pulumi-azure-native 2.58.0a1724260656__py3-none-any.whl → 2.58.0a1724403460__py3-none-any.whl

pulumi_azure_native/batch/v20240701/_inputs.py

@@ -0,0 +1,4319 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from ... import _utilities
+from ._enums import *
+
+__all__ = [
+    'ApplicationPackageReferenceArgs',
+    'ApplicationPackageReferenceArgsDict',
+    'AutoScaleSettingsArgs',
+    'AutoScaleSettingsArgsDict',
+    'AutoStorageBasePropertiesArgs',
+    'AutoStorageBasePropertiesArgsDict',
+    'AutoUserSpecificationArgs',
+    'AutoUserSpecificationArgsDict',
+    'AutomaticOSUpgradePolicyArgs',
+    'AutomaticOSUpgradePolicyArgsDict',
+    'AzureBlobFileSystemConfigurationArgs',
+    'AzureBlobFileSystemConfigurationArgsDict',
+    'AzureFileShareConfigurationArgs',
+    'AzureFileShareConfigurationArgsDict',
+    'BatchAccountIdentityArgs',
+    'BatchAccountIdentityArgsDict',
+    'BatchPoolIdentityArgs',
+    'BatchPoolIdentityArgsDict',
+    'CIFSMountConfigurationArgs',
+    'CIFSMountConfigurationArgsDict',
+    'CertificateReferenceArgs',
+    'CertificateReferenceArgsDict',
+    'ComputeNodeIdentityReferenceArgs',
+    'ComputeNodeIdentityReferenceArgsDict',
+    'ContainerConfigurationArgs',
+    'ContainerConfigurationArgsDict',
+    'ContainerHostBatchBindMountEntryArgs',
+    'ContainerHostBatchBindMountEntryArgsDict',
+    'ContainerRegistryArgs',
+    'ContainerRegistryArgsDict',
+    'DataDiskArgs',
+    'DataDiskArgsDict',
+    'DeploymentConfigurationArgs',
+    'DeploymentConfigurationArgsDict',
+    'DiffDiskSettingsArgs',
+    'DiffDiskSettingsArgsDict',
+    'DiskEncryptionConfigurationArgs',
+    'DiskEncryptionConfigurationArgsDict',
+    'EncryptionPropertiesArgs',
+    'EncryptionPropertiesArgsDict',
+    'EndpointAccessProfileArgs',
+    'EndpointAccessProfileArgsDict',
+    'EnvironmentSettingArgs',
+    'EnvironmentSettingArgsDict',
+    'FixedScaleSettingsArgs',
+    'FixedScaleSettingsArgsDict',
+    'IPRuleArgs',
+    'IPRuleArgsDict',
+    'ImageReferenceArgs',
+    'ImageReferenceArgsDict',
+    'InboundNatPoolArgs',
+    'InboundNatPoolArgsDict',
+    'KeyVaultPropertiesArgs',
+    'KeyVaultPropertiesArgsDict',
+    'KeyVaultReferenceArgs',
+    'KeyVaultReferenceArgsDict',
+    'LinuxUserConfigurationArgs',
+    'LinuxUserConfigurationArgsDict',
+    'ManagedDiskArgs',
+    'ManagedDiskArgsDict',
+    'MetadataItemArgs',
+    'MetadataItemArgsDict',
+    'MountConfigurationArgs',
+    'MountConfigurationArgsDict',
+    'NFSMountConfigurationArgs',
+    'NFSMountConfigurationArgsDict',
+    'NetworkConfigurationArgs',
+    'NetworkConfigurationArgsDict',
+    'NetworkProfileArgs',
+    'NetworkProfileArgsDict',
+    'NetworkSecurityGroupRuleArgs',
+    'NetworkSecurityGroupRuleArgsDict',
+    'NodePlacementConfigurationArgs',
+    'NodePlacementConfigurationArgsDict',
+    'OSDiskArgs',
+    'OSDiskArgsDict',
+    'PoolEndpointConfigurationArgs',
+    'PoolEndpointConfigurationArgsDict',
+    'PublicIPAddressConfigurationArgs',
+    'PublicIPAddressConfigurationArgsDict',
+    'ResourceFileArgs',
+    'ResourceFileArgsDict',
+    'RollingUpgradePolicyArgs',
+    'RollingUpgradePolicyArgsDict',
+    'ScaleSettingsArgs',
+    'ScaleSettingsArgsDict',
+    'SecurityProfileArgs',
+    'SecurityProfileArgsDict',
+    'ServiceArtifactReferenceArgs',
+    'ServiceArtifactReferenceArgsDict',
+    'StartTaskArgs',
+    'StartTaskArgsDict',
+    'TaskContainerSettingsArgs',
+    'TaskContainerSettingsArgsDict',
+    'TaskSchedulingPolicyArgs',
+    'TaskSchedulingPolicyArgsDict',
+    'UefiSettingsArgs',
+    'UefiSettingsArgsDict',
+    'UpgradePolicyArgs',
+    'UpgradePolicyArgsDict',
+    'UserAccountArgs',
+    'UserAccountArgsDict',
+    'UserIdentityArgs',
+    'UserIdentityArgsDict',
+    'VMDiskSecurityProfileArgs',
+    'VMDiskSecurityProfileArgsDict',
+    'VMExtensionArgs',
+    'VMExtensionArgsDict',
+    'VirtualMachineConfigurationArgs',
+    'VirtualMachineConfigurationArgsDict',
+    'WindowsConfigurationArgs',
+    'WindowsConfigurationArgsDict',
+    'WindowsUserConfigurationArgs',
+    'WindowsUserConfigurationArgsDict',
+]
+
+MYPY = False
+
+if not MYPY:
+    class ApplicationPackageReferenceArgsDict(TypedDict):
+        id: pulumi.Input[str]
+        version: NotRequired[pulumi.Input[str]]
+        """
+        If this is omitted, and no default version is specified for this application, the request fails with the error code InvalidApplicationPackageReferences. If you are calling the REST API directly, the HTTP status code is 409.
+        """
+elif False:
+    ApplicationPackageReferenceArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ApplicationPackageReferenceArgs:
+    def __init__(__self__, *,
+                 id: pulumi.Input[str],
+                 version: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] version: If this is omitted, and no default version is specified for this application, the request fails with the error code InvalidApplicationPackageReferences. If you are calling the REST API directly, the HTTP status code is 409.
+        """
+        pulumi.set(__self__, "id", id)
+        if version is not None:
+            pulumi.set(__self__, "version", version)
+
+    @property
+    @pulumi.getter
+    def id(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "id")
+
+    @id.setter
+    def id(self, value: pulumi.Input[str]):
+        pulumi.set(self, "id", value)
+
+    @property
+    @pulumi.getter
+    def version(self) -> Optional[pulumi.Input[str]]:
+        """
+        If this is omitted, and no default version is specified for this application, the request fails with the error code InvalidApplicationPackageReferences. If you are calling the REST API directly, the HTTP status code is 409.
+        """
+        return pulumi.get(self, "version")
+
+    @version.setter
+    def version(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "version", value)
+
+
+if not MYPY:
+    class AutoScaleSettingsArgsDict(TypedDict):
+        formula: pulumi.Input[str]
+        evaluation_interval: NotRequired[pulumi.Input[str]]
+        """
+        If omitted, the default value is 15 minutes (PT15M).
+        """
+elif False:
+    AutoScaleSettingsArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class AutoScaleSettingsArgs:
+    def __init__(__self__, *,
+                 formula: pulumi.Input[str],
+                 evaluation_interval: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] evaluation_interval: If omitted, the default value is 15 minutes (PT15M).
+        """
+        pulumi.set(__self__, "formula", formula)
+        if evaluation_interval is not None:
+            pulumi.set(__self__, "evaluation_interval", evaluation_interval)
+
+    @property
+    @pulumi.getter
+    def formula(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "formula")
+
+    @formula.setter
+    def formula(self, value: pulumi.Input[str]):
+        pulumi.set(self, "formula", value)
+
+    @property
+    @pulumi.getter(name="evaluationInterval")
+    def evaluation_interval(self) -> Optional[pulumi.Input[str]]:
+        """
+        If omitted, the default value is 15 minutes (PT15M).
+        """
+        return pulumi.get(self, "evaluation_interval")
+
+    @evaluation_interval.setter
+    def evaluation_interval(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "evaluation_interval", value)
+
+
+if not MYPY:
+    class AutoStorageBasePropertiesArgsDict(TypedDict):
+        """
+        The properties related to the auto-storage account.
+        """
+        storage_account_id: pulumi.Input[str]
+        """
+        The resource ID of the storage account to be used for auto-storage account.
+        """
+        authentication_mode: NotRequired[pulumi.Input['AutoStorageAuthenticationMode']]
+        """
+        The authentication mode which the Batch service will use to manage the auto-storage account.
+        """
+        node_identity_reference: NotRequired[pulumi.Input['ComputeNodeIdentityReferenceArgsDict']]
+        """
+        The identity referenced here must be assigned to pools which have compute nodes that need access to auto-storage.
+        """
+elif False:
+    AutoStorageBasePropertiesArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class AutoStorageBasePropertiesArgs:
+    def __init__(__self__, *,
+                 storage_account_id: pulumi.Input[str],
+                 authentication_mode: Optional[pulumi.Input['AutoStorageAuthenticationMode']] = None,
+                 node_identity_reference: Optional[pulumi.Input['ComputeNodeIdentityReferenceArgs']] = None):
+        """
+        The properties related to the auto-storage account.
+        :param pulumi.Input[str] storage_account_id: The resource ID of the storage account to be used for auto-storage account.
+        :param pulumi.Input['AutoStorageAuthenticationMode'] authentication_mode: The authentication mode which the Batch service will use to manage the auto-storage account.
+        :param pulumi.Input['ComputeNodeIdentityReferenceArgs'] node_identity_reference: The identity referenced here must be assigned to pools which have compute nodes that need access to auto-storage.
+        """
+        pulumi.set(__self__, "storage_account_id", storage_account_id)
+        if authentication_mode is None:
+            authentication_mode = 'StorageKeys'
+        if authentication_mode is not None:
+            pulumi.set(__self__, "authentication_mode", authentication_mode)
+        if node_identity_reference is not None:
+            pulumi.set(__self__, "node_identity_reference", node_identity_reference)
+
+    @property
+    @pulumi.getter(name="storageAccountId")
+    def storage_account_id(self) -> pulumi.Input[str]:
+        """
+        The resource ID of the storage account to be used for auto-storage account.
+        """
+        return pulumi.get(self, "storage_account_id")
+
+    @storage_account_id.setter
+    def storage_account_id(self, value: pulumi.Input[str]):
+        pulumi.set(self, "storage_account_id", value)
+
+    @property
+    @pulumi.getter(name="authenticationMode")
+    def authentication_mode(self) -> Optional[pulumi.Input['AutoStorageAuthenticationMode']]:
+        """
+        The authentication mode which the Batch service will use to manage the auto-storage account.
+        """
+        return pulumi.get(self, "authentication_mode")
+
+    @authentication_mode.setter
+    def authentication_mode(self, value: Optional[pulumi.Input['AutoStorageAuthenticationMode']]):
+        pulumi.set(self, "authentication_mode", value)
+
+    @property
+    @pulumi.getter(name="nodeIdentityReference")
+    def node_identity_reference(self) -> Optional[pulumi.Input['ComputeNodeIdentityReferenceArgs']]:
+        """
+        The identity referenced here must be assigned to pools which have compute nodes that need access to auto-storage.
+        """
+        return pulumi.get(self, "node_identity_reference")
+
+    @node_identity_reference.setter
+    def node_identity_reference(self, value: Optional[pulumi.Input['ComputeNodeIdentityReferenceArgs']]):
+        pulumi.set(self, "node_identity_reference", value)
+
+
+if not MYPY:
+    class AutoUserSpecificationArgsDict(TypedDict):
+        elevation_level: NotRequired[pulumi.Input['ElevationLevel']]
+        """
+        The default value is nonAdmin.
+        """
+        scope: NotRequired[pulumi.Input['AutoUserScope']]
+        """
+        The default value is Pool. If the pool is running Windows a value of Task should be specified if stricter isolation between tasks is required. For example, if the task mutates the registry in a way which could impact other tasks, or if certificates have been specified on the pool which should not be accessible by normal tasks but should be accessible by start tasks.
+        """
+elif False:
+    AutoUserSpecificationArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class AutoUserSpecificationArgs:
+    def __init__(__self__, *,
+                 elevation_level: Optional[pulumi.Input['ElevationLevel']] = None,
+                 scope: Optional[pulumi.Input['AutoUserScope']] = None):
+        """
+        :param pulumi.Input['ElevationLevel'] elevation_level: The default value is nonAdmin.
+        :param pulumi.Input['AutoUserScope'] scope: The default value is Pool. If the pool is running Windows a value of Task should be specified if stricter isolation between tasks is required. For example, if the task mutates the registry in a way which could impact other tasks, or if certificates have been specified on the pool which should not be accessible by normal tasks but should be accessible by start tasks.
+        """
+        if elevation_level is not None:
+            pulumi.set(__self__, "elevation_level", elevation_level)
+        if scope is not None:
+            pulumi.set(__self__, "scope", scope)
+
+    @property
+    @pulumi.getter(name="elevationLevel")
+    def elevation_level(self) -> Optional[pulumi.Input['ElevationLevel']]:
+        """
+        The default value is nonAdmin.
+        """
+        return pulumi.get(self, "elevation_level")
+
+    @elevation_level.setter
+    def elevation_level(self, value: Optional[pulumi.Input['ElevationLevel']]):
+        pulumi.set(self, "elevation_level", value)
+
+    @property
+    @pulumi.getter
+    def scope(self) -> Optional[pulumi.Input['AutoUserScope']]:
+        """
+        The default value is Pool. If the pool is running Windows a value of Task should be specified if stricter isolation between tasks is required. For example, if the task mutates the registry in a way which could impact other tasks, or if certificates have been specified on the pool which should not be accessible by normal tasks but should be accessible by start tasks.
+        """
+        return pulumi.get(self, "scope")
+
+    @scope.setter
+    def scope(self, value: Optional[pulumi.Input['AutoUserScope']]):
+        pulumi.set(self, "scope", value)
+
+
+if not MYPY:
+    class AutomaticOSUpgradePolicyArgsDict(TypedDict):
+        """
+        The configuration parameters used for performing automatic OS upgrade.
+        """
+        disable_automatic_rollback: NotRequired[pulumi.Input[bool]]
+        """
+        Whether OS image rollback feature should be disabled.
+        """
+        enable_automatic_os_upgrade: NotRequired[pulumi.Input[bool]]
+        """
+        Indicates whether OS upgrades should automatically be applied to scale set instances in a rolling fashion when a newer version of the OS image becomes available. <br /><br /> If this is set to true for Windows based pools, [WindowsConfiguration.enableAutomaticUpdates](https://learn.microsoft.com/en-us/rest/api/batchmanagement/pool/create?tabs=HTTP#windowsconfiguration) cannot be set to true.
+        """
+        os_rolling_upgrade_deferral: NotRequired[pulumi.Input[bool]]
+        """
+        Defer OS upgrades on the TVMs if they are running tasks.
+        """
+        use_rolling_upgrade_policy: NotRequired[pulumi.Input[bool]]
+        """
+        Indicates whether rolling upgrade policy should be used during Auto OS Upgrade. Auto OS Upgrade will fallback to the default policy if no policy is defined on the VMSS.
+        """
+elif False:
+    AutomaticOSUpgradePolicyArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class AutomaticOSUpgradePolicyArgs:
+    def __init__(__self__, *,
+                 disable_automatic_rollback: Optional[pulumi.Input[bool]] = None,
+                 enable_automatic_os_upgrade: Optional[pulumi.Input[bool]] = None,
+                 os_rolling_upgrade_deferral: Optional[pulumi.Input[bool]] = None,
+                 use_rolling_upgrade_policy: Optional[pulumi.Input[bool]] = None):
+        """
+        The configuration parameters used for performing automatic OS upgrade.
+        :param pulumi.Input[bool] disable_automatic_rollback: Whether OS image rollback feature should be disabled.
+        :param pulumi.Input[bool] enable_automatic_os_upgrade: Indicates whether OS upgrades should automatically be applied to scale set instances in a rolling fashion when a newer version of the OS image becomes available. <br /><br /> If this is set to true for Windows based pools, [WindowsConfiguration.enableAutomaticUpdates](https://learn.microsoft.com/en-us/rest/api/batchmanagement/pool/create?tabs=HTTP#windowsconfiguration) cannot be set to true.
+        :param pulumi.Input[bool] os_rolling_upgrade_deferral: Defer OS upgrades on the TVMs if they are running tasks.
+        :param pulumi.Input[bool] use_rolling_upgrade_policy: Indicates whether rolling upgrade policy should be used during Auto OS Upgrade. Auto OS Upgrade will fallback to the default policy if no policy is defined on the VMSS.
+        """
+        if disable_automatic_rollback is not None:
+            pulumi.set(__self__, "disable_automatic_rollback", disable_automatic_rollback)
+        if enable_automatic_os_upgrade is not None:
+            pulumi.set(__self__, "enable_automatic_os_upgrade", enable_automatic_os_upgrade)
+        if os_rolling_upgrade_deferral is not None:
+            pulumi.set(__self__, "os_rolling_upgrade_deferral", os_rolling_upgrade_deferral)
+        if use_rolling_upgrade_policy is not None:
+            pulumi.set(__self__, "use_rolling_upgrade_policy", use_rolling_upgrade_policy)
+
+    @property
+    @pulumi.getter(name="disableAutomaticRollback")
+    def disable_automatic_rollback(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Whether OS image rollback feature should be disabled.
+        """
+        return pulumi.get(self, "disable_automatic_rollback")
+
+    @disable_automatic_rollback.setter
+    def disable_automatic_rollback(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "disable_automatic_rollback", value)
+
+    @property
+    @pulumi.getter(name="enableAutomaticOSUpgrade")
+    def enable_automatic_os_upgrade(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Indicates whether OS upgrades should automatically be applied to scale set instances in a rolling fashion when a newer version of the OS image becomes available. <br /><br /> If this is set to true for Windows based pools, [WindowsConfiguration.enableAutomaticUpdates](https://learn.microsoft.com/en-us/rest/api/batchmanagement/pool/create?tabs=HTTP#windowsconfiguration) cannot be set to true.
+        """
+        return pulumi.get(self, "enable_automatic_os_upgrade")
+
+    @enable_automatic_os_upgrade.setter
+    def enable_automatic_os_upgrade(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "enable_automatic_os_upgrade", value)
+
+    @property
+    @pulumi.getter(name="osRollingUpgradeDeferral")
+    def os_rolling_upgrade_deferral(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Defer OS upgrades on the TVMs if they are running tasks.
+        """
+        return pulumi.get(self, "os_rolling_upgrade_deferral")
+
+    @os_rolling_upgrade_deferral.setter
+    def os_rolling_upgrade_deferral(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "os_rolling_upgrade_deferral", value)
+
+    @property
+    @pulumi.getter(name="useRollingUpgradePolicy")
+    def use_rolling_upgrade_policy(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Indicates whether rolling upgrade policy should be used during Auto OS Upgrade. Auto OS Upgrade will fallback to the default policy if no policy is defined on the VMSS.
+        """
+        return pulumi.get(self, "use_rolling_upgrade_policy")
+
+    @use_rolling_upgrade_policy.setter
+    def use_rolling_upgrade_policy(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "use_rolling_upgrade_policy", value)
+
+
+if not MYPY:
+    class AzureBlobFileSystemConfigurationArgsDict(TypedDict):
+        account_name: pulumi.Input[str]
+        container_name: pulumi.Input[str]
+        relative_mount_path: pulumi.Input[str]
+        """
+        All file systems are mounted relative to the Batch mounts directory, accessible via the AZ_BATCH_NODE_MOUNTS_DIR environment variable.
+        """
+        account_key: NotRequired[pulumi.Input[str]]
+        """
+        This property is mutually exclusive with both sasKey and identity; exactly one must be specified.
+        """
+        blobfuse_options: NotRequired[pulumi.Input[str]]
+        """
+        These are 'net use' options in Windows and 'mount' options in Linux.
+        """
+        identity_reference: NotRequired[pulumi.Input['ComputeNodeIdentityReferenceArgsDict']]
+        """
+        This property is mutually exclusive with both accountKey and sasKey; exactly one must be specified.
+        """
+        sas_key: NotRequired[pulumi.Input[str]]
+        """
+        This property is mutually exclusive with both accountKey and identity; exactly one must be specified.
+        """
+elif False:
+    AzureBlobFileSystemConfigurationArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class AzureBlobFileSystemConfigurationArgs:
+    def __init__(__self__, *,
+                 account_name: pulumi.Input[str],
+                 container_name: pulumi.Input[str],
+                 relative_mount_path: pulumi.Input[str],
+                 account_key: Optional[pulumi.Input[str]] = None,
+                 blobfuse_options: Optional[pulumi.Input[str]] = None,
+                 identity_reference: Optional[pulumi.Input['ComputeNodeIdentityReferenceArgs']] = None,
+                 sas_key: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] relative_mount_path: All file systems are mounted relative to the Batch mounts directory, accessible via the AZ_BATCH_NODE_MOUNTS_DIR environment variable.
+        :param pulumi.Input[str] account_key: This property is mutually exclusive with both sasKey and identity; exactly one must be specified.
+        :param pulumi.Input[str] blobfuse_options: These are 'net use' options in Windows and 'mount' options in Linux.
+        :param pulumi.Input['ComputeNodeIdentityReferenceArgs'] identity_reference: This property is mutually exclusive with both accountKey and sasKey; exactly one must be specified.
+        :param pulumi.Input[str] sas_key: This property is mutually exclusive with both accountKey and identity; exactly one must be specified.
+        """
+        pulumi.set(__self__, "account_name", account_name)
+        pulumi.set(__self__, "container_name", container_name)
+        pulumi.set(__self__, "relative_mount_path", relative_mount_path)
+        if account_key is not None:
+            pulumi.set(__self__, "account_key", account_key)
+        if blobfuse_options is not None:
+            pulumi.set(__self__, "blobfuse_options", blobfuse_options)
+        if identity_reference is not None:
+            pulumi.set(__self__, "identity_reference", identity_reference)
+        if sas_key is not None:
+            pulumi.set(__self__, "sas_key", sas_key)
+
+    @property
+    @pulumi.getter(name="accountName")
+    def account_name(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "account_name")
+
+    @account_name.setter
+    def account_name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "account_name", value)
+
+    @property
+    @pulumi.getter(name="containerName")
+    def container_name(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "container_name")
+
+    @container_name.setter
+    def container_name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "container_name", value)
+
+    @property
+    @pulumi.getter(name="relativeMountPath")
+    def relative_mount_path(self) -> pulumi.Input[str]:
+        """
+        All file systems are mounted relative to the Batch mounts directory, accessible via the AZ_BATCH_NODE_MOUNTS_DIR environment variable.
+        """
+        return pulumi.get(self, "relative_mount_path")
+
+    @relative_mount_path.setter
+    def relative_mount_path(self, value: pulumi.Input[str]):
+        pulumi.set(self, "relative_mount_path", value)
+
+    @property
+    @pulumi.getter(name="accountKey")
+    def account_key(self) -> Optional[pulumi.Input[str]]:
+        """
+        This property is mutually exclusive with both sasKey and identity; exactly one must be specified.
+        """
+        return pulumi.get(self, "account_key")
+
+    @account_key.setter
+    def account_key(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "account_key", value)
+
+    @property
+    @pulumi.getter(name="blobfuseOptions")
+    def blobfuse_options(self) -> Optional[pulumi.Input[str]]:
+        """
+        These are 'net use' options in Windows and 'mount' options in Linux.
+        """
+        return pulumi.get(self, "blobfuse_options")
+
+    @blobfuse_options.setter
+    def blobfuse_options(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "blobfuse_options", value)
+
+    @property
+    @pulumi.getter(name="identityReference")
+    def identity_reference(self) -> Optional[pulumi.Input['ComputeNodeIdentityReferenceArgs']]:
+        """
+        This property is mutually exclusive with both accountKey and sasKey; exactly one must be specified.
+        """
+        return pulumi.get(self, "identity_reference")
+
+    @identity_reference.setter
+    def identity_reference(self, value: Optional[pulumi.Input['ComputeNodeIdentityReferenceArgs']]):
+        pulumi.set(self, "identity_reference", value)
+
+    @property
+    @pulumi.getter(name="sasKey")
+    def sas_key(self) -> Optional[pulumi.Input[str]]:
+        """
+        This property is mutually exclusive with both accountKey and identity; exactly one must be specified.
+        """
+        return pulumi.get(self, "sas_key")
+
+    @sas_key.setter
+    def sas_key(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "sas_key", value)
+
+
+if not MYPY:
+    class AzureFileShareConfigurationArgsDict(TypedDict):
+        account_key: pulumi.Input[str]
+        account_name: pulumi.Input[str]
+        azure_file_url: pulumi.Input[str]
+        """
+        This is of the form 'https://{account}.file.core.windows.net/'.
