (Linux) (https://azure.microsoft.com/documentation/articles/virtual-machines-linux-sizes/) or Sizes for Virtual Machines (Windows) (https://azure.microsoft.com/documentation/articles/virtual-machines-windows-sizes/). Batch supports all Azure VM sizes except STANDARD_A0 and those with premium storage (STANDARD_GS, STANDARD_DS, and STANDARD_DSV2 series). */
     vmSize?: string;
-    /** Using CloudServiceConfiguration specifies that the nodes should be creating using Azure Cloud Services (PaaS), while VirtualMachineConfiguration uses Azure Virtual Machines (IaaS). */
+    /** Deployment configuration properties. */
     deploymentConfiguration?: DeploymentConfiguration;
     /**
      * The number of dedicated compute nodes currently in the pool.
@@ -2157,7 +2569,7 @@ export declare interface PrivateEndpoint {
 }
 
 /** Contains information about a private link resource. */
-export declare interface PrivateEndpointConnection extends ProxyResource {
+export declare interface PrivateEndpointConnection extends AzureProxyResource {
     /**
      * The provisioning state of the private endpoint connection.
      * NOTE: This property will not be serialized. It can only be populated by the server.
@@ -2304,7 +2716,7 @@ export declare interface PrivateEndpointConnectionUpdateOptionalParams extends c
 export declare type PrivateEndpointConnectionUpdateResponse = PrivateEndpointConnection;
 
 /** Contains information about a private link resource. */
-export declare interface PrivateLinkResource extends ProxyResource {
+export declare interface PrivateLinkResource extends AzureProxyResource {
     /**
      * The group id is used to establish the private link connection.
      * NOTE: This property will not be serialized. It can only be populated by the server.
@@ -2381,31 +2793,54 @@ export declare interface PrivateLinkServiceConnectionState {
 /** Defines values for PrivateLinkServiceConnectionStatus. */
 export declare type PrivateLinkServiceConnectionStatus = "Approved" | "Pending" | "Rejected" | "Disconnected";
 
-/** Defines values for ProvisioningState. */
-export declare type ProvisioningState = "Invalid" | "Creating" | "Deleting" | "Succeeded" | "Failed" | "Cancelled";
+/** Describes a provisioning issue for a network security perimeter configuration */
+export declare interface ProvisioningIssue {
+    /**
+     * Name of the issue
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly name?: string;
+    /**
+     * Details of a provisioning issue for a network security perimeter (NSP) configuration. Resource providers should generate separate provisioning issue elements for each separate issue detected, and include a meaningful and distinctive description, as well as any appropriate suggestedResourceIds and suggestedAccessRules
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly properties?: ProvisioningIssueProperties;
+}
 
-/** A definition of an Azure resource. */
-export declare interface ProxyResource {
+/** Details of a provisioning issue for a network security perimeter (NSP) configuration. Resource providers should generate separate provisioning issue elements for each separate issue detected, and include a meaningful and distinctive description, as well as any appropriate suggestedResourceIds and suggestedAccessRules */
+export declare interface ProvisioningIssueProperties {
     /**
-     * The ID of the resource.
+     * Type of issue
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
-    readonly id?: string;
+    readonly issueType?: IssueType;
     /**
-     * The name of the resource.
+     * Severity of the issue.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
-    readonly name?: string;
+    readonly severity?: Severity;
     /**
-     * The type of the resource.
+     * Description of the issue
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
-    readonly type?: string;
+    readonly description?: string;
     /**
-     * The ETag of the resource, used for concurrency statements.
+     * Fully qualified resource IDs of suggested resources that can be associated to the network security perimeter (NSP) to remediate the issue.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
-    readonly etag?: string;
+    readonly suggestedResourceIds?: string[];
+    /**
+     * Access rules that can be added to the network security profile (NSP) to remediate the issue.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly suggestedAccessRules?: AccessRule[];
+}
+
+/** Defines values for ProvisioningState. */
+export declare type ProvisioningState = "Invalid" | "Creating" | "Deleting" | "Succeeded" | "Failed" | "Cancelled";
+
+/** The resource model definition for a Azure Resource Manager proxy resource. It will not have tags and a location */
+export declare interface ProxyResource extends Resource {
 }
 
