@azure/arm-search 3.3.0-beta.1 → 3.3.0

package/{dist-esm/src → dist/browser}/models/index.d.ts

@@ -12,159 +12,53 @@ export interface OperationListResult {
      */
     readonly nextLink?: string;
 }
-/** Describes a REST API operation. */
+/** Details of a REST API operation, returned from the Resource Provider Operations API */
 export interface Operation {
     /**
-     * The name of the operation. This name is of the form {provider}/{resource}/{operation}.
+     * The name of the operation, as per Resource-Based Access Control (RBAC). Examples: "Microsoft.Compute/virtualMachines/write", "Microsoft.Compute/virtualMachines/capture/action"
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly name?: string;
     /**
-     * The object that describes the operation.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly display?: OperationDisplay;
-    /**
-     * Describes if the specified operation is a data plane API operation. Operations where this value is not true are supported directly by the resource provider.
+     * Whether the operation applies to data-plane. This is "true" for data-plane operations and "false" for ARM/control-plane operations.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly isDataAction?: boolean;
+    /** Localized display information for this particular operation. */
+    display?: OperationDisplay;
     /**
-     * Describes which originating entities are allowed to invoke this operation.
+     * The intended executor of the operation; as in Resource Based Access Control (RBAC) and audit logs UX. Default value is "user,system"
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
-    readonly origin?: string;
+    readonly origin?: Origin;
     /**
-     * Describes additional properties for this operation.
+     * Enum. Indicates the action type. "Internal" refers to actions that are for internal only APIs.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
-    readonly properties?: OperationProperties;
+    readonly actionType?: ActionType;
 }
-/** The object that describes the operation. */
+/** Localized display information for this particular operation. */
 export interface OperationDisplay {
     /**
-     * The friendly name of the resource provider.
+     * The localized friendly form of the resource provider name, e.g. "Microsoft Monitoring Insights" or "Microsoft Compute".
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly provider?: string;
     /**
-     * The operation type: read, write, delete, listKeys/action, etc.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly operation?: string;
-    /**
-     * The resource type on which the operation is performed.
+     * The localized friendly name of the resource type related to this operation. E.g. "Virtual Machines" or "Job Schedule Collections".
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly resource?: string;
     /**
-     * The friendly name of the operation.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly description?: string;
-}
-/** Describes additional properties for this operation. */
-export interface OperationProperties {
-    /**
-     * Specifications of the service for this operation.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly serviceSpecification?: OperationServiceSpecification;
-}
-/** Specifications of the service for this operation. */
-export interface OperationServiceSpecification {
-    /**
-     * Specifications of metrics for this operation.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly metricSpecifications?: OperationMetricsSpecification[];
-    /**
-     * Specifications of logs for this operation.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly logSpecifications?: OperationLogsSpecification[];
-}
-/** Specifications of one type of metric for this operation. */
-export interface OperationMetricsSpecification {
-    /**
-     * The name of the metric specification.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly name?: string;
-    /**
-     * The display name of the metric specification.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly displayName?: string;
-    /**
-     * The display description of the metric specification.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly displayDescription?: string;
-    /**
-     * The unit for the metric specification.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly unit?: string;
-    /**
-     * The type of aggregation for the metric specification.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly aggregationType?: string;
-    /**
-     * Dimensions for the metric specification.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly dimensions?: OperationMetricDimension[];
-    /**
-     * Availabilities for the metric specification.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly availabilities?: OperationAvailability[];
-}
-/** Describes a particular dimension for the metric specification. */
-export interface OperationMetricDimension {
-    /**
-     * The name of the dimension.
+     * The concise, localized friendly name for the operation; suitable for dropdowns. E.g. "Create or Update Virtual Machine", "Restart Virtual Machine".
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
-    readonly name?: string;
-    /**
-     * The display name of the dimension.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly displayName?: string;
-}
-/** Describes a particular availability for the metric specification. */
-export interface OperationAvailability {
-    /**
-     * The time grain for the dimension.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly timeGrain?: string;
-    /**
-     * The blob duration for the dimension.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly blobDuration?: string;
-}
-/** Specifications of one type of log for this operation. */
-export interface OperationLogsSpecification {
-    /**
-     * The name of the log specification.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly name?: string;
-    /**
-     * The display name of the log specification.
