@azure/arm-keyvault-profile-2020-09-01-hybrid 2.1.1-alpha.20250207.1 → 2.1.1-alpha.20250211.2

package/dist/esm/models/index.d.ts

@@ -0,0 +1,1076 @@
+import * as coreClient from "@azure/core-client";
+/** Parameters for creating or updating a vault */
+export interface VaultCreateOrUpdateParameters {
+    /** The supported Azure location where the key vault should be created. */
+    location: string;
+    /** The tags that will be assigned to the key vault. */
+    tags?: {
+        [propertyName: string]: string;
+    };
+    /** Properties of the vault */
+    properties: VaultProperties;
+}
+/** Properties of the vault */
+export interface VaultProperties {
+    /** The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault. */
+    tenantId: string;
+    /** SKU details */
+    sku: Sku;
+    /** An array of 0 to 1024 identities that have access to the key vault. All identities in the array must use the same tenant ID as the key vault's tenant ID. When `createMode` is set to `recover`, access policies are not required. Otherwise, access policies are required. */
+    accessPolicies?: AccessPolicyEntry[];
+    /** The URI of the vault for performing operations on keys and secrets. This property is readonly */
+    vaultUri?: string;
+    /**
+     * The resource id of HSM Pool.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly hsmPoolResourceId?: string;
+    /** Property to specify whether Azure Virtual Machines are permitted to retrieve certificates stored as secrets from the key vault. */
+    enabledForDeployment?: boolean;
+    /** Property to specify whether Azure Disk Encryption is permitted to retrieve secrets from the vault and unwrap keys. */
+    enabledForDiskEncryption?: boolean;
+    /** Property to specify whether Azure Resource Manager is permitted to retrieve secrets from the key vault. */
+    enabledForTemplateDeployment?: boolean;
+    /** Property to specify whether the 'soft delete' functionality is enabled for this key vault. If it's not set to any value(true or false) when creating new key vault, it will be set to true by default. Once set to true, it cannot be reverted to false. */
+    enableSoftDelete?: boolean;
+    /** softDelete data retention days. It accepts >=7 and <=90. */
+    softDeleteRetentionInDays?: number;
+    /** Property that controls how data actions are authorized. When true, the key vault will use Role Based Access Control (RBAC) for authorization of data actions, and the access policies specified in vault properties will be  ignored. When false, the key vault will use the access policies specified in vault properties, and any policy stored on Azure Resource Manager will be ignored. If null or not specified, the vault is created with the default value of false. Note that management actions are always authorized with RBAC. */
+    enableRbacAuthorization?: boolean;
+    /** The vault's create mode to indicate whether the vault need to be recovered or not. */
+    createMode?: CreateMode;
+    /** Property specifying whether protection against purge is enabled for this vault. Setting this property to true activates protection against purge for this vault and its content - only the Key Vault service may initiate a hard, irrecoverable deletion. The setting is effective only if soft delete is also enabled. Enabling this functionality is irreversible - that is, the property does not accept false as its value. */
+    enablePurgeProtection?: boolean;
+    /** Rules governing the accessibility of the key vault from specific network locations. */
+    networkAcls?: NetworkRuleSet;
+    /** Provisioning state of the vault. */
+    provisioningState?: VaultProvisioningState;
+    /**
+     * List of private endpoint connections associated with the key vault.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly privateEndpointConnections?: PrivateEndpointConnectionItem[];
+}
+/** SKU details */
+export interface Sku {
+    /** SKU family name */
+    family: SkuFamily;
+    /** SKU name to specify whether the key vault is a standard vault or a premium vault. */
+    name: SkuName;
+}
+/** An identity that have access to the key vault. All identities in the array must use the same tenant ID as the key vault's tenant ID. */
+export interface AccessPolicyEntry {
+    /** The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault. */
+    tenantId: string;
+    /** The object ID of a user, service principal or security group in the Azure Active Directory tenant for the vault. The object ID must be unique for the list of access policies. */
+    objectId: string;
+    /**  Application ID of the client making request on behalf of a principal */
+    applicationId?: string;
+    /** Permissions the identity has for keys, secrets and certificates. */
+    permissions: Permissions;
+}
+/** Permissions the identity has for keys, secrets, certificates and storage. */
+export interface Permissions {
+    /** Permissions to keys */
+    keys?: KeyPermissions[];
+    /** Permissions to secrets */
+    secrets?: SecretPermissions[];
+    /** Permissions to certificates */
+    certificates?: CertificatePermissions[];
