@pulumi/azure 5.87.0-alpha.1723457899 → 5.87.0

package/types/output.d.ts

@@ -24478,19 +24478,29 @@ export declare namespace compute {
         /**
          * The Username for which this Public SSH Key should be configured.
          *
-         * > **NOTE:** The Azure VM Agent only allows creating SSH Keys at the path `/home/{username}/.ssh/authorized_keys` - as such this public key will be added/appended to the authorized keys file.
+         * > **Note:** The Azure VM Agent only allows creating SSH Keys at the path `/home/{username}/.ssh/authorized_keys` - as such this public key will be added/appended to the authorized keys file.
          */
         username: string;
     }
     interface LinuxVirtualMachineScaleSetAutomaticInstanceRepair {
+        /**
+         * The repair action that will be used for repairing unhealthy virtual machines in the scale set. Possible values include `Replace`, `Restart`, `Reimage`.
+         *
+         * > **Note:**  Once the `action` field has been set it will always return the last value it was assigned if it is removed from the configuration file.
+         *
+         * > **Note:**  If you wish to update the repair `action` of an existing `automaticInstanceRepair` policy, you must first `disable` the `automaticInstanceRepair` policy before you can re-enable the `automaticInstanceRepair` policy with the new repair `action` defined.
+         */
+        action: string;
         /**
          * Should the automatic instance repair be enabled on this Virtual Machine Scale Set?
          */
         enabled: boolean;
         /**
-         * Amount of time (in minutes, between 30 and 90) for which automatic repairs will be delayed. The grace period starts right after the VM is found unhealthy. The time duration should be specified in ISO 8601 format. Defaults to `PT30M`.
+         * Amount of time for which automatic repairs will be delayed. The grace period starts right after the VM is found unhealthy. Possible values are between `10` and `90` minutes. The time duration should be specified in `ISO 8601` format (e.g. `PT10M` to `PT90M`).
+         *
+         * > **Note:**  Once the `gracePeriod` field has been set it will always return the last value it was assigned if it is removed from the configuration file.
          */
-        gracePeriod?: string;
+        gracePeriod: string;
     }
     interface LinuxVirtualMachineScaleSetAutomaticOsUpgradePolicy {
         /**
@@ -24506,7 +24516,7 @@ export declare namespace compute {
         /**
          * The Primary/Secondary Endpoint for the Azure Storage Account which should be used to store Boot Diagnostics, including Console Output and Screenshots from the Hypervisor.
          *
-         * > **NOTE:** Passing a null value will utilize a Managed Storage Account to store Boot Diagnostics.
+         * > **Note:** Passing a null value will utilize a Managed Storage Account to store Boot Diagnostics.
          */
         storageAccountUri?: string;
     }
@@ -24522,9 +24532,9 @@ export declare namespace compute {
         /**
          * The ID of the Disk Encryption Set which should be used to encrypt this Data Disk. Changing this forces a new resource to be created.
          *
-         * > **NOTE:** The Disk Encryption Set must have the `Reader` Role Assignment scoped on the Key Vault - in addition to an Access Policy to the Key Vault
+         * > **Note:** The Disk Encryption Set must have the `Reader` Role Assignment scoped on the Key Vault - in addition to an Access Policy to the Key Vault
          *
-         * > **NOTE:** Disk Encryption Sets are in Public Preview in a limited set of regions
+         * > **Note:** Disk Encryption Sets are in Public Preview in a limited set of regions
          */
         diskEncryptionSetId?: string;
         /**
@@ -24542,7 +24552,7 @@ export declare namespace compute {
         /**
          * The Type of Storage Account which should back this Data Disk. Possible values include `Standard_LRS`, `StandardSSD_LRS`, `StandardSSD_ZRS`, `Premium_LRS`, `PremiumV2_LRS`, `Premium_ZRS` and `UltraSSD_LRS`.
          *
-         * > **NOTE:** `UltraSSD_LRS` is only supported when `ultraSsdEnabled` within the `additionalCapabilities` block is enabled.
+         * > **Note:** `UltraSSD_LRS` is only supported when `ultraSsdEnabled` within the `additionalCapabilities` block is enabled.
          */
         storageAccountType: string;
         /**
@@ -24556,7 +24566,7 @@ export declare namespace compute {
         /**
          * Should Write Accelerator be enabled for this Data Disk? Defaults to `false`.
          *
-         * > **NOTE:** This requires that the `storageAccountType` is set to `Premium_LRS` and that `caching` is set to `None`.
+         * > **Note:** This requires that the `storageAccountType` is set to `Premium_LRS` and that `caching` is set to `None`.
          */
         writeAcceleratorEnabled?: boolean;
     }
@@ -24580,9 +24590,14 @@ export declare namespace compute {
         /**
          * A JSON String which specifies Sensitive Settings (such as Passwords) for the Extension.
          *
-         * > **NOTE:** Keys within the `protectedSettings` block are notoriously case-sensitive, where the casing required (e.g. TitleCase vs snakeCase) depends on the Extension being used. Please refer to the documentation for the specific Virtual Machine Extension you're looking to use for more information.
+         * > **Note:** Keys within the `protectedSettings` block are notoriously case-sensitive, where the casing required (e.g. TitleCase vs snakeCase) depends on the Extension being used. Please refer to the documentation for the specific Virtual Machine Extension you're looking to use for more information.
          */
         protectedSettings?: string;
+        /**
+         * A `protectedSettingsFromKeyVault` block as defined below.
+         *
+         * > **Note:** `protectedSettingsFromKeyVault` cannot be used with `protectedSettings`
+         */
         protectedSettingsFromKeyVault?: outputs.compute.LinuxVirtualMachineScaleSetExtensionProtectedSettingsFromKeyVault;
         /**
          * An ordered list of Extension names which this should be provisioned after.
