@pulumi/azure 5.73.0 → 5.74.0-alpha.1713903411

package/types/output.d.ts

@@ -897,7 +897,7 @@ export declare namespace apimanagement {
          */
         issuerCertificateThumbprint: string;
         /**
-         * The name of the API Management backend. Changing this forces a new resource to be created.
+         * The common name of the certificate.
          */
         name: string;
     }
@@ -1611,11 +1611,13 @@ export declare namespace apimanagement {
     }
     interface ServiceHostnameConfigurationDeveloperPortal {
         /**
-         * One or more `certificate` blocks (up to 10) as defined below.
+         * The Base64 Encoded Certificate.
          */
         certificate?: string;
         /**
-         * The password for the certificate.
+         * The password associated with the certificate provided above.
+         *
+         * > **NOTE:** Either `keyVaultId` or `certificate` and `certificatePassword` must be specified.
          */
         certificatePassword?: string;
         /**
@@ -1713,11 +1715,13 @@ export declare namespace apimanagement {
     }
     interface ServiceHostnameConfigurationPortal {
         /**
-         * One or more `certificate` blocks (up to 10) as defined below.
+         * The Base64 Encoded Certificate.
          */
         certificate?: string;
         /**
-         * The password for the certificate.
+         * The password associated with the certificate provided above.
+         *
+         * > **NOTE:** Either `keyVaultId` or `certificate` and `certificatePassword` must be specified.
          */
         certificatePassword?: string;
         /**
@@ -1817,11 +1821,13 @@ export declare namespace apimanagement {
     }
     interface ServiceHostnameConfigurationScm {
         /**
-         * One or more `certificate` blocks (up to 10) as defined below.
+         * The Base64 Encoded Certificate.
          */
         certificate?: string;
         /**
-         * The password for the certificate.
+         * The password associated with the certificate provided above.
+         *
+         * > **NOTE:** Either `keyVaultId` or `certificate` and `certificatePassword` must be specified.
          */
         certificatePassword?: string;
         /**
@@ -9373,9 +9379,9 @@ export declare namespace appservice {
          */
         allowedExternalRedirectUrls: string[];
         /**
-         * The Default Authentication Provider to use when the `unauthenticatedAction` is set to `RedirectToLoginPage`. Possible values include: `apple`, `azureactivedirectory`, `facebook`, `github`, `google`, `twitter` and the `name` of your `customOidcV2` provider.
+         * The default authentication provider to use when multiple providers are configured. Possible values include: `AzureActiveDirectory`, `Facebook`, `Google`, `MicrosoftAccount`, `Twitter`, `Github`
          *
-         * > **NOTE:** Whilst any value will be accepted by the API for `defaultProvider`, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or customOidc name) as it is used to build the auth endpoint URI.
+         * > **NOTE:** This setting is only needed if multiple providers are configured, and the `unauthenticatedClientAction` is set to "RedirectToLoginPage".
          */
         defaultProvider: string;
         /**
@@ -9405,7 +9411,7 @@ export declare namespace appservice {
          */
         microsoft?: outputs.appservice.LinuxFunctionAppAuthSettingsMicrosoft;
         /**
-         * The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to `~1`.
+         * The RuntimeVersion of the Authentication / Authorization feature in use for the Linux Web App.
          */
         runtimeVersion: string;
         /**
@@ -9635,7 +9641,7 @@ export declare namespace appservice {
         /**
          * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
          *
-         * > **Note:** The `clientId` value is always considered an allowed audience.
+         * > **NOTE:** This is configured on the Authentication Provider side and is Read Only here.
          */
         allowedAudiences?: string[];
         /**
@@ -9655,7 +9661,9 @@ export declare namespace appservice {
          */
         clientSecretCertificateThumbprint?: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The App Setting name that contains the client secret of the Client.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName?: string;
         /**
@@ -9683,21 +9691,25 @@ export declare namespace appservice {
     }
     interface LinuxFunctionAppAuthSettingsV2AppleV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OpenID Connect Client ID for the Apple web application.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for Apple Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * A list of Login Scopes provided by this Authentication Provider.
+         *
+         * > **NOTE:** This is configured on the Authentication Provider side and is Read Only here.
          */
         loginScopes: string[];
     }
     interface LinuxFunctionAppAuthSettingsV2AzureStaticWebAppV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the Client to use to authenticate with Azure Static Web App Authentication.
          */
         clientId: string;
     }
@@ -9715,11 +9727,11 @@ export declare namespace appservice {
          */
         clientCredentialMethod: string;
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the Client to use to authenticate with the Custom OIDC.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The App Setting name that contains the secret for this Custom OIDC Client. This is generated from `name` above and suffixed with `_PROVIDER_AUTHENTICATION_SECRET`.
          */
         clientSecretSettingName: string;
         /**
@@ -9727,7 +9739,9 @@ export declare namespace appservice {
          */
         issuerEndpoint: string;
         /**
-         * The name which should be used for this Linux Function App. Changing this forces a new Linux Function App to be created. Limit the function name to 32 characters to avoid naming collisions. For more information about [Function App naming rule](https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/resource-name-rules#microsoftweb) and [Host ID Collisions](https://github.com/Azure/azure-functions-host/wiki/Host-IDs#host-id-collisions)
+         * The name of the Custom OIDC Authentication Provider.
+         *
+         * > **NOTE:** An `appSetting` matching this value in upper case with the suffix of `_PROVIDER_AUTHENTICATION_SECRET` is required. e.g. `MYOIDC_PROVIDER_AUTHENTICATION_SECRET` for a value of `myoidc`.
          */
         name: string;
         /**
@@ -9763,41 +9777,43 @@ export declare namespace appservice {
          */
         graphApiVersion: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of scopes that should be requested as part of Facebook Login authentication.
          */
         loginScopes?: string[];
     }
     interface LinuxFunctionAppAuthSettingsV2GithubV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the GitHub app used for login..
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for GitHub Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
          */
         loginScopes?: string[];
     }
     interface LinuxFunctionAppAuthSettingsV2GoogleV2 {
         /**
-         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
-         *
-         * > **Note:** The `clientId` value is always considered an allowed audience.
+         * Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
          */
         allowedAudiences?: string[];
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OpenID Connect Client ID for the Google web application.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for Google Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
          */
         loginScopes?: string[];
     }
@@ -9851,17 +9867,17 @@ export declare namespace appservice {
     }
     interface LinuxFunctionAppAuthSettingsV2MicrosoftV2 {
         /**
-         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
-         *
-         * > **Note:** The `clientId` value is always considered an allowed audience.
+         * Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
          */
         allowedAudiences?: string[];
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OAuth 2.0 client ID that was created for the app used for authentication.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
@@ -10337,9 +10353,9 @@ export declare namespace appservice {
          */
         allowedExternalRedirectUrls: string[];
         /**
-         * The Default Authentication Provider to use when the `unauthenticatedAction` is set to `RedirectToLoginPage`. Possible values include: `apple`, `azureactivedirectory`, `facebook`, `github`, `google`, `twitter` and the `name` of your `customOidcV2` provider.
+         * The default authentication provider to use when multiple providers are configured. Possible values include: `AzureActiveDirectory`, `Facebook`, `Google`, `MicrosoftAccount`, `Twitter`, `Github`.
          *
-         * > **NOTE:** Whilst any value will be accepted by the API for `defaultProvider`, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or customOidc name) as it is used to build the auth endpoint URI.
+         * > **NOTE:** This setting is only needed if multiple providers are configured, and the `unauthenticatedClientAction` is set to "RedirectToLoginPage".
          */
         defaultProvider: string;
         /**
@@ -10369,7 +10385,7 @@ export declare namespace appservice {
          */
         microsoft?: outputs.appservice.LinuxFunctionAppSlotAuthSettingsMicrosoft;
         /**
-         * The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to `~1`.
+         * The RuntimeVersion of the Authentication / Authorization feature in use.
          */
         runtimeVersion: string;
         /**
@@ -10599,7 +10615,7 @@ export declare namespace appservice {
         /**
          * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
          *
-         * > **Note:** The `clientId` value is always considered an allowed audience.
+         * > **NOTE:** This is configured on the Authentication Provider side and is Read Only here.
          */
         allowedAudiences?: string[];
         /**
@@ -10619,7 +10635,9 @@ export declare namespace appservice {
          */
         clientSecretCertificateThumbprint?: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The App Setting name that contains the client secret of the Client.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName?: string;
         /**
@@ -10647,21 +10665,25 @@ export declare namespace appservice {
     }
     interface LinuxFunctionAppSlotAuthSettingsV2AppleV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OpenID Connect Client ID for the Apple web application.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for Apple Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * A list of Login Scopes provided by this Authentication Provider.
+         *
+         * > **NOTE:** This is configured on the Authentication Provider side and is Read Only here.
          */
         loginScopes: string[];
     }
     interface LinuxFunctionAppSlotAuthSettingsV2AzureStaticWebAppV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the Client to use to authenticate with Azure Static Web App Authentication.
          */
         clientId: string;
     }
@@ -10679,11 +10701,11 @@ export declare namespace appservice {
          */
         clientCredentialMethod: string;
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the Client to use to authenticate with the Custom OIDC.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The App Setting name that contains the secret for this Custom OIDC Client. This is generated from `name` above and suffixed with `_PROVIDER_AUTHENTICATION_SECRET`.
          */
         clientSecretSettingName: string;
         /**
@@ -10691,7 +10713,9 @@ export declare namespace appservice {
          */
         issuerEndpoint: string;
         /**
-         * Specifies the name of the Function App Slot. Changing this forces a new resource to be created.
+         * The name of the Custom OIDC Authentication Provider.
+         *
+         * > **NOTE:** An `appSetting` matching this value in upper case with the suffix of `_PROVIDER_AUTHENTICATION_SECRET` is required. e.g. `MYOIDC_PROVIDER_AUTHENTICATION_SECRET` for a value of `myoidc`.
          */
         name: string;
         /**
@@ -10727,41 +10751,43 @@ export declare namespace appservice {
          */
         graphApiVersion: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of scopes that should be requested as part of Facebook Login authentication.
          */
         loginScopes?: string[];
     }
     interface LinuxFunctionAppSlotAuthSettingsV2GithubV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the GitHub app used for login..
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for GitHub Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
          */
         loginScopes?: string[];
     }
     interface LinuxFunctionAppSlotAuthSettingsV2GoogleV2 {
         /**
-         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
-         *
-         * > **Note:** The `clientId` value is always considered an allowed audience.
+         * Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
          */
         allowedAudiences?: string[];
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OpenID Connect Client ID for the Google web application.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for Google Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
          */
         loginScopes?: string[];
     }
@@ -10815,17 +10841,17 @@ export declare namespace appservice {
     }
     interface LinuxFunctionAppSlotAuthSettingsV2MicrosoftV2 {
         /**
-         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
-         *
-         * > **Note:** The `clientId` value is always considered an allowed audience.
+         * Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
          */
         allowedAudiences?: string[];
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OAuth 2.0 client ID that was created for the app used for authentication.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
@@ -11363,9 +11389,9 @@ export declare namespace appservice {
          */
         allowedExternalRedirectUrls: string[];
         /**
-         * The Default Authentication Provider to use when the `unauthenticatedAction` is set to `RedirectToLoginPage`. Possible values include: `apple`, `azureactivedirectory`, `facebook`, `github`, `google`, `twitter` and the `name` of your `customOidcV2` provider.
+         * The default authentication provider to use when multiple providers are configured. Possible values include: `BuiltInAuthenticationProviderAzureActiveDirectory`, `BuiltInAuthenticationProviderFacebook`, `BuiltInAuthenticationProviderGoogle`, `BuiltInAuthenticationProviderMicrosoftAccount`, `BuiltInAuthenticationProviderTwitter`, `BuiltInAuthenticationProviderGithub`
          *
-         * > **NOTE:** Whilst any value will be accepted by the API for `defaultProvider`, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or customOidc name) as it is used to build the auth endpoint URI.
+         * > **NOTE:** This setting is only needed if multiple providers are configured, and the `unauthenticatedClientAction` is set to "RedirectToLoginPage".
          */
         defaultProvider: string;
         /**
@@ -11395,7 +11421,7 @@ export declare namespace appservice {
          */
         microsoft?: outputs.appservice.LinuxWebAppAuthSettingsMicrosoft;
         /**
-         * The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to `~1`.
+         * The RuntimeVersion of the Authentication / Authorization feature in use for the Linux Web App.
          */
         runtimeVersion: string;
         /**
@@ -11625,7 +11651,7 @@ export declare namespace appservice {
         /**
          * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
          *
-         * > **Note:** The `clientId` value is always considered an allowed audience.
+         * > **NOTE:** This is configured on the Authentication Provider side and is Read Only here.
          */
         allowedAudiences?: string[];
         /**
@@ -11645,7 +11671,9 @@ export declare namespace appservice {
          */
         clientSecretCertificateThumbprint?: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The App Setting name that contains the client secret of the Client.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName?: string;
         /**
@@ -11673,21 +11701,25 @@ export declare namespace appservice {
     }
     interface LinuxWebAppAuthSettingsV2AppleV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OpenID Connect Client ID for the Apple web application.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for Apple Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * A list of Login Scopes provided by this Authentication Provider.
+         *
+         * > **NOTE:** This is configured on the Authentication Provider side and is Read Only here.
