@pulumi/azure 6.15.0-alpha.1736506192 → 6.15.0-alpha.1736769356

package/machinelearning/workspaceNetworkOutboundRulePrivateEndpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceNetworkOutboundRulePrivateEndpoint.js","sourceRoot":"","sources":["../../machinelearning/workspaceNetworkOutboundRulePrivateEndpoint.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsEG;AACH,MAAa,2CAA4C,SAAQ,MAAM,CAAC,cAAc;IAkElF,YAAY,IAAY,EAAE,WAAgH,EAAE,IAAmC;QAC3K,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2E,CAAC;YAC1F,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;SACzE;aAAM;YACH,MAAM,IAAI,GAAG,WAA0E,CAAC;YACxF,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC9D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;aACpE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC9D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;aACpE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;SACvE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,2CAA2C,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChG,CAAC;IA9FD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwD,EAAE,IAAmC;QACtJ,OAAO,IAAI,2CAA2C,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClG,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,2CAA2C,CAAC,YAAY,CAAC;IAC5F,CAAC;;AA1BL,kGAgGC;AAlFG,gBAAgB;AACO,wDAAY,GAAG,+GAA+G,CAAC"}

package/machinelearning/workspaceNetworkOutboundRuleServiceTag.d.ts

@@ -0,0 +1,161 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Manages an Azure Machine Learning Workspace Network Outbound Rule Service Tag.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as azure from "@pulumi/azure";
+ *
+ * const current = azure.core.getClientConfig({});
+ * const example = new azure.core.ResourceGroup("example", {
+ *     name: "example-resources",
+ *     location: "West Europe",
+ * });
+ * const exampleInsights = new azure.appinsights.Insights("example", {
+ *     name: "workspace-example-ai",
+ *     location: example.location,
+ *     resourceGroupName: example.name,
+ *     applicationType: "web",
+ * });
+ * const exampleKeyVault = new azure.keyvault.KeyVault("example", {
+ *     name: "workspaceexamplekeyvault",
+ *     location: example.location,
+ *     resourceGroupName: example.name,
+ *     tenantId: current.then(current => current.tenantId),
+ *     skuName: "premium",
+ * });
+ * const exampleAccount = new azure.storage.Account("example", {
+ *     name: "workspacestorageaccount",
+ *     location: example.location,
+ *     resourceGroupName: example.name,
+ *     accountTier: "Standard",
+ *     accountReplicationType: "GRS",
+ * });
+ * const exampleWorkspace = new azure.machinelearning.Workspace("example", {
+ *     name: "example-workspace",
+ *     location: example.location,
+ *     resourceGroupName: example.name,
+ *     applicationInsightsId: exampleInsights.id,
+ *     keyVaultId: exampleKeyVault.id,
+ *     storageAccountId: exampleAccount.id,
+ *     managedNetwork: {
+ *         isolationMode: "AllowOnlyApprovedOutbound",
+ *     },
+ *     identity: {
+ *         type: "SystemAssigned",
+ *     },
+ * });
+ * const exampleWorkspaceNetworkOutboundRuleServiceTag = new azure.machinelearning.WorkspaceNetworkOutboundRuleServiceTag("example", {
+ *     name: "example-outboundrule",
+ *     workspaceId: exampleWorkspace.id,
+ *     serviceTag: "AppService",
+ *     protocol: "TCP",
+ *     portRanges: "443",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Machine Learning Workspace Network Outbound Rule Service Tag can be imported using the `resource id`, e.g.
+ *
+ * ```sh
+ * $ pulumi import azure:machinelearning/workspaceNetworkOutboundRuleServiceTag:WorkspaceNetworkOutboundRuleServiceTag example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.MachineLearningServices/workspaces/workspace1/outboundRules/rule1
+ * ```
+ */
+export declare class WorkspaceNetworkOutboundRuleServiceTag extends pulumi.CustomResource {
+    /**
+     * Get an existing WorkspaceNetworkOutboundRuleServiceTag resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: WorkspaceNetworkOutboundRuleServiceTagState, opts?: pulumi.CustomResourceOptions): WorkspaceNetworkOutboundRuleServiceTag;
+    /**
+     * Returns true if the given object is an instance of WorkspaceNetworkOutboundRuleServiceTag.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is WorkspaceNetworkOutboundRuleServiceTag;
+    /**
+     * Specifies the name of the Machine Learning Workspace Network Outbound Rule Service Tag. Changing this forces a new resource to be created.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * Specifies which ports traffic will be allowed by this rule. You can specify a single port (e.g. ` 80`) ,  a port range  (e.g. `1024-655535`) or a comma-separated list of single ports and/or port ranges(e.g. `80,1024-655535`). `*` can be used to allow traffic on any port.