@@ -24595,7 +24610,7 @@ export declare namespace compute {
         /**
          * A JSON String which specifies Settings for the Extension.
          *
-         * > **NOTE:** Keys within the `settings` block are notoriously case-sensitive, where the casing required (e.g. TitleCase vs snakeCase) depends on the Extension being used. Please refer to the documentation for the specific Virtual Machine Extension you're looking to use for more information.
+         * > **Note:** Keys within the `settings` block are notoriously case-sensitive, where the casing required (e.g. TitleCase vs snakeCase) depends on the Extension being used. Please refer to the documentation for the specific Virtual Machine Extension you're looking to use for more information.
          */
         settings?: string;
         /**
@@ -24636,7 +24651,7 @@ export declare namespace compute {
         /**
          * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Linux Virtual Machine Scale Set.
          *
-         * > **NOTE:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
+         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
          */
         identityIds?: string[];
         /**
@@ -24680,7 +24695,7 @@ export declare namespace compute {
         /**
          * Is this the Primary IP Configuration?
          *
-         * > **NOTE:** If multiple `networkInterface` blocks are specified, one must be set to `primary`.
+         * > **Note:** If multiple `networkInterface` blocks are specified, one must be set to `primary`.
          */
         primary?: boolean;
     }
@@ -24696,15 +24711,15 @@ export declare namespace compute {
         /**
          * A list of Backend Address Pools ID's from a Load Balancer which this Virtual Machine Scale Set should be connected to.
          *
-         * > **NOTE:**  When the Virtual Machine Scale Set is configured to have public IPs per instance are created with a load balancer, the SKU of the Virtual Machine instance IPs is determined by the SKU of the Virtual Machine Scale Sets Load Balancer (e.g. `Basic` or `Standard`). Alternatively, you may use the `publicIpPrefixId` field to generate instance-level IPs in a virtual machine scale set as well. The zonal properties of the prefix will be passed to the Virtual Machine instance IPs, though they will not be shown in the output. To view the public IP addresses assigned to the Virtual Machine Scale Sets Virtual Machine instances use the **az vmss list-instance-public-ips --resource-group `ResourceGroupName` --name `VirtualMachineScaleSetName`** CLI command.
+         * > **Note:**  When the Virtual Machine Scale Set is configured to have public IPs per instance are created with a load balancer, the SKU of the Virtual Machine instance IPs is determined by the SKU of the Virtual Machine Scale Sets Load Balancer (e.g. `Basic` or `Standard`). Alternatively, you may use the `publicIpPrefixId` field to generate instance-level IPs in a virtual machine scale set as well. The zonal properties of the prefix will be passed to the Virtual Machine instance IPs, though they will not be shown in the output. To view the public IP addresses assigned to the Virtual Machine Scale Sets Virtual Machine instances use the **az vmss list-instance-public-ips --resource-group `ResourceGroupName` --name `VirtualMachineScaleSetName`** CLI command.
          *
-         * > **NOTE:** When using this field you'll also need to configure a Rule for the Load Balancer, and use a `dependsOn` between this resource and the Load Balancer Rule.
+         * > **Note:** When using this field you'll also need to configure a Rule for the Load Balancer, and use a `dependsOn` between this resource and the Load Balancer Rule.
          */
         loadBalancerBackendAddressPoolIds?: string[];
         /**
          * A list of NAT Rule ID's from a Load Balancer which this Virtual Machine Scale Set should be connected to.
          *
-         * > **NOTE:** When using this field you'll also need to configure a Rule for the Load Balancer, and use a `dependsOn` between this resource and the Load Balancer Rule.
+         * > **Note:** When using this field you'll also need to configure a Rule for the Load Balancer, and use a `dependsOn` between this resource and the Load Balancer Rule.
          */
         loadBalancerInboundNatRulesIds?: string[];
         /**
@@ -24714,7 +24729,7 @@ export declare namespace compute {
         /**
          * Is this the Primary IP Configuration for this Network Interface? Defaults to `false`.
          *
-         * > **NOTE:** One `ipConfiguration` block must be marked as Primary for each Network Interface.
+         * > **Note:** One `ipConfiguration` block must be marked as Primary for each Network Interface.
          */
         primary?: boolean;
         /**
@@ -24752,7 +24767,7 @@ export declare namespace compute {
         /**
          * The ID of the Public IP Address Prefix from where Public IP Addresses should be allocated. Changing this forces a new resource to be created.
          *
-         * > **NOTE:** This functionality is in Preview and must be opted into via `az feature register --namespace Microsoft.Network --name AllowBringYourOwnPublicIpAddress` and then `az provider register -n Microsoft.Network`.
+         * > **Note:** This functionality is in Preview and must be opted into via `az feature register --namespace Microsoft.Network --name AllowBringYourOwnPublicIpAddress` and then `az provider register -n Microsoft.Network`.
          */
         publicIpPrefixId?: string;
         /**
@@ -24782,29 +24797,29 @@ export declare namespace compute {
         /**
          * The ID of the Disk Encryption Set which should be used to encrypt this OS Disk. Conflicts with `secureVmDiskEncryptionSetId`. Changing this forces a new resource to be created.
          *
-         * > **NOTE:** The Disk Encryption Set must have the `Reader` Role Assignment scoped on the Key Vault - in addition to an Access Policy to the Key Vault
+         * > **Note:** The Disk Encryption Set must have the `Reader` Role Assignment scoped on the Key Vault - in addition to an Access Policy to the Key Vault
          *
-         * > **NOTE:** Disk Encryption Sets are in Public Preview in a limited set of regions
+         * > **Note:** Disk Encryption Sets are in Public Preview in a limited set of regions
          */
         diskEncryptionSetId?: string;
         /**
          * The Size of the Internal OS Disk in GB, if you wish to vary from the size used in the image this Virtual Machine Scale Set is sourced from.
