@pulumi/azure 6.15.0-alpha.1736506192 → 6.15.0-alpha.1736769356

package/types/input.d.ts

@@ -5155,7 +5155,7 @@ export declare namespace appservice {
          */
         scmIpRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.LinuxFunctionAppSiteConfigScmIpRestriction>[]>;
         /**
-         * Configures the minimum version of TLS required for SSL requests to the SCM site Possible values include: `1.0`, `1.1`, and `1.2`. Defaults to `1.2`.
+         * Configures the minimum version of TLS required for SSL requests to the SCM site Possible values include: `1.0`, `1.1`, `1.2` and `1.3`. Defaults to `1.2`.
          */
         scmMinimumTlsVersion?: pulumi.Input<string>;
         /**
@@ -10111,7 +10111,7 @@ export declare namespace appservice {
          */
         scmIpRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsFunctionAppSiteConfigScmIpRestriction>[]>;
         /**
-         * Configures the minimum version of TLS required for SSL requests to the SCM site. Possible values include: `1.0`, `1.1`, and `1.2`. Defaults to `1.2`.
+         * Configures the minimum version of TLS required for SSL requests to the SCM site. Possible values include: `1.0`, `1.1`, `1.2` and `1.3`. Defaults to `1.2`.
          */
         scmMinimumTlsVersion?: pulumi.Input<string>;
         /**
@@ -13978,6 +13978,34 @@ export declare namespace arckubernetes {
          */
         timeoutInSeconds?: pulumi.Input<number>;
     }
+    interface ProvisionedClusterAzureActiveDirectory {
+        /**
+         * A list of IDs of Microsoft Entra ID Groups. All members of the specified Microsoft Entra ID Groups have the cluster administrator access to the Kubernetes cluster.
+         */
+        adminGroupObjectIds?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * Whether to enable Azure RBAC for Kubernetes authorization. Defaults to `false`.
+         */
+        azureRbacEnabled?: pulumi.Input<boolean>;
+        /**
+         * The Tenant ID to use for authentication. If not specified, the Tenant of the Arc Kubernetes Cluster will be used.
+         */
+        tenantId?: pulumi.Input<string>;
+    }
+    interface ProvisionedClusterIdentity {
+        /**
+         * The Principal ID associated with this Managed Service Identity.
+         */
+        principalId?: pulumi.Input<string>;
+        /**
+         * The Tenant ID associated with this Managed Service Identity.
+         */
+        tenantId?: pulumi.Input<string>;
+        /**
+         * The type of the Managed Identity. The only possible value is `SystemAssigned`. Changing this forces a new Arc Kubernetes Provisioned Cluster to be created.
+         */
+        type: pulumi.Input<string>;
+    }
 }
 export declare namespace arcmachine {
     interface ArcMachineIdentity {
@@ -15376,6 +15404,28 @@ export declare namespace batch {
          */
         policy?: pulumi.Input<string>;
     }
+    interface PoolSecurityProfile {
+        /**
+         * Whether to enable host encryption for the Virtual Machine or Virtual Machine Scale Set. This will enable the encryption for all the disks including Resource/Temp disk at host itself. Possible values are `true` and `false`. Changing this forces a new resource to be created.
+         */
+        hostEncryptionEnabled?: pulumi.Input<boolean>;
+        /**
+         * Whether to enable secure boot for the Virtual Machine or Virtual Machine Scale Set. Possible values are `true` and `false`. Changing this forces a new resource to be created.
+         */
+        secureBootEnabled?: pulumi.Input<boolean>;
+        /**
+         * The security type of the Virtual Machine. Possible values are `confidentialVM` and `trustedLaunch`. Changing this forces a new resource to be created.
+         */
+        securityType?: pulumi.Input<string>;
+        /**
+         * Whether to enable virtual trusted platform module (vTPM) for the Virtual Machine or Virtual Machine Scale Set. Possible values are `true` and `false`. Changing this forces a new resource to be created.
+         *
+         * > **NOTE:** `securityProfile` block can only be specified during creation and does not support updates.
+         *
+         * > **NOTE:** `securityType` must be specified to set UEFI related properties including `secureBootEnabled` and `vtpmEnabled`.
+         */
+        vtpmEnabled?: pulumi.Input<boolean>;
+    }
     interface PoolStartTask {
         /**
          * The command line executed by the start task.
@@ -16304,13 +16354,15 @@ export declare namespace cdn {
         /**
          * Defines the source of the SSL certificate. Possible values include `CustomerCertificate` and `ManagedCertificate`. Defaults to `ManagedCertificate`.