+    /** Permissions to storage accounts */
+    storage?: StoragePermissions[];
+}
+/** A set of rules governing the network accessibility of a vault. */
+export interface NetworkRuleSet {
+    /** Tells what traffic can bypass network rules. This can be 'AzureServices' or 'None'.  If not specified the default is 'AzureServices'. */
+    bypass?: NetworkRuleBypassOptions;
+    /** The default action when no rule from ipRules and from virtualNetworkRules match. This is only used after the bypass property has been evaluated. */
+    defaultAction?: NetworkRuleAction;
+    /** The list of IP address rules. */
+    ipRules?: IPRule[];
+    /** The list of virtual network rules. */
+    virtualNetworkRules?: VirtualNetworkRule[];
+}
+/** A rule governing the accessibility of a vault from a specific ip address or ip range. */
+export interface IPRule {
+    /** An IPv4 address range in CIDR notation, such as '124.56.78.91' (simple IP address) or '124.56.78.0/24' (all addresses that start with 124.56.78). */
+    value: string;
+}
+/** A rule governing the accessibility of a vault from a specific virtual network. */
+export interface VirtualNetworkRule {
+    /** Full resource id of a vnet subnet, such as '/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/virtualNetworks/test-vnet/subnets/subnet1'. */
+    id: string;
+    /** Property to specify whether NRP will ignore the check if parent subnet has serviceEndpoints configured. */
+    ignoreMissingVnetServiceEndpoint?: boolean;
+}
+/** Private endpoint connection item. */
+export interface PrivateEndpointConnectionItem {
+    /** Id of private endpoint connection. */
+    id?: string;
+    /** Modified whenever there is a change in the state of private endpoint connection. */
+    etag?: string;
+    /** Properties of the private endpoint object. */
+    privateEndpoint?: PrivateEndpoint;
+    /** Approval state of the private link connection. */
+    privateLinkServiceConnectionState?: PrivateLinkServiceConnectionState;
+    /**
+     * Provisioning state of the private endpoint connection.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly provisioningState?: PrivateEndpointConnectionProvisioningState;
+}
+/** Private endpoint object properties. */
+export interface PrivateEndpoint {
+    /**
+     * Full identifier of the private endpoint resource.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly id?: string;
+}
+/** An object that represents the approval state of the private link connection. */
+export interface PrivateLinkServiceConnectionState {
+    /** Indicates whether the connection has been approved, rejected or removed by the key vault owner. */
+    status?: PrivateEndpointServiceConnectionStatus;
+    /** The reason for approval or rejection. */
+    description?: string;
+    /** A message indicating if changes on the service provider require any updates on the consumer. */
+    actionsRequired?: string;
+}
+/** Resource information with extended details. */
+export interface Vault {
+    /**
+     * Fully qualified identifier of the key vault resource.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly id?: string;
+    /**
+     * Name of the key vault resource.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly name?: string;
+    /**
+     * Resource type of the key vault resource.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly type?: string;
+    /** Azure location of the key vault resource. */
+    location?: string;
+    /** Tags assigned to the key vault resource. */
+    tags?: {
+        [propertyName: string]: string;
+    };
+    /** Properties of the vault */
+    properties: VaultProperties;
+}
+/** An error response from Key Vault resource provider */
+export interface CloudError {
+    /** An error response from Key Vault resource provider */
+    error?: CloudErrorBody;
+}
+/** An error response from Key Vault resource provider */
+export interface CloudErrorBody {
+    /** Error code. This is a mnemonic that can be consumed programmatically. */
+    code?: string;
+    /** User friendly error message. The message is typically localized and may vary with service version. */
+    message?: string;
+}
+/** Parameters for creating or updating a vault */
+export interface VaultPatchParameters {
+    /** The tags that will be assigned to the key vault. */
+    tags?: {
+        [propertyName: string]: string;
+    };
+    /** Properties of the vault */
+    properties?: VaultPatchProperties;
+}
+/** Properties of the vault */
+export interface VaultPatchProperties {
+    /** The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault. */
+    tenantId?: string;
+    /** SKU details */
+    sku?: Sku;
+    /** An array of 0 to 16 identities that have access to the key vault. All identities in the array must use the same tenant ID as the key vault's tenant ID. */
+    accessPolicies?: AccessPolicyEntry[];
+    /** Property to specify whether Azure Virtual Machines are permitted to retrieve certificates stored as secrets from the key vault. */
+    enabledForDeployment?: boolean;
+    /** Property to specify whether Azure Disk Encryption is permitted to retrieve secrets from the vault and unwrap keys. */