          */
         loginScopes: string[];
     }
     interface LinuxWebAppAuthSettingsV2AzureStaticWebAppV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the Client to use to authenticate with Azure Static Web App Authentication.
          */
         clientId: string;
     }
@@ -11705,11 +11737,11 @@ export declare namespace appservice {
          */
         clientCredentialMethod: string;
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the Client to use to authenticate with the Custom OIDC.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The App Setting name that contains the secret for this Custom OIDC Client. This is generated from `name` above and suffixed with `_PROVIDER_AUTHENTICATION_SECRET`.
          */
         clientSecretSettingName: string;
         /**
@@ -11718,6 +11750,8 @@ export declare namespace appservice {
         issuerEndpoint: string;
         /**
          * The name of the Custom OIDC Authentication Provider.
+         *
+         * > **NOTE:** An `appSetting` matching this value in upper case with the suffix of `_PROVIDER_AUTHENTICATION_SECRET` is required. e.g. `MYOIDC_PROVIDER_AUTHENTICATION_SECRET` for a value of `myoidc`.
          */
         name: string;
         /**
@@ -11753,41 +11787,43 @@ export declare namespace appservice {
          */
         graphApiVersion: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of scopes that should be requested as part of Facebook Login authentication.
          */
         loginScopes?: string[];
     }
     interface LinuxWebAppAuthSettingsV2GithubV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the GitHub app used for login..
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for GitHub Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
          */
         loginScopes?: string[];
     }
     interface LinuxWebAppAuthSettingsV2GoogleV2 {
         /**
-         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
-         *
-         * > **Note:** The `clientId` value is always considered an allowed audience.
+         * Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
          */
         allowedAudiences?: string[];
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OpenID Connect Client ID for the Google web application.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for Google Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
          */
         loginScopes?: string[];
     }
@@ -11841,17 +11877,17 @@ export declare namespace appservice {
     }
     interface LinuxWebAppAuthSettingsV2MicrosoftV2 {
         /**
-         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
-         *
-         * > **Note:** The `clientId` value is always considered an allowed audience.
+         * Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
          */
         allowedAudiences?: string[];
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OAuth 2.0 client ID that was created for the app used for authentication.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
@@ -12457,9 +12493,9 @@ export declare namespace appservice {
          */
         allowedExternalRedirectUrls: string[];
         /**
-         * The Default Authentication Provider to use when the `unauthenticatedAction` is set to `RedirectToLoginPage`. Possible values include: `apple`, `azureactivedirectory`, `facebook`, `github`, `google`, `twitter` and the `name` of your `customOidcV2` provider.
+         * The default authentication provider to use when multiple providers are configured. Possible values include: `BuiltInAuthenticationProviderAzureActiveDirectory`, `BuiltInAuthenticationProviderFacebook`, `BuiltInAuthenticationProviderGoogle`, `BuiltInAuthenticationProviderMicrosoftAccount`, `BuiltInAuthenticationProviderTwitter`, `BuiltInAuthenticationProviderGithub`
          *
-         * > **NOTE:** Whilst any value will be accepted by the API for `defaultProvider`, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or customOidc name) as it is used to build the auth endpoint URI.
+         * > **NOTE:** This setting is only needed if multiple providers are configured, and the `unauthenticatedClientAction` is set to "RedirectToLoginPage".
          */
         defaultProvider: string;
         /**
@@ -12489,7 +12525,7 @@ export declare namespace appservice {
          */
         microsoft?: outputs.appservice.LinuxWebAppSlotAuthSettingsMicrosoft;
         /**
-         * The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to `~1`.
+         * The RuntimeVersion of the Authentication / Authorization feature in use for the Linux Web App.
          */
         runtimeVersion: string;
         /**
@@ -12719,7 +12755,7 @@ export declare namespace appservice {
         /**
          * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
          *
-         * > **Note:** The `clientId` value is always considered an allowed audience.
+         * > **NOTE:** This is configured on the Authentication Provider side and is Read Only here.
          */
         allowedAudiences?: string[];
         /**
@@ -12739,7 +12775,9 @@ export declare namespace appservice {
          */
         clientSecretCertificateThumbprint?: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The App Setting name that contains the client secret of the Client.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName?: string;
         /**
@@ -12767,21 +12805,25 @@ export declare namespace appservice {
     }
     interface LinuxWebAppSlotAuthSettingsV2AppleV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OpenID Connect Client ID for the Apple web application.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for Apple Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * A list of Login Scopes provided by this Authentication Provider.
+         *
+         * > **NOTE:** This is configured on the Authentication Provider side and is Read Only here.
          */
         loginScopes: string[];
     }
     interface LinuxWebAppSlotAuthSettingsV2AzureStaticWebAppV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the Client to use to authenticate with Azure Static Web App Authentication.
          */
         clientId: string;
     }
@@ -12799,11 +12841,11 @@ export declare namespace appservice {
          */
         clientCredentialMethod: string;
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the Client to use to authenticate with the Custom OIDC.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The App Setting name that contains the secret for this Custom OIDC Client. This is generated from `name` above and suffixed with `_PROVIDER_AUTHENTICATION_SECRET`.
          */
         clientSecretSettingName: string;
         /**
@@ -12812,6 +12854,8 @@ export declare namespace appservice {
         issuerEndpoint: string;
         /**
          * The name of the Custom OIDC Authentication Provider.
+         *
+         * > **NOTE:** An `appSetting` matching this value in upper case with the suffix of `_PROVIDER_AUTHENTICATION_SECRET` is required. e.g. `MYOIDC_PROVIDER_AUTHENTICATION_SECRET` for a value of `myoidc`.
          */
         name: string;
         /**
@@ -12847,41 +12891,43 @@ export declare namespace appservice {
          */
         graphApiVersion: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of scopes that should be requested as part of Facebook Login authentication.
          */
         loginScopes?: string[];
     }
     interface LinuxWebAppSlotAuthSettingsV2GithubV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the GitHub app used for login..
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for GitHub Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
          */
         loginScopes?: string[];
     }
     interface LinuxWebAppSlotAuthSettingsV2GoogleV2 {
         /**
-         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
-         *
-         * > **Note:** The `clientId` value is always considered an allowed audience.
+         * Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
          */
         allowedAudiences?: string[];
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OpenID Connect Client ID for the Google web application.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for Google Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
          */
         loginScopes?: string[];
     }
@@ -12935,17 +12981,17 @@ export declare namespace appservice {
     }
     interface LinuxWebAppSlotAuthSettingsV2MicrosoftV2 {
         /**
-         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
-         *
-         * > **Note:** The `clientId` value is always considered an allowed audience.
+         * Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
          */
         allowedAudiences?: string[];
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OAuth 2.0 client ID that was created for the app used for authentication.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
@@ -14279,9 +14325,9 @@ export declare namespace appservice {
          */
         allowedExternalRedirectUrls: string[];
         /**
-         * The Default Authentication Provider to use when the `unauthenticatedAction` is set to `RedirectToLoginPage`. Possible values include: `apple`, `azureactivedirectory`, `facebook`, `github`, `google`, `twitter` and the `name` of your `customOidcV2` provider.
+         * The default authentication provider to use when multiple providers are configured. Possible values include: `AzureActiveDirectory`, `Facebook`, `Google`, `MicrosoftAccount`, `Twitter`, `Github`
          *
-         * > **NOTE:** Whilst any value will be accepted by the API for `defaultProvider`, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or customOidc name) as it is used to build the auth endpoint URI.
+         * > **NOTE:** This setting is only needed if multiple providers are configured, and the `unauthenticatedClientAction` is set to "RedirectToLoginPage".
          */
         defaultProvider: string;
         /**
@@ -14311,7 +14357,7 @@ export declare namespace appservice {
          */
         microsoft?: outputs.appservice.WindowsFunctionAppAuthSettingsMicrosoft;
         /**
-         * The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to `~1`.
+         * The Runtime Version of the Authentication / Authorization feature in use for the Windows Function App.
          */
         runtimeVersion: string;
         /**
@@ -14541,7 +14587,7 @@ export declare namespace appservice {
         /**
          * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
          *
-         * > **Note:** The `clientId` value is always considered an allowed audience.
+         * > **NOTE:** This is configured on the Authentication Provider side and is Read Only here.
          */
         allowedAudiences?: string[];
         /**
@@ -14561,7 +14607,9 @@ export declare namespace appservice {
          */
         clientSecretCertificateThumbprint?: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The App Setting name that contains the client secret of the Client.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName?: string;
         /**
@@ -14589,21 +14637,25 @@ export declare namespace appservice {
     }
     interface WindowsFunctionAppAuthSettingsV2AppleV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OpenID Connect Client ID for the Apple web application.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for Apple Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * A list of Login Scopes provided by this Authentication Provider.
+         *
+         * > **NOTE:** This is configured on the Authentication Provider side and is Read Only here.
          */
         loginScopes: string[];
     }
     interface WindowsFunctionAppAuthSettingsV2AzureStaticWebAppV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the Client to use to authenticate with Azure Static Web App Authentication.
          */
         clientId: string;
     }
@@ -14621,11 +14673,11 @@ export declare namespace appservice {
          */
         clientCredentialMethod: string;
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the Client to use to authenticate with the Custom OIDC.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The App Setting name that contains the secret for this Custom OIDC Client. This is generated from `name` above and suffixed with `_PROVIDER_AUTHENTICATION_SECRET`.
          */
         clientSecretSettingName: string;
         /**
@@ -14633,7 +14685,9 @@ export declare namespace appservice {
          */
         issuerEndpoint: string;
         /**
-         * The name which should be used for this Windows Function App. Changing this forces a new Windows Function App to be created. Limit the function name to 32 characters to avoid naming collisions. For more information about [Function App naming rule](https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/resource-name-rules#microsoftweb) and [Host ID Collisions](https://github.com/Azure/azure-functions-host/wiki/Host-IDs#host-id-collisions)
+         * The name of the Custom OIDC Authentication Provider.
+         *
+         * > **NOTE:** An `appSetting` matching this value in upper case with the suffix of `_PROVIDER_AUTHENTICATION_SECRET` is required. e.g. `MYOIDC_PROVIDER_AUTHENTICATION_SECRET` for a value of `myoidc`.
          */
         name: string;
         /**
@@ -14669,41 +14723,43 @@ export declare namespace appservice {
          */
         graphApiVersion: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of scopes that should be requested as part of Facebook Login authentication.
          */
         loginScopes?: string[];
     }
     interface WindowsFunctionAppAuthSettingsV2GithubV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the GitHub app used for login..
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for GitHub Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
          */
         loginScopes?: string[];
     }
     interface WindowsFunctionAppAuthSettingsV2GoogleV2 {
         /**
-         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
-         *
-         * > **Note:** The `clientId` value is always considered an allowed audience.
+         * Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
          */
         allowedAudiences?: string[];
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OpenID Connect Client ID for the Google web application.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for Google Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
          */
         loginScopes?: string[];
     }
@@ -14757,17 +14813,17 @@ export declare namespace appservice {
     }
     interface WindowsFunctionAppAuthSettingsV2MicrosoftV2 {
         /**
-         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
-         *
-         * > **Note:** The `clientId` value is always considered an allowed audience.
+         * Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
          */
         allowedAudiences?: string[];
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OAuth 2.0 client ID that was created for the app used for authentication.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
@@ -15203,9 +15259,9 @@ export declare namespace appservice {
          */
         allowedExternalRedirectUrls: string[];
         /**
-         * The Default Authentication Provider to use when the `unauthenticatedAction` is set to `RedirectToLoginPage`. Possible values include: `apple`, `azureactivedirectory`, `facebook`, `github`, `google`, `twitter` and the `name` of your `customOidcV2` provider.
+         * The default authentication provider to use when multiple providers are configured. Possible values include: `AzureActiveDirectory`, `Facebook`, `Google`, `MicrosoftAccount`, `Twitter`, `Github`.
          *
-         * > **NOTE:** Whilst any value will be accepted by the API for `defaultProvider`, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or customOidc name) as it is used to build the auth endpoint URI.
+         * > **NOTE:** This setting is only needed if multiple providers are configured, and the `unauthenticatedClientAction` is set to "RedirectToLoginPage".
          */
         defaultProvider: string;
         /**
@@ -15235,7 +15291,7 @@ export declare namespace appservice {
          */
         microsoft?: outputs.appservice.WindowsFunctionAppSlotAuthSettingsMicrosoft;
         /**
-         * The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to `~1`.
+         * The RuntimeVersion of the Authentication / Authorization feature in use.
          */
         runtimeVersion: string;
         /**
@@ -15465,7 +15521,7 @@ export declare namespace appservice {
         /**
          * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
          *
-         * > **Note:** The `clientId` value is always considered an allowed audience.
+         * > **NOTE:** This is configured on the Authentication Provider side and is Read Only here.
          */
         allowedAudiences?: string[];
         /**
@@ -15485,7 +15541,9 @@ export declare namespace appservice {
          */
         clientSecretCertificateThumbprint?: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The App Setting name that contains the client secret of the Client.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName?: string;
         /**
@@ -15513,21 +15571,25 @@ export declare namespace appservice {
     }
     interface WindowsFunctionAppSlotAuthSettingsV2AppleV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OpenID Connect Client ID for the Apple web application.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for Apple Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * A list of Login Scopes provided by this Authentication Provider.
