@pulumi/azure 6.29.0-alpha.1763619121 → 6.30.0

package/types/output.d.ts

@@ -880,6 +880,60 @@ export declare namespace apimanagement {
          */
         value: string;
     }
+    interface BackendCircuitBreakerRule {
+        /**
+         * Specifies whether the circuit breaker should honor `Retry-After` requests. Defaults to `false`.
+         */
+        acceptRetryAfterEnabled?: boolean;
+        /**
+         * A `failureCondition` block as defined below.
+         */
+        failureCondition: outputs.apimanagement.BackendCircuitBreakerRuleFailureCondition;
+        /**
+         * The name of the circuit breaker rule.
+         */
+        name: string;
+        /**
+         * Specifies the duration for which the circuit remains open before retrying, in ISO 8601 format.
+         */
+        tripDuration: string;
+    }
+    interface BackendCircuitBreakerRuleFailureCondition {
+        /**
+         * Specifies the number of failures within the specified interval that will trigger the circuit breaker. Possible values are between `1` and `10000`.
+         */
+        count?: number;
+        /**
+         * Specifies a list of error reasons to consider as failures.
+         */
+        errorReasons?: string[];
+        /**
+         * Specifies the time window over which failures are counted, in ISO 8601 format.
+         */
+        intervalDuration: string;
+        /**
+         * Specifies the percentage of failures within the specified interval that will trigger the circuit breaker. Possible values are between `1` and `100`.
+         *
+         * > **Note:** Exactly one of `percentage` or `count` must be specified.
+         */
+        percentage?: number;
+        /**
+         * One or more `statusCodeRange` blocks as defined below.
+         *
+         * > **Note:** At least one of `statusCodeRange`, and `errorReasons` must be set.
+         */
+        statusCodeRanges?: outputs.apimanagement.BackendCircuitBreakerRuleFailureConditionStatusCodeRange[];
+    }
+    interface BackendCircuitBreakerRuleFailureConditionStatusCodeRange {
+        /**
+         * Specifies the maximum HTTP status code to consider as a failure. Possible values are between `200` and `599`.
+         */
+        max: number;
+        /**
+         * Specifies the minimum HTTP status code to consider as a failure. Possible values are between `200` and `599`.
+         */
+        min: number;
+    }
     interface BackendCredentials {
         /**
          * An `authorization` block as defined below.
@@ -1379,7 +1433,7 @@ export declare namespace apimanagement {
     }
     interface GetServiceAdditionalLocation {
         /**
-         * Specifies the number of units associated with this API Management service.
+         * The number of compute units in this region.
          */
         capacity: number;
         /**
@@ -21553,7 +21607,7 @@ export declare namespace batch {
          */
         autoUpgradeMinorVersion: boolean;
         /**
-         * The name of the user account.
+         * The name of the Batch pool.
          */
         name: string;
         /**
@@ -21619,7 +21673,7 @@ export declare namespace batch {
          */
         accountKey: string;
         /**
-         * The Azure Storage Account name.
+         * The Batch Account name associated with the Batch pool.
          */
         accountName: string;
         /**
@@ -21649,7 +21703,7 @@ export declare namespace batch {
          */
         accountKey: string;
         /**
-         * The Azure Storage Account name.
+         * The Batch Account name associated with the Batch pool.
          */
         accountName: string;
         /**
@@ -21734,7 +21788,7 @@ export declare namespace batch {
          */
         frontendPortRange: string;
         /**
-         * The name of the user account.
+         * The name of the Batch pool.
          */
         name: string;
         /**
@@ -21917,7 +21971,7 @@ export declare namespace batch {
          */
         linuxUserConfigurations: outputs.batch.GetPoolUserAccountLinuxUserConfiguration[];
         /**
-         * The name of the user account.
+         * The name of the Batch pool.
          */
         name: string;
         /**
@@ -24418,7 +24472,7 @@ export declare namespace cognitive {
         /**
          * Whether to allow trusted Azure Services to access the service. Possible values are `None` and `AzureServices`.