+     */
+    readonly portRanges: pulumi.Output<string>;
+    /**
+     * Specifies the network protocol. Possible values are `*`, `TCP`, `UDP` and `ICMP`
+     */
+    readonly protocol: pulumi.Output<string>;
+    /**
+     * Specifies the fully qualified domain name to allow for outbound traffic. Possible values are `AppConfiguration`,`AppService`,`AzureActiveDirectory`,`AzureAdvancedThreatProtection`,`AzureArcInfrastructure`,`AzureAttestation`,`AzureBackup`,`AzureBotService`,`AzureContainerRegistry`,`AzureCosmosDB`,`AzureDataLake`,`AzureDevSpaces`,`AzureInformationProtection`,`AzureIoTHub`,`AzureKeyVault`,`AzureManagedGrafana`,`AzureMonitor`,`AzureOpenDatasets`,`AzurePlatformDNS`,`AzurePlatformIMDS`,`AzurePlatformLKM`,`AzureResourceManager`,`AzureSignalR`,`AzureSiteRecovery`,`AzureSpringCloud`,`AzureStack`,`AzureUpdateDelivery`,`DataFactoryManagement`,`EventHub`,`GuestAndHybridManagement`,`M365ManagementActivityApi`,`M365ManagementActivityApi`,`MicrosoftAzureFluidRelay`,`MicrosoftCloudAppSecurity`,`MicrosoftContainerRegistry`,`PowerPlatformInfra`,`ServiceBus`,`Sql`,`Storage`,`WindowsAdminCenter`,`AppServiceManagement`,`AutonomousDevelopmentPlatform`,`AzureActiveDirectoryDomainServices`,`AzureCloud`,`AzureConnectors`,`AzureContainerAppsService`,`AzureDatabricks`,`AzureDeviceUpdate`,`AzureEventGrid`,`AzureFrontDoor.Frontend`,`AzureFrontDoor.Backend`,`AzureFrontDoor.FirstParty`,`AzureHealthcareAPIs`,`AzureLoadBalancer`,`AzureMachineLearning`,`AzureSphere`,`AzureWebPubSub`,`BatchNodeManagement`,`ChaosStudio`,`CognitiveServicesFrontend`,`CognitiveServicesManagement`,`DataFactory`,`Dynamics365ForMarketingEmail`,`Dynamics365BusinessCentral`,`EOPExternalPublishedIPs`,`Internet`,`LogicApps`,`Marketplace`,`MicrosoftDefenderForEndpoint`,`PowerBI`,`PowerQueryOnline`,`ServiceFabric`,`SqlManagement`,`StorageSyncService`,`WindowsVirtualDesktop` and `VirtualNetwork`.
+     */
+    readonly serviceTag: pulumi.Output<string>;
+    /**
+     * Specifies the ID of the Machine Learning Workspace. Changing this forces a new resource to be created.
+     */
+    readonly workspaceId: pulumi.Output<string>;
+    /**
+     * Create a WorkspaceNetworkOutboundRuleServiceTag resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: WorkspaceNetworkOutboundRuleServiceTagArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering WorkspaceNetworkOutboundRuleServiceTag resources.
+ */
+export interface WorkspaceNetworkOutboundRuleServiceTagState {
+    /**
+     * Specifies the name of the Machine Learning Workspace Network Outbound Rule Service Tag. Changing this forces a new resource to be created.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Specifies which ports traffic will be allowed by this rule. You can specify a single port (e.g. ` 80`) ,  a port range  (e.g. `1024-655535`) or a comma-separated list of single ports and/or port ranges(e.g. `80,1024-655535`). `*` can be used to allow traffic on any port.
