@pulumi/azure 6.24.0-alpha.1750228303 → 6.24.0

package/types/output.d.ts

@@ -20336,7 +20336,7 @@ export declare namespace automanage {
 export declare namespace automation {
     interface AccountEncryption {
         /**
-         * @deprecated This field is now ignored and will be removed in the next major version of the Azure Provider, the `encryption` block can be omitted to disable encryption
+         * @deprecated `encryption.key_source` has been deprecated and will be removed in v5.0 of the AzureRM Provider. To disable encryption, omit the `encryption` block
          */
         keySource?: string;
         /**
@@ -24039,7 +24039,7 @@ export declare namespace cdn {
          */
         negateCondition?: boolean;
         /**
-         * A Conditional operator. Possible values include `Any`, `Equal`, `Contains`, `BeginsWith`, `EndsWith`, `LessThan`, `LessThanOrEqual`, `GreaterThan`, `GreaterThanOrEqual` or `RegEx`. Details can be found in the `Condition Operator List` below.
+         * A Conditional operator. Possible values include `Any`, `Equal`, `Contains`, `BeginsWith`, `EndsWith`, `LessThan`, `LessThanOrEqual`, `GreaterThan`, `GreaterThanOrEqual`, `RegEx` or `Wildcard`. Details can be found in the `Condition Operator List` below.
          */
         operator: string;
         /**
@@ -33570,7 +33570,7 @@ export declare namespace containerservice {
         /**
          * Whether zone redundancy is enabled for this replication location? Defaults to `false`.
          *
-         * > **Note:** Changing the `zoneRedundancyEnabled` forces the a underlying replication to be created.
+         * > **Note:** Changing the `zoneRedundancyEnabled` forces an underlying replication to be created.
          */
         zoneRedundancyEnabled?: boolean;
     }
@@ -33604,7 +33604,7 @@ export declare namespace containerservice {
          *
          * > **Note:** `networkRuleSet` is only supported with the `Premium` SKU at this time.
          *
-         * > **Note:** Azure automatically configures Network Rules - to remove these you'll need to specify an `networkRuleSet` block with `defaultAction` set to `Deny`.
+         * > **Note:** Azure automatically configures Network Rules - to remove these, you'll need to specify an `networkRuleSet` block with `defaultAction` set to `Deny`.
          */
         ipRules: outputs.containerservice.RegistryNetworkRuleSetIpRule[];
     }
@@ -37924,6 +37924,106 @@ export declare namespace devcenter {
         tenantId: string;
         type: string;
     }
+    interface GetCatalogCatalogAdogit {
+        /**
+         * The Git branch of the Dev Center Catalog.
+         */
+        branch: string;
+        /**
+         * A reference to the Key Vault secret containing a security token to authenticate to a Git repository.
+         */
+        keyVaultKeyUrl: string;
+        /**
+         * The folder where the catalog items can be found inside the repository.
+         */
+        path: string;
+        /**
+         * The Git URI of the Dev Center Catalog.
+         */
+        uri: string;
+    }
+    interface GetCatalogCatalogGithub {
+        /**
+         * The Git branch of the Dev Center Catalog.
+         */
+        branch: string;
+        /**
+         * A reference to the Key Vault secret containing a security token to authenticate to a Git repository.
+         */
+        keyVaultKeyUrl: string;
+        /**
+         * The folder where the catalog items can be found inside the repository.
+         */
+        path: string;
+        /**
+         * The Git URI of the Dev Center Catalog.
+         */
+        uri: string;
+    }
+    interface GetIdentity {
+        /**
+         * The list of User Assigned Managed Identity IDs assigned to this Dev Center.
+         */
+        identityIds: string[];
+        /**
+         * The Principal ID of the System Assigned Managed Service Identity that is configured on this Dev Center.
+         */
+        principalId: string;
+        /**
+         * The Tenant ID of the System Assigned Managed Service Identity that is configured on this Dev Center.
+         */
+        tenantId: string;
+        /**
+         * The type of Managed Service Identity that is configured on this Dev Center.
+         */
+        type: string;
+    }
+    interface GetProjectEnvironmentTypeIdentity {
+        /**
+         * The list of User Assigned Managed Identity IDs assigned to this Dev Center Project Environment Type.
+         */
+        identityIds: string[];
+        /**
+         * The Principal ID of the System Assigned Managed Service Identity that is configured on this Dev Center Project Environment Type.