+        """
+        relative_mount_path: pulumi.Input[str]
+        """
+        All file systems are mounted relative to the Batch mounts directory, accessible via the AZ_BATCH_NODE_MOUNTS_DIR environment variable.
+        """
+        mount_options: NotRequired[pulumi.Input[str]]
+        """
+        These are 'net use' options in Windows and 'mount' options in Linux.
+        """
+elif False:
+    AzureFileShareConfigurationArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class AzureFileShareConfigurationArgs:
+    def __init__(__self__, *,
+                 account_key: pulumi.Input[str],
+                 account_name: pulumi.Input[str],
+                 azure_file_url: pulumi.Input[str],
+                 relative_mount_path: pulumi.Input[str],
+                 mount_options: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] azure_file_url: This is of the form 'https://{account}.file.core.windows.net/'.
+        :param pulumi.Input[str] relative_mount_path: All file systems are mounted relative to the Batch mounts directory, accessible via the AZ_BATCH_NODE_MOUNTS_DIR environment variable.
+        :param pulumi.Input[str] mount_options: These are 'net use' options in Windows and 'mount' options in Linux.
+        """
+        pulumi.set(__self__, "account_key", account_key)
+        pulumi.set(__self__, "account_name", account_name)
+        pulumi.set(__self__, "azure_file_url", azure_file_url)
+        pulumi.set(__self__, "relative_mount_path", relative_mount_path)
+        if mount_options is not None:
+            pulumi.set(__self__, "mount_options", mount_options)
+
+    @property
+    @pulumi.getter(name="accountKey")
+    def account_key(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "account_key")
+
+    @account_key.setter
+    def account_key(self, value: pulumi.Input[str]):
+        pulumi.set(self, "account_key", value)
+
+    @property
+    @pulumi.getter(name="accountName")
+    def account_name(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "account_name")
+
+    @account_name.setter
+    def account_name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "account_name", value)
+
+    @property
+    @pulumi.getter(name="azureFileUrl")
+    def azure_file_url(self) -> pulumi.Input[str]:
+        """
+        This is of the form 'https://{account}.file.core.windows.net/'.
+        """
+        return pulumi.get(self, "azure_file_url")
+
+    @azure_file_url.setter
+    def azure_file_url(self, value: pulumi.Input[str]):
+        pulumi.set(self, "azure_file_url", value)
+
+    @property
+    @pulumi.getter(name="relativeMountPath")
+    def relative_mount_path(self) -> pulumi.Input[str]:
+        """
+        All file systems are mounted relative to the Batch mounts directory, accessible via the AZ_BATCH_NODE_MOUNTS_DIR environment variable.
+        """
+        return pulumi.get(self, "relative_mount_path")
+
+    @relative_mount_path.setter
+    def relative_mount_path(self, value: pulumi.Input[str]):
+        pulumi.set(self, "relative_mount_path", value)
+
+    @property
+    @pulumi.getter(name="mountOptions")
+    def mount_options(self) -> Optional[pulumi.Input[str]]:
+        """
+        These are 'net use' options in Windows and 'mount' options in Linux.
+        """
+        return pulumi.get(self, "mount_options")
+
+    @mount_options.setter
+    def mount_options(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "mount_options", value)
+
+
+if not MYPY:
+    class BatchAccountIdentityArgsDict(TypedDict):
+        """
+        The identity of the Batch account, if configured. This is used when the user specifies 'Microsoft.KeyVault' as their Batch account encryption configuration or when `ManagedIdentity` is selected as the auto-storage authentication mode.
+        """
+        type: pulumi.Input['ResourceIdentityType']
+        """
+        The type of identity used for the Batch account.
+        """
+        user_assigned_identities: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        The list of user identities associated with the Batch account.
+        """
+elif False:
+    BatchAccountIdentityArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class BatchAccountIdentityArgs:
+    def __init__(__self__, *,
+                 type: pulumi.Input['ResourceIdentityType'],
+                 user_assigned_identities: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
+        """
+        The identity of the Batch account, if configured. This is used when the user specifies 'Microsoft.KeyVault' as their Batch account encryption configuration or when `ManagedIdentity` is selected as the auto-storage authentication mode.
+        :param pulumi.Input['ResourceIdentityType'] type: The type of identity used for the Batch account.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] user_assigned_identities: The list of user identities associated with the Batch account.
+        """
+        pulumi.set(__self__, "type", type)
+        if user_assigned_identities is not None:
+            pulumi.set(__self__, "user_assigned_identities", user_assigned_identities)
+
+    @property
+    @pulumi.getter
+    def type(self) -> pulumi.Input['ResourceIdentityType']:
+        """
+        The type of identity used for the Batch account.
+        """
+        return pulumi.get(self, "type")
+
+    @type.setter
+    def type(self, value: pulumi.Input['ResourceIdentityType']):
+        pulumi.set(self, "type", value)
+
+    @property
+    @pulumi.getter(name="userAssignedIdentities")
+    def user_assigned_identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        The list of user identities associated with the Batch account.
+        """
+        return pulumi.get(self, "user_assigned_identities")
+
+    @user_assigned_identities.setter
+    def user_assigned_identities(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "user_assigned_identities", value)
+
+
+if not MYPY:
+    class BatchPoolIdentityArgsDict(TypedDict):
+        """
+        The identity of the Batch pool, if configured. If the pool identity is updated during update an existing pool, only the new vms which are created after the pool shrinks to 0 will have the updated identities
+        """
+        type: pulumi.Input['PoolIdentityType']
+        """
+        The type of identity used for the Batch Pool.
+        """
+        user_assigned_identities: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        The list of user identities associated with the Batch pool.
+        """
+elif False:
+    BatchPoolIdentityArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class BatchPoolIdentityArgs:
+    def __init__(__self__, *,
+                 type: pulumi.Input['PoolIdentityType'],
+                 user_assigned_identities: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
+        """
+        The identity of the Batch pool, if configured. If the pool identity is updated during update an existing pool, only the new vms which are created after the pool shrinks to 0 will have the updated identities
+        :param pulumi.Input['PoolIdentityType'] type: The type of identity used for the Batch Pool.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] user_assigned_identities: The list of user identities associated with the Batch pool.
+        """
+        pulumi.set(__self__, "type", type)
+        if user_assigned_identities is not None:
+            pulumi.set(__self__, "user_assigned_identities", user_assigned_identities)
+
+    @property
+    @pulumi.getter
+    def type(self) -> pulumi.Input['PoolIdentityType']:
+        """
+        The type of identity used for the Batch Pool.
+        """
+        return pulumi.get(self, "type")
+
+    @type.setter
+    def type(self, value: pulumi.Input['PoolIdentityType']):
+        pulumi.set(self, "type", value)
+
+    @property
+    @pulumi.getter(name="userAssignedIdentities")
+    def user_assigned_identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        The list of user identities associated with the Batch pool.
+        """
+        return pulumi.get(self, "user_assigned_identities")
+
+    @user_assigned_identities.setter
+    def user_assigned_identities(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "user_assigned_identities", value)
+
+
+if not MYPY:
+    class CIFSMountConfigurationArgsDict(TypedDict):
+        password: pulumi.Input[str]
+        relative_mount_path: pulumi.Input[str]
+        """
+        All file systems are mounted relative to the Batch mounts directory, accessible via the AZ_BATCH_NODE_MOUNTS_DIR environment variable.
+        """
+        source: pulumi.Input[str]
+        user_name: pulumi.Input[str]
+        mount_options: NotRequired[pulumi.Input[str]]
+        """
+        These are 'net use' options in Windows and 'mount' options in Linux.
+        """
+elif False:
+    CIFSMountConfigurationArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class CIFSMountConfigurationArgs:
+    def __init__(__self__, *,
+                 password: pulumi.Input[str],
+                 relative_mount_path: pulumi.Input[str],
+                 source: pulumi.Input[str],
+                 user_name: pulumi.Input[str],
+                 mount_options: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] relative_mount_path: All file systems are mounted relative to the Batch mounts directory, accessible via the AZ_BATCH_NODE_MOUNTS_DIR environment variable.
+        :param pulumi.Input[str] mount_options: These are 'net use' options in Windows and 'mount' options in Linux.
+        """
+        pulumi.set(__self__, "password", password)
+        pulumi.set(__self__, "relative_mount_path", relative_mount_path)
+        pulumi.set(__self__, "source", source)
+        pulumi.set(__self__, "user_name", user_name)
+        if mount_options is not None:
+            pulumi.set(__self__, "mount_options", mount_options)
+
+    @property
+    @pulumi.getter
+    def password(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "password")
+
+    @password.setter
+    def password(self, value: pulumi.Input[str]):
+        pulumi.set(self, "password", value)
+
+    @property
+    @pulumi.getter(name="relativeMountPath")
+    def relative_mount_path(self) -> pulumi.Input[str]:
+        """
+        All file systems are mounted relative to the Batch mounts directory, accessible via the AZ_BATCH_NODE_MOUNTS_DIR environment variable.
+        """
+        return pulumi.get(self, "relative_mount_path")
+
+    @relative_mount_path.setter
+    def relative_mount_path(self, value: pulumi.Input[str]):
+        pulumi.set(self, "relative_mount_path", value)
+
+    @property
+    @pulumi.getter
+    def source(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "source")
+
+    @source.setter
+    def source(self, value: pulumi.Input[str]):
+        pulumi.set(self, "source", value)
+
+    @property
+    @pulumi.getter(name="userName")
+    def user_name(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "user_name")
+
+    @user_name.setter
+    def user_name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "user_name", value)
+
+    @property
+    @pulumi.getter(name="mountOptions")
+    def mount_options(self) -> Optional[pulumi.Input[str]]:
+        """
+        These are 'net use' options in Windows and 'mount' options in Linux.
+        """
+        return pulumi.get(self, "mount_options")
+
+    @mount_options.setter
+    def mount_options(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "mount_options", value)
+
+
+if not MYPY:
+    class CertificateReferenceArgsDict(TypedDict):
+        """
+        Warning: This object is deprecated and will be removed after February, 2024. Please use the [Azure KeyVault Extension](https://learn.microsoft.com/azure/batch/batch-certificate-migration-guide) instead.
+        """
+        id: pulumi.Input[str]
+        store_location: NotRequired[pulumi.Input['CertificateStoreLocation']]
+        """
+        The default value is currentUser. This property is applicable only for pools configured with Windows compute nodes. For Linux compute nodes, the certificates are stored in a directory inside the task working directory and an environment variable AZ_BATCH_CERTIFICATES_DIR is supplied to the task to query for this location. For certificates with visibility of 'remoteUser', a 'certs' directory is created in the user's home directory (e.g., /home/{user-name}/certs) and certificates are placed in that directory.
+        """
+        store_name: NotRequired[pulumi.Input[str]]
+        """
+        This property is applicable only for pools configured with Windows compute nodes. Common store names include: My, Root, CA, Trust, Disallowed, TrustedPeople, TrustedPublisher, AuthRoot, AddressBook, but any custom store name can also be used. The default value is My.
+        """
+        visibility: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateVisibility']]]]
+elif False:
+    CertificateReferenceArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class CertificateReferenceArgs:
+    def __init__(__self__, *,
+                 id: pulumi.Input[str],
+                 store_location: Optional[pulumi.Input['CertificateStoreLocation']] = None,
+                 store_name: Optional[pulumi.Input[str]] = None,
+                 visibility: Optional[pulumi.Input[Sequence[pulumi.Input['CertificateVisibility']]]] = None):
+        """
+        Warning: This object is deprecated and will be removed after February, 2024. Please use the [Azure KeyVault Extension](https://learn.microsoft.com/azure/batch/batch-certificate-migration-guide) instead.
+        :param pulumi.Input['CertificateStoreLocation'] store_location: The default value is currentUser. This property is applicable only for pools configured with Windows compute nodes. For Linux compute nodes, the certificates are stored in a directory inside the task working directory and an environment variable AZ_BATCH_CERTIFICATES_DIR is supplied to the task to query for this location. For certificates with visibility of 'remoteUser', a 'certs' directory is created in the user's home directory (e.g., /home/{user-name}/certs) and certificates are placed in that directory.
+        :param pulumi.Input[str] store_name: This property is applicable only for pools configured with Windows compute nodes. Common store names include: My, Root, CA, Trust, Disallowed, TrustedPeople, TrustedPublisher, AuthRoot, AddressBook, but any custom store name can also be used. The default value is My.
+        """
+        pulumi.set(__self__, "id", id)
+        if store_location is not None:
+            pulumi.set(__self__, "store_location", store_location)
+        if store_name is not None:
+            pulumi.set(__self__, "store_name", store_name)
+        if visibility is not None:
+            pulumi.set(__self__, "visibility", visibility)
+
+    @property
+    @pulumi.getter
+    def id(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "id")
+
+    @id.setter
+    def id(self, value: pulumi.Input[str]):
+        pulumi.set(self, "id", value)
+
+    @property
+    @pulumi.getter(name="storeLocation")
+    def store_location(self) -> Optional[pulumi.Input['CertificateStoreLocation']]:
+        """
+        The default value is currentUser. This property is applicable only for pools configured with Windows compute nodes. For Linux compute nodes, the certificates are stored in a directory inside the task working directory and an environment variable AZ_BATCH_CERTIFICATES_DIR is supplied to the task to query for this location. For certificates with visibility of 'remoteUser', a 'certs' directory is created in the user's home directory (e.g., /home/{user-name}/certs) and certificates are placed in that directory.
+        """
+        return pulumi.get(self, "store_location")
+
+    @store_location.setter
+    def store_location(self, value: Optional[pulumi.Input['CertificateStoreLocation']]):
+        pulumi.set(self, "store_location", value)
+
+    @property
+    @pulumi.getter(name="storeName")
+    def store_name(self) -> Optional[pulumi.Input[str]]:
+        """
+        This property is applicable only for pools configured with Windows compute nodes. Common store names include: My, Root, CA, Trust, Disallowed, TrustedPeople, TrustedPublisher, AuthRoot, AddressBook, but any custom store name can also be used. The default value is My.
+        """
+        return pulumi.get(self, "store_name")
+
+    @store_name.setter
+    def store_name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "store_name", value)
+
+    @property
+    @pulumi.getter
+    def visibility(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['CertificateVisibility']]]]:
+        return pulumi.get(self, "visibility")
+
+    @visibility.setter
+    def visibility(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['CertificateVisibility']]]]):
+        pulumi.set(self, "visibility", value)
+
+
+if not MYPY:
+    class ComputeNodeIdentityReferenceArgsDict(TypedDict):
+        """
+        The reference to a user assigned identity associated with the Batch pool which a compute node will use.
+        """
+        resource_id: NotRequired[pulumi.Input[str]]
+        """
+        The ARM resource id of the user assigned identity.
+        """
+elif False:
+    ComputeNodeIdentityReferenceArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ComputeNodeIdentityReferenceArgs:
+    def __init__(__self__, *,
+                 resource_id: Optional[pulumi.Input[str]] = None):
+        """
+        The reference to a user assigned identity associated with the Batch pool which a compute node will use.
+        :param pulumi.Input[str] resource_id: The ARM resource id of the user assigned identity.
+        """
+        if resource_id is not None:
+            pulumi.set(__self__, "resource_id", resource_id)
+
+    @property
+    @pulumi.getter(name="resourceId")
+    def resource_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        The ARM resource id of the user assigned identity.
+        """
+        return pulumi.get(self, "resource_id")
+
+    @resource_id.setter
+    def resource_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "resource_id", value)
+
+
+if not MYPY:
+    class ContainerConfigurationArgsDict(TypedDict):
+        type: pulumi.Input[Union[str, 'ContainerType']]
+        container_image_names: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        This is the full image reference, as would be specified to "docker pull". An image will be sourced from the default Docker registry unless the image is fully qualified with an alternative registry.
+        """
+        container_registries: NotRequired[pulumi.Input[Sequence[pulumi.Input['ContainerRegistryArgsDict']]]]
+        """
+        If any images must be downloaded from a private registry which requires credentials, then those credentials must be provided here.
+        """
+elif False:
+    ContainerConfigurationArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ContainerConfigurationArgs:
+    def __init__(__self__, *,
+                 type: pulumi.Input[Union[str, 'ContainerType']],
+                 container_image_names: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 container_registries: Optional[pulumi.Input[Sequence[pulumi.Input['ContainerRegistryArgs']]]] = None):
+        """
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] container_image_names: This is the full image reference, as would be specified to "docker pull". An image will be sourced from the default Docker registry unless the image is fully qualified with an alternative registry.
+        :param pulumi.Input[Sequence[pulumi.Input['ContainerRegistryArgs']]] container_registries: If any images must be downloaded from a private registry which requires credentials, then those credentials must be provided here.
+        """
+        pulumi.set(__self__, "type", type)
+        if container_image_names is not None:
+            pulumi.set(__self__, "container_image_names", container_image_names)
+        if container_registries is not None:
+            pulumi.set(__self__, "container_registries", container_registries)
+
+    @property
+    @pulumi.getter
+    def type(self) -> pulumi.Input[Union[str, 'ContainerType']]:
+        return pulumi.get(self, "type")
+
+    @type.setter
+    def type(self, value: pulumi.Input[Union[str, 'ContainerType']]):
+        pulumi.set(self, "type", value)
+
+    @property
+    @pulumi.getter(name="containerImageNames")
+    def container_image_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        This is the full image reference, as would be specified to "docker pull". An image will be sourced from the default Docker registry unless the image is fully qualified with an alternative registry.
+        """
+        return pulumi.get(self, "container_image_names")
+
+    @container_image_names.setter
+    def container_image_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "container_image_names", value)
+
+    @property
+    @pulumi.getter(name="containerRegistries")
+    def container_registries(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['ContainerRegistryArgs']]]]:
+        """
+        If any images must be downloaded from a private registry which requires credentials, then those credentials must be provided here.
+        """
+        return pulumi.get(self, "container_registries")
+
+    @container_registries.setter
+    def container_registries(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['ContainerRegistryArgs']]]]):
+        pulumi.set(self, "container_registries", value)
+
+
+if not MYPY:
+    class ContainerHostBatchBindMountEntryArgsDict(TypedDict):
+        is_read_only: NotRequired[pulumi.Input[bool]]
+        """
+        For Linux, if you mount this path as a read/write mode, this does not mean that all users in container have the read/write access for the path, it depends on the access in host VM. If this path is mounted read-only, all users within the container will not be able to modify the path.
+        """
+        source: NotRequired[pulumi.Input[Union[str, 'ContainerHostDataPath']]]
+elif False:
+    ContainerHostBatchBindMountEntryArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ContainerHostBatchBindMountEntryArgs:
+    def __init__(__self__, *,
+                 is_read_only: Optional[pulumi.Input[bool]] = None,
+                 source: Optional[pulumi.Input[Union[str, 'ContainerHostDataPath']]] = None):
+        """
+        :param pulumi.Input[bool] is_read_only: For Linux, if you mount this path as a read/write mode, this does not mean that all users in container have the read/write access for the path, it depends on the access in host VM. If this path is mounted read-only, all users within the container will not be able to modify the path.
+        """
+        if is_read_only is not None:
+            pulumi.set(__self__, "is_read_only", is_read_only)
+        if source is not None:
+            pulumi.set(__self__, "source", source)
+
+    @property
+    @pulumi.getter(name="isReadOnly")
+    def is_read_only(self) -> Optional[pulumi.Input[bool]]:
+        """
+        For Linux, if you mount this path as a read/write mode, this does not mean that all users in container have the read/write access for the path, it depends on the access in host VM. If this path is mounted read-only, all users within the container will not be able to modify the path.
+        """
+        return pulumi.get(self, "is_read_only")
+
+    @is_read_only.setter
+    def is_read_only(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "is_read_only", value)
+
+    @property
+    @pulumi.getter
+    def source(self) -> Optional[pulumi.Input[Union[str, 'ContainerHostDataPath']]]:
+        return pulumi.get(self, "source")
+
+    @source.setter
+    def source(self, value: Optional[pulumi.Input[Union[str, 'ContainerHostDataPath']]]):
+        pulumi.set(self, "source", value)
+
+
+if not MYPY:
+    class ContainerRegistryArgsDict(TypedDict):
+        identity_reference: NotRequired[pulumi.Input['ComputeNodeIdentityReferenceArgsDict']]
+        """
+        The reference to a user assigned identity associated with the Batch pool which a compute node will use.
+        """
+        password: NotRequired[pulumi.Input[str]]
+        registry_server: NotRequired[pulumi.Input[str]]
+        """
+        If omitted, the default is "docker.io".
+        """
+        user_name: NotRequired[pulumi.Input[str]]
+elif False:
+    ContainerRegistryArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ContainerRegistryArgs:
+    def __init__(__self__, *,
+                 identity_reference: Optional[pulumi.Input['ComputeNodeIdentityReferenceArgs']] = None,
+                 password: Optional[pulumi.Input[str]] = None,
+                 registry_server: Optional[pulumi.Input[str]] = None,
+                 user_name: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input['ComputeNodeIdentityReferenceArgs'] identity_reference: The reference to a user assigned identity associated with the Batch pool which a compute node will use.
+        :param pulumi.Input[str] registry_server: If omitted, the default is "docker.io".
+        """
+        if identity_reference is not None:
+            pulumi.set(__self__, "identity_reference", identity_reference)
+        if password is not None:
+            pulumi.set(__self__, "password", password)
+        if registry_server is not None:
+            pulumi.set(__self__, "registry_server", registry_server)
+        if user_name is not None:
+            pulumi.set(__self__, "user_name", user_name)
+
+    @property
+    @pulumi.getter(name="identityReference")
+    def identity_reference(self) -> Optional[pulumi.Input['ComputeNodeIdentityReferenceArgs']]:
+        """
+        The reference to a user assigned identity associated with the Batch pool which a compute node will use.
+        """
+        return pulumi.get(self, "identity_reference")
+
+    @identity_reference.setter
+    def identity_reference(self, value: Optional[pulumi.Input['ComputeNodeIdentityReferenceArgs']]):
+        pulumi.set(self, "identity_reference", value)
+
+    @property
+    @pulumi.getter
+    def password(self) -> Optional[pulumi.Input[str]]:
+        return pulumi.get(self, "password")
+
+    @password.setter
+    def password(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "password", value)
+
+    @property
+    @pulumi.getter(name="registryServer")
+    def registry_server(self) -> Optional[pulumi.Input[str]]:
+        """
+        If omitted, the default is "docker.io".
+        """
+        return pulumi.get(self, "registry_server")
+
+    @registry_server.setter
+    def registry_server(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "registry_server", value)
+
+    @property
+    @pulumi.getter(name="userName")
+    def user_name(self) -> Optional[pulumi.Input[str]]:
+        return pulumi.get(self, "user_name")
+
+    @user_name.setter
+    def user_name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "user_name", value)
+
+
+if not MYPY:
+    class DataDiskArgsDict(TypedDict):
+        """
+        Settings which will be used by the data disks associated to Compute Nodes in the Pool. When using attached data disks, you need to mount and format the disks from within a VM to use them.
+        """
+        disk_size_gb: pulumi.Input[int]
+        lun: pulumi.Input[int]
+        """
+        The lun is used to uniquely identify each data disk. If attaching multiple disks, each should have a distinct lun. The value must be between 0 and 63, inclusive.
+        """
+        caching: NotRequired[pulumi.Input['CachingType']]
+        """
+        Values are:
+
+         none - The caching mode for the disk is not enabled.
+         readOnly - The caching mode for the disk is read only.
+         readWrite - The caching mode for the disk is read and write.
+
+         The default value for caching is none. For information about the caching options see: https://blogs.msdn.microsoft.com/windowsazurestorage/2012/06/27/exploring-windows-azure-drives-disks-and-images/.
+        """
+        storage_account_type: NotRequired[pulumi.Input['StorageAccountType']]
+        """
+        If omitted, the default is "Standard_LRS". Values are:
+
+         Standard_LRS - The data disk should use standard locally redundant storage.
+         Premium_LRS - The data disk should use premium locally redundant storage.
+        """
+elif False:
+    DataDiskArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class DataDiskArgs:
+    def __init__(__self__, *,
+                 disk_size_gb: pulumi.Input[int],
+                 lun: pulumi.Input[int],
+                 caching: Optional[pulumi.Input['CachingType']] = None,
+                 storage_account_type: Optional[pulumi.Input['StorageAccountType']] = None):
+        """
+        Settings which will be used by the data disks associated to Compute Nodes in the Pool. When using attached data disks, you need to mount and format the disks from within a VM to use them.
+        :param pulumi.Input[int] lun: The lun is used to uniquely identify each data disk. If attaching multiple disks, each should have a distinct lun. The value must be between 0 and 63, inclusive.
+        :param pulumi.Input['CachingType'] caching: Values are:
+               
+                none - The caching mode for the disk is not enabled.
+                readOnly - The caching mode for the disk is read only.
+                readWrite - The caching mode for the disk is read and write.
