@gradientedge/cdk-utils 10.1.0 → 10.2.0

package/dist/src/lib/azure/common/tagging.js

@@ -1,32 +1,78 @@
-import { TerraformResource } from 'cdktf';
+import * as pulumi from '@pulumi/pulumi';
 import { RESOURCES_TO_EXCLUDE_TAGS } from './constants.js';
-function isTaggableConstruct(node) {
-    return 'tags' in node && 'tagsInput' in node;
-}
-export class TagsAddingAspect {
-    tagsToAdd;
-    tagsToIgnore;
-    constructor(tagsToAdd, tagsToIgnore = []) {
-        this.tagsToAdd = tagsToAdd;
-        this.tagsToIgnore = tagsToIgnore;
+/**
+ * @summary Check if a resource type is taggable
+ * @param resourceType The Pulumi resource type (e.g., 'azure-native:resources:ResourceGroup')
+ * @returns True if the resource supports tags, false otherwise
+ */
+export function isTaggableResource(resourceType) {
+    // Extract the resource name from the type (e.g., 'ResourceGroup' from 'azure-native:resources:ResourceGroup')
+    const resourceName = resourceType.split(':').pop() || '';
+    // Check if this resource is in the exclusion list
+    if (RESOURCES_TO_EXCLUDE_TAGS.has(resourceName)) {
+        return false;
     }
-    // This method is called on every Construct within the specified scope (resources, data sources, etc.).
-    visit(node) {
-        // We need to take the input value to not create a circular reference
-        if (!isTaggableConstruct(node)) {
-            return;
+    // Most Azure resources support tags, but we can add more specific checks here if needed
+    return true;
+}
+/**
+ * @summary Register a stack transformation to automatically apply tags to Azure resources
+ * @param defaultTags The default tags to apply to all resources
+ * @param tagsToIgnore Optional list of tag keys to ignore in lifecycle management
+ * @example
+ * ```typescript
+ * registerTagTransformation({ environment: 'production', team: 'platform' })
+ * ```
+ */
+export function registerTagTransformation(defaultTags, tagsToIgnore = []) {
+    pulumi.runtime.registerStackTransformation((args) => {
+        // Only process taggable resources
+        if (!isTaggableResource(args.type)) {
+            return undefined;
         }
-        // Determine if the resource excludes `tags`
-        if (RESOURCES_TO_EXCLUDE_TAGS.has(node.constructor.name)) {
-            node.tags = undefined; // Completely remove tags for this resource
-            return;
+        // Check if the resource has a tags property
+        if (!args.props || typeof args.props !== 'object') {
+            return undefined;
         }
-        const currentTags = node.tagsInput || {};
-        node.tags = { ...this.tagsToAdd, ...currentTags };
-        // Add ignore_changes overrides for selected tags
-        if (node instanceof TerraformResource && this.tagsToIgnore.length > 0) {
-            const ignoreList = this.tagsToIgnore.map(tag => `tags["${tag}"]`);
-            node.addOverride('lifecycle.ignore_changes', ignoreList);
+        // Merge default tags with resource-specific tags (resource tags take precedence)
+        const currentTags = args.props.tags || {};
+        const mergedTags = { ...defaultTags, ...currentTags };
+        // Apply the merged tags
+        const newProps = {
+            ...args.props,
+            tags: mergedTags,
+        };
+        // Handle tag ignores via Pulumi's ignoreChanges option
+        let newOpts = args.opts;
+        if (tagsToIgnore.length > 0) {
+            const ignoreChanges = tagsToIgnore.map(tag => `tags.${tag}`);
+            newOpts = {
+                ...args.opts,
+                ignoreChanges: [...(args.opts?.ignoreChanges || []), ...ignoreChanges],
+            };
         }
-    }
+        return {