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly displayName?: string;
+    readonly operation?: string;
     /**
-     * The blob duration for the log specification.
+     * The short, localized friendly description of the operation; suitable for tool tips and detailed views.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
-    readonly blobDuration?: string;
+    readonly description?: string;
 }
 /** Contains information about an API error. */
 export interface CloudError {
@@ -285,7 +179,7 @@ export interface PrivateEndpointConnectionPropertiesPrivateLinkServiceConnection
 /** Common fields that are returned in the response for all Azure Resource Manager resources */
 export interface Resource {
     /**
-     * Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
+     * Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly id?: string;
@@ -299,6 +193,26 @@ export interface Resource {
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly type?: string;
+    /**
+     * Azure Resource Manager metadata containing createdBy and modifiedBy information.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly systemData?: SystemData;
+}
+/** Metadata pertaining to creation and last modification of the resource. */
+export interface SystemData {
+    /** The identity that created the resource. */
+    createdBy?: string;
+    /** The type of identity that created the resource. */
+    createdByType?: CreatedByType;
+    /** The timestamp of resource creation (UTC). */
+    createdAt?: Date;
+    /** The identity that last modified the resource. */
+    lastModifiedBy?: string;
+    /** The type of identity that last modified the resource. */
+    lastModifiedByType?: CreatedByType;
+    /** The timestamp of resource last modification (UTC) */
+    lastModifiedAt?: Date;
 }
 /** Describes the properties of an existing shared private link resource managed by the Azure AI Search service. */
 export interface SharedPrivateLinkResourceProperties {
@@ -336,18 +250,18 @@ export interface Identity {
     type: IdentityType;
     /** The list of user identities associated with the resource. The user identity dictionary key references will be ARM resource IDs in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'. */
     userAssignedIdentities?: {
-        [propertyName: string]: UserAssignedManagedIdentity;
+        [propertyName: string]: UserAssignedIdentity;
     };
 }
-/** The details of the user assigned managed identity assigned to the search service. */
-export interface UserAssignedManagedIdentity {
+/** User assigned identity properties */
+export interface UserAssignedIdentity {
     /**
-     * The principal ID of user assigned identity.
+     * The principal ID of the assigned identity.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly principalId?: string;
     /**
-     * The client ID of user assigned identity.
+     * The client ID of the assigned identity.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly clientId?: string;
@@ -511,69 +425,130 @@ export interface QuotaUsageResultName {
     /** The localized string value for the SKU name. */
     localizedValue?: string;
 }
-/** A list of network security perimeter configurations for a server. */
+/** Result of a list NSP (network security perimeter) configurations request. */
 export interface NetworkSecurityPerimeterConfigurationListResult {
+    /** Array of network security perimeter results. */
+    value?: NetworkSecurityPerimeterConfiguration[];
+    /** The link used to get the next page of results. */
+    nextLink?: string;
+}
+/** Network security configuration properties. */
+export interface NetworkSecurityPerimeterConfigurationProperties {
     /**
-     * Array of results.
+     * Provisioning state of a network security perimeter configuration that is being created or updated.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
-    readonly value?: NetworkSecurityPerimeterConfiguration[];
+    readonly provisioningState?: NetworkSecurityPerimeterConfigurationProvisioningState;
     /**
-     * Link to retrieve next page of results.