+               
+                The default value for caching is none. For information about the caching options see: https://blogs.msdn.microsoft.com/windowsazurestorage/2012/06/27/exploring-windows-azure-drives-disks-and-images/.
+        :param pulumi.Input['StorageAccountType'] storage_account_type: If omitted, the default is "Standard_LRS". Values are:
+               
+                Standard_LRS - The data disk should use standard locally redundant storage.
+                Premium_LRS - The data disk should use premium locally redundant storage.
+        """
+        pulumi.set(__self__, "disk_size_gb", disk_size_gb)
+        pulumi.set(__self__, "lun", lun)
+        if caching is not None:
+            pulumi.set(__self__, "caching", caching)
+        if storage_account_type is not None:
+            pulumi.set(__self__, "storage_account_type", storage_account_type)
+
+    @property
+    @pulumi.getter(name="diskSizeGB")
+    def disk_size_gb(self) -> pulumi.Input[int]:
+        return pulumi.get(self, "disk_size_gb")
+
+    @disk_size_gb.setter
+    def disk_size_gb(self, value: pulumi.Input[int]):
+        pulumi.set(self, "disk_size_gb", value)
+
+    @property
+    @pulumi.getter
+    def lun(self) -> pulumi.Input[int]:
+        """
+        The lun is used to uniquely identify each data disk. If attaching multiple disks, each should have a distinct lun. The value must be between 0 and 63, inclusive.
+        """
+        return pulumi.get(self, "lun")
+
+    @lun.setter
+    def lun(self, value: pulumi.Input[int]):
+        pulumi.set(self, "lun", value)
+
+    @property
+    @pulumi.getter
+    def caching(self) -> Optional[pulumi.Input['CachingType']]:
+        """
+        Values are:
+
+         none - The caching mode for the disk is not enabled.
+         readOnly - The caching mode for the disk is read only.
+         readWrite - The caching mode for the disk is read and write.
+
+         The default value for caching is none. For information about the caching options see: https://blogs.msdn.microsoft.com/windowsazurestorage/2012/06/27/exploring-windows-azure-drives-disks-and-images/.
+        """
+        return pulumi.get(self, "caching")
+
+    @caching.setter
+    def caching(self, value: Optional[pulumi.Input['CachingType']]):
+        pulumi.set(self, "caching", value)
+
+    @property
+    @pulumi.getter(name="storageAccountType")
+    def storage_account_type(self) -> Optional[pulumi.Input['StorageAccountType']]:
+        """
+        If omitted, the default is "Standard_LRS". Values are:
+
+         Standard_LRS - The data disk should use standard locally redundant storage.
+         Premium_LRS - The data disk should use premium locally redundant storage.
+        """
+        return pulumi.get(self, "storage_account_type")
+
+    @storage_account_type.setter
+    def storage_account_type(self, value: Optional[pulumi.Input['StorageAccountType']]):
+        pulumi.set(self, "storage_account_type", value)
+
+
+if not MYPY:
+    class DeploymentConfigurationArgsDict(TypedDict):
+        virtual_machine_configuration: NotRequired[pulumi.Input['VirtualMachineConfigurationArgsDict']]
+elif False:
+    DeploymentConfigurationArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class DeploymentConfigurationArgs:
+    def __init__(__self__, *,
+                 virtual_machine_configuration: Optional[pulumi.Input['VirtualMachineConfigurationArgs']] = None):
+        if virtual_machine_configuration is not None:
+            pulumi.set(__self__, "virtual_machine_configuration", virtual_machine_configuration)
+
+    @property
+    @pulumi.getter(name="virtualMachineConfiguration")
+    def virtual_machine_configuration(self) -> Optional[pulumi.Input['VirtualMachineConfigurationArgs']]:
+        return pulumi.get(self, "virtual_machine_configuration")
+
+    @virtual_machine_configuration.setter
+    def virtual_machine_configuration(self, value: Optional[pulumi.Input['VirtualMachineConfigurationArgs']]):
+        pulumi.set(self, "virtual_machine_configuration", value)
+
+
+if not MYPY:
+    class DiffDiskSettingsArgsDict(TypedDict):
+        placement: NotRequired[pulumi.Input['DiffDiskPlacement']]
+        """
+        This property can be used by user in the request to choose which location the operating system should be in. e.g., cache disk space for Ephemeral OS disk provisioning. For more information on Ephemeral OS disk size requirements, please refer to Ephemeral OS disk size requirements for Windows VMs at https://docs.microsoft.com/en-us/azure/virtual-machines/windows/ephemeral-os-disks#size-requirements and Linux VMs at https://docs.microsoft.com/en-us/azure/virtual-machines/linux/ephemeral-os-disks#size-requirements.
+        """
+elif False:
+    DiffDiskSettingsArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class DiffDiskSettingsArgs:
+    def __init__(__self__, *,
+                 placement: Optional[pulumi.Input['DiffDiskPlacement']] = None):
+        """
+        :param pulumi.Input['DiffDiskPlacement'] placement: This property can be used by user in the request to choose which location the operating system should be in. e.g., cache disk space for Ephemeral OS disk provisioning. For more information on Ephemeral OS disk size requirements, please refer to Ephemeral OS disk size requirements for Windows VMs at https://docs.microsoft.com/en-us/azure/virtual-machines/windows/ephemeral-os-disks#size-requirements and Linux VMs at https://docs.microsoft.com/en-us/azure/virtual-machines/linux/ephemeral-os-disks#size-requirements.
+        """
+        if placement is not None:
+            pulumi.set(__self__, "placement", placement)
+
+    @property
+    @pulumi.getter
+    def placement(self) -> Optional[pulumi.Input['DiffDiskPlacement']]:
+        """
+        This property can be used by user in the request to choose which location the operating system should be in. e.g., cache disk space for Ephemeral OS disk provisioning. For more information on Ephemeral OS disk size requirements, please refer to Ephemeral OS disk size requirements for Windows VMs at https://docs.microsoft.com/en-us/azure/virtual-machines/windows/ephemeral-os-disks#size-requirements and Linux VMs at https://docs.microsoft.com/en-us/azure/virtual-machines/linux/ephemeral-os-disks#size-requirements.
+        """
+        return pulumi.get(self, "placement")
+
+    @placement.setter
+    def placement(self, value: Optional[pulumi.Input['DiffDiskPlacement']]):
+        pulumi.set(self, "placement", value)
+
+
+if not MYPY:
+    class DiskEncryptionConfigurationArgsDict(TypedDict):
+        """
+        The disk encryption configuration applied on compute nodes in the pool. Disk encryption configuration is not supported on Linux pool created with Virtual Machine Image or Azure Compute Gallery Image.
+        """
+        targets: NotRequired[pulumi.Input[Sequence[pulumi.Input['DiskEncryptionTarget']]]]
+        """
+        On Linux pool, only "TemporaryDisk" is supported; on Windows pool, "OsDisk" and "TemporaryDisk" must be specified.
+        """
+elif False:
+    DiskEncryptionConfigurationArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class DiskEncryptionConfigurationArgs:
+    def __init__(__self__, *,
+                 targets: Optional[pulumi.Input[Sequence[pulumi.Input['DiskEncryptionTarget']]]] = None):
+        """
+        The disk encryption configuration applied on compute nodes in the pool. Disk encryption configuration is not supported on Linux pool created with Virtual Machine Image or Azure Compute Gallery Image.
+        :param pulumi.Input[Sequence[pulumi.Input['DiskEncryptionTarget']]] targets: On Linux pool, only "TemporaryDisk" is supported; on Windows pool, "OsDisk" and "TemporaryDisk" must be specified.
+        """
+        if targets is not None:
+            pulumi.set(__self__, "targets", targets)
+
+    @property
+    @pulumi.getter
+    def targets(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['DiskEncryptionTarget']]]]:
+        """
+        On Linux pool, only "TemporaryDisk" is supported; on Windows pool, "OsDisk" and "TemporaryDisk" must be specified.
+        """
+        return pulumi.get(self, "targets")
+
+    @targets.setter
+    def targets(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['DiskEncryptionTarget']]]]):
+        pulumi.set(self, "targets", value)
+
+
+if not MYPY:
+    class EncryptionPropertiesArgsDict(TypedDict):
+        """
+        Configures how customer data is encrypted inside the Batch account. By default, accounts are encrypted using a Microsoft managed key. For additional control, a customer-managed key can be used instead.
+        """
+        key_source: NotRequired[pulumi.Input['KeySource']]
+        """
+        Type of the key source.
+        """
+        key_vault_properties: NotRequired[pulumi.Input['KeyVaultPropertiesArgsDict']]
+        """
+        Additional details when using Microsoft.KeyVault
+        """
+elif False:
+    EncryptionPropertiesArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class EncryptionPropertiesArgs:
+    def __init__(__self__, *,
+                 key_source: Optional[pulumi.Input['KeySource']] = None,
+                 key_vault_properties: Optional[pulumi.Input['KeyVaultPropertiesArgs']] = None):
+        """
+        Configures how customer data is encrypted inside the Batch account. By default, accounts are encrypted using a Microsoft managed key. For additional control, a customer-managed key can be used instead.
+        :param pulumi.Input['KeySource'] key_source: Type of the key source.
+        :param pulumi.Input['KeyVaultPropertiesArgs'] key_vault_properties: Additional details when using Microsoft.KeyVault
+        """
+        if key_source is not None:
+            pulumi.set(__self__, "key_source", key_source)
+        if key_vault_properties is not None:
+            pulumi.set(__self__, "key_vault_properties", key_vault_properties)
+
+    @property
+    @pulumi.getter(name="keySource")
+    def key_source(self) -> Optional[pulumi.Input['KeySource']]:
+        """
+        Type of the key source.
+        """
+        return pulumi.get(self, "key_source")
+
+    @key_source.setter
+    def key_source(self, value: Optional[pulumi.Input['KeySource']]):
+        pulumi.set(self, "key_source", value)
+
+    @property
+    @pulumi.getter(name="keyVaultProperties")
+    def key_vault_properties(self) -> Optional[pulumi.Input['KeyVaultPropertiesArgs']]:
+        """
+        Additional details when using Microsoft.KeyVault
+        """
+        return pulumi.get(self, "key_vault_properties")
+
+    @key_vault_properties.setter
+    def key_vault_properties(self, value: Optional[pulumi.Input['KeyVaultPropertiesArgs']]):
+        pulumi.set(self, "key_vault_properties", value)
+
+
+if not MYPY:
+    class EndpointAccessProfileArgsDict(TypedDict):
+        """
+        Network access profile for Batch endpoint.
+        """
+        default_action: pulumi.Input['EndpointAccessDefaultAction']
+        """
+        Default action for endpoint access. It is only applicable when publicNetworkAccess is enabled.
+        """
+        ip_rules: NotRequired[pulumi.Input[Sequence[pulumi.Input['IPRuleArgsDict']]]]
+        """
+        Array of IP ranges to filter client IP address.
+        """
+elif False:
+    EndpointAccessProfileArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class EndpointAccessProfileArgs:
+    def __init__(__self__, *,
+                 default_action: pulumi.Input['EndpointAccessDefaultAction'],
+                 ip_rules: Optional[pulumi.Input[Sequence[pulumi.Input['IPRuleArgs']]]] = None):
+        """
+        Network access profile for Batch endpoint.
+        :param pulumi.Input['EndpointAccessDefaultAction'] default_action: Default action for endpoint access. It is only applicable when publicNetworkAccess is enabled.
+        :param pulumi.Input[Sequence[pulumi.Input['IPRuleArgs']]] ip_rules: Array of IP ranges to filter client IP address.
+        """
+        pulumi.set(__self__, "default_action", default_action)
+        if ip_rules is not None:
+            pulumi.set(__self__, "ip_rules", ip_rules)
+
+    @property
+    @pulumi.getter(name="defaultAction")
+    def default_action(self) -> pulumi.Input['EndpointAccessDefaultAction']:
+        """
+        Default action for endpoint access. It is only applicable when publicNetworkAccess is enabled.
+        """
+        return pulumi.get(self, "default_action")
+
+    @default_action.setter
+    def default_action(self, value: pulumi.Input['EndpointAccessDefaultAction']):
+        pulumi.set(self, "default_action", value)
+
+    @property
+    @pulumi.getter(name="ipRules")
+    def ip_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['IPRuleArgs']]]]:
+        """
+        Array of IP ranges to filter client IP address.
+        """
+        return pulumi.get(self, "ip_rules")
+
+    @ip_rules.setter
+    def ip_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['IPRuleArgs']]]]):
+        pulumi.set(self, "ip_rules", value)
+
+
+if not MYPY:
+    class EnvironmentSettingArgsDict(TypedDict):
+        name: pulumi.Input[str]
+        value: NotRequired[pulumi.Input[str]]
+elif False:
+    EnvironmentSettingArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class EnvironmentSettingArgs:
+    def __init__(__self__, *,
+                 name: pulumi.Input[str],
+                 value: Optional[pulumi.Input[str]] = None):
+        pulumi.set(__self__, "name", name)
+        if value is not None:
+            pulumi.set(__self__, "value", value)
+
+    @property
+    @pulumi.getter
+    def name(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "name", value)
+
+    @property
+    @pulumi.getter
+    def value(self) -> Optional[pulumi.Input[str]]:
+        return pulumi.get(self, "value")
+
+    @value.setter
+    def value(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "value", value)
+
+
+if not MYPY:
+    class FixedScaleSettingsArgsDict(TypedDict):
+        node_deallocation_option: NotRequired[pulumi.Input['ComputeNodeDeallocationOption']]
+        """
+        If omitted, the default value is Requeue.
+        """
+        resize_timeout: NotRequired[pulumi.Input[str]]
+        """
+        The default value is 15 minutes. Timeout values use ISO 8601 format. For example, use PT10M for 10 minutes. The minimum value is 5 minutes. If you specify a value less than 5 minutes, the Batch service rejects the request with an error; if you are calling the REST API directly, the HTTP status code is 400 (Bad Request).
+        """
+        target_dedicated_nodes: NotRequired[pulumi.Input[int]]
+        """
+        At least one of targetDedicatedNodes, targetLowPriorityNodes must be set.
+        """
+        target_low_priority_nodes: NotRequired[pulumi.Input[int]]
+        """
+        At least one of targetDedicatedNodes, targetLowPriorityNodes must be set.
+        """
+elif False:
+    FixedScaleSettingsArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class FixedScaleSettingsArgs:
+    def __init__(__self__, *,
+                 node_deallocation_option: Optional[pulumi.Input['ComputeNodeDeallocationOption']] = None,
+                 resize_timeout: Optional[pulumi.Input[str]] = None,
+                 target_dedicated_nodes: Optional[pulumi.Input[int]] = None,
+                 target_low_priority_nodes: Optional[pulumi.Input[int]] = None):
+        """
+        :param pulumi.Input['ComputeNodeDeallocationOption'] node_deallocation_option: If omitted, the default value is Requeue.
+        :param pulumi.Input[str] resize_timeout: The default value is 15 minutes. Timeout values use ISO 8601 format. For example, use PT10M for 10 minutes. The minimum value is 5 minutes. If you specify a value less than 5 minutes, the Batch service rejects the request with an error; if you are calling the REST API directly, the HTTP status code is 400 (Bad Request).
+        :param pulumi.Input[int] target_dedicated_nodes: At least one of targetDedicatedNodes, targetLowPriorityNodes must be set.
+        :param pulumi.Input[int] target_low_priority_nodes: At least one of targetDedicatedNodes, targetLowPriorityNodes must be set.
+        """
+        if node_deallocation_option is not None:
+            pulumi.set(__self__, "node_deallocation_option", node_deallocation_option)
+        if resize_timeout is None:
+            resize_timeout = 'PT15M'
+        if resize_timeout is not None:
+            pulumi.set(__self__, "resize_timeout", resize_timeout)
+        if target_dedicated_nodes is not None:
+            pulumi.set(__self__, "target_dedicated_nodes", target_dedicated_nodes)
+        if target_low_priority_nodes is not None:
+            pulumi.set(__self__, "target_low_priority_nodes", target_low_priority_nodes)
+
+    @property
+    @pulumi.getter(name="nodeDeallocationOption")
+    def node_deallocation_option(self) -> Optional[pulumi.Input['ComputeNodeDeallocationOption']]:
+        """
+        If omitted, the default value is Requeue.
+        """
+        return pulumi.get(self, "node_deallocation_option")
+
+    @node_deallocation_option.setter
+    def node_deallocation_option(self, value: Optional[pulumi.Input['ComputeNodeDeallocationOption']]):
+        pulumi.set(self, "node_deallocation_option", value)
+
+    @property
+    @pulumi.getter(name="resizeTimeout")
+    def resize_timeout(self) -> Optional[pulumi.Input[str]]:
+        """
+        The default value is 15 minutes. Timeout values use ISO 8601 format. For example, use PT10M for 10 minutes. The minimum value is 5 minutes. If you specify a value less than 5 minutes, the Batch service rejects the request with an error; if you are calling the REST API directly, the HTTP status code is 400 (Bad Request).
+        """
+        return pulumi.get(self, "resize_timeout")
+
+    @resize_timeout.setter
+    def resize_timeout(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "resize_timeout", value)
+
+    @property
+    @pulumi.getter(name="targetDedicatedNodes")
+    def target_dedicated_nodes(self) -> Optional[pulumi.Input[int]]:
+        """
+        At least one of targetDedicatedNodes, targetLowPriorityNodes must be set.
+        """
+        return pulumi.get(self, "target_dedicated_nodes")
+
+    @target_dedicated_nodes.setter
+    def target_dedicated_nodes(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "target_dedicated_nodes", value)
+
+    @property
+    @pulumi.getter(name="targetLowPriorityNodes")
+    def target_low_priority_nodes(self) -> Optional[pulumi.Input[int]]:
+        """
+        At least one of targetDedicatedNodes, targetLowPriorityNodes must be set.
+        """
+        return pulumi.get(self, "target_low_priority_nodes")
+
+    @target_low_priority_nodes.setter
+    def target_low_priority_nodes(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "target_low_priority_nodes", value)
+
+
+if not MYPY:
+    class IPRuleArgsDict(TypedDict):
+        """
+        Rule to filter client IP address.
+        """
+        action: pulumi.Input['IPRuleAction']
+        """
+        Action when client IP address is matched.
+        """
+        value: pulumi.Input[str]
+        """
+        IPv4 address, or IPv4 address range in CIDR format.
+        """
+elif False:
+    IPRuleArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class IPRuleArgs:
+    def __init__(__self__, *,
+                 action: pulumi.Input['IPRuleAction'],
+                 value: pulumi.Input[str]):
+        """
+        Rule to filter client IP address.
+        :param pulumi.Input['IPRuleAction'] action: Action when client IP address is matched.
+        :param pulumi.Input[str] value: IPv4 address, or IPv4 address range in CIDR format.
+        """
+        pulumi.set(__self__, "action", action)
+        pulumi.set(__self__, "value", value)
+
+    @property
+    @pulumi.getter
+    def action(self) -> pulumi.Input['IPRuleAction']:
+        """
+        Action when client IP address is matched.
+        """
+        return pulumi.get(self, "action")
+
+    @action.setter
+    def action(self, value: pulumi.Input['IPRuleAction']):
+        pulumi.set(self, "action", value)
+
+    @property
+    @pulumi.getter
+    def value(self) -> pulumi.Input[str]:
+        """
+        IPv4 address, or IPv4 address range in CIDR format.
+        """
+        return pulumi.get(self, "value")
+
+    @value.setter
+    def value(self, value: pulumi.Input[str]):
+        pulumi.set(self, "value", value)
+
+
+if not MYPY:
+    class ImageReferenceArgsDict(TypedDict):
+        community_gallery_image_id: NotRequired[pulumi.Input[str]]
+        """
+        This property is mutually exclusive with other properties and can be fetched from community gallery image GET call.
+        """
+        id: NotRequired[pulumi.Input[str]]
+        """
+        This property is mutually exclusive with other properties. The Azure Compute Gallery Image must have replicas in the same region as the Azure Batch account. For information about the firewall settings for the Batch node agent to communicate with the Batch service see https://docs.microsoft.com/en-us/azure/batch/batch-api-basics#virtual-network-vnet-and-firewall-configuration.
+        """
+        offer: NotRequired[pulumi.Input[str]]
+        """
+        For example, UbuntuServer or WindowsServer.
+        """
+        publisher: NotRequired[pulumi.Input[str]]
+        """
+        For example, Canonical or MicrosoftWindowsServer.
+        """
+        shared_gallery_image_id: NotRequired[pulumi.Input[str]]
+        """
+        This property is mutually exclusive with other properties and can be fetched from shared gallery image GET call.
+        """
+        sku: NotRequired[pulumi.Input[str]]
+        """
+        For example, 18.04-LTS or 2022-datacenter.
+        """
+        version: NotRequired[pulumi.Input[str]]
+        """
+        A value of 'latest' can be specified to select the latest version of an image. If omitted, the default is 'latest'.
+        """
+elif False:
+    ImageReferenceArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ImageReferenceArgs:
+    def __init__(__self__, *,
+                 community_gallery_image_id: Optional[pulumi.Input[str]] = None,
+                 id: Optional[pulumi.Input[str]] = None,
+                 offer: Optional[pulumi.Input[str]] = None,
+                 publisher: Optional[pulumi.Input[str]] = None,
+                 shared_gallery_image_id: Optional[pulumi.Input[str]] = None,
+                 sku: Optional[pulumi.Input[str]] = None,
+                 version: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] community_gallery_image_id: This property is mutually exclusive with other properties and can be fetched from community gallery image GET call.
+        :param pulumi.Input[str] id: This property is mutually exclusive with other properties. The Azure Compute Gallery Image must have replicas in the same region as the Azure Batch account. For information about the firewall settings for the Batch node agent to communicate with the Batch service see https://docs.microsoft.com/en-us/azure/batch/batch-api-basics#virtual-network-vnet-and-firewall-configuration.
+        :param pulumi.Input[str] offer: For example, UbuntuServer or WindowsServer.
+        :param pulumi.Input[str] publisher: For example, Canonical or MicrosoftWindowsServer.
+        :param pulumi.Input[str] shared_gallery_image_id: This property is mutually exclusive with other properties and can be fetched from shared gallery image GET call.
+        :param pulumi.Input[str] sku: For example, 18.04-LTS or 2022-datacenter.
+        :param pulumi.Input[str] version: A value of 'latest' can be specified to select the latest version of an image. If omitted, the default is 'latest'.
+        """
+        if community_gallery_image_id is not None:
+            pulumi.set(__self__, "community_gallery_image_id", community_gallery_image_id)
+        if id is not None:
+            pulumi.set(__self__, "id", id)
+        if offer is not None:
+            pulumi.set(__self__, "offer", offer)
+        if publisher is not None:
+            pulumi.set(__self__, "publisher", publisher)
+        if shared_gallery_image_id is not None:
+            pulumi.set(__self__, "shared_gallery_image_id", shared_gallery_image_id)
+        if sku is not None:
+            pulumi.set(__self__, "sku", sku)
+        if version is not None:
+            pulumi.set(__self__, "version", version)
+
+    @property
+    @pulumi.getter(name="communityGalleryImageId")
+    def community_gallery_image_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        This property is mutually exclusive with other properties and can be fetched from community gallery image GET call.
+        """
+        return pulumi.get(self, "community_gallery_image_id")
+
+    @community_gallery_image_id.setter
+    def community_gallery_image_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "community_gallery_image_id", value)
+
+    @property
+    @pulumi.getter
+    def id(self) -> Optional[pulumi.Input[str]]:
+        """
+        This property is mutually exclusive with other properties. The Azure Compute Gallery Image must have replicas in the same region as the Azure Batch account. For information about the firewall settings for the Batch node agent to communicate with the Batch service see https://docs.microsoft.com/en-us/azure/batch/batch-api-basics#virtual-network-vnet-and-firewall-configuration.
+        """
+        return pulumi.get(self, "id")
+
+    @id.setter
+    def id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "id", value)
+
+    @property
+    @pulumi.getter
+    def offer(self) -> Optional[pulumi.Input[str]]:
+        """
+        For example, UbuntuServer or WindowsServer.
+        """
+        return pulumi.get(self, "offer")
+
+    @offer.setter
+    def offer(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "offer", value)
+
+    @property
+    @pulumi.getter
+    def publisher(self) -> Optional[pulumi.Input[str]]:
+        """
+        For example, Canonical or MicrosoftWindowsServer.
+        """
+        return pulumi.get(self, "publisher")
+
+    @publisher.setter
+    def publisher(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "publisher", value)
+
+    @property
+    @pulumi.getter(name="sharedGalleryImageId")
+    def shared_gallery_image_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        This property is mutually exclusive with other properties and can be fetched from shared gallery image GET call.
+        """
+        return pulumi.get(self, "shared_gallery_image_id")
+
+    @shared_gallery_image_id.setter
+    def shared_gallery_image_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "shared_gallery_image_id", value)
+
+    @property
+    @pulumi.getter
+    def sku(self) -> Optional[pulumi.Input[str]]:
+        """
+        For example, 18.04-LTS or 2022-datacenter.