+         *
+         * > **NOTE:** This is configured on the Authentication Provider side and is Read Only here.
          */
         loginScopes: string[];
     }
     interface WindowsFunctionAppSlotAuthSettingsV2AzureStaticWebAppV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the Client to use to authenticate with Azure Static Web App Authentication.
          */
         clientId: string;
     }
@@ -15545,11 +15607,11 @@ export declare namespace appservice {
          */
         clientCredentialMethod: string;
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the Client to use to authenticate with the Custom OIDC.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The App Setting name that contains the secret for this Custom OIDC Client. This is generated from `name` above and suffixed with `_PROVIDER_AUTHENTICATION_SECRET`.
          */
         clientSecretSettingName: string;
         /**
@@ -15557,7 +15619,9 @@ export declare namespace appservice {
          */
         issuerEndpoint: string;
         /**
-         * Specifies the name of the Windows Function App Slot. Changing this forces a new resource to be created.
+         * The name of the Custom OIDC Authentication Provider.
+         *
+         * > **NOTE:** An `appSetting` matching this value in upper case with the suffix of `_PROVIDER_AUTHENTICATION_SECRET` is required. e.g. `MYOIDC_PROVIDER_AUTHENTICATION_SECRET` for a value of `myoidc`.
          */
         name: string;
         /**
@@ -15593,41 +15657,43 @@ export declare namespace appservice {
          */
         graphApiVersion: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of scopes that should be requested as part of Facebook Login authentication.
          */
         loginScopes?: string[];
     }
     interface WindowsFunctionAppSlotAuthSettingsV2GithubV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the GitHub app used for login..
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for GitHub Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
          */
         loginScopes?: string[];
     }
     interface WindowsFunctionAppSlotAuthSettingsV2GoogleV2 {
         /**
-         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
-         *
-         * > **Note:** The `clientId` value is always considered an allowed audience.
+         * Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
          */
         allowedAudiences?: string[];
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OpenID Connect Client ID for the Google web application.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for Google Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
          */
         loginScopes?: string[];
     }
@@ -15681,17 +15747,17 @@ export declare namespace appservice {
     }
     interface WindowsFunctionAppSlotAuthSettingsV2MicrosoftV2 {
         /**
-         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
-         *
-         * > **Note:** The `clientId` value is always considered an allowed audience.
+         * Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
          */
         allowedAudiences?: string[];
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OAuth 2.0 client ID that was created for the app used for authentication.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
@@ -16187,9 +16253,9 @@ export declare namespace appservice {
          */
         allowedExternalRedirectUrls: string[];
         /**
-         * The Default Authentication Provider to use when the `unauthenticatedAction` is set to `RedirectToLoginPage`. Possible values include: `apple`, `azureactivedirectory`, `facebook`, `github`, `google`, `twitter` and the `name` of your `customOidcV2` provider.
+         * The default authentication provider to use when multiple providers are configured. Possible values include: `AzureActiveDirectory`, `Facebook`, `Google`, `MicrosoftAccount`, `Twitter`, `Github`
          *
-         * > **NOTE:** Whilst any value will be accepted by the API for `defaultProvider`, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or customOidc name) as it is used to build the auth endpoint URI.
+         * > **NOTE:** This setting is only needed if multiple providers are configured, and the `unauthenticatedClientAction` is set to "RedirectToLoginPage".
          */
         defaultProvider: string;
         /**
@@ -16219,7 +16285,7 @@ export declare namespace appservice {
          */
         microsoft?: outputs.appservice.WindowsWebAppAuthSettingsMicrosoft;
         /**
-         * The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to `~1`.
+         * The RuntimeVersion of the Authentication / Authorization feature in use for the Windows Web App.
          */
         runtimeVersion: string;
         /**
@@ -16449,7 +16515,7 @@ export declare namespace appservice {
         /**
          * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
          *
-         * > **Note:** The `clientId` value is always considered an allowed audience.
+         * > **NOTE:** This is configured on the Authentication Provider side and is Read Only here.
          */
         allowedAudiences?: string[];
         /**
@@ -16469,7 +16535,9 @@ export declare namespace appservice {
          */
         clientSecretCertificateThumbprint?: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The App Setting name that contains the client secret of the Client.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName?: string;
         /**
@@ -16497,21 +16565,25 @@ export declare namespace appservice {
     }
     interface WindowsWebAppAuthSettingsV2AppleV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OpenID Connect Client ID for the Apple web application.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for Apple Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * A list of Login Scopes provided by this Authentication Provider.
+         *
+         * > **NOTE:** This is configured on the Authentication Provider side and is Read Only here.
          */
         loginScopes: string[];
     }
     interface WindowsWebAppAuthSettingsV2AzureStaticWebAppV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the Client to use to authenticate with Azure Static Web App Authentication.
          */
         clientId: string;
     }
@@ -16529,11 +16601,11 @@ export declare namespace appservice {
          */
         clientCredentialMethod: string;
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the Client to use to authenticate with the Custom OIDC.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The App Setting name that contains the secret for this Custom OIDC Client. This is generated from `name` above and suffixed with `_PROVIDER_AUTHENTICATION_SECRET`.
          */
         clientSecretSettingName: string;
         /**
@@ -16541,7 +16613,9 @@ export declare namespace appservice {
          */
         issuerEndpoint: string;
         /**
-         * The name which should be used for this Windows Web App. Changing this forces a new Windows Web App to be created.
+         * The name of the Custom OIDC Authentication Provider.
+         *
+         * > **NOTE:** An `appSetting` matching this value in upper case with the suffix of `_PROVIDER_AUTHENTICATION_SECRET` is required. e.g. `MYOIDC_PROVIDER_AUTHENTICATION_SECRET` for a value of `myoidc`.
          */
         name: string;
         /**
@@ -16577,41 +16651,43 @@ export declare namespace appservice {
          */
         graphApiVersion: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of scopes that should be requested as part of Facebook Login authentication.
          */
         loginScopes?: string[];
     }
     interface WindowsWebAppAuthSettingsV2GithubV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the GitHub app used for login..
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for GitHub Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
          */
         loginScopes?: string[];
     }
     interface WindowsWebAppAuthSettingsV2GoogleV2 {
         /**
-         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
-         *
-         * > **Note:** The `clientId` value is always considered an allowed audience.
+         * Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
          */
         allowedAudiences?: string[];
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OpenID Connect Client ID for the Google web application.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for Google Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
          */
         loginScopes?: string[];
     }
@@ -16665,17 +16741,17 @@ export declare namespace appservice {
     }
     interface WindowsWebAppAuthSettingsV2MicrosoftV2 {
         /**
-         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
-         *
-         * > **Note:** The `clientId` value is always considered an allowed audience.
+         * Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
          */
         allowedAudiences?: string[];
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OAuth 2.0 client ID that was created for the app used for authentication.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
@@ -17377,9 +17453,9 @@ export declare namespace appservice {
          */
         allowedExternalRedirectUrls: string[];
         /**
-         * The Default Authentication Provider to use when the `unauthenticatedAction` is set to `RedirectToLoginPage`. Possible values include: `apple`, `azureactivedirectory`, `facebook`, `github`, `google`, `twitter` and the `name` of your `customOidcV2` provider.
+         * The default authentication provider to use when multiple providers are configured. Possible values include: `AzureActiveDirectory`, `Facebook`, `Google`, `MicrosoftAccount`, `Twitter`, `Github`.
          *
-         * > **NOTE:** Whilst any value will be accepted by the API for `defaultProvider`, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or customOidc name) as it is used to build the auth endpoint URI.
+         * > **NOTE:** This setting is only needed if multiple providers are configured, and the `unauthenticatedClientAction` is set to "RedirectToLoginPage".
          */
         defaultProvider: string;
         /**
@@ -17409,7 +17485,7 @@ export declare namespace appservice {
          */
         microsoft?: outputs.appservice.WindowsWebAppSlotAuthSettingsMicrosoft;
         /**
-         * The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to `~1`.
+         * The RuntimeVersion of the Authentication / Authorization feature in use for the Windows Web App Slot.
          */
         runtimeVersion: string;
         /**
@@ -17639,7 +17715,7 @@ export declare namespace appservice {
         /**
          * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
          *
-         * > **Note:** The `clientId` value is always considered an allowed audience, so should not be included.
+         * > **NOTE:** This is configured on the Authentication Provider side and is Read Only here.
          */
         allowedAudiences?: string[];
         /**
@@ -17659,7 +17735,9 @@ export declare namespace appservice {
          */
         clientSecretCertificateThumbprint?: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The App Setting name that contains the client secret of the Client.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName?: string;
         /**
@@ -17687,21 +17765,25 @@ export declare namespace appservice {
     }
     interface WindowsWebAppSlotAuthSettingsV2AppleV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OpenID Connect Client ID for the Apple web application.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for Apple Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * A list of Login Scopes provided by this Authentication Provider.
+         *
+         * > **NOTE:** This is configured on the Authentication Provider side and is Read Only here.
          */
         loginScopes: string[];
     }
     interface WindowsWebAppSlotAuthSettingsV2AzureStaticWebAppV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the Client to use to authenticate with Azure Static Web App Authentication.
          */
         clientId: string;
     }
@@ -17719,11 +17801,11 @@ export declare namespace appservice {
          */
         clientCredentialMethod: string;
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the Client to use to authenticate with the Custom OIDC.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The App Setting name that contains the secret for this Custom OIDC Client. This is generated from `name` above and suffixed with `_PROVIDER_AUTHENTICATION_SECRET`.
          */
         clientSecretSettingName: string;
         /**
@@ -17732,6 +17814,8 @@ export declare namespace appservice {
         issuerEndpoint: string;
         /**
          * The name of the Custom OIDC Authentication Provider.
+         *
+         * > **NOTE:** An `appSetting` matching this value in upper case with the suffix of `_PROVIDER_AUTHENTICATION_SECRET` is required. e.g. `MYOIDC_PROVIDER_AUTHENTICATION_SECRET` for a value of `myoidc`.
          */
         name: string;
         /**
@@ -17767,41 +17851,43 @@ export declare namespace appservice {
          */
         graphApiVersion: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of scopes that should be requested as part of Facebook Login authentication.
          */
         loginScopes?: string[];
     }
     interface WindowsWebAppSlotAuthSettingsV2GithubV2 {
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The ID of the GitHub app used for login..
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for GitHub Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
          */
         loginScopes?: string[];
     }
     interface WindowsWebAppSlotAuthSettingsV2GoogleV2 {
         /**
-         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
-         *
-         * > **Note:** The `clientId` value is always considered an allowed audience, so should not be included.
+         * Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
          */
         allowedAudiences?: string[];
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OpenID Connect Client ID for the Google web application.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name that contains the `clientSecret` value used for Google Login.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
-         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
+         * The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
          */
         loginScopes?: string[];
     }
@@ -17855,17 +17941,17 @@ export declare namespace appservice {
     }
     interface WindowsWebAppSlotAuthSettingsV2MicrosoftV2 {
         /**
-         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
-         *
-         * > **Note:** The `clientId` value is always considered an allowed audience, so should not be included.
+         * Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
          */
         allowedAudiences?: string[];
         /**
-         * The ID of the Client to use to authenticate with Azure Active Directory.
+         * The OAuth 2.0 client ID that was created for the app used for authentication.
          */
         clientId: string;
         /**
-         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
+         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication.
+         *
+         * !> **NOTE:** A setting with this name must exist in `appSettings` to function correctly.
          */
         clientSecretSettingName: string;
         /**
@@ -19461,17 +19547,8 @@ export declare namespace automation {
         parameters?: outputs.automation.RunBookDraftParameter[];
     }
     interface RunBookDraftContentLink {
-        /**
-         * A `hash` block as defined below.
-         */
         hash?: outputs.automation.RunBookDraftContentLinkHash;
-        /**
-         * The URI of the runbook content.
-         */
         uri: string;
-        /**
-         * Specifies the version of the content
-         */
         version?: string;
     }
     interface RunBookDraftContentLinkHash {
@@ -19508,9 +19585,6 @@ export declare namespace automation {
     }
     interface RunBookJobSchedule {
         jobScheduleId: string;
-        /**
-         * A list of `parameters` block as defined below.
-         */
         parameters?: {
             [key: string]: string;
         };
@@ -21117,21 +21191,12 @@ export declare namespace batch {
         workingDirectory?: string;
     }
     interface PoolStartTaskContainerRegistry {
-        /**
-         * The password to use for authentication against the CIFS file system.
-         */
         password?: string;
-        /**
-         * The container registry URL. Changing this forces a new resource to be created.
-         */
         registryServer: string;
         /**
-         * The reference to the user assigned identity to use to access an Azure Container Registry instead of username and password. Changing this forces a new resource to be created.
+         * The User Assigned Identity to use for Container Registry access.
          */
         userAssignedIdentityId?: string;
-        /**
-         * The user to use for authentication against the CIFS file system.
-         */
         userName?: string;
     }
     interface PoolStartTaskResourceFile {
@@ -24208,17 +24273,11 @@ export declare namespace compute {
          * @deprecated `configurationReferenceBlobUri` has been renamed to `configurationBlobUri` and will be deprecated in 4.0
          */
         configurationReferenceBlobUri?: string;
-        /**
-         * Specifies the order in which the packages have to be installed. Possible values are between `0` and `2,147,483,647`. Changing this forces a new resource to be created.