+     * List of provisioning issues, if any
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
-    readonly nextLink?: string;
+    readonly provisioningIssues?: ProvisioningIssue[];
+    /** Information about a network security perimeter (NSP) */
+    networkSecurityPerimeter?: NetworkSecurityPerimeter;
+    /** Information about resource association */
+    resourceAssociation?: ResourceAssociation;
+    /** Network security perimeter configuration profile */
+    profile?: NetworkSecurityProfile;
 }
-/** The perimeter for a network security perimeter configuration. */
-export interface NSPConfigPerimeter {
-    id?: string;
-    perimeterGuid?: string;
-    location?: string;
-}
-/** The resource association for the network security perimeter. */
-export interface NSPConfigAssociation {
-    name?: string;
-    accessMode?: string;
+/** Describes a provisioning issue for a network security perimeter configuration */
+export interface ProvisioningIssue {
+    /**
+     * Name of the issue
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly name?: string;
+    /**
+     * Details of a provisioning issue for a network security perimeter (NSP) configuration. Resource providers should generate separate provisioning issue elements for each separate issue detected, and include a meaningful and distinctive description, as well as any appropriate suggestedResourceIds and suggestedAccessRules
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly properties?: ProvisioningIssueProperties;
 }
-/** The profile for a network security perimeter configuration. */
-export interface NSPConfigProfile {
-    name?: string;
-    accessRulesVersion?: string;
-    accessRules?: NSPConfigAccessRule[];
+/** Details of a provisioning issue for a network security perimeter (NSP) configuration. Resource providers should generate separate provisioning issue elements for each separate issue detected, and include a meaningful and distinctive description, as well as any appropriate suggestedResourceIds and suggestedAccessRules */
+export interface ProvisioningIssueProperties {
+    /**
+     * Type of issue
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly issueType?: IssueType;
+    /**
+     * Severity of the issue.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly severity?: Severity;
+    /**
+     * Description of the issue
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly description?: string;
+    /**
+     * Fully qualified resource IDs of suggested resources that can be associated to the network security perimeter (NSP) to remediate the issue.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly suggestedResourceIds?: string[];
+    /**
+     * Access rules that can be added to the network security profile (NSP) to remediate the issue.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly suggestedAccessRules?: AccessRule[];
 }
-/** An access rule for a network security perimeter configuration. */
-export interface NSPConfigAccessRule {
+/** Access rule in a network security perimeter configuration profile */
+export interface AccessRule {
+    /** Name of the access rule */
     name?: string;
-    /** The properties for the access rules in a network security perimeter configuration. */
-    properties?: NSPConfigAccessRuleProperties;
-}
-/** The properties for the access rules in a network security perimeter configuration. */
-export interface NSPConfigAccessRuleProperties {
-    direction?: string;
+    /** Properties of Access Rule */
+    properties?: AccessRuleProperties;
+}
+/** Properties of Access Rule */
+export interface AccessRuleProperties {
+    /** Direction of Access Rule */
+    direction?: AccessRuleDirection;
+    /** Address prefixes in the CIDR format for inbound rules */
     addressPrefixes?: string[];
+    /** Subscriptions for inbound rules */
+    subscriptions?: AccessRulePropertiesSubscriptionsItem[];
+    /** Network security perimeters for inbound rules */
+    networkSecurityPerimeters?: NetworkSecurityPerimeter[];
+    /** Fully qualified domain names (FQDN) for outbound rules */
     fullyQualifiedDomainNames?: string[];
-    subscriptions?: string[];
-    networkSecurityPerimeters?: NSPConfigNetworkSecurityPerimeterRule[];
+    /** Email addresses for outbound rules */
+    emailAddresses?: string[];
+    /** Phone numbers for outbound rules */
+    phoneNumbers?: string[];
+}
+/** Subscription identifiers */
+export interface AccessRulePropertiesSubscriptionsItem {
+    /** The fully qualified Azure resource ID of the subscription e.g. ('/subscriptions/00000000-0000-0000-0000-000000000000') */
+    id?: string;
 }
-/** The network security perimeter properties present in a configuration rule. */
-export interface NSPConfigNetworkSecurityPerimeterRule {
+/** Information about a network security perimeter (NSP) */
+export interface NetworkSecurityPerimeter {
+    /** Fully qualified Azure resource ID of the NSP resource */
     id?: string;
+    /** Universal unique ID (UUID) of the network security perimeter */
     perimeterGuid?: string;
+    /** Location of the network security perimeter */
     location?: string;
 }
-/** An object to describe any issues with provisioning network security perimeters to a search service. */
-export interface NSPProvisioningIssue {
+/** Information about resource association */
+export interface ResourceAssociation {
+    /** Name of the resource association */
     name?: string;
-    /** The properties to describe any issues with provisioning network security perimeters to a search service. */
-    properties?: NSPProvisioningIssueProperties;
+    /** Access mode of the resource association */
+    accessMode?: ResourceAssociationAccessMode;
 }
-/** The properties to describe any issues with provisioning network security perimeters to a search service. */
-export interface NSPProvisioningIssueProperties {
-    issueType?: string;
-    severity?: string;
-    description?: string;
-    suggestedResourceIds?: string[];
-    suggestedAccessRules?: string[];
+/** Network security perimeter configuration profile */
+export interface NetworkSecurityProfile {
+    /** Name of the profile */
+    name?: string;
+    /** Current access rules version */
+    accessRulesVersion?: number;
+    /** List of Access Rules */
+    accessRules?: AccessRule[];