 /** The public IP Address configuration of the networking configuration of a Pool. */
@@ -2417,7 +2852,7 @@ export declare interface PublicIPAddressConfiguration {
 }
 
 /** Defines values for PublicNetworkAccessType. */
-export declare type PublicNetworkAccessType = "Enabled" | "Disabled";
+export declare type PublicNetworkAccessType = "Enabled" | "Disabled" | "SecuredByPerimeter";
 
 /** An error that occurred when resizing a pool. */
 export declare interface ResizeError {
@@ -2445,37 +2880,49 @@ export declare interface ResizeOperationStatus {
     errors?: ResizeError[];
 }
 
-/** A definition of an Azure resource. */
+/** Common fields that are returned in the response for all Azure Resource Manager resources */
 export declare interface Resource {
     /**
-     * The ID of the resource.
+     * Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly id?: string;
     /**
-     * The name of the resource.
+     * The name of the resource
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly name?: string;
     /**
-     * The type of the resource.
+     * The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly type?: string;
     /**
-     * The location of the resource.
+     * Azure Resource Manager metadata containing createdBy and modifiedBy information.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
-    readonly location?: string;
-    /**
-     * The tags of the resource.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly tags?: {
-        [propertyName: string]: string;
-    };
+    readonly systemData?: SystemData;
+}
+
+/** Information about resource association */
+export declare interface ResourceAssociation {
+    /** Name of the resource association */
+    name?: string;
+    /** Access mode of the resource association */
+    accessMode?: ResourceAssociationAccessMode;
 }
 
+/**
+ * Defines values for ResourceAssociationAccessMode. \
+ * {@link KnownResourceAssociationAccessMode} can be used interchangeably with ResourceAssociationAccessMode,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Enforced**: Enforced access mode - traffic to the resource that failed access checks is blocked \
+ * **Learning**: Learning access mode - traffic to the resource is enabled for analysis but not blocked \
+ * **Audit**: Audit access mode - traffic to the resource that fails access checks is logged but not blocked
+ */
+export declare type ResourceAssociationAccessMode = string;
+
 /** A single file or multiple files to be downloaded to a compute node. */
 export declare interface ResourceFile {
     /** The autoStorageContainerName, storageContainerUrl and httpUrl properties are mutually exclusive and one of them must be specified. */
@@ -2523,22 +2970,45 @@ export declare interface ScaleSettings {
     autoScale?: AutoScaleSettings;
 }
 
+/**
+ * Defines values for SecurityEncryptionTypes. \
+ * {@link KnownSecurityEncryptionTypes} can be used interchangeably with SecurityEncryptionTypes,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **NonPersistedTPM** \
+ * **VMGuestStateOnly**
+ */
+export declare type SecurityEncryptionTypes = string;
+
 /** Specifies the security profile settings for the virtual machine or virtual machine scale set. */
 export declare interface SecurityProfile {
     /** Specifies the SecurityType of the virtual machine. It has to be set to any specified value to enable UefiSettings. */
-    securityType?: "trustedLaunch";
+    securityType?: SecurityTypes;
     /** This property can be used by user in the request to enable or disable the Host Encryption for the virtual machine or virtual machine scale set. This will enable the encryption for all the disks including Resource/Temp disk at host itself. */
     encryptionAtHost?: boolean;
     /** Specifies the security settings like secure boot and vTPM used while creating the virtual machine. */
     uefiSettings?: UefiSettings;
 }
 