+         */
+        principalId: string;
+        /**
+         * The Tenant ID of the System Assigned Managed Service Identity that is configured on this Dev Center Project Environment Type.
+         */
+        tenantId: string;
+        /**
+         * The type of Managed Service Identity that is configured on this Dev Center Project Environment Type.
+         */
+        type: string;
+    }
+    interface GetProjectEnvironmentTypeUserRoleAssignment {
+        /**
+         * A list of roles to assign to the `userId`.
+         */
+        roles: string[];
+        /**
+         * The user object ID that is assigned roles.
+         */
+        userId: string;
+    }
+    interface GetProjectIdentity {
+        /**
+         * The list of User Assigned Managed Identity IDs assigned to this Dev Center Project.
+         */
+        identityIds: string[];
+        /**
+         * The Principal ID of the System Assigned Managed Service Identity that is configured on this Dev Center Project.
+         */
+        principalId: string;
+        /**
+         * The Tenant ID of the System Assigned Managed Service Identity that is configured on this Dev Center Project.
+         */
+        tenantId: string;
+        /**
+         * The type of Managed Service Identity that is configured on this Dev Center Project.
+         */
+        type: string;
+    }
     interface ProjectEnvironmentTypeIdentity {
         /**
          * The ID of the User Assigned Identity which should be assigned to this Dev Center Project Environment Type.
@@ -38642,6 +38742,10 @@ export declare namespace dynatrace {
          * Filtering tag for the metric rule. A `filteringTag` block as defined below.
          */
         filteringTags: outputs.dynatrace.TagRulesMetricRuleFilteringTag[];
+        /**
+         * If sending metrics is enabled. The default value is `false`.
+         */
+        sendingMetricsEnabled?: boolean;
     }
     interface TagRulesMetricRuleFilteringTag {
         /**
@@ -41571,7 +41675,7 @@ export declare namespace hdinsight {
          */
         password?: string;
         /**
-         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below.
+         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below. Changing this forces a new resource to be created.
          */
         scriptActions?: outputs.hdinsight.HBaseClusterRolesHeadNodeScriptAction[];
         /**
@@ -41623,7 +41727,7 @@ export declare namespace hdinsight {
          */
         password?: string;
         /**
-         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above.
+         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above. Changing this forces a new resource to be created.
          */
         scriptActions?: outputs.hdinsight.HBaseClusterRolesWorkerNodeScriptAction[];
         /**
@@ -41707,7 +41811,7 @@ export declare namespace hdinsight {
          */
         password?: string;
         /**
-         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above.
+         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above. Changing this forces a new resource to be created.
          */
         scriptActions?: outputs.hdinsight.HBaseClusterRolesZookeeperNodeScriptAction[];
         /**
@@ -41791,7 +41895,7 @@ export declare namespace hdinsight {
         /**
          * The ID of the Storage Container. Changing this forces a new resource to be created.
          *
-         * > **Note:** This can be obtained from the `id` of the `azure.storage.Container` resource.
+         * > **Note:** When the `azure.storage.Container` resource is created with `storageAccountName`, this can be obtained from the `id` of the `azure.storage.Container` resource. When the `azure.storage.Container` resource is created with `storageAccountId`, please use `azure.storage.getContainers` data source to get the `dataPlaneId` of the `azure.storage.Container` resource for this field.
          */
         storageContainerId: string;
         /**
@@ -42026,7 +42130,7 @@ export declare namespace hdinsight {
          */
         targetInstanceCount: number;
         /**
-         * A `uninstallScriptActions` block as defined below.
+         * A `uninstallScriptActions` block as defined below. Changing this forces a new resource to be created.
          */
         uninstallScriptActions?: outputs.hdinsight.HadoopClusterRolesEdgeNodeUninstallScriptAction[];
         /**
@@ -42092,7 +42196,7 @@ export declare namespace hdinsight {
          */
         password?: string;
         /**
-         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below.
+         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below. Changing this forces a new resource to be created.
          */
         scriptActions?: outputs.hdinsight.HadoopClusterRolesHeadNodeScriptAction[];
         /**
@@ -42144,7 +42248,7 @@ export declare namespace hdinsight {
          */
         password?: string;
         /**
-         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above.
+         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above. Changing this forces a new resource to be created.