+    /** Current diagnostic settings version */
+    diagnosticSettingsVersion?: number;
+    /** List of log categories that are enabled */
+    enabledLogCategories?: string[];
 }
 /** The details of a long running asynchronous shared private link resource operation. */
 export interface AsyncOperationResult {
@@ -615,8 +590,12 @@ export interface SearchServiceUpdate extends Resource {
     replicaCount?: number;
     /** The number of partitions in the search service; if specified, it can be 1, 2, 3, 4, 6, or 12. Values greater than 1 are only valid for standard SKUs. For 'standard3' services with hostingMode set to 'highDensity', the allowed values are between 1 and 3. */
     partitionCount?: number;
+    /** The endpoint of the Azure AI Search service. */
+    endpoint?: string;
     /** Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'default' or 'highDensity'. For all other SKUs, this value must be 'default'. */
     hostingMode?: HostingMode;
+    /** Configure this property to support the search service using either the Default Compute or Azure Confidential Compute. */
+    computeType?: ComputeType;
     /** This value can be set to 'enabled' to avoid breaking changes on existing customer resources and templates. If set to 'disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method. */
     publicNetworkAccess?: PublicNetworkAccess;
     /**
@@ -630,14 +609,14 @@ export interface SearchServiceUpdate extends Resource {
      */
     readonly statusDetails?: string;
     /**
-     * The state of the last provisioning operation performed on the search service. Provisioning is an intermediate state that occurs while service capacity is being established. After capacity is set up, provisioningState changes to either 'succeeded' or 'failed'. Client applications can poll provisioning status (the recommended polling interval is from 30 seconds to one minute) by using the Get Search Service operation to see when an operation is completed. If you are using the free service, this value tends to come back as 'succeeded' directly in the call to Create search service. This is because the free service uses capacity that is already set up.
+     * The state of the last provisioning operation performed on the search service. Provisioning is an intermediate state that occurs while service capacity is being established. After capacity is set up, provisioningState changes to either 'Succeeded' or 'Failed'. Client applications can poll provisioning status (the recommended polling interval is from 30 seconds to one minute) by using the Get Search Service operation to see when an operation is completed. If you are using the free service, this value tends to come back as 'Succeeded' directly in the call to Create search service. This is because the free service uses capacity that is already set up.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly provisioningState?: ProvisioningState;
     /** Network specific rules that determine how the Azure AI Search service may be reached. */
     networkRuleSet?: NetworkRuleSet;
     /** A list of data exfiltration scenarios that are explicitly disallowed for the search service. Currently, the only supported value is 'All' to disable all possible data export scenarios with more fine grained controls planned for the future. */
-    disabledDataExfiltrationOptions?: SearchDisabledDataExfiltrationOption[];
+    dataExfiltrationProtections?: SearchDataExfiltrationProtection[];
     /** Specifies any policy regarding encryption of resources (such as indexes) using customer manager keys within a search service. */
     encryptionWithCmk?: EncryptionWithCmk;
     /** When set to true, calls to the search service will not be permitted to utilize API keys for authentication. This cannot be set to true if 'dataPlaneAuthOptions' are defined. */
@@ -661,6 +640,13 @@ export interface SearchServiceUpdate extends Resource {
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly eTag?: string;
+    /** Indicates if the search service has an upgrade available. */
+    upgradeAvailable?: UpgradeAvailable;
+    /**
+     * The date and time the search service was last upgraded. This field will be null until the service gets upgraded for the first time.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly serviceUpgradedAt?: Date;
 }
 /** Describes a supported private link resource for the Azure AI Search service. */
 export interface PrivateLinkResource extends Resource {
@@ -683,8 +669,12 @@ export interface SearchService extends TrackedResource {
     replicaCount?: number;
     /** The number of partitions in the search service; if specified, it can be 1, 2, 3, 4, 6, or 12. Values greater than 1 are only valid for standard SKUs. For 'standard3' services with hostingMode set to 'highDensity', the allowed values are between 1 and 3. */
     partitionCount?: number;
+    /** The endpoint of the Azure AI Search service. */
+    endpoint?: string;
     /** Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'default' or 'highDensity'. For all other SKUs, this value must be 'default'. */
     hostingMode?: HostingMode;
+    /** Configure this property to support the search service using either the Default Compute or Azure Confidential Compute. */
+    computeType?: ComputeType;
     /** This value can be set to 'enabled' to avoid breaking changes on existing customer resources and templates. If set to 'disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method. */
     publicNetworkAccess?: PublicNetworkAccess;
     /**
@@ -698,14 +688,14 @@ export interface SearchService extends TrackedResource {
      */
     readonly statusDetails?: string;
     /**
-     * The state of the last provisioning operation performed on the search service. Provisioning is an intermediate state that occurs while service capacity is being established. After capacity is set up, provisioningState changes to either 'succeeded' or 'failed'. Client applications can poll provisioning status (the recommended polling interval is from 30 seconds to one minute) by using the Get Search Service operation to see when an operation is completed. If you are using the free service, this value tends to come back as 'succeeded' directly in the call to Create search service. This is because the free service uses capacity that is already set up.