          *
-         * > **NOTE:** If specified this must be equal to or larger than the size of the Image the VM Scale Set is based on. When creating a larger disk than exists in the image you'll need to repartition the disk to use the remaining space.
+         * > **Note:** If specified this must be equal to or larger than the size of the Image the VM Scale Set is based on. When creating a larger disk than exists in the image you'll need to repartition the disk to use the remaining space.
          */
         diskSizeGb: number;
         /**
          * The ID of the Disk Encryption Set which should be used to Encrypt the OS Disk when the Virtual Machine Scale Set is Confidential VMSS. Conflicts with `diskEncryptionSetId`. Changing this forces a new resource to be created.
          *
-         * > **NOTE:** `secureVmDiskEncryptionSetId` can only be specified when `securityEncryptionType` is set to `DiskWithVMGuestState`.
+         * > **Note:** `secureVmDiskEncryptionSetId` can only be specified when `securityEncryptionType` is set to `DiskWithVMGuestState`.
          */
         secureVmDiskEncryptionSetId?: string;
         /**
          * Encryption Type when the Virtual Machine Scale Set is Confidential VMSS. Possible values are `VMGuestStateOnly` and `DiskWithVMGuestState`. Changing this forces a new resource to be created.
          *
-         * > **NOTE:** `vtpmEnabled` must be set to `true` when `securityEncryptionType` is specified.
+         * > **Note:** `vtpmEnabled` must be set to `true` when `securityEncryptionType` is specified.
          *
-         * > **NOTE:** `encryptionAtHostEnabled` cannot be set to `true` when `securityEncryptionType` is set to `DiskWithVMGuestState`.
+         * > **Note:** `encryptionAtHostEnabled` cannot be set to `true` when `securityEncryptionType` is set to `DiskWithVMGuestState`.
          */
         securityEncryptionType?: string;
         /**
@@ -24814,7 +24829,7 @@ export declare namespace compute {
         /**
          * Should Write Accelerator be Enabled for this OS Disk? Defaults to `false`.
          *
-         * > **NOTE:** This requires that the `storageAccountType` is set to `Premium_LRS` and that `caching` is set to `None`.
+         * > **Note:** This requires that the `storageAccountType` is set to `Premium_LRS` and that `caching` is set to `None`.
          */
         writeAcceleratorEnabled?: boolean;
     }
@@ -24862,7 +24877,7 @@ export declare namespace compute {
         /**
          * Create new virtual machines to upgrade the scale set, rather than updating the existing virtual machines. Existing virtual machines will be deleted once the new virtual machines are created for each batch. Possible values are `true` or `false`.
          *
-         * > **NOTE:** `overprovision` must be set to `false` when `maximumSurgeInstancesEnabled` is specified.
+         * > **Note:** `overprovision` must be set to `false` when `maximumSurgeInstancesEnabled` is specified.
          */
         maximumSurgeInstancesEnabled?: boolean;
         /**
@@ -24898,9 +24913,9 @@ export declare namespace compute {
         /**
          * The Secret URL of a Key Vault Certificate.
          *
-         * > **NOTE:** This can be sourced from the `secretId` field within the `azure.keyvault.Certificate` Resource.
+         * > **Note:** This can be sourced from the `secretId` field within the `azure.keyvault.Certificate` Resource.
          *
-         * > **NOTE:** The certificate must have been uploaded/created in PFX format, PEM certificates are not currently supported by Azure.
+         * > **Note:** The certificate must have been uploaded/created in PFX format, PEM certificates are not currently supported by Azure.
          */
         url: string;
     }
@@ -24940,7 +24955,7 @@ export declare namespace compute {
         /**
          * Length of time (in minutes, between 5 and 15) a notification to be sent to the VM on the instance metadata server till the VM gets deleted. The time duration should be specified in ISO 8601 format. Defaults to `PT5M`.
          *
-         * > **NOTE:** For more information about the terminate notification, please [refer to this doc](https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-terminate-notification).
+         * > **Note:** For more information about the terminate notification, please [refer to this doc](https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-terminate-notification).
          */
         timeout?: string;
     }
@@ -24952,7 +24967,7 @@ export declare namespace compute {
         /**
          * Length of time (in minutes, between 5 and 15) a notification to be sent to the VM on the instance metadata server till the VM gets deleted. The time duration should be specified in ISO 8601 format. Defaults to `PT5M`.
          *
-         * > **NOTE:** For more information about the termination notification, please [refer to this doc](https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-terminate-notification).
+         * > **Note:** For more information about the termination notification, please [refer to this doc](https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-terminate-notification).
          */
         timeout?: string;
     }
@@ -25045,14 +25060,24 @@ export declare namespace compute {
         ultraSsdEnabled?: boolean;
     }
     interface OrchestratedVirtualMachineScaleSetAutomaticInstanceRepair {
+        /**
+         * The repair action that will be used for repairing unhealthy virtual machines in the scale set. Possible values include `Replace`, `Restart`, `Reimage`.
+         *
+         * > **Note:**  Once the `action` field has been set it will always return the last value it was assigned if it is removed from the configuration file.
+         *
+         * > **Note:**  If you wish to update the repair `action` of an existing `automaticInstanceRepair` policy, you must first `disable` the `automaticInstanceRepair` policy before you can re-enable the `automaticInstanceRepair` policy with the new repair `action` defined.
+         */
+        action: string;
         /**
          * Should the automatic instance repair be enabled on this Virtual Machine Scale Set? Possible values are `true` and `false`.
          */
         enabled: boolean;
         /**
-         * Amount of time for which automatic repairs will be delayed. The grace period starts right after the VM is found unhealthy. Possible values are between `30` and `90` minutes. The time duration should be specified in `ISO 8601` format (e.g. `PT30M` to `PT90M`). Defaults to `PT30M`.
+         * Amount of time for which automatic repairs will be delayed. The grace period starts right after the VM is found unhealthy. Possible values are between `10` and `90` minutes. The time duration should be specified in `ISO 8601` format (e.g. `PT10M` to `PT90M`).
