@pulumi/azure 5.69.0-alpha.1710169074 → 5.69.0

package/types/output.d.ts

@@ -5957,6 +5957,10 @@ export declare namespace appservice {
          * Is the HTTP2 protocol enabled?
          */
         http2Enabled: boolean;
+        /**
+         * The Default action for traffic that does not match any `ipRestriction` rule.
+         */
+        ipRestrictionDefaultAction: string;
         /**
          * One or more `ipRestriction` blocks as defined above.
          */
@@ -5990,6 +5994,10 @@ export declare namespace appservice {
          * Is Scale Monitoring of the Functions Runtime enabled?
          */
         runtimeScaleMonitoringEnabled: boolean;
+        /**
+         * The Default action for traffic that does not match any `scmIpRestriction` rule.
+         */
+        scmIpRestrictionDefaultAction?: string;
         /**
          * One or more `scmIpRestriction` blocks as defined above.
          */
@@ -6098,6 +6106,10 @@ export declare namespace appservice {
          * The action taken.
          */
         action: string;
+        /**
+         * The description of the ip restriction rule.
+         */
+        description: string;
         /**
          * A `headers` block as defined above.
          */
@@ -6146,6 +6158,10 @@ export declare namespace appservice {
          * The action taken.
          */
         action: string;
+        /**
+         * The description of the ip restriction rule.
+         */
+        description: string;
         /**
          * A `headers` block as defined above.
          */
@@ -6911,7 +6927,7 @@ export declare namespace appservice {
          */
         ftpsState: string;
         /**
-         * (Optional) The amount of time in minutes that a node can be unhealthy before being removed from the load balancer. Possible values are between `2` and `10`. Only valid in conjunction with `healthCheckPath`.
+         * The amount of time in minutes that a node can be unhealthy before being removed from the load balancer.
          */
         healthCheckEvictionTimeInMin: number;
         /**
@@ -6922,6 +6938,10 @@ export declare namespace appservice {
          * Is HTTP2.0 enabled.
          */
         http2Enabled: boolean;
+        /**
+         * The Default action for traffic that does not match any `ipRestriction` rule.
+         */
+        ipRestrictionDefaultAction: string;
         /**
          * A `ipRestriction` block as defined above.
          */
@@ -6954,6 +6974,10 @@ export declare namespace appservice {
          * The Remote Debugging Version.
          */
         remoteDebuggingVersion: string;
+        /**
+         * The Default action for traffic that does not match any `scmIpRestriction` rule.
+         */
+        scmIpRestrictionDefaultAction: string;
         /**
          * A `scmIpRestriction` block as defined above.
          */
@@ -7143,6 +7167,10 @@ export declare namespace appservice {
          * A `action` block as defined above.
          */
         action: string;
+        /**
+         * The description of the ip restriction rule.
+         */
+        description: string;
         headers: outputs.appservice.GetLinuxWebAppSiteConfigIpRestrictionHeader[];
         /**
          * The CIDR notation of the IP or IP Range to match.
@@ -7188,6 +7216,10 @@ export declare namespace appservice {
          * A `action` block as defined above.
          */
         action: string;
+        /**
+         * The description of the ip restriction rule.
+         */
+        description: string;
         headers: outputs.appservice.GetLinuxWebAppSiteConfigScmIpRestrictionHeader[];
         /**
          * The CIDR notation of the IP or IP Range to match.
@@ -7274,6 +7306,24 @@ export declare namespace appservice {
          */
         type: string;
     }
+    interface GetStaticWebAppBasicAuth {
+        /**
+         * The Environment types which are configured to use Basic Auth access.
+         */
+        environments: string;
+    }
+    interface GetStaticWebAppIdentity {
+        /**
+         * The list of Managed Identity IDs which are assigned to this Static Web App resource.
+         */
+        identityIds: string[];
+        principalId: string;
+        tenantId: string;
+        /**
+         * The Type of Managed Identity assigned to this Static Web App resource.
+         */
+        type: string;
+    }
     interface GetWindowsFunctionAppAuthSetting {
         /**
          * A `activeDirectory` block as defined above.
@@ -7919,6 +7969,10 @@ export declare namespace appservice {
          * Is the HTTP2 protocol enabled?
          */
         http2Enabled: boolean;
+        /**
+         * The Default action for traffic that does not match any `ipRestriction` rule.
+         */
+        ipRestrictionDefaultAction: string;
         /**
          * One or more `ipRestriction` blocks as defined above.
          */
@@ -7951,6 +8005,10 @@ export declare namespace appservice {
          * Is Scale Monitoring of the Functions Runtime enabled?
          */
         runtimeScaleMonitoringEnabled: boolean;
+        /**
+         * The Default action for traffic that does not match any `scmIpRestriction` rule.
+         */
+        scmIpRestrictionDefaultAction: string;
         /**
          * One or more `scmIpRestriction` blocks as defined above.
          */
@@ -8036,6 +8094,10 @@ export declare namespace appservice {
          * The action to take.
          */
         action: string;
+        /**
+         * The description of the ip restriction rule.
+         */
+        description: string;
         headers: outputs.appservice.GetWindowsFunctionAppSiteConfigIpRestrictionHeader[];
         /**
          * The CIDR notation of the IP or IP Range to match.
@@ -8081,6 +8143,10 @@ export declare namespace appservice {
          * The action to take.
          */
         action: string;
+        /**
+         * The description of the ip restriction rule.
+         */
+        description: string;
         headers: outputs.appservice.GetWindowsFunctionAppSiteConfigScmIpRestrictionHeader[];
         /**
          * The CIDR notation of the IP or IP Range to match.
@@ -8854,6 +8920,10 @@ export declare namespace appservice {
          * Is HTTP2.0 enabled.
          */
         http2Enabled: boolean;
+        /**
+         * The Default action for traffic that does not match any `ipRestriction` rule.
+         */
+        ipRestrictionDefaultAction: string;
         /**
          * A `ipRestriction` block as defined above.
          */
@@ -8879,6 +8949,10 @@ export declare namespace appservice {
          * The Remote Debugging Version.
          */
         remoteDebuggingVersion: string;
+        /**
+         * The Default action for traffic that does not match any `scmIpRestriction` rule.
+         */
+        scmIpRestrictionDefaultAction: string;
         /**
          * A `scmIpRestriction` block as defined above.
          */
@@ -9098,6 +9172,10 @@ export declare namespace appservice {
          * A `action` block as defined above.
          */
         action: string;
+        /**
+         * The description of the ip restriction rule.