          *
-         * > **Note:** `bypass` can only be set when `kind` is set to `OpenAI` or `AIServices`.
+         * > **Note:** `bypass` can only be set when `kind` is set to `OpenAI`, `AIServices`, or `TextAnalytics`.
          */
         bypass?: string;
         /**
@@ -31455,10 +31509,18 @@ export declare namespace containerservice {
          * The maximum number or percentage of nodes which will be added to the Node Pool size during an upgrade.
          */
         maxSurge: string;
+        /**
+         * The maximum number or percentage of nodes which can be unavailable during the upgrade.
+         */
+        maxUnavailable: string;
         /**
          * The amount of time in minutes to wait after draining a node and before reimaging it and moving on to next node.
          */
         nodeSoakDurationInMinutes: number;
+        /**
+         * The action when a node is undrainable during upgrade. Possible values are `Cordon` and `Schedule`.
+         */
+        undrainableNodeBehavior: string;
     }
     interface GetGroupIdentity {
         /**
@@ -31569,10 +31631,15 @@ export declare namespace containerservice {
          * The maximum number or percentage of nodes that will be added to the Node Pool size during an upgrade.
          */
         maxSurge: string;
+        maxUnavailable: string;
         /**
          * The amount of time in minutes to wait after draining a node and before reimaging it and moving on to next node.
          */
         nodeSoakDurationInMinutes: number;
+        /**
+         * The action when a node is undrainable during upgrade. Possible values are `Cordon` and `Schedule`.
+         */
+        undrainableNodeBehavior: string;
     }
     interface GetKubernetesClusterAzureActiveDirectoryRoleBasedAccessControl {
         /**
@@ -32529,7 +32596,7 @@ export declare namespace containerservice {
         /**
          * Should the nodes in the Default Node Pool have host encryption enabled? `temporaryNameForRotation` must be specified when changing this property.
          *
-         * > **Note:** This requires that the  Feature `Microsoft.ContainerService/EnableEncryptionAtHost` is enabled and the Resource Provider is registered.
+         * > **Note:** This requires that the Feature `Microsoft.Compute/EncryptionAtHost` is enabled and the Resource Provider is registered.
          */
         hostEncryptionEnabled?: boolean;
         /**
@@ -32596,7 +32663,7 @@ export declare namespace containerservice {
          */
         osDiskType?: string;
         /**
-         * Specifies the OS SKU used by the agent pool. Possible values are `AzureLinux`, `Ubuntu`, `Windows2019` and `Windows2022`. If not specified, the default is `Ubuntu` if OSType=Linux or `Windows2019` if OSType=Windows. And the default Windows OSSKU will be changed to `Windows2022` after Windows2019 is deprecated. Changing this from `AzureLinux` or `Ubuntu` to `AzureLinux` or `Ubuntu` will not replace the resource, otherwise `temporaryNameForRotation` must be specified when attempting a change.
+         * Specifies the OS SKU used by the agent pool. Possible values are `AzureLinux`, `AzureLinux3`, `Ubuntu`, `Ubuntu2204`, `Windows2019` and `Windows2022`. If not specified, the default is `Ubuntu` if OSType=Linux or `Windows2019` if OSType=Windows. And the default Windows OSSKU will be changed to `Windows2022` after Windows2019 is deprecated. Changing this from `AzureLinux` or `Ubuntu` to `AzureLinux` or `Ubuntu` will not replace the resource, otherwise `temporaryNameForRotation` must be specified when attempting a change.
          */
         osSku: string;
         /**
@@ -32889,6 +32956,10 @@ export declare namespace containerservice {
          * The amount of time in minutes to wait after draining a node and before reimaging and moving on to next node. Defaults to `0`. <!-- The 0 default happens in code, not in Schema -->
          */
         nodeSoakDurationInMinutes?: number;
+        /**
+         * Specifies the action when a node is undrainable during upgrade. Possible values are `Cordon` and `Schedule`. Unsetting this after configuring it will force a new resource to be created.