          */
         scriptActions?: outputs.hdinsight.HadoopClusterRolesWorkerNodeScriptAction[];
         /**
@@ -42242,7 +42346,7 @@ export declare namespace hdinsight {
          */
         password?: string;
         /**
-         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above.
+         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above. Changing this forces a new resource to be created.
          */
         scriptActions?: outputs.hdinsight.HadoopClusterRolesZookeeperNodeScriptAction[];
         /**
@@ -42326,7 +42430,7 @@ export declare namespace hdinsight {
         /**
          * The ID of the Storage Container. Changing this forces a new resource to be created.
          *
-         * > **Note:** This can be obtained from the `id` of the `azure.storage.Container` resource.
+         * > **Note:** When the `azure.storage.Container` resource is created with `storageAccountName`, this can be obtained from the `id` of the `azure.storage.Container` resource. When the `azure.storage.Container` resource is created with `storageAccountId`, please use `azure.storage.getContainers` data source to get the `dataPlaneId` of the `azure.storage.Container` resource for this field.
          */
         storageContainerId: string;
         /**
@@ -42554,7 +42658,7 @@ export declare namespace hdinsight {
          */
         password?: string;
         /**
-         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below.
+         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below. Changing this forces a new resource to be created.
          */
         scriptActions?: outputs.hdinsight.InteractiveQueryClusterRolesHeadNodeScriptAction[];
         /**
@@ -42608,7 +42712,7 @@ export declare namespace hdinsight {
          */
         password?: string;
         /**
-         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above.
+         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above. Changing this forces a new resource to be created.
          */
         scriptActions?: outputs.hdinsight.InteractiveQueryClusterRolesWorkerNodeScriptAction[];
         /**
@@ -42692,7 +42796,7 @@ export declare namespace hdinsight {
          */
         password?: string;
         /**
-         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above.
+         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above. Changing this forces a new resource to be created.
          */
         scriptActions?: outputs.hdinsight.InteractiveQueryClusterRolesZookeeperNodeScriptAction[];
         /**
@@ -42776,7 +42880,7 @@ export declare namespace hdinsight {
         /**
          * The ID of the Storage Container. Changing this forces a new resource to be created.
          *
-         * > **Note:** This can be obtained from the `id` of the `azure.storage.Container` resource.
+         * > **Note:** When the `azure.storage.Container` resource is created with `storageAccountName`, this can be obtained from the `id` of the `azure.storage.Container` resource. When the `azure.storage.Container` resource is created with `storageAccountId`, please use `azure.storage.getContainers` data source to get the `dataPlaneId` of the `azure.storage.Container` resource for this field.
          */
         storageContainerId: string;
         /**
@@ -43022,7 +43126,7 @@ export declare namespace hdinsight {
          */
         password?: string;
         /**
-         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below.
+         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below. Changing this forces a new resource to be created.
          */
         scriptActions?: outputs.hdinsight.KafkaClusterRolesHeadNodeScriptAction[];
         /**
@@ -43070,7 +43174,7 @@ export declare namespace hdinsight {
          */
         password?: string;
         /**
-         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below.
+         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below. Changing this forces a new resource to be created.
          */
         scriptActions?: outputs.hdinsight.KafkaClusterRolesKafkaManagementNodeScriptAction[];
         /**
@@ -43124,7 +43228,7 @@ export declare namespace hdinsight {
          */
         password?: string;
         /**
-         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below.
+         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below. Changing this forces a new resource to be created.
          */
         scriptActions?: outputs.hdinsight.KafkaClusterRolesWorkerNodeScriptAction[];
         /**
@@ -43176,7 +43280,7 @@ export declare namespace hdinsight {
          */
         password?: string;
         /**
-         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below.
+         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below. Changing this forces a new resource to be created.
          */
         scriptActions?: outputs.hdinsight.KafkaClusterRolesZookeeperNodeScriptAction[];
         /**
@@ -43260,7 +43364,7 @@ export declare namespace hdinsight {
         /**
          * The ID of the Storage Container. Changing this forces a new resource to be created.
          *
-         * > **Note:** This can be obtained from the `id` of the `azure.storage.Container` resource.
+         * > **Note:** When the `azure.storage.Container` resource is created with `storageAccountName`, this can be obtained from the `id` of the `azure.storage.Container` resource. When the `azure.storage.Container` resource is created with `storageAccountId`, please use `azure.storage.getContainers` data source to get the `dataPlaneId` of the `azure.storage.Container` resource for this field.