-         */
         order?: number;
         /**
          * @deprecated `packageReferenceId` has been renamed to `versionId` and will be deprecated in 4.0
          */
         packageReferenceId: string;
-        /**
-         * Specifies a passthrough value for more generic context. This field can be any valid `string` value. Changing this forces a new resource to be created.
-         */
         tag?: string;
     }
     interface LinuxVirtualMachineScaleSetIdentity {
@@ -24978,8 +25037,6 @@ export declare namespace compute {
     interface OrchestratedVirtualMachineScaleSetOsProfileLinuxConfigurationSecret {
         /**
          * One or more `certificate` blocks as defined below.
-         *
-         * > **NOTE:** The schema of the `certificate` block is slightly different depending on if you are provisioning a `windowsConfiguration` or a `linuxConfiguration`.
          */
         certificates: outputs.compute.OrchestratedVirtualMachineScaleSetOsProfileLinuxConfigurationSecretCertificate[];
         /**
@@ -25064,8 +25121,6 @@ export declare namespace compute {
     interface OrchestratedVirtualMachineScaleSetOsProfileWindowsConfigurationSecret {
         /**
          * One or more `certificate` blocks as defined below.
-         *
-         * > **NOTE:** The schema of the `certificate` block is slightly different depending on if you are provisioning a `windowsConfiguration` or a `linuxConfiguration`.
          */
         certificates: outputs.compute.OrchestratedVirtualMachineScaleSetOsProfileWindowsConfigurationSecretCertificate[];
         /**
@@ -25303,7 +25358,6 @@ export declare namespace compute {
         /**
          * Specifies a list of user managed identity ids to be assigned to the VMSS. Required if `type` is `UserAssigned`.
          *
-         * <!--Start PulumiCodeChooser -->
          * ```typescript
          * import * as pulumi from "@pulumi/pulumi";
          * import * as azure from "@pulumi/azure";
@@ -25330,7 +25384,6 @@ export declare namespace compute {
          * });
          * export const principalId = example.identity.apply(identity => identity.principalId);
          * ```
-         * <!--End PulumiCodeChooser -->
          */
         identityIds?: string[];
         principalId: string;
@@ -25886,9 +25939,6 @@ export declare namespace compute {
          * Specifies the name of the Virtual Machine. Changing this forces a new resource to be created.
          */
         computerName: string;
-        /**
-         * Specifies custom data to supply to the machine. On Linux-based systems, this can be used as a cloud-init script. On other systems, this will be copied as a file on disk. Internally, this provider will base64 encode this value before sending it to the API. The maximum length of the binary array is 65535 bytes. Changing this forces a new resource to be created.
-         */
         customData: string;
     }
     interface VirtualMachineOsProfileLinuxConfig {
@@ -26449,17 +26499,11 @@ export declare namespace compute {
          * @deprecated `configurationReferenceBlobUri` has been renamed to `configurationBlobUri` and will be deprecated in 4.0
          */
         configurationReferenceBlobUri?: string;
-        /**
-         * Specifies the order in which the packages have to be installed. Possible values are between `0` and `2,147,483,647`. Changing this forces a new resource to be created.
-         */
         order?: number;
         /**
          * @deprecated `packageReferenceId` has been renamed to `versionId` and will be deprecated in 4.0
          */
         packageReferenceId: string;
-        /**
-         * Specifies a passthrough value for more generic context. This field can be any valid `string` value. Changing this forces a new resource to be created.
-         */
         tag?: string;
     }
     interface WindowsVirtualMachineScaleSetIdentity {
@@ -29989,7 +30033,6 @@ export declare namespace containerservice {
          *
          * > **Note:** AKS will add a delegation to the subnet named here. To prevent further runs from failing you should make sure that the subnet you create for virtual nodes has a delegation, like so.
          *
-         * <!--Start PulumiCodeChooser -->
          * ```typescript
          * import * as pulumi from "@pulumi/pulumi";
          * import * as azure from "@pulumi/azure";
@@ -30002,23 +30045,20 @@ export declare namespace containerservice {
          *     },
          * }]});
          * ```
-         * <!--End PulumiCodeChooser -->
          */
         subnetName: string;
     }
     interface KubernetesClusterAciConnectorLinuxConnectorIdentity {
         /**
-         * The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically. Changing this forces a new resource to be created.
+         * The Client ID of the user-defined Managed Identity used for Web App Routing.
          */
         clientId: string;
         /**
-         * The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically. Changing this forces a new resource to be created.
+         * The Object ID of the user-defined Managed Identity used for Web App Routing
          */
         objectId: string;
         /**
-         * The ID of the User Assigned Identity assigned to the Kubelets. If not specified a Managed Identity is created automatically. Changing this forces a new resource to be created.
-         *
-         * > **Note:** When `kubeletIdentity` is enabled - The `type` field in the `identity` block must be set to `UserAssigned` and `identityIds` must be set.
+         * The ID of the User Assigned Identity used for Web App Routing.
          */
         userAssignedIdentityId: string;
     }
@@ -30109,17 +30149,9 @@ export declare namespace containerservice {
         skipNodesWithSystemPods?: boolean;
     }
     interface KubernetesClusterAzureActiveDirectoryRoleBasedAccessControl {
-        /**
-         * A list of Object IDs of Azure Active Directory Groups which should have Admin Role on the Cluster.
-         */
         adminGroupObjectIds?: string[];
-        /**
-         * Is Role Based Access Control based on Azure AD enabled?
-         */
         azureRbacEnabled?: boolean;
         /**
-         * The Client ID of an Azure Active Directory Application.
-         *
          * @deprecated Azure AD Integration (legacy) (https://aka.ms/aks/aad-legacy) is deprecated and clusters can no longer be created with the Azure AD integration (legacy) enabled. This field will be removed in v4.0 of the AzureRM Provider.
          */
         clientAppId?: string;
@@ -30130,14 +30162,10 @@ export declare namespace containerservice {
          */
         managed?: boolean;
         /**
-         * The Server ID of an Azure Active Directory Application.
-         *
          * @deprecated Azure AD Integration (legacy) (https://aka.ms/aks/aad-legacy) is deprecated and clusters can no longer be created with the Azure AD integration (legacy) enabled. This field will be removed in v4.0 of the AzureRM Provider.
          */
         serverAppId?: string;
         /**
-         * The Server Secret of an Azure Active Directory Application.
-         *
          * @deprecated Azure AD Integration (legacy) (https://aka.ms/aks/aad-legacy) is deprecated and clusters can no longer be created with the Azure AD integration (legacy) enabled. This field will be removed in v4.0 of the AzureRM Provider.
          */
         serverAppSecret?: string;
@@ -30205,9 +30233,6 @@ export declare namespace containerservice {
          * A `linuxOsConfig` block as defined below. `temporaryNameForRotation` must be specified when changing this block.
          */
         linuxOsConfig?: outputs.containerservice.KubernetesClusterDefaultNodePoolLinuxOsConfig;
-        /**
-         * The maximum number of nodes which should exist in this Node Pool. If specified this must be between `1` and `1000`.
-         */
         maxCount?: number;
         /**
          * The maximum number of pods that can run on each agent. `temporaryNameForRotation` must be specified when changing this property.
@@ -30217,21 +30242,11 @@ export declare namespace containerservice {
          * A base64-encoded string which will be written to /etc/motd after decoding. This allows customization of the message of the day for Linux nodes. It cannot be specified for Windows nodes and must be a static string (i.e. will be printed raw and not executed as a script). Changing this forces a new resource to be created.
          */
         messageOfTheDay?: string;
-        /**
-         * The minimum number of nodes which should exist in this Node Pool. If specified this must be between `1` and `1000`.
-         */
         minCount?: number;
         /**
          * The name which should be used for the default Kubernetes Node Pool.
          */
         name: string;
-        /**
-         * The initial number of nodes which should exist in this Node Pool. If specified this must be between `1` and `1000` and between `minCount` and `maxCount`.
-         *
-         * > **Note:** If specified you may wish to use [`ignoreChanges` functionality](https://www.pulumi.com/docs/intro/concepts/programming-model/#ignorechanges) to ignore changes to this field.
-         *
-         * > **Note:** If `enableAutoScaling` is set to `false` both `minCount` and `maxCount` fields need to be set to `null` or omitted from the configuration.
-         */
         nodeCount: number;
         /**
          * A map of Kubernetes labels which should be applied to nodes in the Default Node Pool.
@@ -30621,7 +30636,7 @@ export declare namespace containerservice {
          */
         principalId: string;
         /**
-         * The Tenant ID used for Azure Active Directory Application. If this isn't specified the Tenant ID of the current Subscription is used.
+         * The Tenant ID associated with this Managed Service Identity.
          */
         tenantId: string;
         /**
@@ -30661,17 +30676,15 @@ export declare namespace containerservice {
     }
     interface KubernetesClusterIngressApplicationGatewayIngressApplicationGatewayIdentity {
         /**
-         * The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically. Changing this forces a new resource to be created.
+         * The Client ID of the user-defined Managed Identity used for Web App Routing.
          */
         clientId: string;
         /**
-         * The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically. Changing this forces a new resource to be created.
+         * The Object ID of the user-defined Managed Identity used for Web App Routing
          */
         objectId: string;
         /**
-         * The ID of the User Assigned Identity assigned to the Kubelets. If not specified a Managed Identity is created automatically. Changing this forces a new resource to be created.
-         *
-         * > **Note:** When `kubeletIdentity` is enabled - The `type` field in the `identity` block must be set to `UserAssigned` and `identityIds` must be set.
+         * The ID of the User Assigned Identity used for Web App Routing.
          */
         userAssignedIdentityId: string;
     }
@@ -30703,17 +30716,15 @@ export declare namespace containerservice {
     }
     interface KubernetesClusterKeyVaultSecretsProviderSecretIdentity {
         /**
-         * The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically. Changing this forces a new resource to be created.
+         * The Client ID of the user-defined Managed Identity used for Web App Routing.
          */
         clientId: string;
         /**
-         * The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically. Changing this forces a new resource to be created.
+         * The Object ID of the user-defined Managed Identity used for Web App Routing
          */
         objectId: string;
         /**
-         * The ID of the User Assigned Identity assigned to the Kubelets. If not specified a Managed Identity is created automatically. Changing this forces a new resource to be created.
-         *
-         * > **Note:** When `kubeletIdentity` is enabled - The `type` field in the `identity` block must be set to `UserAssigned` and `identityIds` must be set.
+         * The ID of the User Assigned Identity used for Web App Routing.
          */
         userAssignedIdentityId: string;
     }
@@ -30780,8 +30791,6 @@ export declare namespace containerservice {
         objectId: string;
         /**
          * The ID of the User Assigned Identity assigned to the Kubelets. If not specified a Managed Identity is created automatically. Changing this forces a new resource to be created.
-         *
-         * > **Note:** When `kubeletIdentity` is enabled - The `type` field in the `identity` block must be set to `UserAssigned` and `identityIds` must be set.
          */
         userAssignedIdentityId: string;
     }
@@ -31338,17 +31347,15 @@ export declare namespace containerservice {
     }
     interface KubernetesClusterOmsAgentOmsAgentIdentity {
         /**
-         * The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically. Changing this forces a new resource to be created.
+         * The Client ID of the user-defined Managed Identity used for Web App Routing.
          */
         clientId: string;
         /**
-         * The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically. Changing this forces a new resource to be created.
+         * The Object ID of the user-defined Managed Identity used for Web App Routing
          */
         objectId: string;
         /**
-         * The ID of the User Assigned Identity assigned to the Kubelets. If not specified a Managed Identity is created automatically. Changing this forces a new resource to be created.
-         *
-         * > **Note:** When `kubeletIdentity` is enabled - The `type` field in the `identity` block must be set to `UserAssigned` and `identityIds` must be set.
+         * The ID of the User Assigned Identity used for Web App Routing.
          */
         userAssignedIdentityId: string;
     }
@@ -31416,17 +31423,15 @@ export declare namespace containerservice {
     }
     interface KubernetesClusterWebAppRoutingWebAppRoutingIdentity {
         /**
-         * The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically. Changing this forces a new resource to be created.
+         * The Client ID of the user-defined Managed Identity used for Web App Routing.
          */
         clientId: string;
         /**
-         * The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically. Changing this forces a new resource to be created.
+         * The Object ID of the user-defined Managed Identity used for Web App Routing
          */
         objectId: string;
         /**
-         * The ID of the User Assigned Identity assigned to the Kubelets. If not specified a Managed Identity is created automatically. Changing this forces a new resource to be created.
-         *
-         * > **Note:** When `kubeletIdentity` is enabled - The `type` field in the `identity` block must be set to `UserAssigned` and `identityIds` must be set.
+         * The ID of the User Assigned Identity used for Web App Routing.
          */
         userAssignedIdentityId: string;
     }
@@ -31492,8 +31497,6 @@ export declare namespace containerservice {
         enabled?: boolean;
         /**
          * The client ID of the managed identity associated with the encryption key.