+    enabledForDiskEncryption?: boolean;
+    /** Property to specify whether Azure Resource Manager is permitted to retrieve secrets from the key vault. */
+    enabledForTemplateDeployment?: boolean;
+    /** Property to specify whether the 'soft delete' functionality is enabled for this key vault. Once set to true, it cannot be reverted to false. */
+    enableSoftDelete?: boolean;
+    /** Property that controls how data actions are authorized. When true, the key vault will use Role Based Access Control (RBAC) for authorization of data actions, and the access policies specified in vault properties will be  ignored. When false, the key vault will use the access policies specified in vault properties, and any policy stored on Azure Resource Manager will be ignored. If null or not specified, the value of this property will not change. */
+    enableRbacAuthorization?: boolean;
+    /** softDelete data retention days. It accepts >=7 and <=90. */
+    softDeleteRetentionInDays?: number;
+    /** The vault's create mode to indicate whether the vault need to be recovered or not. */
+    createMode?: CreateMode;
+    /** Property specifying whether protection against purge is enabled for this vault. Setting this property to true activates protection against purge for this vault and its content - only the Key Vault service may initiate a hard, irrecoverable deletion. The setting is effective only if soft delete is also enabled. Enabling this functionality is irreversible - that is, the property does not accept false as its value. */
+    enablePurgeProtection?: boolean;
+    /** A collection of rules governing the accessibility of the vault from specific network locations. */
+    networkAcls?: NetworkRuleSet;
+}
+/** Parameters for updating the access policy in a vault */
+export interface VaultAccessPolicyParameters {
+    /**
+     * The resource id of the access policy.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly id?: string;
+    /**
+     * The resource name of the access policy.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly name?: string;
+    /**
+     * The resource name of the access policy.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly type?: string;
+    /**
+     * The resource type of the access policy.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly location?: string;
+    /** Properties of the access policy */
+    properties: VaultAccessPolicyProperties;
+}
+/** Properties of the vault access policy */
+export interface VaultAccessPolicyProperties {
+    /** An array of 0 to 16 identities that have access to the key vault. All identities in the array must use the same tenant ID as the key vault's tenant ID. */
+    accessPolicies: AccessPolicyEntry[];
+}
+/** List of vaults */
+export interface VaultListResult {
+    /** The list of vaults. */
+    value?: Vault[];
+    /** The URL to get the next set of vaults. */
+    nextLink?: string;
+}
+/** List of vaults */
+export interface DeletedVaultListResult {
+    /** The list of deleted vaults. */
+    value?: DeletedVault[];
+    /** The URL to get the next set of deleted vaults. */
+    nextLink?: string;
+}
+/** Deleted vault information with extended details. */
+export interface DeletedVault {
+    /**
+     * The resource ID for the deleted key vault.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly id?: string;
+    /**
+     * The name of the key vault.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly name?: string;
+    /**
+     * The resource type of the key vault.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly type?: string;
+    /** Properties of the vault */
+    properties?: DeletedVaultProperties;
+}
+/** Properties of the deleted vault. */
+export interface DeletedVaultProperties {
+    /**
+     * The resource id of the original vault.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly vaultId?: string;
+    /**
+     * The location of the original vault.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly location?: string;
+    /**
+     * The deleted date.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly deletionDate?: Date;
+    /**
+     * The scheduled purged date.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly scheduledPurgeDate?: Date;
+    /**
+     * Tags of the original vault.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly tags?: {
+        [propertyName: string]: string;
+    };
+    /**
+     * Purge protection status of the original vault.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly purgeProtectionEnabled?: boolean;
+}
+/** List of vault resources. */
+export interface ResourceListResult {
+    /** The list of vault resources. */
+    value?: Resource[];
+    /** The URL to get the next set of vault resources. */
+    nextLink?: string;
+}
+/** Key Vault resource */
+export interface Resource {
+    /**
+     * Fully qualified identifier of the key vault resource.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly id?: string;
+    /**
+     * Name of the key vault resource.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly name?: string;