          *
-         * ->**NOTE:** It may take up to 15 minutes for the Front Door Service to validate the state and Domain ownership of the Custom Domain.
+         * ->**Note:** It may take up to 15 minutes for the Front Door Service to validate the state and Domain ownership of the Custom Domain.
          */
         certificateType?: pulumi.Input<string>;
         /**
-         * TLS protocol version that will be used for Https. Possible values include `TLS10` and `TLS12`. Defaults to `TLS12`.
+         * TLS protocol version that will be used for Https. Possible values are `TLS12`. Defaults to `TLS12`.
          *
-         * > **Note** Azure Services will require TLS 1.2+ by August 2025, please see this [announcement](https://azure.microsoft.com/en-us/updates/v2/update-retirement-tls1-0-tls1-1-versions-azure-services/) for more details.
+         * > **Note:** On March 1, 2025, support for Transport Layer Security (TLS) 1.0 and 1.1 will be retired for Azure Front Door, all connections to Azure Front Door must employ `TLS 1.2` or later, please see the product [announcement](https://azure.microsoft.com/en-us/updates/v2/update-retirement-tls1-0-tls1-1-versions-azure-services/) for more details.
+         *
+         * @deprecated As of March 1, 2025, support for 'TLS10' will be retired from Azure Front Door, therefore the 'TLS10' property value will be removed in v5.0 of the provider.
          */
         minimumTlsVersion?: pulumi.Input<string>;
     }
@@ -16392,7 +16444,7 @@ export declare namespace cdn {
          */
         type: pulumi.Input<string>;
         /**
-         * The version of the managed rule to use with this resource. Possible values depends on which DRS type you are using, for the `DefaultRuleSet` type the possible values include `1.0` or `preview-0.1`. For `Microsoft_DefaultRuleSet` the possible values include `1.1`, `2.0` or `2.1`. For `BotProtection` the value must be `preview-0.1` and for `Microsoft_BotManagerRuleSet` the value must be `1.0`.
+         * The version of the managed rule to use with this resource. Possible values depends on which DRS type you are using, for the `DefaultRuleSet` type the possible values include `1.0` or `preview-0.1`. For `Microsoft_DefaultRuleSet` the possible values include `1.1`, `2.0` or `2.1`. For `BotProtection` the value must be `preview-0.1` and for `Microsoft_BotManagerRuleSet` the possible values include `1.0` and `1.1`.
          */
         version: pulumi.Input<string>;
     }
@@ -16540,6 +16592,18 @@ export declare namespace cdn {
          */
         targetType?: pulumi.Input<string>;
     }
+    interface FrontdoorProfileIdentity {
+        /**
+         * A list of one or more Resource IDs for User Assigned Managed identities to assign. Required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
+         */
+        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
+        principalId?: pulumi.Input<string>;
+        tenantId?: pulumi.Input<string>;
+        /**
+         * The type of managed identity to assign. Possible values are `SystemAssigned`, `UserAssigned` or `SystemAssigned, UserAssigned`.
+         */
+        type: pulumi.Input<string>;
+    }
     interface FrontdoorRouteCache {
         /**
          * Is content compression enabled? Possible values are `true` or `false`. Defaults to `false`.
@@ -17154,6 +17218,30 @@ export declare namespace cdn {
          */
         cdnFrontdoorDomainId: pulumi.Input<string>;
     }
+    interface GetFrontdoorProfileIdentity {
+        /**
+         * The list of User Assigned Managed Identity IDs assigned to this Front Door Profile.
+         */
+        identityIds?: string[];
+        principalId?: string;
+        tenantId?: string;
+        /**
+         * The type of Managed Service Identity that is configured on this Front Door Profile.
+         */
+        type: string;
+    }
+    interface GetFrontdoorProfileIdentityArgs {
+        /**
+         * The list of User Assigned Managed Identity IDs assigned to this Front Door Profile.
+         */
+        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
+        principalId?: pulumi.Input<string>;
+        tenantId?: pulumi.Input<string>;
+        /**
+         * The type of Managed Service Identity that is configured on this Front Door Profile.
+         */
+        type: pulumi.Input<string>;
+    }
 }
 export declare namespace chaosstudio {
     interface ExperimentIdentity {
@@ -17389,16 +17477,13 @@ export declare namespace cognitive {
          * If the service has different generations of hardware, for the same SKU, then that can be captured here. Changing this forces a new resource to be created.
          */
         family?: pulumi.Input<string>;
-        /**
-         * The name of the SKU. Possible values include `Standard`, `DataZoneStandard`, `GlobalBatch`, `GlobalStandard` and `ProvisionedManaged`.