+     * The state of the last provisioning operation performed on the search service. Provisioning is an intermediate state that occurs while service capacity is being established. After capacity is set up, provisioningState changes to either 'Succeeded' or 'Failed'. Client applications can poll provisioning status (the recommended polling interval is from 30 seconds to one minute) by using the Get Search Service operation to see when an operation is completed. If you are using the free service, this value tends to come back as 'Succeeded' directly in the call to Create search service. This is because the free service uses capacity that is already set up.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly provisioningState?: ProvisioningState;
     /** Network specific rules that determine how the Azure AI Search service may be reached. */
     networkRuleSet?: NetworkRuleSet;
     /** A list of data exfiltration scenarios that are explicitly disallowed for the search service. Currently, the only supported value is 'All' to disable all possible data export scenarios with more fine grained controls planned for the future. */
-    disabledDataExfiltrationOptions?: SearchDisabledDataExfiltrationOption[];
+    dataExfiltrationProtections?: SearchDataExfiltrationProtection[];
     /** Specifies any policy regarding encryption of resources (such as indexes) using customer manager keys within a search service. */
     encryptionWithCmk?: EncryptionWithCmk;
     /** When set to true, calls to the search service will not be permitted to utilize API keys for authentication. This cannot be set to true if 'dataPlaneAuthOptions' are defined. */
@@ -729,18 +719,22 @@ export interface SearchService extends TrackedResource {
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly eTag?: string;
+    /** Indicates if the search service has an upgrade available. */
+    upgradeAvailable?: UpgradeAvailable;
+    /**
+     * The date and time the search service was last upgraded. This field will be null until the service gets upgraded for the first time.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly serviceUpgradedAt?: Date;
 }
-/** Network security perimeter configuration for a server. */
+/** Network security perimeter (NSP) configuration resource */
 export interface NetworkSecurityPerimeterConfiguration extends ProxyResource {
-    /** NOTE: This property will not be serialized. It can only be populated by the server. */
-    readonly provisioningState?: string;
-    /** The perimeter for a network security perimeter configuration. */
-    networkSecurityPerimeter?: NSPConfigPerimeter;
-    /** The resource association for the network security perimeter. */
-    resourceAssociation?: NSPConfigAssociation;
-    /** The profile for a network security perimeter configuration. */
-    profile?: NSPConfigProfile;
-    provisioningIssues?: NSPProvisioningIssue[];
+    /** Network security configuration properties. */
+    properties?: NetworkSecurityPerimeterConfigurationProperties;
+}
+/** Defines headers for Services_upgrade operation. */
+export interface ServicesUpgradeHeaders {
+    location?: string;
 }
 /** Defines headers for NetworkSecurityPerimeterConfigurations_reconcile operation. */
 export interface NetworkSecurityPerimeterConfigurationsReconcileHeaders {
@@ -751,12 +745,62 @@ export interface SearchManagementRequestOptions {
     /** A client-generated GUID value that identifies this request. If specified, this will be included in response information as a way to track the request. */
     clientRequestId?: string;
 }
+/** Known values of {@link Origin} that the service accepts. */
+export declare enum KnownOrigin {
+    /** User */
+    User = "user",
+    /** System */
+    System = "system",
+    /** UserSystem */
+    UserSystem = "user,system"
+}
+/**
+ * Defines values for Origin. \
+ * {@link KnownOrigin} can be used interchangeably with Origin,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **user** \
+ * **system** \
+ * **user,system**
+ */
+export type Origin = string;
+/** Known values of {@link ActionType} that the service accepts. */
+export declare enum KnownActionType {
+    /** Internal */
+    Internal = "Internal"
+}
+/**
+ * Defines values for ActionType. \
+ * {@link KnownActionType} can be used interchangeably with ActionType,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Internal**
+ */
+export type ActionType = string;
+/** Known values of {@link ComputeType} that the service accepts. */
+export declare enum KnownComputeType {
+    /** Create the service with the Default Compute. */
+    Default = "default",
+    /** Create the service with Azure Confidential Compute. */
+    Confidential = "confidential"
+}
+/**
+ * Defines values for ComputeType. \
+ * {@link KnownComputeType} can be used interchangeably with ComputeType,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **default**: Create the service with the Default Compute. \
+ * **confidential**: Create the service with Azure Confidential Compute.