+         *
+         * > **Note:**  Once the `gracePeriod` field has been set it will always return the last value it was assigned if it is removed from the configuration file.
          */
-        gracePeriod?: string;
+        gracePeriod: string;
     }
     interface OrchestratedVirtualMachineScaleSetBootDiagnostics {
         /**
@@ -25110,7 +25135,7 @@ export declare namespace compute {
         /**
          * Should failures from the extension be suppressed? Possible values are `true` or `false`.
          *
-         * > **NOTE:** Operational failures such as not connecting to the VM will not be suppressed regardless of the `failureSuppressionEnabled` value.
+         * > **Note:** Operational failures such as not connecting to the VM will not be suppressed regardless of the `failureSuppressionEnabled` value.
          */
         failureSuppressionEnabled?: boolean;
         /**
@@ -25124,7 +25149,7 @@ export declare namespace compute {
         /**
          * A JSON String which specifies Sensitive Settings (such as Passwords) for the Extension.
          *
-         * > **NOTE:** Keys within the `protectedSettings` block are notoriously case-sensitive, where the casing required (e.g. `TitleCase` vs `snakeCase`) depends on the Extension being used. Please refer to the documentation for the specific Virtual Machine Extension you're looking to use for more information.
+         * > **Note:** Keys within the `protectedSettings` block are notoriously case-sensitive, where the casing required (e.g. `TitleCase` vs `snakeCase`) depends on the Extension being used. Please refer to the documentation for the specific Virtual Machine Extension you're looking to use for more information.
          */
         protectedSettings?: string;
         /**
@@ -25198,7 +25223,7 @@ export declare namespace compute {
         /**
          * Is this the Primary IP Configuration? Possible values are `true` and `false`. Defaults to `false`.
          *
-         * > **NOTE:** If multiple `networkInterface` blocks are specified, one must be set to `primary`.
+         * > **Note:** If multiple `networkInterface` blocks are specified, one must be set to `primary`.
          */
         primary?: boolean;
     }
@@ -25214,7 +25239,7 @@ export declare namespace compute {
         /**
          * A list of Backend Address Pools IDs from a Load Balancer which this Virtual Machine Scale Set should be connected to.
          *
-         * > **NOTE:** When using this field you'll also need to configure a Rule for the Load Balancer, and use a dependsOn between this resource and the Load Balancer Rule.
+         * > **Note:** When using this field you'll also need to configure a Rule for the Load Balancer, and use a dependsOn between this resource and the Load Balancer Rule.
          */
         loadBalancerBackendAddressPoolIds?: string[];
         /**
@@ -25224,7 +25249,7 @@ export declare namespace compute {
         /**
          * Is this the Primary IP Configuration for this Network Interface? Possible values are `true` and `false`. Defaults to `false`.
          *
-         * > **NOTE:** One `ipConfiguration` block must be marked as Primary for each Network Interface.
+         * > **Note:** One `ipConfiguration` block must be marked as Primary for each Network Interface.
          */
         primary?: boolean;
         /**
@@ -25234,7 +25259,7 @@ export declare namespace compute {
         /**
          * The ID of the Subnet which this IP Configuration should be connected to.
          *
-         * > **NOTE:** `subnetId` is required if version is set to `IPv4`.
+         * > **Note:** `subnetId` is required if version is set to `IPv4`.
          */
         subnetId?: string;
         /**
@@ -25294,7 +25319,7 @@ export declare namespace compute {
         /**
          * The ID of the Disk Encryption Set which should be used to encrypt this OS Disk. Changing this forces a new resource to be created.
          *
-         * > **NOTE:** Disk Encryption Sets are in Public Preview in a limited set of regions
+         * > **Note:** Disk Encryption Sets are in Public Preview in a limited set of regions
          */
         diskEncryptionSetId?: string;
         /**
@@ -25324,7 +25349,7 @@ export declare namespace compute {
         /**
          * The Base64-Encoded Custom Data which should be used for this Virtual Machine Scale Set.
          *
-         * > **NOTE:** When Custom Data has been configured, it's not possible to remove it without tainting the Virtual Machine Scale Set, due to a limitation of the Azure API.
+         * > **Note:** When Custom Data has been configured, it's not possible to remove it without tainting the Virtual Machine Scale Set, due to a limitation of the Azure API.
          */
         customData?: string;
         /**
@@ -25356,19 +25381,19 @@ export declare namespace compute {
         /**
          * When an `adminPassword` is specified `disablePasswordAuthentication` must be set to `false`. Defaults to `true`.
          *
-         * > **NOTE:** Either `adminPassword` or `adminSshKey` must be specified.
+         * > **Note:** Either `adminPassword` or `adminSshKey` must be specified.
          */
         disablePasswordAuthentication?: boolean;
         /**
          * Specifies the mode of VM Guest Patching for the virtual machines that are associated to the Virtual Machine Scale Set. Possible values are `AutomaticByPlatform` or `ImageDefault`. Defaults to `ImageDefault`.
          *
-         * > **NOTE:** If the `patchAssessmentMode` is set to `AutomaticByPlatform` then the `provisionVmAgent` field must be set to `true`.
+         * > **Note:** If the `patchAssessmentMode` is set to `AutomaticByPlatform` then the `provisionVmAgent` field must be set to `true`.
          */
         patchAssessmentMode?: string;
         /**
          * Specifies the mode of in-guest patching of this Windows Virtual Machine. Possible values are `ImageDefault` or `AutomaticByPlatform`. Defaults to `ImageDefault`. For more information on patch modes please see the [product documentation](https://docs.microsoft.com/azure/virtual-machines/automatic-vm-guest-patching#patch-orchestration-modes).