-         */
         name: pulumi.Input<string>;
         /**
          * The SKU size. When the name field is the combination of tier and some other value, this would be the standalone code. Changing this forces a new resource to be created.
          */
         size?: pulumi.Input<string>;
         /**
-         * Possible values are `Free`, `Basic`, `Standard`, `Premium`, `Enterprise`. Changing this forces a new resource to be created.
+         * Possible values are `Free`, `Basic`, `Standard`, `Premium`, `Enterprise`. This property is required only when multiple tiers are available with the SKU name. Changing this forces a new resource to be created.
          */
         tier?: pulumi.Input<string>;
     }
@@ -17779,6 +17864,10 @@ export declare namespace compute {
          * > **NOTE:** If specified this must be equal to or larger than the size of the Image the Virtual Machine is based on. When creating a larger disk than exists in the image you'll need to repartition the disk to use the remaining space.
          */
         diskSizeGb?: pulumi.Input<number>;
+        /**
+         * The ID of the OS disk.
+         */
+        id?: pulumi.Input<string>;
         /**
          * The name which should be used for the Internal OS Disk. Changing this forces a new resource to be created.
          */
@@ -20041,6 +20130,10 @@ export declare namespace compute {
          * > **NOTE:** If specified this must be equal to or larger than the size of the Image the Virtual Machine is based on. When creating a larger disk than exists in the image you'll need to repartition the disk to use the remaining space.
          */
         diskSizeGb?: pulumi.Input<number>;
+        /**
+         * The ID of the OS disk.
+         */
+        id?: pulumi.Input<string>;
         /**
          * The name which should be used for the Internal OS Disk. Changing this forces a new resource to be created.
          */
@@ -22353,6 +22446,10 @@ export declare namespace containerservice {
          * Specifies the path in the source reference to reconcile on the cluster.
          */
         path?: pulumi.Input<string>;
+        /**
+         * A `postBuild` block as defined below.
+         */
+        postBuild?: pulumi.Input<inputs.containerservice.FluxConfigurationKustomizationPostBuild>;
         /**
          * Whether re-creating Kubernetes resources on the cluster is enabled when patching fails due to an immutable field change. Defaults to `false`.
          */
@@ -22369,6 +22466,36 @@ export declare namespace containerservice {
          * The maximum time to attempt to reconcile the kustomization on the cluster. Defaults to `600`.
          */
         timeoutInSeconds?: pulumi.Input<number>;
+        /**
+         * Whether to enable health check for all Kubernetes objects created by this Kustomization. Defaults to `true`.
+         */
+        wait?: pulumi.Input<boolean>;
+    }
+    interface FluxConfigurationKustomizationPostBuild {
+        /**
+         * Specifies the key/value pairs holding the variables to be substituted in this Kustomization.
+         */
+        substitute?: pulumi.Input<{
+            [key: string]: pulumi.Input<string>;
+        }>;
+        /**
+         * A `substituteFrom` block as defined below.
+         */
+        substituteFroms?: pulumi.Input<pulumi.Input<inputs.containerservice.FluxConfigurationKustomizationPostBuildSubstituteFrom>[]>;
+    }
+    interface FluxConfigurationKustomizationPostBuildSubstituteFrom {
+        /**
+         * Specifies the source kind to hold the variables to be used in substitution. Possible values are `ConfigMap` and `Secret`.
+         */
+        kind: pulumi.Input<string>;
+        /**
+         * Specifies the name of the ConfigMap/Secret that holds the variables to be used in substitution.
+         */
+        name: pulumi.Input<string>;
+        /**
+         * Whether to proceed without ConfigMap/Secret if it is not present. Defaults to `false`.
+         */
+        optional?: pulumi.Input<boolean>;
     }
     interface GroupContainer {
         /**
@@ -25759,7 +25886,7 @@ export declare namespace databricks {
          */
         tenantId?: pulumi.Input<string>;
         /**
-         * Specifies the type of Managed Service Identity that should be configured on the Databricks Access Connector. Possible values include `SystemAssigned` or `UserAssigned`.
+         * Specifies the type of Managed Service Identity that should be configured on the Databricks Access Connector. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned`.
          */
         type: pulumi.Input<string>;
     }
@@ -28554,6 +28681,58 @@ export declare namespace dynatrace {
          */
         phoneNumber: pulumi.Input<string>;
     }
+    interface TagRulesLogRule {
+        /**
+         * Filtering tag for the log rule. A `filteringTag` block as defined below. Changing this forces a new resource to be created.
+         */
+        filteringTags: pulumi.Input<pulumi.Input<inputs.dynatrace.TagRulesLogRuleFilteringTag>[]>;
+        /**
+         * Send Activity logs. The default value is `false`. Changing this forces a new resource to be created.