+            props: newProps,
+            opts: newOpts,
+        };
+    });
+}
+/**
+ * @summary Helper function to apply tags to a specific resource's properties
+ * @param props The resource properties
+ * @param defaultTags The default tags to merge with existing tags
+ * @returns The properties with merged tags
+ * @example
+ * ```typescript
+ * const resourceGroupProps = applyTags(props, { environment: 'dev' })
+ * ```
+ */
+export function applyTags(props, defaultTags) {
+    return {
+        ...props,
+        tags: {
+            ...defaultTags,
+            ...(props.tags || {}),
+        },
+    };
 }

package/dist/src/lib/azure/common/types.d.ts

@@ -1,10 +1,10 @@
-import { AzurermProviderConfig } from '@cdktf/provider-azurerm/lib/provider/index.js';
-import { AzurermBackendConfig } from 'cdktf';
 import { BaseProps } from '../../common/index.js';
 import { AzureRemoteBackend } from './constants.js';
 /**
+ * @interface CommonAzureStackProps
+ * @description Common properties for Azure stack configuration using Pulumi
  */
-export interface CommonAzureStackProps extends BaseProps, AzurermProviderConfig {
+export interface CommonAzureStackProps extends BaseProps {
     resourceGroupName?: string;
     remoteBackend?: AzureRemoteBackendProps;
     globalPrefix?: string;
@@ -18,9 +18,24 @@ export interface CommonAzureStackProps extends BaseProps, AzurermProviderConfig
     defaultTags?: {
         [key: string]: string;
     };
+    subscriptionId?: string;
+    tenantId?: string;
+    clientId?: string;
+    clientSecret?: string;
+    environment?: string;
+    useOidc?: boolean;
+    oidcRequestToken?: string;
+    oidcRequestUrl?: string;
+    useMsi?: boolean;
+    msiEndpoint?: string;
 }
-export interface AzureRemoteBackendProps extends AzurermBackendConfig {
+export interface AzureRemoteBackendProps {
     type: AzureRemoteBackend;
+    storageAccountName?: string;
+    containerName?: string;
+    resourceGroupName?: string;
+    subscriptionId?: string;
+    key?: string;
 }
 export interface AzureResourceNameFormatterProps {
     exclude?: boolean;

package/dist/src/lib/azure/services/api-management/main.d.ts

@@ -1,23 +1,17 @@
-import { ApiManagementApi } from '@cdktf/provider-azurerm/lib/api-management-api/index.js';
-import { ApiManagementBackend } from '@cdktf/provider-azurerm/lib/api-management-backend/index.js';
-import { ApiManagementCustomDomain } from '@cdktf/provider-azurerm/lib/api-management-custom-domain/index.js';
-import { ApiManagementLoggerApplicationInsights } from '@cdktf/provider-azurerm/lib/api-management-logger/index.js';
-import { ApiManagement } from '@cdktf/provider-azurerm/lib/api-management/index.js';
-import { DataAzurermApiManagement, DataAzurermApiManagementConfig } from '@cdktf/provider-azurerm/lib/data-azurerm-api-management/index.js';
-import { ManagedRedis } from '@cdktf/provider-azurerm/lib/managed-redis/index.js';
+import * as redis from '@pulumi/azure-native/redis/index.js';
 import { CommonAzureConstruct } from '../../common/index.js';
-import { ApiManagementApiProps, ApiManagementBackendProps, ApiManagementCustomDomainProps, ApiManagementProps } from './types.js';
+import { ApiManagementApiProps, ApiManagementBackendProps, ApiManagementCustomDomainProps, ApiManagementProps, ResolveApiManagementProps } from './types.js';
 /**
- * @classdesc Provides operations on Azure Api Management
+ * @classdesc Provides operations on Azure API Management using Pulumi
  * - A new instance of this class is injected into {@link CommonAzureConstruct} constructor.
  * - If a custom construct extends {@link CommonAzureConstruct}, an instance is available within the context.