-         *
-         * > **NOTE** The managed identity used in `encryption` also needs to be part of the `identity` block under `identityIds`
          */
         identityClientId: string;
         /**
@@ -31572,9 +31575,6 @@ export declare namespace containerservice {
         ipRange: string;
     }
     interface RegistryNetworkRuleSetVirtualNetwork {
-        /**
-         * The behaviour for requests matching this rule. At this time the only supported value is `Allow`
-         */
         action: string;
         subnetId: string;
     }
@@ -31859,9 +31859,6 @@ export declare namespace containerservice {
         enabled?: boolean;
     }
     interface TokenPasswordPassword1 {
-        /**
-         * The expiration date of the password in RFC3339 format. If not specified, the password never expires. Changing this forces a new resource to be created.
-         */
         expiry?: string;
         /**
          * The value of the password (Sensitive).
@@ -31869,9 +31866,6 @@ export declare namespace containerservice {
         value: string;
     }
     interface TokenPasswordPassword2 {
-        /**
-         * The expiration date of the password in RFC3339 format. If not specified, the password never expires. Changing this forces a new resource to be created.
-         */
         expiry?: string;
         /**
          * The value of the password (Sensitive).
@@ -32195,17 +32189,8 @@ export declare namespace core {
         value: string;
     }
     interface ResourceGroupPolicyAssignmentOverrideSelector {
-        /**
-         * Specify the list of policy reference id values to filter in. Cannot be used with `notIn`.
-         */
         ins?: string[];
-        /**
-         * Specifies which characteristic will narrow down the set of evaluated resources. Possible values are `resourceLocation`, `resourceType` and `resourceWithoutLocation`.
-         */
         kind: string;
-        /**
-         * Specify the list of policy reference id values to filter out. Cannot be used with `in`.
-         */
         notIns?: string[];
     }
     interface ResourceGroupPolicyAssignmentResourceSelector {
@@ -32219,17 +32204,8 @@ export declare namespace core {
         selectors: outputs.core.ResourceGroupPolicyAssignmentResourceSelectorSelector[];
     }
     interface ResourceGroupPolicyAssignmentResourceSelectorSelector {
-        /**
-         * Specify the list of policy reference id values to filter in. Cannot be used with `notIn`.
-         */
         ins?: string[];
-        /**
-         * Specifies which characteristic will narrow down the set of evaluated resources. Possible values are `resourceLocation`, `resourceType` and `resourceWithoutLocation`.
-         */
         kind: string;
-        /**
-         * Specify the list of policy reference id values to filter out. Cannot be used with `in`.
-         */
         notIns?: string[];
     }
     interface ResourcePolicyAssignmentIdentity {
@@ -32273,17 +32249,8 @@ export declare namespace core {
         value: string;
     }
     interface ResourcePolicyAssignmentOverrideSelector {
-        /**
-         * Specify the list of policy reference id values to filter in. Cannot be used with `notIn`.
-         */
         ins?: string[];
-        /**
-         * Specifies which characteristic will narrow down the set of evaluated resources. Possible values are `resourceLocation`, `resourceType` and `resourceWithoutLocation`.
-         */
         kind: string;
-        /**
-         * Specify the list of policy reference id values to filter out. Cannot be used with `in`.
-         */
         notIns?: string[];
     }
     interface ResourcePolicyAssignmentResourceSelector {
@@ -32297,17 +32264,8 @@ export declare namespace core {
         selectors: outputs.core.ResourcePolicyAssignmentResourceSelectorSelector[];
     }
     interface ResourcePolicyAssignmentResourceSelectorSelector {
-        /**
-         * Specify the list of policy reference id values to filter in. Cannot be used with `notIn`.
-         */
         ins?: string[];
-        /**
-         * Specifies which characteristic will narrow down the set of evaluated resources. Possible values are `resourceLocation`, `resourceType` and `resourceWithoutLocation`.
-         */
         kind: string;
-        /**
-         * Specify the list of policy reference id values to filter out. Cannot be used with `in`.
-         */
         notIns?: string[];
     }
     interface ResourceProviderRegistrationFeature {
@@ -32444,17 +32402,8 @@ export declare namespace core {
         value: string;
     }
     interface SubscriptionPolicyAssignmentOverrideSelector {
-        /**
-         * Specify the list of policy reference id values to filter in. Cannot be used with `notIn`.
-         */
         ins?: string[];
-        /**
-         * Specifies which characteristic will narrow down the set of evaluated resources. Possible values are `resourceLocation`, `resourceType` and `resourceWithoutLocation`.
-         */
         kind: string;
-        /**
-         * Specify the list of policy reference id values to filter out. Cannot be used with `in`.
-         */
         notIns?: string[];
     }
     interface SubscriptionPolicyAssignmentResourceSelector {
@@ -32468,17 +32417,8 @@ export declare namespace core {
         selectors: outputs.core.SubscriptionPolicyAssignmentResourceSelectorSelector[];
     }
     interface SubscriptionPolicyAssignmentResourceSelectorSelector {
-        /**
-         * Specify the list of policy reference id values to filter in. Cannot be used with `notIn`.
-         */
         ins?: string[];
-        /**
-         * Specifies which characteristic will narrow down the set of evaluated resources. Possible values are `resourceLocation`, `resourceType` and `resourceWithoutLocation`.
-         */
         kind: string;
-        /**
-         * Specify the list of policy reference id values to filter out. Cannot be used with `in`.
-         */
         notIns?: string[];
     }
 }
@@ -32571,7 +32511,7 @@ export declare namespace cosmosdb {
          */
         failoverPriority: number;
         /**
-         * The ID of the virtual network subnet.
+         * The CosmosDB Account ID.
          */
         id: string;
         /**
@@ -32905,13 +32845,11 @@ export declare namespace cosmosdb {
     }
     interface MongoCollectionSystemIndex {
         /**
-         * Specifies the list of user settable keys for each Cosmos DB Mongo Collection.
+         * The list of system keys which are not settable for each Cosmos DB Mongo Collection.
          */
         keys: string[];
         /**
-         * Is the index unique or not? Defaults to `false`.
-         *
-         * > **Note:** An index with an "_id" key must be specified.
+         * Identifies whether the table contains no duplicate values.
          */
         unique: boolean;
     }
@@ -34388,7 +34326,7 @@ export declare namespace datafactory {
          */
         principalId: string;
         /**
-         * Specifies the Tenant ID associated with the VSTS account.
+         * The Tenant ID associated with this Managed Service Identity.
          */
         tenantId: string;
         /**
@@ -34909,23 +34847,11 @@ export declare namespace datafactory {
         userName: string;
     }
     interface IntegrationRuntimeSsisExpressCustomSetupCommandKeyKeyVaultPassword {
-        /**
-         * Specifies the name of an existing Key Vault Data Factory Linked Service.
-         */
         linkedServiceName: string;
-        /**
-         * A map of parameters to associate with the Key Vault Data Factory Linked Service.
-         */
         parameters?: {
             [key: string]: string;
         };
-        /**
-         * Specifies the secret name in Azure Key Vault.
-         */
         secretName: string;
-        /**
-         * Specifies the secret version in Azure Key Vault.
-         */
         secretVersion?: string;
     }
     interface IntegrationRuntimeSsisExpressCustomSetupComponent {
@@ -34943,23 +34869,11 @@ export declare namespace datafactory {
         name: string;
     }
     interface IntegrationRuntimeSsisExpressCustomSetupComponentKeyVaultLicense {
-        /**
-         * Specifies the name of an existing Key Vault Data Factory Linked Service.
-         */
         linkedServiceName: string;
-        /**
-         * A map of parameters to associate with the Key Vault Data Factory Linked Service.
-         */
         parameters?: {
             [key: string]: string;
         };
-        /**
-         * Specifies the secret name in Azure Key Vault.
-         */
         secretName: string;
-        /**
-         * Specifies the secret version in Azure Key Vault.
-         */
         secretVersion?: string;
     }
     interface IntegrationRuntimeSsisExpressVnetIntegration {
@@ -36588,219 +36502,77 @@ export declare namespace eventgrid {
         stringNotIns?: outputs.eventgrid.EventSubscriptionAdvancedFilterStringNotIn[];
     }
     interface EventSubscriptionAdvancedFilterBoolEqual {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies a single value to compare to when using a single value operator.
-         *
-         * OR
-         */
         value: boolean;
     }
     interface EventSubscriptionAdvancedFilterIsNotNull {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
     }
     interface EventSubscriptionAdvancedFilterIsNullOrUndefined {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
     }
     interface EventSubscriptionAdvancedFilterNumberGreaterThan {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies a single value to compare to when using a single value operator.
-         *
-         * OR
-         */
         value: number;
     }
     interface EventSubscriptionAdvancedFilterNumberGreaterThanOrEqual {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies a single value to compare to when using a single value operator.
-         *
-         * OR
-         */
         value: number;
     }
     interface EventSubscriptionAdvancedFilterNumberIn {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: number[];
     }
     interface EventSubscriptionAdvancedFilterNumberInRange {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: number[][];
     }
     interface EventSubscriptionAdvancedFilterNumberLessThan {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies a single value to compare to when using a single value operator.
-         *
-         * OR
-         */
         value: number;
     }
     interface EventSubscriptionAdvancedFilterNumberLessThanOrEqual {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies a single value to compare to when using a single value operator.
-         *
-         * OR
-         */
         value: number;
     }
     interface EventSubscriptionAdvancedFilterNumberNotIn {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: number[];
     }
     interface EventSubscriptionAdvancedFilterNumberNotInRange {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: number[][];
     }
     interface EventSubscriptionAdvancedFilterStringBeginsWith {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface EventSubscriptionAdvancedFilterStringContain {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface EventSubscriptionAdvancedFilterStringEndsWith {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface EventSubscriptionAdvancedFilterStringIn {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface EventSubscriptionAdvancedFilterStringNotBeginsWith {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface EventSubscriptionAdvancedFilterStringNotContain {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface EventSubscriptionAdvancedFilterStringNotEndsWith {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface EventSubscriptionAdvancedFilterStringNotIn {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface EventSubscriptionAzureFunctionEndpoint {
@@ -37100,219 +36872,77 @@ export declare namespace eventgrid {
         stringNotIns?: outputs.eventgrid.SystemTopicEventSubscriptionAdvancedFilterStringNotIn[];
     }
     interface SystemTopicEventSubscriptionAdvancedFilterBoolEqual {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies a single value to compare to when using a single value operator.
-         *
-         * OR
-         */
         value: boolean;
     }
     interface SystemTopicEventSubscriptionAdvancedFilterIsNotNull {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
     }
     interface SystemTopicEventSubscriptionAdvancedFilterIsNullOrUndefined {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
     }
     interface SystemTopicEventSubscriptionAdvancedFilterNumberGreaterThan {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies a single value to compare to when using a single value operator.
-         *
-         * OR
-         */
         value: number;
     }
     interface SystemTopicEventSubscriptionAdvancedFilterNumberGreaterThanOrEqual {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies a single value to compare to when using a single value operator.
-         *
-         * OR
-         */
         value: number;
     }
     interface SystemTopicEventSubscriptionAdvancedFilterNumberIn {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: number[];
     }
     interface SystemTopicEventSubscriptionAdvancedFilterNumberInRange {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: number[][];
     }
     interface SystemTopicEventSubscriptionAdvancedFilterNumberLessThan {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies a single value to compare to when using a single value operator.
-         *
-         * OR
-         */
         value: number;
     }
     interface SystemTopicEventSubscriptionAdvancedFilterNumberLessThanOrEqual {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies a single value to compare to when using a single value operator.
-         *
-         * OR
-         */
         value: number;
     }
     interface SystemTopicEventSubscriptionAdvancedFilterNumberNotIn {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: number[];
     }
     interface SystemTopicEventSubscriptionAdvancedFilterNumberNotInRange {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: number[][];
     }
     interface SystemTopicEventSubscriptionAdvancedFilterStringBeginsWith {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface SystemTopicEventSubscriptionAdvancedFilterStringContain {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface SystemTopicEventSubscriptionAdvancedFilterStringEndsWith {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface SystemTopicEventSubscriptionAdvancedFilterStringIn {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface SystemTopicEventSubscriptionAdvancedFilterStringNotBeginsWith {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface SystemTopicEventSubscriptionAdvancedFilterStringNotContain {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface SystemTopicEventSubscriptionAdvancedFilterStringNotEndsWith {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface SystemTopicEventSubscriptionAdvancedFilterStringNotIn {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface SystemTopicEventSubscriptionAzureFunctionEndpoint {
@@ -37878,219 +37508,77 @@ export declare namespace eventhub {
         stringNotIns?: outputs.eventhub.EventSubscriptionAdvancedFilterStringNotIn[];
     }
     interface EventSubscriptionAdvancedFilterBoolEqual {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies a single value to compare to when using a single value operator.
-         *
-         * OR
-         */
         value: boolean;
     }
     interface EventSubscriptionAdvancedFilterIsNotNull {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
     }
     interface EventSubscriptionAdvancedFilterIsNullOrUndefined {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
     }
     interface EventSubscriptionAdvancedFilterNumberGreaterThan {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies a single value to compare to when using a single value operator.
-         *
-         * OR
-         */
         value: number;
     }
     interface EventSubscriptionAdvancedFilterNumberGreaterThanOrEqual {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies a single value to compare to when using a single value operator.