+         */
+        sendActivityLogsEnabled?: pulumi.Input<boolean>;
+        /**
+         * Send Azure Active Directory logs. The default value is `false`. Changing this forces a new resource to be created.
+         */
+        sendAzureActiveDirectoryLogsEnabled?: pulumi.Input<boolean>;
+        /**
+         * Send Subscription logs. The default value is `false`. Changing this forces a new resource to be created.
+         */
+        sendSubscriptionLogsEnabled?: pulumi.Input<boolean>;
+    }
+    interface TagRulesLogRuleFilteringTag {
+        /**
+         * Action of the filtering tag. Possible values are `Include` and `Exclude`. Changing this forces a new resource to be created.
+         */
+        action: pulumi.Input<string>;
+        /**
+         * Name of the filtering tag. Changing this forces a new resource to be created.
+         */
+        name: pulumi.Input<string>;
+        /**
+         * Value of the filtering tag. Changing this forces a new resource to be created.
+         */
+        value: pulumi.Input<string>;
+    }
+    interface TagRulesMetricRule {
+        /**
+         * Filtering tag for the metric rule. A `filteringTag` block as defined below.
+         */
+        filteringTags: pulumi.Input<pulumi.Input<inputs.dynatrace.TagRulesMetricRuleFilteringTag>[]>;
+    }
+    interface TagRulesMetricRuleFilteringTag {
+        /**
+         * Action of the filtering tag. Possible values are `Include` and `Exclude`. Changing this forces a new resource to be created.
+         */
+        action: pulumi.Input<string>;
+        /**
+         * Name of the filtering tag. Changing this forces a new resource to be created.
+         */
+        name: pulumi.Input<string>;
+        /**
+         * Value of the filtering tag. Changing this forces a new resource to be created.
+         */
+        value: pulumi.Input<string>;
+    }
 }
 export declare namespace elasticcloud {
     interface ElasticsearchLogs {
@@ -33504,6 +33683,28 @@ export declare namespace healthcare {
         audiences?: pulumi.Input<pulumi.Input<string>[]>;
         authority?: pulumi.Input<string>;
     }
+    interface DicomServiceCors {
+        /**
+         * Whether to allow credentials in CORS. Defaults to `false`.
+         */
+        allowCredentials?: pulumi.Input<boolean>;
+        /**
+         * A list of allowed headers for CORS.
+         */
+        allowedHeaders?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * A list of allowed methods for CORS.
+         */
+        allowedMethods?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * A list of allowed origins for CORS.
+         */
+        allowedOrigins?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * The maximum age in seconds for the CORS configuration (must be between 0 and 99998 inclusive).
+         */
+        maxAgeInSeconds?: pulumi.Input<number>;
+    }
     interface DicomServiceIdentity {
         /**
          * A list of User Assigned Identity IDs which should be assigned to this Healthcare DICOM service.
@@ -33526,6 +33727,18 @@ export declare namespace healthcare {
          */
         name?: pulumi.Input<string>;
     }
+    interface DicomServiceStorage {
+        /**
+         * The filesystem name of connected storage account. Changing this forces a new Healthcare DICOM Service to be created.
+         */
+        fileSystemName: pulumi.Input<string>;
+        /**
+         * The resource ID of connected storage account. Changing this forces a new Healthcare DICOM Service to be created.
+         *
+         * > **Note:** The `isHnsEnabled` needs to be set to `true` for the storage account to be used with the Healthcare DICOM Service.
+         */
+        storageAccountId: pulumi.Input<string>;
+    }
     interface FhirServiceAuthentication {
         /**
          * The intended audience to receive authentication tokens for the service.
@@ -38257,7 +38470,7 @@ export declare namespace monitoring {
          */
         name: pulumi.Input<string>;
         /**
-         * Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to `Microsoft-Event`,and `Microsoft-WindowsEvent`, `Microsoft-RomeDetectionEvent`, and `Microsoft-SecurityEvent`.
+         * Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to `Microsoft-Event`,and `Microsoft-WindowsEvent` and `Microsoft-SecurityEvent`.
          */
         streams: pulumi.Input<pulumi.Input<string>[]>;
         /**
@@ -38985,6 +39198,28 @@ export declare namespace mssql {
          */
         sourceDatabaseId: pulumi.Input<string>;
     }
+    interface ManagedInstanceAzureActiveDirectoryAdministrator {
+        /**
+         * Specifies whether only Azure AD authentication can be used to log in to this SQL Managed Instance. When `true`, the `administratorLogin` and `administratorLoginPassword` properties can be omitted. Defaults to `false`.
