@pulumi/azure 5.24.0 → 5.25.0

package/aadb2c/directory.d.ts

@@ -51,7 +51,7 @@ export declare class Directory extends pulumi.CustomResource {
      */
     readonly countryCode: pulumi.Output<string>;
     /**
-     * Location in which the B2C tenant is hosted and data resides. The `dataResidencyLocation` should be valid for the specified `countryCode`. See [official docs](https://aka.ms/B2CDataResidenc) for more information. Changing this forces a new AAD B2C Directory to be created.
+     * Location in which the B2C tenant is hosted and data resides. The `dataResidencyLocation` should be valid for the specified `countryCode`. See [official docs](https://aka.ms/B2CDataResidenc) for more information. Changing this forces a new AAD B2C Directory to be created. Possible values are `Asia Pacific`, `Australia`, `Europe`, `Global` and `United States`.
      */
     readonly dataResidencyLocation: pulumi.Output<string>;
     /**
@@ -106,7 +106,7 @@ export interface DirectoryState {
      */
     countryCode?: pulumi.Input<string>;
     /**
-     * Location in which the B2C tenant is hosted and data resides. The `dataResidencyLocation` should be valid for the specified `countryCode`. See [official docs](https://aka.ms/B2CDataResidenc) for more information. Changing this forces a new AAD B2C Directory to be created.
+     * Location in which the B2C tenant is hosted and data resides. The `dataResidencyLocation` should be valid for the specified `countryCode`. See [official docs](https://aka.ms/B2CDataResidenc) for more information. Changing this forces a new AAD B2C Directory to be created. Possible values are `Asia Pacific`, `Australia`, `Europe`, `Global` and `United States`.
      */
     dataResidencyLocation?: pulumi.Input<string>;
     /**
@@ -149,7 +149,7 @@ export interface DirectoryArgs {
      */
     countryCode?: pulumi.Input<string>;
     /**
-     * Location in which the B2C tenant is hosted and data resides. The `dataResidencyLocation` should be valid for the specified `countryCode`. See [official docs](https://aka.ms/B2CDataResidenc) for more information. Changing this forces a new AAD B2C Directory to be created.
+     * Location in which the B2C tenant is hosted and data resides. The `dataResidencyLocation` should be valid for the specified `countryCode`. See [official docs](https://aka.ms/B2CDataResidenc) for more information. Changing this forces a new AAD B2C Directory to be created. Possible values are `Asia Pacific`, `Australia`, `Europe`, `Global` and `United States`.
      */
     dataResidencyLocation: pulumi.Input<string>;
     /**

package/apimanagement/diagnostic.d.ts

@@ -132,7 +132,7 @@ export declare class Diagnostic extends pulumi.CustomResource {
      */
     readonly httpCorrelationProtocol: pulumi.Output<string>;
     /**
-     * The diagnostic identifier for the API Management Service. At this time the only supported value is `applicationinsights`. Changing this forces a new resource to be created.
+     * The diagnostic identifier for the API Management Service. At this time the supported values are `applicationinsights` and `azuremonitor`. Changing this forces a new resource to be created.
      */
     readonly identifier: pulumi.Output<string>;
     /**
@@ -201,7 +201,7 @@ export interface DiagnosticState {
      */
     httpCorrelationProtocol?: pulumi.Input<string>;
     /**
-     * The diagnostic identifier for the API Management Service. At this time the only supported value is `applicationinsights`. Changing this forces a new resource to be created.
+     * The diagnostic identifier for the API Management Service. At this time the supported values are `applicationinsights` and `azuremonitor`. Changing this forces a new resource to be created.
      */
     identifier?: pulumi.Input<string>;
     /**
@@ -262,7 +262,7 @@ export interface DiagnosticArgs {
      */
     httpCorrelationProtocol?: pulumi.Input<string>;
     /**
-     * The diagnostic identifier for the API Management Service. At this time the only supported value is `applicationinsights`. Changing this forces a new resource to be created.
+     * The diagnostic identifier for the API Management Service. At this time the supported values are `applicationinsights` and `azuremonitor`. Changing this forces a new resource to be created.
      */
     identifier: pulumi.Input<string>;
     /**