+    /**
+     * Resource type of the key vault resource.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly type?: string;
+    /**
+     * Azure location of the key vault resource.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly location?: string;
+    /**
+     * Tags assigned to the key vault resource.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly tags?: {
+        [propertyName: string]: string;
+    };
+}
+/** The parameters used to check the availability of the vault name. */
+export interface VaultCheckNameAvailabilityParameters {
+    /** The vault name. */
+    name: string;
+    /** The type of resource, Microsoft.KeyVault/vaults */
+    type: "Microsoft.KeyVault/vaults";
+}
+/** The CheckNameAvailability operation response. */
+export interface CheckNameAvailabilityResult {
+    /**
+     * A boolean value that indicates whether the name is available for you to use. If true, the name is available. If false, the name has already been taken or is invalid and cannot be used.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly nameAvailable?: boolean;
+    /**
+     * The reason that a vault name could not be used. The Reason element is only returned if NameAvailable is false.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly reason?: Reason;
+    /**
+     * An error message explaining the Reason value in more detail.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly message?: string;
+}
+/** A list of private link resources */
+export interface PrivateLinkResourceListResult {
+    /** Array of private link resources */
+    value?: PrivateLinkResource[];
+}
+/** Result of the request to list Storage operations. It contains a list of operations and a URL link to get the next set of results. */
+export interface OperationListResult {
+    /** List of Storage operations supported by the Storage resource provider. */
+    value?: Operation[];
+    /** The URL to get the next set of operations. */
+    nextLink?: string;
+}
+/** Key Vault REST API operation definition. */
+export interface Operation {
+    /** Operation name: {provider}/{resource}/{operation} */
+    name?: string;
+    /** Display metadata associated with the operation. */
+    display?: OperationDisplay;
+    /** The origin of operations. */
+    origin?: string;
+    /** Property to specify whether the action is a data action. */
+    isDataAction?: boolean;
+    /** One property of operation, include metric specifications. */
+    serviceSpecification?: ServiceSpecification;
+}
+/** Display metadata associated with the operation. */
+export interface OperationDisplay {
+    /** Service provider: Microsoft Key Vault. */
+    provider?: string;
+    /** Resource on which the operation is performed etc. */
+    resource?: string;
+    /** Type of operation: get, read, delete, etc. */
+    operation?: string;
+    /** Description of operation. */
+    description?: string;
+}
+/** One property of operation, include log specifications. */
+export interface ServiceSpecification {
+    /** Log specifications of operation. */
+    logSpecifications?: LogSpecification[];
+    /** Metric specifications of operation. */
+    metricSpecifications?: MetricSpecification[];
+}
+/** Log specification of operation. */
+export interface LogSpecification {
+    /** Name of log specification. */
+    name?: string;
+    /** Display name of log specification. */
+    displayName?: string;
+    /** Blob duration of specification. */
+    blobDuration?: string;
+}
+/** Metric specification of operation. */
+export interface MetricSpecification {
+    /** Name of metric specification. */
+    name?: string;
+    /** Display name of Metric specification. */
+    displayName?: string;
+    /** Display description of Metric specification. */
+    displayDescription?: string;
+    /** The metric unit. Possible values include: 'Bytes', 'Count', 'Milliseconds'. */
+    unit?: string;
+    /** The metric aggregation type. Possible values include: 'Average', 'Count', 'Total'. */
+    aggregationType?: string;
+    /** The supported aggregation types for the metrics. */
+    supportedAggregationTypes?: string[];
+    /** The supported time grain types for the metrics. */
+    supportedTimeGrainTypes?: string[];
+    /** The metric lock aggregation type. */
+    lockAggregationType?: string;
+    /** The dimensions of metric */
+    dimensions?: DimensionProperties[];
+    /** Property to specify whether to fill gap with zero. */
+    fillGapWithZero?: boolean;
+    /** The internal metric name. */
+    internalMetricName?: string;
+}
+/** Type of operation: get, read, delete, etc. */
+export interface DimensionProperties {
+    /** Name of dimension. */
+    name?: string;
+    /** Display name of dimension. */
+    displayName?: string;
+    /** Property to specify whether the dimension should be exported for shoebox. */
+    toBeExportedForShoebox?: boolean;
+}
+/** Parameters for creating or updating a secret */
+export interface SecretCreateOrUpdateParameters {
+    /** The tags that will be assigned to the secret. */
+    tags?: {