+ */
+export type ComputeType = string;
 /** Known values of {@link PublicNetworkAccess} that the service accepts. */
 export declare enum KnownPublicNetworkAccess {
     /** The search service is accessible from traffic originating from the public internet. */
     Enabled = "enabled",
     /** The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections. */
-    Disabled = "disabled"
+    Disabled = "disabled",
+    /** The network security perimeter configuration rules allow or disallow public network access to the resource. Requires an associated network security perimeter. */
+    SecuredByPerimeter = "securedByPerimeter"
 }
 /**
  * Defines values for PublicNetworkAccess. \
@@ -764,15 +808,16 @@ export declare enum KnownPublicNetworkAccess {
  *  this enum contains the known values that the service supports.
  * ### Known values supported by the service
  * **enabled**: The search service is accessible from traffic originating from the public internet. \
- * **disabled**: The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections.
+ * **disabled**: The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections. \
+ * **securedByPerimeter**: The network security perimeter configuration rules allow or disallow public network access to the resource. Requires an associated network security perimeter.
  */
 export type PublicNetworkAccess = string;
 /** Known values of {@link SearchBypass} that the service accepts. */
 export declare enum KnownSearchBypass {
     /** Indicates that no origin can bypass the rules defined in the 'ipRules' section. This is the default. */
     None = "None",
-    /** Indicates that requests originating from the Azure portal can bypass the rules defined in the 'ipRules' section. */
-    AzurePortal = "AzurePortal"
+    /** Indicates that requests originating from Azure trusted services can bypass the rules defined in the 'ipRules' section. */
+    AzureServices = "AzureServices"
 }
 /**
  * Defines values for SearchBypass. \
@@ -780,22 +825,22 @@ export declare enum KnownSearchBypass {
  *  this enum contains the known values that the service supports.
  * ### Known values supported by the service
  * **None**: Indicates that no origin can bypass the rules defined in the 'ipRules' section. This is the default. \
- * **AzurePortal**: Indicates that requests originating from the Azure portal can bypass the rules defined in the 'ipRules' section.
+ * **AzureServices**: Indicates that requests originating from Azure trusted services can bypass the rules defined in the 'ipRules' section.
  */
 export type SearchBypass = string;
-/** Known values of {@link SearchDisabledDataExfiltrationOption} that the service accepts. */
-export declare enum KnownSearchDisabledDataExfiltrationOption {
+/** Known values of {@link SearchDataExfiltrationProtection} that the service accepts. */
+export declare enum KnownSearchDataExfiltrationProtection {
     /** Indicates that all data exfiltration scenarios are disabled. */
-    All = "All"
+    BlockAll = "BlockAll"
 }
 /**
- * Defines values for SearchDisabledDataExfiltrationOption. \
- * {@link KnownSearchDisabledDataExfiltrationOption} can be used interchangeably with SearchDisabledDataExfiltrationOption,
+ * Defines values for SearchDataExfiltrationProtection. \
+ * {@link KnownSearchDataExfiltrationProtection} can be used interchangeably with SearchDataExfiltrationProtection,
  *  this enum contains the known values that the service supports.
  * ### Known values supported by the service
- * **All**: Indicates that all data exfiltration scenarios are disabled.
+ * **BlockAll**: Indicates that all data exfiltration scenarios are disabled.