          */
         storageContainerId: string;
         /**
@@ -43488,7 +43592,7 @@ export declare namespace hdinsight {
          */
         password?: string;
         /**
-         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below.
+         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below. Changing this forces a new resource to be created.
          */
         scriptActions?: outputs.hdinsight.SparkClusterRolesHeadNodeScriptAction[];
         /**
@@ -43540,7 +43644,7 @@ export declare namespace hdinsight {
          */
         password?: string;
         /**
-         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above.
+         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above. Changing this forces a new resource to be created.
          */
         scriptActions?: outputs.hdinsight.SparkClusterRolesWorkerNodeScriptAction[];
         /**
@@ -43638,7 +43742,7 @@ export declare namespace hdinsight {
          */
         password?: string;
         /**
-         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above.
+         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above. Changing this forces a new resource to be created.
          */
         scriptActions?: outputs.hdinsight.SparkClusterRolesZookeeperNodeScriptAction[];
         /**
@@ -43722,7 +43826,7 @@ export declare namespace hdinsight {
         /**
          * The ID of the Storage Container. Changing this forces a new resource to be created.
          *
-         * > **Note:** This can be obtained from the `id` of the `azure.storage.Container` resource.
+         * > **Note:** When the `azure.storage.Container` resource is created with `storageAccountName`, this can be obtained from the `id` of the `azure.storage.Container` resource. When the `azure.storage.Container` resource is created with `storageAccountId`, please use `azure.storage.getContainers` data source to get the `dataPlaneId` of the `azure.storage.Container` resource for this field.
          */
         storageContainerId: string;
         /**
@@ -49565,21 +49669,18 @@ export declare namespace monitoring {
     }
     interface DiagnosticSettingEnabledLogRetentionPolicy {
         days?: number;
-        /**
-         * Is this Diagnostic Metric enabled? Defaults to `true`.
-         */
         enabled: boolean;
     }
-    interface DiagnosticSettingMetric {
+    interface DiagnosticSettingEnabledMetric {
         /**
          * The name of a Diagnostic Metric Category for this Resource.
          *
          * > **NOTE:** The Metric Categories available vary depending on the Resource being used. You may wish to use the `azure.monitoring.getDiagnosticCategories` Data Source to identify which categories are available for a given Resource.
          */
         category: string;
-        /**
-         * Is this Diagnostic Metric enabled? Defaults to `true`.
-         */
+    }
+    interface DiagnosticSettingMetric {
+        category: string;
         enabled?: boolean;
         /**
          * @deprecated `retentionPolicy` has been deprecated in favor of the `azure.storage.ManagementPolicy` resource and will be removed in v5.0 of the AzureRM provider - to learn more go to https://aka.ms/diagnostic_settings_log_retention
@@ -49588,9 +49689,6 @@ export declare namespace monitoring {
     }
     interface DiagnosticSettingMetricRetentionPolicy {
         days?: number;
-        /**
-         * Is this Diagnostic Metric enabled? Defaults to `true`.
-         */
         enabled: boolean;
     }
     interface GetActionGroupArmRoleReceiver {
@@ -52098,6 +52196,10 @@ export declare namespace netapp {
          * The ID of the Capacity Pool. Changing this forces a new Application Volume Group to be created and data will be lost.
          */
         capacityPoolId: string;
+        /**
+         * A `dataProtectionReplication` block as defined below. Changing this forces a new Application Volume Group to be created and data will be lost.
+         */
+        dataProtectionReplication?: outputs.netapp.VolumeGroupOracleVolumeDataProtectionReplication;
         /**
          * A `dataProtectionSnapshotPolicy` block as defined below.
          */
@@ -52180,6 +52282,24 @@ export declare namespace netapp {
          */
         zone?: string;
     }
+    interface VolumeGroupOracleVolumeDataProtectionReplication {
+        /**
+         * The endpoint type. Possible values are `dst` and `src`. Defaults to `dst`. Changing this forces a new Application Volume Group to be created and data will be lost.
+         */
+        endpointType?: string;
+        /**
+         * Location of the primary volume. Changing this forces a new Application Volume Group to be created and data will be lost.
+         */
+        remoteVolumeLocation: string;
+        /**
+         * Resource ID of the primary volume. Changing this forces a new Application Volume Group to be created and data will be lost.