  * @example
- * ```
+ * ```typescript
  * import { CommonAzureConstruct, CommonAzureStackProps } from '@gradientedge/cdk-utils'
  *
  * class CustomConstruct extends CommonAzureConstruct {
- *   constructor(parent: Construct, id: string, props: CommonAzureStackProps) {
- *     super(parent, id, props)
+ *   constructor(name: string, props: CommonAzureStackProps) {
+ *     super(name, props)
  *     this.props = props
  *     this.apiManagementManager.createApiManagement('MyApiManagement', this, props)
  *   }
@@ -26,43 +20,46 @@ import { ApiManagementApiProps, ApiManagementBackendProps, ApiManagementCustomDo
  */
 export declare class AzureApiManagementManager {
     /**
-     * @summary Method to create a new api management
+     * @summary Method to create a new API Management service
      * @param id scoped id of the resource
      * @param scope scope in which this resource is defined
-     * @param props api management properties
-     * @see [CDKTF Api management Module]{@link https://github.com/cdktf/cdktf-provider-azurerm/blob/main/docs/apiManagement.typescript.md}
+     * @param props API Management properties
+     * @param applicationInsightsKey Optional Application Insights instrumentation key for logging
+     * @param externalRedisCache Optional external Redis cache for API Management caching
+     * @see [Pulumi Azure Native API Management]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/apimanagement/apimanagementservice/}
      */
-    createApiManagement(id: string, scope: CommonAzureConstruct, props: ApiManagementProps, applicationInsightsKey?: ApiManagementLoggerApplicationInsights['instrumentationKey'], externalRedisCache?: ManagedRedis): ApiManagement;
+    createApiManagementService(id: string, scope: CommonAzureConstruct, props: ApiManagementProps, applicationInsightsKey?: string, externalRedisCache?: redis.Redis): import("@pulumi/azure-native/apimanagement/apiManagementService.js").ApiManagementService;
     /**
-     * @summary Method to resolve an api management
+     * @summary Method to resolve an existing API Management service
      * @param id scoped id of the resource
      * @param scope scope in which this resource is defined
-     * @param props api management properties
-     * @see [CDKTF Api management Module]{@link https://github.com/cdktf/cdktf-provider-azurerm/blob/main/docs/apiManagement.typescript.md}
+     * @param props API Management lookup properties
+     * @see [Pulumi Azure Native API Management Lookup]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/apimanagement/apimanagementservice/}
      */
-    resolveApiManagement(id: string, scope: CommonAzureConstruct, props: DataAzurermApiManagementConfig): DataAzurermApiManagement;
+    resolveApiManagementService(id: string, scope: CommonAzureConstruct, props: ResolveApiManagementProps): import("@pulumi/pulumi").Output<import("@pulumi/azure-native/apimanagement/getApiManagementService.js").GetApiManagementServiceResult>;
     /**
-     * @summary Method to create a new api management backend
+     * @summary Method to create a new API Management backend
      * @param id scoped id of the resource
      * @param scope scope in which this resource is defined
-     * @param props api management backend properties
-     * @see [CDKTF Api management Backend Module]{@link https://github.com/cdktf/cdktf-provider-azurerm/blob/main/docs/ApiManagementBackend.typescript.md}
+     * @param props API Management backend properties
+     * @see [Pulumi Azure Native API Management Backend]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/apimanagement/backend/}
      */
-    createApiManagementBackend(id: string, scope: CommonAzureConstruct, props: ApiManagementBackendProps): ApiManagementBackend;
+    createBackend(id: string, scope: CommonAzureConstruct, props: ApiManagementBackendProps): import("@pulumi/azure-native/apimanagement/backend.js").Backend;
     /**
-     * @summary Method to create a new api management api
+     * @summary Method to create a new API Management API with operations and policies
      * @param id scoped id of the resource
      * @param scope scope in which this resource is defined
-     * @param props api management api properties
-     * @see [CDKTF Api management Api Module]{@link https://github.com/cdktf/cdktf-provider-azurerm/blob/main/docs/ApiManagementApi.typescript.md}
+     * @param props API Management API properties
+     * @see [Pulumi Azure Native API Management API]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/apimanagement/api/}
      */
-    createApiManagementApi(id: string, scope: CommonAzureConstruct, props: ApiManagementApiProps): ApiManagementApi;
+    createApi(id: string, scope: CommonAzureConstruct, props: ApiManagementApiProps): import("@pulumi/azure-native/apimanagement/api.js").Api;
     /**
-     * @summary Method to create a new api management custom domain
+     * @summary Method to create a new API Management custom domain
      * @param id scoped id of the resource
      * @param scope scope in which this resource is defined
-     * @param props api management custom domain properties
-     * @see [CDKTF Api management Custom Domain Module]{@link https://github.com/cdktf/cdktf-provider-azurerm/blob/main/docs/createApiManagementCustomDomain.typescript.md}
+     * @param props API Management custom domain properties
+     * @note In Pulumi Azure Native, custom domains are configured as part of the API Management service resource,
+     * not as a separate resource. Use the hostnameConfigurations property when creating the service.