  */
-export type SearchDisabledDataExfiltrationOption = string;
+export type SearchDataExfiltrationProtection = string;
 /** Known values of {@link SearchSemanticSearch} that the service accepts. */
 export declare enum KnownSearchSemanticSearch {
     /** Indicates that semantic reranker is disabled for the search service. This is the default. */
@@ -843,6 +888,28 @@ export declare enum KnownPrivateLinkServiceConnectionProvisioningState {
  * **Canceled**: Provisioning request for the private link service connection resource has been canceled.
  */
 export type PrivateLinkServiceConnectionProvisioningState = string;
+/** Known values of {@link CreatedByType} that the service accepts. */
+export declare enum KnownCreatedByType {
+    /** User */
+    User = "User",
+    /** Application */
+    Application = "Application",
+    /** ManagedIdentity */
+    ManagedIdentity = "ManagedIdentity",
+    /** Key */
+    Key = "Key"
+}
+/**
+ * Defines values for CreatedByType. \
+ * {@link KnownCreatedByType} can be used interchangeably with CreatedByType,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **User** \
+ * **Application** \
+ * **ManagedIdentity** \
+ * **Key**
+ */
+export type CreatedByType = string;
 /** Known values of {@link SharedPrivateLinkResourceStatus} that the service accepts. */
 export declare enum KnownSharedPrivateLinkResourceStatus {
     /** The shared private link resource has been created and is pending approval. */
@@ -890,6 +957,22 @@ export declare enum KnownSharedPrivateLinkResourceProvisioningState {
  * **Incomplete**: Provisioning request for the shared private link resource has been accepted but the process of creation has not commenced yet.
  */
 export type SharedPrivateLinkResourceProvisioningState = string;
+/** Known values of {@link UpgradeAvailable} that the service accepts. */
+export declare enum KnownUpgradeAvailable {
+    /** An upgrade is currently not available for the service. */
+    NotAvailable = "notAvailable",
+    /** There is an upgrade available for the service. */
+    Available = "available"
+}
+/**
+ * Defines values for UpgradeAvailable. \
+ * {@link KnownUpgradeAvailable} can be used interchangeably with UpgradeAvailable,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **notAvailable**: An upgrade is currently not available for the service. \
+ * **available**: There is an upgrade available for the service.
+ */
+export type UpgradeAvailable = string;
 /** Known values of {@link SkuName} that the service accepts. */
 export declare enum KnownSkuName {
     /** Free tier, with no SLA guarantees and a subset of the features offered on billable tiers. */
@@ -959,6 +1042,110 @@ export declare enum KnownUnavailableNameReason {
  * **AlreadyExists**: The search service name is already assigned to a different search service.
  */
 export type UnavailableNameReason = string;
+/** Known values of {@link NetworkSecurityPerimeterConfigurationProvisioningState} that the service accepts. */
+export declare enum KnownNetworkSecurityPerimeterConfigurationProvisioningState {
+    /** Succeeded */
+    Succeeded = "Succeeded",
+    /** Creating */
+    Creating = "Creating",
+    /** Updating */
+    Updating = "Updating",
+    /** Deleting */
+    Deleting = "Deleting",
+    /** Accepted */
+    Accepted = "Accepted",
+    /** Failed */
+    Failed = "Failed",
+    /** Canceled */
+    Canceled = "Canceled"
+}
+/**
+ * Defines values for NetworkSecurityPerimeterConfigurationProvisioningState. \
+ * {@link KnownNetworkSecurityPerimeterConfigurationProvisioningState} can be used interchangeably with NetworkSecurityPerimeterConfigurationProvisioningState,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Succeeded** \
+ * **Creating** \
+ * **Updating** \
+ * **Deleting** \
+ * **Accepted** \
+ * **Failed** \
+ * **Canceled**
+ */
+export type NetworkSecurityPerimeterConfigurationProvisioningState = string;
+/** Known values of {@link IssueType} that the service accepts. */
+export declare enum KnownIssueType {
+    /** Unknown issue type */
+    Unknown = "Unknown",
+    /** An error occurred while applying the network security perimeter (NSP) configuration. */
+    ConfigurationPropagationFailure = "ConfigurationPropagationFailure",
+    /** A network connectivity issue is happening on the resource which could be addressed either by adding new resources to the network security perimeter (NSP) or by modifying access rules. */
+    MissingPerimeterConfiguration = "MissingPerimeterConfiguration",
+    /** An managed identity hasn't been associated with the resource. The resource will still be able to validate inbound traffic from the network security perimeter (NSP) or matching inbound access rules, but it won't be able to perform outbound access as a member of the NSP. */
+    MissingIdentityConfiguration = "MissingIdentityConfiguration"
+}
+/**
+ * Defines values for IssueType. \
+ * {@link KnownIssueType} can be used interchangeably with IssueType,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Unknown**: Unknown issue type \
+ * **ConfigurationPropagationFailure**: An error occurred while applying the network security perimeter (NSP) configuration. \
+ * **MissingPerimeterConfiguration**: A network connectivity issue is happening on the resource which could be addressed either by adding new resources to the network security perimeter (NSP) or by modifying access rules. \
+ * **MissingIdentityConfiguration**: An managed identity hasn't been associated with the resource. The resource will still be able to validate inbound traffic from the network security perimeter (NSP) or matching inbound access rules, but it won't be able to perform outbound access as a member of the NSP.