+        """
+        return pulumi.get(self, "sku")
+
+    @sku.setter
+    def sku(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "sku", value)
+
+    @property
+    @pulumi.getter
+    def version(self) -> Optional[pulumi.Input[str]]:
+        """
+        A value of 'latest' can be specified to select the latest version of an image. If omitted, the default is 'latest'.
+        """
+        return pulumi.get(self, "version")
+
+    @version.setter
+    def version(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "version", value)
+
+
+if not MYPY:
+    class InboundNatPoolArgsDict(TypedDict):
+        backend_port: pulumi.Input[int]
+        """
+        This must be unique within a Batch pool. Acceptable values are between 1 and 65535 except for 22, 3389, 29876 and 29877 as these are reserved. If any reserved values are provided the request fails with HTTP status code 400.
+        """
+        frontend_port_range_end: pulumi.Input[int]
+        """
+        Acceptable values range between 1 and 65534 except ports from 50000 to 55000 which are reserved by the Batch service. All ranges within a pool must be distinct and cannot overlap. If any reserved or overlapping values are provided the request fails with HTTP status code 400.
+        """
+        frontend_port_range_start: pulumi.Input[int]
+        """
+        Acceptable values range between 1 and 65534 except ports from 50000 to 55000 which are reserved. All ranges within a pool must be distinct and cannot overlap. If any reserved or overlapping values are provided the request fails with HTTP status code 400.
+        """
+        name: pulumi.Input[str]
+        """
+        The name must be unique within a Batch pool, can contain letters, numbers, underscores, periods, and hyphens. Names must start with a letter or number, must end with a letter, number, or underscore, and cannot exceed 77 characters.  If any invalid values are provided the request fails with HTTP status code 400.
+        """
+        protocol: pulumi.Input['InboundEndpointProtocol']
+        network_security_group_rules: NotRequired[pulumi.Input[Sequence[pulumi.Input['NetworkSecurityGroupRuleArgsDict']]]]
+        """
+        The maximum number of rules that can be specified across all the endpoints on a Batch pool is 25. If no network security group rules are specified, a default rule will be created to allow inbound access to the specified backendPort. If the maximum number of network security group rules is exceeded the request fails with HTTP status code 400.
+        """
+elif False:
+    InboundNatPoolArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class InboundNatPoolArgs:
+    def __init__(__self__, *,
+                 backend_port: pulumi.Input[int],
+                 frontend_port_range_end: pulumi.Input[int],
+                 frontend_port_range_start: pulumi.Input[int],
+                 name: pulumi.Input[str],
+                 protocol: pulumi.Input['InboundEndpointProtocol'],
+                 network_security_group_rules: Optional[pulumi.Input[Sequence[pulumi.Input['NetworkSecurityGroupRuleArgs']]]] = None):
+        """
+        :param pulumi.Input[int] backend_port: This must be unique within a Batch pool. Acceptable values are between 1 and 65535 except for 22, 3389, 29876 and 29877 as these are reserved. If any reserved values are provided the request fails with HTTP status code 400.
+        :param pulumi.Input[int] frontend_port_range_end: Acceptable values range between 1 and 65534 except ports from 50000 to 55000 which are reserved by the Batch service. All ranges within a pool must be distinct and cannot overlap. If any reserved or overlapping values are provided the request fails with HTTP status code 400.
+        :param pulumi.Input[int] frontend_port_range_start: Acceptable values range between 1 and 65534 except ports from 50000 to 55000 which are reserved. All ranges within a pool must be distinct and cannot overlap. If any reserved or overlapping values are provided the request fails with HTTP status code 400.
+        :param pulumi.Input[str] name: The name must be unique within a Batch pool, can contain letters, numbers, underscores, periods, and hyphens. Names must start with a letter or number, must end with a letter, number, or underscore, and cannot exceed 77 characters.  If any invalid values are provided the request fails with HTTP status code 400.
+        :param pulumi.Input[Sequence[pulumi.Input['NetworkSecurityGroupRuleArgs']]] network_security_group_rules: The maximum number of rules that can be specified across all the endpoints on a Batch pool is 25. If no network security group rules are specified, a default rule will be created to allow inbound access to the specified backendPort. If the maximum number of network security group rules is exceeded the request fails with HTTP status code 400.
+        """
+        pulumi.set(__self__, "backend_port", backend_port)
+        pulumi.set(__self__, "frontend_port_range_end", frontend_port_range_end)
+        pulumi.set(__self__, "frontend_port_range_start", frontend_port_range_start)
+        pulumi.set(__self__, "name", name)
+        pulumi.set(__self__, "protocol", protocol)
+        if network_security_group_rules is not None:
+            pulumi.set(__self__, "network_security_group_rules", network_security_group_rules)
+
+    @property
+    @pulumi.getter(name="backendPort")
+    def backend_port(self) -> pulumi.Input[int]:
+        """
+        This must be unique within a Batch pool. Acceptable values are between 1 and 65535 except for 22, 3389, 29876 and 29877 as these are reserved. If any reserved values are provided the request fails with HTTP status code 400.
+        """
+        return pulumi.get(self, "backend_port")
+
+    @backend_port.setter
+    def backend_port(self, value: pulumi.Input[int]):
+        pulumi.set(self, "backend_port", value)
+
+    @property
+    @pulumi.getter(name="frontendPortRangeEnd")
+    def frontend_port_range_end(self) -> pulumi.Input[int]:
+        """
+        Acceptable values range between 1 and 65534 except ports from 50000 to 55000 which are reserved by the Batch service. All ranges within a pool must be distinct and cannot overlap. If any reserved or overlapping values are provided the request fails with HTTP status code 400.
+        """
+        return pulumi.get(self, "frontend_port_range_end")
+
+    @frontend_port_range_end.setter
+    def frontend_port_range_end(self, value: pulumi.Input[int]):
+        pulumi.set(self, "frontend_port_range_end", value)
+
+    @property
+    @pulumi.getter(name="frontendPortRangeStart")
+    def frontend_port_range_start(self) -> pulumi.Input[int]:
+        """
+        Acceptable values range between 1 and 65534 except ports from 50000 to 55000 which are reserved. All ranges within a pool must be distinct and cannot overlap. If any reserved or overlapping values are provided the request fails with HTTP status code 400.
+        """
+        return pulumi.get(self, "frontend_port_range_start")
+
+    @frontend_port_range_start.setter
+    def frontend_port_range_start(self, value: pulumi.Input[int]):
+        pulumi.set(self, "frontend_port_range_start", value)
+
+    @property
+    @pulumi.getter
+    def name(self) -> pulumi.Input[str]:
+        """
+        The name must be unique within a Batch pool, can contain letters, numbers, underscores, periods, and hyphens. Names must start with a letter or number, must end with a letter, number, or underscore, and cannot exceed 77 characters.  If any invalid values are provided the request fails with HTTP status code 400.
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "name", value)
+
+    @property
+    @pulumi.getter
+    def protocol(self) -> pulumi.Input['InboundEndpointProtocol']:
+        return pulumi.get(self, "protocol")
+
+    @protocol.setter
+    def protocol(self, value: pulumi.Input['InboundEndpointProtocol']):
+        pulumi.set(self, "protocol", value)
+
+    @property
+    @pulumi.getter(name="networkSecurityGroupRules")
+    def network_security_group_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['NetworkSecurityGroupRuleArgs']]]]:
+        """
+        The maximum number of rules that can be specified across all the endpoints on a Batch pool is 25. If no network security group rules are specified, a default rule will be created to allow inbound access to the specified backendPort. If the maximum number of network security group rules is exceeded the request fails with HTTP status code 400.
+        """
+        return pulumi.get(self, "network_security_group_rules")
+
+    @network_security_group_rules.setter
+    def network_security_group_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['NetworkSecurityGroupRuleArgs']]]]):
+        pulumi.set(self, "network_security_group_rules", value)
+
+
+if not MYPY:
+    class KeyVaultPropertiesArgsDict(TypedDict):
+        """
+        KeyVault configuration when using an encryption KeySource of Microsoft.KeyVault.
+        """
+        key_identifier: NotRequired[pulumi.Input[str]]
+        """
+        Full path to the secret with or without version. Example https://mykeyvault.vault.azure.net/keys/testkey/6e34a81fef704045975661e297a4c053. or https://mykeyvault.vault.azure.net/keys/testkey. To be usable the following prerequisites must be met:
+
+         The Batch Account has a System Assigned identity
+         The account identity has been granted Key/Get, Key/Unwrap and Key/Wrap permissions
+         The KeyVault has soft-delete and purge protection enabled
+        """
+elif False:
+    KeyVaultPropertiesArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class KeyVaultPropertiesArgs:
+    def __init__(__self__, *,
+                 key_identifier: Optional[pulumi.Input[str]] = None):
+        """
+        KeyVault configuration when using an encryption KeySource of Microsoft.KeyVault.
+        :param pulumi.Input[str] key_identifier: Full path to the secret with or without version. Example https://mykeyvault.vault.azure.net/keys/testkey/6e34a81fef704045975661e297a4c053. or https://mykeyvault.vault.azure.net/keys/testkey. To be usable the following prerequisites must be met:
+               
+                The Batch Account has a System Assigned identity
+                The account identity has been granted Key/Get, Key/Unwrap and Key/Wrap permissions
+                The KeyVault has soft-delete and purge protection enabled
+        """
+        if key_identifier is not None:
+            pulumi.set(__self__, "key_identifier", key_identifier)
+
+    @property
+    @pulumi.getter(name="keyIdentifier")
+    def key_identifier(self) -> Optional[pulumi.Input[str]]:
+        """
+        Full path to the secret with or without version. Example https://mykeyvault.vault.azure.net/keys/testkey/6e34a81fef704045975661e297a4c053. or https://mykeyvault.vault.azure.net/keys/testkey. To be usable the following prerequisites must be met:
+
+         The Batch Account has a System Assigned identity
+         The account identity has been granted Key/Get, Key/Unwrap and Key/Wrap permissions
+         The KeyVault has soft-delete and purge protection enabled
+        """
+        return pulumi.get(self, "key_identifier")
+
+    @key_identifier.setter
+    def key_identifier(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "key_identifier", value)
+
+
+if not MYPY:
+    class KeyVaultReferenceArgsDict(TypedDict):
+        """
+        Identifies the Azure key vault associated with a Batch account.
+        """
+        id: pulumi.Input[str]
+        """
+        The resource ID of the Azure key vault associated with the Batch account.
+        """
+        url: pulumi.Input[str]
+        """
+        The URL of the Azure key vault associated with the Batch account.
+        """
+elif False:
+    KeyVaultReferenceArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class KeyVaultReferenceArgs:
+    def __init__(__self__, *,
+                 id: pulumi.Input[str],
+                 url: pulumi.Input[str]):
+        """
+        Identifies the Azure key vault associated with a Batch account.
+        :param pulumi.Input[str] id: The resource ID of the Azure key vault associated with the Batch account.
+        :param pulumi.Input[str] url: The URL of the Azure key vault associated with the Batch account.
+        """
+        pulumi.set(__self__, "id", id)
+        pulumi.set(__self__, "url", url)
+
+    @property
+    @pulumi.getter
+    def id(self) -> pulumi.Input[str]:
+        """
+        The resource ID of the Azure key vault associated with the Batch account.
+        """
+        return pulumi.get(self, "id")
+
+    @id.setter
+    def id(self, value: pulumi.Input[str]):
+        pulumi.set(self, "id", value)
+
+    @property
+    @pulumi.getter
+    def url(self) -> pulumi.Input[str]:
+        """
+        The URL of the Azure key vault associated with the Batch account.
+        """
+        return pulumi.get(self, "url")
+
+    @url.setter
+    def url(self, value: pulumi.Input[str]):
+        pulumi.set(self, "url", value)
+
+
+if not MYPY:
+    class LinuxUserConfigurationArgsDict(TypedDict):
+        gid: NotRequired[pulumi.Input[int]]
+        """
+        The uid and gid properties must be specified together or not at all. If not specified the underlying operating system picks the gid.
+        """
+        ssh_private_key: NotRequired[pulumi.Input[str]]
+        """
+        The private key must not be password protected. The private key is used to automatically configure asymmetric-key based authentication for SSH between nodes in a Linux pool when the pool's enableInterNodeCommunication property is true (it is ignored if enableInterNodeCommunication is false). It does this by placing the key pair into the user's .ssh directory. If not specified, password-less SSH is not configured between nodes (no modification of the user's .ssh directory is done).
+        """
+        uid: NotRequired[pulumi.Input[int]]
+        """
+        The uid and gid properties must be specified together or not at all. If not specified the underlying operating system picks the uid.
+        """
+elif False:
+    LinuxUserConfigurationArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class LinuxUserConfigurationArgs:
+    def __init__(__self__, *,
+                 gid: Optional[pulumi.Input[int]] = None,
+                 ssh_private_key: Optional[pulumi.Input[str]] = None,
+                 uid: Optional[pulumi.Input[int]] = None):
+        """
+        :param pulumi.Input[int] gid: The uid and gid properties must be specified together or not at all. If not specified the underlying operating system picks the gid.
+        :param pulumi.Input[str] ssh_private_key: The private key must not be password protected. The private key is used to automatically configure asymmetric-key based authentication for SSH between nodes in a Linux pool when the pool's enableInterNodeCommunication property is true (it is ignored if enableInterNodeCommunication is false). It does this by placing the key pair into the user's .ssh directory. If not specified, password-less SSH is not configured between nodes (no modification of the user's .ssh directory is done).
+        :param pulumi.Input[int] uid: The uid and gid properties must be specified together or not at all. If not specified the underlying operating system picks the uid.
+        """
+        if gid is not None:
+            pulumi.set(__self__, "gid", gid)
+        if ssh_private_key is not None:
+            pulumi.set(__self__, "ssh_private_key", ssh_private_key)
+        if uid is not None:
+            pulumi.set(__self__, "uid", uid)
+
+    @property
+    @pulumi.getter
+    def gid(self) -> Optional[pulumi.Input[int]]:
+        """
+        The uid and gid properties must be specified together or not at all. If not specified the underlying operating system picks the gid.
+        """
+        return pulumi.get(self, "gid")
+
+    @gid.setter
+    def gid(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "gid", value)
+
+    @property
+    @pulumi.getter(name="sshPrivateKey")
+    def ssh_private_key(self) -> Optional[pulumi.Input[str]]:
+        """
+        The private key must not be password protected. The private key is used to automatically configure asymmetric-key based authentication for SSH between nodes in a Linux pool when the pool's enableInterNodeCommunication property is true (it is ignored if enableInterNodeCommunication is false). It does this by placing the key pair into the user's .ssh directory. If not specified, password-less SSH is not configured between nodes (no modification of the user's .ssh directory is done).
+        """
+        return pulumi.get(self, "ssh_private_key")
+
+    @ssh_private_key.setter
+    def ssh_private_key(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "ssh_private_key", value)
+
+    @property
+    @pulumi.getter
+    def uid(self) -> Optional[pulumi.Input[int]]:
+        """
+        The uid and gid properties must be specified together or not at all. If not specified the underlying operating system picks the uid.
+        """
+        return pulumi.get(self, "uid")
+
+    @uid.setter
+    def uid(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "uid", value)
+
+
+if not MYPY:
+    class ManagedDiskArgsDict(TypedDict):
+        security_profile: NotRequired[pulumi.Input['VMDiskSecurityProfileArgsDict']]
+        """
+        Specifies the security profile settings for the managed disk. **Note**: It can only be set for Confidential VMs and is required when using Confidential VMs.
+        """
+        storage_account_type: NotRequired[pulumi.Input['StorageAccountType']]
+elif False:
+    ManagedDiskArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ManagedDiskArgs:
+    def __init__(__self__, *,
+                 security_profile: Optional[pulumi.Input['VMDiskSecurityProfileArgs']] = None,
+                 storage_account_type: Optional[pulumi.Input['StorageAccountType']] = None):
+        """
+        :param pulumi.Input['VMDiskSecurityProfileArgs'] security_profile: Specifies the security profile settings for the managed disk. **Note**: It can only be set for Confidential VMs and is required when using Confidential VMs.
+        """
+        if security_profile is not None:
+            pulumi.set(__self__, "security_profile", security_profile)
+        if storage_account_type is not None:
+            pulumi.set(__self__, "storage_account_type", storage_account_type)
+
+    @property
+    @pulumi.getter(name="securityProfile")
+    def security_profile(self) -> Optional[pulumi.Input['VMDiskSecurityProfileArgs']]:
+        """
+        Specifies the security profile settings for the managed disk. **Note**: It can only be set for Confidential VMs and is required when using Confidential VMs.
+        """
+        return pulumi.get(self, "security_profile")
+
+    @security_profile.setter
+    def security_profile(self, value: Optional[pulumi.Input['VMDiskSecurityProfileArgs']]):
+        pulumi.set(self, "security_profile", value)
+
+    @property
+    @pulumi.getter(name="storageAccountType")
+    def storage_account_type(self) -> Optional[pulumi.Input['StorageAccountType']]:
+        return pulumi.get(self, "storage_account_type")
+
+    @storage_account_type.setter
+    def storage_account_type(self, value: Optional[pulumi.Input['StorageAccountType']]):
+        pulumi.set(self, "storage_account_type", value)
+
+
+if not MYPY:
+    class MetadataItemArgsDict(TypedDict):
+        """
+        The Batch service does not assign any meaning to this metadata; it is solely for the use of user code.
+        """
+        name: pulumi.Input[str]
+        value: pulumi.Input[str]
+elif False:
+    MetadataItemArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class MetadataItemArgs:
+    def __init__(__self__, *,
+                 name: pulumi.Input[str],
+                 value: pulumi.Input[str]):
+        """
+        The Batch service does not assign any meaning to this metadata; it is solely for the use of user code.
+        """
+        pulumi.set(__self__, "name", name)
+        pulumi.set(__self__, "value", value)
+
+    @property
+    @pulumi.getter
+    def name(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "name", value)
+
+    @property
+    @pulumi.getter
+    def value(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "value")
+
+    @value.setter
+    def value(self, value: pulumi.Input[str]):
+        pulumi.set(self, "value", value)
+
+
+if not MYPY:
+    class MountConfigurationArgsDict(TypedDict):
+        azure_blob_file_system_configuration: NotRequired[pulumi.Input['AzureBlobFileSystemConfigurationArgsDict']]
+        """
+        This property is mutually exclusive with all other properties.
+        """
+        azure_file_share_configuration: NotRequired[pulumi.Input['AzureFileShareConfigurationArgsDict']]
+        """
+        This property is mutually exclusive with all other properties.
+        """
+        cifs_mount_configuration: NotRequired[pulumi.Input['CIFSMountConfigurationArgsDict']]
+        """
+        This property is mutually exclusive with all other properties.
+        """
+        nfs_mount_configuration: NotRequired[pulumi.Input['NFSMountConfigurationArgsDict']]
+        """
+        This property is mutually exclusive with all other properties.
+        """
+elif False:
+    MountConfigurationArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class MountConfigurationArgs:
+    def __init__(__self__, *,
+                 azure_blob_file_system_configuration: Optional[pulumi.Input['AzureBlobFileSystemConfigurationArgs']] = None,
+                 azure_file_share_configuration: Optional[pulumi.Input['AzureFileShareConfigurationArgs']] = None,
+                 cifs_mount_configuration: Optional[pulumi.Input['CIFSMountConfigurationArgs']] = None,
+                 nfs_mount_configuration: Optional[pulumi.Input['NFSMountConfigurationArgs']] = None):
+        """
+        :param pulumi.Input['AzureBlobFileSystemConfigurationArgs'] azure_blob_file_system_configuration: This property is mutually exclusive with all other properties.
+        :param pulumi.Input['AzureFileShareConfigurationArgs'] azure_file_share_configuration: This property is mutually exclusive with all other properties.
+        :param pulumi.Input['CIFSMountConfigurationArgs'] cifs_mount_configuration: This property is mutually exclusive with all other properties.
+        :param pulumi.Input['NFSMountConfigurationArgs'] nfs_mount_configuration: This property is mutually exclusive with all other properties.
+        """
+        if azure_blob_file_system_configuration is not None:
+            pulumi.set(__self__, "azure_blob_file_system_configuration", azure_blob_file_system_configuration)
+        if azure_file_share_configuration is not None:
+            pulumi.set(__self__, "azure_file_share_configuration", azure_file_share_configuration)
+        if cifs_mount_configuration is not None:
+            pulumi.set(__self__, "cifs_mount_configuration", cifs_mount_configuration)
+        if nfs_mount_configuration is not None:
+            pulumi.set(__self__, "nfs_mount_configuration", nfs_mount_configuration)
+
+    @property
+    @pulumi.getter(name="azureBlobFileSystemConfiguration")
+    def azure_blob_file_system_configuration(self) -> Optional[pulumi.Input['AzureBlobFileSystemConfigurationArgs']]:
+        """
+        This property is mutually exclusive with all other properties.
+        """
+        return pulumi.get(self, "azure_blob_file_system_configuration")
+
+    @azure_blob_file_system_configuration.setter
+    def azure_blob_file_system_configuration(self, value: Optional[pulumi.Input['AzureBlobFileSystemConfigurationArgs']]):
+        pulumi.set(self, "azure_blob_file_system_configuration", value)
+
+    @property
+    @pulumi.getter(name="azureFileShareConfiguration")
+    def azure_file_share_configuration(self) -> Optional[pulumi.Input['AzureFileShareConfigurationArgs']]:
+        """
+        This property is mutually exclusive with all other properties.
+        """
+        return pulumi.get(self, "azure_file_share_configuration")
+
+    @azure_file_share_configuration.setter
+    def azure_file_share_configuration(self, value: Optional[pulumi.Input['AzureFileShareConfigurationArgs']]):
+        pulumi.set(self, "azure_file_share_configuration", value)
+
+    @property
+    @pulumi.getter(name="cifsMountConfiguration")
+    def cifs_mount_configuration(self) -> Optional[pulumi.Input['CIFSMountConfigurationArgs']]:
+        """
+        This property is mutually exclusive with all other properties.
+        """
+        return pulumi.get(self, "cifs_mount_configuration")
+
+    @cifs_mount_configuration.setter
+    def cifs_mount_configuration(self, value: Optional[pulumi.Input['CIFSMountConfigurationArgs']]):
+        pulumi.set(self, "cifs_mount_configuration", value)
+
+    @property
+    @pulumi.getter(name="nfsMountConfiguration")
+    def nfs_mount_configuration(self) -> Optional[pulumi.Input['NFSMountConfigurationArgs']]:
+        """
+        This property is mutually exclusive with all other properties.
+        """
+        return pulumi.get(self, "nfs_mount_configuration")
+
+    @nfs_mount_configuration.setter
+    def nfs_mount_configuration(self, value: Optional[pulumi.Input['NFSMountConfigurationArgs']]):
+        pulumi.set(self, "nfs_mount_configuration", value)
+
+
+if not MYPY:
+    class NFSMountConfigurationArgsDict(TypedDict):
+        relative_mount_path: pulumi.Input[str]
+        """
+        All file systems are mounted relative to the Batch mounts directory, accessible via the AZ_BATCH_NODE_MOUNTS_DIR environment variable.
+        """
+        source: pulumi.Input[str]
+        mount_options: NotRequired[pulumi.Input[str]]
+        """
+        These are 'net use' options in Windows and 'mount' options in Linux.
+        """
+elif False:
+    NFSMountConfigurationArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class NFSMountConfigurationArgs:
+    def __init__(__self__, *,
+                 relative_mount_path: pulumi.Input[str],
+                 source: pulumi.Input[str],
+                 mount_options: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] relative_mount_path: All file systems are mounted relative to the Batch mounts directory, accessible via the AZ_BATCH_NODE_MOUNTS_DIR environment variable.
+        :param pulumi.Input[str] mount_options: These are 'net use' options in Windows and 'mount' options in Linux.
+        """
+        pulumi.set(__self__, "relative_mount_path", relative_mount_path)
+        pulumi.set(__self__, "source", source)
+        if mount_options is not None:
+            pulumi.set(__self__, "mount_options", mount_options)
+
+    @property
+    @pulumi.getter(name="relativeMountPath")
+    def relative_mount_path(self) -> pulumi.Input[str]:
+        """
+        All file systems are mounted relative to the Batch mounts directory, accessible via the AZ_BATCH_NODE_MOUNTS_DIR environment variable.
+        """
+        return pulumi.get(self, "relative_mount_path")
+
+    @relative_mount_path.setter
+    def relative_mount_path(self, value: pulumi.Input[str]):
+        pulumi.set(self, "relative_mount_path", value)
+
+    @property
+    @pulumi.getter
+    def source(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "source")
+
+    @source.setter
+    def source(self, value: pulumi.Input[str]):
+        pulumi.set(self, "source", value)
+
+    @property
+    @pulumi.getter(name="mountOptions")
+    def mount_options(self) -> Optional[pulumi.Input[str]]:
+        """
+        These are 'net use' options in Windows and 'mount' options in Linux.
