@azure/provisioning-keyvault 1.0.0-beta.1

package/dist/esm/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAGlC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,GAKjB,MAAM,mCAAmC,CAAC;AAwE3C,MAAM,CAAC,MAAM,sBAAsB,GAAmB,oBAAoB,CAAC;IACzE,aAAa,EAAE,EAAE,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IACzE,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IAC/D,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,EAAE;IAC7F,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;CAChE,CAAC,CAAC;AAkBH,MAAM,CAAC,MAAM,WAAW,GAAmB,oBAAoB,CAAC;IAC9D,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE;CACtD,CAAC,CAAC;AAmEH,MAAM,CAAC,MAAM,gCAAgC,GAAmB,oBAAoB,CAAC;IACnF,YAAY,EAAE;QACZ,OAAO,EAAE,CAAC,cAAc,CAAC;QACzB,KAAK,EAAE,eAAe,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,QAAQ;YACpB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACzB,CAAC;QACF,QAAQ,EAAE,IAAI;KACf;IACD,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC/E,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC3E,sBAAsB,EAAE;QACtB,OAAO,EAAE,CAAC,wBAAwB,CAAC;QACnC,KAAK,EAAE,kBAAkB,EAAE;QAC3B,QAAQ,EAAE,IAAI;KACf;IACD,kBAAkB,EAAE;QAClB,OAAO,EAAE,CAAC,oBAAoB,CAAC;QAC/B,KAAK,EAAE,eAAe,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,QAAQ;YACpB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACzB,CAAC;QACF,QAAQ,EAAE,IAAI;KACf;IACD,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;CAC3F,CAAC,CAAC;AAmEH,MAAM,CAAC,MAAM,2BAA2B,GAAmB,oBAAoB,CAAC;IAC9E,YAAY,EAAE;QACZ,OAAO,EAAE,CAAC,cAAc,CAAC;QACzB,KAAK,EAAE,eAAe,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,QAAQ;YACpB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACzB,CAAC;QACF,QAAQ,EAAE,IAAI;KACf;IACD,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC/E,sBAAsB,EAAE;QACtB,OAAO,EAAE,CAAC,wBAAwB,CAAC;QACnC,KAAK,EAAE,kBAAkB,EAAE;QAC3B,QAAQ,EAAE,IAAI;KACf;IACD,kBAAkB,EAAE;QAClB,OAAO,EAAE,CAAC,oBAAoB,CAAC;QAC/B,KAAK,EAAE,eAAe,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,QAAQ;YACpB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACzB,CAAC;QACF,QAAQ,EAAE,IAAI;KACf;IACD,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC1F,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;CAC9E,CAAC,CAAC;AA2BH,MAAM,CAAC,MAAM,WAAW,GAAmB,oBAAoB,CAAC;IAC9D,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;CAC1D,CAAC,CAAC;AA4FH,MAAM,CAAC,MAAM,kBAAkB,GAAmB,oBAAoB,CAAC;IACrE,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC7E,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE;IAC9D,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IACzD,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE;IACpE,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IAC3D,aAAa,EAAE,EAAE,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IACxF,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;CAC9E,CAAC,CAAC;AA+GH,MAAM,CAAC,MAAM,kBAAkB,GAAmB,oBAAoB,CAAC;IACrE,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE;IAC7F,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE;IAChE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,EAAE;IAC5E,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IAC7D,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC3E,iBAAiB,EAAE,EAAE,OAAO,EAAE,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IACjG,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE;IACpD,aAAa,EAAE;QACb,OAAO,EAAE,CAAC,gBAAgB,CAAC;QAC3B,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC;KACxD;IACD,cAAc,EAAE;QACd,OAAO,EAAE,CAAC,gBAAgB,CAAC;QAC3B,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC;KACtD;CACF,CAAC,CAAC;AA0BH,MAAM,CAAC,MAAM,qBAAqB,GAAmB,oBAAoB,CAAC;IACxE,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IACrE,IAAI,EAAE;QACJ,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,KAAK,EAAE,gBAAgB,CAAC;YACtB,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,WAAW;YACnB,UAAU,EAAE,QAAQ;YACpB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACzB,CAAC;KACH;CACF,CAAC,CAAC;AAuCH,MAAM,CAAC,MAAM,gCAAgC,GAAmB,oBAAoB,CAAC;IACnF,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC7E,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IACnE,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;CAC9E,CAAC,CAAC;AA0BH,MAAM,CAAC,MAAM,mBAAmB,GAAmB,oBAAoB,CAAC;IACtE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE;IAC9E,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE;CAClF,CAAC,CAAC;AAkBH,MAAM,CAAC,MAAM,qBAAqB,GAAmB,oBAAoB,CAAC;IACxE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE;CACtD,CAAC,CAAC;AA4FH,MAAM,CAAC,MAAM,4BAA4B,GAAmB,oBAAoB,CAAC;IAC/E,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC7E,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE;IAC9D,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IACzD,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE;IACpE,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IAC3D,aAAa,EAAE,EAAE,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IACxF,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;CAC9E,CAAC,CAAC;AA+GH,MAAM,CAAC,MAAM,4BAA4B,GAAmB,oBAAoB,CAAC;IAC/E,UAAU,EAAE;QACV,OAAO,EAAE,CAAC,YAAY,CAAC;QACvB,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,4BAA4B,CAAC;KAC/D;IACD,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE;IAChE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,EAAE;IAC5E,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IAC7D,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC3E,iBAAiB,EAAE,EAAE,OAAO,EAAE,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IACjG,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE;IACpD,aAAa,EAAE;QACb,OAAO,EAAE,CAAC,gBAAgB,CAAC;QAC3B,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,+BAA+B,CAAC;KAClE;IACD,cAAc,EAAE;QACd,OAAO,EAAE,CAAC,gBAAgB,CAAC;QAC3B,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,6BAA6B,CAAC;KAChE;CACF,CAAC,CAAC;AA0BH,MAAM,CAAC,MAAM,+BAA+B,GAAmB,oBAAoB,CAAC;IAClF,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IACrE,IAAI,EAAE;QACJ,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,KAAK,EAAE,gBAAgB,CAAC;YACtB,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,WAAW;YACnB,UAAU,EAAE,QAAQ;YACpB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACzB,CAAC;KACH;CACF,CAAC,CAAC;AAuCH,MAAM,CAAC,MAAM,0CAA0C,GAAmB,oBAAoB,CAAC;IAC7F,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC7E,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IACnE,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;CAC9E,CAAC,CAAC;AA0BH,MAAM,CAAC,MAAM,6BAA6B,GAAmB,oBAAoB,CAAC;IAChF,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,EAAE;IACxF,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,EAAE;CAC5F,CAAC,CAAC;AAwKH,MAAM,CAAC,MAAM,yBAAyB,GAAmB,oBAAoB,CAAC;IAC5E,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE;IACjE,qBAAqB,EAAE,EAAE,OAAO,EAAE,CAAC,uBAAuB,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE;IAC1F,gBAAgB,EAAE,EAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE;IAChF,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC3E,qBAAqB,EAAE;QACrB,OAAO,EAAE,CAAC,uBAAuB,CAAC;QAClC,KAAK,EAAE,gBAAgB,CAAC,iBAAiB,EAAE,CAAC;KAC7C;IACD,WAAW,EAAE;QACX,OAAO,EAAE,CAAC,aAAa,CAAC;QACxB,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC;KAC1D;IACD,0BAA0B,EAAE;QAC1B,OAAO,EAAE,CAAC,4BAA4B,CAAC;QACvC,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC,sCAAsC,CAAC,CAAC;QAC1F,QAAQ,EAAE,IAAI;KACf;IACD,mBAAmB,EAAE,EAAE,OAAO,EAAE,CAAC,qBAAqB,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE;IACpF,OAAO,EAAE;QACP,OAAO,EAAE,CAAC,SAAS,CAAC;QACpB,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC,4BAA4B,CAAC,CAAC;KACjF;IACD,kBAAkB,EAAE;QAClB,OAAO,EAAE,CAAC,oBAAoB,CAAC;QAC/B,KAAK,EAAE,eAAe,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,QAAQ;YACpB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACzB,CAAC;QACF,QAAQ,EAAE,IAAI;KACf;IACD,wBAAwB,EAAE;QACxB,OAAO,EAAE,CAAC,0BAA0B,CAAC;QACrC,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,uCAAuC,CAAC;QACzE,QAAQ,EAAE,IAAI;KACf;IACD,yBAAyB,EAAE,EAAE,OAAO,EAAE,CAAC,2BAA2B,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IACjG,aAAa,EAAE,EAAE,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IACzF,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;CAChE,CAAC,CAAC;AAqCH,MAAM,CAAC,MAAM,6BAA6B,GAAmB,oBAAoB,CAAC;IAChF,UAAU,EAAE;QACV,OAAO,EAAE,CAAC,YAAY,CAAC;QACvB,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,0CAA0C,CAAC;KAC7E;IACD,eAAe,EAAE;QACf,OAAO,EAAE,CAAC,iBAAiB,CAAC;QAC5B,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC,6BAA6B,CAAC,CAAC;KAClF;CACF,CAAC,CAAC;AAmCH,MAAM,CAAC,MAAM,uCAAuC,GAAmB,oBAAoB,CAAC;IAC1F,gBAAgB,EAAE,EAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC9F,uBAAuB,EAAE;QACvB,OAAO,EAAE,CAAC,yBAAyB,CAAC;QACpC,KAAK,EAAE,iBAAiB,EAAE;QAC1B,QAAQ,EAAE,IAAI;KACf;CACF,CAAC,CAAC;AAmCH,MAAM,CAAC,MAAM,kBAAkB,GAAmB,oBAAoB,CAAC;IACrE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE;IAC1D,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE;CACtD,CAAC,CAAC;AA0BH,MAAM,CAAC,MAAM,sBAAsB,GAAmB,oBAAoB,CAAC;IACzE,eAAe,EAAE,EAAE,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IAC7E,gBAAgB,EAAE,EAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;CAChF,CAAC,CAAC;AAsEH,MAAM,CAAC,MAAM,2BAA2B,GAAmB,oBAAoB,CAAC;IAC9E,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IACrF,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC/E,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE;IACtD,sBAAsB,EAAE;QACtB,OAAO,EAAE,CAAC,wBAAwB,CAAC;QACnC,KAAK,EAAE,iBAAiB,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,CAAC;KAC/E;CACF,CAAC,CAAC;AAmCH,MAAM,CAAC,MAAM,4BAA4B,GAAmB,oBAAoB,CAAC;IAC/E,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE;IAClE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;CACxD,CAAC,CAAC;AA2BH,MAAM,CAAC,MAAM,eAAe,GAAmB,oBAAoB,CAAC;IAClE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;CAC1D,CAAC,CAAC;AA4DH,MAAM,CAAC,MAAM,uBAAuB,GAAmB,oBAAoB,CAAC;IAC1E,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE;IAC1D,aAAa,EAAE,EAAE,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE;IACxE,OAAO,EAAE;QACP,OAAO,EAAE,CAAC,SAAS,CAAC;QACpB,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,CAAC;KACpE;IACD,WAAW,EAAE;QACX,OAAO,EAAE,CAAC,aAAa,CAAC;QACxB,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,CAAC;KAC5E;IACD,mBAAmB,EAAE;QACnB,OAAO,EAAE,CAAC,qBAAqB,CAAC;QAChC,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,CAAC;KAChF;CACF,CAAC,CAAC;AAiBH,MAAM,CAAC,MAAM,wBAAwB,GAAmB,oBAAoB,CAAC,EAAE,CAAC,CAAC;AA2BjF,MAAM,CAAC,MAAM,sCAAsC,GAAmB,oBAAoB,CAAC;IACzF,UAAU,EAAE;QACV,OAAO,EAAE,CAAC,YAAY,CAAC;QACvB,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,4CAA4C,CAAC;QAC9E,QAAQ,EAAE,IAAI;KACf;CACF,CAAC,CAAC;AAoCH,MAAM,CAAC,MAAM,4CAA4C,GAAmB,oBAAoB,CAAC;IAC/F,eAAe,EAAE;QACf,OAAO,EAAE,CAAC,iBAAiB,CAAC;QAC5B,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC;KAC3D;IACD,iCAAiC,EAAE;QACjC,OAAO,EAAE,CAAC,mCAAmC,CAAC;QAC9C,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,0CAA0C,CAAC;KAC7E;CACF,CAAC,CAAC;AA2CH,MAAM,CAAC,MAAM,0CAA0C,GAAmB,oBAAoB,CAAC;IAC7F,eAAe,EAAE,EAAE,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE;IAC5E,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IACrE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE;CAC3D,CAAC,CAAC;AA2BH,MAAM,CAAC,MAAM,uBAAuB,GAAmB,oBAAoB,CAAC;IAC1E,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;CACtD,CAAC,CAAC;AA2BH,MAAM,CAAC,MAAM,2BAA2B,GAAmB,oBAAoB,CAAC;IAC9E,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;CACpD,CAAC,CAAC;AAmDH,MAAM,CAAC,MAAM,mBAAmB,GAAmB,oBAAoB,CAAC;IACtE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE;IAC1D,aAAa,EAAE,EAAE,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE;IACxE,OAAO,EAAE;QACP,OAAO,EAAE,CAAC,SAAS,CAAC;QACpB,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC;KAChE;IACD,mBAAmB,EAAE;QACnB,OAAO,EAAE,CAAC,qBAAqB,CAAC;QAChC,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,CAAC;KAC5E;CACF,CAAC,CAAC;AAoDH,MAAM,CAAC,MAAM,gBAAgB,GAAmB,oBAAoB,CAAC;IACnE,YAAY,EAAE,EAAE,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,EAAE;IACxF,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,EAAE;IACxE,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,EAAE;IAC9E,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,EAAE;CAC/E,CAAC,CAAC;AAiBH,MAAM,CAAC,MAAM,oBAAoB,GAAmB,oBAAoB,CAAC,EAAE,CAAC,CAAC;AA2B7E,MAAM,CAAC,MAAM,kCAAkC,GAAmB,oBAAoB,CAAC;IACrF,UAAU,EAAE;QACV,OAAO,EAAE,CAAC,YAAY,CAAC;QACvB,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,wCAAwC,CAAC;QAC1E,QAAQ,EAAE,IAAI;KACf;CACF,CAAC,CAAC;AAmCH,MAAM,CAAC,MAAM,wCAAwC,GAAmB,oBAAoB,CAAC;IAC3F,eAAe,EAAE;QACf,OAAO,EAAE,CAAC,iBAAiB,CAAC;QAC5B,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC;KACvD;IACD,iCAAiC,EAAE;QACjC,OAAO,EAAE,CAAC,mCAAmC,CAAC;QAC9C,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,sCAAsC,CAAC;KACzE;CACF,CAAC,CAAC;AA2CH,MAAM,CAAC,MAAM,sCAAsC,GAAmB,oBAAoB,CAAC;IACzF,eAAe,EAAE,EAAE,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE;IAC5E,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IACrE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE;CAC3D,CAAC,CAAC;AAmCH,MAAM,CAAC,MAAM,mBAAmB,GAAmB,oBAAoB,CAAC;IACtE,UAAU,EAAE;QACV,OAAO,EAAE,CAAC,YAAY,CAAC;QACvB,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,gCAAgC,CAAC;KACnE;IACD,eAAe,EAAE;QACf,OAAO,EAAE,CAAC,iBAAiB,CAAC;QAC5B,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,CAAC;KACxE;CACF,CAAC,CAAC;AAwEH,MAAM,CAAC,MAAM,qBAAqB,GAAmB,oBAAoB,CAAC;IACxE,OAAO,EAAE;QACP,OAAO,EAAE,CAAC,SAAS,CAAC;QACpB,KAAK,EAAE,eAAe,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,aAAa;YACrB,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,QAAQ;YACpB,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE;SAC3C,CAAC;QACF,QAAQ,EAAE,IAAI;KACf;IACD,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE;IAC9D,OAAO,EAAE;QACP,OAAO,EAAE,CAAC,KAAK,CAAC;QAChB,KAAK,EAAE,eAAe,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,aAAa;YACrB,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,QAAQ;YACpB,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE;SAC3C,CAAC;KACH;IACD,SAAS,EAAE;QACT,OAAO,EAAE,CAAC,KAAK,CAAC;QAChB,KAAK,EAAE,eAAe,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,aAAa;YACrB,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,QAAQ;YACpB,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE;SAC3C,CAAC;KACH;IACD,OAAO,EAAE;QACP,OAAO,EAAE,CAAC,SAAS,CAAC;QACpB,KAAK,EAAE,eAAe,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,aAAa;YACrB,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,QAAQ;YACpB,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE;SAC3C,CAAC;QACF,QAAQ,EAAE,IAAI;KACf;CACF,CAAC,CAAC;AAwEH,MAAM,CAAC,MAAM,qBAAqB,GAAmB,oBAAoB,CAAC;IACxE,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,EAAE;IAChG,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IACrE,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IACjF,oBAAoB,EAAE;QACpB,OAAO,EAAE,CAAC,sBAAsB,CAAC;QACjC,KAAK,EAAE,iBAAiB,EAAE;QAC1B,QAAQ,EAAE,IAAI;KACf;IACD,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;CAC1D,CAAC,CAAC;AAmCH,MAAM,CAAC,MAAM,QAAQ,GAAmB,oBAAoB,CAAC;IAC3D,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE;IAC1D,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE;CACtD,CAAC,CAAC;AA0BH,MAAM,CAAC,MAAM,YAAY,GAAmB,oBAAoB,CAAC;IAC/D,eAAe,EAAE,EAAE,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IAC7E,gBAAgB,EAAE,EAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;CAChF,CAAC,CAAC;AAmCH,MAAM,CAAC,MAAM,yBAAyB,GAAmB,oBAAoB,CAAC;IAC5E,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC/E,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;CACtF,CAAC,CAAC;AA2BH,MAAM,CAAC,MAAM,gCAAgC,GAAmB,oBAAoB,CAAC;IACnF,cAAc,EAAE;QACd,OAAO,EAAE,CAAC,gBAAgB,CAAC;QAC3B,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,CAAC;KAC3E;CACF,CAAC,CAAC;AA4MH,MAAM,CAAC,MAAM,oBAAoB,GAAmB,oBAAoB,CAAC;IACvE,cAAc,EAAE;QACd,OAAO,EAAE,CAAC,gBAAgB,CAAC;QAC3B,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,CAAC;KAC3E;IACD,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE;IACjE,oBAAoB,EAAE,EAAE,OAAO,EAAE,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE;IACxF,wBAAwB,EAAE,EAAE,OAAO,EAAE,CAAC,0BAA0B,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE;IAChG,4BAA4B,EAAE;QAC5B,OAAO,EAAE,CAAC,8BAA8B,CAAC;QACzC,KAAK,EAAE,kBAAkB,EAAE;KAC5B;IACD,qBAAqB,EAAE,EAAE,OAAO,EAAE,CAAC,uBAAuB,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE;IAC1F,uBAAuB,EAAE,EAAE,OAAO,EAAE,CAAC,yBAAyB,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE;IAC9F,gBAAgB,EAAE,EAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE;IAChF,iBAAiB,EAAE,EAAE,OAAO,EAAE,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;IACjG,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,EAAE;IAChG,0BAA0B,EAAE;QAC1B,OAAO,EAAE,CAAC,4BAA4B,CAAC;QACvC,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC,kCAAkC,CAAC,CAAC;QACtF,QAAQ,EAAE,IAAI;KACf;IACD,mBAAmB,EAAE,EAAE,OAAO,EAAE,CAAC,qBAAqB,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IACrF,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE;IACrE,yBAAyB,EAAE,EAAE,OAAO,EAAE,CAAC,2BAA2B,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IACjG,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IAC/D,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;CAChE,CAAC,CAAC;AAmCH,MAAM,CAAC,MAAM,uBAAuB,GAAmB,oBAAoB,CAAC;IAC1E,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE;IACnD,gCAAgC,EAAE;QAChC,OAAO,EAAE,CAAC,kCAAkC,CAAC;QAC7C,KAAK,EAAE,kBAAkB,EAAE;KAC5B;CACF,CAAC,CAAC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { Expression, ExpressionOrValue } from \"@azure/provisioning-core\";\nimport {\n  createArrayShape,\n  createBooleanShape,\n  createBytesShape,\n  createDateShape,\n  createDeferredShape,\n  createEnumShape,\n  createFlatModelShape,\n  createNumberShape,\n  createRecordShape,\n  createStringShape,\n  createUnionShape,\n  type FlatModelShape,\n  type InputArray,\n  type InputOf,\n  type InputRecord,\n} from \"@azure/provisioning-core/internal\";\n\n/**\n * The vault's create mode to indicate whether the vault need to be recovered or not.\n */\nexport type CreateMode = \"recover\" | \"default\";\n\n/**\n * The type of action.\n */\nexport type KeyRotationPolicyActionType = \"rotate\" | \"notify\";\n\n/**\n * SKU of the managed HSM Pool\n */\nexport type ManagedHsmSkuName =\n  \"Standard_B1\" | \"Custom_B32\" | \"Custom_B6\" | \"Custom_C42\" | \"Custom_C10\";\n\n/**\n * SKU name to specify whether the key vault is a standard vault or a premium vault.\n */\nexport type SkuName = \"standard\" | \"premium\";\n\n/**\n * An identity that have access to the key vault. All identities in the array must use the same tenant ID as the key vault's tenant ID.\n */\nexport interface AccessPolicyEntry {\n  /**\n   * Application ID of the client making request on behalf of a principal\n   */\n  applicationId?: string;\n  /**\n   * The object ID of a user, service principal or security group in the Azure Active Directory tenant for the vault. The object ID must be unique for the list of access policies.\n   */\n  objectId: string;\n  /**\n   * Permissions the identity has for keys, secrets and certificates.\n   */\n  permissions: Permissions;\n  /**\n   * The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault.\n   */\n  tenantId: string;\n}\n\n/**\n * Input type for An identity that have access to the key vault. All identities in the array must use the same tenant ID as the key vault's tenant ID.\n */\nexport interface AccessPolicyEntryInput extends InputOf<AccessPolicyEntry> {\n  /**\n   * Application ID of the client making request on behalf of a principal\n   */\n  applicationId?: ExpressionOrValue<string> | undefined;\n  /**\n   * The object ID of a user, service principal or security group in the Azure Active Directory tenant for the vault. The object ID must be unique for the list of access policies.\n   */\n  objectId: ExpressionOrValue<string>;\n  /**\n   * Permissions the identity has for keys, secrets and certificates.\n   */\n  permissions: PermissionsInput;\n  /**\n   * The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault.\n   */\n  tenantId: ExpressionOrValue<string>;\n}\n\n/**\n * View type for An identity that have access to the key vault. All identities in the array must use the same tenant ID as the key vault's tenant ID.\n */\nexport type AccessPolicyEntryView = AccessPolicyEntryInput;\n\nexport const accessPolicyEntryShape: FlatModelShape = createFlatModelShape({\n  applicationId: { armPath: [\"applicationId\"], value: createStringShape() },\n  objectId: { armPath: [\"objectId\"], value: createStringShape() },\n  permissions: { armPath: [\"permissions\"], value: createDeferredShape(() => permissionsShape) },\n  tenantId: { armPath: [\"tenantId\"], value: createStringShape() },\n});\n\nexport interface Action {\n  /**\n   * The type of action.\n   */\n  type?: KeyRotationPolicyActionType;\n}\n\nexport interface ActionInput extends InputOf<Action> {\n  /**\n   * The type of action.\n   */\n  type?: ExpressionOrValue<KeyRotationPolicyActionType> | undefined;\n}\n\nexport type ActionView = ActionInput;\n\nexport const actionShape: FlatModelShape = createFlatModelShape({\n  type: { armPath: [\"type\"], value: createEnumShape() },\n});\n\n/**\n * Properties of the deleted managed HSM.\n */\nexport interface DeletedManagedHsmProperties {\n  /**\n   * The deleted date.\n   */\n  deletionDate?: Date;\n  /**\n   * The location of the original managed HSM.\n   */\n  location?: string;\n  /**\n   * The resource id of the original managed HSM.\n   */\n  mhsmId?: string;\n  /**\n   * Purge protection status of the original managed HSM.\n   */\n  purgeProtectionEnabled?: boolean;\n  /**\n   * The scheduled purged date.\n   */\n  scheduledPurgeDate?: Date;\n  /**\n   * Tags of the original managed HSM.\n   */\n  tags?: Record<string, string>;\n}\n\n/**\n * Input type for Properties of the deleted managed HSM.\n */\nexport interface DeletedManagedHsmPropertiesInput extends InputOf<DeletedManagedHsmProperties> {}\n\n/**\n * View type for Properties of the deleted managed HSM.\n */\nexport interface DeletedManagedHsmPropertiesView extends InputOf<DeletedManagedHsmProperties> {\n  /**\n   * Read-only output: The deleted date.\n   */\n  readonly deletionDate?: Expression<Date> | undefined;\n  /**\n   * Read-only output: The location of the original managed HSM.\n   */\n  readonly location?: Expression<string> | undefined;\n  /**\n   * Read-only output: The resource id of the original managed HSM.\n   */\n  readonly mhsmId?: Expression<string> | undefined;\n  /**\n   * Read-only output: Purge protection status of the original managed HSM.\n   */\n  readonly purgeProtectionEnabled?: Expression<boolean> | undefined;\n  /**\n   * Read-only output: The scheduled purged date.\n   */\n  readonly scheduledPurgeDate?: Expression<Date> | undefined;\n  /**\n   * Read-only output: Tags of the original managed HSM.\n   */\n  readonly tags?: Expression<Record<string, string>> | undefined;\n}\n\nexport const deletedManagedHsmPropertiesShape: FlatModelShape = createFlatModelShape({\n  deletionDate: {\n    armPath: [\"deletionDate\"],\n    value: createDateShape({\n      kind: \"date-time-text\",\n      source: \"utcDateTime\",\n      format: \"rfc3339\",\n      clientMode: \"client\",\n      wire: { kind: \"string\" },\n    }),\n    readOnly: true,\n  },\n  location: { armPath: [\"location\"], value: createStringShape(), readOnly: true },\n  mhsmId: { armPath: [\"mhsmId\"], value: createStringShape(), readOnly: true },\n  purgeProtectionEnabled: {\n    armPath: [\"purgeProtectionEnabled\"],\n    value: createBooleanShape(),\n    readOnly: true,\n  },\n  scheduledPurgeDate: {\n    armPath: [\"scheduledPurgeDate\"],\n    value: createDateShape({\n      kind: \"date-time-text\",\n      source: \"utcDateTime\",\n      format: \"rfc3339\",\n      clientMode: \"client\",\n      wire: { kind: \"string\" },\n    }),\n    readOnly: true,\n  },\n  tags: { armPath: [\"tags\"], value: createRecordShape(createStringShape()), readOnly: true },\n});\n\n/**\n * Properties of the deleted vault.\n */\nexport interface DeletedVaultProperties {\n  /**\n   * The deleted date.\n   */\n  deletionDate?: Date;\n  /**\n   * The location of the original vault.\n   */\n  location?: string;\n  /**\n   * Purge protection status of the original vault.\n   */\n  purgeProtectionEnabled?: boolean;\n  /**\n   * The scheduled purged date.\n   */\n  scheduledPurgeDate?: Date;\n  /**\n   * Tags of the original vault.\n   */\n  tags?: Record<string, string>;\n  /**\n   * The resource id of the original vault.\n   */\n  vaultId?: string;\n}\n\n/**\n * Input type for Properties of the deleted vault.\n */\nexport interface DeletedVaultPropertiesInput extends InputOf<DeletedVaultProperties> {}\n\n/**\n * View type for Properties of the deleted vault.\n */\nexport interface DeletedVaultPropertiesView extends InputOf<DeletedVaultProperties> {\n  /**\n   * Read-only output: The deleted date.\n   */\n  readonly deletionDate?: Expression<Date> | undefined;\n  /**\n   * Read-only output: The location of the original vault.\n   */\n  readonly location?: Expression<string> | undefined;\n  /**\n   * Read-only output: Purge protection status of the original vault.\n   */\n  readonly purgeProtectionEnabled?: Expression<boolean> | undefined;\n  /**\n   * Read-only output: The scheduled purged date.\n   */\n  readonly scheduledPurgeDate?: Expression<Date> | undefined;\n  /**\n   * Read-only output: Tags of the original vault.\n   */\n  readonly tags?: Expression<Record<string, string>> | undefined;\n  /**\n   * Read-only output: The resource id of the original vault.\n   */\n  readonly vaultId?: Expression<string> | undefined;\n}\n\nexport const deletedVaultPropertiesShape: FlatModelShape = createFlatModelShape({\n  deletionDate: {\n    armPath: [\"deletionDate\"],\n    value: createDateShape({\n      kind: \"date-time-text\",\n      source: \"utcDateTime\",\n      format: \"rfc3339\",\n      clientMode: \"client\",\n      wire: { kind: \"string\" },\n    }),\n    readOnly: true,\n  },\n  location: { armPath: [\"location\"], value: createStringShape(), readOnly: true },\n  purgeProtectionEnabled: {\n    armPath: [\"purgeProtectionEnabled\"],\n    value: createBooleanShape(),\n    readOnly: true,\n  },\n  scheduledPurgeDate: {\n    armPath: [\"scheduledPurgeDate\"],\n    value: createDateShape({\n      kind: \"date-time-text\",\n      source: \"utcDateTime\",\n      format: \"rfc3339\",\n      clientMode: \"client\",\n      wire: { kind: \"string\" },\n    }),\n    readOnly: true,\n  },\n  tags: { armPath: [\"tags\"], value: createRecordShape(createStringShape()), readOnly: true },\n  vaultId: { armPath: [\"vaultId\"], value: createStringShape(), readOnly: true },\n});\n\n/**\n * A rule governing the accessibility of a vault from a specific ip address or ip range.\n */\nexport interface IpRule {\n  /**\n   * An IPv4 address range in CIDR notation, such as '124.56.78.91' (simple IP address) or '124.56.78.0/24' (all addresses that start with 124.56.78).\n   */\n  value: string;\n}\n\n/**\n * Input type for A rule governing the accessibility of a vault from a specific ip address or ip range.\n */\nexport interface IpRuleInput extends InputOf<IpRule> {\n  /**\n   * An IPv4 address range in CIDR notation, such as '124.56.78.91' (simple IP address) or '124.56.78.0/24' (all addresses that start with 124.56.78).\n   */\n  value: ExpressionOrValue<string>;\n}\n\n/**\n * View type for A rule governing the accessibility of a vault from a specific ip address or ip range.\n */\nexport type IpRuleView = IpRuleInput;\n\nexport const ipRuleShape: FlatModelShape = createFlatModelShape({\n  value: { armPath: [\"value\"], value: createStringShape() },\n});\n\n/**\n * The object attributes managed by the Azure Key Vault service.\n */\nexport interface KeyAttributes {\n  /**\n   * Creation time in seconds since 1970-01-01T00:00:00Z.\n   */\n  created?: number;\n  /**\n   * Determines whether or not the object is enabled.\n   */\n  enabled?: boolean;\n  /**\n   * Expiry date in seconds since 1970-01-01T00:00:00Z.\n   */\n  expires?: number;\n  /**\n   * Indicates if the private key can be exported.\n   */\n  exportable?: boolean;\n  /**\n   * Not before date in seconds since 1970-01-01T00:00:00Z.\n   */\n  notBefore?: number;\n  /**\n   * The deletion recovery level currently in effect for the object. If it contains 'Purgeable', then the object can be permanently deleted by a privileged user; otherwise, only the system can purge the object at the end of the retention interval.\n   */\n  recoveryLevel?: DeletionRecoveryLevel;\n  /**\n   * Last updated time in seconds since 1970-01-01T00:00:00Z.\n   */\n  updated?: number;\n}\n\n/**\n * Input type for The object attributes managed by the Azure Key Vault service.\n */\nexport interface KeyAttributesInput extends InputOf<KeyAttributes> {\n  /**\n   * Determines whether or not the object is enabled.\n   */\n  enabled?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Expiry date in seconds since 1970-01-01T00:00:00Z.\n   */\n  expires?: ExpressionOrValue<number> | undefined;\n  /**\n   * Indicates if the private key can be exported.\n   */\n  exportable?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Not before date in seconds since 1970-01-01T00:00:00Z.\n   */\n  notBefore?: ExpressionOrValue<number> | undefined;\n}\n\n/**\n * View type for The object attributes managed by the Azure Key Vault service.\n */\nexport interface KeyAttributesView extends InputOf<KeyAttributes> {\n  /**\n   * Read-only output: Creation time in seconds since 1970-01-01T00:00:00Z.\n   */\n  readonly created?: Expression<number> | undefined;\n  /**\n   * Determines whether or not the object is enabled.\n   */\n  enabled?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Expiry date in seconds since 1970-01-01T00:00:00Z.\n   */\n  expires?: ExpressionOrValue<number> | undefined;\n  /**\n   * Indicates if the private key can be exported.\n   */\n  exportable?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Not before date in seconds since 1970-01-01T00:00:00Z.\n   */\n  notBefore?: ExpressionOrValue<number> | undefined;\n  /**\n   * Read-only output: The deletion recovery level currently in effect for the object. If it contains 'Purgeable', then the object can be permanently deleted by a privileged user; otherwise, only the system can purge the object at the end of the retention interval.\n   */\n  readonly recoveryLevel?: Expression<DeletionRecoveryLevel> | undefined;\n  /**\n   * Read-only output: Last updated time in seconds since 1970-01-01T00:00:00Z.\n   */\n  readonly updated?: Expression<number> | undefined;\n}\n\nexport const keyAttributesShape: FlatModelShape = createFlatModelShape({\n  created: { armPath: [\"created\"], value: createNumberShape(), readOnly: true },\n  enabled: { armPath: [\"enabled\"], value: createBooleanShape() },\n  expires: { armPath: [\"exp\"], value: createNumberShape() },\n  exportable: { armPath: [\"exportable\"], value: createBooleanShape() },\n  notBefore: { armPath: [\"nbf\"], value: createNumberShape() },\n  recoveryLevel: { armPath: [\"recoveryLevel\"], value: createUnionShape(), readOnly: true },\n  updated: { armPath: [\"updated\"], value: createNumberShape(), readOnly: true },\n});\n\n/**\n * The properties of the key.