          *
-         * > **NOTE:** If `patchMode` is set to `AutomaticByPlatform` the `provisionVmAgent` must be set to `true` and the `extension` must contain at least one application health extension.  An example of how to correctly configure a Virtual Machine Scale Set to provision a Linux Virtual Machine with Automatic VM Guest Patching enabled can be found in the `./examples/orchestrated-vm-scale-set/automatic-vm-guest-patching` directory within the GitHub Repository.
+         * > **Note:** If `patchMode` is set to `AutomaticByPlatform` the `provisionVmAgent` must be set to `true` and the `extension` must contain at least one application health extension.  An example of how to correctly configure a Virtual Machine Scale Set to provision a Linux Virtual Machine with Automatic VM Guest Patching enabled can be found in the `./examples/orchestrated-vm-scale-set/automatic-vm-guest-patching` directory within the GitHub Repository.
          */
         patchMode?: string;
         /**
@@ -25388,7 +25413,7 @@ export declare namespace compute {
         /**
          * The Username for which this Public SSH Key should be configured.
          *
-         * > **NOTE:** The Azure VM Agent only allows creating SSH Keys at the path `/home/{username}/.ssh/authorized_keys` - as such this public key will be written to the authorized keys file.
+         * > **Note:** The Azure VM Agent only allows creating SSH Keys at the path `/home/{username}/.ssh/authorized_keys` - as such this public key will be written to the authorized keys file.
          */
         username: string;
     }
@@ -25406,7 +25431,7 @@ export declare namespace compute {
         /**
          * The Secret URL of a Key Vault Certificate.
          *
-         * > **NOTE:** This can be sourced from the `secretId` field within the `azure.keyvault.Certificate` Resource.
+         * > **Note:** This can be sourced from the `secretId` field within the `azure.keyvault.Certificate` Resource.
          */
         url: string;
     }
@@ -25434,19 +25459,19 @@ export declare namespace compute {
         /**
          * Should the VM be patched without requiring a reboot? Possible values are `true` or `false`. Defaults to `false`. For more information about hot patching please see the [product documentation](https://docs.microsoft.com/azure/automanage/automanage-hotpatch).
          *
-         * > **NOTE:** Hotpatching can only be enabled if the `patchMode` is set to `AutomaticByPlatform`, the `provisionVmAgent` is set to `true`, your `sourceImageReference` references a hotpatching enabled image, the VM's `skuName` is set to a Azure generation 2 directory within the GitHub Repository.
+         * > **Note:** Hotpatching can only be enabled if the `patchMode` is set to `AutomaticByPlatform`, the `provisionVmAgent` is set to `true`, your `sourceImageReference` references a hotpatching enabled image, the VM's `skuName` is set to a Azure generation 2 directory within the GitHub Repository.
          */
         hotpatchingEnabled?: boolean;
         /**
          * Specifies the mode of VM Guest Patching for the virtual machines that are associated to the Virtual Machine Scale Set. Possible values are `AutomaticByPlatform` or `ImageDefault`. Defaults to `ImageDefault`.
          *
-         * > **NOTE:** If the `patchAssessmentMode` is set to `AutomaticByPlatform` then the `provisionVmAgent` field must be set to `true`.
+         * > **Note:** If the `patchAssessmentMode` is set to `AutomaticByPlatform` then the `provisionVmAgent` field must be set to `true`.
          */
         patchAssessmentMode?: string;
         /**
          * Specifies the mode of in-guest patching of this Windows Virtual Machine. Possible values are `Manual`, `AutomaticByOS` and `AutomaticByPlatform`. Defaults to `AutomaticByOS`. For more information on patch modes please see the [product documentation](https://docs.microsoft.com/azure/virtual-machines/automatic-vm-guest-patching#patch-orchestration-modes).
          *
-         * > **NOTE:** If `patchMode` is set to `AutomaticByPlatform` the `provisionVmAgent` must be set to `true` and the `extension` must contain at least one application health extension.
+         * > **Note:** If `patchMode` is set to `AutomaticByPlatform` the `provisionVmAgent` must be set to `true` and the `extension` must contain at least one application health extension.
          */
         patchMode?: string;
         /**
@@ -25494,7 +25519,7 @@ export declare namespace compute {
         /**
          * The Secret URL of a Key Vault Certificate.
          *
-         * > **NOTE:** This can be sourced from the `secretId` field within the `azure.keyvault.Certificate` Resource.
+         * > **Note:** This can be sourced from the `secretId` field within the `azure.keyvault.Certificate` Resource.
          */
         url: string;
     }
@@ -25502,7 +25527,7 @@ export declare namespace compute {
         /**
          * The Secret URL of a Key Vault Certificate, which must be specified when protocol is set to `Https`. Changing this forces a new resource to be created.
          *
-         * > **NOTE:** This can be sourced from the `secretId` field within the `azure.keyvault.Certificate` Resource.
+         * > **Note:** This can be sourced from the `secretId` field within the `azure.keyvault.Certificate` Resource.
          */
         certificateUrl?: string;
         /**
@@ -26727,14 +26752,24 @@ export declare namespace compute {
         setting: string;
     }
     interface WindowsVirtualMachineScaleSetAutomaticInstanceRepair {
+        /**
+         * The repair action that will be used for repairing unhealthy virtual machines in the scale set. Possible values include `Replace`, `Restart`, `Reimage`.
+         *
+         * > **Note:**  Once the `action` field has been set it will always return the last value it was assigned if it is removed from the configuration file.
+         *
+         * > **Note:**  If you wish to update the repair `action` of an existing `automaticInstanceRepair` policy, you must first `disable` the `automaticInstanceRepair` policy before you can re-enable the `automaticInstanceRepair` policy with the new repair `action` defined.
+         */
+        action: string;
         /**
          * Should the automatic instance repair be enabled on this Virtual Machine Scale Set?
          */
         enabled: boolean;
         /**
-         * Amount of time (in minutes, between 30 and 90) for which automatic repairs will be delayed. The grace period starts right after the VM is found unhealthy. The time duration should be specified in ISO 8601 format. Defaults to `PT30M`.