      */
-    createApiManagementCustomDomain(id: string, scope: CommonAzureConstruct, props: ApiManagementCustomDomainProps): ApiManagementCustomDomain;
+    createApiManagementCustomDomain(id: string, scope: CommonAzureConstruct, props: ApiManagementCustomDomainProps): void;
 }

package/dist/src/lib/azure/services/api-management/main.js

@@ -1,26 +1,16 @@
-import { ApiManagementApiOperationPolicy } from '@cdktf/provider-azurerm/lib/api-management-api-operation-policy/index.js';
-import { ApiManagementApiOperation } from '@cdktf/provider-azurerm/lib/api-management-api-operation/index.js';
-import { ApiManagementApi } from '@cdktf/provider-azurerm/lib/api-management-api/index.js';
-import { ApiManagementBackend } from '@cdktf/provider-azurerm/lib/api-management-backend/index.js';
-import { ApiManagementCustomDomain } from '@cdktf/provider-azurerm/lib/api-management-custom-domain/index.js';
-import { ApiManagementLogger, } from '@cdktf/provider-azurerm/lib/api-management-logger/index.js';
-import { ApiManagementRedisCache } from '@cdktf/provider-azurerm/lib/api-management-redis-cache/index.js';
-import { ApiManagement } from '@cdktf/provider-azurerm/lib/api-management/index.js';
-import { DataAzurermApiManagement, } from '@cdktf/provider-azurerm/lib/data-azurerm-api-management/index.js';
-import { DataAzurermResourceGroup } from '@cdktf/provider-azurerm/lib/data-azurerm-resource-group/index.js';
+import { Api, ApiManagementService, ApiOperation, ApiOperationPolicy, Backend, BackendProtocol, Cache, getApiManagementServiceOutput, Logger, LoggerType, PolicyContentFormat, Protocol, } from '@pulumi/azure-native/apimanagement/index.js';
 import _ from 'lodash';
-import { createAzureTfOutput } from '../../utils/index.js';
 /**
- * @classdesc Provides operations on Azure Api Management
+ * @classdesc Provides operations on Azure API Management using Pulumi
  * - A new instance of this class is injected into {@link CommonAzureConstruct} constructor.
  * - If a custom construct extends {@link CommonAzureConstruct}, an instance is available within the context.
  * @example
- * ```
+ * ```typescript
  * import { CommonAzureConstruct, CommonAzureStackProps } from '@gradientedge/cdk-utils'
  *
  * class CustomConstruct extends CommonAzureConstruct {
- *   constructor(parent: Construct, id: string, props: CommonAzureStackProps) {
- *     super(parent, id, props)
+ *   constructor(name: string, props: CommonAzureStackProps) {
+ *     super(name, props)
  *     this.props = props
  *     this.apiManagementManager.createApiManagement('MyApiManagement', this, props)
  *   }
@@ -29,135 +19,123 @@ import { createAzureTfOutput } from '../../utils/index.js';
  */
 export class AzureApiManagementManager {
     /**
-     * @summary Method to create a new api management
+     * @summary Method to create a new API Management service
      * @param id scoped id of the resource
      * @param scope scope in which this resource is defined
-     * @param props api management properties
-     * @see [CDKTF Api management Module]{@link https://github.com/cdktf/cdktf-provider-azurerm/blob/main/docs/apiManagement.typescript.md}
+     * @param props API Management properties
+     * @param applicationInsightsKey Optional Application Insights instrumentation key for logging
+     * @param externalRedisCache Optional external Redis cache for API Management caching
+     * @see [Pulumi Azure Native API Management]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/apimanagement/apimanagementservice/}
      */
-    createApiManagement(id, scope, props, applicationInsightsKey, externalRedisCache) {
+    createApiManagementService(id, scope, props, applicationInsightsKey, externalRedisCache) {
         if (!props)
             throw `Props undefined for ${id}`;
-        const resourceGroup = new DataAzurermResourceGroup(scope, `${id}-am-rg`, {
-            name: scope.props.resourceGroupName
-                ? scope.resourceNameFormatter.format(scope.props.resourceGroupName)
-                : `${props.resourceGroupName}`,
-        });
-        if (!resourceGroup)
-            throw `Resource group undefined for ${id}`;
-        const apiManagement = new ApiManagement(scope, `${id}-am`, {
+        // Get resource group name
+        const resourceGroupName = scope.props.resourceGroupName
+            ? scope.resourceNameFormatter.format(scope.props.resourceGroupName)
+            : props.resourceGroupName;
+        if (!resourceGroupName)
+            throw `Resource group name undefined for ${id}`;
+        const apiManagementService = new ApiManagementService(`${id}-am`, {
             ...props,
-            name: scope.resourceNameFormatter.format(props.name, scope.props.resourceNameOptions?.apiManagement),
-            resourceGroupName: resourceGroup.name,