\n */\nexport interface KeyProperties {\n  /**\n   * The attributes of the key.\n   */\n  attributes?: KeyAttributes;\n  /**\n   * The elliptic curve name. For valid values, see JsonWebKeyCurveName. Default for EC and EC-HSM keys is P-256\n   */\n  curveName?: JsonWebKeyCurveName;\n  keyOps?: JsonWebKeyOperation[];\n  /**\n   * The key size in bits. For example: 2048, 3072, or 4096 for RSA. Default for RSA and RSA-HSM keys is 2048. Exception made for bring your own key (BYOK), key exchange keys default to 4096.\n   */\n  keySize?: number;\n  /**\n   * The URI to retrieve the current version of the key.\n   */\n  keyUri?: string;\n  /**\n   * The URI to retrieve the specific version of the key.\n   */\n  keyUriWithVersion?: string;\n  /**\n   * The type of the key. For valid values, see JsonWebKeyType.\n   */\n  kty?: JsonWebKeyType;\n  /**\n   * Key release policy in response. It will be used for both output and input. Omitted if empty\n   */\n  releasePolicy?: KeyReleasePolicy;\n  /**\n   * Key rotation policy in response. It will be used for both output and input. Omitted if empty\n   */\n  rotationPolicy?: RotationPolicy;\n}\n\n/**\n * Input type for The properties of the key.\n */\nexport interface KeyPropertiesInput extends InputOf<KeyProperties> {\n  /**\n   * The attributes of the key.\n   */\n  attributes?: KeyAttributesInput | undefined;\n  /**\n   * The elliptic curve name. For valid values, see JsonWebKeyCurveName. Default for EC and EC-HSM keys is P-256\n   */\n  curveName?: ExpressionOrValue<JsonWebKeyCurveName> | undefined;\n  keyOps?: InputArray<ExpressionOrValue<JsonWebKeyOperation>, JsonWebKeyOperation[]> | undefined;\n  /**\n   * The key size in bits. For example: 2048, 3072, or 4096 for RSA. Default for RSA and RSA-HSM keys is 2048. Exception made for bring your own key (BYOK), key exchange keys default to 4096.\n   */\n  keySize?: ExpressionOrValue<number> | undefined;\n  /**\n   * The type of the key. For valid values, see JsonWebKeyType.\n   */\n  kty?: ExpressionOrValue<JsonWebKeyType> | undefined;\n  /**\n   * Key release policy in response. It will be used for both output and input. Omitted if empty\n   */\n  releasePolicy?: KeyReleasePolicyInput | undefined;\n  /**\n   * Key rotation policy in response. It will be used for both output and input. Omitted if empty\n   */\n  rotationPolicy?: RotationPolicyInput | undefined;\n}\n\n/**\n * View type for The properties of the key.\n */\nexport interface KeyPropertiesView extends InputOf<KeyProperties> {\n  /**\n   * The attributes of the key.\n   */\n  attributes?: KeyAttributesView | undefined;\n  /**\n   * The elliptic curve name. For valid values, see JsonWebKeyCurveName. Default for EC and EC-HSM keys is P-256\n   */\n  curveName?: ExpressionOrValue<JsonWebKeyCurveName> | undefined;\n  keyOps?: InputArray<ExpressionOrValue<JsonWebKeyOperation>, JsonWebKeyOperation[]> | undefined;\n  /**\n   * The key size in bits. For example: 2048, 3072, or 4096 for RSA. Default for RSA and RSA-HSM keys is 2048. Exception made for bring your own key (BYOK), key exchange keys default to 4096.\n   */\n  keySize?: ExpressionOrValue<number> | undefined;\n  /**\n   * Read-only output: The URI to retrieve the current version of the key.\n   */\n  readonly keyUri?: Expression<string> | undefined;\n  /**\n   * Read-only output: The URI to retrieve the specific version of the key.\n   */\n  readonly keyUriWithVersion?: Expression<string> | undefined;\n  /**\n   * The type of the key. For valid values, see JsonWebKeyType.\n   */\n  kty?: ExpressionOrValue<JsonWebKeyType> | undefined;\n  /**\n   * Key release policy in response. It will be used for both output and input. Omitted if empty\n   */\n  releasePolicy?: KeyReleasePolicyView | undefined;\n  /**\n   * Key rotation policy in response. It will be used for both output and input. Omitted if empty\n   */\n  rotationPolicy?: RotationPolicyView | undefined;\n}\n\nexport const keyPropertiesShape: FlatModelShape = createFlatModelShape({\n  attributes: { armPath: [\"attributes\"], value: createDeferredShape(() => keyAttributesShape) },\n  curveName: { armPath: [\"curveName\"], value: createUnionShape() },\n  keyOps: { armPath: [\"keyOps\"], value: createArrayShape(createUnionShape()) },\n  keySize: { armPath: [\"keySize\"], value: createNumberShape() },\n  keyUri: { armPath: [\"keyUri\"], value: createStringShape(), readOnly: true },\n  keyUriWithVersion: { armPath: [\"keyUriWithVersion\"], value: createStringShape(), readOnly: true },\n  kty: { armPath: [\"kty\"], value: createUnionShape() },\n  releasePolicy: {\n    armPath: [\"release_policy\"],\n    value: createDeferredShape(() => keyReleasePolicyShape),\n  },\n  rotationPolicy: {\n    armPath: [\"rotationPolicy\"],\n    value: createDeferredShape(() => rotationPolicyShape),\n  },\n});\n\nexport interface KeyReleasePolicy {\n  /**\n   * Content type and version of key release policy\n   */\n  contentType?: string;\n  /**\n   * Blob encoding the policy rules under which the key can be released.\n   */\n  data?: Uint8Array;\n}\n\nexport interface KeyReleasePolicyInput extends InputOf<KeyReleasePolicy> {\n  /**\n   * Content type and version of key release policy\n   */\n  contentType?: ExpressionOrValue<string> | undefined;\n  /**\n   * Blob encoding the policy rules under which the key can be released.\n   */\n  data?: ExpressionOrValue<Uint8Array> | undefined;\n}\n\nexport type KeyReleasePolicyView = KeyReleasePolicyInput;\n\nexport const keyReleasePolicyShape: FlatModelShape = createFlatModelShape({\n  contentType: { armPath: [\"contentType\"], value: createStringShape() },\n  data: {\n    armPath: [\"data\"],\n    value: createBytesShape({\n      kind: \"bytes\",\n      source: \"bytes\",\n      format: \"base64url\",\n      clientMode: \"client\",\n      wire: { kind: \"string\" },\n    }),\n  },\n});\n\nexport interface KeyRotationPolicyAttributes {\n  /**\n   * Creation time in seconds since 1970-01-01T00:00:00Z.\n   */\n  created?: number;\n  /**\n   * The expiration time for the new key version. It should be in ISO8601 format. Eg: 'P90D', 'P1Y'.\n   */\n  expiryTime?: string;\n  /**\n   * Last updated time in seconds since 1970-01-01T00:00:00Z.\n   */\n  updated?: number;\n}\n\nexport interface KeyRotationPolicyAttributesInput extends InputOf<KeyRotationPolicyAttributes> {\n  /**\n   * The expiration time for the new key version. It should be in ISO8601 format. Eg: 'P90D', 'P1Y'.\n   */\n  expiryTime?: ExpressionOrValue<string> | undefined;\n}\n\nexport interface KeyRotationPolicyAttributesView extends InputOf<KeyRotationPolicyAttributes> {\n  /**\n   * Read-only output: Creation time in seconds since 1970-01-01T00:00:00Z.\n   */\n  readonly created?: Expression<number> | undefined;\n  /**\n   * The expiration time for the new key version. It should be in ISO8601 format. Eg: 'P90D', 'P1Y'.\n   */\n  expiryTime?: ExpressionOrValue<string> | undefined;\n  /**\n   * Read-only output: Last updated time in seconds since 1970-01-01T00:00:00Z.\n   */\n  readonly updated?: Expression<number> | undefined;\n}\n\nexport const keyRotationPolicyAttributesShape: FlatModelShape = createFlatModelShape({\n  created: { armPath: [\"created\"], value: createNumberShape(), readOnly: true },\n  expiryTime: { armPath: [\"expiryTime\"], value: createStringShape() },\n  updated: { armPath: [\"updated\"], value: createNumberShape(), readOnly: true },\n});\n\nexport interface LifetimeAction {\n  /**\n   * The action of key rotation policy lifetimeAction.\n   */\n  action?: Action;\n  /**\n   * The trigger of key rotation policy lifetimeAction.\n   */\n  trigger?: Trigger;\n}\n\nexport interface LifetimeActionInput extends InputOf<LifetimeAction> {\n  /**\n   * The action of key rotation policy lifetimeAction.\n   */\n  action?: ActionInput | undefined;\n  /**\n   * The trigger of key rotation policy lifetimeAction.\n   */\n  trigger?: TriggerInput | undefined;\n}\n\nexport type LifetimeActionView = LifetimeActionInput;\n\nexport const lifetimeActionShape: FlatModelShape = createFlatModelShape({\n  action: { armPath: [\"action\"], value: createDeferredShape(() => actionShape) },\n  trigger: { armPath: [\"trigger\"], value: createDeferredShape(() => triggerShape) },\n});\n\nexport interface ManagedHsmAction {\n  /**\n   * The type of action.\n   */\n  type?: KeyRotationPolicyActionType;\n}\n\nexport interface ManagedHsmActionInput extends InputOf<ManagedHsmAction> {\n  /**\n   * The type of action.\n   */\n  type?: ExpressionOrValue<KeyRotationPolicyActionType> | undefined;\n}\n\nexport type ManagedHsmActionView = ManagedHsmActionInput;\n\nexport const managedHsmActionShape: FlatModelShape = createFlatModelShape({\n  type: { armPath: [\"type\"], value: createEnumShape() },\n});\n\n/**\n * The object attributes managed by the Azure Key Vault service.\n */\nexport interface ManagedHsmKeyAttributes {\n  /**\n   * Creation time in seconds since 1970-01-01T00:00:00Z.\n   */\n  created?: number;\n  /**\n   * Determines whether or not the object is enabled.\n   */\n  enabled?: boolean;\n  /**\n   * Expiry date in seconds since 1970-01-01T00:00:00Z.\n   */\n  expires?: number;\n  /**\n   * Indicates if the private key can be exported.\n   */\n  exportable?: boolean;\n  /**\n   * Not before date in seconds since 1970-01-01T00:00:00Z.\n   */\n  notBefore?: number;\n  /**\n   * The deletion recovery level currently in effect for the object. If it contains 'Purgeable', then the object can be permanently deleted by a privileged user; otherwise, only the system can purge the object at the end of the retention interval.\n   */\n  recoveryLevel?: DeletionRecoveryLevel;\n  /**\n   * Last updated time in seconds since 1970-01-01T00:00:00Z.\n   */\n  updated?: number;\n}\n\n/**\n * Input type for The object attributes managed by the Azure Key Vault service.\n */\nexport interface ManagedHsmKeyAttributesInput extends InputOf<ManagedHsmKeyAttributes> {\n  /**\n   * Determines whether or not the object is enabled.\n   */\n  enabled?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Expiry date in seconds since 1970-01-01T00:00:00Z.\n   */\n  expires?: ExpressionOrValue<number> | undefined;\n  /**\n   * Indicates if the private key can be exported.\n   */\n  exportable?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Not before date in seconds since 1970-01-01T00:00:00Z.\n   */\n  notBefore?: ExpressionOrValue<number> | undefined;\n}\n\n/**\n * View type for The object attributes managed by the Azure Key Vault service.\n */\nexport interface ManagedHsmKeyAttributesView extends InputOf<ManagedHsmKeyAttributes> {\n  /**\n   * Read-only output: Creation time in seconds since 1970-01-01T00:00:00Z.\n   */\n  readonly created?: Expression<number> | undefined;\n  /**\n   * Determines whether or not the object is enabled.\n   */\n  enabled?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Expiry date in seconds since 1970-01-01T00:00:00Z.\n   */\n  expires?: ExpressionOrValue<number> | undefined;\n  /**\n   * Indicates if the private key can be exported.\n   */\n  exportable?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Not before date in seconds since 1970-01-01T00:00:00Z.\n   */\n  notBefore?: ExpressionOrValue<number> | undefined;\n  /**\n   * Read-only output: The deletion recovery level currently in effect for the object. If it contains 'Purgeable', then the object can be permanently deleted by a privileged user; otherwise, only the system can purge the object at the end of the retention interval.\n   */\n  readonly recoveryLevel?: Expression<DeletionRecoveryLevel> | undefined;\n  /**\n   * Read-only output: Last updated time in seconds since 1970-01-01T00:00:00Z.\n   */\n  readonly updated?: Expression<number> | undefined;\n}\n\nexport const managedHsmKeyAttributesShape: FlatModelShape = createFlatModelShape({\n  created: { armPath: [\"created\"], value: createNumberShape(), readOnly: true },\n  enabled: { armPath: [\"enabled\"], value: createBooleanShape() },\n  expires: { armPath: [\"exp\"], value: createNumberShape() },\n  exportable: { armPath: [\"exportable\"], value: createBooleanShape() },\n  notBefore: { armPath: [\"nbf\"], value: createNumberShape() },\n  recoveryLevel: { armPath: [\"recoveryLevel\"], value: createUnionShape(), readOnly: true },\n  updated: { armPath: [\"updated\"], value: createNumberShape(), readOnly: true },\n});\n\n/**\n * The properties of the key.\n */\nexport interface ManagedHsmKeyProperties {\n  /**\n   * The attributes of the key.\n   */\n  attributes?: ManagedHsmKeyAttributes;\n  /**\n   * The elliptic curve name. For valid values, see JsonWebKeyCurveName. Default for EC and EC-HSM keys is P-256\n   */\n  curveName?: JsonWebKeyCurveName;\n  keyOps?: JsonWebKeyOperation[];\n  /**\n   * The key size in bits. For example: 2048, 3072, or 4096 for RSA. Default for RSA and RSA-HSM keys is 2048. Exception made for bring your own key (BYOK), key exchange keys default to 4096.\n   */\n  keySize?: number;\n  /**\n   * The URI to retrieve the current version of the key.\n   */\n  keyUri?: string;\n  /**\n   * The URI to retrieve the specific version of the key.\n   */\n  keyUriWithVersion?: string;\n  /**\n   * The type of the key. For valid values, see JsonWebKeyType.\n   */\n  kty?: JsonWebKeyType;\n  /**\n   * Key release policy in response. It will be used for both output and input. Omitted if empty\n   */\n  releasePolicy?: ManagedHsmKeyReleasePolicy;\n  /**\n   * Key rotation policy in response. It will be used for both output and input. Omitted if empty\n   */\n  rotationPolicy?: ManagedHsmRotationPolicy;\n}\n\n/**\n * Input type for The properties of the key.\n */\nexport interface ManagedHsmKeyPropertiesInput extends InputOf<ManagedHsmKeyProperties> {\n  /**\n   * The attributes of the key.\n   */\n  attributes?: ManagedHsmKeyAttributesInput | undefined;\n  /**\n   * The elliptic curve name. For valid values, see JsonWebKeyCurveName. Default for EC and EC-HSM keys is P-256\n   */\n  curveName?: ExpressionOrValue<JsonWebKeyCurveName> | undefined;\n  keyOps?: InputArray<ExpressionOrValue<JsonWebKeyOperation>, JsonWebKeyOperation[]> | undefined;\n  /**\n   * The key size in bits. For example: 2048, 3072, or 4096 for RSA. Default for RSA and RSA-HSM keys is 2048. Exception made for bring your own key (BYOK), key exchange keys default to 4096.\n   */\n  keySize?: ExpressionOrValue<number> | undefined;\n  /**\n   * The type of the key. For valid values, see JsonWebKeyType.\n   */\n  kty?: ExpressionOrValue<JsonWebKeyType> | undefined;\n  /**\n   * Key release policy in response. It will be used for both output and input. Omitted if empty\n   */\n  releasePolicy?: ManagedHsmKeyReleasePolicyInput | undefined;\n  /**\n   * Key rotation policy in response. It will be used for both output and input. Omitted if empty\n   */\n  rotationPolicy?: ManagedHsmRotationPolicyInput | undefined;\n}\n\n/**\n * View type for The properties of the key.\n */\nexport interface ManagedHsmKeyPropertiesView extends InputOf<ManagedHsmKeyProperties> {\n  /**\n   * The attributes of the key.\n   */\n  attributes?: ManagedHsmKeyAttributesView | undefined;\n  /**\n   * The elliptic curve name. For valid values, see JsonWebKeyCurveName. Default for EC and EC-HSM keys is P-256\n   */\n  curveName?: ExpressionOrValue<JsonWebKeyCurveName> | undefined;\n  keyOps?: InputArray<ExpressionOrValue<JsonWebKeyOperation>, JsonWebKeyOperation[]> | undefined;\n  /**\n   * The key size in bits. For example: 2048, 3072, or 4096 for RSA. Default for RSA and RSA-HSM keys is 2048. Exception made for bring your own key (BYOK), key exchange keys default to 4096.