-         *
-         * OR
-         */
         value: number;
     }
     interface EventSubscriptionAdvancedFilterNumberIn {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: number[];
     }
     interface EventSubscriptionAdvancedFilterNumberInRange {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: number[][];
     }
     interface EventSubscriptionAdvancedFilterNumberLessThan {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies a single value to compare to when using a single value operator.
-         *
-         * OR
-         */
         value: number;
     }
     interface EventSubscriptionAdvancedFilterNumberLessThanOrEqual {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies a single value to compare to when using a single value operator.
-         *
-         * OR
-         */
         value: number;
     }
     interface EventSubscriptionAdvancedFilterNumberNotIn {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: number[];
     }
     interface EventSubscriptionAdvancedFilterNumberNotInRange {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: number[][];
     }
     interface EventSubscriptionAdvancedFilterStringBeginsWith {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface EventSubscriptionAdvancedFilterStringContain {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface EventSubscriptionAdvancedFilterStringEndsWith {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface EventSubscriptionAdvancedFilterStringIn {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface EventSubscriptionAdvancedFilterStringNotBeginsWith {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface EventSubscriptionAdvancedFilterStringNotContain {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface EventSubscriptionAdvancedFilterStringNotEndsWith {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface EventSubscriptionAdvancedFilterStringNotIn {
-        /**
-         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
-         */
         key: string;
-        /**
-         * Specifies an array of values to compare to when using a multiple values operator.
-         *
-         * > **NOTE:** A maximum of total number of advanced filter values allowed on event subscription is 25.
-         */
         values: string[];
     }
     interface EventSubscriptionAzureFunctionEndpoint {
@@ -39054,21 +38542,9 @@ export declare namespace hdinsight {
          * Specifies the name for this HDInsight HBase Cluster. Changing this forces a new resource to be created.
          */
         name: string;
-        /**
-         * Indicates whether this IP configuration is primary.
-         */
         primary?: boolean;
-        /**
-         * The private IP address of the IP configuration.
-         */
         privateIpAddress?: string;
-        /**
-         * The private IP allocation method. The only possible value now is `Dynamic`.
-         */
         privateIpAllocationMethod?: string;
-        /**
-         * The ID of the Subnet within the Virtual Network where the Head Nodes should be provisioned within. Changing this forces a new resource to be created.
-         */
         subnetId?: string;
     }
     interface HBaseClusterRoles {
@@ -39505,21 +38981,9 @@ export declare namespace hdinsight {
          * Specifies the name for this HDInsight Hadoop Cluster. Changing this forces a new resource to be created.
          */
         name: string;
-        /**
-         * Indicates whether this IP configuration is primary.
-         */
         primary?: boolean;
-        /**
-         * The private ip address of the endpoint.
-         */
         privateIpAddress?: string;
-        /**
-         * The private IP allocation method. The only possible value now is `Dynamic`.
-         */
         privateIpAllocationMethod?: string;
-        /**
-         * The ID of the Subnet within the Virtual Network where the Head Nodes should be provisioned within. Changing this forces a new resource to be created.
-         */
         subnetId?: string;
     }
     interface HadoopClusterRoles {
@@ -40046,21 +39510,9 @@ export declare namespace hdinsight {
          * Specifies the name for this HDInsight Interactive Query Cluster. Changing this forces a new resource to be created.
          */
         name: string;
-        /**
-         * Indicates whether this IP configuration is primary.
-         */
         primary?: boolean;
-        /**
-         * The private IP address of the IP configuration.
-         */
         privateIpAddress?: string;
-        /**
-         * The private IP allocation method. The only possible value now is `Dynamic`.
-         */
         privateIpAllocationMethod?: string;
-        /**
-         * The ID of the Subnet within the Virtual Network where the Head Nodes should be provisioned within. Changing this forces a new resource to be created.
-         */
         subnetId?: string;
     }
     interface InteractiveQueryClusterRoles {
@@ -40507,21 +39959,9 @@ export declare namespace hdinsight {
          * Specifies the name for this HDInsight Kafka Cluster. Changing this forces a new resource to be created.
          */
         name: string;
-        /**
-         * Indicates whether this IP configuration is primary.
-         */
         primary?: boolean;
-        /**
-         * The private IP address of the IP configuration.
-         */
         privateIpAddress?: string;
-        /**
-         * The private IP allocation method. The only possible value now is `Dynamic`.
-         */
         privateIpAllocationMethod?: string;
-        /**
-         * The ID of the Subnet within the Virtual Network where the Head Nodes should be provisioned within. Changing this forces a new resource to be created.
-         */
         subnetId?: string;
     }
     interface KafkaClusterRestProxy {
@@ -40992,21 +40432,9 @@ export declare namespace hdinsight {
          * Specifies the name for this HDInsight Spark Cluster. Changing this forces a new resource to be created.
          */
         name: string;
-        /**
-         * Indicates whether this IP configuration is primary.
-         */
         primary?: boolean;
-        /**
-         * The private IP address of the IP configuration.
-         */
         privateIpAddress?: string;
-        /**
-         * The private IP allocation method. The only possible value now is `Dynamic`.
-         */
         privateIpAllocationMethod?: string;
-        /**
-         * The ID of the Subnet within the Virtual Network where the Head Nodes should be provisioned within. Changing this forces a new resource to be created.
-         */
         subnetId?: string;
     }
     interface SparkClusterRoles {
@@ -44556,7 +43984,7 @@ export declare namespace machinelearning {
          */
         principalId: string;
         /**
-         * User’s AAD Tenant Id.
+         * The Tenant ID for the Service Principal associated with the Managed Service Identity of this Machine Learning Compute Instance.
          */
         tenantId: string;
         /**
@@ -45007,17 +44435,8 @@ export declare namespace management {
         value: string;
     }
     interface GroupPolicyAssignmentOverrideSelector {
-        /**
-         * Specify the list of policy reference id values to filter in. Cannot be used with `notIn`.
-         */
         ins?: string[];
-        /**
-         * Specifies which characteristic will narrow down the set of evaluated resources. Possible values are `resourceLocation`, `resourceType` and `resourceWithoutLocation`.
-         */
         kind: string;
-        /**
-         * Specify the list of policy reference id values to filter out. Cannot be used with `in`.
-         */
         notIns?: string[];
     }
     interface GroupPolicyAssignmentResourceSelector {
@@ -45031,17 +44450,8 @@ export declare namespace management {
         selectors: outputs.management.GroupPolicyAssignmentResourceSelectorSelector[];
     }
     interface GroupPolicyAssignmentResourceSelectorSelector {
-        /**
-         * Specify the list of policy reference id values to filter in. Cannot be used with `notIn`.
-         */
         ins?: string[];
-        /**
-         * Specifies which characteristic will narrow down the set of evaluated resources. Possible values are `resourceLocation`, `resourceType` and `resourceWithoutLocation`.
-         */
         kind: string;
-        /**
-         * Specify the list of policy reference id values to filter out. Cannot be used with `in`.
-         */
         notIns?: string[];
     }
 }
@@ -45101,17 +44511,8 @@ export declare namespace media {
         conditions: outputs.media.AccountFilterTrackSelectionCondition[];
     }
     interface AccountFilterTrackSelectionCondition {
-        /**
-         * The condition operation to test a track property against. Supported values are `Equal` and `NotEqual`.
-         */
         operation: string;
-        /**
-         * The track property to compare. Supported values are `Bitrate`, `FourCC`, `Language`, `Name` and `Type`. Check [documentation](https://docs.microsoft.com/azure/media-services/latest/filters-concept) for more details.
-         */
         property: string;
-        /**
-         * The track property value to match or not match.
-         */
         value: string;
     }
     interface AssetFilterPresentationTimeRange {
@@ -46178,7 +45579,7 @@ export declare namespace media {
          */
         keyFrameInterval?: string;
         /**
-         * Specifies the label for the codec. The label can be used to control muxing behavior.
+         * The alphanumeric label for this layer, which can be used in multiplexing different video and audio layers, or in naming the output file.
          */
         label?: string;
         /**
@@ -46274,7 +45675,7 @@ export declare namespace media {
          */
         keyFrameInterval?: string;
         /**
-         * Specifies the label for the codec. The label can be used to control muxing behavior.
+         * The alphanumeric label for this layer, which can be used in multiplexing different video and audio layers, or in naming the output file.
          */
         label?: string;
         /**
@@ -46358,7 +45759,7 @@ export declare namespace media {
          */
         keyFrameInterval?: string;
         /**
-         * Specifies the label for the codec. The label can be used to control muxing behavior.
+         * The alphanumeric label for this layer, which can be used in multiplexing different video and audio layers, or in naming the output file.
          */
         label?: string;
         /**
@@ -50818,7 +50219,7 @@ export declare namespace mssql {
          */
         principalId: string;
         /**
-         * The tenant id of the Azure AD Administrator of this SQL Server.
+         * The Tenant ID for the Service Principal associated with the Identity of this SQL Server.
          */
         tenantId: string;
         /**
@@ -51115,23 +50516,11 @@ export declare namespace mssql {
         tempDbSettings?: outputs.mssql.VirtualMachineStorageConfigurationTempDbSettings;
     }
     interface VirtualMachineStorageConfigurationDataSettings {
-        /**
-         * The SQL Server default path
-         */
         defaultFilePath: string;
-        /**
-         * A list of Logical Unit Numbers for the disks.
-         */
         luns: number[];
     }
     interface VirtualMachineStorageConfigurationLogSettings {
-        /**
-         * The SQL Server default path
-         */
         defaultFilePath: string;
-        /**
-         * A list of Logical Unit Numbers for the disks.
-         */
         luns: number[];
     }
     interface VirtualMachineStorageConfigurationTempDbSettings {
@@ -51884,21 +51273,9 @@ export declare namespace netapp {
         volumeSpecName: string;
     }
     interface VolumeGroupSapHanaVolumeDataProtectionReplication {
-        /**
-         * The endpoint type. Possible values are `dst` and `src`. Defaults to `dst`.
-         */
         endpointType?: string;
-        /**
-         * Location of the primary volume.
-         */
         remoteVolumeLocation: string;
-        /**
-         * Resource ID of the primary volume.
-         */
         remoteVolumeResourceId: string;
-        /**
-         * eplication frequency. Possible values are `10minutes`, `daily` and `hourly`.
-         */
         replicationFrequency: string;
     }
     interface VolumeGroupSapHanaVolumeDataProtectionSnapshotPolicy {
@@ -52007,7 +51384,7 @@ export declare namespace network {
          */
         id: string;
         /**
-         * The name of the Backend HTTP Settings Collection.
+         * The name of the Authentication Certificate.
          */
         name: string;
         /**
@@ -52601,9 +51978,6 @@ export declare namespace network {
         publicCertData: string;
     }
     interface ApplicationGatewaySslPolicy {
-        /**
-         * A List of accepted cipher suites. Possible values are: `TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA`, `TLS_DHE_DSS_WITH_AES_128_CBC_SHA`, `TLS_DHE_DSS_WITH_AES_128_CBC_SHA256`, `TLS_DHE_DSS_WITH_AES_256_CBC_SHA`, `TLS_DHE_DSS_WITH_AES_256_CBC_SHA256`, `TLS_DHE_RSA_WITH_AES_128_CBC_SHA`, `TLS_DHE_RSA_WITH_AES_128_GCM_SHA256`, `TLS_DHE_RSA_WITH_AES_256_CBC_SHA`, `TLS_DHE_RSA_WITH_AES_256_GCM_SHA384`, `TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA`, `TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256`, `TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256`, `TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA`, `TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384`, `TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384`, `TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA`, `TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256`, `TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256`, `TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA`, `TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384`, `TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384`, `TLS_RSA_WITH_3DES_EDE_CBC_SHA`, `TLS_RSA_WITH_AES_128_CBC_SHA`, `TLS_RSA_WITH_AES_128_CBC_SHA256`, `TLS_RSA_WITH_AES_128_GCM_SHA256`, `TLS_RSA_WITH_AES_256_CBC_SHA`, `TLS_RSA_WITH_AES_256_CBC_SHA256` and `TLS_RSA_WITH_AES_256_GCM_SHA384`.
-         */
         cipherSuites?: string[];
         /**
          * A list of SSL Protocols which should be disabled on this Application Gateway. Possible values are `TLSv1_0`, `TLSv1_1`, `TLSv1_2` and `TLSv1_3`.
@@ -52611,13 +51985,7 @@ export declare namespace network {
          * > **NOTE:** `disabledProtocols` cannot be set when `policyName` or `policyType` are set.
          */
         disabledProtocols?: string[];
-        /**
-         * The minimal TLS version. Possible values are `TLSv1_0`, `TLSv1_1`, `TLSv1_2` and `TLSv1_3`.
-         */
         minProtocolVersion?: string;
-        /**
-         * The Name of the Policy e.g. AppGwSslPolicy20170401S. Required if `policyType` is set to `Predefined`. Possible values can change over time and are published here <https://docs.microsoft.com/azure/application-gateway/application-gateway-ssl-policy-overview>. Not compatible with `disabledProtocols`.
-         */
         policyName?: string;
         /**
          * The Type of the Policy. Possible values are `Predefined`, `Custom` and `CustomV2`.