+        [propertyName: string]: string;
+    };
+    /** Properties of the secret */
+    properties: SecretProperties;
+}
+/** Properties of the secret */
+export interface SecretProperties {
+    /** The value of the secret. NOTE: 'value' will never be returned from the service, as APIs using this model are is intended for internal use in ARM deployments. Users should use the data-plane REST service for interaction with vault secrets. */
+    value?: string;
+    /** The content type of the secret. */
+    contentType?: string;
+    /** The attributes of the secret. */
+    attributes?: SecretAttributes;
+    /**
+     * The URI to retrieve the current version of the secret.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly secretUri?: string;
+    /**
+     * The URI to retrieve the specific version of the secret.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly secretUriWithVersion?: string;
+}
+/** The object attributes managed by the KeyVault service. */
+export interface Attributes {
+    /** Determines whether the object is enabled. */
+    enabled?: boolean;
+    /** Not before date in seconds since 1970-01-01T00:00:00Z. */
+    notBefore?: Date;
+    /** Expiry date in seconds since 1970-01-01T00:00:00Z. */
+    expires?: Date;
+    /**
+     * Creation time in seconds since 1970-01-01T00:00:00Z.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly created?: Date;
+    /**
+     * Last updated time in seconds since 1970-01-01T00:00:00Z.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly updated?: Date;
+}
+/** Parameters for patching a secret */
+export interface SecretPatchParameters {
+    /** The tags that will be assigned to the secret. */
+    tags?: {
+        [propertyName: string]: string;
+    };
+    /** Properties of the secret */
+    properties?: SecretPatchProperties;
+}
+/** Properties of the secret */
+export interface SecretPatchProperties {
+    /** The value of the secret. */
+    value?: string;
+    /** The content type of the secret. */
+    contentType?: string;
+    /** The attributes of the secret. */
+    attributes?: SecretAttributes;
+}
+/** List of secrets */
+export interface SecretListResult {
+    /** The list of secrets. */
+    value?: Secret[];
+    /** The URL to get the next set of secrets. */
+    nextLink?: string;
+}
+/** Private endpoint connection resource. */
+export interface PrivateEndpointConnection extends Resource {
+    /** Modified whenever there is a change in the state of private endpoint connection. */
+    etag?: string;
+    /** Properties of the private endpoint object. */
+    privateEndpoint?: PrivateEndpoint;
+    /** Approval state of the private link connection. */
+    privateLinkServiceConnectionState?: PrivateLinkServiceConnectionState;
+    /**
+     * Provisioning state of the private endpoint connection.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly provisioningState?: PrivateEndpointConnectionProvisioningState;
+}
+/** A private link resource */
+export interface PrivateLinkResource extends Resource {
+    /**
+     * Group identifier of private link resource.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly groupId?: string;
+    /**
+     * Required member names of private link resource.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly requiredMembers?: string[];
+    /** Required DNS zone names of the the private link resource. */
+    requiredZoneNames?: string[];
+}
+/** Resource information with extended details. */
+export interface Secret extends Resource {
+    /** Properties of the secret */
+    properties: SecretProperties;
+}
+/** The secret management attributes. */
+export interface SecretAttributes extends Attributes {
+}
+/** Defines headers for PrivateEndpointConnections_put operation. */
+export interface PrivateEndpointConnectionsPutHeaders {
+    /** (specified only if operation does not finish synchronously) The recommended number of seconds to wait before calling the URI specified in Azure-AsyncOperation. */
+    retryAfter?: number;
+    /** (specified only if operation does not finish synchronously) The URI to poll for completion status. The response of this URI may be synchronous or asynchronous. */
+    azureAsyncOperation?: string;
+}
+/** Defines headers for PrivateEndpointConnections_delete operation. */
+export interface PrivateEndpointConnectionsDeleteHeaders {
+    /** The recommended number of seconds to wait before calling the URI specified in the location header. */
+    retryAfter?: number;
+    /** The URI to poll for completion status. */
+    location?: string;
+}
+/** Known values of {@link SkuFamily} that the service accepts. */
+export declare enum KnownSkuFamily {
+    /** A */
+    A = "A"
+}
+/**
+ * Defines values for SkuFamily. \
+ * {@link KnownSkuFamily} can be used interchangeably with SkuFamily,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **A**
+ */
+export type SkuFamily = string;
+/** Known values of {@link KeyPermissions} that the service accepts. */
+export declare enum KnownKeyPermissions {
+    /** All */
+    All = "all",
+    /** Encrypt */
+    Encrypt = "encrypt",