+            serviceName: scope.resourceNameFormatter.format(props.serviceName?.toString(), scope.props.resourceNameOptions?.apiManagement),
+            resourceGroupName: resourceGroupName,
+            location: props.location ?? scope.props.location,
+            publisherEmail: props.publisherEmail ?? 'noreply@example.com',
+            publisherName: props.publisherName ?? 'Default Publisher',
             tags: props.tags ?? {
                 environment: scope.props.stage,
             },
-        });
+        }, { parent: scope });
+        // Create logger if Application Insights key is provided
         if (applicationInsightsKey) {
-            new ApiManagementLogger(scope, `${id}-am-logger`, {
-                name: scope.resourceNameFormatter.format(props.name, scope.props.resourceNameOptions?.apiManagementLogger),
-                resourceGroupName: resourceGroup.name,
-                apiManagementName: apiManagement.name,
-                applicationInsights: {
+            new Logger(`${id}-am-logger`, {
+                loggerId: scope.resourceNameFormatter.format(props.serviceName?.toString(), scope.props.resourceNameOptions?.apiManagementLogger),
+                resourceGroupName: resourceGroupName,
+                serviceName: apiManagementService.name,
+                loggerType: LoggerType.ApplicationInsights,
+                credentials: {
                     instrumentationKey: applicationInsightsKey,
                 },
-            });
+            }, { parent: scope });
         }
+        // Create Redis cache connection if external Redis is provided
         if (externalRedisCache) {
-            new ApiManagementRedisCache(scope, `${id}-am-redis-cache`, {
-                name: scope.resourceNameFormatter.format(props.name, scope.props.resourceNameOptions?.apiManagementRedisCache),
-                apiManagementId: apiManagement.id,
-                connectionString: `${externalRedisCache.name}:10000,password=${externalRedisCache.defaultDatabase.primaryAccessKey},ssl=True,abortConnect=False`,
-                cacheLocation: externalRedisCache.location,
-                redisCacheId: externalRedisCache.id,
-            });
+            new Cache(`${id}-am-redis-cache`, {
+                cacheId: scope.resourceNameFormatter.format(props.serviceName?.toString(), scope.props.resourceNameOptions?.apiManagementRedisCache),
+                serviceName: apiManagementService.name,
+                resourceGroupName: resourceGroupName,
+                connectionString: externalRedisCache.hostName.apply(hostName => `${hostName}:10000,password=${externalRedisCache.accessKeys.apply(k => k?.primaryKey)},ssl=True,abortConnect=False`),
+                useFromLocation: externalRedisCache.location,
+                resourceId: externalRedisCache.id,
+            }, { parent: scope });
         }
-        createAzureTfOutput(`${id}-apiManagementName`, scope, apiManagement.name);
-        createAzureTfOutput(`${id}-apiManagementFriendlyUniqueId`, scope, apiManagement.friendlyUniqueId);
-        createAzureTfOutput(`${id}-apiManagementId`, scope, apiManagement.id);
-        return apiManagement;
+        return apiManagementService;
     }
     /**
-     * @summary Method to resolve an api management
+     * @summary Method to resolve an existing API Management service
      * @param id scoped id of the resource
      * @param scope scope in which this resource is defined
-     * @param props api management properties
-     * @see [CDKTF Api management Module]{@link https://github.com/cdktf/cdktf-provider-azurerm/blob/main/docs/apiManagement.typescript.md}
+     * @param props API Management lookup properties
+     * @see [Pulumi Azure Native API Management Lookup]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/apimanagement/apimanagementservice/}
      */
-    resolveApiManagement(id, scope, props) {
+    resolveApiManagementService(id, scope, props) {
         if (!props)
             throw `Props undefined for ${id}`;
-        const resourceGroup = new DataAzurermResourceGroup(scope, `${id}-am-rg`, {
-            name: scope.props.resourceGroupName
-                ? scope.resourceNameFormatter.format(scope.props.resourceGroupName)
-                : `${props.resourceGroupName}`,
-        });
-        if (!resourceGroup)
-            throw `Resource group undefined for ${id}`;
-        const apiManagement = new DataAzurermApiManagement(scope, `${id}-am`, {
-            ...props,
-            name: scope.resourceNameFormatter.format(props.name, scope.props.resourceNameOptions?.dataAzurermApiManagement),
+        return getApiManagementServiceOutput({
+            serviceName: scope.resourceNameFormatter.format(props.serviceName?.toString(), scope.props.resourceNameOptions?.dataAzurermApiManagement),
             resourceGroupName: scope.props.resourceGroupName