+         */
+        azureadAuthenticationOnlyEnabled?: pulumi.Input<boolean>;
+        /**
+         * The login username of the Azure AD Administrator of this SQL Managed Instance.
+         */
+        loginUsername: pulumi.Input<string>;
+        /**
+         * The object id of the Azure AD Administrator of this SQL Managed Instance.
+         */
+        objectId: pulumi.Input<string>;
+        /**
+         * The principal type of the Azure AD Administrator of this SQL Managed Instance. Possible values are `Application`, `Group`, `User`.
+         */
+        principalType: pulumi.Input<string>;
+        /**
+         * The tenant id of the Azure AD Administrator of this SQL Managed Instance. Should be specified if the Azure AD Administrator is homed in a different tenant to the SQL Managed Instance.
+         */
+        tenantId?: pulumi.Input<string>;
+    }
     interface ManagedInstanceFailoverGroupPartnerRegion {
         /**
          * The Azure Region where the Managed Instance Failover Group should exist. Changing this forces a new resource to be created.
@@ -39007,7 +39242,7 @@ export declare namespace mssql {
     }
     interface ManagedInstanceIdentity {
         /**
-         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this SQL Managed Instance. Required when `type` is set to `UserAssigned`.
+         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this SQL Managed Instance. Required when `type` includes `UserAssigned`.
          *
          * > The assigned `principalId` and `tenantId` can be retrieved after the identity `type` has been set to `SystemAssigned` and SQL Managed Instance has been created.
          */
@@ -39021,7 +39256,7 @@ export declare namespace mssql {
          */
         tenantId?: pulumi.Input<string>;
         /**
-         * Specifies the type of Managed Service Identity that should be configured on this SQL Managed Instance. Possible values are `SystemAssigned`, `UserAssigned`.
+         * Specifies the type of Managed Service Identity that should be configured on this SQL Managed Instance. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned`.
          */
         type: pulumi.Input<string>;
     }
@@ -40488,13 +40723,11 @@ export declare namespace network {
          */
         capacity?: pulumi.Input<number>;
         /**
-         * The Name of the SKU to use for this Application Gateway. Possible values are `Basic`, `Standard_Small`, `Standard_Medium`, `Standard_Large`, `Basic`, `Standard_v2`, `WAF_Medium`, `WAF_Large`, and `WAF_v2`.
+         * The Name of the SKU to use for this Application Gateway. Possible values are `Basic`, `Standard_v2`, and `WAF_v2`.
          */
         name: pulumi.Input<string>;
         /**
-         * The Tier of the SKU to use for this Application Gateway. Possible values are `Basic`, `Standard`, `Standard_v2`, `WAF` and `WAF_v2`.
-         *
-         * !> **NOTE:** The `Standard` and `WAF` SKU have been deprecated in favour of the `Basic`, `Standard_v2` and `WAF_v2` SKU. Please see the [Azure documentation](https://aka.ms/V1retirement) for more details.
+         * The Tier of the SKU to use for this Application Gateway. Possible values are `Basic`, `Standard_v2`, and `WAF_v2`.
          */
         tier: pulumi.Input<string>;
     }
@@ -43316,12 +43549,9 @@ export declare namespace nginx {
         type: pulumi.Input<string>;
     }
     interface DeploymentLoggingStorageAccount {
-        /**
-         * Specify the container name in the Storage Account for logging.
-         */
         containerName?: pulumi.Input<string>;
         /**
-         * The name of the StorageAccount for NGINX Logging.
+         * The name which should be used for this NGINX Deployment. Changing this forces a new NGINX Deployment to be created.
          */
         name?: pulumi.Input<string>;
     }
@@ -46575,9 +46805,13 @@ export declare namespace siterecovery {
          */
         failoverTestStaticIp?: pulumi.Input<string>;
         /**
-         * Name of the subnet to to use when a test failover is done.
+         * Name of the subnet to use when a test failover is done.
          */
         failoverTestSubnetName?: pulumi.Input<string>;
+        /**
+         * A list of IDs of Load Balancer Backend Address Pools to use when a failover is done.
+         */
+        recoveryLoadBalancerBackendAddressPoolIds?: pulumi.Input<pulumi.Input<string>[]>;
         /**
          * Id of the public IP object to use when a failover is done.
          */
@@ -46591,7 +46825,7 @@ export declare namespace siterecovery {
          */
         targetStaticIp?: pulumi.Input<string>;
         /**
-         * Name of the subnet to to use when a failover is done.
+         * Name of the subnet to use when a failover is done.
          */
         targetSubnetName?: pulumi.Input<string>;
     }