package/apimanagement/group.d.ts

@@ -73,7 +73,7 @@ export declare class Group extends pulumi.CustomResource {
      */
     readonly resourceGroupName: pulumi.Output<string>;
     /**
-     * The type of this API Management Group. Possible values are `custom` and `external`. Default is `custom`.
+     * The type of this API Management Group. Possible values are `custom`, `external` and `system`. Default is `custom`.
      */
     readonly type: pulumi.Output<string | undefined>;
     /**
@@ -114,7 +114,7 @@ export interface GroupState {
      */
     resourceGroupName?: pulumi.Input<string>;
     /**
-     * The type of this API Management Group. Possible values are `custom` and `external`. Default is `custom`.
+     * The type of this API Management Group. Possible values are `custom`, `external` and `system`. Default is `custom`.
      */
     type?: pulumi.Input<string>;
 }
@@ -147,7 +147,7 @@ export interface GroupArgs {
      */
     resourceGroupName: pulumi.Input<string>;
     /**
-     * The type of this API Management Group. Possible values are `custom` and `external`. Default is `custom`.
+     * The type of this API Management Group. Possible values are `custom`, `external` and `system`. Default is `custom`.
      */
     type?: pulumi.Input<string>;
 }

package/appinsights/smartDetectionRule.d.ts

@@ -57,7 +57,7 @@ export declare class SmartDetectionRule extends pulumi.CustomResource {
      */
     readonly enabled: pulumi.Output<boolean | undefined>;
     /**
-     * Specifies the name of the Application Insights Smart Detection Rule. Valid values include `Slow page load time`, `Slow server response time`,
+     * Specifies the name of the Application Insights Smart Detection Rule. Valid values include `Slow page load time`, `Slow server response time`, `Long dependency duration`, `Degradation in server response time`, `Degradation in dependency duration`, `Degradation in trace severity ratio`, `Abnormal rise in exception volume`, `Potential memory leak detected`, `Potential security issue detected` and `Abnormal rise in daily data volume`
      * `Long dependency duration`, `Degradation in server response time`, `Degradation in dependency duration`, `Degradation in trace severity ratio`, `Abnormal rise in exception volume`,
      * `Potential memory leak detected`, `Potential security issue detected`, `Abnormal rise in daily data volume`.  Changing this forces a new resource to be created.
      */
@@ -92,7 +92,7 @@ export interface SmartDetectionRuleState {
      */
     enabled?: pulumi.Input<boolean>;
     /**
-     * Specifies the name of the Application Insights Smart Detection Rule. Valid values include `Slow page load time`, `Slow server response time`,
+     * Specifies the name of the Application Insights Smart Detection Rule. Valid values include `Slow page load time`, `Slow server response time`, `Long dependency duration`, `Degradation in server response time`, `Degradation in dependency duration`, `Degradation in trace severity ratio`, `Abnormal rise in exception volume`, `Potential memory leak detected`, `Potential security issue detected` and `Abnormal rise in daily data volume`
      * `Long dependency duration`, `Degradation in server response time`, `Degradation in dependency duration`, `Degradation in trace severity ratio`, `Abnormal rise in exception volume`,
      * `Potential memory leak detected`, `Potential security issue detected`, `Abnormal rise in daily data volume`.  Changing this forces a new resource to be created.
      */
@@ -119,7 +119,7 @@ export interface SmartDetectionRuleArgs {
      */
     enabled?: pulumi.Input<boolean>;
     /**
-     * Specifies the name of the Application Insights Smart Detection Rule. Valid values include `Slow page load time`, `Slow server response time`,
+     * Specifies the name of the Application Insights Smart Detection Rule. Valid values include `Slow page load time`, `Slow server response time`, `Long dependency duration`, `Degradation in server response time`, `Degradation in dependency duration`, `Degradation in trace severity ratio`, `Abnormal rise in exception volume`, `Potential memory leak detected`, `Potential security issue detected` and `Abnormal rise in daily data volume`
      * `Long dependency duration`, `Degradation in server response time`, `Degradation in dependency duration`, `Degradation in trace severity ratio`, `Abnormal rise in exception volume`,
      * `Potential memory leak detected`, `Potential security issue detected`, `Abnormal rise in daily data volume`.  Changing this forces a new resource to be created.
      */