                 ? `${scope.props.resourceGroupName}-${scope.props.stage}`
-                : `${props.resourceGroupName}`,
-        });
-        return apiManagement;
+                : props.resourceGroupName,
+        }, { parent: scope });
     }
     /**
-     * @summary Method to create a new api management backend
+     * @summary Method to create a new API Management backend
      * @param id scoped id of the resource
      * @param scope scope in which this resource is defined
-     * @param props api management backend properties
-     * @see [CDKTF Api management Backend Module]{@link https://github.com/cdktf/cdktf-provider-azurerm/blob/main/docs/ApiManagementBackend.typescript.md}
+     * @param props API Management backend properties
+     * @see [Pulumi Azure Native API Management Backend]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/apimanagement/backend/}
      */
-    createApiManagementBackend(id, scope, props) {
+    createBackend(id, scope, props) {
         if (!props)
             throw `Props undefined for ${id}`;
-        const apiManagementBackend = new ApiManagementBackend(scope, `${id}-am-be`, {
+        return new Backend(`${id}-am-be`, {
             ...props,
-            name: scope.resourceNameFormatter.format(props.name, scope.props.resourceNameOptions?.apiManagementBackend),
-            description: props.description ?? `Backend for ${props.name}-${scope.props.stage}`,
-            protocol: props.protocol ?? 'http',
-        });
-        createAzureTfOutput(`${id}-apiManagementBackendName`, scope, apiManagementBackend.name);
-        createAzureTfOutput(`${id}-apiManagementBackendFriendlyUniqueId`, scope, apiManagementBackend.friendlyUniqueId);
-        createAzureTfOutput(`${id}-apiManagementBackendId`, scope, apiManagementBackend.id);
-        return apiManagementBackend;
+            backendId: scope.resourceNameFormatter.format(props.backendId?.toString(), scope.props.resourceNameOptions?.apiManagementBackend),
+            description: props.description ?? `Backend for ${props.name || id}-${scope.props.stage}`,
+            protocol: props.protocol ?? BackendProtocol.Http,
+        }, { parent: scope });
     }
     /**
-     * @summary Method to create a new api management api
+     * @summary Method to create a new API Management API with operations and policies
      * @param id scoped id of the resource
      * @param scope scope in which this resource is defined
-     * @param props api management api properties
-     * @see [CDKTF Api management Api Module]{@link https://github.com/cdktf/cdktf-provider-azurerm/blob/main/docs/ApiManagementApi.typescript.md}
+     * @param props API Management API properties
+     * @see [Pulumi Azure Native API Management API]{@link https://www.pulumi.com/registry/packages/azure-native/api-docs/apimanagement/api/}
      */
-    createApiManagementApi(id, scope, props) {
+    createApi(id, scope, props) {
         if (!props)
             throw `Props undefined for ${id}`;
-        const apiManagementApi = new ApiManagementApi(scope, `${id}-am-api`, {
+        const api = new Api(`${id}-am-api`, {
             ...props,
-            name: scope.resourceNameFormatter.format(props.name, scope.props.resourceNameOptions?.apiManagementApi),
-            displayName: props.displayName ?? props.name,
-            revision: props.revision ?? '1',
-            protocols: props.protocols ?? ['https'],
-        });
-        createAzureTfOutput(`${id}-apiManagementApiName`, scope, apiManagementApi.name);
-        createAzureTfOutput(`${id}-apiManagementApiFriendlyUniqueId`, scope, apiManagementApi.friendlyUniqueId);
-        createAzureTfOutput(`${id}-apiManagementApiId`, scope, apiManagementApi.id);
+            apiId: scope.resourceNameFormatter.format(props.apiId?.toString(), scope.props.resourceNameOptions?.apiManagementApi),
+            displayName: props.displayName ?? props.apiId,
+            apiRevision: props.apiRevision ?? '1',
+            protocols: props.protocols ?? [Protocol.Https],
+        }, { parent: scope });
+        // Create operations and policies
         _.forEach(props.operations, operation => {
-            const apimOperation = new ApiManagementApiOperation(scope, `${id}-apim-api-operation-${operation.displayName}-${operation.method}`, {
-                operationId: `${operation.displayName}-${operation.method}`,
-                method: operation.method.toUpperCase(),
-                apiManagementName: apiManagementApi.apiManagementName,
-                resourceGroupName: apiManagementApi.resourceGroupName,
-                apiName: apiManagementApi.name,
+            const operationId = `${operation.displayName}-${operation.method}`;
+            const apimOperation = new ApiOperation(`${id}-apim-api-operation-${operation.displayName}-${operation.method}`, {