\n   */\n  keySize?: ExpressionOrValue<number> | undefined;\n  /**\n   * Read-only output: The URI to retrieve the current version of the key.\n   */\n  readonly keyUri?: Expression<string> | undefined;\n  /**\n   * Read-only output: The URI to retrieve the specific version of the key.\n   */\n  readonly keyUriWithVersion?: Expression<string> | undefined;\n  /**\n   * The type of the key. For valid values, see JsonWebKeyType.\n   */\n  kty?: ExpressionOrValue<JsonWebKeyType> | undefined;\n  /**\n   * Key release policy in response. It will be used for both output and input. Omitted if empty\n   */\n  releasePolicy?: ManagedHsmKeyReleasePolicyView | undefined;\n  /**\n   * Key rotation policy in response. It will be used for both output and input. Omitted if empty\n   */\n  rotationPolicy?: ManagedHsmRotationPolicyView | undefined;\n}\n\nexport const managedHsmKeyPropertiesShape: FlatModelShape = createFlatModelShape({\n  attributes: {\n    armPath: [\"attributes\"],\n    value: createDeferredShape(() => managedHsmKeyAttributesShape),\n  },\n  curveName: { armPath: [\"curveName\"], value: createUnionShape() },\n  keyOps: { armPath: [\"keyOps\"], value: createArrayShape(createUnionShape()) },\n  keySize: { armPath: [\"keySize\"], value: createNumberShape() },\n  keyUri: { armPath: [\"keyUri\"], value: createStringShape(), readOnly: true },\n  keyUriWithVersion: { armPath: [\"keyUriWithVersion\"], value: createStringShape(), readOnly: true },\n  kty: { armPath: [\"kty\"], value: createUnionShape() },\n  releasePolicy: {\n    armPath: [\"release_policy\"],\n    value: createDeferredShape(() => managedHsmKeyReleasePolicyShape),\n  },\n  rotationPolicy: {\n    armPath: [\"rotationPolicy\"],\n    value: createDeferredShape(() => managedHsmRotationPolicyShape),\n  },\n});\n\nexport interface ManagedHsmKeyReleasePolicy {\n  /**\n   * Content type and version of key release policy\n   */\n  contentType?: string;\n  /**\n   * Blob encoding the policy rules under which the key can be released.\n   */\n  data?: Uint8Array;\n}\n\nexport interface ManagedHsmKeyReleasePolicyInput extends InputOf<ManagedHsmKeyReleasePolicy> {\n  /**\n   * Content type and version of key release policy\n   */\n  contentType?: ExpressionOrValue<string> | undefined;\n  /**\n   * Blob encoding the policy rules under which the key can be released.\n   */\n  data?: ExpressionOrValue<Uint8Array> | undefined;\n}\n\nexport type ManagedHsmKeyReleasePolicyView = ManagedHsmKeyReleasePolicyInput;\n\nexport const managedHsmKeyReleasePolicyShape: FlatModelShape = createFlatModelShape({\n  contentType: { armPath: [\"contentType\"], value: createStringShape() },\n  data: {\n    armPath: [\"data\"],\n    value: createBytesShape({\n      kind: \"bytes\",\n      source: \"bytes\",\n      format: \"base64url\",\n      clientMode: \"client\",\n      wire: { kind: \"string\" },\n    }),\n  },\n});\n\nexport interface ManagedHsmKeyRotationPolicyAttributes {\n  /**\n   * Creation time in seconds since 1970-01-01T00:00:00Z.\n   */\n  created?: number;\n  /**\n   * The expiration time for the new key version. It should be in ISO8601 format. Eg: 'P90D', 'P1Y'.\n   */\n  expiryTime?: string;\n  /**\n   * Last updated time in seconds since 1970-01-01T00:00:00Z.\n   */\n  updated?: number;\n}\n\nexport interface ManagedHsmKeyRotationPolicyAttributesInput extends InputOf<ManagedHsmKeyRotationPolicyAttributes> {\n  /**\n   * The expiration time for the new key version. It should be in ISO8601 format. Eg: 'P90D', 'P1Y'.\n   */\n  expiryTime?: ExpressionOrValue<string> | undefined;\n}\n\nexport interface ManagedHsmKeyRotationPolicyAttributesView extends InputOf<ManagedHsmKeyRotationPolicyAttributes> {\n  /**\n   * Read-only output: Creation time in seconds since 1970-01-01T00:00:00Z.\n   */\n  readonly created?: Expression<number> | undefined;\n  /**\n   * The expiration time for the new key version. It should be in ISO8601 format. Eg: 'P90D', 'P1Y'.\n   */\n  expiryTime?: ExpressionOrValue<string> | undefined;\n  /**\n   * Read-only output: Last updated time in seconds since 1970-01-01T00:00:00Z.\n   */\n  readonly updated?: Expression<number> | undefined;\n}\n\nexport const managedHsmKeyRotationPolicyAttributesShape: FlatModelShape = createFlatModelShape({\n  created: { armPath: [\"created\"], value: createNumberShape(), readOnly: true },\n  expiryTime: { armPath: [\"expiryTime\"], value: createStringShape() },\n  updated: { armPath: [\"updated\"], value: createNumberShape(), readOnly: true },\n});\n\nexport interface ManagedHsmLifetimeAction {\n  /**\n   * The action of key rotation policy lifetimeAction.\n   */\n  action?: ManagedHsmAction;\n  /**\n   * The trigger of key rotation policy lifetimeAction.\n   */\n  trigger?: ManagedHsmTrigger;\n}\n\nexport interface ManagedHsmLifetimeActionInput extends InputOf<ManagedHsmLifetimeAction> {\n  /**\n   * The action of key rotation policy lifetimeAction.\n   */\n  action?: ManagedHsmActionInput | undefined;\n  /**\n   * The trigger of key rotation policy lifetimeAction.\n   */\n  trigger?: ManagedHsmTriggerInput | undefined;\n}\n\nexport type ManagedHsmLifetimeActionView = ManagedHsmLifetimeActionInput;\n\nexport const managedHsmLifetimeActionShape: FlatModelShape = createFlatModelShape({\n  action: { armPath: [\"action\"], value: createDeferredShape(() => managedHsmActionShape) },\n  trigger: { armPath: [\"trigger\"], value: createDeferredShape(() => managedHsmTriggerShape) },\n});\n\n/**\n * Properties of the managed HSM Pool\n */\nexport interface ManagedHsmProperties {\n  /**\n   * The create mode to indicate whether the resource is being created or is being recovered from a deleted resource.\n   */\n  createMode?: CreateMode;\n  /**\n   * Property specifying whether protection against purge is enabled for this managed HSM pool. Setting this property to true activates protection against purge for this managed HSM pool and its content - only the Managed HSM service may initiate a hard, irrecoverable deletion. Enabling this functionality is irreversible.\n   */\n  enablePurgeProtection?: boolean;\n  /**\n   * Property to specify whether the 'soft delete' functionality is enabled for this managed HSM pool. Soft delete is enabled by default for all managed HSMs and is immutable.\n   */\n  enableSoftDelete?: boolean;\n  /**\n   * The URI of the managed hsm pool for performing operations on keys.\n   */\n  hsmUri?: string;\n  /**\n   * Array of initial administrators object ids for this managed hsm pool.\n   */\n  initialAdminObjectIds?: string[];\n  /**\n   * Rules governing the accessibility of the key vault from specific network locations.\n   */\n  networkAcls?: MhsmNetworkRuleSet;\n  /**\n   * List of private endpoint connections associated with the managed hsm pool.\n   */\n  privateEndpointConnections?: MhsmPrivateEndpointConnectionItem[];\n  /**\n   * Control permission to the managed HSM from public networks.\n   */\n  publicNetworkAccess?: PublicNetworkAccess;\n  /**\n   * List of all regions associated with the managed hsm pool.\n   */\n  regions?: MhsmGeoReplicatedRegion[];\n  /**\n   * The scheduled purge date in UTC.\n   */\n  scheduledPurgeDate?: Date;\n  /**\n   * Managed HSM security domain properties.\n   */\n  securityDomainProperties?: ManagedHsmSecurityDomainProperties;\n  /**\n   * Soft deleted data retention days. When you delete an HSM or a key, it will remain recoverable for the configured retention period or for a default period of 90 days. It accepts values between 7 and 90.\n   */\n  softDeleteRetentionInDays?: number;\n  /**\n   * Resource Status Message.\n   */\n  statusMessage?: string;\n  /**\n   * The Azure Active Directory tenant ID that should be used for authenticating requests to the managed HSM pool.\n   */\n  tenantId?: string;\n}\n\n/**\n * Input type for Properties of the managed HSM Pool\n */\nexport interface ManagedHsmPropertiesInput extends InputOf<ManagedHsmProperties> {\n  /**\n   * The create mode to indicate whether the resource is being created or is being recovered from a deleted resource.\n   */\n  createMode?: ExpressionOrValue<CreateMode> | undefined;\n  /**\n   * Property specifying whether protection against purge is enabled for this managed HSM pool. Setting this property to true activates protection against purge for this managed HSM pool and its content - only the Managed HSM service may initiate a hard, irrecoverable deletion. Enabling this functionality is irreversible.\n   */\n  enablePurgeProtection?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Property to specify whether the 'soft delete' functionality is enabled for this managed HSM pool. Soft delete is enabled by default for all managed HSMs and is immutable.\n   */\n  enableSoftDelete?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Array of initial administrators object ids for this managed hsm pool.\n   */\n  initialAdminObjectIds?: InputArray<ExpressionOrValue<string>, string[]> | undefined;\n  /**\n   * Rules governing the accessibility of the key vault from specific network locations.\n   */\n  networkAcls?: MhsmNetworkRuleSetInput | undefined;\n  /**\n   * Control permission to the managed HSM from public networks.\n   */\n  publicNetworkAccess?: ExpressionOrValue<PublicNetworkAccess> | undefined;\n  /**\n   * List of all regions associated with the managed hsm pool.\n   */\n  regions?: InputArray<MhsmGeoReplicatedRegionInput, MhsmGeoReplicatedRegion[]> | undefined;\n  /**\n   * Soft deleted data retention days. When you delete an HSM or a key, it will remain recoverable for the configured retention period or for a default period of 90 days. It accepts values between 7 and 90.\n   */\n  softDeleteRetentionInDays?: ExpressionOrValue<number> | undefined;\n  /**\n   * The Azure Active Directory tenant ID that should be used for authenticating requests to the managed HSM pool.\n   */\n  tenantId?: ExpressionOrValue<string> | undefined;\n}\n\n/**\n * View type for Properties of the managed HSM Pool\n */\nexport interface ManagedHsmPropertiesView extends InputOf<ManagedHsmProperties> {\n  /**\n   * The create mode to indicate whether the resource is being created or is being recovered from a deleted resource.\n   */\n  createMode?: ExpressionOrValue<CreateMode> | undefined;\n  /**\n   * Property specifying whether protection against purge is enabled for this managed HSM pool. Setting this property to true activates protection against purge for this managed HSM pool and its content - only the Managed HSM service may initiate a hard, irrecoverable deletion. Enabling this functionality is irreversible.\n   */\n  enablePurgeProtection?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Property to specify whether the 'soft delete' functionality is enabled for this managed HSM pool. Soft delete is enabled by default for all managed HSMs and is immutable.\n   */\n  enableSoftDelete?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Read-only output: The URI of the managed hsm pool for performing operations on keys.\n   */\n  readonly hsmUri?: Expression<string> | undefined;\n  /**\n   * Array of initial administrators object ids for this managed hsm pool.\n   */\n  initialAdminObjectIds?: InputArray<ExpressionOrValue<string>, string[]> | undefined;\n  /**\n   * Rules governing the accessibility of the key vault from specific network locations.\n   */\n  networkAcls?: MhsmNetworkRuleSetView | undefined;\n  /**\n   * Read-only output: List of private endpoint connections associated with the managed hsm pool.\n   */\n  readonly privateEndpointConnections?: Expression<MhsmPrivateEndpointConnectionItem[]> | undefined;\n  /**\n   * Control permission to the managed HSM from public networks.\n   */\n  publicNetworkAccess?: ExpressionOrValue<PublicNetworkAccess> | undefined;\n  /**\n   * List of all regions associated with the managed hsm pool.\n   */\n  regions?: InputArray<MhsmGeoReplicatedRegionView, MhsmGeoReplicatedRegion[]> | undefined;\n  /**\n   * Read-only output: The scheduled purge date in UTC.\n   */\n  readonly scheduledPurgeDate?: Expression<Date> | undefined;\n  /**\n   * Read-only output: Managed HSM security domain properties.\n   */\n  readonly securityDomainProperties?: Expression<ManagedHsmSecurityDomainProperties> | undefined;\n  /**\n   * Soft deleted data retention days. When you delete an HSM or a key, it will remain recoverable for the configured retention period or for a default period of 90 days. It accepts values between 7 and 90.\n   */\n  softDeleteRetentionInDays?: ExpressionOrValue<number> | undefined;\n  /**\n   * Read-only output: Resource Status Message.\n   */\n  readonly statusMessage?: Expression<string> | undefined;\n  /**\n   * The Azure Active Directory tenant ID that should be used for authenticating requests to the managed HSM pool.\n   */\n  tenantId?: ExpressionOrValue<string> | undefined;\n}\n\nexport const managedHsmPropertiesShape: FlatModelShape = createFlatModelShape({\n  createMode: { armPath: [\"createMode\"], value: createEnumShape() },\n  enablePurgeProtection: { armPath: [\"enablePurgeProtection\"], value: createBooleanShape() },\n  enableSoftDelete: { armPath: [\"enableSoftDelete\"], value: createBooleanShape() },\n  hsmUri: { armPath: [\"hsmUri\"], value: createStringShape(), readOnly: true },\n  initialAdminObjectIds: {\n    armPath: [\"initialAdminObjectIds\"],\n    value: createArrayShape(createStringShape()),\n  },\n  networkAcls: {\n    armPath: [\"networkAcls\"],\n    value: createDeferredShape(() => mhsmNetworkRuleSetShape),\n  },\n  privateEndpointConnections: {\n    armPath: [\"privateEndpointConnections\"],\n    value: createArrayShape(createDeferredShape(() => mhsmPrivateEndpointConnectionItemShape)),\n    readOnly: true,\n  },\n  publicNetworkAccess: { armPath: [\"publicNetworkAccess\"], value: createUnionShape() },\n  regions: {\n    armPath: [\"regions\"],\n    value: createArrayShape(createDeferredShape(() => mhsmGeoReplicatedRegionShape)),\n  },\n  scheduledPurgeDate: {\n    armPath: [\"scheduledPurgeDate\"],\n    value: createDateShape({\n      kind: \"date-time-text\",\n      source: \"utcDateTime\",\n      format: \"rfc3339\",\n      clientMode: \"client\",\n      wire: { kind: \"string\" },\n    }),\n    readOnly: true,\n  },\n  securityDomainProperties: {\n    armPath: [\"securityDomainProperties\"],\n    value: createDeferredShape(() => managedHsmSecurityDomainPropertiesShape),\n    readOnly: true,\n  },\n  softDeleteRetentionInDays: { armPath: [\"softDeleteRetentionInDays\"], value: createNumberShape() },\n  statusMessage: { armPath: [\"statusMessage\"], value: createStringShape(), readOnly: true },\n  tenantId: { armPath: [\"tenantId\"], value: createStringShape() },\n});\n\nexport interface ManagedHsmRotationPolicy {\n  /**\n   * The attributes of key rotation policy.\n   */\n  attributes?: ManagedHsmKeyRotationPolicyAttributes;\n  /**\n   * The lifetimeActions for key rotation action.\n   */\n  lifetimeActions?: ManagedHsmLifetimeAction[];\n}\n\nexport interface ManagedHsmRotationPolicyInput extends InputOf<ManagedHsmRotationPolicy> {\n  /**\n   * The attributes of key rotation policy.\n   */\n  attributes?: ManagedHsmKeyRotationPolicyAttributesInput | undefined;\n  /**\n   * The lifetimeActions for key rotation action.