+ */
+export type IssueType = string;
+/** Known values of {@link Severity} that the service accepts. */
+export declare enum KnownSeverity {
+    /** Warning */
+    Warning = "Warning",
+    /** Error */
+    Error = "Error"
+}
+/**
+ * Defines values for Severity. \
+ * {@link KnownSeverity} can be used interchangeably with Severity,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Warning** \
+ * **Error**
+ */
+export type Severity = string;
+/** Known values of {@link AccessRuleDirection} that the service accepts. */
+export declare enum KnownAccessRuleDirection {
+    /** Applies to inbound network traffic to the secured resources. */
+    Inbound = "Inbound",
+    /** Applies to outbound network traffic from the secured resources */
+    Outbound = "Outbound"
+}
+/**
+ * Defines values for AccessRuleDirection. \
+ * {@link KnownAccessRuleDirection} can be used interchangeably with AccessRuleDirection,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Inbound**: Applies to inbound network traffic to the secured resources. \
+ * **Outbound**: Applies to outbound network traffic from the secured resources
+ */
+export type AccessRuleDirection = string;
+/** Known values of {@link ResourceAssociationAccessMode} that the service accepts. */
+export declare enum KnownResourceAssociationAccessMode {
+    /** Enforced access mode - traffic to the resource that failed access checks is blocked */
+    Enforced = "Enforced",
+    /** Learning access mode - traffic to the resource is enabled for analysis but not blocked */
+    Learning = "Learning",
+    /** Audit access mode - traffic to the resource that fails access checks is logged but not blocked */
+    Audit = "Audit"
+}
+/**
+ * Defines values for ResourceAssociationAccessMode. \
+ * {@link KnownResourceAssociationAccessMode} can be used interchangeably with ResourceAssociationAccessMode,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Enforced**: Enforced access mode - traffic to the resource that failed access checks is blocked \
+ * **Learning**: Learning access mode - traffic to the resource is enabled for analysis but not blocked \
+ * **Audit**: Audit access mode - traffic to the resource that fails access checks is logged but not blocked
+ */
+export type ResourceAssociationAccessMode = string;
 /** Known values of {@link SharedPrivateLinkResourceAsyncOperationResult} that the service accepts. */
 export declare enum KnownSharedPrivateLinkResourceAsyncOperationResult {
     /** Running */
@@ -1091,6 +1278,15 @@ export interface ServicesCheckNameAvailabilityOptionalParams extends coreClient.
 /** Contains response data for the checkNameAvailability operation. */
 export type ServicesCheckNameAvailabilityResponse = CheckNameAvailabilityOutput;
 /** Optional parameters. */
+export interface ServicesUpgradeOptionalParams extends coreClient.OperationOptions {
+    /** Delay to wait until next poll, in milliseconds. */
+    updateIntervalInMs?: number;
+    /** A serialized poller which can be used to resume an existing paused Long-Running-Operation. */
+    resumeFrom?: string;
+}
+/** Contains response data for the upgrade operation. */
+export type ServicesUpgradeResponse = SearchService;
+/** Optional parameters. */
 export interface ServicesListByResourceGroupNextOptionalParams extends coreClient.OperationOptions {
     /** Parameter group */
     searchManagementRequestOptions?: SearchManagementRequestOptions;