+                operationId: operationId,
+                method: operation.method?.toUpperCase() || 'GET',
+                serviceName: props.serviceName,
+                resourceGroupName: props.resourceGroupName,
+                apiId: api.name,
                 displayName: operation.displayName,
                 urlTemplate: operation.urlTemplate,
-                templateParameter: operation.templateParameter,
-            });
-            createAzureTfOutput(`${id}-${operation.displayName}-${operation.method}-apimOperationOperationId`, scope, apimOperation.operationId);
-            createAzureTfOutput(`${id}-${operation.displayName}-${operation.method}-apimOperationFriendlyUniqueId`, scope, apimOperation.friendlyUniqueId);
-            createAzureTfOutput(`${id}-${operation.displayName}-${operation.method}-apimOperationId`, scope, apimOperation.id);
+                templateParameters: operation.templateParameters,
+            }, { parent: scope });
             // Define Caching Policy if enabled
             let cacheSetVariablePolicy = '';
             let cacheInvalidateInboundPolicy = '';
@@ -167,11 +145,11 @@ export class AzureApiManagementManager {
                 cacheSetVariablePolicy = `<!-- Generate a comprehensive custom cache key (without query params or Accept header) -->
               <set-variable name="customCacheKey" value="@{
                   // Instance identification
-                  
+
                   // API identification
                   string apiName = context.Api.Name.Replace(" ", "").ToLower();
                   string apiVersion = context.Api.Version ?? "v1";
-                  
+
                   // Full path construction (without query parameters)
                   string fullPath = context.Request.Url.Path.ToLower();
 
@@ -246,7 +224,7 @@ export class AzureApiManagementManager {
             // Inject rate limiting policy (if configured)
             let rateLimitPolicy = '';
             if (props.rateLimit && scope.props.subscriptionId) {
-                rateLimitPolicy = `<rate-limit-by-key calls="${props.rateLimit.calls}" renewal-period="${props.rateLimit.renewalPeriodInSecs}" counter-key="${scope.props.subscriptionId}-${apimOperation.operationId}"/>`;
+                rateLimitPolicy = `<rate-limit-by-key calls="${props.rateLimit.calls}" renewal-period="${props.rateLimit.renewalPeriodInSecs}" counter-key="${scope.props.subscriptionId}-${operationId}"/>`;
             }
             const policyXmlContent = `<policies>
         <inbound>
@@ -269,31 +247,32 @@ export class AzureApiManagementManager {
             <base />
         </on-error>
       </policies>`;
-            const apimOperationPolicy = new ApiManagementApiOperationPolicy(scope, `${id}-apim-api-operation-policy-${operation.displayName}-${operation.method}`, {
-                apiManagementName: apiManagementApi.apiManagementName,
-                resourceGroupName: apiManagementApi.resourceGroupName,
-                apiName: apiManagementApi.name,
-                operationId: apimOperation.operationId,
-                xmlContent: policyXmlContent,
-            });
-            createAzureTfOutput(`${id}-${operation.displayName}-${operation.method}-apimOperationPolicyFriendlyUniqueId`, scope, apimOperationPolicy.friendlyUniqueId);
-            createAzureTfOutput(`${id}-${operation.displayName}-${operation.method}-apimOperationPolicyId`, scope, apimOperationPolicy.id);
+            new ApiOperationPolicy(`${id}-apim-api-operation-policy-${operation.displayName}-${operation.method}`, {
+                serviceName: props.serviceName,
+                resourceGroupName: props.resourceGroupName,
+                apiId: api.name,
+                operationId: operationId,
+                policyId: 'policy',
+                value: policyXmlContent,
+                format: PolicyContentFormat.Xml,
+            }, { parent: scope });
         });
-        return apiManagementApi;
+        return api;
     }
     /**
-     * @summary Method to create a new api management custom domain
+     * @summary Method to create a new API Management custom domain
      * @param id scoped id of the resource
      * @param scope scope in which this resource is defined
-     * @param props api management custom domain properties
-     * @see [CDKTF Api management Custom Domain Module]{@link https://github.com/cdktf/cdktf-provider-azurerm/blob/main/docs/createApiManagementCustomDomain.typescript.md}
+     * @param props API Management custom domain properties
+     * @note In Pulumi Azure Native, custom domains are configured as part of the API Management service resource,
+     * not as a separate resource. Use the hostnameConfigurations property when creating the service.