+         */
+        undrainableNodeBehavior?: string;
     }
     interface KubernetesClusterExtensionAksAssignedIdentity {
         /**
@@ -33658,11 +33729,21 @@ export declare namespace containerservice {
         /**
          * The maximum number or percentage of nodes which will be added to the Node Pool size during an upgrade.
          */
-        maxSurge: string;
+        maxSurge?: string;
+        /**
+         * The maximum number or percentage of nodes which can be unavailable during the upgrade.
+         *
+         * > **Note:** Exactly one of `maxSurge` or `maxUnavailable` must be specified.
+         */
+        maxUnavailable?: string;
         /**
          * The amount of time in minutes to wait after draining a node and before reimaging and moving on to next node.
          */
         nodeSoakDurationInMinutes?: number;
+        /**
+         * Specifies the action when a node is undrainable during upgrade. Possible values are `Cordon` and `Schedule`. Unsetting this after configuring it will force a new resource to be created.
+         */
+        undrainableNodeBehavior?: string;
     }
     interface KubernetesClusterNodePoolWindowsProfile {
         /**
@@ -38004,6 +38085,10 @@ export declare namespace dataprotection {
         weeksOfMonths?: string[];
     }
     interface BackupVaultIdentity {
+        /**
+         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Backup Vault.
+         */
+        identityIds?: string[];
         /**
          * The Principal ID for the Service Principal associated with the Identity of this Backup Vault.
          */
@@ -38013,11 +38098,15 @@ export declare namespace dataprotection {
          */
         tenantId: string;
         /**
-         * Specifies the type of Managed Service Identity that should be configured on this Backup Vault. The only possible value is `SystemAssigned`.
+         * Specifies the type of Managed Service Identity that should be configured on this Backup Vault. Possible values are `SystemAssigned`, `UserAssigned` and `SystemAssigned, UserAssigned`.
          */
         type: string;
     }
     interface GetBackupVaultIdentity {
+        /**
+         * The list of User Assigned Managed Identity IDs assigned to this Backup Vault.
+         */
+        identityIds: string[];
         /**
          * The Principal ID of the System Assigned Managed Service Identity that is configured on this Backup Vault.
          */
@@ -39062,7 +39151,7 @@ export declare namespace dynatrace {
     }
     interface MonitorPlan {
         /**
-         * Different billing cycles. Possible values are `MONTHLY` and `WEEKLY`.
+         * Different billing cycles. Possible values are `MONTHLY`, `WEEKLY` and `YEARLY`.
          */
         billingCycle?: string;
         /**
@@ -39082,7 +39171,7 @@ export declare namespace dynatrace {
         /**
          * Country of the user.
          */
-        country: string;
+        country?: string;
         /**
          * Email of the user used by Dynatrace for contacting them if needed.
          */
@@ -39098,13 +39187,13 @@ export declare namespace dynatrace {
         /**
          * phone number of the user by Dynatrace for contacting them if needed.
          */
-        phoneNumber: string;
+        phoneNumber?: string;
     }
     interface TagRulesLogRule {
         /**
          * Filtering tag for the log rule. A `filteringTag` block as defined below.
          */
-        filteringTags: outputs.dynatrace.TagRulesLogRuleFilteringTag[];
+        filteringTags?: outputs.dynatrace.TagRulesLogRuleFilteringTag[];
         /**
          * Send Activity logs. The default value is `false`.
          */
@@ -39136,7 +39225,7 @@ export declare namespace dynatrace {
         /**
          * Filtering tag for the metric rule. A `filteringTag` block as defined below.
          */
-        filteringTags: outputs.dynatrace.TagRulesMetricRuleFilteringTag[];
+        filteringTags?: outputs.dynatrace.TagRulesMetricRuleFilteringTag[];
         /**
          * If sending metrics is enabled. The default value is `false`.
          */
@@ -47854,6 +47943,170 @@ export declare namespace managedlustre {
         squashUid?: number;
     }
 }
+export declare namespace managedredis {
+    interface GetCustomerManagedKey {
+        /**
+         * The ID of the key vault key used for encryption.
+         */
+        keyVaultKeyId: string;
+        /**
+         * The ID of the User Assigned Identity that has access to the Key Vault Key.