+    /** Decrypt */
+    Decrypt = "decrypt",
+    /** WrapKey */
+    WrapKey = "wrapKey",
+    /** UnwrapKey */
+    UnwrapKey = "unwrapKey",
+    /** Sign */
+    Sign = "sign",
+    /** Verify */
+    Verify = "verify",
+    /** Get */
+    Get = "get",
+    /** List */
+    List = "list",
+    /** Create */
+    Create = "create",
+    /** Update */
+    Update = "update",
+    /** Import */
+    Import = "import",
+    /** Delete */
+    Delete = "delete",
+    /** Backup */
+    Backup = "backup",
+    /** Restore */
+    Restore = "restore",
+    /** Recover */
+    Recover = "recover",
+    /** Purge */
+    Purge = "purge"
+}
+/**
+ * Defines values for KeyPermissions. \
+ * {@link KnownKeyPermissions} can be used interchangeably with KeyPermissions,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **all** \
+ * **encrypt** \
+ * **decrypt** \
+ * **wrapKey** \
+ * **unwrapKey** \
+ * **sign** \
+ * **verify** \
+ * **get** \
+ * **list** \
+ * **create** \
+ * **update** \
+ * **import** \
+ * **delete** \
+ * **backup** \
+ * **restore** \
+ * **recover** \
+ * **purge**
+ */
+export type KeyPermissions = string;
+/** Known values of {@link SecretPermissions} that the service accepts. */
+export declare enum KnownSecretPermissions {
+    /** All */
+    All = "all",
+    /** Get */
+    Get = "get",
+    /** List */
+    List = "list",
+    /** Set */
+    Set = "set",
+    /** Delete */
+    Delete = "delete",
+    /** Backup */
+    Backup = "backup",
+    /** Restore */
+    Restore = "restore",
+    /** Recover */
+    Recover = "recover",
+    /** Purge */
+    Purge = "purge"
+}
+/**
+ * Defines values for SecretPermissions. \
+ * {@link KnownSecretPermissions} can be used interchangeably with SecretPermissions,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **all** \
+ * **get** \
+ * **list** \
+ * **set** \
+ * **delete** \
+ * **backup** \
+ * **restore** \
+ * **recover** \
+ * **purge**
+ */
+export type SecretPermissions = string;
+/** Known values of {@link CertificatePermissions} that the service accepts. */
+export declare enum KnownCertificatePermissions {
+    /** All */
+    All = "all",
+    /** Get */
+    Get = "get",
+    /** List */
+    List = "list",
+    /** Delete */
+    Delete = "delete",
+    /** Create */
+    Create = "create",
+    /** Import */
+    Import = "import",
+    /** Update */
+    Update = "update",
+    /** Managecontacts */
+    Managecontacts = "managecontacts",
+    /** Getissuers */
+    Getissuers = "getissuers",
+    /** Listissuers */
+    Listissuers = "listissuers",
+    /** Setissuers */
+    Setissuers = "setissuers",
+    /** Deleteissuers */
+    Deleteissuers = "deleteissuers",
+    /** Manageissuers */
+    Manageissuers = "manageissuers",
+    /** Recover */
+    Recover = "recover",
+    /** Purge */
+    Purge = "purge",
+    /** Backup */
+    Backup = "backup",
+    /** Restore */
+    Restore = "restore"
+}
+/**
+ * Defines values for CertificatePermissions. \
+ * {@link KnownCertificatePermissions} can be used interchangeably with CertificatePermissions,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **all** \
+ * **get** \
+ * **list** \
+ * **delete** \
+ * **create** \
+ * **import** \
+ * **update** \
+ * **managecontacts** \
+ * **getissuers** \
+ * **listissuers** \
+ * **setissuers** \
+ * **deleteissuers** \
+ * **manageissuers** \
+ * **recover** \
+ * **purge** \
+ * **backup** \
+ * **restore**
+ */
+export type CertificatePermissions = string;
+/** Known values of {@link StoragePermissions} that the service accepts. */
+export declare enum KnownStoragePermissions {
+    /** All */
+    All = "all",
+    /** Get */
+    Get = "get",
+    /** List */
+    List = "list",
+    /** Delete */
+    Delete = "delete",
+    /** Set */
+    Set = "set",
+    /** Update */
+    Update = "update",
+    /** Regeneratekey */
+    Regeneratekey = "regeneratekey",
+    /** Recover */
+    Recover = "recover",
+    /** Purge */
+    Purge = "purge",
+    /** Backup */
+    Backup = "backup",
+    /** Restore */
+    Restore = "restore",
+    /** Setsas */
+    Setsas = "setsas",
+    /** Listsas */
+    Listsas = "listsas",
+    /** Getsas */
+    Getsas = "getsas",
+    /** Deletesas */
+    Deletesas = "deletesas"
+}
+/**
+ * Defines values for StoragePermissions. \
+ * {@link KnownStoragePermissions} can be used interchangeably with StoragePermissions,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **all** \
+ * **get** \
+ * **list** \
+ * **delete** \
+ * **set** \
+ * **update** \
+ * **regeneratekey** \
+ * **recover** \
+ * **purge** \
+ * **backup** \
+ * **restore** \
+ * **setsas** \
+ * **listsas** \
+ * **getsas** \
+ * **deletesas**
+ */
+export type StoragePermissions = string;
+/** Known values of {@link NetworkRuleBypassOptions} that the service accepts. */
+export declare enum KnownNetworkRuleBypassOptions {
+    /** AzureServices */
+    AzureServices = "AzureServices",
+    /** None */
+    None = "None"
+}
+/**
+ * Defines values for NetworkRuleBypassOptions. \