+         */
+        remoteVolumeResourceId: string;
+        /**
+         * Replication frequency. Possible values are `10minutes`, `daily` and `hourly`. Changing this forces a new Application Volume Group to be created and data will be lost.
+         */
+        replicationFrequency: string;
+    }
     interface VolumeGroupOracleVolumeDataProtectionSnapshotPolicy {
         /**
          * Resource ID of the snapshot policy to apply to the volume.
@@ -52291,19 +52411,19 @@ export declare namespace netapp {
     }
     interface VolumeGroupSapHanaVolumeDataProtectionReplication {
         /**
-         * The endpoint type. Possible values are `dst` and `src`. Defaults to `dst`.
+         * The endpoint type. Possible values are `dst` and `src`. Defaults to `dst`. Changing this forces a new Application Volume Group to be created and data will be lost.
          */
         endpointType?: string;
         /**
-         * Location of the primary volume.
+         * Location of the primary volume. Changing this forces a new Application Volume Group to be created and data will be lost.
          */
         remoteVolumeLocation: string;
         /**
-         * Resource ID of the primary volume.
+         * Resource ID of the primary volume. Changing this forces a new Application Volume Group to be created and data will be lost.
          */
         remoteVolumeResourceId: string;
         /**
-         * eplication frequency. Possible values are `10minutes`, `daily` and `hourly`.
+         * eplication frequency. Possible values are `10minutes`, `daily` and `hourly`. Changing this forces a new Application Volume Group to be created and data will be lost.
          */
         replicationFrequency: string;
     }
@@ -55573,6 +55693,20 @@ export declare namespace network {
          */
         tunnelIps: string[];
     }
+    interface GetVpnGatewayIpConfiguration {
+        /**
+         * The identifier of the IP configuration for the VPN Gateway.
+         */
+        id: string;
+        /**
+         * The private IP address of this IP configuration.
+         */
+        privateIpAddress: string;
+        /**
+         * The public IP address of this IP configuration.
+         */
+        publicIpAddress: string;
+    }
     interface GetVpnServerConfigurationAzureActiveDirectoryAuthentication {
         /**
          * The Audience which should be used for authentication.
@@ -56543,7 +56677,7 @@ export declare namespace network {
         /**
          * Specifies if the encrypted Virtual Network allows VM that does not support encryption. Possible values are `DropUnencrypted` and `AllowUnencrypted`.
          *
-         * > **NOTE:** Currently `AllowUnencrypted` is the only supported value for the `enforcement` property as `DropUnencrypted` is not yet in public preview or general availability. Please see the [official documentation](https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-encryption-overview#limitations) for more information.
+         * > **Note:** Currently `AllowUnencrypted` is the only supported value for the `enforcement` property as `DropUnencrypted` is not yet in public preview or general availability. Please see the [official documentation](https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-encryption-overview#limitations) for more information.
          */
         enforcement: string;
     }
@@ -56856,6 +56990,20 @@ export declare namespace network {
          */
         policyGroupNames: string[];
     }
+    interface VirtualNetworkIpAddressPool {
+        /**
+         * The list of IP address prefixes allocated to the Virtual Network.
+         */
+        allocatedIpAddressPrefixes: string[];
+        /**
+         * The ID of the Network Manager IP Address Management (IPAM) Pool.
+         */
+        id: string;
+        /**
+         * The number of IP addresses to allocated to the Virtual Network. The value must be a string that represents a positive number, e.g., `"100"`.
+         */
+        numberOfIpAddresses: string;
+    }
     interface VirtualNetworkSubnet {
         /**
          * The address prefixes to use for the subnet.
@@ -56880,17 +57028,17 @@ export declare namespace network {
         /**
          * Enable or Disable network policies for the private endpoint on the subnet. Possible values are `Disabled`, `Enabled`, `NetworkSecurityGroupEnabled` and `RouteTableEnabled`. Defaults to `Disabled`.
          *
-         * > **NOTE:** If you don't want to use network policies like user-defined Routes and Network Security Groups, you need to set `privateEndpointNetworkPolicies` in the subnet to `Disabled`. This setting only applies to Private Endpoints in the Subnet and affects all Private Endpoints in the Subnet.
+         * > **Note:** If you don't want to use network policies like user-defined Routes and Network Security Groups, you need to set `privateEndpointNetworkPolicies` in the subnet to `Disabled`. This setting only applies to Private Endpoints in the Subnet and affects all Private Endpoints in the Subnet.