\n   */\n  lifetimeActions?:\n    InputArray<ManagedHsmLifetimeActionInput, ManagedHsmLifetimeAction[]> | undefined;\n}\n\nexport interface ManagedHsmRotationPolicyView extends InputOf<ManagedHsmRotationPolicy> {\n  /**\n   * The attributes of key rotation policy.\n   */\n  attributes?: ManagedHsmKeyRotationPolicyAttributesView | undefined;\n  /**\n   * The lifetimeActions for key rotation action.\n   */\n  lifetimeActions?:\n    InputArray<ManagedHsmLifetimeActionView, ManagedHsmLifetimeAction[]> | undefined;\n}\n\nexport const managedHsmRotationPolicyShape: FlatModelShape = createFlatModelShape({\n  attributes: {\n    armPath: [\"attributes\"],\n    value: createDeferredShape(() => managedHsmKeyRotationPolicyAttributesShape),\n  },\n  lifetimeActions: {\n    armPath: [\"lifetimeActions\"],\n    value: createArrayShape(createDeferredShape(() => managedHsmLifetimeActionShape)),\n  },\n});\n\n/**\n * The security domain properties of the managed hsm.\n */\nexport interface ManagedHsmSecurityDomainProperties {\n  /**\n   * Activation Status\n   */\n  activationStatus?: ActivationStatus;\n  /**\n   * Activation Status Message.\n   */\n  activationStatusMessage?: string;\n}\n\n/**\n * Input type for The security domain properties of the managed hsm.\n */\nexport interface ManagedHsmSecurityDomainPropertiesInput extends InputOf<ManagedHsmSecurityDomainProperties> {}\n\n/**\n * View type for The security domain properties of the managed hsm.\n */\nexport interface ManagedHsmSecurityDomainPropertiesView extends InputOf<ManagedHsmSecurityDomainProperties> {\n  /**\n   * Read-only output: Activation Status\n   */\n  readonly activationStatus?: Expression<ActivationStatus> | undefined;\n  /**\n   * Read-only output: Activation Status Message.\n   */\n  readonly activationStatusMessage?: Expression<string> | undefined;\n}\n\nexport const managedHsmSecurityDomainPropertiesShape: FlatModelShape = createFlatModelShape({\n  activationStatus: { armPath: [\"activationStatus\"], value: createUnionShape(), readOnly: true },\n  activationStatusMessage: {\n    armPath: [\"activationStatusMessage\"],\n    value: createStringShape(),\n    readOnly: true,\n  },\n});\n\n/**\n * SKU details\n */\nexport interface ManagedHsmSku {\n  /**\n   * SKU Family of the managed HSM Pool\n   */\n  family: ManagedHsmSkuFamily;\n  /**\n   * SKU of the managed HSM Pool\n   */\n  name: ManagedHsmSkuName;\n}\n\n/**\n * Input type for SKU details\n */\nexport interface ManagedHsmSkuInput extends InputOf<ManagedHsmSku> {\n  /**\n   * SKU Family of the managed HSM Pool\n   */\n  family: ExpressionOrValue<ManagedHsmSkuFamily>;\n  /**\n   * SKU of the managed HSM Pool\n   */\n  name: ExpressionOrValue<ManagedHsmSkuName>;\n}\n\n/**\n * View type for SKU details\n */\nexport type ManagedHsmSkuView = ManagedHsmSkuInput;\n\nexport const managedHsmSkuShape: FlatModelShape = createFlatModelShape({\n  family: { armPath: [\"family\"], value: createUnionShape() },\n  name: { armPath: [\"name\"], value: createEnumShape() },\n});\n\nexport interface ManagedHsmTrigger {\n  /**\n   * The time duration after key creation to rotate the key. It only applies to rotate. It will be in ISO 8601 duration format. Eg: 'P90D', 'P1Y'.\n   */\n  timeAfterCreate?: string;\n  /**\n   * The time duration before key expiring to rotate or notify. It will be in ISO 8601 duration format. Eg: 'P90D', 'P1Y'.\n   */\n  timeBeforeExpiry?: string;\n}\n\nexport interface ManagedHsmTriggerInput extends InputOf<ManagedHsmTrigger> {\n  /**\n   * The time duration after key creation to rotate the key. It only applies to rotate. It will be in ISO 8601 duration format. Eg: 'P90D', 'P1Y'.\n   */\n  timeAfterCreate?: ExpressionOrValue<string> | undefined;\n  /**\n   * The time duration before key expiring to rotate or notify. It will be in ISO 8601 duration format. Eg: 'P90D', 'P1Y'.\n   */\n  timeBeforeExpiry?: ExpressionOrValue<string> | undefined;\n}\n\nexport type ManagedHsmTriggerView = ManagedHsmTriggerInput;\n\nexport const managedHsmTriggerShape: FlatModelShape = createFlatModelShape({\n  timeAfterCreate: { armPath: [\"timeAfterCreate\"], value: createStringShape() },\n  timeBeforeExpiry: { armPath: [\"timeBeforeExpiry\"], value: createStringShape() },\n});\n\n/**\n * Managed service identity (system assigned and/or user assigned identities)\n */\nexport interface ManagedServiceIdentity {\n  /**\n   * The service principal ID of the system assigned identity. This property will only be provided for a system assigned identity.\n   */\n  principalId?: string;\n  /**\n   * The tenant ID of the system assigned identity. This property will only be provided for a system assigned identity.\n   */\n  tenantId?: string;\n  /**\n   * The type of managed identity assigned to this resource.\n   */\n  type: ManagedServiceIdentityType;\n  /**\n   * The identities assigned to this resource by the user.\n   */\n  userAssignedIdentities?: Record<string, UserAssignedIdentity | null>;\n}\n\n/**\n * Input type for Managed service identity (system assigned and/or user assigned identities)\n */\nexport interface ManagedServiceIdentityInput extends InputOf<ManagedServiceIdentity> {\n  /**\n   * The type of managed identity assigned to this resource.\n   */\n  type: ExpressionOrValue<ManagedServiceIdentityType>;\n  /**\n   * The identities assigned to this resource by the user.\n   */\n  userAssignedIdentities?:\n    | InputRecord<\n        UserAssignedIdentityInput | ExpressionOrValue<null>,\n        Record<string, UserAssignedIdentity | null>\n      >\n    | undefined;\n}\n\n/**\n * View type for Managed service identity (system assigned and/or user assigned identities)\n */\nexport interface ManagedServiceIdentityView extends InputOf<ManagedServiceIdentity> {\n  /**\n   * Read-only output: The service principal ID of the system assigned identity. This property will only be provided for a system assigned identity.\n   */\n  readonly principalId?: Expression<string> | undefined;\n  /**\n   * Read-only output: The tenant ID of the system assigned identity. This property will only be provided for a system assigned identity.\n   */\n  readonly tenantId?: Expression<string> | undefined;\n  /**\n   * The type of managed identity assigned to this resource.\n   */\n  type: ExpressionOrValue<ManagedServiceIdentityType>;\n  /**\n   * The identities assigned to this resource by the user.\n   */\n  userAssignedIdentities?:\n    | InputRecord<\n        UserAssignedIdentityView | ExpressionOrValue<null>,\n        Record<string, UserAssignedIdentity | null>\n      >\n    | undefined;\n}\n\nexport const managedServiceIdentityShape: FlatModelShape = createFlatModelShape({\n  principalId: { armPath: [\"principalId\"], value: createStringShape(), readOnly: true },\n  tenantId: { armPath: [\"tenantId\"], value: createStringShape(), readOnly: true },\n  type: { armPath: [\"type\"], value: createUnionShape() },\n  userAssignedIdentities: {\n    armPath: [\"userAssignedIdentities\"],\n    value: createRecordShape(createDeferredShape(() => userAssignedIdentityShape)),\n  },\n});\n\n/**\n * A region that this managed HSM Pool has been extended to.\n */\nexport interface MhsmGeoReplicatedRegion {\n  /**\n   * A boolean value that indicates whether the region is the primary region or a secondary region.\n   */\n  isPrimary?: boolean;\n  /**\n   * Name of the geo replicated region.\n   */\n  name?: string;\n}\n\n/**\n * Input type for A region that this managed HSM Pool has been extended to.\n */\nexport interface MhsmGeoReplicatedRegionInput extends InputOf<MhsmGeoReplicatedRegion> {\n  /**\n   * A boolean value that indicates whether the region is the primary region or a secondary region.\n   */\n  isPrimary?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Name of the geo replicated region.\n   */\n  name?: ExpressionOrValue<string> | undefined;\n}\n\n/**\n * View type for A region that this managed HSM Pool has been extended to.\n */\nexport type MhsmGeoReplicatedRegionView = MhsmGeoReplicatedRegionInput;\n\nexport const mhsmGeoReplicatedRegionShape: FlatModelShape = createFlatModelShape({\n  isPrimary: { armPath: [\"isPrimary\"], value: createBooleanShape() },\n  name: { armPath: [\"name\"], value: createStringShape() },\n});\n\n/**\n * A rule governing the accessibility of a managed HSM pool from a specific IP address or IP range.\n */\nexport interface MhsmipRule {\n  /**\n   * An IPv4 address range in CIDR notation, such as '124.56.78.91' (simple IP address) or '124.56.78.0/24' (all addresses that start with 124.56.78).\n   */\n  value: string;\n}\n\n/**\n * Input type for A rule governing the accessibility of a managed HSM pool from a specific IP address or IP range.\n */\nexport interface MhsmipRuleInput extends InputOf<MhsmipRule> {\n  /**\n   * An IPv4 address range in CIDR notation, such as '124.56.78.91' (simple IP address) or '124.56.78.0/24' (all addresses that start with 124.56.78).\n   */\n  value: ExpressionOrValue<string>;\n}\n\n/**\n * View type for A rule governing the accessibility of a managed HSM pool from a specific IP address or IP range.\n */\nexport type MhsmipRuleView = MhsmipRuleInput;\n\nexport const mhsmipRuleShape: FlatModelShape = createFlatModelShape({\n  value: { armPath: [\"value\"], value: createStringShape() },\n});\n\n/**\n * A set of rules governing the network accessibility of a managed hsm pool.\n */\nexport interface MhsmNetworkRuleSet {\n  /**\n   * Tells what traffic can bypass network rules. This can be 'AzureServices' or 'None'. If not specified the default is 'AzureServices'.\n   */\n  bypass?: NetworkRuleBypassOptions;\n  /**\n   * The default action when no rule from ipRules and from virtualNetworkRules match. This is only used after the bypass property has been evaluated.\n   */\n  defaultAction?: NetworkRuleAction;\n  /**\n   * The list of IP address rules.\n   */\n  ipRules?: MhsmipRule[];\n  /**\n   * The list of service tags.\n   */\n  serviceTags?: MhsmServiceTagRule[];\n  /**\n   * The list of virtual network rules.\n   */\n  virtualNetworkRules?: MhsmVirtualNetworkRule[];\n}\n\n/**\n * Input type for A set of rules governing the network accessibility of a managed hsm pool.\n */\nexport interface MhsmNetworkRuleSetInput extends InputOf<MhsmNetworkRuleSet> {\n  /**\n   * Tells what traffic can bypass network rules. This can be 'AzureServices' or 'None'. If not specified the default is 'AzureServices'.\n   */\n  bypass?: ExpressionOrValue<NetworkRuleBypassOptions> | undefined;\n  /**\n   * The default action when no rule from ipRules and from virtualNetworkRules match. This is only used after the bypass property has been evaluated.\n   */\n  defaultAction?: ExpressionOrValue<NetworkRuleAction> | undefined;\n  /**\n   * The list of IP address rules.\n   */\n  ipRules?: InputArray<MhsmipRuleInput, MhsmipRule[]> | undefined;\n  /**\n   * The list of service tags.\n   */\n  serviceTags?: InputArray<MhsmServiceTagRuleInput, MhsmServiceTagRule[]> | undefined;\n  /**\n   * The list of virtual network rules.\n   */\n  virtualNetworkRules?:\n    InputArray<MhsmVirtualNetworkRuleInput, MhsmVirtualNetworkRule[]> | undefined;\n}\n\n/**\n * View type for A set of rules governing the network accessibility of a managed hsm pool.\n */\nexport type MhsmNetworkRuleSetView = MhsmNetworkRuleSetInput;\n\nexport const mhsmNetworkRuleSetShape: FlatModelShape = createFlatModelShape({\n  bypass: { armPath: [\"bypass\"], value: createUnionShape() },\n  defaultAction: { armPath: [\"defaultAction\"], value: createUnionShape() },\n  ipRules: {\n    armPath: [\"ipRules\"],\n    value: createArrayShape(createDeferredShape(() => mhsmipRuleShape)),\n  },\n  serviceTags: {\n    armPath: [\"serviceTags\"],\n    value: createArrayShape(createDeferredShape(() => mhsmServiceTagRuleShape)),\n  },\n  virtualNetworkRules: {\n    armPath: [\"virtualNetworkRules\"],\n    value: createArrayShape(createDeferredShape(() => mhsmVirtualNetworkRuleShape)),\n  },\n});\n\n/**\n * Private endpoint object properties.\n */\nexport interface MhsmPrivateEndpoint {}\n\n/**\n * Input type for Private endpoint object properties.\n */\nexport interface MhsmPrivateEndpointInput extends InputOf<MhsmPrivateEndpoint> {}\n\n/**\n * View type for Private endpoint object properties.\n */\nexport type MhsmPrivateEndpointView = MhsmPrivateEndpointInput;\n\nexport const mhsmPrivateEndpointShape: FlatModelShape = createFlatModelShape({});\n\n/**\n * Private endpoint connection item.\n */\nexport interface MhsmPrivateEndpointConnectionItem {\n  /**\n   * Private endpoint connection properties.\n   */\n  properties?: MhsmPrivateEndpointConnectionProperties;\n}\n\n/**\n * Input type for Private endpoint connection item.\n */\nexport interface MhsmPrivateEndpointConnectionItemInput extends InputOf<MhsmPrivateEndpointConnectionItem> {}\n\n/**\n * View type for Private endpoint connection item.\n */\nexport interface MhsmPrivateEndpointConnectionItemView extends InputOf<MhsmPrivateEndpointConnectionItem> {\n  /**\n   * Read-only output: Private endpoint connection properties.\n   */\n  readonly properties?: Expression<MhsmPrivateEndpointConnectionProperties> | undefined;\n}\n\nexport const mhsmPrivateEndpointConnectionItemShape: FlatModelShape = createFlatModelShape({\n  properties: {\n    armPath: [\"properties\"],\n    value: createDeferredShape(() => mhsmPrivateEndpointConnectionPropertiesShape),\n    readOnly: true,\n  },\n});\n\n/**\n * Properties of the private endpoint connection resource.\n */\nexport interface MhsmPrivateEndpointConnectionProperties {\n  /**\n   * Properties of the private endpoint object.\n   */\n  privateEndpoint?: MhsmPrivateEndpoint;\n  /**\n   * Approval state of the private link connection.\n   */\n  privateLinkServiceConnectionState?: MhsmPrivateLinkServiceConnectionState;\n}\n\n/**\n * Input type for Properties of the private endpoint connection resource.\n */\nexport interface MhsmPrivateEndpointConnectionPropertiesInput extends InputOf<MhsmPrivateEndpointConnectionProperties> {\n  /**\n   * Properties of the private endpoint object.\n   */\n  privateEndpoint?: MhsmPrivateEndpointInput | undefined;\n  /**\n   * Approval state of the private link connection.\n   */\n  privateLinkServiceConnectionState?: MhsmPrivateLinkServiceConnectionStateInput | undefined;\n}\n\n/**\n * View type for Properties of the private endpoint connection resource.\n */\nexport type MhsmPrivateEndpointConnectionPropertiesView =\n  MhsmPrivateEndpointConnectionPropertiesInput;\n\nexport const mhsmPrivateEndpointConnectionPropertiesShape: FlatModelShape = createFlatModelShape({\n  privateEndpoint: {\n    armPath: [\"privateEndpoint\"],\n    value: createDeferredShape(() => mhsmPrivateEndpointShape),\n  },\n  privateLinkServiceConnectionState: {\n    armPath: [\"privateLinkServiceConnectionState\"],\n    value: createDeferredShape(() => mhsmPrivateLinkServiceConnectionStateShape),\n  },\n});\n\n/**\n * An object that represents the approval state of the private link connection.\n */\nexport interface MhsmPrivateLinkServiceConnectionState {\n  /**\n   * A message indicating if changes on the service provider require any updates on the consumer.\n   */\n  actionsRequired?: ActionsRequired;\n  /**\n   * The reason for approval or rejection.\n   */\n  description?: string;\n  /**\n   * Indicates whether the connection has been approved, rejected or removed by the key vault owner.\n   */\n  status?: PrivateEndpointServiceConnectionStatus;\n}\n\n/**\n * Input type for An object that represents the approval state of the private link connection.