+        """
+        return pulumi.get(self, "mount_options")
+
+    @mount_options.setter
+    def mount_options(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "mount_options", value)
+
+
+if not MYPY:
+    class NetworkConfigurationArgsDict(TypedDict):
+        """
+        The network configuration for a pool.
+        """
+        dynamic_vnet_assignment_scope: NotRequired[pulumi.Input['DynamicVNetAssignmentScope']]
+        enable_accelerated_networking: NotRequired[pulumi.Input[bool]]
+        """
+        Accelerated networking enables single root I/O virtualization (SR-IOV) to a VM, which may lead to improved networking performance. For more details, see: https://learn.microsoft.com/azure/virtual-network/accelerated-networking-overview.
+        """
+        endpoint_configuration: NotRequired[pulumi.Input['PoolEndpointConfigurationArgsDict']]
+        public_ip_address_configuration: NotRequired[pulumi.Input['PublicIPAddressConfigurationArgsDict']]
+        """
+        The public IP Address configuration of the networking configuration of a Pool.
+        """
+        subnet_id: NotRequired[pulumi.Input[str]]
+        """
+        The virtual network must be in the same region and subscription as the Azure Batch account. The specified subnet should have enough free IP addresses to accommodate the number of nodes in the pool. If the subnet doesn't have enough free IP addresses, the pool will partially allocate compute nodes and a resize error will occur. The 'MicrosoftAzureBatch' service principal must have the 'Classic Virtual Machine Contributor' Role-Based Access Control (RBAC) role for the specified VNet. The specified subnet must allow communication from the Azure Batch service to be able to schedule tasks on the compute nodes. This can be verified by checking if the specified VNet has any associated Network Security Groups (NSG). If communication to the compute nodes in the specified subnet is denied by an NSG, then the Batch service will set the state of the compute nodes to unusable. If the specified VNet has any associated Network Security Groups (NSG), then a few reserved system ports must be enabled for inbound communication. Enable ports 29876 and 29877, as well as port 22 for Linux and port 3389 for Windows. Also enable outbound connections to Azure Storage on port 443. For more details see: https://docs.microsoft.com/en-us/azure/batch/batch-api-basics#virtual-network-vnet-and-firewall-configuration
+        """
+elif False:
+    NetworkConfigurationArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class NetworkConfigurationArgs:
+    def __init__(__self__, *,
+                 dynamic_vnet_assignment_scope: Optional[pulumi.Input['DynamicVNetAssignmentScope']] = None,
+                 enable_accelerated_networking: Optional[pulumi.Input[bool]] = None,
+                 endpoint_configuration: Optional[pulumi.Input['PoolEndpointConfigurationArgs']] = None,
+                 public_ip_address_configuration: Optional[pulumi.Input['PublicIPAddressConfigurationArgs']] = None,
+                 subnet_id: Optional[pulumi.Input[str]] = None):
+        """
+        The network configuration for a pool.
+        :param pulumi.Input[bool] enable_accelerated_networking: Accelerated networking enables single root I/O virtualization (SR-IOV) to a VM, which may lead to improved networking performance. For more details, see: https://learn.microsoft.com/azure/virtual-network/accelerated-networking-overview.
+        :param pulumi.Input['PublicIPAddressConfigurationArgs'] public_ip_address_configuration: The public IP Address configuration of the networking configuration of a Pool.
+        :param pulumi.Input[str] subnet_id: The virtual network must be in the same region and subscription as the Azure Batch account. The specified subnet should have enough free IP addresses to accommodate the number of nodes in the pool. If the subnet doesn't have enough free IP addresses, the pool will partially allocate compute nodes and a resize error will occur. The 'MicrosoftAzureBatch' service principal must have the 'Classic Virtual Machine Contributor' Role-Based Access Control (RBAC) role for the specified VNet. The specified subnet must allow communication from the Azure Batch service to be able to schedule tasks on the compute nodes. This can be verified by checking if the specified VNet has any associated Network Security Groups (NSG). If communication to the compute nodes in the specified subnet is denied by an NSG, then the Batch service will set the state of the compute nodes to unusable. If the specified VNet has any associated Network Security Groups (NSG), then a few reserved system ports must be enabled for inbound communication. Enable ports 29876 and 29877, as well as port 22 for Linux and port 3389 for Windows. Also enable outbound connections to Azure Storage on port 443. For more details see: https://docs.microsoft.com/en-us/azure/batch/batch-api-basics#virtual-network-vnet-and-firewall-configuration
+        """
+        if dynamic_vnet_assignment_scope is None:
+            dynamic_vnet_assignment_scope = 'none'
+        if dynamic_vnet_assignment_scope is not None:
+            pulumi.set(__self__, "dynamic_vnet_assignment_scope", dynamic_vnet_assignment_scope)
+        if enable_accelerated_networking is not None:
+            pulumi.set(__self__, "enable_accelerated_networking", enable_accelerated_networking)
+        if endpoint_configuration is not None:
+            pulumi.set(__self__, "endpoint_configuration", endpoint_configuration)
+        if public_ip_address_configuration is not None:
+            pulumi.set(__self__, "public_ip_address_configuration", public_ip_address_configuration)
+        if subnet_id is not None:
+            pulumi.set(__self__, "subnet_id", subnet_id)
+
+    @property
+    @pulumi.getter(name="dynamicVnetAssignmentScope")
+    def dynamic_vnet_assignment_scope(self) -> Optional[pulumi.Input['DynamicVNetAssignmentScope']]:
+        return pulumi.get(self, "dynamic_vnet_assignment_scope")
+
+    @dynamic_vnet_assignment_scope.setter
+    def dynamic_vnet_assignment_scope(self, value: Optional[pulumi.Input['DynamicVNetAssignmentScope']]):
+        pulumi.set(self, "dynamic_vnet_assignment_scope", value)
+
+    @property
+    @pulumi.getter(name="enableAcceleratedNetworking")
+    def enable_accelerated_networking(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Accelerated networking enables single root I/O virtualization (SR-IOV) to a VM, which may lead to improved networking performance. For more details, see: https://learn.microsoft.com/azure/virtual-network/accelerated-networking-overview.
+        """
+        return pulumi.get(self, "enable_accelerated_networking")
+
+    @enable_accelerated_networking.setter
+    def enable_accelerated_networking(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "enable_accelerated_networking", value)
+
+    @property
+    @pulumi.getter(name="endpointConfiguration")
+    def endpoint_configuration(self) -> Optional[pulumi.Input['PoolEndpointConfigurationArgs']]:
+        return pulumi.get(self, "endpoint_configuration")
+
+    @endpoint_configuration.setter
+    def endpoint_configuration(self, value: Optional[pulumi.Input['PoolEndpointConfigurationArgs']]):
+        pulumi.set(self, "endpoint_configuration", value)
+
+    @property
+    @pulumi.getter(name="publicIPAddressConfiguration")
+    def public_ip_address_configuration(self) -> Optional[pulumi.Input['PublicIPAddressConfigurationArgs']]:
+        """
+        The public IP Address configuration of the networking configuration of a Pool.
+        """
+        return pulumi.get(self, "public_ip_address_configuration")
+
+    @public_ip_address_configuration.setter
+    def public_ip_address_configuration(self, value: Optional[pulumi.Input['PublicIPAddressConfigurationArgs']]):
+        pulumi.set(self, "public_ip_address_configuration", value)
+
+    @property
+    @pulumi.getter(name="subnetId")
+    def subnet_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        The virtual network must be in the same region and subscription as the Azure Batch account. The specified subnet should have enough free IP addresses to accommodate the number of nodes in the pool. If the subnet doesn't have enough free IP addresses, the pool will partially allocate compute nodes and a resize error will occur. The 'MicrosoftAzureBatch' service principal must have the 'Classic Virtual Machine Contributor' Role-Based Access Control (RBAC) role for the specified VNet. The specified subnet must allow communication from the Azure Batch service to be able to schedule tasks on the compute nodes. This can be verified by checking if the specified VNet has any associated Network Security Groups (NSG). If communication to the compute nodes in the specified subnet is denied by an NSG, then the Batch service will set the state of the compute nodes to unusable. If the specified VNet has any associated Network Security Groups (NSG), then a few reserved system ports must be enabled for inbound communication. Enable ports 29876 and 29877, as well as port 22 for Linux and port 3389 for Windows. Also enable outbound connections to Azure Storage on port 443. For more details see: https://docs.microsoft.com/en-us/azure/batch/batch-api-basics#virtual-network-vnet-and-firewall-configuration
+        """
+        return pulumi.get(self, "subnet_id")
+
+    @subnet_id.setter
+    def subnet_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "subnet_id", value)
+
+
+if not MYPY:
+    class NetworkProfileArgsDict(TypedDict):
+        """
+        Network profile for Batch account, which contains network rule settings for each endpoint.
+        """
+        account_access: NotRequired[pulumi.Input['EndpointAccessProfileArgsDict']]
+        """
+        Network access profile for batchAccount endpoint (Batch account data plane API).
+        """
+        node_management_access: NotRequired[pulumi.Input['EndpointAccessProfileArgsDict']]
+        """
+        Network access profile for nodeManagement endpoint (Batch service managing compute nodes for Batch pools).
+        """
+elif False:
+    NetworkProfileArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class NetworkProfileArgs:
+    def __init__(__self__, *,
+                 account_access: Optional[pulumi.Input['EndpointAccessProfileArgs']] = None,
+                 node_management_access: Optional[pulumi.Input['EndpointAccessProfileArgs']] = None):
+        """
+        Network profile for Batch account, which contains network rule settings for each endpoint.
+        :param pulumi.Input['EndpointAccessProfileArgs'] account_access: Network access profile for batchAccount endpoint (Batch account data plane API).
+        :param pulumi.Input['EndpointAccessProfileArgs'] node_management_access: Network access profile for nodeManagement endpoint (Batch service managing compute nodes for Batch pools).
+        """
+        if account_access is not None:
+            pulumi.set(__self__, "account_access", account_access)
+        if node_management_access is not None:
+            pulumi.set(__self__, "node_management_access", node_management_access)
+
+    @property
+    @pulumi.getter(name="accountAccess")
+    def account_access(self) -> Optional[pulumi.Input['EndpointAccessProfileArgs']]:
+        """
+        Network access profile for batchAccount endpoint (Batch account data plane API).
+        """
+        return pulumi.get(self, "account_access")
+
+    @account_access.setter
+    def account_access(self, value: Optional[pulumi.Input['EndpointAccessProfileArgs']]):
+        pulumi.set(self, "account_access", value)
+
+    @property
+    @pulumi.getter(name="nodeManagementAccess")
+    def node_management_access(self) -> Optional[pulumi.Input['EndpointAccessProfileArgs']]:
+        """
+        Network access profile for nodeManagement endpoint (Batch service managing compute nodes for Batch pools).
+        """
+        return pulumi.get(self, "node_management_access")
+
+    @node_management_access.setter
+    def node_management_access(self, value: Optional[pulumi.Input['EndpointAccessProfileArgs']]):
+        pulumi.set(self, "node_management_access", value)
+
+
+if not MYPY:
+    class NetworkSecurityGroupRuleArgsDict(TypedDict):
+        access: pulumi.Input['NetworkSecurityGroupRuleAccess']
+        priority: pulumi.Input[int]
+        """
+        Priorities within a pool must be unique and are evaluated in order of priority. The lower the number the higher the priority. For example, rules could be specified with order numbers of 150, 250, and 350. The rule with the order number of 150 takes precedence over the rule that has an order of 250. Allowed priorities are 150 to 4096. If any reserved or duplicate values are provided the request fails with HTTP status code 400.
+        """
+        source_address_prefix: pulumi.Input[str]
+        """
+        Valid values are a single IP address (i.e. 10.10.10.10), IP subnet (i.e. 192.168.1.0/24), default tag, or * (for all addresses).  If any other values are provided the request fails with HTTP status code 400.
+        """
+        source_port_ranges: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        Valid values are '*' (for all ports 0 - 65535) or arrays of ports or port ranges (i.e. 100-200). The ports should in the range of 0 to 65535 and the port ranges or ports can't overlap. If any other values are provided the request fails with HTTP status code 400. Default value will be *.
+        """
+elif False:
+    NetworkSecurityGroupRuleArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class NetworkSecurityGroupRuleArgs:
+    def __init__(__self__, *,
+                 access: pulumi.Input['NetworkSecurityGroupRuleAccess'],
+                 priority: pulumi.Input[int],
+                 source_address_prefix: pulumi.Input[str],
+                 source_port_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
+        """
+        :param pulumi.Input[int] priority: Priorities within a pool must be unique and are evaluated in order of priority. The lower the number the higher the priority. For example, rules could be specified with order numbers of 150, 250, and 350. The rule with the order number of 150 takes precedence over the rule that has an order of 250. Allowed priorities are 150 to 4096. If any reserved or duplicate values are provided the request fails with HTTP status code 400.
+        :param pulumi.Input[str] source_address_prefix: Valid values are a single IP address (i.e. 10.10.10.10), IP subnet (i.e. 192.168.1.0/24), default tag, or * (for all addresses).  If any other values are provided the request fails with HTTP status code 400.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] source_port_ranges: Valid values are '*' (for all ports 0 - 65535) or arrays of ports or port ranges (i.e. 100-200). The ports should in the range of 0 to 65535 and the port ranges or ports can't overlap. If any other values are provided the request fails with HTTP status code 400. Default value will be *.
+        """
+        pulumi.set(__self__, "access", access)
+        pulumi.set(__self__, "priority", priority)
+        pulumi.set(__self__, "source_address_prefix", source_address_prefix)
+        if source_port_ranges is not None:
+            pulumi.set(__self__, "source_port_ranges", source_port_ranges)
+
+    @property
+    @pulumi.getter
+    def access(self) -> pulumi.Input['NetworkSecurityGroupRuleAccess']:
+        return pulumi.get(self, "access")
+
+    @access.setter
+    def access(self, value: pulumi.Input['NetworkSecurityGroupRuleAccess']):
+        pulumi.set(self, "access", value)
+
+    @property
+    @pulumi.getter
+    def priority(self) -> pulumi.Input[int]:
+        """
+        Priorities within a pool must be unique and are evaluated in order of priority. The lower the number the higher the priority. For example, rules could be specified with order numbers of 150, 250, and 350. The rule with the order number of 150 takes precedence over the rule that has an order of 250. Allowed priorities are 150 to 4096. If any reserved or duplicate values are provided the request fails with HTTP status code 400.
+        """
+        return pulumi.get(self, "priority")
+
+    @priority.setter
+    def priority(self, value: pulumi.Input[int]):
+        pulumi.set(self, "priority", value)
+
+    @property
+    @pulumi.getter(name="sourceAddressPrefix")
+    def source_address_prefix(self) -> pulumi.Input[str]:
+        """
+        Valid values are a single IP address (i.e. 10.10.10.10), IP subnet (i.e. 192.168.1.0/24), default tag, or * (for all addresses).  If any other values are provided the request fails with HTTP status code 400.
+        """
+        return pulumi.get(self, "source_address_prefix")
+
+    @source_address_prefix.setter
+    def source_address_prefix(self, value: pulumi.Input[str]):
+        pulumi.set(self, "source_address_prefix", value)
+
+    @property
+    @pulumi.getter(name="sourcePortRanges")
+    def source_port_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        Valid values are '*' (for all ports 0 - 65535) or arrays of ports or port ranges (i.e. 100-200). The ports should in the range of 0 to 65535 and the port ranges or ports can't overlap. If any other values are provided the request fails with HTTP status code 400. Default value will be *.
+        """
+        return pulumi.get(self, "source_port_ranges")
+
+    @source_port_ranges.setter
+    def source_port_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "source_port_ranges", value)
+
+
+if not MYPY:
+    class NodePlacementConfigurationArgsDict(TypedDict):
+        """
+        Allocation configuration used by Batch Service to provision the nodes.
+        """
+        policy: NotRequired[pulumi.Input['NodePlacementPolicyType']]
+        """
+        Allocation policy used by Batch Service to provision the nodes. If not specified, Batch will use the regional policy.
+        """
+elif False:
+    NodePlacementConfigurationArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class NodePlacementConfigurationArgs:
+    def __init__(__self__, *,
+                 policy: Optional[pulumi.Input['NodePlacementPolicyType']] = None):
+        """
+        Allocation configuration used by Batch Service to provision the nodes.
+        :param pulumi.Input['NodePlacementPolicyType'] policy: Allocation policy used by Batch Service to provision the nodes. If not specified, Batch will use the regional policy.
+        """
+        if policy is not None:
+            pulumi.set(__self__, "policy", policy)
+
+    @property
+    @pulumi.getter
+    def policy(self) -> Optional[pulumi.Input['NodePlacementPolicyType']]:
+        """
+        Allocation policy used by Batch Service to provision the nodes. If not specified, Batch will use the regional policy.
+        """
+        return pulumi.get(self, "policy")
+
+    @policy.setter
+    def policy(self, value: Optional[pulumi.Input['NodePlacementPolicyType']]):
+        pulumi.set(self, "policy", value)
+
+
+if not MYPY:
+    class OSDiskArgsDict(TypedDict):
+        caching: NotRequired[pulumi.Input['CachingType']]
+        disk_size_gb: NotRequired[pulumi.Input[int]]
+        ephemeral_os_disk_settings: NotRequired[pulumi.Input['DiffDiskSettingsArgsDict']]
+        managed_disk: NotRequired[pulumi.Input['ManagedDiskArgsDict']]
+        write_accelerator_enabled: NotRequired[pulumi.Input[bool]]
+elif False:
+    OSDiskArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class OSDiskArgs:
+    def __init__(__self__, *,
+                 caching: Optional[pulumi.Input['CachingType']] = None,
+                 disk_size_gb: Optional[pulumi.Input[int]] = None,
+                 ephemeral_os_disk_settings: Optional[pulumi.Input['DiffDiskSettingsArgs']] = None,
+                 managed_disk: Optional[pulumi.Input['ManagedDiskArgs']] = None,
+                 write_accelerator_enabled: Optional[pulumi.Input[bool]] = None):
+        if caching is not None:
+            pulumi.set(__self__, "caching", caching)
+        if disk_size_gb is not None:
+            pulumi.set(__self__, "disk_size_gb", disk_size_gb)
+        if ephemeral_os_disk_settings is not None:
+            pulumi.set(__self__, "ephemeral_os_disk_settings", ephemeral_os_disk_settings)
+        if managed_disk is not None:
+            pulumi.set(__self__, "managed_disk", managed_disk)
+        if write_accelerator_enabled is not None:
+            pulumi.set(__self__, "write_accelerator_enabled", write_accelerator_enabled)
+
+    @property
+    @pulumi.getter
+    def caching(self) -> Optional[pulumi.Input['CachingType']]:
+        return pulumi.get(self, "caching")
+
+    @caching.setter
+    def caching(self, value: Optional[pulumi.Input['CachingType']]):
+        pulumi.set(self, "caching", value)
+
+    @property
+    @pulumi.getter(name="diskSizeGB")
+    def disk_size_gb(self) -> Optional[pulumi.Input[int]]:
+        return pulumi.get(self, "disk_size_gb")
+
+    @disk_size_gb.setter
+    def disk_size_gb(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "disk_size_gb", value)
+
+    @property
+    @pulumi.getter(name="ephemeralOSDiskSettings")
+    def ephemeral_os_disk_settings(self) -> Optional[pulumi.Input['DiffDiskSettingsArgs']]:
+        return pulumi.get(self, "ephemeral_os_disk_settings")
+
+    @ephemeral_os_disk_settings.setter
+    def ephemeral_os_disk_settings(self, value: Optional[pulumi.Input['DiffDiskSettingsArgs']]):
+        pulumi.set(self, "ephemeral_os_disk_settings", value)
+
+    @property
+    @pulumi.getter(name="managedDisk")
+    def managed_disk(self) -> Optional[pulumi.Input['ManagedDiskArgs']]:
+        return pulumi.get(self, "managed_disk")
+
+    @managed_disk.setter
+    def managed_disk(self, value: Optional[pulumi.Input['ManagedDiskArgs']]):
+        pulumi.set(self, "managed_disk", value)
+
+    @property
+    @pulumi.getter(name="writeAcceleratorEnabled")
+    def write_accelerator_enabled(self) -> Optional[pulumi.Input[bool]]:
+        return pulumi.get(self, "write_accelerator_enabled")
+
+    @write_accelerator_enabled.setter
+    def write_accelerator_enabled(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "write_accelerator_enabled", value)
+
+
+if not MYPY:
+    class PoolEndpointConfigurationArgsDict(TypedDict):
+        inbound_nat_pools: pulumi.Input[Sequence[pulumi.Input['InboundNatPoolArgsDict']]]
+        """
+        The maximum number of inbound NAT pools per Batch pool is 5. If the maximum number of inbound NAT pools is exceeded the request fails with HTTP status code 400. This cannot be specified if the IPAddressProvisioningType is NoPublicIPAddresses.
+        """
+elif False:
+    PoolEndpointConfigurationArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class PoolEndpointConfigurationArgs:
+    def __init__(__self__, *,
+                 inbound_nat_pools: pulumi.Input[Sequence[pulumi.Input['InboundNatPoolArgs']]]):
+        """
+        :param pulumi.Input[Sequence[pulumi.Input['InboundNatPoolArgs']]] inbound_nat_pools: The maximum number of inbound NAT pools per Batch pool is 5. If the maximum number of inbound NAT pools is exceeded the request fails with HTTP status code 400. This cannot be specified if the IPAddressProvisioningType is NoPublicIPAddresses.
+        """
+        pulumi.set(__self__, "inbound_nat_pools", inbound_nat_pools)
+
+    @property
+    @pulumi.getter(name="inboundNatPools")
+    def inbound_nat_pools(self) -> pulumi.Input[Sequence[pulumi.Input['InboundNatPoolArgs']]]:
+        """
+        The maximum number of inbound NAT pools per Batch pool is 5. If the maximum number of inbound NAT pools is exceeded the request fails with HTTP status code 400. This cannot be specified if the IPAddressProvisioningType is NoPublicIPAddresses.
+        """
+        return pulumi.get(self, "inbound_nat_pools")
+
+    @inbound_nat_pools.setter
+    def inbound_nat_pools(self, value: pulumi.Input[Sequence[pulumi.Input['InboundNatPoolArgs']]]):
+        pulumi.set(self, "inbound_nat_pools", value)
+
+
+if not MYPY:
+    class PublicIPAddressConfigurationArgsDict(TypedDict):
+        """
+        The public IP Address configuration of the networking configuration of a Pool.
+        """
+        ip_address_ids: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        The number of IPs specified here limits the maximum size of the Pool - 100 dedicated nodes or 100 Spot/low-priority nodes can be allocated for each public IP. For example, a pool needing 250 dedicated VMs would need at least 3 public IPs specified. Each element of this collection is of the form: /subscriptions/{subscription}/resourceGroups/{group}/providers/Microsoft.Network/publicIPAddresses/{ip}.
+        """
+        provision: NotRequired[pulumi.Input['IPAddressProvisioningType']]
+        """
+        The default value is BatchManaged
+        """
+elif False:
+    PublicIPAddressConfigurationArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class PublicIPAddressConfigurationArgs:
+    def __init__(__self__, *,
+                 ip_address_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 provision: Optional[pulumi.Input['IPAddressProvisioningType']] = None):
+        """
+        The public IP Address configuration of the networking configuration of a Pool.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] ip_address_ids: The number of IPs specified here limits the maximum size of the Pool - 100 dedicated nodes or 100 Spot/low-priority nodes can be allocated for each public IP. For example, a pool needing 250 dedicated VMs would need at least 3 public IPs specified. Each element of this collection is of the form: /subscriptions/{subscription}/resourceGroups/{group}/providers/Microsoft.Network/publicIPAddresses/{ip}.
+        :param pulumi.Input['IPAddressProvisioningType'] provision: The default value is BatchManaged
+        """
+        if ip_address_ids is not None:
+            pulumi.set(__self__, "ip_address_ids", ip_address_ids)
+        if provision is not None:
+            pulumi.set(__self__, "provision", provision)
+
+    @property
+    @pulumi.getter(name="ipAddressIds")
+    def ip_address_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        The number of IPs specified here limits the maximum size of the Pool - 100 dedicated nodes or 100 Spot/low-priority nodes can be allocated for each public IP. For example, a pool needing 250 dedicated VMs would need at least 3 public IPs specified. Each element of this collection is of the form: /subscriptions/{subscription}/resourceGroups/{group}/providers/Microsoft.Network/publicIPAddresses/{ip}.
+        """
+        return pulumi.get(self, "ip_address_ids")
+
+    @ip_address_ids.setter
+    def ip_address_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "ip_address_ids", value)
+
+    @property
+    @pulumi.getter
+    def provision(self) -> Optional[pulumi.Input['IPAddressProvisioningType']]:
+        """
+        The default value is BatchManaged
+        """
+        return pulumi.get(self, "provision")
+
+    @provision.setter
+    def provision(self, value: Optional[pulumi.Input['IPAddressProvisioningType']]):
+        pulumi.set(self, "provision", value)
+
+
+if not MYPY:
+    class ResourceFileArgsDict(TypedDict):
+        auto_storage_container_name: NotRequired[pulumi.Input[str]]
+        """
+        The autoStorageContainerName, storageContainerUrl and httpUrl properties are mutually exclusive and one of them must be specified.