+     */
+    portRanges?: pulumi.Input<string>;
+    /**
+     * Specifies the network protocol. Possible values are `*`, `TCP`, `UDP` and `ICMP`
+     */
+    protocol?: pulumi.Input<string>;
+    /**
+     * Specifies the fully qualified domain name to allow for outbound traffic. Possible values are `AppConfiguration`,`AppService`,`AzureActiveDirectory`,`AzureAdvancedThreatProtection`,`AzureArcInfrastructure`,`AzureAttestation`,`AzureBackup`,`AzureBotService`,`AzureContainerRegistry`,`AzureCosmosDB`,`AzureDataLake`,`AzureDevSpaces`,`AzureInformationProtection`,`AzureIoTHub`,`AzureKeyVault`,`AzureManagedGrafana`,`AzureMonitor`,`AzureOpenDatasets`,`AzurePlatformDNS`,`AzurePlatformIMDS`,`AzurePlatformLKM`,`AzureResourceManager`,`AzureSignalR`,`AzureSiteRecovery`,`AzureSpringCloud`,`AzureStack`,`AzureUpdateDelivery`,`DataFactoryManagement`,`EventHub`,`GuestAndHybridManagement`,`M365ManagementActivityApi`,`M365ManagementActivityApi`,`MicrosoftAzureFluidRelay`,`MicrosoftCloudAppSecurity`,`MicrosoftContainerRegistry`,`PowerPlatformInfra`,`ServiceBus`,`Sql`,`Storage`,`WindowsAdminCenter`,`AppServiceManagement`,`AutonomousDevelopmentPlatform`,`AzureActiveDirectoryDomainServices`,`AzureCloud`,`AzureConnectors`,`AzureContainerAppsService`,`AzureDatabricks`,`AzureDeviceUpdate`,`AzureEventGrid`,`AzureFrontDoor.Frontend`,`AzureFrontDoor.Backend`,`AzureFrontDoor.FirstParty`,`AzureHealthcareAPIs`,`AzureLoadBalancer`,`AzureMachineLearning`,`AzureSphere`,`AzureWebPubSub`,`BatchNodeManagement`,`ChaosStudio`,`CognitiveServicesFrontend`,`CognitiveServicesManagement`,`DataFactory`,`Dynamics365ForMarketingEmail`,`Dynamics365BusinessCentral`,`EOPExternalPublishedIPs`,`Internet`,`LogicApps`,`Marketplace`,`MicrosoftDefenderForEndpoint`,`PowerBI`,`PowerQueryOnline`,`ServiceFabric`,`SqlManagement`,`StorageSyncService`,`WindowsVirtualDesktop` and `VirtualNetwork`.
+     */
+    serviceTag?: pulumi.Input<string>;
+    /**
+     * Specifies the ID of the Machine Learning Workspace. Changing this forces a new resource to be created.
+     */
+    workspaceId?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a WorkspaceNetworkOutboundRuleServiceTag resource.
+ */
+export interface WorkspaceNetworkOutboundRuleServiceTagArgs {
+    /**
+     * Specifies the name of the Machine Learning Workspace Network Outbound Rule Service Tag. Changing this forces a new resource to be created.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Specifies which ports traffic will be allowed by this rule. You can specify a single port (e.g. ` 80`) ,  a port range  (e.g. `1024-655535`) or a comma-separated list of single ports and/or port ranges(e.g. `80,1024-655535`). `*` can be used to allow traffic on any port.
+     */
+    portRanges: pulumi.Input<string>;
+    /**
+     * Specifies the network protocol. Possible values are `*`, `TCP`, `UDP` and `ICMP`
+     */
+    protocol: pulumi.Input<string>;
+    /**
+     * Specifies the fully qualified domain name to allow for outbound traffic. Possible values are `AppConfiguration`,`AppService`,`AzureActiveDirectory`,`AzureAdvancedThreatProtection`,`AzureArcInfrastructure`,`AzureAttestation`,`AzureBackup`,`AzureBotService`,`AzureContainerRegistry`,`AzureCosmosDB`,`AzureDataLake`,`AzureDevSpaces`,`AzureInformationProtection`,`AzureIoTHub`,`AzureKeyVault`,`AzureManagedGrafana`,`AzureMonitor`,`AzureOpenDatasets`,`AzurePlatformDNS`,`AzurePlatformIMDS`,`AzurePlatformLKM`,`AzureResourceManager`,`AzureSignalR`,`AzureSiteRecovery`,`AzureSpringCloud`,`AzureStack`,`AzureUpdateDelivery`,`DataFactoryManagement`,`EventHub`,`GuestAndHybridManagement`,`M365ManagementActivityApi`,`M365ManagementActivityApi`,`MicrosoftAzureFluidRelay`,`MicrosoftCloudAppSecurity`,`MicrosoftContainerRegistry`,`PowerPlatformInfra`,`ServiceBus`,`Sql`,`Storage`,`WindowsAdminCenter`,`AppServiceManagement`,`AutonomousDevelopmentPlatform`,`AzureActiveDirectoryDomainServices`,`AzureCloud`,`AzureConnectors`,`AzureContainerAppsService`,`AzureDatabricks`,`AzureDeviceUpdate`,`AzureEventGrid`,`AzureFrontDoor.Frontend`,`AzureFrontDoor.Backend`,`AzureFrontDoor.FirstParty`,`AzureHealthcareAPIs`,`AzureLoadBalancer`,`AzureMachineLearning`,`AzureSphere`,`AzureWebPubSub`,`BatchNodeManagement`,`ChaosStudio`,`CognitiveServicesFrontend`,`CognitiveServicesManagement`,`DataFactory`,`Dynamics365ForMarketingEmail`,`Dynamics365BusinessCentral`,`EOPExternalPublishedIPs`,`Internet`,`LogicApps`,`Marketplace`,`MicrosoftDefenderForEndpoint`,`PowerBI`,`PowerQueryOnline`,`ServiceFabric`,`SqlManagement`,`StorageSyncService`,`WindowsVirtualDesktop` and `VirtualNetwork`.