package/appplatform/springCloudApiPortal.d.ts

@@ -71,7 +71,7 @@ export declare class SpringCloudApiPortal extends pulumi.CustomResource {
      */
     readonly instanceCount: pulumi.Output<number | undefined>;
     /**
-     * The name which should be used for this Spring Cloud API Portal. Changing this forces a new Spring Cloud API Portal to be created.
+     * The name which should be used for this Spring Cloud API Portal. Changing this forces a new Spring Cloud API Portal to be created. The only possible value is `default`.
      */
     readonly name: pulumi.Output<string>;
     /**
@@ -116,7 +116,7 @@ export interface SpringCloudApiPortalState {
      */
     instanceCount?: pulumi.Input<number>;
     /**
-     * The name which should be used for this Spring Cloud API Portal. Changing this forces a new Spring Cloud API Portal to be created.
+     * The name which should be used for this Spring Cloud API Portal. Changing this forces a new Spring Cloud API Portal to be created. The only possible value is `default`.
      */
     name?: pulumi.Input<string>;
     /**
@@ -153,7 +153,7 @@ export interface SpringCloudApiPortalArgs {
      */
     instanceCount?: pulumi.Input<number>;
     /**
-     * The name which should be used for this Spring Cloud API Portal. Changing this forces a new Spring Cloud API Portal to be created.
+     * The name which should be used for this Spring Cloud API Portal. Changing this forces a new Spring Cloud API Portal to be created. The only possible value is `default`.
      */
     name?: pulumi.Input<string>;
     /**

package/appplatform/springCloudConnection.d.ts

@@ -87,7 +87,7 @@ export declare class SpringCloudConnection extends pulumi.CustomResource {
      */
     readonly authentication: pulumi.Output<outputs.appplatform.SpringCloudConnectionAuthentication>;
     /**
-     * The application client type. Possible values are `dotnet`, `java`, `python`, `go`, `php`, `ruby`, `django`, `nodejs`, `springBoot`.
+     * The application client type. Possible values are `none`, `dotnet`, `java`, `python`, `go`, `php`, `ruby`, `django`, `nodejs` and `springBoot`.
      */
     readonly clientType: pulumi.Output<string | undefined>;
     /**
@@ -124,7 +124,7 @@ export interface SpringCloudConnectionState {
      */
     authentication?: pulumi.Input<inputs.appplatform.SpringCloudConnectionAuthentication>;
     /**
-     * The application client type. Possible values are `dotnet`, `java`, `python`, `go`, `php`, `ruby`, `django`, `nodejs`, `springBoot`.
+     * The application client type. Possible values are `none`, `dotnet`, `java`, `python`, `go`, `php`, `ruby`, `django`, `nodejs` and `springBoot`.
      */
     clientType?: pulumi.Input<string>;
     /**
@@ -153,7 +153,7 @@ export interface SpringCloudConnectionArgs {
      */
     authentication: pulumi.Input<inputs.appplatform.SpringCloudConnectionAuthentication>;
     /**
-     * The application client type. Possible values are `dotnet`, `java`, `python`, `go`, `php`, `ruby`, `django`, `nodejs`, `springBoot`.
+     * The application client type. Possible values are `none`, `dotnet`, `java`, `python`, `go`, `php`, `ruby`, `django`, `nodejs` and `springBoot`.
      */
     clientType?: pulumi.Input<string>;
     /**

package/appplatform/springCloudContainerDeployment.d.ts

@@ -90,7 +90,7 @@ export declare class SpringCloudContainerDeployment extends pulumi.CustomResourc
      */
     readonly instanceCount: pulumi.Output<number | undefined>;
     /**
-     * Specifies the language framework of the container image.
+     * Specifies the language framework of the container image. The only possible value is `springboot`.
      */
     readonly languageFramework: pulumi.Output<string | undefined>;
     /**
@@ -149,7 +149,7 @@ export interface SpringCloudContainerDeploymentState {
      */
     instanceCount?: pulumi.Input<number>;
     /**
-     * Specifies the language framework of the container image.
+     * Specifies the language framework of the container image. The only possible value is `springboot`.
      */
     languageFramework?: pulumi.Input<string>;
     /**
@@ -200,7 +200,7 @@ export interface SpringCloudContainerDeploymentArgs {
      */
     instanceCount?: pulumi.Input<number>;
     /**
-     * Specifies the language framework of the container image.
+     * Specifies the language framework of the container image. The only possible value is `springboot`.
      */
     languageFramework?: pulumi.Input<string>;
     /**