+ * {@link KnownNetworkRuleBypassOptions} can be used interchangeably with NetworkRuleBypassOptions,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **AzureServices** \
+ * **None**
+ */
+export type NetworkRuleBypassOptions = string;
+/** Known values of {@link NetworkRuleAction} that the service accepts. */
+export declare enum KnownNetworkRuleAction {
+    /** Allow */
+    Allow = "Allow",
+    /** Deny */
+    Deny = "Deny"
+}
+/**
+ * Defines values for NetworkRuleAction. \
+ * {@link KnownNetworkRuleAction} can be used interchangeably with NetworkRuleAction,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Allow** \
+ * **Deny**
+ */
+export type NetworkRuleAction = string;
+/** Known values of {@link VaultProvisioningState} that the service accepts. */
+export declare enum KnownVaultProvisioningState {
+    /** Succeeded */
+    Succeeded = "Succeeded",
+    /** RegisteringDns */
+    RegisteringDns = "RegisteringDns"
+}
+/**
+ * Defines values for VaultProvisioningState. \
+ * {@link KnownVaultProvisioningState} can be used interchangeably with VaultProvisioningState,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Succeeded** \
+ * **RegisteringDns**
+ */
+export type VaultProvisioningState = string;
+/** Known values of {@link PrivateEndpointServiceConnectionStatus} that the service accepts. */
+export declare enum KnownPrivateEndpointServiceConnectionStatus {
+    /** Pending */
+    Pending = "Pending",
+    /** Approved */
+    Approved = "Approved",
+    /** Rejected */
+    Rejected = "Rejected",
+    /** Disconnected */
+    Disconnected = "Disconnected"
+}
+/**
+ * Defines values for PrivateEndpointServiceConnectionStatus. \
+ * {@link KnownPrivateEndpointServiceConnectionStatus} can be used interchangeably with PrivateEndpointServiceConnectionStatus,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Pending** \
+ * **Approved** \
+ * **Rejected** \
+ * **Disconnected**
+ */
+export type PrivateEndpointServiceConnectionStatus = string;
+/** Known values of {@link PrivateEndpointConnectionProvisioningState} that the service accepts. */
+export declare enum KnownPrivateEndpointConnectionProvisioningState {
+    /** Succeeded */
+    Succeeded = "Succeeded",
+    /** Creating */
+    Creating = "Creating",
+    /** Updating */
+    Updating = "Updating",
+    /** Deleting */
+    Deleting = "Deleting",
+    /** Failed */
+    Failed = "Failed",
+    /** Disconnected */
+    Disconnected = "Disconnected"
+}
+/**
+ * Defines values for PrivateEndpointConnectionProvisioningState. \
+ * {@link KnownPrivateEndpointConnectionProvisioningState} can be used interchangeably with PrivateEndpointConnectionProvisioningState,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Succeeded** \
+ * **Creating** \
+ * **Updating** \
+ * **Deleting** \
+ * **Failed** \
+ * **Disconnected**
+ */
+export type PrivateEndpointConnectionProvisioningState = string;
+/** Defines values for SkuName. */
+export type SkuName = "standard" | "premium";
+/** Defines values for CreateMode. */
+export type CreateMode = "recover" | "default";
+/** Defines values for AccessPolicyUpdateKind. */
+export type AccessPolicyUpdateKind = "add" | "replace" | "remove";
+/** Defines values for Reason. */
+export type Reason = "AccountNameInvalid" | "AlreadyExists";
+/** Optional parameters. */
+export interface VaultsCreateOrUpdateOptionalParams extends coreClient.OperationOptions {
+    /** Delay to wait until next poll, in milliseconds. */
+    updateIntervalInMs?: number;
+    /** A serialized poller which can be used to resume an existing paused Long-Running-Operation. */
+    resumeFrom?: string;
+}
+/** Contains response data for the createOrUpdate operation. */
+export type VaultsCreateOrUpdateResponse = Vault;
+/** Optional parameters. */
+export interface VaultsUpdateOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the update operation. */
+export type VaultsUpdateResponse = Vault;
+/** Optional parameters. */
+export interface VaultsDeleteOptionalParams extends coreClient.OperationOptions {
+}
+/** Optional parameters. */
+export interface VaultsGetOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the get operation. */
+export type VaultsGetResponse = Vault;
+/** Optional parameters. */
+export interface VaultsUpdateAccessPolicyOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the updateAccessPolicy operation. */
+export type VaultsUpdateAccessPolicyResponse = VaultAccessPolicyParameters;
+/** Optional parameters. */
+export interface VaultsListByResourceGroupOptionalParams extends coreClient.OperationOptions {
+    /** Maximum number of results to return. */
+    top?: number;
+}
+/** Contains response data for the listByResourceGroup operation. */
+export type VaultsListByResourceGroupResponse = VaultListResult;
+/** Optional parameters. */
+export interface VaultsListBySubscriptionOptionalParams extends coreClient.OperationOptions {
+    /** Maximum number of results to return. */
+    top?: number;
+}
+/** Contains response data for the listBySubscription operation. */
+export type VaultsListBySubscriptionResponse = VaultListResult;
+/** Optional parameters. */
+export interface VaultsListDeletedOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the listDeleted operation. */