+     */
+    serviceTag: pulumi.Input<string>;
+    /**
+     * Specifies the ID of the Machine Learning Workspace. Changing this forces a new resource to be created.
+     */
+    workspaceId: pulumi.Input<string>;
+}

package/machinelearning/workspaceNetworkOutboundRuleServiceTag.js

@@ -0,0 +1,134 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkspaceNetworkOutboundRuleServiceTag = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Manages an Azure Machine Learning Workspace Network Outbound Rule Service Tag.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as azure from "@pulumi/azure";
+ *
+ * const current = azure.core.getClientConfig({});
+ * const example = new azure.core.ResourceGroup("example", {
+ *     name: "example-resources",
+ *     location: "West Europe",
+ * });
+ * const exampleInsights = new azure.appinsights.Insights("example", {
+ *     name: "workspace-example-ai",
+ *     location: example.location,
+ *     resourceGroupName: example.name,
+ *     applicationType: "web",
+ * });
+ * const exampleKeyVault = new azure.keyvault.KeyVault("example", {
+ *     name: "workspaceexamplekeyvault",
+ *     location: example.location,
+ *     resourceGroupName: example.name,
+ *     tenantId: current.then(current => current.tenantId),
+ *     skuName: "premium",
+ * });
+ * const exampleAccount = new azure.storage.Account("example", {
+ *     name: "workspacestorageaccount",
+ *     location: example.location,
+ *     resourceGroupName: example.name,
+ *     accountTier: "Standard",
+ *     accountReplicationType: "GRS",
+ * });
+ * const exampleWorkspace = new azure.machinelearning.Workspace("example", {
+ *     name: "example-workspace",
+ *     location: example.location,
+ *     resourceGroupName: example.name,
+ *     applicationInsightsId: exampleInsights.id,
+ *     keyVaultId: exampleKeyVault.id,
+ *     storageAccountId: exampleAccount.id,
+ *     managedNetwork: {
+ *         isolationMode: "AllowOnlyApprovedOutbound",
+ *     },
+ *     identity: {
+ *         type: "SystemAssigned",
+ *     },
+ * });
+ * const exampleWorkspaceNetworkOutboundRuleServiceTag = new azure.machinelearning.WorkspaceNetworkOutboundRuleServiceTag("example", {
+ *     name: "example-outboundrule",
+ *     workspaceId: exampleWorkspace.id,
+ *     serviceTag: "AppService",
+ *     protocol: "TCP",
+ *     portRanges: "443",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Machine Learning Workspace Network Outbound Rule Service Tag can be imported using the `resource id`, e.g.
+ *
+ * ```sh
+ * $ pulumi import azure:machinelearning/workspaceNetworkOutboundRuleServiceTag:WorkspaceNetworkOutboundRuleServiceTag example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.MachineLearningServices/workspaces/workspace1/outboundRules/rule1
+ * ```
+ */
+class WorkspaceNetworkOutboundRuleServiceTag extends pulumi.CustomResource {
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["name"] = state ? state.name : undefined;
+            resourceInputs["portRanges"] = state ? state.portRanges : undefined;
+            resourceInputs["protocol"] = state ? state.protocol : undefined;
+            resourceInputs["serviceTag"] = state ? state.serviceTag : undefined;
+            resourceInputs["workspaceId"] = state ? state.workspaceId : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.portRanges === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'portRanges'");
+            }
+            if ((!args || args.protocol === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'protocol'");
+            }
+            if ((!args || args.serviceTag === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'serviceTag'");
+            }
+            if ((!args || args.workspaceId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'workspaceId'");
+            }
+            resourceInputs["name"] = args ? args.name : undefined;
+            resourceInputs["portRanges"] = args ? args.portRanges : undefined;
+            resourceInputs["protocol"] = args ? args.protocol : undefined;
+            resourceInputs["serviceTag"] = args ? args.serviceTag : undefined;
+            resourceInputs["workspaceId"] = args ? args.workspaceId : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(WorkspaceNetworkOutboundRuleServiceTag.__pulumiType, name, resourceInputs, opts);
+    }
+    /**