@@ -52653,9 +52021,6 @@ export declare namespace network {
         verifyClientCertificateRevocation?: string;
     }
     interface ApplicationGatewaySslProfileSslPolicy {
-        /**
-         * A List of accepted cipher suites. Possible values are: `TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA`, `TLS_DHE_DSS_WITH_AES_128_CBC_SHA`, `TLS_DHE_DSS_WITH_AES_128_CBC_SHA256`, `TLS_DHE_DSS_WITH_AES_256_CBC_SHA`, `TLS_DHE_DSS_WITH_AES_256_CBC_SHA256`, `TLS_DHE_RSA_WITH_AES_128_CBC_SHA`, `TLS_DHE_RSA_WITH_AES_128_GCM_SHA256`, `TLS_DHE_RSA_WITH_AES_256_CBC_SHA`, `TLS_DHE_RSA_WITH_AES_256_GCM_SHA384`, `TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA`, `TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256`, `TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256`, `TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA`, `TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384`, `TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384`, `TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA`, `TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256`, `TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256`, `TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA`, `TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384`, `TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384`, `TLS_RSA_WITH_3DES_EDE_CBC_SHA`, `TLS_RSA_WITH_AES_128_CBC_SHA`, `TLS_RSA_WITH_AES_128_CBC_SHA256`, `TLS_RSA_WITH_AES_128_GCM_SHA256`, `TLS_RSA_WITH_AES_256_CBC_SHA`, `TLS_RSA_WITH_AES_256_CBC_SHA256` and `TLS_RSA_WITH_AES_256_GCM_SHA384`.
-         */
         cipherSuites?: string[];
         /**
          * A list of SSL Protocols which should be disabled on this Application Gateway. Possible values are `TLSv1_0`, `TLSv1_1`, `TLSv1_2` and `TLSv1_3`.
@@ -52663,13 +52028,7 @@ export declare namespace network {
          * > **NOTE:** `disabledProtocols` cannot be set when `policyName` or `policyType` are set.
          */
         disabledProtocols?: string[];
-        /**
-         * The minimal TLS version. Possible values are `TLSv1_0`, `TLSv1_1`, `TLSv1_2` and `TLSv1_3`.
-         */
         minProtocolVersion?: string;
-        /**
-         * The Name of the Policy e.g. AppGwSslPolicy20170401S. Required if `policyType` is set to `Predefined`. Possible values can change over time and are published here <https://docs.microsoft.com/azure/application-gateway/application-gateway-ssl-policy-overview>. Not compatible with `disabledProtocols`.
-         */
         policyName?: string;
         /**
          * The Type of the Policy. Possible values are `Predefined`, `Custom` and `CustomV2`.
@@ -52982,9 +52341,6 @@ export declare namespace network {
         type: string;
     }
     interface ExpressRoutePortLink1 {
-        /**
-         * Whether enable administration state on the Express Route Port Link? Defaults to `false`.
-         */
         adminEnabled?: boolean;
         /**
          * The connector type of the Express Route Port Link.
@@ -52998,23 +52354,9 @@ export declare namespace network {
          * The interface name of the Azure router associated with the Express Route Port Link.
          */
         interfaceName: string;
-        /**
-         * The ID of the Key Vault Secret that contains the Mac security CAK key for this Express Route Port Link.
-         */
         macsecCakKeyvaultSecretId?: string;
-        /**
-         * The MACSec cipher used for this Express Route Port Link. Possible values are `GcmAes128` and `GcmAes256`. Defaults to `GcmAes128`.
-         */
         macsecCipher?: string;
-        /**
-         * The ID of the Key Vault Secret that contains the MACSec CKN key for this Express Route Port Link.
-         */
         macsecCknKeyvaultSecretId?: string;
-        /**
-         * Should Secure Channel Identifier on the Express Route Port Link be enabled? Defaults to `false`.
-         *
-         * > **NOTE** `macsecCknKeyvaultSecretId` and `macsecCakKeyvaultSecretId` should be used together with `identity`, so that the Express Route Port instance have the right permission to access the Key Vault.
-         */
         macsecSciEnabled?: boolean;
         /**
          * The ID that maps from the Express Route Port Link to the patch panel port.
@@ -53030,9 +52372,6 @@ export declare namespace network {
         routerName: string;
     }
     interface ExpressRoutePortLink2 {
-        /**
-         * Whether enable administration state on the Express Route Port Link? Defaults to `false`.
-         */
         adminEnabled?: boolean;
         /**
          * The connector type of the Express Route Port Link.
@@ -53046,23 +52385,9 @@ export declare namespace network {
          * The interface name of the Azure router associated with the Express Route Port Link.
          */
         interfaceName: string;
-        /**
-         * The ID of the Key Vault Secret that contains the Mac security CAK key for this Express Route Port Link.
-         */
         macsecCakKeyvaultSecretId?: string;
-        /**
-         * The MACSec cipher used for this Express Route Port Link. Possible values are `GcmAes128` and `GcmAes256`. Defaults to `GcmAes128`.
-         */
         macsecCipher?: string;
-        /**
-         * The ID of the Key Vault Secret that contains the MACSec CKN key for this Express Route Port Link.
-         */
         macsecCknKeyvaultSecretId?: string;
-        /**
-         * Should Secure Channel Identifier on the Express Route Port Link be enabled? Defaults to `false`.
-         *
-         * > **NOTE** `macsecCknKeyvaultSecretId` and `macsecCakKeyvaultSecretId` should be used together with `identity`, so that the Express Route Port instance have the right permission to access the Key Vault.
-         */
         macsecSciEnabled?: boolean;
         /**
          * The ID that maps from the Express Route Port Link to the patch panel port.
@@ -53410,53 +52735,20 @@ export declare namespace network {
         rules: outputs.network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRule[];
     }
     interface FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRule {
-        /**
-         * The description which should be used for this rule.
-         */
         description?: string;
-        /**
-         * Specifies a list of destination IP addresses (including CIDR, IP range and `*`).
-         */
         destinationAddresses?: string[];
-        /**
-         * Specifies a list of destination FQDN tags.
-         */
         destinationFqdnTags?: string[];
-        /**
-         * Specifies a list of destination FQDNs. Conflicts with `destinationUrls`.
-         */
         destinationFqdns?: string[];
-        /**
-         * Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with `destinationFqdns`.
-         */
         destinationUrls?: string[];
-        /**
-         * Specifies a list of HTTP/HTTPS headers to insert. One or more `httpHeaders` blocks as defined below.
-         */
         httpHeaders?: outputs.network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleHttpHeader[];
         /**
          * The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
          */
         name: string;
-        /**
-         * One or more `protocols` blocks as defined below.
-         */
         protocols?: outputs.network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocol[];
-        /**
-         * Specifies a list of source IP addresses (including CIDR, IP range and `*`).
-         */
         sourceAddresses?: string[];
-        /**
-         * Specifies a list of source IP groups.
-         */
         sourceIpGroups?: string[];
-        /**
-         * Boolean specifying if TLS shall be terminated (true) or not (false). Must be `true` when using `destinationUrls`. Needs Premium SKU for Firewall Policy.
-         */
         terminateTls?: boolean;
-        /**
-         * Specifies a list of web categories to which access is denied or allowed depending on the value of `action` above. Needs Premium SKU for Firewall Policy.
-         */
         webCategories?: string[];
     }
     interface FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleHttpHeader {
@@ -53498,47 +52790,18 @@ export declare namespace network {
         rules: outputs.network.FirewallPolicyRuleCollectionGroupNatRuleCollectionRule[];
     }
     interface FirewallPolicyRuleCollectionGroupNatRuleCollectionRule {
-        /**
-         * The description which should be used for this rule.
-         */
         description?: string;
-        /**
-         * The destination IP address (including CIDR).
-         */
         destinationAddress?: string;
-        /**
-         * Specifies a list of destination ports. Only one destination port is supported in a NAT rule.
-         */
         destinationPorts?: string;
         /**
          * The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
          */
         name: string;
-        /**
-         * One or more `protocols` blocks as defined below.
-         */
         protocols: string[];
-        /**
-         * Specifies a list of source IP addresses (including CIDR, IP range and `*`).
-         */
         sourceAddresses?: string[];
-        /**
-         * Specifies a list of source IP groups.
-         */
         sourceIpGroups?: string[];
-        /**
-         * Specifies the translated address.
-         */
         translatedAddress?: string;
-        /**
-         * Specifies the translated FQDN.
-         *
-         * > **NOTE:** Exactly one of `translatedAddress` and `translatedFqdn` should be set.
-         */
         translatedFqdn?: string;
-        /**
-         * Specifies the translated port.
-         */
         translatedPort: number;
     }
     interface FirewallPolicyRuleCollectionGroupNetworkRuleCollection {
@@ -53560,41 +52823,17 @@ export declare namespace network {
         rules: outputs.network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRule[];
     }
     interface FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRule {
-        /**
-         * The description which should be used for this rule.
-         */
         description?: string;
-        /**
-         * Specifies a list of destination IP addresses (including CIDR, IP range and `*`).
-         */
         destinationAddresses?: string[];
-        /**
-         * Specifies a list of destination FQDNs. Conflicts with `destinationUrls`.
-         */
         destinationFqdns?: string[];
-        /**
-         * Specifies a list of destination IP groups.
-         */
         destinationIpGroups?: string[];
-        /**
-         * Specifies a list of destination ports. Only one destination port is supported in a NAT rule.
-         */
         destinationPorts: string[];
         /**
          * The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
          */
         name: string;
-        /**
-         * One or more `protocols` blocks as defined below.
-         */
         protocols: string[];
-        /**
-         * Specifies a list of source IP addresses (including CIDR, IP range and `*`).
-         */
         sourceAddresses?: string[];
-        /**
-         * Specifies a list of source IP groups.
-         */
         sourceIpGroups?: string[];
     }
     interface FirewallPolicyThreatIntelligenceAllowlist {
@@ -55403,7 +54642,7 @@ export declare namespace network {
          */
         primary: boolean;
         /**
-         * The Static IP Address which should be used.
+         * The first private IP address of the network interface.
          */
         privateIpAddress: string;
         /**
@@ -56404,7 +55643,7 @@ export declare namespace network {
          */
         addressPrefix: string;
         /**
-         * The ID of DDoS Protection Plan.
+         * The ID of this subnet.
          */
         id: string;
         /**
@@ -56459,9 +55698,6 @@ export declare namespace network {
         peerWeight: number;
     }
     interface VpnGatewayBgpSettingsInstance0BgpPeeringAddress {
-        /**
-         * A list of custom BGP peering addresses to assign to this instance.
-         */
         customIps: string[];
         /**
          * The list of default BGP peering addresses which belong to the pre-defined VPN Gateway IP configuration.
@@ -56477,9 +55713,6 @@ export declare namespace network {
         tunnelIps: string[];
     }
     interface VpnGatewayBgpSettingsInstance1BgpPeeringAddress {
-        /**
-         * A list of custom BGP peering addresses to assign to this instance.
-         */
         customIps: string[];
         /**
          * The list of default BGP peering addresses which belong to the pre-defined VPN Gateway IP configuration.
@@ -58258,7 +57491,7 @@ export declare namespace privatelink {
          */
         privateConnectionResourceId?: string;
         /**
-         * Specifies the static IP address within the private endpoint's subnet to be used. Changing this forces a new resource to be created.
+         * (Required) The static IP address set by this configuration. It is recommended to use the private IP address exported in the `privateServiceConnection` block to obtain the address associated with the private endpoint.
          */
         privateIpAddress: string;
         /**
@@ -60715,87 +59948,29 @@ export declare namespace siterecovery {
         replicatedProtectedItems?: string[];
     }
     interface ReplicationRecoveryPlanBootRecoveryGroupPostAction {
-        /**
-         * The fabric location of runbook or script. Possible values are `Primary` and `Recovery`. It must not be specified when `type` is `ManualActionDetails`.
-         *
-         * > **NOTE:** This is required when `type` is set to `AutomationRunbookActionDetails` or `ScriptActionDetails`.
-         */
         fabricLocation?: string;
-        /**
-         * Directions of fail over. Possible values are `PrimaryToRecovery` and `RecoveryToPrimary`
-         */
         failOverDirections: string[];
-        /**
-         * Types of fail over. Possible values are `TestFailover`, `PlannedFailover` and `UnplannedFailover`
-         */
         failOverTypes: string[];
-        /**
-         * Instructions of manual action.
-         *
-         * > **NOTE:** This property is required when `type` is set to `ManualActionDetails`.
-         */
         manualActionInstruction?: string;
         /**
          * The name of the Replication Plan. The name can contain only letters, numbers, and hyphens. It should start with a letter and end with a letter or a number. Can be a maximum of 63 characters. Changing this forces a new resource to be created.
          */
         name: string;
-        /**
-         * Id of runbook.
-         *
-         * > **NOTE:** This property is required when `type` is set to `AutomationRunbookActionDetails`.
-         */
         runbookId?: string;
-        /**
-         * Path of action script.
-         *
-         * > **NOTE:** This property is required when `type` is set to `ScriptActionDetails`.
-         */
         scriptPath?: string;
-        /**
-         * Type of the action detail. Possible values are `AutomationRunbookActionDetails`, `ManualActionDetails` and `ScriptActionDetails`.
-         */
         type: string;
     }
     interface ReplicationRecoveryPlanBootRecoveryGroupPreAction {
-        /**
-         * The fabric location of runbook or script. Possible values are `Primary` and `Recovery`. It must not be specified when `type` is `ManualActionDetails`.