+         */
+        description: string;
         headers: outputs.appservice.GetWindowsWebAppSiteConfigIpRestrictionHeader[];
         /**
          * The CIDR notation of the IP or IP Range to match.
@@ -9143,6 +9221,10 @@ export declare namespace appservice {
          * A `action` block as defined above.
          */
         action: string;
+        /**
+         * The description of the ip restriction rule.
+         */
+        description: string;
         headers: outputs.appservice.GetWindowsWebAppSiteConfigScmIpRestrictionHeader[];
         /**
          * The CIDR notation of the IP or IP Range to match.
@@ -9942,6 +10024,10 @@ export declare namespace appservice {
          * Specifies if the HTTP2 protocol should be enabled. Defaults to `false`.
          */
         http2Enabled?: boolean;
+        /**
+         * The Default action for traffic that does not match any `ipRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
+         */
+        ipRestrictionDefaultAction?: string;
         /**
          * One or more `ipRestriction` blocks as defined above.
          */
@@ -9980,6 +10066,10 @@ export declare namespace appservice {
          * > **NOTE:** Functions runtime scale monitoring can only be enabled for Elastic Premium Function Apps or Workflow Standard Logic Apps and requires a minimum prewarmed instance count of 1.
          */
         runtimeScaleMonitoringEnabled?: boolean;
+        /**
+         * The Default action for traffic that does not match any `scmIpRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
+         */
+        scmIpRestrictionDefaultAction?: string;
         /**
          * One or more `scmIpRestriction` blocks as defined above.
          */
@@ -10100,6 +10190,10 @@ export declare namespace appservice {
          * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
          */
         action?: string;
+        /**
+         * The Description of this IP Restriction.
+         */
+        description?: string;
         /**
          * A `headers` block as defined above.
          */
@@ -10150,6 +10244,10 @@ export declare namespace appservice {
          * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
          */
         action?: string;
+        /**
+         * The Description of this IP Restriction.
+         */
+        description?: string;
         /**
          * A `headers` block as defined above.
          */
@@ -10890,6 +10988,10 @@ export declare namespace appservice {
          * Specifies if the HTTP2 protocol should be enabled. Defaults to `false`.
          */
         http2Enabled?: boolean;
+        /**
+         * The Default action for traffic that does not match any `ipRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
+         */
+        ipRestrictionDefaultAction?: string;
         /**
          * an `ipRestriction` block as detailed below.
          */
@@ -10928,6 +11030,10 @@ export declare namespace appservice {
          * > **NOTE:** Functions runtime scale monitoring can only be enabled for Elastic Premium Function Apps or Workflow Standard Logic Apps and requires a minimum prewarmed instance count of 1.
          */
         runtimeScaleMonitoringEnabled?: boolean;
+        /**
+         * The Default action for traffic that does not match any `scmIpRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
+         */
+        scmIpRestrictionDefaultAction?: string;
         /**
          * a `scmIpRestriction` block as detailed below.
          */
@@ -11048,6 +11154,10 @@ export declare namespace appservice {
          * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
          */
         action?: string;
+        /**
+         * The Description of this IP Restriction.
+         */
+        description?: string;
         /**
          * a `headers` block as detailed below.
          */
@@ -11098,6 +11208,10 @@ export declare namespace appservice {
          * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
          */
         action?: string;
+        /**
+         * The Description of this IP Restriction.
+         */
+        description?: string;
         /**
          * a `headers` block as detailed below.
          */
@@ -11952,6 +12066,10 @@ export declare namespace appservice {
          * Should the HTTP2 be enabled?
          */
         http2Enabled?: boolean;
+        /**
+         * The Default action for traffic that does not match any `ipRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
+         */
+        ipRestrictionDefaultAction?: string;
         /**
          * One or more `ipRestriction` blocks as defined above.
          */
@@ -11981,6 +12099,10 @@ export declare namespace appservice {
          * The Remote Debugging Version. Possible values include `VS2017`, `VS2019` and `VS2022`.
          */
         remoteDebuggingVersion: string;
+        /**
+         * The Default action for traffic that does not match any `scmIpRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
+         */
+        scmIpRestrictionDefaultAction?: string;
         /**
          * One or more `scmIpRestriction` blocks as defined above.
          */
@@ -12186,6 +12308,10 @@ export declare namespace appservice {
          * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
          */
         action?: string;
+        /**
+         * The Description of this IP Restriction.
+         */
+        description?: string;
         /**
          * A `headers` block as defined above.
          */
@@ -12236,6 +12362,10 @@ export declare namespace appservice {
          * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
          */
         action?: string;
+        /**
+         * The Description of this IP Restriction.
+         */
+        description?: string;
         /**
          * A `headers` block as defined above.
          */
@@ -13032,6 +13162,10 @@ export declare namespace appservice {
          * Should the HTTP2 be enabled?
          */
         http2Enabled?: boolean;
+        /**
+         * The Default action for traffic that does not match any `ipRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
+         */
+        ipRestrictionDefaultAction?: string;
         /**
          * One or more `ipRestriction` blocks as defined above.
          */
@@ -13061,6 +13195,10 @@ export declare namespace appservice {
          * The Remote Debugging Version. Possible values include `VS2017` and `VS2019`
          */
         remoteDebuggingVersion: string;
+        /**
+         * The Default action for traffic that does not match any `scmIpRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
+         */
+        scmIpRestrictionDefaultAction?: string;
         /**
          * One or more `scmIpRestriction` blocks as defined above.
          */
@@ -13266,6 +13404,10 @@ export declare namespace appservice {
          * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
          */
         action?: string;
+        /**
+         * The Description of this IP Restriction.
+         */
+        description?: string;
         /**
          * A `headers` block as defined above.
          */
@@ -13316,6 +13458,10 @@ export declare namespace appservice {
          * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
          */
         action?: string;
+        /**
+         * The Description of this IP Restriction.
+         */
+        description?: string;
         /**
          * A `headers` block as defined above.
          */
@@ -14075,6 +14221,28 @@ export declare namespace appservice {
          */
         type: string;
     }
+    interface StaticWebAppBasicAuth {
+        /**
+         * The Environment types to use the Basic Auth for access. Possible values include `AllEnvironments` and `StagingEnvironments`.
+         */
+        environments: string;
+        /**
+         * The password for the basic authentication access.
+         */
+        password: string;
+    }
+    interface StaticWebAppIdentity {
+        /**
+         * A list of Managed Identity IDs which should be assigned to this Static Web App resource.