      */
     createApiManagementCustomDomain(id, scope, props) {
         if (!props)
             throw `Props undefined for ${id}`;
-        const apiManagementCustomDomain = new ApiManagementCustomDomain(scope, `${id}-am-cd`, props);
-        createAzureTfOutput(`${id}-apiManagementCustomDomainFriendlyUniqueId`, scope, apiManagementCustomDomain.friendlyUniqueId);
-        createAzureTfOutput(`${id}-apiManagementCustomDomainId`, scope, apiManagementCustomDomain.id);
-        return apiManagementCustomDomain;
+        // Note: In Pulumi Azure Native, custom domains are part of the ApiManagementService
+        // This method is provided for API compatibility but should be configured
+        // via the hostnameConfigurations property of ApiManagementService instead
+        throw new Error('Custom domains should be configured via the hostnameConfigurations property of ApiManagementService in Pulumi Azure Native');
     }
 }

package/dist/src/lib/azure/services/api-management/types.d.ts

@@ -1,25 +1,34 @@
-import { ApiManagementConfig } from '@cdktf/provider-azurerm/lib/api-management/index.js';
-import { ApiManagementBackendConfig } from '@cdktf/provider-azurerm/lib/api-management-backend/index.js';
-import { ApiManagementCustomDomainConfig } from '@cdktf/provider-azurerm/lib/api-management-custom-domain/index.js';
-import { ApiManagementApiConfig } from '@cdktf/provider-azurerm/lib/api-management-api/index.js';
-import { ApiManagementApiOperationConfig } from '@cdktf/provider-azurerm/lib/api-management-api-operation/index.js';
-import { ApiManagementRedisCacheConfig } from '@cdktf/provider-azurerm/lib/api-management-redis-cache/index.js';
-export interface ApiManagementProps extends ApiManagementConfig {
-}
-export interface ApiManagementBackendProps extends ApiManagementBackendConfig {
-    backendUrlPath?: string;
-    apiManagementId: string;
-    circuitBreaker: any;
+import { ApiArgs, ApiManagementServiceArgs, ApiOperationArgs, BackendArgs, GetApiManagementServiceOutputArgs } from '@pulumi/azure-native/apimanagement/index.js';
+export interface ApiManagementProps extends ApiManagementServiceArgs {
 }
-export interface ApiManagementCustomDomainProps extends ApiManagementCustomDomainConfig {
+export interface ApiManagementBackendProps extends BackendArgs {
+    backendUrlPath?: string;
+    apiManagementId?: string;
+    circuitBreaker?: any;
 }
-export interface ApiManagementApiProps extends ApiManagementApiConfig {
+export interface ApiManagementCustomDomainProps {
+    apiManagementId: string;
+    gateway?: Array<{
+        hostName: string;
+        certificateId?: string;
+        negotiateClientCertificate?: boolean;
+    }>;
+    developerPortal?: Array<{
+        hostName: string;
+        certificateId?: string;
+    }>;
+    management?: Array<{
+        hostName: string;
+        certificateId?: string;
+    }>;
+}
+export interface ApiManagementApiProps extends ApiArgs {
     operations: ApiManagementApiOperationProps[];
-    commonInboundPolicyXml: string;
-    commonOutboundPolicyXml: string;
+    commonInboundPolicyXml?: string;
+    commonOutboundPolicyXml?: string;
     rateLimit?: ApiManagementApiRateLimit;
 }
-export interface ApiManagementApiOperationProps extends ApiManagementApiOperationConfig {
+export interface ApiManagementApiOperationProps extends ApiOperationArgs {
     caching?: ApiManagementApiCaching;
 }
 export interface ApiManagementApiCaching {
@@ -32,5 +41,11 @@ export interface ApiManagementApiRateLimit {
     calls: number;
     renewalPeriodInSecs: number;
 }
-export interface ApiManagementRedisCacheProps extends ApiManagementRedisCacheConfig {
+export interface ApiManagementRedisCacheProps {
+    apiManagementId: string;
+    connectionString: string;
+    cacheLocation: string;
+    redisCacheId: string;
+}
+export interface ResolveApiManagementProps extends GetApiManagementServiceOutputArgs {
 }