          *
-         * > **NOTE:** If you want to use network policies like user-defined Routes and Network Security Groups, you need to set the `privateEndpointNetworkPolicies` in the Subnet to `Enabled`/`NetworkSecurityGroupEnabled`/`RouteTableEnabled`. This setting only applies to Private Endpoints in the Subnet and affects all Private Endpoints in the Subnet.
+         * > **Note:** If you want to use network policies like user-defined Routes and Network Security Groups, you need to set the `privateEndpointNetworkPolicies` in the Subnet to `Enabled`/`NetworkSecurityGroupEnabled`/`RouteTableEnabled`. This setting only applies to Private Endpoints in the Subnet and affects all Private Endpoints in the Subnet.
          *
-         * > **NOTE:** See more details from [Manage network policies for Private Endpoints](https://learn.microsoft.com/en-gb/azure/private-link/disable-private-endpoint-network-policy?tabs=network-policy-portal).
+         * > **Note:** See more details from [Manage network policies for Private Endpoints](https://learn.microsoft.com/en-gb/azure/private-link/disable-private-endpoint-network-policy?tabs=network-policy-portal).
          */
         privateEndpointNetworkPolicies?: string;
         /**
          * Enable or Disable network policies for the private link service on the subnet. Defaults to `true`.
          *
-         * > **NOTE:** When configuring Azure Private Link service, the explicit setting `privateLinkServiceNetworkPoliciesEnabled` must be set to `false` in the subnet since Private Link Service does not support network policies like user-defined Routes and Network Security Groups. This setting only affects the Private Link service. For other resources in the subnet, access is controlled based on the Network Security Group which can be configured using the `azure.network.SubnetNetworkSecurityGroupAssociation` resource. See more details from [Manage network policies for Private Link Services](https://learn.microsoft.com/en-gb/azure/private-link/disable-private-link-service-network-policy?tabs=private-link-network-policy-powershell).
+         * > **Note:** When configuring Azure Private Link service, the explicit setting `privateLinkServiceNetworkPoliciesEnabled` must be set to `false` in the subnet since Private Link Service does not support network policies like user-defined Routes and Network Security Groups. This setting only affects the Private Link service. For other resources in the subnet, access is controlled based on the Network Security Group which can be configured using the `azure.network.SubnetNetworkSecurityGroupAssociation` resource. See more details from [Manage network policies for Private Link Services](https://learn.microsoft.com/en-gb/azure/private-link/disable-private-link-service-network-policy?tabs=private-link-network-policy-powershell).
          */
         privateLinkServiceNetworkPoliciesEnabled?: boolean;
         /**
@@ -56924,7 +57072,7 @@ export declare namespace network {
         /**
          * A list of Actions which should be delegated. This list is specific to the service to delegate to. Possible values are `Microsoft.Network/networkinterfaces/*`, `Microsoft.Network/publicIPAddresses/join/action`, `Microsoft.Network/publicIPAddresses/read`, `Microsoft.Network/virtualNetworks/read`, `Microsoft.Network/virtualNetworks/subnets/action`, `Microsoft.Network/virtualNetworks/subnets/join/action`, `Microsoft.Network/virtualNetworks/subnets/prepareNetworkPolicies/action`, and `Microsoft.Network/virtualNetworks/subnets/unprepareNetworkPolicies/action`.
          *
-         * > **NOTE:** Azure may add default actions depending on the service delegation name and they can't be changed.
+         * > **Note:** Azure may add default actions depending on the service delegation name and they can't be changed.
          */
         actions?: string[];
         /**
@@ -57154,6 +57302,20 @@ export declare namespace network {
          */
         saLifetimeSec: number;
     }
+    interface VpnGatewayIpConfiguration {
+        /**
+         * The identifier of the IP configuration for the VPN Gateway.
+         */
+        id: string;
+        /**
+         * The private IP address of this IP configuration.
+         */
+        privateIpAddress: string;
+        /**
+         * The public IP address of this IP configuration.
+         */
+        publicIpAddress: string;
+    }
     interface VpnServerConfigurationAzureActiveDirectoryAuthentication {
         /**
          * The Audience which should be used for authentication.
@@ -59550,7 +59712,7 @@ export declare namespace postgresql {
          */
         geoBackupUserAssignedIdentityId?: string;
         /**
-         * The versioned ID of the Key Vault Key.