+         */
+        userAssignedIdentityId: string;
+    }
+    interface GetDefaultDatabase {
+        /**
+         * Whether access key authentication is enabled for the database.
+         */
+        accessKeysAuthenticationEnabled: boolean;
+        /**
+         * The client protocol used by the database (either `Encrypted` or `Plaintext`).
+         */
+        clientProtocol: string;
+        /**
+         * The clustering policy used by the database.
+         */
+        clusteringPolicy: string;
+        /**
+         * The Redis eviction policy used by the database.
+         */
+        evictionPolicy: string;
+        /**
+         * The name of the geo-replication group.
+         */
+        geoReplicationGroupName: string;
+        /**
+         * A list of linked database IDs for geo-replication.
+         */
+        geoReplicationLinkedDatabaseIds: string[];
+        /**
+         * A list of `module` blocks as defined below.
+         */
+        modules: outputs.managedredis.GetDefaultDatabaseModule[];
+        /**
+         * The TCP port of the database endpoint.
+         */
+        port: number;
+        /**
+         * The Primary Access Key for the Managed Redis Database instance.
+         */
+        primaryAccessKey: string;
+        /**
+         * The Secondary Access Key for the Managed Redis Database instance.
+         */
+        secondaryAccessKey: string;
+    }
+    interface GetDefaultDatabaseModule {
+        /**
+         * The configuration options for the module.
+         */
+        args: string;
+        /**
+         * The name of the Managed Redis instance.
+         */
+        name: string;
+        /**
+         * The version of the module.
+         */
+        version: string;
+    }
+    interface GetIdentity {
+        /**
+         * A list of User Assigned Managed Identity IDs assigned to the Managed Redis instance.
+         */
+        identityIds: string[];
+        /**
+         * The Principal ID of the System Assigned Managed Service Identity that is configured on the Managed Redis instance.
+         */
+        principalId: string;
+        /**
+         * The Tenant ID of the System Assigned Managed Service Identity that is configured on the Managed Redis instance.
+         */
+        tenantId: string;
+        /**
+         * The type of Managed Service Identity configured on the Managed Redis instance.
+         */
+        type: string;
+    }
+    interface ManagedRedisCustomerManagedKey {
+        /**
+         * The ID of the key vault key used for encryption. For example: `https://example-vault-name.vault.azure.net/keys/example-key-name/a1b2c3d4`.
+         */
+        keyVaultKeyId: string;
+        /**
+         * The ID of the User Assigned Identity that has access to the Key Vault Key.
+         */
+        userAssignedIdentityId: string;
+    }
+    interface ManagedRedisDefaultDatabase {
+        /**
+         * Whether access key authentication is enabled for the database. Defaults to `false`.
+         */
+        accessKeysAuthenticationEnabled?: boolean;
+        /**
+         * Specifies whether redis clients can connect using TLS-encrypted or plaintext redis protocols. Possible values are `Encrypted` and `Plaintext`. Defaults to `Encrypted`.
+         */
+        clientProtocol?: string;
+        /**
+         * Clustering policy specified at create time. Possible values are `EnterpriseCluster` and `OSSCluster`. Defaults to `OSSCluster`. Changing this forces a new database to be created, data will be lost and Managed Redis will be unavailable during the operation.
+         */
+        clusteringPolicy?: string;
+        /**
+         * Specifies the Redis eviction policy. Possible values are `AllKeysLFU`, `AllKeysLRU`, `AllKeysRandom`, `VolatileLRU`, `VolatileLFU`, `VolatileTTL`, `VolatileRandom` and `NoEviction`. Defaults to `VolatileLRU`.
+         */
+        evictionPolicy?: string;
+        /**
+         * The name of the geo-replication group. If provided, a geo-replication group will be created for this database with itself as the only member. Use `azurermManagedRedisDatabaseGeoReplication` resource to manage group membership, linking and unlinking. All databases to be linked have to have the same group name. Refer to the [Managed Redis geo-replication documentation](https://learn.microsoft.com/azure/redis/how-to-active-geo-replication) for more information. Changing this forces a new database to be created, data will be lost and Managed Redis will be unavailable during the operation.