package/appplatform/springCloudGateway.d.ts

@@ -92,7 +92,7 @@ export declare class SpringCloudGateway extends pulumi.CustomResource {
      */
     readonly instanceCount: pulumi.Output<number | undefined>;
     /**
-     * The name which should be used for this Spring Cloud Gateway. Changing this forces a new Spring Cloud Gateway to be created.
+     * The name which should be used for this Spring Cloud Gateway. Changing this forces a new Spring Cloud Gateway to be created. The only possible value is `default`.
      */
     readonly name: pulumi.Output<string>;
     /**
@@ -145,7 +145,7 @@ export interface SpringCloudGatewayState {
      */
     instanceCount?: pulumi.Input<number>;
     /**
-     * The name which should be used for this Spring Cloud Gateway. Changing this forces a new Spring Cloud Gateway to be created.
+     * The name which should be used for this Spring Cloud Gateway. Changing this forces a new Spring Cloud Gateway to be created. The only possible value is `default`.
      */
     name?: pulumi.Input<string>;
     /**
@@ -190,7 +190,7 @@ export interface SpringCloudGatewayArgs {
      */
     instanceCount?: pulumi.Input<number>;
     /**
-     * The name which should be used for this Spring Cloud Gateway. Changing this forces a new Spring Cloud Gateway to be created.
+     * The name which should be used for this Spring Cloud Gateway. Changing this forces a new Spring Cloud Gateway to be created. The only possible value is `default`.
      */
     name?: pulumi.Input<string>;
     /**

package/appservice/connection.d.ts

@@ -91,7 +91,7 @@ export declare class Connection extends pulumi.CustomResource {
      */
     readonly authentication: pulumi.Output<outputs.appservice.ConnectionAuthentication>;
     /**
-     * The application client type. Possible values are `dotnet`, `java`, `python`, `go`, `php`, `ruby`, `django`, `nodejs`, `springBoot`.
+     * The application client type. Possible values are `none`, `dotnet`, `java`, `python`, `go`, `php`, `ruby`, `django`, `nodejs` and `springBoot`.
      */
     readonly clientType: pulumi.Output<string | undefined>;
     /**
@@ -128,7 +128,7 @@ export interface ConnectionState {
      */
     authentication?: pulumi.Input<inputs.appservice.ConnectionAuthentication>;
     /**
-     * The application client type. Possible values are `dotnet`, `java`, `python`, `go`, `php`, `ruby`, `django`, `nodejs`, `springBoot`.
+     * The application client type. Possible values are `none`, `dotnet`, `java`, `python`, `go`, `php`, `ruby`, `django`, `nodejs` and `springBoot`.
      */
     clientType?: pulumi.Input<string>;
     /**
@@ -157,7 +157,7 @@ export interface ConnectionArgs {
      */
     authentication: pulumi.Input<inputs.appservice.ConnectionAuthentication>;
     /**
-     * The application client type. Possible values are `dotnet`, `java`, `python`, `go`, `php`, `ruby`, `django`, `nodejs`, `springBoot`.
+     * The application client type. Possible values are `none`, `dotnet`, `java`, `python`, `go`, `php`, `ruby`, `django`, `nodejs` and `springBoot`.
      */
     clientType?: pulumi.Input<string>;
     /**

package/appservice/functionApp.d.ts

@@ -189,7 +189,7 @@ export declare class FunctionApp extends pulumi.CustomResource {
      */
     readonly name: pulumi.Output<string>;
     /**
-     * A string indicating the Operating System type for this function app.
+     * A string indicating the Operating System type for this function app. Possible values are `linux` and ``(empty string).
      */
     readonly osType: pulumi.Output<string | undefined>;
     /**
@@ -314,7 +314,7 @@ export interface FunctionAppState {
      */
     name?: pulumi.Input<string>;
     /**
-     * A string indicating the Operating System type for this function app.
+     * A string indicating the Operating System type for this function app. Possible values are `linux` and ``(empty string).
      */
     osType?: pulumi.Input<string>;
     /**
@@ -419,7 +419,7 @@ export interface FunctionAppArgs {
      */
     name?: pulumi.Input<string>;
     /**
-     * A string indicating the Operating System type for this function app.
+     * A string indicating the Operating System type for this function app. Possible values are `linux` and ``(empty string).
      */
     osType?: pulumi.Input<string>;
     /**