+         */
+        identityIds?: string[];
+        principalId: string;
+        tenantId: string;
+        /**
+         * The Type of Managed Identity assigned to this Static Web App resource. Possible values are `SystemAssigned`, `UserAssigned` and `SystemAssigned, UserAssigned`.
+         */
+        type: string;
+    }
     interface WindowsFunctionAppAuthSettings {
         /**
          * An `activeDirectory` block as defined above.
@@ -14752,6 +14920,10 @@ export declare namespace appservice {
          * Specifies if the HTTP2 protocol should be enabled. Defaults to `false`.
          */
         http2Enabled?: boolean;
+        /**
+         * The Default action for traffic that does not match any `ipRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
+         */
+        ipRestrictionDefaultAction?: string;
         /**
          * One or more `ipRestriction` blocks as defined above.
          */
@@ -14786,6 +14958,10 @@ export declare namespace appservice {
          * > **NOTE:** Functions runtime scale monitoring can only be enabled for Elastic Premium Function Apps or Workflow Standard Logic Apps and requires a minimum prewarmed instance count of 1.
          */
         runtimeScaleMonitoringEnabled?: boolean;
+        /**
+         * The Default action for traffic that does not match any `scmIpRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
+         */
+        scmIpRestrictionDefaultAction?: string;
         /**
          * One or more `scmIpRestriction` blocks as defined above.
          */
@@ -14878,6 +15054,10 @@ export declare namespace appservice {
          * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
          */
         action?: string;
+        /**
+         * The Description of this IP Restriction.
+         */
+        description?: string;
         /**
          * A `headers` block as defined above.
          */
@@ -14928,6 +15108,10 @@ export declare namespace appservice {
          * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
          */
         action?: string;
+        /**
+         * The Description of this IP Restriction.
+         */
+        description?: string;
         /**
          * A `headers` block as defined above.
          */
@@ -15660,6 +15844,10 @@ export declare namespace appservice {
          * Specifies if the HTTP2 protocol should be enabled. Defaults to `false`.
          */
         http2Enabled?: boolean;
+        /**
+         * The Default action for traffic that does not match any `ipRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
+         */
+        ipRestrictionDefaultAction?: string;
         /**
          * an `ipRestriction` block as detailed below.
          */
@@ -15694,6 +15882,10 @@ export declare namespace appservice {
          * > **NOTE:** Functions runtime scale monitoring can only be enabled for Elastic Premium Function Apps or Workflow Standard Logic Apps and requires a minimum prewarmed instance count of 1.
          */
         runtimeScaleMonitoringEnabled?: boolean;
+        /**
+         * The Default action for traffic that does not match any `scmIpRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
+         */
+        scmIpRestrictionDefaultAction?: string;
         /**
          * a `scmIpRestriction` block as detailed below.
          */
@@ -15784,6 +15976,10 @@ export declare namespace appservice {
          * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
          */
         action?: string;
+        /**
+         * The Description of this IP Restriction.
+         */
+        description?: string;
         /**
          * a `headers` block as detailed below.
          */
@@ -15834,6 +16030,10 @@ export declare namespace appservice {
          * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
          */
         action?: string;
+        /**
+         * The Description of this IP Restriction.
+         */
+        description?: string;
         /**
          * a `headers` block as detailed below.
          */
@@ -16688,6 +16888,10 @@ export declare namespace appservice {
          * Should the HTTP2 be enabled?
          */
         http2Enabled?: boolean;
+        /**
+         * The Default action for traffic that does not match any `ipRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
+         */
+        ipRestrictionDefaultAction?: string;
         /**
          * One or more `ipRestriction` blocks as defined above.
          */
@@ -16717,6 +16921,10 @@ export declare namespace appservice {
          * The Remote Debugging Version. Possible values include `VS2017`, `VS2019` and `VS2022`.
          */
         remoteDebuggingVersion: string;
+        /**
+         * The Default action for traffic that does not match any `scmIpRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
+         */
+        scmIpRestrictionDefaultAction?: string;
         /**
          * One or more `scmIpRestriction` blocks as defined above.
          */
@@ -16974,6 +17182,10 @@ export declare namespace appservice {
          * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
          */
         action?: string;
+        /**
+         * The Description of this IP Restriction.
+         */
+        description?: string;
         /**
          * A `headers` block as defined above.
          */
@@ -17024,6 +17236,10 @@ export declare namespace appservice {
          * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
          */
         action?: string;
+        /**
+         * The Description of this IP Restriction.
+         */
+        description?: string;
         /**
          * A `headers` block as defined above.
          */
@@ -17848,6 +18064,10 @@ export declare namespace appservice {
          * Should the HTTP2 be enabled?
          */
         http2Enabled?: boolean;
+        /**
+         * The Default action for traffic that does not match any `ipRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
+         */
+        ipRestrictionDefaultAction?: string;
         /**
          * One or more `ipRestriction` blocks as defined above.
          */
@@ -17876,6 +18096,10 @@ export declare namespace appservice {
          * The Remote Debugging Version. Possible values include `VS2017` and `VS2019`
          */
         remoteDebuggingVersion: string;
+        /**
+         * The Default action for traffic that does not match any `scmIpRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
+         */
+        scmIpRestrictionDefaultAction?: string;
         /**
          * One or more `scmIpRestriction` blocks as defined above.
          */
@@ -18122,6 +18346,10 @@ export declare namespace appservice {
          * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
          */
         action?: string;
+        /**
+         * The Description of this IP Restriction.
+         */
+        description?: string;
         /**
          * A `headers` block as defined above.
          */
@@ -18172,6 +18400,10 @@ export declare namespace appservice {
          * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
          */
         action?: string;
+        /**
+         * The Description of this IP Restriction.
+         */
+        description?: string;
         /**
          * A `headers` block as defined above.
          */
@@ -18703,14 +18935,28 @@ export declare namespace attestation {
 export declare namespace authorization {
     interface GetRoleDefinitionPermission {
         /**
-         * a list of actions supported by this role
+         * A list of actions supported by this role.
          */
         actions: string[];
+        /**
+         * The conditions on this role definition, which limits the resources it can be assigned to.
+         */
+        condition: string;
+        /**
+         * The version of the condition.
+         */
+        conditionVersion: string;
+        /**
+         * A list of data actions allowed by this role.
+         */
         dataActions?: string[];
         /**
-         * a list of actions which are denied by this role
+         * A list of actions which are denied by this role.
          */
         notActions: string[];
+        /**
+         * A list of data actions which are denied by this role.