+         * The versioned/versionless ID of the Key Vault Key.
          */
         keyVaultKeyId: string;
         /**
@@ -59569,7 +59731,7 @@ export declare namespace postgresql {
         /**
          * A list of User Assigned Managed Identity IDs to be assigned to this PostgreSQL Flexible Server. Required if used together with `customerManagedKey` block.
          *
-         * > **Note:** `identityIds` is required when `type` is set to `UserAssigned`.
+         * > **Note:** `identityIds` is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
          */
         identityIds?: string[];
         /**
@@ -59581,7 +59743,9 @@ export declare namespace postgresql {
          */
         tenantId: string;
         /**
-         * Specifies the type of Managed Service Identity that should be configured on this PostgreSQL Flexible Server. Possible values are `UserAssigned` and `SystemAssigned`.
+         * Specifies the type of Managed Service Identity that should be configured on this PostgreSQL Flexible Server. Possible values are `UserAssigned`, `SystemAssigned` and `SystemAssigned, UserAssigned`.
+         *
+         * > **Note:** Once `UserAssigned` has been added, removing it forces a new resource to be created.
          */
         type: string;
     }
@@ -64173,7 +64337,7 @@ export declare namespace storage {
          */
         tierToArchiveAfterDaysSinceLastAccessTimeGreaterThan?: number;
         /**
-         * The age in days after last tier change to the blobs to skip to be archved. Must be between `0` and `99999`. Defaults to `-1`.
+         * The age in days after last tier change to the blobs to skip to be archived. Must be between `0` and `99999`. Defaults to `-1`.
          */
         tierToArchiveAfterDaysSinceLastTierChangeGreaterThan?: number;
         /**
@@ -64223,7 +64387,7 @@ export declare namespace storage {
          */
         deleteAfterDaysSinceCreationGreaterThan?: number;
         /**
-         * The age in days after last tier change to the blobs to skip to be archved. Must be between `0` and `99999`. Defaults to `-1`.
+         * The age in days after last tier change to the blobs to skip to be archived. Must be between `0` and `99999`. Defaults to `-1`.
          */
         tierToArchiveAfterDaysSinceLastTierChangeGreaterThan?: number;
         /**
@@ -64245,7 +64409,7 @@ export declare namespace storage {
          */
         deleteAfterDaysSinceCreation?: number;
         /**
-         * The age in days after last tier change to the blobs to skip to be archved. Must be between `0` and `99999`. Defaults to `-1`.
+         * The age in days after last tier change to the blobs to skip to be archived. Must be between `0` and `99999`. Defaults to `-1`.
          */
         tierToArchiveAfterDaysSinceLastTierChangeGreaterThan?: number;
         /**

package/videoindexer/account.d.ts

@@ -39,7 +39,7 @@ import * as outputs from "../types/output";
  * <!-- This section is generated, changes will be overwritten -->
  * This resource uses the following Azure API Providers:
  *
- * * `Microsoft.VideoIndexer`: 2024-01-01
+ * * `Microsoft.VideoIndexer`: 2025-04-01
  *
  * ## Import
  *

package/videoindexer/account.js

@@ -43,7 +43,7 @@ const utilities = require("../utilities");
  * <!-- This section is generated, changes will be overwritten -->
  * This resource uses the following Azure API Providers:
  *
- * * `Microsoft.VideoIndexer`: 2024-01-01
+ * * `Microsoft.VideoIndexer`: 2025-04-01
  *
  * ## Import
  *

package/waf/policy.d.ts

@@ -105,6 +105,13 @@ import * as outputs from "../types/output";
  * });
  * ```
  *
+ * ## API Providers
+ *
+ * <!-- This section is generated, changes will be overwritten -->
+ * This resource uses the following Azure API Providers:
+ *
+ * * `Microsoft.Network`: 2024-05-01
+ *
  * ## Import
  *
  * Web Application Firewall Policy can be imported using the `resource id`, e.g.

package/waf/policy.js

@@ -109,6 +109,13 @@ const utilities = require("../utilities");
  * });
  * ```
  *
+ * ## API Providers
+ *
+ * <!-- This section is generated, changes will be overwritten -->
+ * This resource uses the following Azure API Providers:
+ *
+ * * `Microsoft.Network`: 2024-05-01
+ *
  * ## Import
  *
  * Web Application Firewall Policy can be imported using the `resource id`, e.g.