package/appservice/functionAppSlot.d.ts

@@ -124,7 +124,7 @@ export declare class FunctionAppSlot extends pulumi.CustomResource {
      */
     readonly name: pulumi.Output<string>;
     /**
-     * A string indicating the Operating System type for this function app.
+     * A string indicating the Operating System type for this function app. The only possible value is `linux`.
      */
     readonly osType: pulumi.Output<string | undefined>;
     /**
@@ -237,7 +237,7 @@ export interface FunctionAppSlotState {
      */
     name?: pulumi.Input<string>;
     /**
-     * A string indicating the Operating System type for this function app.
+     * A string indicating the Operating System type for this function app. The only possible value is `linux`.
      */
     osType?: pulumi.Input<string>;
     /**
@@ -334,7 +334,7 @@ export interface FunctionAppSlotArgs {
      */
     name?: pulumi.Input<string>;
     /**
-     * A string indicating the Operating System type for this function app.
+     * A string indicating the Operating System type for this function app. The only possible value is `linux`.
      */
     osType?: pulumi.Input<string>;
     /**

package/appservice/plan.d.ts

@@ -104,7 +104,7 @@ export declare class Plan extends pulumi.CustomResource {
     readonly appServiceEnvironmentId: pulumi.Output<string | undefined>;
     readonly isXenon: pulumi.Output<boolean | undefined>;
     /**
-     * The kind of the App Service Plan to create. Possible values are `Windows` (also available as `App`), `Linux`, `elastic` (for Premium Consumption) and `FunctionApp` (for a Consumption Plan). Defaults to `Windows`. Changing this forces a new resource to be created.
+     * The kind of the App Service Plan to create. Possible values are `Windows` (also available as `App`), `Linux`, `elastic` (for Premium Consumption), `xenon` and `FunctionApp` (for a Consumption Plan). Defaults to `Windows`. Changing this forces a new resource to be created.
      */
     readonly kind: pulumi.Output<string | undefined>;
     /**
@@ -168,7 +168,7 @@ export interface PlanState {
     appServiceEnvironmentId?: pulumi.Input<string>;
     isXenon?: pulumi.Input<boolean>;
     /**
-     * The kind of the App Service Plan to create. Possible values are `Windows` (also available as `App`), `Linux`, `elastic` (for Premium Consumption) and `FunctionApp` (for a Consumption Plan). Defaults to `Windows`. Changing this forces a new resource to be created.
+     * The kind of the App Service Plan to create. Possible values are `Windows` (also available as `App`), `Linux`, `elastic` (for Premium Consumption), `xenon` and `FunctionApp` (for a Consumption Plan). Defaults to `Windows`. Changing this forces a new resource to be created.
      */
     kind?: pulumi.Input<string | Kind>;
     /**
@@ -224,7 +224,7 @@ export interface PlanArgs {
     appServiceEnvironmentId?: pulumi.Input<string>;
     isXenon?: pulumi.Input<boolean>;
     /**
-     * The kind of the App Service Plan to create. Possible values are `Windows` (also available as `App`), `Linux`, `elastic` (for Premium Consumption) and `FunctionApp` (for a Consumption Plan). Defaults to `Windows`. Changing this forces a new resource to be created.
+     * The kind of the App Service Plan to create. Possible values are `Windows` (also available as `App`), `Linux`, `elastic` (for Premium Consumption), `xenon` and `FunctionApp` (for a Consumption Plan). Defaults to `Windows`. Changing this forces a new resource to be created.
      */
     kind?: pulumi.Input<string | Kind>;
     /**