-         *
-         * > **NOTE:** This is required when `type` is set to `AutomationRunbookActionDetails` or `ScriptActionDetails`.
-         */
         fabricLocation?: string;
-        /**
-         * Directions of fail over. Possible values are `PrimaryToRecovery` and `RecoveryToPrimary`
-         */
         failOverDirections: string[];
-        /**
-         * Types of fail over. Possible values are `TestFailover`, `PlannedFailover` and `UnplannedFailover`
-         */
         failOverTypes: string[];
-        /**
-         * Instructions of manual action.
-         *
-         * > **NOTE:** This property is required when `type` is set to `ManualActionDetails`.
-         */
         manualActionInstruction?: string;
         /**
          * The name of the Replication Plan. The name can contain only letters, numbers, and hyphens. It should start with a letter and end with a letter or a number. Can be a maximum of 63 characters. Changing this forces a new resource to be created.
          */
         name: string;
-        /**
-         * Id of runbook.
-         *
-         * > **NOTE:** This property is required when `type` is set to `AutomationRunbookActionDetails`.
-         */
         runbookId?: string;
-        /**
-         * Path of action script.
-         *
-         * > **NOTE:** This property is required when `type` is set to `ScriptActionDetails`.
-         */
         scriptPath?: string;
-        /**
-         * Type of the action detail. Possible values are `AutomationRunbookActionDetails`, `ManualActionDetails` and `ScriptActionDetails`.
-         */
         type: string;
     }
     interface ReplicationRecoveryPlanFailoverRecoveryGroup {
@@ -60809,87 +59984,29 @@ export declare namespace siterecovery {
         preActions?: outputs.siterecovery.ReplicationRecoveryPlanFailoverRecoveryGroupPreAction[];
     }
     interface ReplicationRecoveryPlanFailoverRecoveryGroupPostAction {
-        /**
-         * The fabric location of runbook or script. Possible values are `Primary` and `Recovery`. It must not be specified when `type` is `ManualActionDetails`.
-         *
-         * > **NOTE:** This is required when `type` is set to `AutomationRunbookActionDetails` or `ScriptActionDetails`.
-         */
         fabricLocation?: string;
-        /**
-         * Directions of fail over. Possible values are `PrimaryToRecovery` and `RecoveryToPrimary`
-         */
         failOverDirections: string[];
-        /**
-         * Types of fail over. Possible values are `TestFailover`, `PlannedFailover` and `UnplannedFailover`
-         */
         failOverTypes: string[];
-        /**
-         * Instructions of manual action.
-         *
-         * > **NOTE:** This property is required when `type` is set to `ManualActionDetails`.
-         */
         manualActionInstruction?: string;
         /**
          * The name of the Replication Plan. The name can contain only letters, numbers, and hyphens. It should start with a letter and end with a letter or a number. Can be a maximum of 63 characters. Changing this forces a new resource to be created.
          */
         name: string;
-        /**
-         * Id of runbook.
-         *
-         * > **NOTE:** This property is required when `type` is set to `AutomationRunbookActionDetails`.
-         */
         runbookId?: string;
-        /**
-         * Path of action script.
-         *
-         * > **NOTE:** This property is required when `type` is set to `ScriptActionDetails`.
-         */
         scriptPath?: string;
-        /**
-         * Type of the action detail. Possible values are `AutomationRunbookActionDetails`, `ManualActionDetails` and `ScriptActionDetails`.
-         */
         type: string;
     }
     interface ReplicationRecoveryPlanFailoverRecoveryGroupPreAction {
-        /**
-         * The fabric location of runbook or script. Possible values are `Primary` and `Recovery`. It must not be specified when `type` is `ManualActionDetails`.
-         *
-         * > **NOTE:** This is required when `type` is set to `AutomationRunbookActionDetails` or `ScriptActionDetails`.
-         */
         fabricLocation?: string;
-        /**
-         * Directions of fail over. Possible values are `PrimaryToRecovery` and `RecoveryToPrimary`
-         */
         failOverDirections: string[];
-        /**
-         * Types of fail over. Possible values are `TestFailover`, `PlannedFailover` and `UnplannedFailover`
-         */
         failOverTypes: string[];
-        /**
-         * Instructions of manual action.
-         *
-         * > **NOTE:** This property is required when `type` is set to `ManualActionDetails`.
-         */
         manualActionInstruction?: string;
         /**
          * The name of the Replication Plan. The name can contain only letters, numbers, and hyphens. It should start with a letter and end with a letter or a number. Can be a maximum of 63 characters. Changing this forces a new resource to be created.
          */
         name: string;
-        /**
-         * Id of runbook.
-         *
-         * > **NOTE:** This property is required when `type` is set to `AutomationRunbookActionDetails`.
-         */
         runbookId?: string;
-        /**
-         * Path of action script.
-         *
-         * > **NOTE:** This property is required when `type` is set to `ScriptActionDetails`.
-         */
         scriptPath?: string;
-        /**
-         * Type of the action detail. Possible values are `AutomationRunbookActionDetails`, `ManualActionDetails` and `ScriptActionDetails`.
-         */
         type: string;
     }
     interface ReplicationRecoveryPlanRecoveryGroup {
@@ -60911,87 +60028,29 @@ export declare namespace siterecovery {
         type: string;
     }
     interface ReplicationRecoveryPlanRecoveryGroupPostAction {
-        /**
-         * The fabric location of runbook or script. Possible values are `Primary` and `Recovery`. It must not be specified when `type` is `ManualActionDetails`.
-         *
-         * > **NOTE:** This is required when `type` is set to `AutomationRunbookActionDetails` or `ScriptActionDetails`.
-         */
         fabricLocation?: string;
-        /**
-         * Directions of fail over. Possible values are `PrimaryToRecovery` and `RecoveryToPrimary`
-         */
         failOverDirections: string[];
-        /**
-         * Types of fail over. Possible values are `TestFailover`, `PlannedFailover` and `UnplannedFailover`
-         */
         failOverTypes: string[];
-        /**
-         * Instructions of manual action.
-         *
-         * > **NOTE:** This property is required when `type` is set to `ManualActionDetails`.
-         */
         manualActionInstruction?: string;
         /**
          * The name of the Replication Plan. The name can contain only letters, numbers, and hyphens. It should start with a letter and end with a letter or a number. Can be a maximum of 63 characters. Changing this forces a new resource to be created.
          */
         name: string;
-        /**
-         * Id of runbook.
-         *
-         * > **NOTE:** This property is required when `type` is set to `AutomationRunbookActionDetails`.
-         */
         runbookId?: string;
-        /**
-         * Path of action script.
-         *
-         * > **NOTE:** This property is required when `type` is set to `ScriptActionDetails`.
-         */
         scriptPath?: string;
-        /**
-         * Type of the action detail. Possible values are `AutomationRunbookActionDetails`, `ManualActionDetails` and `ScriptActionDetails`.
-         */
         type: string;
     }
     interface ReplicationRecoveryPlanRecoveryGroupPreAction {
-        /**
-         * The fabric location of runbook or script. Possible values are `Primary` and `Recovery`. It must not be specified when `type` is `ManualActionDetails`.
-         *
-         * > **NOTE:** This is required when `type` is set to `AutomationRunbookActionDetails` or `ScriptActionDetails`.
-         */
         fabricLocation?: string;
-        /**
-         * Directions of fail over. Possible values are `PrimaryToRecovery` and `RecoveryToPrimary`
-         */
         failOverDirections: string[];
-        /**
-         * Types of fail over. Possible values are `TestFailover`, `PlannedFailover` and `UnplannedFailover`
-         */
         failOverTypes: string[];
-        /**
-         * Instructions of manual action.
-         *
-         * > **NOTE:** This property is required when `type` is set to `ManualActionDetails`.
-         */
         manualActionInstruction?: string;
         /**
          * The name of the Replication Plan. The name can contain only letters, numbers, and hyphens. It should start with a letter and end with a letter or a number. Can be a maximum of 63 characters. Changing this forces a new resource to be created.
          */
         name: string;
-        /**
-         * Id of runbook.
-         *
-         * > **NOTE:** This property is required when `type` is set to `AutomationRunbookActionDetails`.
-         */
         runbookId?: string;
-        /**
-         * Path of action script.
-         *
-         * > **NOTE:** This property is required when `type` is set to `ScriptActionDetails`.
-         */
         scriptPath?: string;
-        /**
-         * Type of the action detail. Possible values are `AutomationRunbookActionDetails`, `ManualActionDetails` and `ScriptActionDetails`.
-         */
         type: string;
     }
     interface ReplicationRecoveryPlanShutdownRecoveryGroup {
@@ -61005,87 +60064,29 @@ export declare namespace siterecovery {
         preActions?: outputs.siterecovery.ReplicationRecoveryPlanShutdownRecoveryGroupPreAction[];
     }
     interface ReplicationRecoveryPlanShutdownRecoveryGroupPostAction {
-        /**
-         * The fabric location of runbook or script. Possible values are `Primary` and `Recovery`. It must not be specified when `type` is `ManualActionDetails`.
-         *
-         * > **NOTE:** This is required when `type` is set to `AutomationRunbookActionDetails` or `ScriptActionDetails`.
-         */
         fabricLocation?: string;
-        /**
-         * Directions of fail over. Possible values are `PrimaryToRecovery` and `RecoveryToPrimary`
-         */
         failOverDirections: string[];
-        /**
-         * Types of fail over. Possible values are `TestFailover`, `PlannedFailover` and `UnplannedFailover`
-         */
         failOverTypes: string[];
-        /**
-         * Instructions of manual action.
-         *
-         * > **NOTE:** This property is required when `type` is set to `ManualActionDetails`.
-         */
         manualActionInstruction?: string;
         /**
          * The name of the Replication Plan. The name can contain only letters, numbers, and hyphens. It should start with a letter and end with a letter or a number. Can be a maximum of 63 characters. Changing this forces a new resource to be created.
          */
         name: string;
-        /**
-         * Id of runbook.
-         *
-         * > **NOTE:** This property is required when `type` is set to `AutomationRunbookActionDetails`.
-         */
         runbookId?: string;
-        /**
-         * Path of action script.
-         *
-         * > **NOTE:** This property is required when `type` is set to `ScriptActionDetails`.
-         */
         scriptPath?: string;
-        /**
-         * Type of the action detail. Possible values are `AutomationRunbookActionDetails`, `ManualActionDetails` and `ScriptActionDetails`.
-         */
         type: string;
     }
     interface ReplicationRecoveryPlanShutdownRecoveryGroupPreAction {
-        /**
-         * The fabric location of runbook or script. Possible values are `Primary` and `Recovery`. It must not be specified when `type` is `ManualActionDetails`.
-         *
-         * > **NOTE:** This is required when `type` is set to `AutomationRunbookActionDetails` or `ScriptActionDetails`.
-         */
         fabricLocation?: string;
-        /**
-         * Directions of fail over. Possible values are `PrimaryToRecovery` and `RecoveryToPrimary`
-         */
         failOverDirections: string[];
-        /**
-         * Types of fail over. Possible values are `TestFailover`, `PlannedFailover` and `UnplannedFailover`
-         */
         failOverTypes: string[];
-        /**
-         * Instructions of manual action.
-         *
-         * > **NOTE:** This property is required when `type` is set to `ManualActionDetails`.
-         */
         manualActionInstruction?: string;
         /**
          * The name of the Replication Plan. The name can contain only letters, numbers, and hyphens. It should start with a letter and end with a letter or a number. Can be a maximum of 63 characters. Changing this forces a new resource to be created.
          */
         name: string;
-        /**
-         * Id of runbook.
-         *
-         * > **NOTE:** This property is required when `type` is set to `AutomationRunbookActionDetails`.
-         */
         runbookId?: string;
-        /**
-         * Path of action script.
-         *
-         * > **NOTE:** This property is required when `type` is set to `ScriptActionDetails`.
-         */
         scriptPath?: string;
-        /**
-         * Type of the action detail. Possible values are `AutomationRunbookActionDetails`, `ManualActionDetails` and `ScriptActionDetails`.
-         */
         type: string;
     }
     interface VmwareReplicatedVmManagedDisk {
@@ -63029,7 +62030,7 @@ export declare namespace synapse {
          */
         principalId: string;
         /**
-         * The tenant id of the Azure AD Administrator of this Synapse Workspace.
+         * The Tenant ID for the Service Principal associated with the Managed Service Identity of this Synapse Workspace.
          */
         tenantId: string;
         /**
@@ -63397,17 +62398,11 @@ export declare namespace waf {
          * Describes if the managed rule is in enabled state or disabled state.
          */
         enabled?: boolean;
-        /**
-         * The name of the Match Variable. Possible values: `RequestArgKeys`, `RequestArgNames`, `RequestArgValues`, `RequestCookieKeys`, `RequestCookieNames`, `RequestCookieValues`, `RequestHeaderKeys`, `RequestHeaderNames`, `RequestHeaderValues`.
-         */
         matchVariable: string;
         /**
-         * Describes field of the matchVariable collection.
+         * When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.
          */
         selector?: string;
-        /**
-         * Describes operator to be matched. Possible values: `Contains`, `EndsWith`, `Equals`, `EqualsAny`, `StartsWith`.
-         */
         selectorMatchOperator?: string;
     }
 }