+         * Amount of time for which automatic repairs will be delayed. The grace period starts right after the VM is found unhealthy. Possible values are between `10` and `90` minutes. The time duration should be specified in `ISO 8601` format (e.g. `PT10M` to `PT90M`).
+         *
+         * > **Note:**  Once the `gracePeriod` field has been set it will always return the last value it was assigned if it is removed from the configuration file.
          */
-        gracePeriod?: string;
+        gracePeriod: string;
     }
     interface WindowsVirtualMachineScaleSetAutomaticOsUpgradePolicy {
         /**
@@ -26750,7 +26785,7 @@ export declare namespace compute {
         /**
          * The Primary/Secondary Endpoint for the Azure Storage Account which should be used to store Boot Diagnostics, including Console Output and Screenshots from the Hypervisor.
          *
-         * > **NOTE:** Passing a null value will utilize a Managed Storage Account to store Boot Diagnostics
+         * > **Note:** Passing a null value will utilize a Managed Storage Account to store Boot Diagnostics
          */
         storageAccountUri?: string;
     }
@@ -26766,9 +26801,9 @@ export declare namespace compute {
         /**
          * The ID of the Disk Encryption Set which should be used to encrypt this Data Disk. Changing this forces a new resource to be created.
          *
-         * > **NOTE:** The Disk Encryption Set must have the `Reader` Role Assignment scoped on the Key Vault - in addition to an Access Policy to the Key Vault
+         * > **Note:** The Disk Encryption Set must have the `Reader` Role Assignment scoped on the Key Vault - in addition to an Access Policy to the Key Vault
          *
-         * > **NOTE:** Disk Encryption Sets are in Public Preview in a limited set of regions
+         * > **Note:** Disk Encryption Sets are in Public Preview in a limited set of regions
          */
         diskEncryptionSetId?: string;
         /**
@@ -26786,7 +26821,7 @@ export declare namespace compute {
         /**
          * The Type of Storage Account which should back this Data Disk. Possible values include `Standard_LRS`, `StandardSSD_LRS`, `StandardSSD_ZRS`, `Premium_LRS`, `PremiumV2_LRS`, `Premium_ZRS` and `UltraSSD_LRS`.
          *
-         * > **NOTE:** `UltraSSD_LRS` is only supported when `ultraSsdEnabled` within the `additionalCapabilities` block is enabled.
+         * > **Note:** `UltraSSD_LRS` is only supported when `ultraSsdEnabled` within the `additionalCapabilities` block is enabled.
          */
         storageAccountType: string;
         /**
@@ -26800,7 +26835,7 @@ export declare namespace compute {
         /**
          * Should Write Accelerator be enabled for this Data Disk? Defaults to `false`.
          *
-         * > **NOTE:** This requires that the `storageAccountType` is set to `Premium_LRS` and that `caching` is set to `None`.
+         * > **Note:** This requires that the `storageAccountType` is set to `Premium_LRS` and that `caching` is set to `None`.
          */
         writeAcceleratorEnabled?: boolean;
     }
@@ -26824,9 +26859,14 @@ export declare namespace compute {
         /**
          * A JSON String which specifies Sensitive Settings (such as Passwords) for the Extension.
          *
-         * > **NOTE:** Keys within the `protectedSettings` block are notoriously case-sensitive, where the casing required (e.g. TitleCase vs snakeCase) depends on the Extension being used. Please refer to the documentation for the specific Virtual Machine Extension you're looking to use for more information.
+         * > **Note:** Keys within the `protectedSettings` block are notoriously case-sensitive, where the casing required (e.g. TitleCase vs snakeCase) depends on the Extension being used. Please refer to the documentation for the specific Virtual Machine Extension you're looking to use for more information.
          */
         protectedSettings?: string;
+        /**
+         * A `protectedSettingsFromKeyVault` block as defined below.
+         *
+         * > **Note:** `protectedSettingsFromKeyVault` cannot be used with `protectedSettings`
+         */
         protectedSettingsFromKeyVault?: outputs.compute.WindowsVirtualMachineScaleSetExtensionProtectedSettingsFromKeyVault;
         /**
          * An ordered list of Extension names which this should be provisioned after.
@@ -26839,7 +26879,7 @@ export declare namespace compute {
         /**
          * A JSON String which specifies Settings for the Extension.
          *
-         * > **NOTE:** Keys within the `settings` block are notoriously case-sensitive, where the casing required (e.g. TitleCase vs snakeCase) depends on the Extension being used. Please refer to the documentation for the specific Virtual Machine Extension you're looking to use for more information.
+         * > **Note:** Keys within the `settings` block are notoriously case-sensitive, where the casing required (e.g. TitleCase vs snakeCase) depends on the Extension being used. Please refer to the documentation for the specific Virtual Machine Extension you're looking to use for more information.
          */
         settings?: string;
         /**
@@ -26880,7 +26920,7 @@ export declare namespace compute {
         /**
          * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Windows Virtual Machine Scale Set.
          *
-         * > **NOTE:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
+         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
          */
         identityIds?: string[];
         /**
@@ -26924,7 +26964,7 @@ export declare namespace compute {
         /**
          * Is this the Primary IP Configuration?
          *
-         * > **NOTE:** If multiple `networkInterface` blocks are specified, one must be set to `primary`.
+         * > **Note:** If multiple `networkInterface` blocks are specified, one must be set to `primary`.
          */
         primary?: boolean;
     }
@@ -26940,15 +26980,15 @@ export declare namespace compute {
         /**
          * A list of Backend Address Pools ID's from a Load Balancer which this Virtual Machine Scale Set should be connected to.