package/appservice/publicCertificate.d.ts

@@ -65,7 +65,7 @@ export declare class PublicCertificate extends pulumi.CustomResource {
      */
     readonly blob: pulumi.Output<string>;
     /**
-     * The location of the certificate. Possible values are `CurrentUserMy`, `LocalMachineMy` and `Unknown`.
+     * The location of the certificate. Possible values are `CurrentUserMy`, `LocalMachineMy` and `Unknown`. Changing this forces a new App Service Public Certificate to be created.
      */
     readonly certificateLocation: pulumi.Output<string>;
     /**
@@ -102,7 +102,7 @@ export interface PublicCertificateState {
      */
     blob?: pulumi.Input<string>;
     /**
-     * The location of the certificate. Possible values are `CurrentUserMy`, `LocalMachineMy` and `Unknown`.
+     * The location of the certificate. Possible values are `CurrentUserMy`, `LocalMachineMy` and `Unknown`. Changing this forces a new App Service Public Certificate to be created.
      */
     certificateLocation?: pulumi.Input<string>;
     /**
@@ -131,7 +131,7 @@ export interface PublicCertificateArgs {
      */
     blob: pulumi.Input<string>;
     /**
-     * The location of the certificate. Possible values are `CurrentUserMy`, `LocalMachineMy` and `Unknown`.
+     * The location of the certificate. Possible values are `CurrentUserMy`, `LocalMachineMy` and `Unknown`. Changing this forces a new App Service Public Certificate to be created.
      */
     certificateLocation: pulumi.Input<string>;
     /**

package/armmsi/federatedIdentityCredential.d.ts

@@ -0,0 +1,119 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Manages a Federated Identity Credential.
+ *
+ * ## Import
+ *
+ * An existing Federated Identity Credential can be imported into Terraform using the `resource id`, e.g.
+ *
+ * ```sh
+ *  $ pulumi import azure:armmsi/federatedIdentityCredential:FederatedIdentityCredential example /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{parentIdentityName}/federatedIdentityCredentials/{resourceName}
+ * ```
+ */
+export declare class FederatedIdentityCredential extends pulumi.CustomResource {
+    /**
+     * Get an existing FederatedIdentityCredential resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: FederatedIdentityCredentialState, opts?: pulumi.CustomResourceOptions): FederatedIdentityCredential;
+    /**
+     * Returns true if the given object is an instance of FederatedIdentityCredential.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is FederatedIdentityCredential;
+    /**
+     * Specifies the audience for this Federated Identity Credential. Changing this forces a new Federated Identity Credential to be created.
+     */
+    readonly audience: pulumi.Output<string>;
+    /**
+     * Specifies the issuer of this Federated Identity Credential. Changing this forces a new Federated Identity Credential to be created.
+     */
+    readonly issuer: pulumi.Output<string>;
+    /**
+     * Specifies the name of this Federated Identity Credential. Changing this forces a new Federated Identity Credential to be created.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * Specifies parent ID of User Assigned Identity for this Federated Identity Credential. Changing this forces a new Federated Identity Credential to be created.
+     */
+    readonly parentId: pulumi.Output<string>;
+    /**
+     * Specifies the name of the Resource Group within which this Federated Identity Credential should exist. Changing this forces a new Federated Identity Credential to be created.
+     */
+    readonly resourceGroupName: pulumi.Output<string>;
+    /**
+     * Specifies the subject for this Federated Identity Credential. Changing this forces a new Federated Identity Credential to be created.
+     */
+    readonly subject: pulumi.Output<string>;
+    /**
+     * Create a FederatedIdentityCredential resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: FederatedIdentityCredentialArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering FederatedIdentityCredential resources.
+ */
+export interface FederatedIdentityCredentialState {
+    /**
+     * Specifies the audience for this Federated Identity Credential. Changing this forces a new Federated Identity Credential to be created.
+     */
+    audience?: pulumi.Input<string>;
+    /**
+     * Specifies the issuer of this Federated Identity Credential. Changing this forces a new Federated Identity Credential to be created.
+     */
+    issuer?: pulumi.Input<string>;
+    /**
+     * Specifies the name of this Federated Identity Credential. Changing this forces a new Federated Identity Credential to be created.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Specifies parent ID of User Assigned Identity for this Federated Identity Credential. Changing this forces a new Federated Identity Credential to be created.
+     */
+    parentId?: pulumi.Input<string>;
+    /**
+     * Specifies the name of the Resource Group within which this Federated Identity Credential should exist. Changing this forces a new Federated Identity Credential to be created.
+     */
+    resourceGroupName?: pulumi.Input<string>;
+    /**
+     * Specifies the subject for this Federated Identity Credential. Changing this forces a new Federated Identity Credential to be created.
+     */
+    subject?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a FederatedIdentityCredential resource.
+ */
+export interface FederatedIdentityCredentialArgs {
+    /**
+     * Specifies the audience for this Federated Identity Credential. Changing this forces a new Federated Identity Credential to be created.
+     */
+    audience: pulumi.Input<string>;
+    /**
+     * Specifies the issuer of this Federated Identity Credential. Changing this forces a new Federated Identity Credential to be created.
+     */
+    issuer: pulumi.Input<string>;
+    /**
+     * Specifies the name of this Federated Identity Credential. Changing this forces a new Federated Identity Credential to be created.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Specifies parent ID of User Assigned Identity for this Federated Identity Credential. Changing this forces a new Federated Identity Credential to be created.
+     */
+    parentId: pulumi.Input<string>;
+    /**
+     * Specifies the name of the Resource Group within which this Federated Identity Credential should exist. Changing this forces a new Federated Identity Credential to be created.
+     */
+    resourceGroupName: pulumi.Input<string>;
+    /**
+     * Specifies the subject for this Federated Identity Credential. Changing this forces a new Federated Identity Credential to be created.
+     */
+    subject: pulumi.Input<string>;
+}