+         */
+        geoReplicationGroupName?: string;
+        /**
+         * A `module` block as defined below. Refer to [the modules documentation](https://learn.microsoft.com/azure/redis/redis-modules) to learn more.
+         */
+        modules?: outputs.managedredis.ManagedRedisDefaultDatabaseModule[];
+        /**
+         * TCP port of the database endpoint.
+         */
+        port: number;
+        /**
+         * The Primary Access Key for the Managed Redis Database Instance. Only exported if `accessKeysAuthenticationEnabled` is set to `true`.
+         */
+        primaryAccessKey: string;
+        /**
+         * The Secondary Access Key for the Managed Redis Database Instance. Only exported if `accessKeysAuthenticationEnabled` is set to `true`.
+         */
+        secondaryAccessKey: string;
+    }
+    interface ManagedRedisDefaultDatabaseModule {
+        /**
+         * Configuration options for the module (e.g. `ERROR_RATE 0.00 INITIAL_SIZE 400`). Changing this forces a new database to be created, data will be lost and Managed Redis will be unavailable during the operation.
+         *
+         * > **Note:** Only `RediSearch` and `RedisJSON` modules are allowed with geo-replication.
+         */
+        args?: string;
+        /**
+         * The name which should be used for this module. Possible values are `RedisBloom`, `RedisTimeSeries`, `RediSearch` and `RedisJSON`. Changing this forces a new database to be created, data will be lost and Managed Redis will be unavailable during the operation.
+         */
+        name: string;
+        /**
+         * Version of the module to be used.
+         */
+        version: string;
+    }
+    interface ManagedRedisIdentity {
+        /**
+         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Managed Redis instance.
+         *
+         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
+         */
+        identityIds?: string[];
+        principalId: string;
+        tenantId: string;
+        /**
+         * Specifies the type of Managed Service Identity that should be configured on this Managed Redis instance. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
+         */
+        type: string;
+    }
+}
 export declare namespace management {
     interface GroupPolicyAssignmentIdentity {
         /**
@@ -48621,6 +48874,22 @@ export declare namespace mobile {
         sliceServiceType: number;
     }
 }
+export declare namespace mongocluster {
+    interface MongoClusterConnectionString {
+        /**
+         * The description of the connection string.
+         */
+        description: string;
+        /**
+         * The name which should be used for the MongoDB Cluster. Changing this forces a new resource to be created.
+         */
+        name: string;
+        /**
+         * The value of the Mongo Cluster connection string. The `<user>:<password>` placeholder returned from API will be replaced by the real `administratorUsername` and `administratorPassword` if available in the state.
+         */
+        value: string;
+    }
+}
 export declare namespace monitoring {
     interface AadDiagnosticSettingEnabledLog {
         /**
@@ -51495,7 +51764,7 @@ export declare namespace mssql {
         /**
          * The ID of the job credential to use during execution of jobs.
          *
-         * > **Note:** This is required when `membershipType` is `Include`, unless `databaseName` is set.
+         * > **Note:** This is required when `membershipType` is `Include`, unless `databaseName` is set or the target resource is configured to use a managed identity for authentication.
          */
         jobCredentialId?: string;
         /**
@@ -52686,7 +52955,9 @@ export declare namespace netapp {
          *
          * A full example of the `dataProtectionReplication` attribute can be found in the `./examples/netapp/volume_crr` directory within the GitHub Repository
          *
-         * > **Note:** `dataProtectionReplication` can be defined only once per secondary volume, adding a second instance of it is not supported.
+         * > **Note:** Each destination volume can have only one `dataProtectionReplication` block configured. However, a source volume can have up to 2 destination volumes replicating from it (fan-out deployment). For more information on fan-out replication topologies, see [Understand data protection in Azure NetApp Files](https://learn.microsoft.com/azure/azure-netapp-files/data-protection-disaster-recovery-options#supported-replication-topologies).