          *
-         * > **NOTE:**  When the Virtual Machine Scale Set is configured to have public IPs per instance are created with a load balancer, the SKU of the Virtual Machine instance IPs is determined by the SKU of the Virtual Machine Scale Sets Load Balancer (e.g. `Basic` or `Standard`). Alternatively, you may use the `publicIpPrefixId` field to generate instance-level IPs in a virtual machine scale set as well. The zonal properties of the prefix will be passed to the Virtual Machine instance IPs, though they will not be shown in the output. To view the public IP addresses assigned to the Virtual Machine Scale Sets Virtual Machine instances use the **az vmss list-instance-public-ips --resource-group `ResourceGroupName` --name `VirtualMachineScaleSetName`** CLI command.
+         * > **Note:**  When the Virtual Machine Scale Set is configured to have public IPs per instance are created with a load balancer, the SKU of the Virtual Machine instance IPs is determined by the SKU of the Virtual Machine Scale Sets Load Balancer (e.g. `Basic` or `Standard`). Alternatively, you may use the `publicIpPrefixId` field to generate instance-level IPs in a virtual machine scale set as well. The zonal properties of the prefix will be passed to the Virtual Machine instance IPs, though they will not be shown in the output. To view the public IP addresses assigned to the Virtual Machine Scale Sets Virtual Machine instances use the **az vmss list-instance-public-ips --resource-group `ResourceGroupName` --name `VirtualMachineScaleSetName`** CLI command.
          *
-         * > **NOTE:** When using this field you'll also need to configure a Rule for the Load Balancer, and use a `dependsOn` between this resource and the Load Balancer Rule.
+         * > **Note:** When using this field you'll also need to configure a Rule for the Load Balancer, and use a `dependsOn` between this resource and the Load Balancer Rule.
          */
         loadBalancerBackendAddressPoolIds?: string[];
         /**
          * A list of NAT Rule ID's from a Load Balancer which this Virtual Machine Scale Set should be connected to.
          *
-         * > **NOTE:** When using this field you'll also need to configure a Rule for the Load Balancer, and use a `dependsOn` between this resource and the Load Balancer Rule.
+         * > **Note:** When using this field you'll also need to configure a Rule for the Load Balancer, and use a `dependsOn` between this resource and the Load Balancer Rule.
          */
         loadBalancerInboundNatRulesIds?: string[];
         /**
@@ -26958,7 +26998,7 @@ export declare namespace compute {
         /**
          * Is this the Primary IP Configuration for this Network Interface? Defaults to `false`.
          *
-         * > **NOTE:** One `ipConfiguration` block must be marked as Primary for each Network Interface.
+         * > **Note:** One `ipConfiguration` block must be marked as Primary for each Network Interface.
          */
         primary?: boolean;
         /**
@@ -26996,7 +27036,7 @@ export declare namespace compute {
         /**
          * The ID of the Public IP Address Prefix from where Public IP Addresses should be allocated. Changing this forces a new resource to be created.
          *
-         * > **NOTE:** This functionality is in Preview and must be opted into via `az feature register --namespace Microsoft.Network --name AllowBringYourOwnPublicIpAddress` and then `az provider register -n Microsoft.Network`.
+         * > **Note:** This functionality is in Preview and must be opted into via `az feature register --namespace Microsoft.Network --name AllowBringYourOwnPublicIpAddress` and then `az provider register -n Microsoft.Network`.
          */
         publicIpPrefixId?: string;
         /**
@@ -27026,29 +27066,29 @@ export declare namespace compute {
         /**
          * The ID of the Disk Encryption Set which should be used to encrypt this OS Disk. Conflicts with `secureVmDiskEncryptionSetId`. Changing this forces a new resource to be created.
          *
-         * > **NOTE:** The Disk Encryption Set must have the `Reader` Role Assignment scoped on the Key Vault - in addition to an Access Policy to the Key Vault
+         * > **Note:** The Disk Encryption Set must have the `Reader` Role Assignment scoped on the Key Vault - in addition to an Access Policy to the Key Vault
          *
-         * > **NOTE:** Disk Encryption Sets are in Public Preview in a limited set of regions
+         * > **Note:** Disk Encryption Sets are in Public Preview in a limited set of regions
          */
         diskEncryptionSetId?: string;
         /**
          * The Size of the Internal OS Disk in GB, if you wish to vary from the size used in the image this Virtual Machine Scale Set is sourced from.
          *
-         * > **NOTE:** If specified this must be equal to or larger than the size of the Image the VM Scale Set is based on. When creating a larger disk than exists in the image you'll need to repartition the disk to use the remaining space.
+         * > **Note:** If specified this must be equal to or larger than the size of the Image the VM Scale Set is based on. When creating a larger disk than exists in the image you'll need to repartition the disk to use the remaining space.
          */
         diskSizeGb: number;
         /**
          * The ID of the Disk Encryption Set which should be used to Encrypt the OS Disk when the Virtual Machine Scale Set is Confidential VMSS. Conflicts with `diskEncryptionSetId`. Changing this forces a new resource to be created.
          *
-         * > **NOTE:** `secureVmDiskEncryptionSetId` can only be specified when `securityEncryptionType` is set to `DiskWithVMGuestState`.
+         * > **Note:** `secureVmDiskEncryptionSetId` can only be specified when `securityEncryptionType` is set to `DiskWithVMGuestState`.
          */
         secureVmDiskEncryptionSetId?: string;
         /**
          * Encryption Type when the Virtual Machine Scale Set is Confidential VMSS. Possible values are `VMGuestStateOnly` and `DiskWithVMGuestState`. Changing this forces a new resource to be created.
          *
-         * > **NOTE:** `vtpmEnabled` must be set to `true` when `securityEncryptionType` is specified.
+         * > **Note:** `vtpmEnabled` must be set to `true` when `securityEncryptionType` is specified.
          *
-         * > **NOTE:** `encryptionAtHostEnabled` cannot be set to `true` when `securityEncryptionType` is set to `DiskWithVMGuestState`.