+         */
         notDataActions?: string[];
     }
     interface RoleDefinitionPermission {
@@ -27303,8 +27549,10 @@ export declare namespace containerapp {
         allowInsecureConnections?: boolean;
         /**
          * One or more `customDomain` block as detailed below.
+         *
+         * @deprecated This property is deprecated in favour of the new `azurerm_container_app_custom_domain` resource and will become computed only in a future release.
          */
-        customDomain?: outputs.containerapp.AppIngressCustomDomain;
+        customDomain: outputs.containerapp.AppIngressCustomDomain;
         /**
          * The exposed port on the container for the Ingress traffic.
          *
@@ -32748,7 +32996,6 @@ export declare namespace dashboard {
         host: string;
         /**
          * Password of SMTP authentication.
-         * *
          */
         password: string;
         /**
@@ -34942,6 +35189,36 @@ export declare namespace datafactory {
     }
 }
 export declare namespace dataprotection {
+    interface BackupInstanceKubernetesClusterBackupDatasourceParameters {
+        /**
+         * Whether to include cluster scope resources during backup. Default to `false`. Changing this forces a new resource to be created.
+         */
+        clusterScopedResourcesEnabled?: boolean;
+        /**
+         * Specifies the namespaces to be excluded during backup. Changing this forces a new resource to be created.
+         */
+        excludedNamespaces?: string[];
+        /**
+         * Specifies the resource types to be excluded during backup. Changing this forces a new resource to be created.
+         */
+        excludedResourceTypes?: string[];
+        /**
+         * Specifies the namespaces to be included during backup. Changing this forces a new resource to be created.
+         */
+        includedNamespaces?: string[];
+        /**
+         * Specifies the resource types to be included during backup. Changing this forces a new resource to be created.
+         */
+        includedResourceTypes?: string[];
+        /**
+         * Specifies the resources with such label selectors to be included during backup. Changing this forces a new resource to be created.
+         */
+        labelSelectors?: string[];
+        /**
+         * Whether to take volume snapshots during backup. Default to `false`. Changing this forces a new resource to be created.
+         */
+        volumeSnapshotEnabled?: boolean;
+    }
     interface BackupPolicyDiskRetentionRule {
         /**
          * A `criteria` block as defined below. Changing this forces a new Backup Policy Disk to be created.
@@ -34974,7 +35251,7 @@ export declare namespace dataprotection {
     }
     interface BackupPolicyKubernetesClusterDefaultRetentionRuleLifeCycle {
         /**
-         * The type of data store. The only possible value is `OperationalStore`.
+         * The type of data store. The only possible value is `OperationalStore`. Changing this forces a new resource to be created.
          */
         dataStoreType: string;
         /**
@@ -35024,7 +35301,7 @@ export declare namespace dataprotection {
     }
     interface BackupPolicyKubernetesClusterRetentionRuleLifeCycle {
         /**
-         * The type of data store. The only possible value is `OperationalStore`.
+         * The type of data store. The only possible value is `OperationalStore`. Changing this forces a new resource to be created.
          */
         dataStoreType: string;
         /**
@@ -41663,6 +41940,8 @@ export declare namespace iot {
         capacity: number;
         /**
          * The name of the sku. Possible values are `B1`, `B2`, `B3`, `F1`, `S1`, `S2`, and `S3`.
+         *
+         * > **NOTE:** The `F1` sku is on `Free` tier.
          */
         name: string;
     }
@@ -50615,6 +50894,8 @@ export declare namespace mysql {
         iops: number;
         /**
          * The max storage allowed for the MySQL Flexible Server. Possible values are between `20` and `16384`.
+         *
+         * > **Note:** Decreasing `sizeGb` forces a new resource to be created.
          */
         sizeGb: number;
     }
@@ -56458,7 +56739,7 @@ export declare namespace operationalinsights {
 export declare namespace orbital {
     interface ContactProfileLink {
         /**
-         * A list of contact profile link channels. A `channels` block as defined below. Changing this forces a new resource to be created.
+         * A list of contact profile link channels. A `channels` block as defined below.
          */
         channels: outputs.orbital.ContactProfileLinkChannel[];
         /**
@@ -57727,7 +58008,7 @@ export declare namespace redhatopenshift {
          */
         url: string;
         /**
-         * Cluster API server visibility. Supported values are `Public` and `Private`. Defaults to `Public`. Changing this forces a new resource to be created.
+         * Cluster API server visibility. Supported values are `Public` and `Private`. Changing this forces a new resource to be created.
          */
         visibility: string;
     }
@@ -57763,7 +58044,7 @@ export declare namespace redhatopenshift {
          */
         name: string;
         /**
-         * Cluster Ingress visibility. Supported values are `Public` and `Private`. Defaults to `Public`. Changing this forces a new resource to be created.
+         * Cluster Ingress visibility. Supported values are `Public` and `Private`. Changing this forces a new resource to be created.
          */
         visibility: string;
     }
@@ -57775,7 +58056,7 @@ export declare namespace redhatopenshift {
         /**
          * Whether main virtual machines are encrypted at host. Defaults to `false`. Changing this forces a new resource to be created.
          *
-         * **NOTE:** `encryptionAtHostEnabled` is only available for certain VM sizes and the `EncryptionAtHost` feature must be enabled for your subscription. Please see the [Azure documentation](https://learn.microsoft.com/azure/virtual-machines/disks-enable-host-based-encryption-portal?tabs=azure-powershell) for more information.
+         * > **NOTE:** `encryptionAtHostEnabled` is only available for certain VM sizes and the `EncryptionAtHost` feature must be enabled for your subscription. Please see the [Azure documentation](https://learn.microsoft.com/azure/virtual-machines/disks-enable-host-based-encryption-portal?tabs=azure-powershell) for more information.
          */
         encryptionAtHostEnabled?: boolean;
         /**
@@ -57789,7 +58070,7 @@ export declare namespace redhatopenshift {
     }
     interface ClusterNetworkProfile {
         /**
-         * The outbound (egress) routing method. Possible values are `Loadbalancer` and `UserDefinedRouting`. Defaults to `LoadBalancer`. Changing this forces a new resource to be created.
+         * The outbound (egress) routing method. Possible values are `Loadbalancer` and `UserDefinedRouting`. Defaults to `Loadbalancer`. Changing this forces a new resource to be created.
          */
         outboundType?: string;
         /**
@@ -57825,7 +58106,7 @@ export declare namespace redhatopenshift {
         /**
          * Whether worker virtual machines are encrypted at host. Defaults to `false`. Changing this forces a new resource to be created.