+        """
+        blob_prefix: NotRequired[pulumi.Input[str]]
+        """
+        The property is valid only when autoStorageContainerName or storageContainerUrl is used. This prefix can be a partial filename or a subdirectory. If a prefix is not specified, all the files in the container will be downloaded.
+        """
+        file_mode: NotRequired[pulumi.Input[str]]
+        """
+        This property applies only to files being downloaded to Linux compute nodes. It will be ignored if it is specified for a resourceFile which will be downloaded to a Windows node. If this property is not specified for a Linux node, then a default value of 0770 is applied to the file.
+        """
+        file_path: NotRequired[pulumi.Input[str]]
+        """
+        If the httpUrl property is specified, the filePath is required and describes the path which the file will be downloaded to, including the filename. Otherwise, if the autoStorageContainerName or storageContainerUrl property is specified, filePath is optional and is the directory to download the files to. In the case where filePath is used as a directory, any directory structure already associated with the input data will be retained in full and appended to the specified filePath directory. The specified relative path cannot break out of the task's working directory (for example by using '..').
+        """
+        http_url: NotRequired[pulumi.Input[str]]
+        """
+        The autoStorageContainerName, storageContainerUrl and httpUrl properties are mutually exclusive and one of them must be specified. If the URL points to Azure Blob Storage, it must be readable from compute nodes. There are three ways to get such a URL for a blob in Azure storage: include a Shared Access Signature (SAS) granting read permissions on the blob, use a managed identity with read permission, or set the ACL for the blob or its container to allow public access.
+        """
+        identity_reference: NotRequired[pulumi.Input['ComputeNodeIdentityReferenceArgsDict']]
+        """
+        The reference to a user assigned identity associated with the Batch pool which a compute node will use.
+        """
+        storage_container_url: NotRequired[pulumi.Input[str]]
+        """
+        The autoStorageContainerName, storageContainerUrl and httpUrl properties are mutually exclusive and one of them must be specified. This URL must be readable and listable from compute nodes. There are three ways to get such a URL for a container in Azure storage: include a Shared Access Signature (SAS) granting read and list permissions on the container, use a managed identity with read and list permissions, or set the ACL for the container to allow public access.
+        """
+elif False:
+    ResourceFileArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ResourceFileArgs:
+    def __init__(__self__, *,
+                 auto_storage_container_name: Optional[pulumi.Input[str]] = None,
+                 blob_prefix: Optional[pulumi.Input[str]] = None,
+                 file_mode: Optional[pulumi.Input[str]] = None,
+                 file_path: Optional[pulumi.Input[str]] = None,
+                 http_url: Optional[pulumi.Input[str]] = None,
+                 identity_reference: Optional[pulumi.Input['ComputeNodeIdentityReferenceArgs']] = None,
+                 storage_container_url: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] auto_storage_container_name: The autoStorageContainerName, storageContainerUrl and httpUrl properties are mutually exclusive and one of them must be specified.
+        :param pulumi.Input[str] blob_prefix: The property is valid only when autoStorageContainerName or storageContainerUrl is used. This prefix can be a partial filename or a subdirectory. If a prefix is not specified, all the files in the container will be downloaded.
+        :param pulumi.Input[str] file_mode: This property applies only to files being downloaded to Linux compute nodes. It will be ignored if it is specified for a resourceFile which will be downloaded to a Windows node. If this property is not specified for a Linux node, then a default value of 0770 is applied to the file.
+        :param pulumi.Input[str] file_path: If the httpUrl property is specified, the filePath is required and describes the path which the file will be downloaded to, including the filename. Otherwise, if the autoStorageContainerName or storageContainerUrl property is specified, filePath is optional and is the directory to download the files to. In the case where filePath is used as a directory, any directory structure already associated with the input data will be retained in full and appended to the specified filePath directory. The specified relative path cannot break out of the task's working directory (for example by using '..').
+        :param pulumi.Input[str] http_url: The autoStorageContainerName, storageContainerUrl and httpUrl properties are mutually exclusive and one of them must be specified. If the URL points to Azure Blob Storage, it must be readable from compute nodes. There are three ways to get such a URL for a blob in Azure storage: include a Shared Access Signature (SAS) granting read permissions on the blob, use a managed identity with read permission, or set the ACL for the blob or its container to allow public access.
+        :param pulumi.Input['ComputeNodeIdentityReferenceArgs'] identity_reference: The reference to a user assigned identity associated with the Batch pool which a compute node will use.
+        :param pulumi.Input[str] storage_container_url: The autoStorageContainerName, storageContainerUrl and httpUrl properties are mutually exclusive and one of them must be specified. This URL must be readable and listable from compute nodes. There are three ways to get such a URL for a container in Azure storage: include a Shared Access Signature (SAS) granting read and list permissions on the container, use a managed identity with read and list permissions, or set the ACL for the container to allow public access.
+        """
+        if auto_storage_container_name is not None:
+            pulumi.set(__self__, "auto_storage_container_name", auto_storage_container_name)
+        if blob_prefix is not None:
+            pulumi.set(__self__, "blob_prefix", blob_prefix)
+        if file_mode is not None:
+            pulumi.set(__self__, "file_mode", file_mode)
+        if file_path is not None:
+            pulumi.set(__self__, "file_path", file_path)
+        if http_url is not None:
+            pulumi.set(__self__, "http_url", http_url)
+        if identity_reference is not None:
+            pulumi.set(__self__, "identity_reference", identity_reference)
+        if storage_container_url is not None:
+            pulumi.set(__self__, "storage_container_url", storage_container_url)
+
+    @property
+    @pulumi.getter(name="autoStorageContainerName")
+    def auto_storage_container_name(self) -> Optional[pulumi.Input[str]]:
+        """
+        The autoStorageContainerName, storageContainerUrl and httpUrl properties are mutually exclusive and one of them must be specified.
+        """
+        return pulumi.get(self, "auto_storage_container_name")
+
+    @auto_storage_container_name.setter
+    def auto_storage_container_name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "auto_storage_container_name", value)
+
+    @property
+    @pulumi.getter(name="blobPrefix")
+    def blob_prefix(self) -> Optional[pulumi.Input[str]]:
+        """
+        The property is valid only when autoStorageContainerName or storageContainerUrl is used. This prefix can be a partial filename or a subdirectory. If a prefix is not specified, all the files in the container will be downloaded.
+        """
+        return pulumi.get(self, "blob_prefix")
+
+    @blob_prefix.setter
+    def blob_prefix(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "blob_prefix", value)
+
+    @property
+    @pulumi.getter(name="fileMode")
+    def file_mode(self) -> Optional[pulumi.Input[str]]:
+        """
+        This property applies only to files being downloaded to Linux compute nodes. It will be ignored if it is specified for a resourceFile which will be downloaded to a Windows node. If this property is not specified for a Linux node, then a default value of 0770 is applied to the file.
+        """
+        return pulumi.get(self, "file_mode")
+
+    @file_mode.setter
+    def file_mode(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "file_mode", value)
+
+    @property
+    @pulumi.getter(name="filePath")
+    def file_path(self) -> Optional[pulumi.Input[str]]:
+        """
+        If the httpUrl property is specified, the filePath is required and describes the path which the file will be downloaded to, including the filename. Otherwise, if the autoStorageContainerName or storageContainerUrl property is specified, filePath is optional and is the directory to download the files to. In the case where filePath is used as a directory, any directory structure already associated with the input data will be retained in full and appended to the specified filePath directory. The specified relative path cannot break out of the task's working directory (for example by using '..').
+        """
+        return pulumi.get(self, "file_path")
+
+    @file_path.setter
+    def file_path(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "file_path", value)
+
+    @property
+    @pulumi.getter(name="httpUrl")
+    def http_url(self) -> Optional[pulumi.Input[str]]:
+        """
+        The autoStorageContainerName, storageContainerUrl and httpUrl properties are mutually exclusive and one of them must be specified. If the URL points to Azure Blob Storage, it must be readable from compute nodes. There are three ways to get such a URL for a blob in Azure storage: include a Shared Access Signature (SAS) granting read permissions on the blob, use a managed identity with read permission, or set the ACL for the blob or its container to allow public access.
+        """
+        return pulumi.get(self, "http_url")
+
+    @http_url.setter
+    def http_url(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "http_url", value)
+
+    @property
+    @pulumi.getter(name="identityReference")
+    def identity_reference(self) -> Optional[pulumi.Input['ComputeNodeIdentityReferenceArgs']]:
+        """
+        The reference to a user assigned identity associated with the Batch pool which a compute node will use.
+        """
+        return pulumi.get(self, "identity_reference")
+
+    @identity_reference.setter
+    def identity_reference(self, value: Optional[pulumi.Input['ComputeNodeIdentityReferenceArgs']]):
+        pulumi.set(self, "identity_reference", value)
+
+    @property
+    @pulumi.getter(name="storageContainerUrl")
+    def storage_container_url(self) -> Optional[pulumi.Input[str]]:
+        """
+        The autoStorageContainerName, storageContainerUrl and httpUrl properties are mutually exclusive and one of them must be specified. This URL must be readable and listable from compute nodes. There are three ways to get such a URL for a container in Azure storage: include a Shared Access Signature (SAS) granting read and list permissions on the container, use a managed identity with read and list permissions, or set the ACL for the container to allow public access.
+        """
+        return pulumi.get(self, "storage_container_url")
+
+    @storage_container_url.setter
+    def storage_container_url(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "storage_container_url", value)
+
+
+if not MYPY:
+    class RollingUpgradePolicyArgsDict(TypedDict):
+        """
+        The configuration parameters used while performing a rolling upgrade.
+        """
+        enable_cross_zone_upgrade: NotRequired[pulumi.Input[bool]]
+        """
+        Allow VMSS to ignore AZ boundaries when constructing upgrade batches. Take into consideration the Update Domain and maxBatchInstancePercent to determine the batch size. If this field is not set, Azure Azure Batch will not set its default value. The value of enableCrossZoneUpgrade on the created VirtualMachineScaleSet will be decided by the default configurations on VirtualMachineScaleSet. This field is able to be set to true or false only when using NodePlacementConfiguration as Zonal.
+        """
+        max_batch_instance_percent: NotRequired[pulumi.Input[int]]
+        """
+        The maximum percent of total virtual machine instances that will be upgraded simultaneously by the rolling upgrade in one batch. As this is a maximum, unhealthy instances in previous or future batches can cause the percentage of instances in a batch to decrease to ensure higher reliability. The value of this field should be between 5 and 100, inclusive. If both maxBatchInstancePercent and maxUnhealthyInstancePercent are assigned with value, the value of maxBatchInstancePercent should not be more than maxUnhealthyInstancePercent.
+        """
+        max_unhealthy_instance_percent: NotRequired[pulumi.Input[int]]
+        """
+        The maximum percentage of the total virtual machine instances in the scale set that can be simultaneously unhealthy, either as a result of being upgraded, or by being found in an unhealthy state by the virtual machine health checks before the rolling upgrade aborts. This constraint will be checked prior to starting any batch. The value of this field should be between 5 and 100, inclusive. If both maxBatchInstancePercent and maxUnhealthyInstancePercent are assigned with value, the value of maxBatchInstancePercent should not be more than maxUnhealthyInstancePercent.
+        """
+        max_unhealthy_upgraded_instance_percent: NotRequired[pulumi.Input[int]]
+        """
+        The maximum percentage of upgraded virtual machine instances that can be found to be in an unhealthy state. This check will happen after each batch is upgraded. If this percentage is ever exceeded, the rolling update aborts. The value of this field should be between 0 and 100, inclusive.
+        """
+        pause_time_between_batches: NotRequired[pulumi.Input[str]]
+        """
+        The wait time between completing the update for all virtual machines in one batch and starting the next batch. The time duration should be specified in ISO 8601 format.
+        """
+        prioritize_unhealthy_instances: NotRequired[pulumi.Input[bool]]
+        """
+        Upgrade all unhealthy instances in a scale set before any healthy instances.
+        """
+        rollback_failed_instances_on_policy_breach: NotRequired[pulumi.Input[bool]]
+        """
+        Rollback failed instances to previous model if the Rolling Upgrade policy is violated.
+        """
+elif False:
+    RollingUpgradePolicyArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class RollingUpgradePolicyArgs:
+    def __init__(__self__, *,
+                 enable_cross_zone_upgrade: Optional[pulumi.Input[bool]] = None,
+                 max_batch_instance_percent: Optional[pulumi.Input[int]] = None,
+                 max_unhealthy_instance_percent: Optional[pulumi.Input[int]] = None,
+                 max_unhealthy_upgraded_instance_percent: Optional[pulumi.Input[int]] = None,
+                 pause_time_between_batches: Optional[pulumi.Input[str]] = None,
+                 prioritize_unhealthy_instances: Optional[pulumi.Input[bool]] = None,
+                 rollback_failed_instances_on_policy_breach: Optional[pulumi.Input[bool]] = None):
+        """
+        The configuration parameters used while performing a rolling upgrade.
+        :param pulumi.Input[bool] enable_cross_zone_upgrade: Allow VMSS to ignore AZ boundaries when constructing upgrade batches. Take into consideration the Update Domain and maxBatchInstancePercent to determine the batch size. If this field is not set, Azure Azure Batch will not set its default value. The value of enableCrossZoneUpgrade on the created VirtualMachineScaleSet will be decided by the default configurations on VirtualMachineScaleSet. This field is able to be set to true or false only when using NodePlacementConfiguration as Zonal.
+        :param pulumi.Input[int] max_batch_instance_percent: The maximum percent of total virtual machine instances that will be upgraded simultaneously by the rolling upgrade in one batch. As this is a maximum, unhealthy instances in previous or future batches can cause the percentage of instances in a batch to decrease to ensure higher reliability. The value of this field should be between 5 and 100, inclusive. If both maxBatchInstancePercent and maxUnhealthyInstancePercent are assigned with value, the value of maxBatchInstancePercent should not be more than maxUnhealthyInstancePercent.
+        :param pulumi.Input[int] max_unhealthy_instance_percent: The maximum percentage of the total virtual machine instances in the scale set that can be simultaneously unhealthy, either as a result of being upgraded, or by being found in an unhealthy state by the virtual machine health checks before the rolling upgrade aborts. This constraint will be checked prior to starting any batch. The value of this field should be between 5 and 100, inclusive. If both maxBatchInstancePercent and maxUnhealthyInstancePercent are assigned with value, the value of maxBatchInstancePercent should not be more than maxUnhealthyInstancePercent.
+        :param pulumi.Input[int] max_unhealthy_upgraded_instance_percent: The maximum percentage of upgraded virtual machine instances that can be found to be in an unhealthy state. This check will happen after each batch is upgraded. If this percentage is ever exceeded, the rolling update aborts. The value of this field should be between 0 and 100, inclusive.
+        :param pulumi.Input[str] pause_time_between_batches: The wait time between completing the update for all virtual machines in one batch and starting the next batch. The time duration should be specified in ISO 8601 format.
+        :param pulumi.Input[bool] prioritize_unhealthy_instances: Upgrade all unhealthy instances in a scale set before any healthy instances.
+        :param pulumi.Input[bool] rollback_failed_instances_on_policy_breach: Rollback failed instances to previous model if the Rolling Upgrade policy is violated.
+        """
+        if enable_cross_zone_upgrade is not None:
+            pulumi.set(__self__, "enable_cross_zone_upgrade", enable_cross_zone_upgrade)
+        if max_batch_instance_percent is not None:
+            pulumi.set(__self__, "max_batch_instance_percent", max_batch_instance_percent)
+        if max_unhealthy_instance_percent is not None:
+            pulumi.set(__self__, "max_unhealthy_instance_percent", max_unhealthy_instance_percent)
+        if max_unhealthy_upgraded_instance_percent is not None:
+            pulumi.set(__self__, "max_unhealthy_upgraded_instance_percent", max_unhealthy_upgraded_instance_percent)
+        if pause_time_between_batches is not None:
+            pulumi.set(__self__, "pause_time_between_batches", pause_time_between_batches)
+        if prioritize_unhealthy_instances is not None:
+            pulumi.set(__self__, "prioritize_unhealthy_instances", prioritize_unhealthy_instances)
+        if rollback_failed_instances_on_policy_breach is not None:
+            pulumi.set(__self__, "rollback_failed_instances_on_policy_breach", rollback_failed_instances_on_policy_breach)
+
+    @property
+    @pulumi.getter(name="enableCrossZoneUpgrade")
+    def enable_cross_zone_upgrade(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Allow VMSS to ignore AZ boundaries when constructing upgrade batches. Take into consideration the Update Domain and maxBatchInstancePercent to determine the batch size. If this field is not set, Azure Azure Batch will not set its default value. The value of enableCrossZoneUpgrade on the created VirtualMachineScaleSet will be decided by the default configurations on VirtualMachineScaleSet. This field is able to be set to true or false only when using NodePlacementConfiguration as Zonal.
+        """
+        return pulumi.get(self, "enable_cross_zone_upgrade")
+
+    @enable_cross_zone_upgrade.setter
+    def enable_cross_zone_upgrade(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "enable_cross_zone_upgrade", value)
+
+    @property
+    @pulumi.getter(name="maxBatchInstancePercent")
+    def max_batch_instance_percent(self) -> Optional[pulumi.Input[int]]:
+        """
+        The maximum percent of total virtual machine instances that will be upgraded simultaneously by the rolling upgrade in one batch. As this is a maximum, unhealthy instances in previous or future batches can cause the percentage of instances in a batch to decrease to ensure higher reliability. The value of this field should be between 5 and 100, inclusive. If both maxBatchInstancePercent and maxUnhealthyInstancePercent are assigned with value, the value of maxBatchInstancePercent should not be more than maxUnhealthyInstancePercent.
+        """
+        return pulumi.get(self, "max_batch_instance_percent")
+
+    @max_batch_instance_percent.setter
+    def max_batch_instance_percent(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "max_batch_instance_percent", value)
+
+    @property
+    @pulumi.getter(name="maxUnhealthyInstancePercent")
+    def max_unhealthy_instance_percent(self) -> Optional[pulumi.Input[int]]:
+        """
+        The maximum percentage of the total virtual machine instances in the scale set that can be simultaneously unhealthy, either as a result of being upgraded, or by being found in an unhealthy state by the virtual machine health checks before the rolling upgrade aborts. This constraint will be checked prior to starting any batch. The value of this field should be between 5 and 100, inclusive. If both maxBatchInstancePercent and maxUnhealthyInstancePercent are assigned with value, the value of maxBatchInstancePercent should not be more than maxUnhealthyInstancePercent.
+        """
+        return pulumi.get(self, "max_unhealthy_instance_percent")
+
+    @max_unhealthy_instance_percent.setter
+    def max_unhealthy_instance_percent(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "max_unhealthy_instance_percent", value)
+
+    @property
+    @pulumi.getter(name="maxUnhealthyUpgradedInstancePercent")
+    def max_unhealthy_upgraded_instance_percent(self) -> Optional[pulumi.Input[int]]:
+        """
+        The maximum percentage of upgraded virtual machine instances that can be found to be in an unhealthy state. This check will happen after each batch is upgraded. If this percentage is ever exceeded, the rolling update aborts. The value of this field should be between 0 and 100, inclusive.
+        """
+        return pulumi.get(self, "max_unhealthy_upgraded_instance_percent")
+
+    @max_unhealthy_upgraded_instance_percent.setter
+    def max_unhealthy_upgraded_instance_percent(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "max_unhealthy_upgraded_instance_percent", value)
+
+    @property
+    @pulumi.getter(name="pauseTimeBetweenBatches")
+    def pause_time_between_batches(self) -> Optional[pulumi.Input[str]]:
+        """
+        The wait time between completing the update for all virtual machines in one batch and starting the next batch. The time duration should be specified in ISO 8601 format.
+        """
+        return pulumi.get(self, "pause_time_between_batches")
+
+    @pause_time_between_batches.setter
+    def pause_time_between_batches(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "pause_time_between_batches", value)
+
+    @property
+    @pulumi.getter(name="prioritizeUnhealthyInstances")
+    def prioritize_unhealthy_instances(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Upgrade all unhealthy instances in a scale set before any healthy instances.
+        """
+        return pulumi.get(self, "prioritize_unhealthy_instances")
+
+    @prioritize_unhealthy_instances.setter
+    def prioritize_unhealthy_instances(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "prioritize_unhealthy_instances", value)
+
+    @property
+    @pulumi.getter(name="rollbackFailedInstancesOnPolicyBreach")
+    def rollback_failed_instances_on_policy_breach(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Rollback failed instances to previous model if the Rolling Upgrade policy is violated.
+        """
+        return pulumi.get(self, "rollback_failed_instances_on_policy_breach")
+
+    @rollback_failed_instances_on_policy_breach.setter
+    def rollback_failed_instances_on_policy_breach(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "rollback_failed_instances_on_policy_breach", value)
+
+
+if not MYPY:
+    class ScaleSettingsArgsDict(TypedDict):
+        """
+        Defines the desired size of the pool. This can either be 'fixedScale' where the requested targetDedicatedNodes is specified, or 'autoScale' which defines a formula which is periodically reevaluated. If this property is not specified, the pool will have a fixed scale with 0 targetDedicatedNodes.
+        """
+        auto_scale: NotRequired[pulumi.Input['AutoScaleSettingsArgsDict']]
+        """
+        This property and fixedScale are mutually exclusive and one of the properties must be specified.
+        """
+        fixed_scale: NotRequired[pulumi.Input['FixedScaleSettingsArgsDict']]
+        """
+        This property and autoScale are mutually exclusive and one of the properties must be specified.
+        """
+elif False:
+    ScaleSettingsArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ScaleSettingsArgs:
+    def __init__(__self__, *,
+                 auto_scale: Optional[pulumi.Input['AutoScaleSettingsArgs']] = None,
+                 fixed_scale: Optional[pulumi.Input['FixedScaleSettingsArgs']] = None):
+        """
+        Defines the desired size of the pool. This can either be 'fixedScale' where the requested targetDedicatedNodes is specified, or 'autoScale' which defines a formula which is periodically reevaluated. If this property is not specified, the pool will have a fixed scale with 0 targetDedicatedNodes.
+        :param pulumi.Input['AutoScaleSettingsArgs'] auto_scale: This property and fixedScale are mutually exclusive and one of the properties must be specified.
+        :param pulumi.Input['FixedScaleSettingsArgs'] fixed_scale: This property and autoScale are mutually exclusive and one of the properties must be specified.
+        """
+        if auto_scale is not None:
+            pulumi.set(__self__, "auto_scale", auto_scale)
+        if fixed_scale is not None:
+            pulumi.set(__self__, "fixed_scale", fixed_scale)
+
+    @property
+    @pulumi.getter(name="autoScale")
+    def auto_scale(self) -> Optional[pulumi.Input['AutoScaleSettingsArgs']]:
+        """
+        This property and fixedScale are mutually exclusive and one of the properties must be specified.
+        """
+        return pulumi.get(self, "auto_scale")
+
+    @auto_scale.setter
+    def auto_scale(self, value: Optional[pulumi.Input['AutoScaleSettingsArgs']]):
+        pulumi.set(self, "auto_scale", value)
+
+    @property
+    @pulumi.getter(name="fixedScale")
+    def fixed_scale(self) -> Optional[pulumi.Input['FixedScaleSettingsArgs']]:
+        """
+        This property and autoScale are mutually exclusive and one of the properties must be specified.
+        """
+        return pulumi.get(self, "fixed_scale")
+
+    @fixed_scale.setter
+    def fixed_scale(self, value: Optional[pulumi.Input['FixedScaleSettingsArgs']]):
+        pulumi.set(self, "fixed_scale", value)
+
+
+if not MYPY:
+    class SecurityProfileArgsDict(TypedDict):
+        """
+        Specifies the security profile settings for the virtual machine or virtual machine scale set.
+        """
+        encryption_at_host: NotRequired[pulumi.Input[bool]]
+        """
+        This property can be used by user in the request to enable or disable the Host Encryption for the virtual machine or virtual machine scale set. This will enable the encryption for all the disks including Resource/Temp disk at host itself.
+        """
+        security_type: NotRequired[pulumi.Input['SecurityTypes']]
+        uefi_settings: NotRequired[pulumi.Input['UefiSettingsArgsDict']]
+        """
+        Specifies the security settings like secure boot and vTPM used while creating the virtual machine.
+        """
+elif False:
+    SecurityProfileArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class SecurityProfileArgs:
+    def __init__(__self__, *,
+                 encryption_at_host: Optional[pulumi.Input[bool]] = None,
+                 security_type: Optional[pulumi.Input['SecurityTypes']] = None,
+                 uefi_settings: Optional[pulumi.Input['UefiSettingsArgs']] = None):
+        """
+        Specifies the security profile settings for the virtual machine or virtual machine scale set.