\n */\nexport interface MhsmPrivateLinkServiceConnectionStateInput extends InputOf<MhsmPrivateLinkServiceConnectionState> {\n  /**\n   * A message indicating if changes on the service provider require any updates on the consumer.\n   */\n  actionsRequired?: ExpressionOrValue<ActionsRequired> | undefined;\n  /**\n   * The reason for approval or rejection.\n   */\n  description?: ExpressionOrValue<string> | undefined;\n  /**\n   * Indicates whether the connection has been approved, rejected or removed by the key vault owner.\n   */\n  status?: ExpressionOrValue<PrivateEndpointServiceConnectionStatus> | undefined;\n}\n\n/**\n * View type for An object that represents the approval state of the private link connection.\n */\nexport type MhsmPrivateLinkServiceConnectionStateView = MhsmPrivateLinkServiceConnectionStateInput;\n\nexport const mhsmPrivateLinkServiceConnectionStateShape: FlatModelShape = createFlatModelShape({\n  actionsRequired: { armPath: [\"actionsRequired\"], value: createUnionShape() },\n  description: { armPath: [\"description\"], value: createStringShape() },\n  status: { armPath: [\"status\"], value: createUnionShape() },\n});\n\n/**\n * A rule governing the accessibility of a managed hsm pool from a specific service tags.\n */\nexport interface MhsmServiceTagRule {\n  /**\n   * Name of the service tag.\n   */\n  tag: string;\n}\n\n/**\n * Input type for A rule governing the accessibility of a managed hsm pool from a specific service tags.\n */\nexport interface MhsmServiceTagRuleInput extends InputOf<MhsmServiceTagRule> {\n  /**\n   * Name of the service tag.\n   */\n  tag: ExpressionOrValue<string>;\n}\n\n/**\n * View type for A rule governing the accessibility of a managed hsm pool from a specific service tags.\n */\nexport type MhsmServiceTagRuleView = MhsmServiceTagRuleInput;\n\nexport const mhsmServiceTagRuleShape: FlatModelShape = createFlatModelShape({\n  tag: { armPath: [\"tag\"], value: createStringShape() },\n});\n\n/**\n * A rule governing the accessibility of a managed hsm pool from a specific virtual network.\n */\nexport interface MhsmVirtualNetworkRule {\n  /**\n   * Full resource id of a vnet subnet, such as '/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/virtualNetworks/test-vnet/subnets/subnet1'.\n   */\n  id: string;\n}\n\n/**\n * Input type for A rule governing the accessibility of a managed hsm pool from a specific virtual network.\n */\nexport interface MhsmVirtualNetworkRuleInput extends InputOf<MhsmVirtualNetworkRule> {\n  /**\n   * Full resource id of a vnet subnet, such as '/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/virtualNetworks/test-vnet/subnets/subnet1'.\n   */\n  id: ExpressionOrValue<string>;\n}\n\n/**\n * View type for A rule governing the accessibility of a managed hsm pool from a specific virtual network.\n */\nexport type MhsmVirtualNetworkRuleView = MhsmVirtualNetworkRuleInput;\n\nexport const mhsmVirtualNetworkRuleShape: FlatModelShape = createFlatModelShape({\n  id: { armPath: [\"id\"], value: createStringShape() },\n});\n\n/**\n * A set of rules governing the network accessibility of a vault.\n */\nexport interface NetworkRuleSet {\n  /**\n   * Tells what traffic can bypass network rules. This can be 'AzureServices' or 'None'. If not specified the default is 'AzureServices'.\n   */\n  bypass?: NetworkRuleBypassOptions;\n  /**\n   * The default action when no rule from ipRules and from virtualNetworkRules match. This is only used after the bypass property has been evaluated.\n   */\n  defaultAction?: NetworkRuleAction;\n  /**\n   * The list of IP address rules.\n   */\n  ipRules?: IpRule[];\n  /**\n   * The list of virtual network rules.\n   */\n  virtualNetworkRules?: VirtualNetworkRule[];\n}\n\n/**\n * Input type for A set of rules governing the network accessibility of a vault.\n */\nexport interface NetworkRuleSetInput extends InputOf<NetworkRuleSet> {\n  /**\n   * Tells what traffic can bypass network rules. This can be 'AzureServices' or 'None'. If not specified the default is 'AzureServices'.\n   */\n  bypass?: ExpressionOrValue<NetworkRuleBypassOptions> | undefined;\n  /**\n   * The default action when no rule from ipRules and from virtualNetworkRules match. This is only used after the bypass property has been evaluated.\n   */\n  defaultAction?: ExpressionOrValue<NetworkRuleAction> | undefined;\n  /**\n   * The list of IP address rules.\n   */\n  ipRules?: InputArray<IpRuleInput, IpRule[]> | undefined;\n  /**\n   * The list of virtual network rules.\n   */\n  virtualNetworkRules?: InputArray<VirtualNetworkRuleInput, VirtualNetworkRule[]> | undefined;\n}\n\n/**\n * View type for A set of rules governing the network accessibility of a vault.\n */\nexport type NetworkRuleSetView = NetworkRuleSetInput;\n\nexport const networkRuleSetShape: FlatModelShape = createFlatModelShape({\n  bypass: { armPath: [\"bypass\"], value: createUnionShape() },\n  defaultAction: { armPath: [\"defaultAction\"], value: createUnionShape() },\n  ipRules: {\n    armPath: [\"ipRules\"],\n    value: createArrayShape(createDeferredShape(() => ipRuleShape)),\n  },\n  virtualNetworkRules: {\n    armPath: [\"virtualNetworkRules\"],\n    value: createArrayShape(createDeferredShape(() => virtualNetworkRuleShape)),\n  },\n});\n\n/**\n * Permissions the identity has for keys, secrets, certificates and storage.\n */\nexport interface Permissions {\n  /**\n   * Permissions to certificates\n   */\n  certificates?: CertificatePermissions[];\n  /**\n   * Permissions to keys\n   */\n  keys?: KeyPermissions[];\n  /**\n   * Permissions to secrets\n   */\n  secrets?: SecretPermissions[];\n  /**\n   * Permissions to storage accounts\n   */\n  storage?: StoragePermissions[];\n}\n\n/**\n * Input type for Permissions the identity has for keys, secrets, certificates and storage.\n */\nexport interface PermissionsInput extends InputOf<Permissions> {\n  /**\n   * Permissions to certificates\n   */\n  certificates?:\n    InputArray<ExpressionOrValue<CertificatePermissions>, CertificatePermissions[]> | undefined;\n  /**\n   * Permissions to keys\n   */\n  keys?: InputArray<ExpressionOrValue<KeyPermissions>, KeyPermissions[]> | undefined;\n  /**\n   * Permissions to secrets\n   */\n  secrets?: InputArray<ExpressionOrValue<SecretPermissions>, SecretPermissions[]> | undefined;\n  /**\n   * Permissions to storage accounts\n   */\n  storage?: InputArray<ExpressionOrValue<StoragePermissions>, StoragePermissions[]> | undefined;\n}\n\n/**\n * View type for Permissions the identity has for keys, secrets, certificates and storage.\n */\nexport type PermissionsView = PermissionsInput;\n\nexport const permissionsShape: FlatModelShape = createFlatModelShape({\n  certificates: { armPath: [\"certificates\"], value: createArrayShape(createUnionShape()) },\n  keys: { armPath: [\"keys\"], value: createArrayShape(createUnionShape()) },\n  secrets: { armPath: [\"secrets\"], value: createArrayShape(createUnionShape()) },\n  storage: { armPath: [\"storage\"], value: createArrayShape(createUnionShape()) },\n});\n\n/**\n * Private endpoint object properties.\n */\nexport interface PrivateEndpoint {}\n\n/**\n * Input type for Private endpoint object properties.\n */\nexport interface PrivateEndpointInput extends InputOf<PrivateEndpoint> {}\n\n/**\n * View type for Private endpoint object properties.\n */\nexport type PrivateEndpointView = PrivateEndpointInput;\n\nexport const privateEndpointShape: FlatModelShape = createFlatModelShape({});\n\n/**\n * Private endpoint connection item.\n */\nexport interface PrivateEndpointConnectionItem {\n  /**\n   * Private endpoint connection properties.\n   */\n  properties?: PrivateEndpointConnectionProperties;\n}\n\n/**\n * Input type for Private endpoint connection item.\n */\nexport interface PrivateEndpointConnectionItemInput extends InputOf<PrivateEndpointConnectionItem> {}\n\n/**\n * View type for Private endpoint connection item.\n */\nexport interface PrivateEndpointConnectionItemView extends InputOf<PrivateEndpointConnectionItem> {\n  /**\n   * Read-only output: Private endpoint connection properties.\n   */\n  readonly properties?: Expression<PrivateEndpointConnectionProperties> | undefined;\n}\n\nexport const privateEndpointConnectionItemShape: FlatModelShape = createFlatModelShape({\n  properties: {\n    armPath: [\"properties\"],\n    value: createDeferredShape(() => privateEndpointConnectionPropertiesShape),\n    readOnly: true,\n  },\n});\n\n/**\n * Properties of the private endpoint connection resource.\n */\nexport interface PrivateEndpointConnectionProperties {\n  /**\n   * Properties of the private endpoint object.\n   */\n  privateEndpoint?: PrivateEndpoint;\n  /**\n   * Approval state of the private link connection.\n   */\n  privateLinkServiceConnectionState?: PrivateLinkServiceConnectionState;\n}\n\n/**\n * Input type for Properties of the private endpoint connection resource.\n */\nexport interface PrivateEndpointConnectionPropertiesInput extends InputOf<PrivateEndpointConnectionProperties> {\n  /**\n   * Properties of the private endpoint object.\n   */\n  privateEndpoint?: PrivateEndpointInput | undefined;\n  /**\n   * Approval state of the private link connection.\n   */\n  privateLinkServiceConnectionState?: PrivateLinkServiceConnectionStateInput | undefined;\n}\n\n/**\n * View type for Properties of the private endpoint connection resource.\n */\nexport type PrivateEndpointConnectionPropertiesView = PrivateEndpointConnectionPropertiesInput;\n\nexport const privateEndpointConnectionPropertiesShape: FlatModelShape = createFlatModelShape({\n  privateEndpoint: {\n    armPath: [\"privateEndpoint\"],\n    value: createDeferredShape(() => privateEndpointShape),\n  },\n  privateLinkServiceConnectionState: {\n    armPath: [\"privateLinkServiceConnectionState\"],\n    value: createDeferredShape(() => privateLinkServiceConnectionStateShape),\n  },\n});\n\n/**\n * An object that represents the approval state of the private link connection.\n */\nexport interface PrivateLinkServiceConnectionState {\n  /**\n   * A message indicating if changes on the service provider require any updates on the consumer.\n   */\n  actionsRequired?: ActionsRequired;\n  /**\n   * The reason for approval or rejection.\n   */\n  description?: string;\n  /**\n   * Indicates whether the connection has been approved, rejected or removed by the key vault owner.\n   */\n  status?: PrivateEndpointServiceConnectionStatus;\n}\n\n/**\n * Input type for An object that represents the approval state of the private link connection.\n */\nexport interface PrivateLinkServiceConnectionStateInput extends InputOf<PrivateLinkServiceConnectionState> {\n  /**\n   * A message indicating if changes on the service provider require any updates on the consumer.\n   */\n  actionsRequired?: ExpressionOrValue<ActionsRequired> | undefined;\n  /**\n   * The reason for approval or rejection.\n   */\n  description?: ExpressionOrValue<string> | undefined;\n  /**\n   * Indicates whether the connection has been approved, rejected or removed by the key vault owner.\n   */\n  status?: ExpressionOrValue<PrivateEndpointServiceConnectionStatus> | undefined;\n}\n\n/**\n * View type for An object that represents the approval state of the private link connection.\n */\nexport type PrivateLinkServiceConnectionStateView = PrivateLinkServiceConnectionStateInput;\n\nexport const privateLinkServiceConnectionStateShape: FlatModelShape = createFlatModelShape({\n  actionsRequired: { armPath: [\"actionsRequired\"], value: createUnionShape() },\n  description: { armPath: [\"description\"], value: createStringShape() },\n  status: { armPath: [\"status\"], value: createUnionShape() },\n});\n\nexport interface RotationPolicy {\n  /**\n   * The attributes of key rotation policy.\n   */\n  attributes?: KeyRotationPolicyAttributes;\n  /**\n   * The lifetimeActions for key rotation action.\n   */\n  lifetimeActions?: LifetimeAction[];\n}\n\nexport interface RotationPolicyInput extends InputOf<RotationPolicy> {\n  /**\n   * The attributes of key rotation policy.\n   */\n  attributes?: KeyRotationPolicyAttributesInput | undefined;\n  /**\n   * The lifetimeActions for key rotation action.\n   */\n  lifetimeActions?: InputArray<LifetimeActionInput, LifetimeAction[]> | undefined;\n}\n\nexport interface RotationPolicyView extends InputOf<RotationPolicy> {\n  /**\n   * The attributes of key rotation policy.\n   */\n  attributes?: KeyRotationPolicyAttributesView | undefined;\n  /**\n   * The lifetimeActions for key rotation action.\n   */\n  lifetimeActions?: InputArray<LifetimeActionView, LifetimeAction[]> | undefined;\n}\n\nexport const rotationPolicyShape: FlatModelShape = createFlatModelShape({\n  attributes: {\n    armPath: [\"attributes\"],\n    value: createDeferredShape(() => keyRotationPolicyAttributesShape),\n  },\n  lifetimeActions: {\n    armPath: [\"lifetimeActions\"],\n    value: createArrayShape(createDeferredShape(() => lifetimeActionShape)),\n  },\n});\n\n/**\n * The secret management attributes.\n */\nexport interface SecretAttributes {\n  /**\n   * Creation time in seconds since 1970-01-01T00:00:00Z.\n   */\n  created?: Date;\n  /**\n   * Determines whether the object is enabled.\n   */\n  enabled?: boolean;\n  /**\n   * Expiry date in seconds since 1970-01-01T00:00:00Z.\n   */\n  expires?: Date;\n  /**\n   * Not before date in seconds since 1970-01-01T00:00:00Z.\n   */\n  notBefore?: Date;\n  /**\n   * Last updated time in seconds since 1970-01-01T00:00:00Z.\n   */\n  updated?: Date;\n}\n\n/**\n * Input type for The secret management attributes.\n */\nexport interface SecretAttributesInput extends InputOf<SecretAttributes> {\n  /**\n   * Determines whether the object is enabled.\n   */\n  enabled?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Expiry date in seconds since 1970-01-01T00:00:00Z.\n   */\n  expires?: ExpressionOrValue<Date> | undefined;\n  /**\n   * Not before date in seconds since 1970-01-01T00:00:00Z.\n   */\n  notBefore?: ExpressionOrValue<Date> | undefined;\n}\n\n/**\n * View type for The secret management attributes.\n */\nexport interface SecretAttributesView extends InputOf<SecretAttributes> {\n  /**\n   * Read-only output: Creation time in seconds since 1970-01-01T00:00:00Z.\n   */\n  readonly created?: Expression<Date> | undefined;\n  /**\n   * Determines whether the object is enabled.\n   */\n  enabled?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Expiry date in seconds since 1970-01-01T00:00:00Z.\n   */\n  expires?: ExpressionOrValue<Date> | undefined;\n  /**\n   * Not before date in seconds since 1970-01-01T00:00:00Z.\n   */\n  notBefore?: ExpressionOrValue<Date> | undefined;\n  /**\n   * Read-only output: Last updated time in seconds since 1970-01-01T00:00:00Z.\n   */\n  readonly updated?: Expression<Date> | undefined;\n}\n\nexport const secretAttributesShape: FlatModelShape = createFlatModelShape({\n  created: {\n    armPath: [\"created\"],\n    value: createDateShape({\n      kind: \"unix-timestamp\",\n      source: \"utcDateTime\",\n      unit: \"seconds\",\n      clientMode: \"client\",\n      wire: { kind: \"integer\", scalar: \"int32\" },\n    }),\n    readOnly: true,\n  },\n  enabled: { armPath: [\"enabled\"], value: createBooleanShape() },\n  expires: {\n    armPath: [\"exp\"],\n    value: createDateShape({\n      kind: \"unix-timestamp\",\n      source: \"utcDateTime\",\n      unit: \"seconds\",\n      clientMode: \"client\",\n      wire: { kind: \"integer\", scalar: \"int32\" },\n    }),\n  },\n  notBefore: {\n    armPath: [\"nbf\"],\n    value: createDateShape({\n      kind: \"unix-timestamp\",\n      source: \"utcDateTime\",\n      unit: \"seconds\",\n      clientMode: \"client\",\n      wire: { kind: \"integer\", scalar: \"int32\" },\n    }),\n  },\n  updated: {\n    armPath: [\"updated\"],\n    value: createDateShape({\n      kind: \"unix-timestamp\",\n      source: \"utcDateTime\",\n      unit: \"seconds\",\n      clientMode: \"client\",\n      wire: { kind: \"integer\", scalar: \"int32\" },\n    }),\n    readOnly: true,\n  },\n});\n\n/**\n * Properties of the secret\n */\nexport interface SecretProperties {\n  /**\n   * The attributes of the secret.