          *
-         * **NOTE:** `encryptionAtHostEnabled` is only available for certain VM sizes and the `EncryptionAtHost` feature must be enabled for your subscription. Please see the [Azure documentation](https://learn.microsoft.com/azure/virtual-machines/disks-enable-host-based-encryption-portal?tabs=azure-powershell) for more information.
+         * > **NOTE:** `encryptionAtHostEnabled` is only available for certain VM sizes and the `EncryptionAtHost` feature must be enabled for your subscription. Please see the [Azure documentation](https://learn.microsoft.com/azure/virtual-machines/disks-enable-host-based-encryption-portal?tabs=azure-powershell) for more information.
          */
         encryptionAtHostEnabled?: boolean;
         /**
@@ -57979,6 +58260,10 @@ export declare namespace redis {
         startHourUtc: number;
     }
     interface GetCacheRedisConfiguration {
+        /**
+         * Specifies if Microsoft Entra (AAD) authentication is enabled.
+         */
+        activeDirectoryAuthenticationEnabled: boolean;
         aofBackupEnabled: boolean;
         aofStorageConnectionString0: string;
         aofStorageConnectionString1: string;
@@ -58048,14 +58333,28 @@ export declare namespace role {
     }
     interface GetRoleDefinitionPermission {
         /**
-         * a list of actions supported by this role
+         * A list of actions supported by this role.
          */
         actions: string[];
+        /**
+         * The conditions on this role definition, which limits the resources it can be assigned to.
+         */
+        condition: string;
+        /**
+         * The version of the condition.
+         */
+        conditionVersion: string;
+        /**
+         * A list of data actions allowed by this role.
+         */
         dataActions?: string[];
         /**
-         * a list of actions which are denied by this role
+         * A list of actions which are denied by this role.
          */
         notActions: string[];
+        /**
+         * A list of data actions which are denied by this role.
+         */
         notDataActions?: string[];
     }
 }
@@ -60336,7 +60635,7 @@ export declare namespace siterecovery {
     }
     interface VmwareReplicatedVmManagedDisk {
         /**
-         * The ID of the disk to be replicated. Changing this forces a new resource to be created.
+         * The ID of the disk to be replicated.
          */
         diskId: string;
         /**
@@ -60348,7 +60647,7 @@ export declare namespace siterecovery {
          */
         targetDiskEncryptionSetId?: string;
         /**
-         * The disk type of the disk to be created when a failover is done. Possible values are `Standard_LRS`, `Standard_LRS` and `StandardSSD_LRS`.
+         * The disk type of the disk to be created when a failover is done. Possible values are `Premium_LRS`, `Standard_LRS` and `StandardSSD_LRS`.
          */
         targetDiskType: string;
     }
@@ -62729,3 +63028,609 @@ export declare namespace webpubsub {
         messagingLogsEnabled?: boolean;
     }
 }
+export declare namespace workloadssap {
+    interface SingleNodeVirtualInstanceIdentity {
+        /**
+         * A list of User Assigned Managed Identity IDs to be assigned to this SAP Single Node Virtual Instance.
+         */
+        identityIds: string[];
+        /**
+         * The type of Managed Service Identity that should be configured on this SAP Single Node Virtual Instance. The only possible value is `UserAssigned`.
+         */
+        type: string;
+    }
+    interface SingleNodeVirtualInstanceSingleServerConfiguration {
+        appResourceGroupName: string;
+        /**
+         * The supported SAP database type. Possible values are `DB2` and `HANA`. Changing this forces a new resource to be created.
+         */
+        databaseType?: string;
+        /**
+         * One or more `diskVolumeConfiguration` blocks as defined below. Changing this forces a new resource to be created.
+         */
+        diskVolumeConfigurations?: outputs.workloadssap.SingleNodeVirtualInstanceSingleServerConfigurationDiskVolumeConfiguration[];
+        /**
+         * Specifies whether a secondary IP address should be added to the network interface on all VMs of the SAP system being deployed. Defaults to `false`. Changing this forces a new resource to be created.
+         */
+        secondaryIpEnabled?: boolean;
+        /**
+         * The resource ID of the Subnet for the SAP Single Node Virtual Instance. Changing this forces a new resource to be created.
+         */
+        subnetId: string;
+        /**
+         * A `virtualMachineConfiguration` block as defined below. Changing this forces a new resource to be created.
+         */
+        virtualMachineConfiguration: outputs.workloadssap.SingleNodeVirtualInstanceSingleServerConfigurationVirtualMachineConfiguration;
+        /**
+         * A `virtualMachineResourceNames` block as defined below. Changing this forces a new resource to be created.
+         */
+        virtualMachineResourceNames?: outputs.workloadssap.SingleNodeVirtualInstanceSingleServerConfigurationVirtualMachineResourceNames;
+    }
+    interface SingleNodeVirtualInstanceSingleServerConfigurationDiskVolumeConfiguration {
+        /**
+         * The total number of disks required for the concerned volume. Possible values are at least `1`. Changing this forces a new resource to be created.
+         */
+        numberOfDisks: number;
+        /**
+         * The size of the Disk in GB. Changing this forces a new resource to be created.
+         */
+        sizeInGb: number;
+        /**
+         * The name of the Disk SKU. Possible values are `Premium_LRS`, `PremiumV2_LRS`, `Premium_ZRS`, `Standard_LRS`, `StandardSSD_LRS`, `StandardSSD_ZRS` and `UltraSSD_LRS`. Changing this forces a new resource to be created.
+         */
+        skuName: string;
+        /**
+         * Specifies the volumn name of the database disk. Possible values are `backup`, `hana/data`, `hana/log`, `hana/shared`, `os` and `usr/sap`. Changing this forces a new resource to be created.
+         */
+        volumeName: string;
+    }
+    interface SingleNodeVirtualInstanceSingleServerConfigurationVirtualMachineConfiguration {
+        /**
+         * An `image` block as defined below. Changing this forces a new resource to be created.
+         */
+        image: outputs.workloadssap.SingleNodeVirtualInstanceSingleServerConfigurationVirtualMachineConfigurationImage;
+        /**
+         * An `osProfile` block as defined below. Changing this forces a new resource to be created.