+export type VaultsListDeletedResponse = DeletedVaultListResult;
+/** Optional parameters. */
+export interface VaultsGetDeletedOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the getDeleted operation. */
+export type VaultsGetDeletedResponse = DeletedVault;
+/** Optional parameters. */
+export interface VaultsPurgeDeletedOptionalParams extends coreClient.OperationOptions {
+    /** Delay to wait until next poll, in milliseconds. */
+    updateIntervalInMs?: number;
+    /** A serialized poller which can be used to resume an existing paused Long-Running-Operation. */
+    resumeFrom?: string;
+}
+/** Optional parameters. */
+export interface VaultsListOptionalParams extends coreClient.OperationOptions {
+    /** Maximum number of results to return. */
+    top?: number;
+}
+/** Contains response data for the list operation. */
+export type VaultsListResponse = ResourceListResult;
+/** Optional parameters. */
+export interface VaultsCheckNameAvailabilityOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the checkNameAvailability operation. */
+export type VaultsCheckNameAvailabilityResponse = CheckNameAvailabilityResult;
+/** Optional parameters. */
+export interface VaultsListByResourceGroupNextOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the listByResourceGroupNext operation. */
+export type VaultsListByResourceGroupNextResponse = VaultListResult;
+/** Optional parameters. */
+export interface VaultsListBySubscriptionNextOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the listBySubscriptionNext operation. */
+export type VaultsListBySubscriptionNextResponse = VaultListResult;
+/** Optional parameters. */
+export interface VaultsListDeletedNextOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the listDeletedNext operation. */
+export type VaultsListDeletedNextResponse = DeletedVaultListResult;
+/** Optional parameters. */
+export interface VaultsListNextOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the listNext operation. */
+export type VaultsListNextResponse = ResourceListResult;
+/** Optional parameters. */
+export interface PrivateEndpointConnectionsGetOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the get operation. */
+export type PrivateEndpointConnectionsGetResponse = PrivateEndpointConnection;
+/** Optional parameters. */
+export interface PrivateEndpointConnectionsPutOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the put operation. */
+export type PrivateEndpointConnectionsPutResponse = PrivateEndpointConnectionsPutHeaders & PrivateEndpointConnection;
+/** Optional parameters. */
+export interface PrivateEndpointConnectionsDeleteOptionalParams extends coreClient.OperationOptions {
+    /** Delay to wait until next poll, in milliseconds. */
+    updateIntervalInMs?: number;
+    /** A serialized poller which can be used to resume an existing paused Long-Running-Operation. */
+    resumeFrom?: string;
+}
+/** Contains response data for the delete operation. */
+export type PrivateEndpointConnectionsDeleteResponse = PrivateEndpointConnection;
+/** Optional parameters. */
+export interface PrivateLinkResourcesListByVaultOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the listByVault operation. */
+export type PrivateLinkResourcesListByVaultResponse = PrivateLinkResourceListResult;
+/** Optional parameters. */
+export interface OperationsListOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the list operation. */
+export type OperationsListResponse = OperationListResult;
+/** Optional parameters. */
+export interface OperationsListNextOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the listNext operation. */
+export type OperationsListNextResponse = OperationListResult;
+/** Optional parameters. */
+export interface SecretsCreateOrUpdateOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the createOrUpdate operation. */
+export type SecretsCreateOrUpdateResponse = Secret;
+/** Optional parameters. */
+export interface SecretsUpdateOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the update operation. */
+export type SecretsUpdateResponse = Secret;
+/** Optional parameters. */
+export interface SecretsGetOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the get operation. */
+export type SecretsGetResponse = Secret;
+/** Optional parameters. */
+export interface SecretsListOptionalParams extends coreClient.OperationOptions {
+    /** Maximum number of results to return. */
+    top?: number;
+}
+/** Contains response data for the list operation. */
+export type SecretsListResponse = SecretListResult;
+/** Optional parameters. */
+export interface SecretsListNextOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the listNext operation. */
+export type SecretsListNextResponse = SecretListResult;
+/** Optional parameters. */
+export interface KeyVaultManagementClientOptionalParams extends coreClient.ServiceClientOptions {
+    /** server parameter */
+    $host?: string;
+    /** Api Version */
+    apiVersion?: string;
+    /** Overrides client endpoint. */
+    endpoint?: string;
+}
+//# sourceMappingURL=index.d.ts.map