package/armmsi/federatedIdentityCredential.js

@@ -0,0 +1,85 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FederatedIdentityCredential = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Manages a Federated Identity Credential.
+ *
+ * ## Import
+ *
+ * An existing Federated Identity Credential can be imported into Terraform using the `resource id`, e.g.
+ *
+ * ```sh
+ *  $ pulumi import azure:armmsi/federatedIdentityCredential:FederatedIdentityCredential example /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{parentIdentityName}/federatedIdentityCredentials/{resourceName}
+ * ```
+ */
+class FederatedIdentityCredential extends pulumi.CustomResource {
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["audience"] = state ? state.audience : undefined;
+            resourceInputs["issuer"] = state ? state.issuer : undefined;
+            resourceInputs["name"] = state ? state.name : undefined;
+            resourceInputs["parentId"] = state ? state.parentId : undefined;
+            resourceInputs["resourceGroupName"] = state ? state.resourceGroupName : undefined;
+            resourceInputs["subject"] = state ? state.subject : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.audience === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'audience'");
+            }
+            if ((!args || args.issuer === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'issuer'");
+            }
+            if ((!args || args.parentId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'parentId'");
+            }
+            if ((!args || args.resourceGroupName === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'resourceGroupName'");
+            }
+            if ((!args || args.subject === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'subject'");
+            }
+            resourceInputs["audience"] = args ? args.audience : undefined;
+            resourceInputs["issuer"] = args ? args.issuer : undefined;
+            resourceInputs["name"] = args ? args.name : undefined;
+            resourceInputs["parentId"] = args ? args.parentId : undefined;
+            resourceInputs["resourceGroupName"] = args ? args.resourceGroupName : undefined;
+            resourceInputs["subject"] = args ? args.subject : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(FederatedIdentityCredential.__pulumiType, name, resourceInputs, opts);
+    }
+    /**
+     * Get an existing FederatedIdentityCredential resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new FederatedIdentityCredential(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of FederatedIdentityCredential.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === FederatedIdentityCredential.__pulumiType;
+    }
+}
+exports.FederatedIdentityCredential = FederatedIdentityCredential;
+/** @internal */
+FederatedIdentityCredential.__pulumiType = 'azure:armmsi/federatedIdentityCredential:FederatedIdentityCredential';
+//# sourceMappingURL=federatedIdentityCredential.js.map

package/armmsi/federatedIdentityCredential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federatedIdentityCredential.js","sourceRoot":"","sources":["../../armmsi/federatedIdentityCredential.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;GAUG;AACH,MAAa,2BAA4B,SAAQ,MAAM,CAAC,cAAc;IA6DlE,YAAY,IAAY,EAAE,WAAgF,EAAE,IAAmC;QAC3I,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2D,CAAC;YAC1E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAA0D,CAAC;YACxE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC9D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;aACpE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,2BAA2B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChF,CAAC;IAjGD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwC,EAAE,IAAmC;QACtI,OAAO,IAAI,2BAA2B,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,2BAA2B,CAAC,YAAY,CAAC;IAC5E,CAAC;;AA1BL,kEAmGC;AArFG,gBAAgB;AACO,wCAAY,GAAG,sEAAsE,CAAC"}