+         *
+         * > **Note:** For cross-zone replication (when `remoteVolumeLocation` is the same as the volume's `location`), both the source and destination volumes must have a `zone` assigned. For a complete example of cross-zone-region replication with fan-out deployment, see the `./examples/netapp/cross_zone_region_replication` directory within the GitHub Repository. For more information, see [Manage cross-zone-region replication for Azure NetApp Files](https://learn.microsoft.com/azure/azure-netapp-files/cross-zone-region-replication-configure).
          */
         replicationFrequency: string;
     }
@@ -53091,6 +53362,10 @@ export declare namespace network {
          * Is Cookie-Based Affinity enabled? Possible values are `Enabled` and `Disabled`.
          */
         cookieBasedAffinity: string;
+        /**
+         * Whether to use a dedicated backend connection. Defaults to `false`.
+         */
+        dedicatedBackendConnectionEnabled?: boolean;
         /**
          * Host header to be sent to the backend servers. Cannot be set if `pickHostNameFromBackendAddress` is set to `true`.
          */
@@ -54717,6 +54992,10 @@ export declare namespace network {
          * Is Cookie-Based Affinity enabled?
          */
         cookieBasedAffinity: string;
+        /**
+         * Whether a dedicated backend connection is used.
+         */
+        dedicatedBackendConnectionEnabled: boolean;
         /**
          * The Hostname which is used for this HTTP Listener.
          */
@@ -56682,6 +56961,26 @@ export declare namespace network {
          */
         tenantId: string;
     }
+    interface NetworkManagerRoutingRuleDestination {
+        /**
+         * The destination address.
+         */
+        address: string;
+        /**
+         * The type of destination. Possible values are `AddressPrefix` and `ServiceTag`.
+         */
+        type: string;
+    }
+    interface NetworkManagerRoutingRuleNextHop {
+        /**
+         * The address of the next hop. This is required if the next hop type is `VirtualAppliance`.
+         */
+        address?: string;
+        /**
+         * The type of next hop. Possible values are `Internet`, `NoNextHop`, `VirtualAppliance`, `VirtualNetworkGateway` and `VnetLocal`.
+         */
+        type: string;
+    }
     interface NetworkManagerScope {
         /**
          * A list of management group IDs.
@@ -58645,6 +58944,16 @@ export declare namespace oracle {
          */
         weeksOfMonths: number[];
     }
+    interface ExascaleDatabaseStorageVaultHighCapacityDatabaseStorage {
+        /**
+         * Available size in gigabytes.
+         */
+        availableSizeInGb: number;
+        /**
+         * Total capacity in gigabytes. Changing this forces a new Exadata Database Storage Vault to be created.
+         */
+        totalSizeInGb: number;
+    }
     interface GetAdbsCharacterSetsCharacterSet {
         /**
          * A valid Oracle character set.
@@ -58724,6 +59033,42 @@ export declare namespace oracle {
          */
         type: string;
     }
+    interface GetAutonomousDatabaseCloneFromBackupLongTermBackupSchedule {
+        /**
+         * A boolean value that indicates if long-term backup is enabled/disabled.
+         */
+        enabled: boolean;
+        /**
+         * The frequency for automated long-term backups.
+         */
+        repeatCadence: string;
+        /**
+         * The retention period in days for Autonomous database backup.
+         */
+        retentionPeriodInDays: number;
+        /**
+         * The timestamp in which the backup would be made.
+         */
+        timeOfBackupInUtc: string;
+    }
+    interface GetAutonomousDatabaseCloneFromDatabaseLongTermBackupSchedule {
+        /**
+         * A boolean value that indicates if long-term backup is enabled/disabled.
+         */
+        enabled: boolean;
+        /**
+         * The frequency for automated long-term backups.
+         */
+        repeatCadence: string;
+        /**
+         * The retention period in days for Autonomous database backup.
+         */
+        retentionPeriodInDays: number;
+        /**
+         * The timestamp in which the backup would be made.
+         */
+        timeOfBackupInUtc: string;
+    }
     interface GetAutonomousDatabaseLongTermBackupSchedule {
         /**
          * A boolean value that indicates if long term backup is enabled/disabled.