+        :param pulumi.Input[bool] encryption_at_host: This property can be used by user in the request to enable or disable the Host Encryption for the virtual machine or virtual machine scale set. This will enable the encryption for all the disks including Resource/Temp disk at host itself.
+        :param pulumi.Input['UefiSettingsArgs'] uefi_settings: Specifies the security settings like secure boot and vTPM used while creating the virtual machine.
+        """
+        if encryption_at_host is not None:
+            pulumi.set(__self__, "encryption_at_host", encryption_at_host)
+        if security_type is not None:
+            pulumi.set(__self__, "security_type", security_type)
+        if uefi_settings is not None:
+            pulumi.set(__self__, "uefi_settings", uefi_settings)
+
+    @property
+    @pulumi.getter(name="encryptionAtHost")
+    def encryption_at_host(self) -> Optional[pulumi.Input[bool]]:
+        """
+        This property can be used by user in the request to enable or disable the Host Encryption for the virtual machine or virtual machine scale set. This will enable the encryption for all the disks including Resource/Temp disk at host itself.
+        """
+        return pulumi.get(self, "encryption_at_host")
+
+    @encryption_at_host.setter
+    def encryption_at_host(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "encryption_at_host", value)
+
+    @property
+    @pulumi.getter(name="securityType")
+    def security_type(self) -> Optional[pulumi.Input['SecurityTypes']]:
+        return pulumi.get(self, "security_type")
+
+    @security_type.setter
+    def security_type(self, value: Optional[pulumi.Input['SecurityTypes']]):
+        pulumi.set(self, "security_type", value)
+
+    @property
+    @pulumi.getter(name="uefiSettings")
+    def uefi_settings(self) -> Optional[pulumi.Input['UefiSettingsArgs']]:
+        """
+        Specifies the security settings like secure boot and vTPM used while creating the virtual machine.
+        """
+        return pulumi.get(self, "uefi_settings")
+
+    @uefi_settings.setter
+    def uefi_settings(self, value: Optional[pulumi.Input['UefiSettingsArgs']]):
+        pulumi.set(self, "uefi_settings", value)
+
+
+if not MYPY:
+    class ServiceArtifactReferenceArgsDict(TypedDict):
+        """
+        Specifies the service artifact reference id used to set same image version for all virtual machines in the scale set when using 'latest' image version.
+        """
+        id: pulumi.Input[str]
+        """
+        The service artifact reference id in the form of /subscriptions/{subscriptionId}/resourceGroups/{resourceGroup}/providers/Microsoft.Compute/galleries/{galleryName}/serviceArtifacts/{serviceArtifactName}/vmArtifactsProfiles/{vmArtifactsProfilesName}
+        """
+elif False:
+    ServiceArtifactReferenceArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ServiceArtifactReferenceArgs:
+    def __init__(__self__, *,
+                 id: pulumi.Input[str]):
+        """
+        Specifies the service artifact reference id used to set same image version for all virtual machines in the scale set when using 'latest' image version.
+        :param pulumi.Input[str] id: The service artifact reference id in the form of /subscriptions/{subscriptionId}/resourceGroups/{resourceGroup}/providers/Microsoft.Compute/galleries/{galleryName}/serviceArtifacts/{serviceArtifactName}/vmArtifactsProfiles/{vmArtifactsProfilesName}
+        """
+        pulumi.set(__self__, "id", id)
+
+    @property
+    @pulumi.getter
+    def id(self) -> pulumi.Input[str]:
+        """
+        The service artifact reference id in the form of /subscriptions/{subscriptionId}/resourceGroups/{resourceGroup}/providers/Microsoft.Compute/galleries/{galleryName}/serviceArtifacts/{serviceArtifactName}/vmArtifactsProfiles/{vmArtifactsProfilesName}
+        """
+        return pulumi.get(self, "id")
+
+    @id.setter
+    def id(self, value: pulumi.Input[str]):
+        pulumi.set(self, "id", value)
+
+
+if not MYPY:
+    class StartTaskArgsDict(TypedDict):
+        """
+        In some cases the start task may be re-run even though the node was not rebooted. Due to this, start tasks should be idempotent and exit gracefully if the setup they're performing has already been done. Special care should be taken to avoid start tasks which create breakaway process or install/launch services from the start task working directory, as this will block Batch from being able to re-run the start task.
+        """
+        command_line: NotRequired[pulumi.Input[str]]
+        """
+        The command line does not run under a shell, and therefore cannot take advantage of shell features such as environment variable expansion. If you want to take advantage of such features, you should invoke the shell in the command line, for example using "cmd /c MyCommand" in Windows or "/bin/sh -c MyCommand" in Linux. Required if any other properties of the startTask are specified.
+        """
+        container_settings: NotRequired[pulumi.Input['TaskContainerSettingsArgsDict']]
+        """
+        When this is specified, all directories recursively below the AZ_BATCH_NODE_ROOT_DIR (the root of Azure Batch directories on the node) are mapped into the container, all task environment variables are mapped into the container, and the task command line is executed in the container.
+        """
+        environment_settings: NotRequired[pulumi.Input[Sequence[pulumi.Input['EnvironmentSettingArgsDict']]]]
+        max_task_retry_count: NotRequired[pulumi.Input[int]]
+        """
+        The Batch service retries a task if its exit code is nonzero. Note that this value specifically controls the number of retries. The Batch service will try the task once, and may then retry up to this limit. For example, if the maximum retry count is 3, Batch tries the task up to 4 times (one initial try and 3 retries). If the maximum retry count is 0, the Batch service does not retry the task. If the maximum retry count is -1, the Batch service retries the task without limit. Default is 0
+        """
+        resource_files: NotRequired[pulumi.Input[Sequence[pulumi.Input['ResourceFileArgsDict']]]]
+        user_identity: NotRequired[pulumi.Input['UserIdentityArgsDict']]
+        """
+        If omitted, the task runs as a non-administrative user unique to the task.
+        """
+        wait_for_success: NotRequired[pulumi.Input[bool]]
+        """
+        If true and the start task fails on a compute node, the Batch service retries the start task up to its maximum retry count (maxTaskRetryCount). If the task has still not completed successfully after all retries, then the Batch service marks the compute node unusable, and will not schedule tasks to it. This condition can be detected via the node state and scheduling error detail. If false, the Batch service will not wait for the start task to complete. In this case, other tasks can start executing on the compute node while the start task is still running; and even if the start task fails, new tasks will continue to be scheduled on the node. The default is true.
+        """
+elif False:
+    StartTaskArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class StartTaskArgs:
+    def __init__(__self__, *,
+                 command_line: Optional[pulumi.Input[str]] = None,
+                 container_settings: Optional[pulumi.Input['TaskContainerSettingsArgs']] = None,
+                 environment_settings: Optional[pulumi.Input[Sequence[pulumi.Input['EnvironmentSettingArgs']]]] = None,
+                 max_task_retry_count: Optional[pulumi.Input[int]] = None,
+                 resource_files: Optional[pulumi.Input[Sequence[pulumi.Input['ResourceFileArgs']]]] = None,
+                 user_identity: Optional[pulumi.Input['UserIdentityArgs']] = None,
+                 wait_for_success: Optional[pulumi.Input[bool]] = None):
+        """
+        In some cases the start task may be re-run even though the node was not rebooted. Due to this, start tasks should be idempotent and exit gracefully if the setup they're performing has already been done. Special care should be taken to avoid start tasks which create breakaway process or install/launch services from the start task working directory, as this will block Batch from being able to re-run the start task.
+        :param pulumi.Input[str] command_line: The command line does not run under a shell, and therefore cannot take advantage of shell features such as environment variable expansion. If you want to take advantage of such features, you should invoke the shell in the command line, for example using "cmd /c MyCommand" in Windows or "/bin/sh -c MyCommand" in Linux. Required if any other properties of the startTask are specified.
+        :param pulumi.Input['TaskContainerSettingsArgs'] container_settings: When this is specified, all directories recursively below the AZ_BATCH_NODE_ROOT_DIR (the root of Azure Batch directories on the node) are mapped into the container, all task environment variables are mapped into the container, and the task command line is executed in the container.
+        :param pulumi.Input[int] max_task_retry_count: The Batch service retries a task if its exit code is nonzero. Note that this value specifically controls the number of retries. The Batch service will try the task once, and may then retry up to this limit. For example, if the maximum retry count is 3, Batch tries the task up to 4 times (one initial try and 3 retries). If the maximum retry count is 0, the Batch service does not retry the task. If the maximum retry count is -1, the Batch service retries the task without limit. Default is 0
+        :param pulumi.Input['UserIdentityArgs'] user_identity: If omitted, the task runs as a non-administrative user unique to the task.
+        :param pulumi.Input[bool] wait_for_success: If true and the start task fails on a compute node, the Batch service retries the start task up to its maximum retry count (maxTaskRetryCount). If the task has still not completed successfully after all retries, then the Batch service marks the compute node unusable, and will not schedule tasks to it. This condition can be detected via the node state and scheduling error detail. If false, the Batch service will not wait for the start task to complete. In this case, other tasks can start executing on the compute node while the start task is still running; and even if the start task fails, new tasks will continue to be scheduled on the node. The default is true.
+        """
+        if command_line is not None:
+            pulumi.set(__self__, "command_line", command_line)
+        if container_settings is not None:
+            pulumi.set(__self__, "container_settings", container_settings)
+        if environment_settings is not None:
+            pulumi.set(__self__, "environment_settings", environment_settings)
+        if max_task_retry_count is None:
+            max_task_retry_count = 0
+        if max_task_retry_count is not None:
+            pulumi.set(__self__, "max_task_retry_count", max_task_retry_count)
+        if resource_files is not None:
+            pulumi.set(__self__, "resource_files", resource_files)
+        if user_identity is not None:
+            pulumi.set(__self__, "user_identity", user_identity)
+        if wait_for_success is not None:
+            pulumi.set(__self__, "wait_for_success", wait_for_success)
+
+    @property
+    @pulumi.getter(name="commandLine")
+    def command_line(self) -> Optional[pulumi.Input[str]]:
+        """
+        The command line does not run under a shell, and therefore cannot take advantage of shell features such as environment variable expansion. If you want to take advantage of such features, you should invoke the shell in the command line, for example using "cmd /c MyCommand" in Windows or "/bin/sh -c MyCommand" in Linux. Required if any other properties of the startTask are specified.
+        """
+        return pulumi.get(self, "command_line")
+
+    @command_line.setter
+    def command_line(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "command_line", value)
+
+    @property
+    @pulumi.getter(name="containerSettings")
+    def container_settings(self) -> Optional[pulumi.Input['TaskContainerSettingsArgs']]:
+        """
+        When this is specified, all directories recursively below the AZ_BATCH_NODE_ROOT_DIR (the root of Azure Batch directories on the node) are mapped into the container, all task environment variables are mapped into the container, and the task command line is executed in the container.
+        """
+        return pulumi.get(self, "container_settings")
+
+    @container_settings.setter
+    def container_settings(self, value: Optional[pulumi.Input['TaskContainerSettingsArgs']]):
+        pulumi.set(self, "container_settings", value)
+
+    @property
+    @pulumi.getter(name="environmentSettings")
+    def environment_settings(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['EnvironmentSettingArgs']]]]:
+        return pulumi.get(self, "environment_settings")
+
+    @environment_settings.setter
+    def environment_settings(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['EnvironmentSettingArgs']]]]):
+        pulumi.set(self, "environment_settings", value)
+
+    @property
+    @pulumi.getter(name="maxTaskRetryCount")
+    def max_task_retry_count(self) -> Optional[pulumi.Input[int]]:
+        """
+        The Batch service retries a task if its exit code is nonzero. Note that this value specifically controls the number of retries. The Batch service will try the task once, and may then retry up to this limit. For example, if the maximum retry count is 3, Batch tries the task up to 4 times (one initial try and 3 retries). If the maximum retry count is 0, the Batch service does not retry the task. If the maximum retry count is -1, the Batch service retries the task without limit. Default is 0
+        """
+        return pulumi.get(self, "max_task_retry_count")
+
+    @max_task_retry_count.setter
+    def max_task_retry_count(self, value: Optional[pulumi.Input[int]]):
+        pulumi.set(self, "max_task_retry_count", value)
+
+    @property
+    @pulumi.getter(name="resourceFiles")
+    def resource_files(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['ResourceFileArgs']]]]:
+        return pulumi.get(self, "resource_files")
+
+    @resource_files.setter
+    def resource_files(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['ResourceFileArgs']]]]):
+        pulumi.set(self, "resource_files", value)
+
+    @property
+    @pulumi.getter(name="userIdentity")
+    def user_identity(self) -> Optional[pulumi.Input['UserIdentityArgs']]:
+        """
+        If omitted, the task runs as a non-administrative user unique to the task.
+        """
+        return pulumi.get(self, "user_identity")
+
+    @user_identity.setter
+    def user_identity(self, value: Optional[pulumi.Input['UserIdentityArgs']]):
+        pulumi.set(self, "user_identity", value)
+
+    @property
+    @pulumi.getter(name="waitForSuccess")
+    def wait_for_success(self) -> Optional[pulumi.Input[bool]]:
+        """
+        If true and the start task fails on a compute node, the Batch service retries the start task up to its maximum retry count (maxTaskRetryCount). If the task has still not completed successfully after all retries, then the Batch service marks the compute node unusable, and will not schedule tasks to it. This condition can be detected via the node state and scheduling error detail. If false, the Batch service will not wait for the start task to complete. In this case, other tasks can start executing on the compute node while the start task is still running; and even if the start task fails, new tasks will continue to be scheduled on the node. The default is true.
+        """
+        return pulumi.get(self, "wait_for_success")
+
+    @wait_for_success.setter
+    def wait_for_success(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "wait_for_success", value)
+
+
+if not MYPY:
+    class TaskContainerSettingsArgsDict(TypedDict):
+        image_name: pulumi.Input[str]
+        """
+        This is the full image reference, as would be specified to "docker pull". If no tag is provided as part of the image name, the tag ":latest" is used as a default.
+        """
+        container_host_batch_bind_mounts: NotRequired[pulumi.Input[Sequence[pulumi.Input['ContainerHostBatchBindMountEntryArgsDict']]]]
+        """
+        If this array is null or be not present, container task will mount entire temporary disk drive in windows (or AZ_BATCH_NODE_ROOT_DIR in Linux). It won't' mount any data paths into container if this array is set as empty.
+        """
+        container_run_options: NotRequired[pulumi.Input[str]]
+        """
+        These additional options are supplied as arguments to the "docker create" command, in addition to those controlled by the Batch Service.
+        """
+        registry: NotRequired[pulumi.Input['ContainerRegistryArgsDict']]
+        """
+        This setting can be omitted if was already provided at pool creation.
+        """
+        working_directory: NotRequired[pulumi.Input['ContainerWorkingDirectory']]
+elif False:
+    TaskContainerSettingsArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class TaskContainerSettingsArgs:
+    def __init__(__self__, *,
+                 image_name: pulumi.Input[str],
+                 container_host_batch_bind_mounts: Optional[pulumi.Input[Sequence[pulumi.Input['ContainerHostBatchBindMountEntryArgs']]]] = None,
+                 container_run_options: Optional[pulumi.Input[str]] = None,
+                 registry: Optional[pulumi.Input['ContainerRegistryArgs']] = None,
+                 working_directory: Optional[pulumi.Input['ContainerWorkingDirectory']] = None):
+        """
+        :param pulumi.Input[str] image_name: This is the full image reference, as would be specified to "docker pull". If no tag is provided as part of the image name, the tag ":latest" is used as a default.
+        :param pulumi.Input[Sequence[pulumi.Input['ContainerHostBatchBindMountEntryArgs']]] container_host_batch_bind_mounts: If this array is null or be not present, container task will mount entire temporary disk drive in windows (or AZ_BATCH_NODE_ROOT_DIR in Linux). It won't' mount any data paths into container if this array is set as empty.
+        :param pulumi.Input[str] container_run_options: These additional options are supplied as arguments to the "docker create" command, in addition to those controlled by the Batch Service.
+        :param pulumi.Input['ContainerRegistryArgs'] registry: This setting can be omitted if was already provided at pool creation.
+        """
+        pulumi.set(__self__, "image_name", image_name)
+        if container_host_batch_bind_mounts is not None:
+            pulumi.set(__self__, "container_host_batch_bind_mounts", container_host_batch_bind_mounts)
+        if container_run_options is not None:
+            pulumi.set(__self__, "container_run_options", container_run_options)
+        if registry is not None:
+            pulumi.set(__self__, "registry", registry)
+        if working_directory is not None:
+            pulumi.set(__self__, "working_directory", working_directory)
+
+    @property
+    @pulumi.getter(name="imageName")
+    def image_name(self) -> pulumi.Input[str]:
+        """
+        This is the full image reference, as would be specified to "docker pull". If no tag is provided as part of the image name, the tag ":latest" is used as a default.
+        """
+        return pulumi.get(self, "image_name")
+
+    @image_name.setter
+    def image_name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "image_name", value)
+
+    @property
+    @pulumi.getter(name="containerHostBatchBindMounts")
+    def container_host_batch_bind_mounts(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['ContainerHostBatchBindMountEntryArgs']]]]:
+        """
+        If this array is null or be not present, container task will mount entire temporary disk drive in windows (or AZ_BATCH_NODE_ROOT_DIR in Linux). It won't' mount any data paths into container if this array is set as empty.
+        """
+        return pulumi.get(self, "container_host_batch_bind_mounts")
+
+    @container_host_batch_bind_mounts.setter
+    def container_host_batch_bind_mounts(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['ContainerHostBatchBindMountEntryArgs']]]]):
+        pulumi.set(self, "container_host_batch_bind_mounts", value)
+
+    @property
+    @pulumi.getter(name="containerRunOptions")
+    def container_run_options(self) -> Optional[pulumi.Input[str]]:
+        """
+        These additional options are supplied as arguments to the "docker create" command, in addition to those controlled by the Batch Service.
+        """
+        return pulumi.get(self, "container_run_options")
+
+    @container_run_options.setter
+    def container_run_options(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "container_run_options", value)
+
+    @property
+    @pulumi.getter
+    def registry(self) -> Optional[pulumi.Input['ContainerRegistryArgs']]:
+        """
+        This setting can be omitted if was already provided at pool creation.
+        """
+        return pulumi.get(self, "registry")
+
+    @registry.setter
+    def registry(self, value: Optional[pulumi.Input['ContainerRegistryArgs']]):
+        pulumi.set(self, "registry", value)
+
+    @property
+    @pulumi.getter(name="workingDirectory")
+    def working_directory(self) -> Optional[pulumi.Input['ContainerWorkingDirectory']]:
+        return pulumi.get(self, "working_directory")
+
+    @working_directory.setter
+    def working_directory(self, value: Optional[pulumi.Input['ContainerWorkingDirectory']]):
+        pulumi.set(self, "working_directory", value)
+
+
+if not MYPY:
+    class TaskSchedulingPolicyArgsDict(TypedDict):
+        node_fill_type: pulumi.Input['ComputeNodeFillType']
+elif False:
+    TaskSchedulingPolicyArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class TaskSchedulingPolicyArgs:
+    def __init__(__self__, *,
+                 node_fill_type: Optional[pulumi.Input['ComputeNodeFillType']] = None):
+        if node_fill_type is None:
+            node_fill_type = 'Spread'
+        pulumi.set(__self__, "node_fill_type", node_fill_type)
+
+    @property
+    @pulumi.getter(name="nodeFillType")
+    def node_fill_type(self) -> pulumi.Input['ComputeNodeFillType']:
+        return pulumi.get(self, "node_fill_type")
+
+    @node_fill_type.setter
+    def node_fill_type(self, value: pulumi.Input['ComputeNodeFillType']):
+        pulumi.set(self, "node_fill_type", value)
+
+
+if not MYPY:
+    class UefiSettingsArgsDict(TypedDict):
+        """
+        Specifies the security settings like secure boot and vTPM used while creating the virtual machine.
+        """
+        secure_boot_enabled: NotRequired[pulumi.Input[bool]]
+        """
+        Specifies whether secure boot should be enabled on the virtual machine.
+        """
+        v_tpm_enabled: NotRequired[pulumi.Input[bool]]
+        """
+        Specifies whether vTPM should be enabled on the virtual machine.
+        """
+elif False:
+    UefiSettingsArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class UefiSettingsArgs:
+    def __init__(__self__, *,
+                 secure_boot_enabled: Optional[pulumi.Input[bool]] = None,
+                 v_tpm_enabled: Optional[pulumi.Input[bool]] = None):
+        """
+        Specifies the security settings like secure boot and vTPM used while creating the virtual machine.
+        :param pulumi.Input[bool] secure_boot_enabled: Specifies whether secure boot should be enabled on the virtual machine.
+        :param pulumi.Input[bool] v_tpm_enabled: Specifies whether vTPM should be enabled on the virtual machine.
+        """
+        if secure_boot_enabled is not None:
+            pulumi.set(__self__, "secure_boot_enabled", secure_boot_enabled)
+        if v_tpm_enabled is not None:
+            pulumi.set(__self__, "v_tpm_enabled", v_tpm_enabled)
+
+    @property
+    @pulumi.getter(name="secureBootEnabled")
+    def secure_boot_enabled(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Specifies whether secure boot should be enabled on the virtual machine.
+        """
+        return pulumi.get(self, "secure_boot_enabled")
+
+    @secure_boot_enabled.setter
+    def secure_boot_enabled(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "secure_boot_enabled", value)
+
+    @property
+    @pulumi.getter(name="vTpmEnabled")
+    def v_tpm_enabled(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Specifies whether vTPM should be enabled on the virtual machine.
+        """
+        return pulumi.get(self, "v_tpm_enabled")
+
+    @v_tpm_enabled.setter
+    def v_tpm_enabled(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "v_tpm_enabled", value)
+
+
+if not MYPY:
+    class UpgradePolicyArgsDict(TypedDict):
+        """
+        Describes an upgrade policy - automatic, manual, or rolling.
+        """
+        mode: pulumi.Input['UpgradeMode']
+        automatic_os_upgrade_policy: NotRequired[pulumi.Input['AutomaticOSUpgradePolicyArgsDict']]
+        """
+        The configuration parameters used for performing automatic OS upgrade.
+        """
+        rolling_upgrade_policy: NotRequired[pulumi.Input['RollingUpgradePolicyArgsDict']]
+        """
+        The configuration parameters used while performing a rolling upgrade.
+        """
+elif False:
+    UpgradePolicyArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class UpgradePolicyArgs:
+    def __init__(__self__, *,
+                 mode: pulumi.Input['UpgradeMode'],
+                 automatic_os_upgrade_policy: Optional[pulumi.Input['AutomaticOSUpgradePolicyArgs']] = None,
+                 rolling_upgrade_policy: Optional[pulumi.Input['RollingUpgradePolicyArgs']] = None):
+        """
+        Describes an upgrade policy - automatic, manual, or rolling.
+        :param pulumi.Input['AutomaticOSUpgradePolicyArgs'] automatic_os_upgrade_policy: The configuration parameters used for performing automatic OS upgrade.
+        :param pulumi.Input['RollingUpgradePolicyArgs'] rolling_upgrade_policy: The configuration parameters used while performing a rolling upgrade.
+        """
+        pulumi.set(__self__, "mode", mode)
+        if automatic_os_upgrade_policy is not None:
+            pulumi.set(__self__, "automatic_os_upgrade_policy", automatic_os_upgrade_policy)
+        if rolling_upgrade_policy is not None:
+            pulumi.set(__self__, "rolling_upgrade_policy", rolling_upgrade_policy)
+
+    @property
+    @pulumi.getter
+    def mode(self) -> pulumi.Input['UpgradeMode']:
+        return pulumi.get(self, "mode")
+
+    @mode.setter
+    def mode(self, value: pulumi.Input['UpgradeMode']):
+        pulumi.set(self, "mode", value)
+
+    @property
+    @pulumi.getter(name="automaticOSUpgradePolicy")
+    def automatic_os_upgrade_policy(self) -> Optional[pulumi.Input['AutomaticOSUpgradePolicyArgs']]:
+        """
+        The configuration parameters used for performing automatic OS upgrade.
+        """
+        return pulumi.get(self, "automatic_os_upgrade_policy")
+
+    @automatic_os_upgrade_policy.setter
+    def automatic_os_upgrade_policy(self, value: Optional[pulumi.Input['AutomaticOSUpgradePolicyArgs']]):
+        pulumi.set(self, "automatic_os_upgrade_policy", value)
+
+    @property
+    @pulumi.getter(name="rollingUpgradePolicy")
+    def rolling_upgrade_policy(self) -> Optional[pulumi.Input['RollingUpgradePolicyArgs']]:
+        """
+        The configuration parameters used while performing a rolling upgrade.