\n   */\n  attributes?: SecretAttributes;\n  /**\n   * The content type of the secret.\n   */\n  contentType?: string;\n  /**\n   * The URI to retrieve the current version of the secret.\n   */\n  secretUri?: string;\n  /**\n   * The URI to retrieve the specific version of the secret.\n   */\n  secretUriWithVersion?: string;\n  /**\n   * The value of the secret. NOTE: 'value' will never be returned from the service, as APIs using this model are is intended for internal use in ARM deployments. Users should use the data-plane REST service for interaction with vault secrets.\n   */\n  value?: string;\n}\n\n/**\n * Input type for Properties of the secret\n */\nexport interface SecretPropertiesInput extends InputOf<SecretProperties> {\n  /**\n   * The attributes of the secret.\n   */\n  attributes?: SecretAttributesInput | undefined;\n  /**\n   * The content type of the secret.\n   */\n  contentType?: ExpressionOrValue<string> | undefined;\n  /**\n   * The value of the secret. NOTE: 'value' will never be returned from the service, as APIs using this model are is intended for internal use in ARM deployments. Users should use the data-plane REST service for interaction with vault secrets.\n   */\n  value?: ExpressionOrValue<string> | undefined;\n}\n\n/**\n * View type for Properties of the secret\n */\nexport interface SecretPropertiesView extends InputOf<SecretProperties> {\n  /**\n   * The attributes of the secret.\n   */\n  attributes?: SecretAttributesView | undefined;\n  /**\n   * The content type of the secret.\n   */\n  contentType?: ExpressionOrValue<string> | undefined;\n  /**\n   * Read-only output: The URI to retrieve the current version of the secret.\n   */\n  readonly secretUri?: Expression<string> | undefined;\n  /**\n   * Read-only output: The URI to retrieve the specific version of the secret.\n   */\n  readonly secretUriWithVersion?: Expression<string> | undefined;\n  /**\n   * The value of the secret. NOTE: 'value' will never be returned from the service, as APIs using this model are is intended for internal use in ARM deployments. Users should use the data-plane REST service for interaction with vault secrets.\n   */\n  value?: ExpressionOrValue<string> | undefined;\n}\n\nexport const secretPropertiesShape: FlatModelShape = createFlatModelShape({\n  attributes: { armPath: [\"attributes\"], value: createDeferredShape(() => secretAttributesShape) },\n  contentType: { armPath: [\"contentType\"], value: createStringShape() },\n  secretUri: { armPath: [\"secretUri\"], value: createStringShape(), readOnly: true },\n  secretUriWithVersion: {\n    armPath: [\"secretUriWithVersion\"],\n    value: createStringShape(),\n    readOnly: true,\n  },\n  value: { armPath: [\"value\"], value: createStringShape() },\n});\n\n/**\n * SKU details\n */\nexport interface Sku {\n  /**\n   * SKU family name\n   */\n  family: SkuFamily;\n  /**\n   * SKU name to specify whether the key vault is a standard vault or a premium vault.\n   */\n  name: SkuName;\n}\n\n/**\n * Input type for SKU details\n */\nexport interface SkuInput extends InputOf<Sku> {\n  /**\n   * SKU family name\n   */\n  family: ExpressionOrValue<SkuFamily>;\n  /**\n   * SKU name to specify whether the key vault is a standard vault or a premium vault.\n   */\n  name: ExpressionOrValue<SkuName>;\n}\n\n/**\n * View type for SKU details\n */\nexport type SkuView = SkuInput;\n\nexport const skuShape: FlatModelShape = createFlatModelShape({\n  family: { armPath: [\"family\"], value: createUnionShape() },\n  name: { armPath: [\"name\"], value: createEnumShape() },\n});\n\nexport interface Trigger {\n  /**\n   * The time duration after key creation to rotate the key. It only applies to rotate. It will be in ISO 8601 duration format. Eg: 'P90D', 'P1Y'.\n   */\n  timeAfterCreate?: string;\n  /**\n   * The time duration before key expiring to rotate or notify. It will be in ISO 8601 duration format. Eg: 'P90D', 'P1Y'.\n   */\n  timeBeforeExpiry?: string;\n}\n\nexport interface TriggerInput extends InputOf<Trigger> {\n  /**\n   * The time duration after key creation to rotate the key. It only applies to rotate. It will be in ISO 8601 duration format. Eg: 'P90D', 'P1Y'.\n   */\n  timeAfterCreate?: ExpressionOrValue<string> | undefined;\n  /**\n   * The time duration before key expiring to rotate or notify. It will be in ISO 8601 duration format. Eg: 'P90D', 'P1Y'.\n   */\n  timeBeforeExpiry?: ExpressionOrValue<string> | undefined;\n}\n\nexport type TriggerView = TriggerInput;\n\nexport const triggerShape: FlatModelShape = createFlatModelShape({\n  timeAfterCreate: { armPath: [\"timeAfterCreate\"], value: createStringShape() },\n  timeBeforeExpiry: { armPath: [\"timeBeforeExpiry\"], value: createStringShape() },\n});\n\n/**\n * User assigned identity properties\n */\nexport interface UserAssignedIdentity {\n  /**\n   * The client ID of the assigned identity.\n   */\n  clientId?: string;\n  /**\n   * The principal ID of the assigned identity.\n   */\n  principalId?: string;\n}\n\n/**\n * Input type for User assigned identity properties\n */\nexport interface UserAssignedIdentityInput extends InputOf<UserAssignedIdentity> {}\n\n/**\n * View type for User assigned identity properties\n */\nexport interface UserAssignedIdentityView extends InputOf<UserAssignedIdentity> {\n  /**\n   * Read-only output: The client ID of the assigned identity.\n   */\n  readonly clientId?: Expression<string> | undefined;\n  /**\n   * Read-only output: The principal ID of the assigned identity.\n   */\n  readonly principalId?: Expression<string> | undefined;\n}\n\nexport const userAssignedIdentityShape: FlatModelShape = createFlatModelShape({\n  clientId: { armPath: [\"clientId\"], value: createStringShape(), readOnly: true },\n  principalId: { armPath: [\"principalId\"], value: createStringShape(), readOnly: true },\n});\n\n/**\n * Properties of the vault access policy\n */\nexport interface VaultAccessPolicyProperties {\n  /**\n   * An array of 0 to 16 identities that have access to the key vault. All identities in the array must use the same tenant ID as the key vault's tenant ID.\n   */\n  accessPolicies: AccessPolicyEntry[];\n}\n\n/**\n * Input type for Properties of the vault access policy\n */\nexport interface VaultAccessPolicyPropertiesInput extends InputOf<VaultAccessPolicyProperties> {\n  /**\n   * An array of 0 to 16 identities that have access to the key vault. All identities in the array must use the same tenant ID as the key vault's tenant ID.\n   */\n  accessPolicies: InputArray<AccessPolicyEntryInput, AccessPolicyEntry[]>;\n}\n\n/**\n * View type for Properties of the vault access policy\n */\nexport type VaultAccessPolicyPropertiesView = VaultAccessPolicyPropertiesInput;\n\nexport const vaultAccessPolicyPropertiesShape: FlatModelShape = createFlatModelShape({\n  accessPolicies: {\n    armPath: [\"accessPolicies\"],\n    value: createArrayShape(createDeferredShape(() => accessPolicyEntryShape)),\n  },\n});\n\n/**\n * Properties of the vault\n */\nexport interface VaultProperties {\n  /**\n   * An array of 0 to 1024 identities that have access to the key vault. All identities in the array must use the same tenant ID as the key vault's tenant ID. When `createMode` is set to `recover`, access policies are not required. Otherwise, access policies are required.\n   */\n  accessPolicies?: AccessPolicyEntry[];\n  /**\n   * The vault's create mode to indicate whether the vault need to be recovered or not.\n   */\n  createMode?: CreateMode;\n  /**\n   * Property to specify whether Azure Virtual Machines are permitted to retrieve certificates stored as secrets from the key vault.\n   */\n  enabledForDeployment?: boolean;\n  /**\n   * Property to specify whether Azure Disk Encryption is permitted to retrieve secrets from the vault and unwrap keys.\n   */\n  enabledForDiskEncryption?: boolean;\n  /**\n   * Property to specify whether Azure Resource Manager is permitted to retrieve secrets from the key vault.\n   */\n  enabledForTemplateDeployment?: boolean;\n  /**\n   * Property specifying whether protection against purge is enabled for this vault. Setting this property to true activates protection against purge for this vault and its content - only the Key Vault service may initiate a hard, irrecoverable deletion. The setting is effective only if soft delete is also enabled. Enabling this functionality is irreversible - that is, the property does not accept false as its value.\n   */\n  enablePurgeProtection?: boolean;\n  /**\n   * Property that controls how data actions are authorized. When true, the key vault will use Role Based Access Control (RBAC) for authorization of data actions, and the access policies specified in vault properties will be ignored. When false, the key vault will use the access policies specified in vault properties, and any policy stored on Azure Resource Manager will be ignored. If null or not specified, the vault is created with the default value of false. Note that management actions are always authorized with RBAC.\n   */\n  enableRbacAuthorization?: boolean;\n  /**\n   * Property to specify whether the 'soft delete' functionality is enabled for this key vault. If it's not set to any value(true or false) when creating new key vault, it will be set to true by default. Once set to true, it cannot be reverted to false.\n   */\n  enableSoftDelete?: boolean;\n  /**\n   * The resource id of HSM Pool.\n   */\n  hsmPoolResourceId?: string;\n  /**\n   * Rules governing the accessibility of the key vault from specific network locations.\n   */\n  networkAcls?: NetworkRuleSet;\n  /**\n   * List of private endpoint connections associated with the key vault.\n   */\n  privateEndpointConnections?: PrivateEndpointConnectionItem[];\n  /**\n   * Property to specify whether the vault will accept traffic from public internet. If set to 'disabled' all traffic except private endpoint traffic and that that originates from trusted services will be blocked. This will override the set firewall rules, meaning that even if the firewall rules are present we will not honor the rules.\n   */\n  publicNetworkAccess?: string;\n  /**\n   * SKU details\n   */\n  sku: Sku;\n  /**\n   * softDelete data retention days. It accepts \\>=7 and \\<=90.\n   */\n  softDeleteRetentionInDays?: number;\n  /**\n   * The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault.\n   */\n  tenantId: string;\n  /**\n   * The URI of the vault for performing operations on keys and secrets.\n   */\n  vaultUri?: string;\n}\n\n/**\n * Input type for Properties of the vault\n */\nexport interface VaultPropertiesInput extends InputOf<VaultProperties> {\n  /**\n   * An array of 0 to 1024 identities that have access to the key vault. All identities in the array must use the same tenant ID as the key vault's tenant ID. When `createMode` is set to `recover`, access policies are not required. Otherwise, access policies are required.\n   */\n  accessPolicies?: InputArray<AccessPolicyEntryInput, AccessPolicyEntry[]> | undefined;\n  /**\n   * The vault's create mode to indicate whether the vault need to be recovered or not.\n   */\n  createMode?: ExpressionOrValue<CreateMode> | undefined;\n  /**\n   * Property to specify whether Azure Virtual Machines are permitted to retrieve certificates stored as secrets from the key vault.\n   */\n  enabledForDeployment?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Property to specify whether Azure Disk Encryption is permitted to retrieve secrets from the vault and unwrap keys.\n   */\n  enabledForDiskEncryption?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Property to specify whether Azure Resource Manager is permitted to retrieve secrets from the key vault.\n   */\n  enabledForTemplateDeployment?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Property specifying whether protection against purge is enabled for this vault. Setting this property to true activates protection against purge for this vault and its content - only the Key Vault service may initiate a hard, irrecoverable deletion. The setting is effective only if soft delete is also enabled. Enabling this functionality is irreversible - that is, the property does not accept false as its value.\n   */\n  enablePurgeProtection?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Property that controls how data actions are authorized. When true, the key vault will use Role Based Access Control (RBAC) for authorization of data actions, and the access policies specified in vault properties will be ignored. When false, the key vault will use the access policies specified in vault properties, and any policy stored on Azure Resource Manager will be ignored. If null or not specified, the vault is created with the default value of false. Note that management actions are always authorized with RBAC.\n   */\n  enableRbacAuthorization?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Property to specify whether the 'soft delete' functionality is enabled for this key vault. If it's not set to any value(true or false) when creating new key vault, it will be set to true by default. Once set to true, it cannot be reverted to false.\n   */\n  enableSoftDelete?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Rules governing the accessibility of the key vault from specific network locations.\n   */\n  networkAcls?: NetworkRuleSetInput | undefined;\n  /**\n   * Property to specify whether the vault will accept traffic from public internet. If set to 'disabled' all traffic except private endpoint traffic and that that originates from trusted services will be blocked. This will override the set firewall rules, meaning that even if the firewall rules are present we will not honor the rules.\n   */\n  publicNetworkAccess?: ExpressionOrValue<string> | undefined;\n  /**\n   * SKU details\n   */\n  sku: SkuInput;\n  /**\n   * softDelete data retention days. It accepts \\>=7 and \\<=90.\n   */\n  softDeleteRetentionInDays?: ExpressionOrValue<number> | undefined;\n  /**\n   * The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault.\n   */\n  tenantId: ExpressionOrValue<string>;\n  /**\n   * The URI of the vault for performing operations on keys and secrets.\n   */\n  vaultUri?: ExpressionOrValue<string> | undefined;\n}\n\n/**\n * View type for Properties of the vault\n */\nexport interface VaultPropertiesView extends InputOf<VaultProperties> {\n  /**\n   * An array of 0 to 1024 identities that have access to the key vault. All identities in the array must use the same tenant ID as the key vault's tenant ID. When `createMode` is set to `recover`, access policies are not required. Otherwise, access policies are required.\n   */\n  accessPolicies?: InputArray<AccessPolicyEntryView, AccessPolicyEntry[]> | undefined;\n  /**\n   * The vault's create mode to indicate whether the vault need to be recovered or not.