@@ -59126,6 +59471,16 @@ export declare namespace oracle {
          */
         weeksOfMonths: number[];
     }
+    interface GetExascaleDatabaseStorageVaultHighCapacityDatabaseStorage {
+        /**
+         * Available capacity in gigabytes.
+         */
+        availableSizeInGb: number;
+        /**
+         * Total capacity in gigabytes.
+         */
+        totalSizeInGb: number;
+    }
 }
 export declare namespace orbital {
     interface ContactProfileLink {
@@ -60527,6 +60882,16 @@ export declare namespace postgresql {
          */
         startMinute?: number;
     }
+    interface GetFlexibleServerHighAvailability {
+        /**
+         * The high availability mode of the PostgreSQL Flexible Server.
+         */
+        mode: string;
+        /**
+         * The availability zone of the standby Flexible Server.
+         */
+        standbyAvailabilityZone: string;
+    }
     interface GetServerIdentity {
         /**
          * The ID of the System Managed Service Principal assigned to the PostgreSQL Server.
@@ -63255,7 +63620,7 @@ export declare namespace siterecovery {
          */
         targetDiskType: string;
         /**
-         * What type should the disk be that holds the replication data. Possible values are `Standard_LRS`, `Premium_LRS`, `StandardSSD_LRS`, `UltraSSD_LRS`, `StandardSSD_ZRS` and `Premium_ZRS`. Changing this forces a new resource to be created.
+         * What type should the disk be that holds the replication data. Possible values are `Standard_LRS`, `Premium_LRS`, `PremiumV2_LRS`, `StandardSSD_LRS`, `UltraSSD_LRS`, `StandardSSD_ZRS` and `Premium_ZRS`. Changing this forces a new resource to be created.
          */
         targetReplicaDiskType: string;
         /**
@@ -64227,6 +64592,8 @@ export declare namespace storage {
         name: string;
         /**
          * Should the Custom Domain Name be validated by using indirect CNAME validation?
+         *
+         * > **Note:** [More information on Validation is available here](https://docs.microsoft.com/en-gb/azure/storage/blobs/storage-custom-domain-name)
          */
         useSubdomain?: boolean;
     }
@@ -64303,8 +64670,6 @@ export declare namespace storage {
          * > **Note:** Network Rules can be defined either directly on the `azure.storage.Account` resource, or using the `azure.storage.AccountNetworkRules` resource - but the two cannot be used together. If both are used against the same Storage Account, spurious changes will occur. When managing Network Rules using this resource, to change from a `defaultAction` of `Deny` to `Allow` requires defining, rather than removing, the block.
          *
          * > **Note:** The prefix of `ipRules` must be between 0 and 30 and only supports public IP addresses.
-         *
-         * > **Note:** [More information on Validation is available here](https://docs.microsoft.com/en-gb/azure/storage/blobs/storage-custom-domain-name)
          */
         privateLinkAccesses?: outputs.storage.AccountNetworkRulesPrivateLinkAccess[];
         /**

package/waf/getFirewallPolicy.d.ts

@@ -20,7 +20,7 @@ import * as pulumi from "@pulumi/pulumi";
  * <!-- This section is generated, changes will be overwritten -->
  * This data source uses the following Azure API Providers:
  *
- * * `Microsoft.Network` - 2024-05-01
+ * * `Microsoft.Network` - 2025-01-01
  */
 export declare function getFirewallPolicy(args: GetFirewallPolicyArgs, opts?: pulumi.InvokeOptions): Promise<GetFirewallPolicyResult>;
 /**
@@ -75,7 +75,7 @@ export interface GetFirewallPolicyResult {
  * <!-- This section is generated, changes will be overwritten -->
  * This data source uses the following Azure API Providers:
  *
- * * `Microsoft.Network` - 2024-05-01
+ * * `Microsoft.Network` - 2025-01-01
  */
 export declare function getFirewallPolicyOutput(args: GetFirewallPolicyOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetFirewallPolicyResult>;
 /**