+/** Defines values for SecurityTypes. */
+export declare type SecurityTypes = "trustedLaunch" | "confidentialVM";
+
 /** Specifies the service artifact reference id used to set same image version for all virtual machines in the scale set when using 'latest' image version. */
 export declare interface ServiceArtifactReference {
     /** The service artifact reference id in the form of /subscriptions/{subscriptionId}/resourceGroups/{resourceGroup}/providers/Microsoft.Compute/galleries/{galleryName}/serviceArtifacts/{serviceArtifactName}/vmArtifactsProfiles/{vmArtifactsProfilesName} */
     id: string;
 }
 
+/**
+ * Defines values for Severity. \
+ * {@link KnownSeverity} can be used interchangeably with Severity,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Warning** \
+ * **Error**
+ */
+export declare type Severity = string;
+
 /** A SKU capability, such as the number of cores. */
 export declare interface SkuCapability {
     /**
@@ -2609,6 +3079,22 @@ export declare interface SupportedSkusResult {
     readonly nextLink?: string;
 }
 
+/** Metadata pertaining to creation and last modification of the resource. */
+export declare interface SystemData {
+    /** The identity that created the resource. */
+    createdBy?: string;
+    /** The type of identity that created the resource. */
+    createdByType?: CreatedByType;
+    /** The timestamp of resource creation (UTC). */
+    createdAt?: Date;
+    /** The identity that last modified the resource. */
+    lastModifiedBy?: string;
+    /** The type of identity that last modified the resource. */
+    lastModifiedByType?: CreatedByType;
+    /** The timestamp of resource last modification (UTC) */
+    lastModifiedAt?: Date;
+}
+
 /** The container settings for a task. */
 export declare interface TaskContainerSettings {
     /** These additional options are supplied as arguments to the "docker create" command, in addition to those controlled by the Batch Service. */
@@ -2619,6 +3105,8 @@ export declare interface TaskContainerSettings {
     registry?: ContainerRegistry;
     /** A flag to indicate where the container task working directory is. The default is 'taskWorkingDirectory'. */
     workingDirectory?: ContainerWorkingDirectory;
+    /** If this array is null or be not present, container task will mount entire temporary disk drive in windows (or AZ_BATCH_NODE_ROOT_DIR in Linux). It won't' mount any data paths into container if this array is set as empty. */
+    containerHostBatchBindMounts?: ContainerHostBatchBindMountEntry[];
 }
 
 /** Specifies how tasks should be distributed across compute nodes. */
@@ -2644,7 +3132,7 @@ export declare interface UpgradePolicy {
     mode: UpgradeMode;
     /** The configuration parameters used for performing automatic OS upgrade. */
     automaticOSUpgradePolicy?: AutomaticOSUpgradePolicy;
-    /** This property is only supported on Pools with the virtualMachineConfiguration property. */
+    /** The configuration parameters used while performing a rolling upgrade. */
     rollingUpgradePolicy?: RollingUpgradePolicy;
 }
 
@@ -2732,6 +3220,12 @@ export declare interface VirtualMachineFamilyCoreQuota {
     readonly coreQuota?: number;
 }
 
+/** Specifies the security profile settings for the managed disk. **Note**: It can only be set for Confidential VMs and is required when using Confidential VMs. */
+export declare interface VMDiskSecurityProfile {
+    /** Specifies the EncryptionType of the managed disk. It is set to VMGuestStateOnly for encryption of just the VMGuestState blob, and NonPersistedTPM for not persisting firmware state in the VMGuestState blob. **Note**: It can be set for only Confidential VMs and required when using Confidential VMs. */
+    securityEncryptionType?: SecurityEncryptionTypes;
+}
+
 /** The configuration for virtual machine extensions. */
 export declare interface VMExtension {
     /** The name of the virtual machine extension. */
@@ -2762,7 +3256,7 @@ export declare interface WindowsConfiguration {
 
 /** Properties used to create a user account on a Windows node. */
 export declare interface WindowsUserConfiguration {
-    /** Specifies login mode for the user. The default value for VirtualMachineConfiguration pools is interactive mode and for CloudServiceConfiguration pools is batch mode. */
+    /** Specifies login mode for the user. The default value is Interactive. */
     loginMode?: LoginMode;
 }