+     * Get an existing WorkspaceNetworkOutboundRuleServiceTag resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new WorkspaceNetworkOutboundRuleServiceTag(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of WorkspaceNetworkOutboundRuleServiceTag.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === WorkspaceNetworkOutboundRuleServiceTag.__pulumiType;
+    }
+}
+exports.WorkspaceNetworkOutboundRuleServiceTag = WorkspaceNetworkOutboundRuleServiceTag;
+/** @internal */
+WorkspaceNetworkOutboundRuleServiceTag.__pulumiType = 'azure:machinelearning/workspaceNetworkOutboundRuleServiceTag:WorkspaceNetworkOutboundRuleServiceTag';
+//# sourceMappingURL=workspaceNetworkOutboundRuleServiceTag.js.map

package/machinelearning/workspaceNetworkOutboundRuleServiceTag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceNetworkOutboundRuleServiceTag.js","sourceRoot":"","sources":["../../machinelearning/workspaceNetworkOutboundRuleServiceTag.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AACH,MAAa,sCAAuC,SAAQ,MAAM,CAAC,cAAc;IAyD7E,YAAY,IAAY,EAAE,WAAsG,EAAE,IAAmC;QACjK,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsE,CAAC;YACrF,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;SACzE;aAAM;YACH,MAAM,IAAI,GAAG,WAAqE,CAAC;YACnF,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;SACvE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,sCAAsC,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3F,CAAC;IAxFD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmD,EAAE,IAAmC;QACjJ,OAAO,IAAI,sCAAsC,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC7F,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,sCAAsC,CAAC,YAAY,CAAC;IACvF,CAAC;;AA1BL,wFA0FC;AA5EG,gBAAgB;AACO,mDAAY,GAAG,qGAAqG,CAAC"}

package/maps/creator.d.ts

@@ -2,6 +2,8 @@ import * as pulumi from "@pulumi/pulumi";
 /**
  * Manages an Azure Maps Creator.
  *
+ * > **Note:** The `azure.maps.Creator` resource has been deprecated because the service is retiring from 2024-09-23 and will be removed in v5.0 of the AzureRM Provider.
+ *
  * ## Example Usage
  *
  * ```typescript

package/maps/creator.js

@@ -8,6 +8,8 @@ const utilities = require("../utilities");
 /**
  * Manages an Azure Maps Creator.
  *
+ * > **Note:** The `azure.maps.Creator` resource has been deprecated because the service is retiring from 2024-09-23 and will be removed in v5.0 of the AzureRM Provider.
+ *
  * ## Example Usage
  *
  * ```typescript

package/maps/creator.js.map

@@ -1 +1 @@
-{"version":3,"file":"creator.js","sourceRoot":"","sources":["../../maps/creator.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAa,OAAQ,SAAQ,MAAM,CAAC,cAAc;IAyD9C,YAAY,IAAY,EAAE,WAAwC,EAAE,IAAmC;QACnG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAuC,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;aAAM;YACH,MAAM,IAAI,GAAG,WAAsC,CAAC;YACpD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SACzD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IAlFD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAoB,EAAE,IAAmC;QAClH,OAAO,IAAI,OAAO,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC9D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC;IACxD,CAAC;;AA1BL,0BAoFC;AAtEG,gBAAgB;AACO,oBAAY,GAAG,4BAA4B,CAAC"}
+{"version":3,"file":"creator.js","sourceRoot":"","sources":["../../maps/creator.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAa,OAAQ,SAAQ,MAAM,CAAC,cAAc;IAyD9C,YAAY,IAAY,EAAE,WAAwC,EAAE,IAAmC;QACnG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAuC,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;aAAM;YACH,MAAM,IAAI,GAAG,WAAsC,CAAC;YACpD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SACzD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IAlFD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAoB,EAAE,IAAmC;QAClH,OAAO,IAAI,OAAO,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC9D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC;IACxD,CAAC;;AA1BL,0BAoFC;AAtEG,gBAAgB;AACO,oBAAY,GAAG,4BAA4B,CAAC"}

package/mssql/managedInstance.d.ts

@@ -6,6 +6,195 @@ import * as outputs from "../types/output";
  *
  * > **Note:** All arguments including the administrator login and password will be stored in the raw state as plain-text. [Read more about sensitive data in state](https://www.terraform.io/docs/state/sensitive-data.html).
  *
+ * > **Note:** SQL Managed Instance needs permission to read Azure Active Directory when configuring the AAD administrator. [Read more about provisioning AAD administrators](https://learn.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-configure?view=azuresql#provision-azure-ad-admin-sql-managed-instance).