+         * > **Note:** `encryptionAtHostEnabled` cannot be set to `true` when `securityEncryptionType` is set to `DiskWithVMGuestState`.
          */
         securityEncryptionType?: string;
         /**
@@ -27058,7 +27098,7 @@ export declare namespace compute {
         /**
          * Should Write Accelerator be Enabled for this OS Disk? Defaults to `false`.
          *
-         * > **NOTE:** This requires that the `storageAccountType` is set to `Premium_LRS` and that `caching` is set to `None`.
+         * > **Note:** This requires that the `storageAccountType` is set to `Premium_LRS` and that `caching` is set to `None`.
          */
         writeAcceleratorEnabled?: boolean;
     }
@@ -27106,7 +27146,7 @@ export declare namespace compute {
         /**
          * Create new virtual machines to upgrade the scale set, rather than updating the existing virtual machines. Existing virtual machines will be deleted once the new virtual machines are created for each batch. Possible values are `true` or `false`.
          *
-         * > **NOTE:** `overprovision` must be set to `false` when `maximumSurgeInstancesEnabled` is specified.
+         * > **Note:** `overprovision` must be set to `false` when `maximumSurgeInstancesEnabled` is specified.
          */
         maximumSurgeInstancesEnabled?: boolean;
         /**
@@ -27146,7 +27186,7 @@ export declare namespace compute {
         /**
          * The Secret URL of a Key Vault Certificate.
          *
-         * > **NOTE:** This can be sourced from the `secretId` field within the `azure.keyvault.Certificate` Resource.
+         * > **Note:** This can be sourced from the `secretId` field within the `azure.keyvault.Certificate` Resource.
          */
         url: string;
     }
@@ -27198,7 +27238,7 @@ export declare namespace compute {
         /**
          * Length of time (in minutes, between 5 and 15) a notification to be sent to the VM on the instance metadata server till the VM gets deleted. The time duration should be specified in ISO 8601 format. Defaults to `PT5M`.
          *
-         * > **NOTE:** For more information about the termination notification, please [refer to this doc](https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-terminate-notification).
+         * > **Note:** For more information about the termination notification, please [refer to this doc](https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-terminate-notification).
          */
         timeout?: string;
     }
@@ -27206,7 +27246,7 @@ export declare namespace compute {
         /**
          * The Secret URL of a Key Vault Certificate, which must be specified when `protocol` is set to `Https`. Changing this forces a new resource to be created.
          *
-         * > **NOTE:** This can be sourced from the `secretId` field within the `azure.keyvault.Certificate` Resource.
+         * > **Note:** This can be sourced from the `secretId` field within the `azure.keyvault.Certificate` Resource.
          */
         certificateUrl?: string;
         /**
@@ -50209,7 +50249,7 @@ export declare namespace monitoring {
          */
         name: string;
         /**
-         * The number of seconds between consecutive counter measurements (samples). The value should be integer between `1` and `300` inclusive. `samplingFrequencyInSeconds` must be equal to `60` seconds for counters collected with `Microsoft-InsightsMetrics` stream.
+         * The number of seconds between consecutive counter measurements (samples). The value should be integer between `1` and `1800` inclusive. `samplingFrequencyInSeconds` must be equal to `60` seconds for counters collected with `Microsoft-InsightsMetrics` stream.
          */
         samplingFrequencyInSeconds: number;
         /**
@@ -50949,7 +50989,7 @@ export declare namespace monitoring {
          */
         name: string;
         /**
-         * The number of seconds between consecutive counter measurements (samples). The value should be integer between `1` and `300` inclusive.
+         * The number of seconds between consecutive counter measurements (samples). The value should be integer between `1` and `1800` inclusive.
          */
         samplingFrequencyInSeconds: number;
         /**
@@ -59583,6 +59623,8 @@ export declare namespace postgresql {
         startHour?: number;
         /**
          * The start minute for maintenance window. Defaults to `0`.
+         *
+         * > **NOTE** The specified `maintenanceWindow` is always defined in UTC time. When unspecified, the maintenance window falls back to the default [system-managed](https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/how-to-maintenance-portal#specify-maintenance-schedule-options).
          */
         startMinute?: number;
     }
@@ -63130,6 +63172,10 @@ export declare namespace storage {
          * A `activeDirectory` block as defined below. Required when `directoryType` is `AD`.
          */
         activeDirectory: outputs.storage.AccountAzureFilesAuthenticationActiveDirectory;
+        /**
+         * Specifies the default share level permissions applied to all users. Possible values are `StorageFileDataSmbShareReader`, `StorageFileDataSmbShareContributor`, `StorageFileDataSmbShareElevatedContributor`, or `None`.
+         */
+        defaultShareLevelPermission?: string;
         /**
          * Specifies the directory service used. Possible values are `AADDS`, `AD` and `AADKERB`.
          */
@@ -65067,11 +65113,11 @@ export declare namespace waf {
          */
         ruleGroups?: outputs.waf.PolicyManagedRulesExclusionExcludedRuleSetRuleGroup[];
         /**
-         * The rule set type. The only possible value include `Microsoft_DefaultRuleSet` and `OWASP`. Defaults to `OWASP`.
+         * The rule set type. Possible values are `Microsoft_DefaultRuleSet`, `Microsoft_BotManagerRuleSet` and `OWASP`. Defaults to `OWASP`.
          */
         type?: string;
         /**
-         * The rule set version. The only possible value include `2.1` (for rule set type `Microsoft_DefaultRuleSet`) and `3.2` (for rule set type `OWASP`). Defaults to `3.2`.
+         * The rule set version. Possible values are `1.0` (for rule set type `Microsoft_BotManagerRuleSet`), `2.1` (for rule set type `Microsoft_DefaultRuleSet`) and `3.2` (for rule set type `OWASP`). Defaults to `3.2`.
          */
         version?: string;
     }