+         */
+        osProfile: outputs.workloadssap.SingleNodeVirtualInstanceSingleServerConfigurationVirtualMachineConfigurationOsProfile;
+        /**
+         * The size of the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        virtualMachineSize: string;
+    }
+    interface SingleNodeVirtualInstanceSingleServerConfigurationVirtualMachineConfigurationImage {
+        /**
+         * Specifies the offer of the platform image or marketplace image used to create the virtual machine. Changing this forces a new resource to be created.
+         */
+        offer: string;
+        /**
+         * The publisher of the Image. Possible values are `RedHat` and `SUSE`. Changing this forces a new resource to be created.
+         */
+        publisher: string;
+        /**
+         * The SKU of the Image. Changing this forces a new resource to be created.
+         */
+        sku: string;
+        /**
+         * Specifies the version of the platform image or marketplace image used to create the virtual machine. Changing this forces a new resource to be created.
+         */
+        version: string;
+    }
+    interface SingleNodeVirtualInstanceSingleServerConfigurationVirtualMachineConfigurationOsProfile {
+        /**
+         * The name of the administrator account. Changing this forces a new resource to be created.
+         */
+        adminUsername: string;
+        /**
+         * The SSH public key that is used to authenticate with the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        sshPrivateKey: string;
+        /**
+         * The SSH private key that is used to authenticate with the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        sshPublicKey: string;
+    }
+    interface SingleNodeVirtualInstanceSingleServerConfigurationVirtualMachineResourceNames {
+        /**
+         * (Optional) One or more `dataDisk` blocks as defined below. Changing this forces a new resource to be created.
+         */
+        dataDisks?: outputs.workloadssap.SingleNodeVirtualInstanceSingleServerConfigurationVirtualMachineResourceNamesDataDisk[];
+        /**
+         * The full name of the host of the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        hostName?: string;
+        /**
+         * A list of full names for the Network Interface of the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        networkInterfaceNames?: string[];
+        /**
+         * The full name of the OS Disk attached to the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        osDiskName?: string;
+        /**
+         * The full name of the Virtual Machine in a single server SAP system. Changing this forces a new resource to be created.
+         */
+        virtualMachineName?: string;
+    }
+    interface SingleNodeVirtualInstanceSingleServerConfigurationVirtualMachineResourceNamesDataDisk {
+        /**
+         * A list of full names of Data Disks per Volume. Changing this forces a new resource to be created.
+         */
+        names: string[];
+        /**
+         * The name of the Volume. The only possible value is `default`. Changing this forces a new resource to be created.
+         */
+        volumeName: string;
+    }
+    interface ThreeTierVirtualInstanceIdentity {
+        /**
+         * A list of User Assigned Managed Identity IDs to be assigned to this SAP Three Tier Virtual Instance.
+         */
+        identityIds: string[];
+        /**
+         * The type of Managed Service Identity that should be configured on this SAP Three Tier Virtual Instance. Only possible value is `UserAssigned`.
+         */
+        type: string;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfiguration {
+        appResourceGroupName: string;
+        /**
+         * An `applicationServerConfiguration` block as defined below. Changing this forces a new resource to be created.
+         */
+        applicationServerConfiguration: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationApplicationServerConfiguration;
+        /**
+         * A `centralServerConfiguration` block as defined below. Changing this forces a new resource to be created.
+         */
+        centralServerConfiguration: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationCentralServerConfiguration;
+        /**
+         * A `databaseServerConfiguration` block as defined below. Changing this forces a new resource to be created.
+         */
+        databaseServerConfiguration: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationDatabaseServerConfiguration;
+        /**
+         * The high availability type for the three tier configuration. Possible values are `AvailabilitySet` and `AvailabilityZone`. Changing this forces a new resource to be created.
+         */
+        highAvailabilityType?: string;
+        /**
+         * A `resourceNames` block as defined below. Changing this forces a new resource to be created.
+         */
+        resourceNames?: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNames;
+        /**
+         * Specifies whether a secondary IP address should be added to the network interface on all VMs of the SAP system being deployed. Defaults to `false`. Changing this forces a new resource to be created.
+         */
+        secondaryIpEnabled?: boolean;
+        /**
+         * A `transportCreateAndMount` block as defined below. Changing this forces a new resource to be created.
+         *
+         * > **Note:** The file share configuration uses `skip` by default when `transportCreateAndMount` isn't set.
+         *
+         * > **Note:** Due to [a bug in the Azure API](https://github.com/Azure/azure-rest-api-specs/issues/25209) where the Storage File Share Id is not defined correctly, it is not currently possible to support using Transport Mount.
+         */
+        transportCreateAndMount?: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationTransportCreateAndMount;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationApplicationServerConfiguration {
+        /**
+         * The number of instances for the Application Server. Possible values are at least `1`. Changing this forces a new resource to be created.
+         */
+        instanceCount: number;
+        /**
+         * The resource ID of the Subnet for the Application Server. Changing this forces a new resource to be created.
+         */
+        subnetId: string;
+        /**
+         * A `virtualMachineConfiguration` block as defined below. Changing this forces a new resource to be created.
+         */
+        virtualMachineConfiguration: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationApplicationServerConfigurationVirtualMachineConfiguration;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationApplicationServerConfigurationVirtualMachineConfiguration {
+        /**
+         * An `image` block as defined below. Changing this forces a new resource to be created.
+         */
+        image: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationApplicationServerConfigurationVirtualMachineConfigurationImage;
+        /**
+         * An `osProfile` block as defined below. Changing this forces a new resource to be created.
+         */
+        osProfile: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationApplicationServerConfigurationVirtualMachineConfigurationOsProfile;
+        /**
+         * The size of the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        virtualMachineSize: string;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationApplicationServerConfigurationVirtualMachineConfigurationImage {
+        /**
+         * Specifies the offer of the platform image or marketplace image used to create the virtual machine. Changing this forces a new resource to be created.
+         */
+        offer: string;
+        /**
+         * The publisher of the Image. Possible values are `RedHat` and `SUSE`. Changing this forces a new resource to be created.
+         */
+        publisher: string;
+        /**
+         * The SKU of the Image. Changing this forces a new resource to be created.
+         */
+        sku: string;
+        /**
+         * Specifies the version of the platform image or marketplace image used to create the virtual machine. Changing this forces a new resource to be created.
+         */
+        version: string;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationApplicationServerConfigurationVirtualMachineConfigurationOsProfile {
+        /**
+         * The name of the administrator account. Changing this forces a new resource to be created.