\n   */\n  createMode?: ExpressionOrValue<CreateMode> | undefined;\n  /**\n   * Property to specify whether Azure Virtual Machines are permitted to retrieve certificates stored as secrets from the key vault.\n   */\n  enabledForDeployment?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Property to specify whether Azure Disk Encryption is permitted to retrieve secrets from the vault and unwrap keys.\n   */\n  enabledForDiskEncryption?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Property to specify whether Azure Resource Manager is permitted to retrieve secrets from the key vault.\n   */\n  enabledForTemplateDeployment?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Property specifying whether protection against purge is enabled for this vault. Setting this property to true activates protection against purge for this vault and its content - only the Key Vault service may initiate a hard, irrecoverable deletion. The setting is effective only if soft delete is also enabled. Enabling this functionality is irreversible - that is, the property does not accept false as its value.\n   */\n  enablePurgeProtection?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Property that controls how data actions are authorized. When true, the key vault will use Role Based Access Control (RBAC) for authorization of data actions, and the access policies specified in vault properties will be ignored. When false, the key vault will use the access policies specified in vault properties, and any policy stored on Azure Resource Manager will be ignored. If null or not specified, the vault is created with the default value of false. Note that management actions are always authorized with RBAC.\n   */\n  enableRbacAuthorization?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Property to specify whether the 'soft delete' functionality is enabled for this key vault. If it's not set to any value(true or false) when creating new key vault, it will be set to true by default. Once set to true, it cannot be reverted to false.\n   */\n  enableSoftDelete?: ExpressionOrValue<boolean> | undefined;\n  /**\n   * Read-only output: The resource id of HSM Pool.\n   */\n  readonly hsmPoolResourceId?: Expression<string> | undefined;\n  /**\n   * Rules governing the accessibility of the key vault from specific network locations.\n   */\n  networkAcls?: NetworkRuleSetView | undefined;\n  /**\n   * Read-only output: List of private endpoint connections associated with the key vault.\n   */\n  readonly privateEndpointConnections?: Expression<PrivateEndpointConnectionItem[]> | undefined;\n  /**\n   * Property to specify whether the vault will accept traffic from public internet. If set to 'disabled' all traffic except private endpoint traffic and that that originates from trusted services will be blocked. This will override the set firewall rules, meaning that even if the firewall rules are present we will not honor the rules.\n   */\n  publicNetworkAccess?: ExpressionOrValue<string> | undefined;\n  /**\n   * SKU details\n   */\n  sku: SkuView;\n  /**\n   * softDelete data retention days. It accepts \\>=7 and \\<=90.\n   */\n  softDeleteRetentionInDays?: ExpressionOrValue<number> | undefined;\n  /**\n   * The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault.\n   */\n  tenantId: ExpressionOrValue<string>;\n  /**\n   * The URI of the vault for performing operations on keys and secrets.\n   */\n  vaultUri?: ExpressionOrValue<string> | undefined;\n}\n\nexport const vaultPropertiesShape: FlatModelShape = createFlatModelShape({\n  accessPolicies: {\n    armPath: [\"accessPolicies\"],\n    value: createArrayShape(createDeferredShape(() => accessPolicyEntryShape)),\n  },\n  createMode: { armPath: [\"createMode\"], value: createEnumShape() },\n  enabledForDeployment: { armPath: [\"enabledForDeployment\"], value: createBooleanShape() },\n  enabledForDiskEncryption: { armPath: [\"enabledForDiskEncryption\"], value: createBooleanShape() },\n  enabledForTemplateDeployment: {\n    armPath: [\"enabledForTemplateDeployment\"],\n    value: createBooleanShape(),\n  },\n  enablePurgeProtection: { armPath: [\"enablePurgeProtection\"], value: createBooleanShape() },\n  enableRbacAuthorization: { armPath: [\"enableRbacAuthorization\"], value: createBooleanShape() },\n  enableSoftDelete: { armPath: [\"enableSoftDelete\"], value: createBooleanShape() },\n  hsmPoolResourceId: { armPath: [\"hsmPoolResourceId\"], value: createStringShape(), readOnly: true },\n  networkAcls: { armPath: [\"networkAcls\"], value: createDeferredShape(() => networkRuleSetShape) },\n  privateEndpointConnections: {\n    armPath: [\"privateEndpointConnections\"],\n    value: createArrayShape(createDeferredShape(() => privateEndpointConnectionItemShape)),\n    readOnly: true,\n  },\n  publicNetworkAccess: { armPath: [\"publicNetworkAccess\"], value: createStringShape() },\n  sku: { armPath: [\"sku\"], value: createDeferredShape(() => skuShape) },\n  softDeleteRetentionInDays: { armPath: [\"softDeleteRetentionInDays\"], value: createNumberShape() },\n  tenantId: { armPath: [\"tenantId\"], value: createStringShape() },\n  vaultUri: { armPath: [\"vaultUri\"], value: createStringShape() },\n});\n\n/**\n * A rule governing the accessibility of a vault from a specific virtual network.\n */\nexport interface VirtualNetworkRule {\n  /**\n   * Full resource id of a vnet subnet, such as '/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/virtualNetworks/test-vnet/subnets/subnet1'.\n   */\n  id: string;\n  /**\n   * Property to specify whether NRP will ignore the check if parent subnet has serviceEndpoints configured.\n   */\n  ignoreMissingVnetServiceEndpoint?: boolean;\n}\n\n/**\n * Input type for A rule governing the accessibility of a vault from a specific virtual network.\n */\nexport interface VirtualNetworkRuleInput extends InputOf<VirtualNetworkRule> {\n  /**\n   * Full resource id of a vnet subnet, such as '/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/virtualNetworks/test-vnet/subnets/subnet1'.\n   */\n  id: ExpressionOrValue<string>;\n  /**\n   * Property to specify whether NRP will ignore the check if parent subnet has serviceEndpoints configured.\n   */\n  ignoreMissingVnetServiceEndpoint?: ExpressionOrValue<boolean> | undefined;\n}\n\n/**\n * View type for A rule governing the accessibility of a vault from a specific virtual network.\n */\nexport type VirtualNetworkRuleView = VirtualNetworkRuleInput;\n\nexport const virtualNetworkRuleShape: FlatModelShape = createFlatModelShape({\n  id: { armPath: [\"id\"], value: createStringShape() },\n  ignoreMissingVnetServiceEndpoint: {\n    armPath: [\"ignoreMissingVnetServiceEndpoint\"],\n    value: createBooleanShape(),\n  },\n});\n\n/**\n * A message indicating if changes on the service provider require any updates on the consumer.\n *\n * Known values:\n *\n * - `\"None\"`\n */\nexport type ActionsRequired = string;\n\n/**\n * Activation Status\n *\n * Known values:\n *\n * - `\"Active\"`: The managed HSM Pool is active.\n *\n * - `\"NotActivated\"`: The managed HSM Pool is not yet activated.\n *\n * - `\"Unknown\"`: An unknown error occurred while activating managed hsm.\n *\n * - `\"Failed\"`: Failed to activate managed hsm.\n */\nexport type ActivationStatus = string;\n\n/**\n * Known values:\n *\n * - `\"all\"`\n *\n * - `\"get\"`\n *\n * - `\"list\"`\n *\n * - `\"delete\"`\n *\n * - `\"create\"`\n *\n * - `\"import\"`\n *\n * - `\"update\"`\n *\n * - `\"managecontacts\"`\n *\n * - `\"getissuers\"`\n *\n * - `\"listissuers\"`\n *\n * - `\"setissuers\"`\n *\n * - `\"deleteissuers\"`\n *\n * - `\"manageissuers\"`\n *\n * - `\"recover\"`\n *\n * - `\"purge\"`\n *\n * - `\"backup\"`\n *\n * - `\"restore\"`\n */\nexport type CertificatePermissions = string;\n\n/**\n * The deletion recovery level currently in effect for the object. If it contains 'Purgeable', then the object can be permanently deleted by a privileged user; otherwise, only the system can purge the object at the end of the retention interval.\n *\n * Known values:\n *\n * - `\"Purgeable\"`\n *\n * - `\"Recoverable+Purgeable\"`\n *\n * - `\"Recoverable\"`\n *\n * - `\"Recoverable+ProtectedSubscription\"`\n */\nexport type DeletionRecoveryLevel = string;\n\n/**\n * The elliptic curve name. For valid values, see JsonWebKeyCurveName. Default for EC and EC-HSM keys is P-256\n *\n * Known values:\n *\n * - `\"P-256\"`\n *\n * - `\"P-384\"`\n *\n * - `\"P-521\"`\n *\n * - `\"P-256K\"`\n */\nexport type JsonWebKeyCurveName = string;\n\n/**\n * The permitted JSON web key operations of the key. For more information, see JsonWebKeyOperation.\n *\n * Known values:\n *\n * - `\"encrypt\"`\n *\n * - `\"decrypt\"`\n *\n * - `\"sign\"`\n *\n * - `\"verify\"`\n *\n * - `\"wrapKey\"`\n *\n * - `\"unwrapKey\"`\n *\n * - `\"import\"`\n *\n * - `\"release\"`\n */\nexport type JsonWebKeyOperation = string;\n\n/**\n * The type of the key. For valid values, see JsonWebKeyType.\n *\n * Known values:\n *\n * - `\"EC\"`\n *\n * - `\"EC-HSM\"`\n *\n * - `\"RSA\"`\n *\n * - `\"RSA-HSM\"`\n */\nexport type JsonWebKeyType = string;\n\n/**\n * Known values:\n *\n * - `\"all\"`\n *\n * - `\"encrypt\"`\n *\n * - `\"decrypt\"`\n *\n * - `\"wrapKey\"`\n *\n * - `\"unwrapKey\"`\n *\n * - `\"sign\"`\n *\n * - `\"verify\"`\n *\n * - `\"get\"`\n *\n * - `\"list\"`\n *\n * - `\"create\"`\n *\n * - `\"update\"`\n *\n * - `\"import\"`\n *\n * - `\"delete\"`\n *\n * - `\"backup\"`\n *\n * - `\"restore\"`\n *\n * - `\"recover\"`\n *\n * - `\"purge\"`\n *\n * - `\"release\"`\n *\n * - `\"rotate\"`\n *\n * - `\"getrotationpolicy\"`\n *\n * - `\"setrotationpolicy\"`\n */\nexport type KeyPermissions = string;\n\n/**\n * SKU Family of the managed HSM Pool\n *\n * Known values:\n *\n * - `\"B\"`\n *\n * - `\"C\"`\n */\nexport type ManagedHsmSkuFamily = string;\n\n/**\n * Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).\n *\n * Known values:\n *\n * - `\"None\"`: No managed identity.\n *\n * - `\"SystemAssigned\"`: System assigned managed identity.\n *\n * - `\"UserAssigned\"`: User assigned managed identity.\n *\n * - `\"SystemAssigned,UserAssigned\"`: System and user assigned managed identity.\n */\nexport type ManagedServiceIdentityType = string;\n\n/**\n * The default action when no rule from ipRules and from virtualNetworkRules match. This is only used after the bypass property has been evaluated.\n *\n * Known values:\n *\n * - `\"Allow\"`\n *\n * - `\"Deny\"`\n */\nexport type NetworkRuleAction = string;\n\n/**\n * Tells what traffic can bypass network rules. This can be 'AzureServices' or 'None'. If not specified the default is 'AzureServices'.\n *\n * Known values:\n *\n * - `\"AzureServices\"`\n *\n * - `\"None\"`\n */\nexport type NetworkRuleBypassOptions = string;\n\n/**\n * The private endpoint connection status.\n *\n * Known values:\n *\n * - `\"Pending\"`\n *\n * - `\"Approved\"`\n *\n * - `\"Rejected\"`\n *\n * - `\"Disconnected\"`\n */\nexport type PrivateEndpointServiceConnectionStatus = string;\n\n/**\n * Control permission to the managed HSM from public networks.\n *\n * Known values:\n *\n * - `\"Enabled\"`\n *\n * - `\"Disabled\"`\n */\nexport type PublicNetworkAccess = string;\n\n/**\n * Known values:\n *\n * - `\"all\"`\n *\n * - `\"get\"`\n *\n * - `\"list\"`\n *\n * - `\"set\"`\n *\n * - `\"delete\"`\n *\n * - `\"backup\"`\n *\n * - `\"restore\"`\n *\n * - `\"recover\"`\n *\n * - `\"purge\"`\n */\nexport type SecretPermissions = string;\n\n/**\n * SKU family name\n *\n * Known values:\n *\n * - `\"A\"`\n */\nexport type SkuFamily = string;\n\n/**\n * Known values:\n *\n * - `\"all\"`\n *\n * - `\"get\"`\n *\n * - `\"list\"`\n *\n * - `\"delete\"`\n *\n * - `\"set\"`\n *\n * - `\"update\"`\n *\n * - `\"regeneratekey\"`\n *\n * - `\"recover\"`\n *\n * - `\"purge\"`\n *\n * - `\"backup\"`\n *\n * - `\"restore\"`\n *\n * - `\"setsas\"`\n *\n * - `\"listsas\"`\n *\n * - `\"getsas\"`\n *\n * - `\"deletesas\"`\n */\nexport type StoragePermissions = string;\n"]}

package/package.json

@@ -0,0 +1,105 @@
+{
+  "name": "@azure/provisioning-keyvault",
+  "version": "1.0.0-beta.1",
+  "description": "Azure Provisioning constructs for Azure Key Vault",
+  "sdk-type": "provisioning",
+  "autoPublish": false,
+  "type": "module",
+  "main": "./dist/commonjs/index.js",
+  "module": "./dist/esm/index.js",
+  "types": "./dist/commonjs/index.d.ts",
+  "browser": "./dist/browser/index.js",
+  "exports": {
+    "./package.json": "./package.json",
+    ".": {
+      "browser": {
+        "types": "./dist/browser/index.d.ts",
+        "default": "./dist/browser/index.js"
+      },
+      "import": {
+        "types": "./dist/esm/index.d.ts",
+        "default": "./dist/esm/index.js"
+      },
+      "require": {
+        "types": "./dist/commonjs/index.d.ts",
+        "default": "./dist/commonjs/index.js"
+      }
+    },
+    "./types": {
+      "browser": {
+        "types": "./dist/browser/types.d.ts",
+        "default": "./dist/browser/types.js"
+      },
+      "import": {
+        "types": "./dist/esm/types.d.ts",
+        "default": "./dist/esm/types.js"
+      },
+      "require": {
+        "types": "./dist/commonjs/types.d.ts",
+        "default": "./dist/commonjs/types.js"
+      }
+    }
+  },
+  "files": [
+    "dist/",
+    "LICENSE",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "keywords": [
+    "azure",
+    "cloud",
+    "infrastructure",
+    "keyvault",
+    "provisioning"
+  ],
+  "sideEffects": true,
+  "author": "Microsoft Corporation",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Azure/azure-sdk-for-js",
+    "directory": "sdk/keyvault/provisioning-keyvault"
+  },
+  "bugs": {
+    "url": "https://github.com/Azure/azure-sdk-for-js/issues"
+  },
+  "homepage": "https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/keyvault/provisioning-keyvault/README.md",
+  "prettier": "@azure/eslint-plugin-azure-sdk/prettier.json",
+  "dependencies": {
+    "@azure/provisioning-core": "1.0.0-beta.1",
+    "tslib": "^2.8.1"
+  },
+  "devDependencies": {
+    "@azure/dev-tool": "^1.0.0",
+    "@azure/eslint-plugin-azure-sdk": "^3.0.0",
+    "@types/node": "^22.0.0",
+    "@vitest/browser-playwright": "^5.0.0",
+    "@vitest/coverage-istanbul": "^5.0.0",
+    "eslint": "^10.8.0",
+    "playwright": "^1.60.0",
+    "prettier": "^3.9.1",
+    "rimraf": "^6.1.0",
+    "typescript": "~6.0.2",
+    "vitest": "^5.0.0"
+  },
+  "scripts": {
+    "build": "npm run clean && dev-tool run build-package && dev-tool run extract-api",
+    "build:samples": "echo Skipped.",
+    "check-format": "prettier --list-different --config ../../../.prettierrc.json --ignore-path ../../../.prettierignore \"src/**/*.{ts,cts,mts}\" \"test/**/*.{ts,cts,mts}\" \"*.{js,mjs,cjs,json}\" \"config/*.json\"",
+    "clean": "rimraf --glob dist dist-* temp types *.tgz *.log",
+    "execute:samples": "echo skipped",
+    "extract-api": "dev-tool run build-package && dev-tool run extract-api",
+    "format": "prettier --write --config ../../../.prettierrc.json --ignore-path ../../../.prettierignore \"src/**/*.{ts,cts,mts}\" \"test/**/*.{ts,cts,mts}\" \"*.{js,mjs,cjs,json}\" \"config/*.json\"",
+    "lint": "eslint package.json src test",
+    "lint:fix": "eslint package.json src test --fix --fix-type [problem,suggestion]",
+    "pack": "pnpm pack 2>&1",
+    "test": "tsc -b --noEmit && npm run test:node && npm run test:browser",
+    "test:browser": "dev-tool run test:vitest --no-test-proxy --browser",
+    "test:node": "dev-tool run test:vitest --no-test-proxy",
+    "update-snippets": "dev-tool run update-snippets"
+  }
+}