package/armmsi/index.d.ts

@@ -0,0 +1,3 @@
+export { FederatedIdentityCredentialArgs, FederatedIdentityCredentialState } from "./federatedIdentityCredential";
+export declare type FederatedIdentityCredential = import("./federatedIdentityCredential").FederatedIdentityCredential;
+export declare const FederatedIdentityCredential: typeof import("./federatedIdentityCredential").FederatedIdentityCredential;

package/armmsi/index.js

@@ -0,0 +1,22 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FederatedIdentityCredential = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+exports.FederatedIdentityCredential = null;
+utilities.lazyLoad(exports, ["FederatedIdentityCredential"], () => require("./federatedIdentityCredential"));
+const _module = {
+    version: utilities.getVersion(),
+    construct: (name, type, urn) => {
+        switch (type) {
+            case "azure:armmsi/federatedIdentityCredential:FederatedIdentityCredential":
+                return new exports.FederatedIdentityCredential(name, undefined, { urn });
+            default:
+                throw new Error(`unknown resource type ${type}`);
+        }
+    },
+};
+pulumi.runtime.registerResourceModule("azure", "armmsi/federatedIdentityCredential", _module);
+//# sourceMappingURL=index.js.map

package/armmsi/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../armmsi/index.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAK7B,QAAA,2BAA2B,GAA+E,IAAW,CAAC;AACnI,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,6BAA6B,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC,CAAC;AAG7G,MAAM,OAAO,GAAG;IACZ,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,SAAS,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAmB,EAAE;QACpE,QAAQ,IAAI,EAAE;YACV,KAAK,sEAAsE;gBACvE,OAAO,IAAI,mCAA2B,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACzE;gBACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACxD;IACL,CAAC;CACJ,CAAC;AACF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,oCAAoC,EAAE,OAAO,CAAC,CAAA"}

package/authorization/assignment.d.ts

@@ -160,7 +160,7 @@ export declare class Assignment extends pulumi.CustomResource {
      */
     readonly scope: pulumi.Output<string>;
     /**
-     * If the `principalId` is a newly provisioned `Service Principal` set this value to `true` to skip the `Azure Active Directory` check which may fail due to replication lag. This argument is only valid if the `principalId` is a `Service Principal` identity. If it is not a `Service Principal` identity it will cause the role assignment to fail. Defaults to `false`.
+     * If the `principalId` is a newly provisioned `Service Principal` set this value to `true` to skip the `Azure Active Directory` check which may fail due to replication lag. This argument is only valid if the `principalId` is a `Service Principal` identity. Defaults to `false`.
      */
     readonly skipServicePrincipalAadCheck: pulumi.Output<boolean>;
     /**
@@ -217,7 +217,7 @@ export interface AssignmentState {
      */
     scope?: pulumi.Input<string>;
     /**
-     * If the `principalId` is a newly provisioned `Service Principal` set this value to `true` to skip the `Azure Active Directory` check which may fail due to replication lag. This argument is only valid if the `principalId` is a `Service Principal` identity. If it is not a `Service Principal` identity it will cause the role assignment to fail. Defaults to `false`.
+     * If the `principalId` is a newly provisioned `Service Principal` set this value to `true` to skip the `Azure Active Directory` check which may fail due to replication lag. This argument is only valid if the `principalId` is a `Service Principal` identity. Defaults to `false`.
      */
     skipServicePrincipalAadCheck?: pulumi.Input<boolean>;
 }
@@ -262,7 +262,7 @@ export interface AssignmentArgs {
      */
     scope: pulumi.Input<string>;
     /**
-     * If the `principalId` is a newly provisioned `Service Principal` set this value to `true` to skip the `Azure Active Directory` check which may fail due to replication lag. This argument is only valid if the `principalId` is a `Service Principal` identity. If it is not a `Service Principal` identity it will cause the role assignment to fail. Defaults to `false`.
+     * If the `principalId` is a newly provisioned `Service Principal` set this value to `true` to skip the `Azure Active Directory` check which may fail due to replication lag. This argument is only valid if the `principalId` is a `Service Principal` identity. Defaults to `false`.
      */
     skipServicePrincipalAadCheck?: pulumi.Input<boolean>;
 }