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as azure from "@pulumi/azure";
+ *
+ * const example = new azure.core.ResourceGroup("example", {
+ *     name: "database-rg",
+ *     location: "West Europe",
+ * });
+ * const exampleNetworkSecurityGroup = new azure.network.NetworkSecurityGroup("example", {
+ *     name: "mi-security-group",
+ *     location: example.location,
+ *     resourceGroupName: example.name,
+ * });
+ * const allowManagementInbound = new azure.network.NetworkSecurityRule("allow_management_inbound", {
+ *     name: "allow_management_inbound",
+ *     priority: 106,
+ *     direction: "Inbound",
+ *     access: "Allow",
+ *     protocol: "Tcp",
+ *     sourcePortRange: "*",
+ *     destinationPortRanges: [
+ *         "9000",
+ *         "9003",
+ *         "1438",
+ *         "1440",
+ *         "1452",
+ *     ],
+ *     sourceAddressPrefix: "*",
+ *     destinationAddressPrefix: "*",
+ *     resourceGroupName: example.name,
+ *     networkSecurityGroupName: exampleNetworkSecurityGroup.name,
+ * });
+ * const allowMisubnetInbound = new azure.network.NetworkSecurityRule("allow_misubnet_inbound", {
+ *     name: "allow_misubnet_inbound",
+ *     priority: 200,
+ *     direction: "Inbound",
+ *     access: "Allow",
+ *     protocol: "*",
+ *     sourcePortRange: "*",
+ *     destinationPortRange: "*",
+ *     sourceAddressPrefix: "10.0.0.0/24",
+ *     destinationAddressPrefix: "*",
+ *     resourceGroupName: example.name,
+ *     networkSecurityGroupName: exampleNetworkSecurityGroup.name,
+ * });
+ * const allowHealthProbeInbound = new azure.network.NetworkSecurityRule("allow_health_probe_inbound", {
+ *     name: "allow_health_probe_inbound",
+ *     priority: 300,
+ *     direction: "Inbound",
+ *     access: "Allow",
+ *     protocol: "*",
+ *     sourcePortRange: "*",
+ *     destinationPortRange: "*",
+ *     sourceAddressPrefix: "AzureLoadBalancer",
+ *     destinationAddressPrefix: "*",
+ *     resourceGroupName: example.name,
+ *     networkSecurityGroupName: exampleNetworkSecurityGroup.name,
+ * });
+ * const allowTdsInbound = new azure.network.NetworkSecurityRule("allow_tds_inbound", {
+ *     name: "allow_tds_inbound",
+ *     priority: 1000,
+ *     direction: "Inbound",
+ *     access: "Allow",
+ *     protocol: "Tcp",
+ *     sourcePortRange: "*",
+ *     destinationPortRange: "1433",
+ *     sourceAddressPrefix: "VirtualNetwork",
+ *     destinationAddressPrefix: "*",
+ *     resourceGroupName: example.name,
+ *     networkSecurityGroupName: exampleNetworkSecurityGroup.name,
+ * });
+ * const denyAllInbound = new azure.network.NetworkSecurityRule("deny_all_inbound", {
+ *     name: "deny_all_inbound",
+ *     priority: 4096,
+ *     direction: "Inbound",
+ *     access: "Deny",
+ *     protocol: "*",
+ *     sourcePortRange: "*",
+ *     destinationPortRange: "*",
+ *     sourceAddressPrefix: "*",
+ *     destinationAddressPrefix: "*",
+ *     resourceGroupName: example.name,
+ *     networkSecurityGroupName: exampleNetworkSecurityGroup.name,
+ * });
+ * const allowManagementOutbound = new azure.network.NetworkSecurityRule("allow_management_outbound", {
+ *     name: "allow_management_outbound",
+ *     priority: 102,
+ *     direction: "Outbound",
+ *     access: "Allow",
+ *     protocol: "Tcp",
+ *     sourcePortRange: "*",
+ *     destinationPortRanges: [
+ *         "80",
+ *         "443",
+ *         "12000",
+ *     ],
+ *     sourceAddressPrefix: "*",
+ *     destinationAddressPrefix: "*",
+ *     resourceGroupName: example.name,
+ *     networkSecurityGroupName: exampleNetworkSecurityGroup.name,
+ * });
+ * const allowMisubnetOutbound = new azure.network.NetworkSecurityRule("allow_misubnet_outbound", {
+ *     name: "allow_misubnet_outbound",
+ *     priority: 200,
+ *     direction: "Outbound",
+ *     access: "Allow",
+ *     protocol: "*",
+ *     sourcePortRange: "*",
+ *     destinationPortRange: "*",
+ *     sourceAddressPrefix: "10.0.0.0/24",
+ *     destinationAddressPrefix: "*",
+ *     resourceGroupName: example.name,