+         */
+        adminUsername: string;
+        /**
+         * The SSH public key that is used to authenticate with the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        sshPrivateKey: string;
+        /**
+         * The SSH private key that is used to authenticate with the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        sshPublicKey: string;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationCentralServerConfiguration {
+        /**
+         * The number of instances for the Central Server. Possible values are at least `1`. Changing this forces a new resource to be created.
+         */
+        instanceCount: number;
+        /**
+         * The resource ID of the Subnet for the Central Server. Changing this forces a new resource to be created.
+         */
+        subnetId: string;
+        /**
+         * A `virtualMachineConfiguration` block as defined below. Changing this forces a new resource to be created.
+         */
+        virtualMachineConfiguration: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationCentralServerConfigurationVirtualMachineConfiguration;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationCentralServerConfigurationVirtualMachineConfiguration {
+        /**
+         * An `image` block as defined below. Changing this forces a new resource to be created.
+         */
+        image: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationCentralServerConfigurationVirtualMachineConfigurationImage;
+        /**
+         * An `osProfile` block as defined below. Changing this forces a new resource to be created.
+         */
+        osProfile: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationCentralServerConfigurationVirtualMachineConfigurationOsProfile;
+        /**
+         * The size of the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        virtualMachineSize: string;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationCentralServerConfigurationVirtualMachineConfigurationImage {
+        /**
+         * Specifies the offer of the platform image or marketplace image used to create the virtual machine. Changing this forces a new resource to be created.
+         */
+        offer: string;
+        /**
+         * The publisher of the Image. Possible values are `RedHat` and `SUSE`. Changing this forces a new resource to be created.
+         */
+        publisher: string;
+        /**
+         * The SKU of the Image. Changing this forces a new resource to be created.
+         */
+        sku: string;
+        /**
+         * Specifies the version of the platform image or marketplace image used to create the virtual machine. Changing this forces a new resource to be created.
+         */
+        version: string;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationCentralServerConfigurationVirtualMachineConfigurationOsProfile {
+        /**
+         * The name of the administrator account. Changing this forces a new resource to be created.
+         */
+        adminUsername: string;
+        /**
+         * The SSH public key that is used to authenticate with the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        sshPrivateKey: string;
+        /**
+         * The SSH private key that is used to authenticate with the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        sshPublicKey: string;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationDatabaseServerConfiguration {
+        /**
+         * The database type for the Database Server. Possible values are `DB2` and `HANA`. Changing this forces a new resource to be created.
+         */
+        databaseType?: string;
+        /**
+         * One or more `diskVolumeConfiguration` blocks as defined below. Changing this forces a new resource to be created.
+         */
+        diskVolumeConfigurations?: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationDatabaseServerConfigurationDiskVolumeConfiguration[];
+        /**
+         * The number of instances for the Database Server. Possible values are at least `1`. Changing this forces a new resource to be created.
+         */
+        instanceCount: number;
+        /**
+         * The resource ID of the Subnet for the Database Server. Changing this forces a new resource to be created.
+         */
+        subnetId: string;
+        /**
+         * A `virtualMachineConfiguration` block as defined below. Changing this forces a new resource to be created.
+         */
+        virtualMachineConfiguration: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationDatabaseServerConfigurationVirtualMachineConfiguration;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationDatabaseServerConfigurationDiskVolumeConfiguration {
+        /**
+         * The total number of disks required for the concerned volume. Possible values are at least `1`. Changing this forces a new resource to be created.
+         */
+        numberOfDisks: number;
+        /**
+         * The size of the Disk in GB. Changing this forces a new resource to be created.
+         */
+        sizeInGb: number;
+        /**
+         * The name of the Disk SKU. Possible values are `Premium_LRS`, `PremiumV2_LRS`, `Premium_ZRS`, `Standard_LRS`, `StandardSSD_LRS`, `StandardSSD_ZRS` and `UltraSSD_LRS`. Changing this forces a new resource to be created.
+         */
+        skuName: string;
+        /**
+         * Specifies the volumn name of the database disk. Possible values are `backup`, `hana/data`, `hana/log`, `hana/shared`, `os` and `usr/sap`. Changing this forces a new resource to be created.
+         */
+        volumeName: string;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationDatabaseServerConfigurationVirtualMachineConfiguration {
+        /**
+         * An `image` block as defined below. Changing this forces a new resource to be created.
+         */
+        image: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationDatabaseServerConfigurationVirtualMachineConfigurationImage;
+        /**
+         * An `osProfile` block as defined below. Changing this forces a new resource to be created.
+         */
+        osProfile: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationDatabaseServerConfigurationVirtualMachineConfigurationOsProfile;
+        /**
+         * The size of the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        virtualMachineSize: string;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationDatabaseServerConfigurationVirtualMachineConfigurationImage {
+        /**
+         * Specifies the offer of the platform image or marketplace image used to create the virtual machine. Changing this forces a new resource to be created.
+         */
+        offer: string;
+        /**
+         * The publisher of the Image. Possible values are `RedHat` and `SUSE`. Changing this forces a new resource to be created.
+         */
+        publisher: string;
+        /**
+         * The SKU of the Image. Changing this forces a new resource to be created.
+         */
+        sku: string;
+        /**
+         * Specifies the version of the platform image or marketplace image used to create the virtual machine. Changing this forces a new resource to be created.
+         */
+        version: string;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationDatabaseServerConfigurationVirtualMachineConfigurationOsProfile {
+        /**
+         * The name of the administrator account. Changing this forces a new resource to be created.
+         */
+        adminUsername: string;
+        /**
+         * The SSH public key that is used to authenticate with the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        sshPrivateKey: string;
+        /**
+         * The SSH private key that is used to authenticate with the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        sshPublicKey: string;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNames {
+        /**
+         * An `applicationServer` block as defined below. Changing this forces a new resource to be created.
+         */
+        applicationServer?: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesApplicationServer;
+        /**
+         * A `centralServer` block as defined below. Changing this forces a new resource to be created.
+         */
+        centralServer?: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesCentralServer;
+        /**
+         * A `databaseServer` block as defined below. Changing this forces a new resource to be created.
+         */
+        databaseServer?: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesDatabaseServer;
+        /**
+         * A `sharedStorage` block as defined below. Changing this forces a new resource to be created.
+         */
+        sharedStorage?: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesSharedStorage;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesApplicationServer {
+        /**
+         * The full name for the availability set. Changing this forces a new resource to be created.
+         */
+        availabilitySetName?: string;
+        /**
+         * One or more `virtualMachine` blocks as defined below. Changing this forces a new resource to be created.