+ *     networkSecurityGroupName: exampleNetworkSecurityGroup.name,
+ * });
+ * const denyAllOutbound = new azure.network.NetworkSecurityRule("deny_all_outbound", {
+ *     name: "deny_all_outbound",
+ *     priority: 4096,
+ *     direction: "Outbound",
+ *     access: "Deny",
+ *     protocol: "*",
+ *     sourcePortRange: "*",
+ *     destinationPortRange: "*",
+ *     sourceAddressPrefix: "*",
+ *     destinationAddressPrefix: "*",
+ *     resourceGroupName: example.name,
+ *     networkSecurityGroupName: exampleNetworkSecurityGroup.name,
+ * });
+ * const exampleVirtualNetwork = new azure.network.VirtualNetwork("example", {
+ *     name: "vnet-mi",
+ *     resourceGroupName: example.name,
+ *     addressSpaces: ["10.0.0.0/16"],
+ *     location: example.location,
+ * });
+ * const exampleSubnet = new azure.network.Subnet("example", {
+ *     name: "subnet-mi",
+ *     resourceGroupName: example.name,
+ *     virtualNetworkName: exampleVirtualNetwork.name,
+ *     addressPrefixes: ["10.0.0.0/24"],
+ *     delegations: [{
+ *         name: "managedinstancedelegation",
+ *         serviceDelegation: {
+ *             name: "Microsoft.Sql/managedInstances",
+ *             actions: [
+ *                 "Microsoft.Network/virtualNetworks/subnets/join/action",
+ *                 "Microsoft.Network/virtualNetworks/subnets/prepareNetworkPolicies/action",
+ *                 "Microsoft.Network/virtualNetworks/subnets/unprepareNetworkPolicies/action",
+ *             ],
+ *         },
+ *     }],
+ * });
+ * const exampleSubnetNetworkSecurityGroupAssociation = new azure.network.SubnetNetworkSecurityGroupAssociation("example", {
+ *     subnetId: exampleSubnet.id,
+ *     networkSecurityGroupId: exampleNetworkSecurityGroup.id,
+ * });
+ * const exampleRouteTable = new azure.network.RouteTable("example", {
+ *     name: "routetable-mi",
+ *     location: example.location,
+ *     resourceGroupName: example.name,
+ *     bgpRoutePropagationEnabled: true,
+ * }, {
+ *     dependsOn: [exampleSubnet],
+ * });
+ * const exampleSubnetRouteTableAssociation = new azure.network.SubnetRouteTableAssociation("example", {
+ *     subnetId: exampleSubnet.id,
+ *     routeTableId: exampleRouteTable.id,
+ * });
+ * const exampleManagedInstance = new azure.mssql.ManagedInstance("example", {
+ *     name: "managedsqlinstance",
+ *     resourceGroupName: example.name,
+ *     location: example.location,
+ *     licenseType: "BasePrice",
+ *     skuName: "GP_Gen5",
+ *     storageSizeInGb: 32,
+ *     subnetId: exampleSubnet.id,
+ *     vcores: 4,
+ *     administratorLogin: "mradministrator",
+ *     administratorLoginPassword: "thisIsDog11",
+ * }, {
+ *     dependsOn: [
+ *         exampleSubnetNetworkSecurityGroupAssociation,
+ *         exampleSubnetRouteTableAssociation,
+ *     ],
+ * });
+ * ```
+ *
  * ## Import
  *
  * Microsoft SQL Managed Instances can be imported using the `resource id`, e.g.
@@ -33,11 +222,15 @@ export declare class ManagedInstance extends pulumi.CustomResource {
     /**
      * The administrator login name for the new SQL Managed Instance. Changing this forces a new resource to be created.
      */
-    readonly administratorLogin: pulumi.Output<string>;
+    readonly administratorLogin: pulumi.Output<string | undefined>;
     /**
      * The password associated with the `administratorLogin` user. Needs to comply with Azure's [Password Policy](https://msdn.microsoft.com/library/ms161959.aspx)
      */
-    readonly administratorLoginPassword: pulumi.Output<string>;
+    readonly administratorLoginPassword: pulumi.Output<string | undefined>;
+    /**
+     * An `azureActiveDirectoryAdministrator` block as defined below.
+     */
+    readonly azureActiveDirectoryAdministrator: pulumi.Output<outputs.mssql.ManagedInstanceAzureActiveDirectoryAdministrator | undefined>;
     /**
      * Specifies how the SQL Managed Instance will be collated. Default value is `SQL_Latin1_General_CP1_CI_AS`. Changing this forces a new resource to be created.
      */
@@ -72,6 +265,8 @@ export declare class ManagedInstance extends pulumi.CustomResource {
     readonly maintenanceConfigurationName: pulumi.Output<string | undefined>;
     /**
      * The Minimum TLS Version. Default value is `1.2` Valid values include `1.0`, `1.1`, `1.2`.
+     *
+     * > **NOTE:** Azure Services will require TLS 1.2+ by August 2025, please see this [announcement](https://azure.microsoft.com/en-us/updates/v2/update-retirement-tls1-0-tls1-1-versions-azure-services/) for more.
      */
     readonly minimumTlsVersion: pulumi.Output<string | undefined>;
     /**
@@ -107,7 +302,7 @@ export declare class ManagedInstance extends pulumi.CustomResource {
      */
     readonly storageSizeInGb: pulumi.Output<number>;
     /**
-     * The subnet resource id that the SQL Managed Instance will be associated with. Changing this forces a new resource to be created.
+     * The subnet resource id that the SQL Managed Instance will be associated with.
      */
     readonly subnetId: pulumi.Output<string>;
     /**
@@ -149,6 +344,10 @@ export interface ManagedInstanceState {
      * The password associated with the `administratorLogin` user. Needs to comply with Azure's [Password Policy](https://msdn.microsoft.com/library/ms161959.aspx)
      */
     administratorLoginPassword?: pulumi.Input<string>;
+    /**
+     * An `azureActiveDirectoryAdministrator` block as defined below.
+     */
+    azureActiveDirectoryAdministrator?: pulumi.Input<inputs.mssql.ManagedInstanceAzureActiveDirectoryAdministrator>;
     /**
      * Specifies how the SQL Managed Instance will be collated. Default value is `SQL_Latin1_General_CP1_CI_AS`. Changing this forces a new resource to be created.
      */
@@ -183,6 +382,8 @@ export interface ManagedInstanceState {
     maintenanceConfigurationName?: pulumi.Input<string>;
     /**
      * The Minimum TLS Version. Default value is `1.2` Valid values include `1.0`, `1.1`, `1.2`.
+     *
+     * > **NOTE:** Azure Services will require TLS 1.2+ by August 2025, please see this [announcement](https://azure.microsoft.com/en-us/updates/v2/update-retirement-tls1-0-tls1-1-versions-azure-services/) for more.
      */
     minimumTlsVersion?: pulumi.Input<string>;
     /**
@@ -218,7 +419,7 @@ export interface ManagedInstanceState {
      */
     storageSizeInGb?: pulumi.Input<number>;
     /**
-     * The subnet resource id that the SQL Managed Instance will be associated with. Changing this forces a new resource to be created.
+     * The subnet resource id that the SQL Managed Instance will be associated with.
      */
     subnetId?: pulumi.Input<string>;
     /**
@@ -247,11 +448,15 @@ export interface ManagedInstanceArgs {
     /**
      * The administrator login name for the new SQL Managed Instance. Changing this forces a new resource to be created.
      */
-    administratorLogin: pulumi.Input<string>;
+    administratorLogin?: pulumi.Input<string>;
     /**
      * The password associated with the `administratorLogin` user. Needs to comply with Azure's [Password Policy](https://msdn.microsoft.com/library/ms161959.aspx)
      */
-    administratorLoginPassword: pulumi.Input<string>;
+    administratorLoginPassword?: pulumi.Input<string>;
+    /**
+     * An `azureActiveDirectoryAdministrator` block as defined below.
+     */
+    azureActiveDirectoryAdministrator?: pulumi.Input<inputs.mssql.ManagedInstanceAzureActiveDirectoryAdministrator>;
     /**
      * Specifies how the SQL Managed Instance will be collated. Default value is `SQL_Latin1_General_CP1_CI_AS`. Changing this forces a new resource to be created.
      */
@@ -278,6 +483,8 @@ export interface ManagedInstanceArgs {
     maintenanceConfigurationName?: pulumi.Input<string>;
     /**
      * The Minimum TLS Version. Default value is `1.2` Valid values include `1.0`, `1.1`, `1.2`.
+     *
+     * > **NOTE:** Azure Services will require TLS 1.2+ by August 2025, please see this [announcement](https://azure.microsoft.com/en-us/updates/v2/update-retirement-tls1-0-tls1-1-versions-azure-services/) for more.
      */
     minimumTlsVersion?: pulumi.Input<string>;
     /**
@@ -313,7 +520,7 @@ export interface ManagedInstanceArgs {
      */
     storageSizeInGb: pulumi.Input<number>;
     /**
-     * The subnet resource id that the SQL Managed Instance will be associated with. Changing this forces a new resource to be created.
+     * The subnet resource id that the SQL Managed Instance will be associated with.
      */
     subnetId: pulumi.Input<string>;
     /**