+         */
+        virtualMachines?: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesApplicationServerVirtualMachine[];
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesApplicationServerVirtualMachine {
+        /**
+         * One or more `dataDisk` blocks as defined below. Changing this forces a new resource to be created.
+         */
+        dataDisks?: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesApplicationServerVirtualMachineDataDisk[];
+        /**
+         * The full name of the host of the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        hostName?: string;
+        /**
+         * A list of full names for the Network Interface of the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        networkInterfaceNames?: string[];
+        /**
+         * The full name of the OS Disk attached to the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        osDiskName?: string;
+        /**
+         * The full name of the Virtual Machine in a single server SAP system. Changing this forces a new resource to be created.
+         */
+        virtualMachineName?: string;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesApplicationServerVirtualMachineDataDisk {
+        /**
+         * A list of full names of Data Disks per Volume. Changing this forces a new resource to be created.
+         */
+        names: string[];
+        /**
+         * The name of the Volume. Changing this forces a new resource to be created.
+         *
+         * > **Note:** Possible value for Application Server and Central Server is `default`.
+         *
+         * > **Note:** Possible values for Database Server are `hanaData`, `hanaLog`, `hanaShared` and `usrSap`.
+         */
+        volumeName: string;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesCentralServer {
+        /**
+         * The full name for the availability set. Changing this forces a new resource to be created.
+         */
+        availabilitySetName?: string;
+        /**
+         * A `loadBalancer` block as defined below. Changing this forces a new resource to be created.
+         */
+        loadBalancer?: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesCentralServerLoadBalancer;
+        /**
+         * One or more `virtualMachine` blocks as defined below. Changing this forces a new resource to be created.
+         */
+        virtualMachines?: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesCentralServerVirtualMachine[];
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesCentralServerLoadBalancer {
+        /**
+         * A list of Backend Pool names for the Load Balancer. Changing this forces a new resource to be created.
+         */
+        backendPoolNames?: string[];
+        /**
+         * A list of Frontend IP Configuration names. Changing this forces a new resource to be created.
+         */
+        frontendIpConfigurationNames?: string[];
+        /**
+         * A list of Health Probe names. Changing this forces a new resource to be created.
+         */
+        healthProbeNames?: string[];
+        /**
+         * The full resource name of the Load Balancer. Changing this forces a new resource to be created.
+         */
+        name?: string;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesCentralServerVirtualMachine {
+        /**
+         * One or more `dataDisk` blocks as defined below. Changing this forces a new resource to be created.
+         */
+        dataDisks?: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesCentralServerVirtualMachineDataDisk[];
+        /**
+         * The full name of the host of the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        hostName?: string;
+        /**
+         * A list of full names for the Network Interface of the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        networkInterfaceNames?: string[];
+        /**
+         * The full name of the OS Disk attached to the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        osDiskName?: string;
+        /**
+         * The full name of the Virtual Machine in a single server SAP system. Changing this forces a new resource to be created.
+         */
+        virtualMachineName?: string;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesCentralServerVirtualMachineDataDisk {
+        /**
+         * A list of full names of Data Disks per Volume. Changing this forces a new resource to be created.
+         */
+        names: string[];
+        /**
+         * The name of the Volume. Changing this forces a new resource to be created.
+         *
+         * > **Note:** Possible value for Application Server and Central Server is `default`.
+         *
+         * > **Note:** Possible values for Database Server are `hanaData`, `hanaLog`, `hanaShared` and `usrSap`.
+         */
+        volumeName: string;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesDatabaseServer {
+        /**
+         * The full name for the availability set. Changing this forces a new resource to be created.
+         */
+        availabilitySetName?: string;
+        /**
+         * A `loadBalancer` block as defined below. Changing this forces a new resource to be created.
+         */
+        loadBalancer?: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesDatabaseServerLoadBalancer;
+        /**
+         * One or more `virtualMachine` blocks as defined below. Changing this forces a new resource to be created.
+         */
+        virtualMachines?: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesDatabaseServerVirtualMachine[];
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesDatabaseServerLoadBalancer {
+        /**
+         * A list of Backend Pool names for the Load Balancer. Changing this forces a new resource to be created.
+         */
+        backendPoolNames?: string[];
+        /**
+         * A list of Frontend IP Configuration names. Changing this forces a new resource to be created.
+         */
+        frontendIpConfigurationNames?: string[];
+        /**
+         * A list of Health Probe names. Changing this forces a new resource to be created.
+         */
+        healthProbeNames?: string[];
+        /**
+         * The full resource name of the Load Balancer. Changing this forces a new resource to be created.
+         */
+        name?: string;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesDatabaseServerVirtualMachine {
+        /**
+         * One or more `dataDisk` blocks as defined below. Changing this forces a new resource to be created.
+         */
+        dataDisks?: outputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesDatabaseServerVirtualMachineDataDisk[];
+        /**
+         * The full name of the host of the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        hostName?: string;
+        /**
+         * A list of full names for the Network Interface of the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        networkInterfaceNames?: string[];
+        /**
+         * The full name of the OS Disk attached to the Virtual Machine. Changing this forces a new resource to be created.
+         */
+        osDiskName?: string;
+        /**
+         * The full name of the Virtual Machine in a single server SAP system. Changing this forces a new resource to be created.
+         */
+        virtualMachineName?: string;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesDatabaseServerVirtualMachineDataDisk {
+        /**
+         * A list of full names of Data Disks per Volume. Changing this forces a new resource to be created.
+         */
+        names: string[];
+        /**
+         * The name of the Volume. Changing this forces a new resource to be created.
+         *
+         * > **Note:** Possible value for Application Server and Central Server is `default`.
+         *
+         * > **Note:** Possible values for Database Server are `hanaData`, `hanaLog`, `hanaShared` and `usrSap`.
+         */
+        volumeName: string;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesSharedStorage {
+        /**
+         * The full name of the Shared Storage Account. Changing this forces a new resource to be created.
+         */
+        accountName?: string;
+        /**
+         * The full name of Private Endpoint for the Shared Storage Account. Changing this forces a new resource to be created.
+         */
+        privateEndpointName?: string;
+    }
+    interface ThreeTierVirtualInstanceThreeTierConfigurationTransportCreateAndMount {
+        /**
+         * The ID of the Resource Group of the transport File Share. Changing this forces a new resource to be created.
+         */
+        resourceGroupId?: string;
+        /**
+         * The name of the Storage Account of the File Share. Changing this forces a new resource to be created.
+         */
+        storageAccountName?: string;
+    }
+}