+        """
+        return pulumi.get(self, "rolling_upgrade_policy")
+
+    @rolling_upgrade_policy.setter
+    def rolling_upgrade_policy(self, value: Optional[pulumi.Input['RollingUpgradePolicyArgs']]):
+        pulumi.set(self, "rolling_upgrade_policy", value)
+
+
+if not MYPY:
+    class UserAccountArgsDict(TypedDict):
+        name: pulumi.Input[str]
+        password: pulumi.Input[str]
+        elevation_level: NotRequired[pulumi.Input['ElevationLevel']]
+        """
+        nonAdmin - The auto user is a standard user without elevated access. admin - The auto user is a user with elevated access and operates with full Administrator permissions. The default value is nonAdmin.
+        """
+        linux_user_configuration: NotRequired[pulumi.Input['LinuxUserConfigurationArgsDict']]
+        """
+        This property is ignored if specified on a Windows pool. If not specified, the user is created with the default options.
+        """
+        windows_user_configuration: NotRequired[pulumi.Input['WindowsUserConfigurationArgsDict']]
+        """
+        This property can only be specified if the user is on a Windows pool. If not specified and on a Windows pool, the user is created with the default options.
+        """
+elif False:
+    UserAccountArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class UserAccountArgs:
+    def __init__(__self__, *,
+                 name: pulumi.Input[str],
+                 password: pulumi.Input[str],
+                 elevation_level: Optional[pulumi.Input['ElevationLevel']] = None,
+                 linux_user_configuration: Optional[pulumi.Input['LinuxUserConfigurationArgs']] = None,
+                 windows_user_configuration: Optional[pulumi.Input['WindowsUserConfigurationArgs']] = None):
+        """
+        :param pulumi.Input['ElevationLevel'] elevation_level: nonAdmin - The auto user is a standard user without elevated access. admin - The auto user is a user with elevated access and operates with full Administrator permissions. The default value is nonAdmin.
+        :param pulumi.Input['LinuxUserConfigurationArgs'] linux_user_configuration: This property is ignored if specified on a Windows pool. If not specified, the user is created with the default options.
+        :param pulumi.Input['WindowsUserConfigurationArgs'] windows_user_configuration: This property can only be specified if the user is on a Windows pool. If not specified and on a Windows pool, the user is created with the default options.
+        """
+        pulumi.set(__self__, "name", name)
+        pulumi.set(__self__, "password", password)
+        if elevation_level is not None:
+            pulumi.set(__self__, "elevation_level", elevation_level)
+        if linux_user_configuration is not None:
+            pulumi.set(__self__, "linux_user_configuration", linux_user_configuration)
+        if windows_user_configuration is not None:
+            pulumi.set(__self__, "windows_user_configuration", windows_user_configuration)
+
+    @property
+    @pulumi.getter
+    def name(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "name", value)
+
+    @property
+    @pulumi.getter
+    def password(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "password")
+
+    @password.setter
+    def password(self, value: pulumi.Input[str]):
+        pulumi.set(self, "password", value)
+
+    @property
+    @pulumi.getter(name="elevationLevel")
+    def elevation_level(self) -> Optional[pulumi.Input['ElevationLevel']]:
+        """
+        nonAdmin - The auto user is a standard user without elevated access. admin - The auto user is a user with elevated access and operates with full Administrator permissions. The default value is nonAdmin.
+        """
+        return pulumi.get(self, "elevation_level")
+
+    @elevation_level.setter
+    def elevation_level(self, value: Optional[pulumi.Input['ElevationLevel']]):
+        pulumi.set(self, "elevation_level", value)
+
+    @property
+    @pulumi.getter(name="linuxUserConfiguration")
+    def linux_user_configuration(self) -> Optional[pulumi.Input['LinuxUserConfigurationArgs']]:
+        """
+        This property is ignored if specified on a Windows pool. If not specified, the user is created with the default options.
+        """
+        return pulumi.get(self, "linux_user_configuration")
+
+    @linux_user_configuration.setter
+    def linux_user_configuration(self, value: Optional[pulumi.Input['LinuxUserConfigurationArgs']]):
+        pulumi.set(self, "linux_user_configuration", value)
+
+    @property
+    @pulumi.getter(name="windowsUserConfiguration")
+    def windows_user_configuration(self) -> Optional[pulumi.Input['WindowsUserConfigurationArgs']]:
+        """
+        This property can only be specified if the user is on a Windows pool. If not specified and on a Windows pool, the user is created with the default options.
+        """
+        return pulumi.get(self, "windows_user_configuration")
+
+    @windows_user_configuration.setter
+    def windows_user_configuration(self, value: Optional[pulumi.Input['WindowsUserConfigurationArgs']]):
+        pulumi.set(self, "windows_user_configuration", value)
+
+
+if not MYPY:
+    class UserIdentityArgsDict(TypedDict):
+        """
+        Specify either the userName or autoUser property, but not both.
+        """
+        auto_user: NotRequired[pulumi.Input['AutoUserSpecificationArgsDict']]
+        """
+        The userName and autoUser properties are mutually exclusive; you must specify one but not both.
+        """
+        user_name: NotRequired[pulumi.Input[str]]
+        """
+        The userName and autoUser properties are mutually exclusive; you must specify one but not both.
+        """
+elif False:
+    UserIdentityArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class UserIdentityArgs:
+    def __init__(__self__, *,
+                 auto_user: Optional[pulumi.Input['AutoUserSpecificationArgs']] = None,
+                 user_name: Optional[pulumi.Input[str]] = None):
+        """
+        Specify either the userName or autoUser property, but not both.
+        :param pulumi.Input['AutoUserSpecificationArgs'] auto_user: The userName and autoUser properties are mutually exclusive; you must specify one but not both.
+        :param pulumi.Input[str] user_name: The userName and autoUser properties are mutually exclusive; you must specify one but not both.
+        """
+        if auto_user is not None:
+            pulumi.set(__self__, "auto_user", auto_user)
+        if user_name is not None:
+            pulumi.set(__self__, "user_name", user_name)
+
+    @property
+    @pulumi.getter(name="autoUser")
+    def auto_user(self) -> Optional[pulumi.Input['AutoUserSpecificationArgs']]:
+        """
+        The userName and autoUser properties are mutually exclusive; you must specify one but not both.
+        """
+        return pulumi.get(self, "auto_user")
+
+    @auto_user.setter
+    def auto_user(self, value: Optional[pulumi.Input['AutoUserSpecificationArgs']]):
+        pulumi.set(self, "auto_user", value)
+
+    @property
+    @pulumi.getter(name="userName")
+    def user_name(self) -> Optional[pulumi.Input[str]]:
+        """
+        The userName and autoUser properties are mutually exclusive; you must specify one but not both.
+        """
+        return pulumi.get(self, "user_name")
+
+    @user_name.setter
+    def user_name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "user_name", value)
+
+
+if not MYPY:
+    class VMDiskSecurityProfileArgsDict(TypedDict):
+        """
+        Specifies the security profile settings for the managed disk. **Note**: It can only be set for Confidential VMs and is required when using Confidential VMs.
+        """
+        security_encryption_type: NotRequired[pulumi.Input[Union[str, 'SecurityEncryptionTypes']]]
+elif False:
+    VMDiskSecurityProfileArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class VMDiskSecurityProfileArgs:
+    def __init__(__self__, *,
+                 security_encryption_type: Optional[pulumi.Input[Union[str, 'SecurityEncryptionTypes']]] = None):
+        """
+        Specifies the security profile settings for the managed disk. **Note**: It can only be set for Confidential VMs and is required when using Confidential VMs.
+        """
+        if security_encryption_type is not None:
+            pulumi.set(__self__, "security_encryption_type", security_encryption_type)
+
+    @property
+    @pulumi.getter(name="securityEncryptionType")
+    def security_encryption_type(self) -> Optional[pulumi.Input[Union[str, 'SecurityEncryptionTypes']]]:
+        return pulumi.get(self, "security_encryption_type")
+
+    @security_encryption_type.setter
+    def security_encryption_type(self, value: Optional[pulumi.Input[Union[str, 'SecurityEncryptionTypes']]]):
+        pulumi.set(self, "security_encryption_type", value)
+
+
+if not MYPY:
+    class VMExtensionArgsDict(TypedDict):
+        name: pulumi.Input[str]
+        publisher: pulumi.Input[str]
+        type: pulumi.Input[str]
+        auto_upgrade_minor_version: NotRequired[pulumi.Input[bool]]
+        """
+        Indicates whether the extension should use a newer minor version if one is available at deployment time. Once deployed, however, the extension will not upgrade minor versions unless redeployed, even with this property set to true.
+        """
+        enable_automatic_upgrade: NotRequired[pulumi.Input[bool]]
+        """
+        Indicates whether the extension should be automatically upgraded by the platform if there is a newer version of the extension available.
+        """
+        protected_settings: NotRequired[Any]
+        """
+        The extension can contain either protectedSettings or protectedSettingsFromKeyVault or no protected settings at all. 
+        """
+        provision_after_extensions: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        Collection of extension names after which this extension needs to be provisioned.
+        """
+        settings: NotRequired[Any]
+        type_handler_version: NotRequired[pulumi.Input[str]]
+elif False:
+    VMExtensionArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class VMExtensionArgs:
+    def __init__(__self__, *,
+                 name: pulumi.Input[str],
+                 publisher: pulumi.Input[str],
+                 type: pulumi.Input[str],
+                 auto_upgrade_minor_version: Optional[pulumi.Input[bool]] = None,
+                 enable_automatic_upgrade: Optional[pulumi.Input[bool]] = None,
+                 protected_settings: Optional[Any] = None,
+                 provision_after_extensions: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 settings: Optional[Any] = None,
+                 type_handler_version: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[bool] auto_upgrade_minor_version: Indicates whether the extension should use a newer minor version if one is available at deployment time. Once deployed, however, the extension will not upgrade minor versions unless redeployed, even with this property set to true.
+        :param pulumi.Input[bool] enable_automatic_upgrade: Indicates whether the extension should be automatically upgraded by the platform if there is a newer version of the extension available.
+        :param Any protected_settings: The extension can contain either protectedSettings or protectedSettingsFromKeyVault or no protected settings at all. 
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] provision_after_extensions: Collection of extension names after which this extension needs to be provisioned.
+        """
+        pulumi.set(__self__, "name", name)
+        pulumi.set(__self__, "publisher", publisher)
+        pulumi.set(__self__, "type", type)
+        if auto_upgrade_minor_version is not None:
+            pulumi.set(__self__, "auto_upgrade_minor_version", auto_upgrade_minor_version)
+        if enable_automatic_upgrade is not None:
+            pulumi.set(__self__, "enable_automatic_upgrade", enable_automatic_upgrade)
+        if protected_settings is not None:
+            pulumi.set(__self__, "protected_settings", protected_settings)
+        if provision_after_extensions is not None:
+            pulumi.set(__self__, "provision_after_extensions", provision_after_extensions)
+        if settings is not None:
+            pulumi.set(__self__, "settings", settings)
+        if type_handler_version is not None:
+            pulumi.set(__self__, "type_handler_version", type_handler_version)
+
+    @property
+    @pulumi.getter
+    def name(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "name", value)
+
+    @property
+    @pulumi.getter
+    def publisher(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "publisher")
+
+    @publisher.setter
+    def publisher(self, value: pulumi.Input[str]):
+        pulumi.set(self, "publisher", value)
+
+    @property
+    @pulumi.getter
+    def type(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "type")
+
+    @type.setter
+    def type(self, value: pulumi.Input[str]):
+        pulumi.set(self, "type", value)
+
+    @property
+    @pulumi.getter(name="autoUpgradeMinorVersion")
+    def auto_upgrade_minor_version(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Indicates whether the extension should use a newer minor version if one is available at deployment time. Once deployed, however, the extension will not upgrade minor versions unless redeployed, even with this property set to true.
+        """
+        return pulumi.get(self, "auto_upgrade_minor_version")
+
+    @auto_upgrade_minor_version.setter
+    def auto_upgrade_minor_version(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "auto_upgrade_minor_version", value)
+
+    @property
+    @pulumi.getter(name="enableAutomaticUpgrade")
+    def enable_automatic_upgrade(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Indicates whether the extension should be automatically upgraded by the platform if there is a newer version of the extension available.
+        """
+        return pulumi.get(self, "enable_automatic_upgrade")
+
+    @enable_automatic_upgrade.setter
+    def enable_automatic_upgrade(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "enable_automatic_upgrade", value)
+
+    @property
+    @pulumi.getter(name="protectedSettings")
+    def protected_settings(self) -> Optional[Any]:
+        """
+        The extension can contain either protectedSettings or protectedSettingsFromKeyVault or no protected settings at all. 
+        """
+        return pulumi.get(self, "protected_settings")
+
+    @protected_settings.setter
+    def protected_settings(self, value: Optional[Any]):
+        pulumi.set(self, "protected_settings", value)
+
+    @property
+    @pulumi.getter(name="provisionAfterExtensions")
+    def provision_after_extensions(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        Collection of extension names after which this extension needs to be provisioned.
+        """
+        return pulumi.get(self, "provision_after_extensions")
+
+    @provision_after_extensions.setter
+    def provision_after_extensions(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "provision_after_extensions", value)
+
+    @property
+    @pulumi.getter
+    def settings(self) -> Optional[Any]:
+        return pulumi.get(self, "settings")
+
+    @settings.setter
+    def settings(self, value: Optional[Any]):
+        pulumi.set(self, "settings", value)
+
+    @property
+    @pulumi.getter(name="typeHandlerVersion")
+    def type_handler_version(self) -> Optional[pulumi.Input[str]]:
+        return pulumi.get(self, "type_handler_version")
+
+    @type_handler_version.setter
+    def type_handler_version(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "type_handler_version", value)
+
+
+if not MYPY:
+    class VirtualMachineConfigurationArgsDict(TypedDict):
+        image_reference: pulumi.Input['ImageReferenceArgsDict']
+        node_agent_sku_id: pulumi.Input[str]
+        """
+        The Batch node agent is a program that runs on each node in the pool, and provides the command-and-control interface between the node and the Batch service. There are different implementations of the node agent, known as SKUs, for different operating systems. You must specify a node agent SKU which matches the selected image reference. To get the list of supported node agent SKUs along with their list of verified image references, see the 'List supported node agent SKUs' operation.
+        """
+        container_configuration: NotRequired[pulumi.Input['ContainerConfigurationArgsDict']]
+        """
+        If specified, setup is performed on each node in the pool to allow tasks to run in containers. All regular tasks and job manager tasks run on this pool must specify the containerSettings property, and all other tasks may specify it.
+        """
+        data_disks: NotRequired[pulumi.Input[Sequence[pulumi.Input['DataDiskArgsDict']]]]
+        """
+        This property must be specified if the compute nodes in the pool need to have empty data disks attached to them.
+        """
+        disk_encryption_configuration: NotRequired[pulumi.Input['DiskEncryptionConfigurationArgsDict']]
+        """
+        If specified, encryption is performed on each node in the pool during node provisioning.
+        """
+        extensions: NotRequired[pulumi.Input[Sequence[pulumi.Input['VMExtensionArgsDict']]]]
+        """
+        If specified, the extensions mentioned in this configuration will be installed on each node.
+        """
+        license_type: NotRequired[pulumi.Input[str]]
+        """
+        This only applies to images that contain the Windows operating system, and should only be used when you hold valid on-premises licenses for the nodes which will be deployed. If omitted, no on-premises licensing discount is applied. Values are:
+
+         Windows_Server - The on-premises license is for Windows Server.
+         Windows_Client - The on-premises license is for Windows Client.
+        """
+        node_placement_configuration: NotRequired[pulumi.Input['NodePlacementConfigurationArgsDict']]
+        """
+        This configuration will specify rules on how nodes in the pool will be physically allocated.
+        """
+        os_disk: NotRequired[pulumi.Input['OSDiskArgsDict']]
+        """
+        Contains configuration for ephemeral OSDisk settings.
+        """
+        security_profile: NotRequired[pulumi.Input['SecurityProfileArgsDict']]
+        """
+        Specifies the security profile settings for the virtual machine or virtual machine scale set.
+        """
+        service_artifact_reference: NotRequired[pulumi.Input['ServiceArtifactReferenceArgsDict']]
+        """
+        The service artifact reference id in the form of /subscriptions/{subscriptionId}/resourceGroups/{resourceGroup}/providers/Microsoft.Compute/galleries/{galleryName}/serviceArtifacts/{serviceArtifactName}/vmArtifactsProfiles/{vmArtifactsProfilesName}
+        """
+        windows_configuration: NotRequired[pulumi.Input['WindowsConfigurationArgsDict']]
+        """
+        This property must not be specified if the imageReference specifies a Linux OS image.
+        """
+elif False:
+    VirtualMachineConfigurationArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class VirtualMachineConfigurationArgs:
+    def __init__(__self__, *,
+                 image_reference: pulumi.Input['ImageReferenceArgs'],
+                 node_agent_sku_id: pulumi.Input[str],
+                 container_configuration: Optional[pulumi.Input['ContainerConfigurationArgs']] = None,
+                 data_disks: Optional[pulumi.Input[Sequence[pulumi.Input['DataDiskArgs']]]] = None,
+                 disk_encryption_configuration: Optional[pulumi.Input['DiskEncryptionConfigurationArgs']] = None,
+                 extensions: Optional[pulumi.Input[Sequence[pulumi.Input['VMExtensionArgs']]]] = None,
+                 license_type: Optional[pulumi.Input[str]] = None,
+                 node_placement_configuration: Optional[pulumi.Input['NodePlacementConfigurationArgs']] = None,
+                 os_disk: Optional[pulumi.Input['OSDiskArgs']] = None,
+                 security_profile: Optional[pulumi.Input['SecurityProfileArgs']] = None,
+                 service_artifact_reference: Optional[pulumi.Input['ServiceArtifactReferenceArgs']] = None,
+                 windows_configuration: Optional[pulumi.Input['WindowsConfigurationArgs']] = None):
+        """
+        :param pulumi.Input[str] node_agent_sku_id: The Batch node agent is a program that runs on each node in the pool, and provides the command-and-control interface between the node and the Batch service. There are different implementations of the node agent, known as SKUs, for different operating systems. You must specify a node agent SKU which matches the selected image reference. To get the list of supported node agent SKUs along with their list of verified image references, see the 'List supported node agent SKUs' operation.
+        :param pulumi.Input['ContainerConfigurationArgs'] container_configuration: If specified, setup is performed on each node in the pool to allow tasks to run in containers. All regular tasks and job manager tasks run on this pool must specify the containerSettings property, and all other tasks may specify it.
+        :param pulumi.Input[Sequence[pulumi.Input['DataDiskArgs']]] data_disks: This property must be specified if the compute nodes in the pool need to have empty data disks attached to them.
+        :param pulumi.Input['DiskEncryptionConfigurationArgs'] disk_encryption_configuration: If specified, encryption is performed on each node in the pool during node provisioning.
+        :param pulumi.Input[Sequence[pulumi.Input['VMExtensionArgs']]] extensions: If specified, the extensions mentioned in this configuration will be installed on each node.
+        :param pulumi.Input[str] license_type: This only applies to images that contain the Windows operating system, and should only be used when you hold valid on-premises licenses for the nodes which will be deployed. If omitted, no on-premises licensing discount is applied. Values are:
+               
+                Windows_Server - The on-premises license is for Windows Server.
+                Windows_Client - The on-premises license is for Windows Client.
+        :param pulumi.Input['NodePlacementConfigurationArgs'] node_placement_configuration: This configuration will specify rules on how nodes in the pool will be physically allocated.
+        :param pulumi.Input['OSDiskArgs'] os_disk: Contains configuration for ephemeral OSDisk settings.
+        :param pulumi.Input['SecurityProfileArgs'] security_profile: Specifies the security profile settings for the virtual machine or virtual machine scale set.
+        :param pulumi.Input['ServiceArtifactReferenceArgs'] service_artifact_reference: The service artifact reference id in the form of /subscriptions/{subscriptionId}/resourceGroups/{resourceGroup}/providers/Microsoft.Compute/galleries/{galleryName}/serviceArtifacts/{serviceArtifactName}/vmArtifactsProfiles/{vmArtifactsProfilesName}
+        :param pulumi.Input['WindowsConfigurationArgs'] windows_configuration: This property must not be specified if the imageReference specifies a Linux OS image.
+        """
+        pulumi.set(__self__, "image_reference", image_reference)
+        pulumi.set(__self__, "node_agent_sku_id", node_agent_sku_id)
+        if container_configuration is not None:
+            pulumi.set(__self__, "container_configuration", container_configuration)
+        if data_disks is not None:
+            pulumi.set(__self__, "data_disks", data_disks)
+        if disk_encryption_configuration is not None:
+            pulumi.set(__self__, "disk_encryption_configuration", disk_encryption_configuration)
+        if extensions is not None:
+            pulumi.set(__self__, "extensions", extensions)
+        if license_type is not None:
+            pulumi.set(__self__, "license_type", license_type)
+        if node_placement_configuration is not None:
+            pulumi.set(__self__, "node_placement_configuration", node_placement_configuration)
+        if os_disk is not None:
+            pulumi.set(__self__, "os_disk", os_disk)
+        if security_profile is not None:
+            pulumi.set(__self__, "security_profile", security_profile)
+        if service_artifact_reference is not None:
+            pulumi.set(__self__, "service_artifact_reference", service_artifact_reference)
+        if windows_configuration is not None:
+            pulumi.set(__self__, "windows_configuration", windows_configuration)
+
+    @property
+    @pulumi.getter(name="imageReference")
+    def image_reference(self) -> pulumi.Input['ImageReferenceArgs']:
+        return pulumi.get(self, "image_reference")
+
+    @image_reference.setter
+    def image_reference(self, value: pulumi.Input['ImageReferenceArgs']):
+        pulumi.set(self, "image_reference", value)
+
+    @property
+    @pulumi.getter(name="nodeAgentSkuId")
+    def node_agent_sku_id(self) -> pulumi.Input[str]:
+        """
+        The Batch node agent is a program that runs on each node in the pool, and provides the command-and-control interface between the node and the Batch service. There are different implementations of the node agent, known as SKUs, for different operating systems. You must specify a node agent SKU which matches the selected image reference. To get the list of supported node agent SKUs along with their list of verified image references, see the 'List supported node agent SKUs' operation.
+        """
+        return pulumi.get(self, "node_agent_sku_id")
+
+    @node_agent_sku_id.setter
+    def node_agent_sku_id(self, value: pulumi.Input[str]):
+        pulumi.set(self, "node_agent_sku_id", value)
+
+    @property
+    @pulumi.getter(name="containerConfiguration")
+    def container_configuration(self) -> Optional[pulumi.Input['ContainerConfigurationArgs']]:
+        """
+        If specified, setup is performed on each node in the pool to allow tasks to run in containers. All regular tasks and job manager tasks run on this pool must specify the containerSettings property, and all other tasks may specify it.
+        """
+        return pulumi.get(self, "container_configuration")
+
+    @container_configuration.setter
+    def container_configuration(self, value: Optional[pulumi.Input['ContainerConfigurationArgs']]):
+        pulumi.set(self, "container_configuration", value)
+
+    @property
+    @pulumi.getter(name="dataDisks")
+    def data_disks(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['DataDiskArgs']]]]:
+        """
+        This property must be specified if the compute nodes in the pool need to have empty data disks attached to them.
+        """
+        return pulumi.get(self, "data_disks")
+
+    @data_disks.setter
+    def data_disks(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['DataDiskArgs']]]]):
+        pulumi.set(self, "data_disks", value)
+
+    @property
+    @pulumi.getter(name="diskEncryptionConfiguration")
+    def disk_encryption_configuration(self) -> Optional[pulumi.Input['DiskEncryptionConfigurationArgs']]:
+        """
+        If specified, encryption is performed on each node in the pool during node provisioning.
+        """
+        return pulumi.get(self, "disk_encryption_configuration")
+
+    @disk_encryption_configuration.setter
+    def disk_encryption_configuration(self, value: Optional[pulumi.Input['DiskEncryptionConfigurationArgs']]):
+        pulumi.set(self, "disk_encryption_configuration", value)
+
+    @property
+    @pulumi.getter
+    def extensions(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['VMExtensionArgs']]]]:
+        """
+        If specified, the extensions mentioned in this configuration will be installed on each node.
+        """
+        return pulumi.get(self, "extensions")
+
+    @extensions.setter
+    def extensions(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['VMExtensionArgs']]]]):
+        pulumi.set(self, "extensions", value)
+
+    @property
+    @pulumi.getter(name="licenseType")
+    def license_type(self) -> Optional[pulumi.Input[str]]:
+        """
+        This only applies to images that contain the Windows operating system, and should only be used when you hold valid on-premises licenses for the nodes which will be deployed. If omitted, no on-premises licensing discount is applied. Values are:
+
+         Windows_Server - The on-premises license is for Windows Server.
+         Windows_Client - The on-premises license is for Windows Client.
+        """
+        return pulumi.get(self, "license_type")
+
+    @license_type.setter
+    def license_type(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "license_type", value)
+
+    @property
+    @pulumi.getter(name="nodePlacementConfiguration")
+    def node_placement_configuration(self) -> Optional[pulumi.Input['NodePlacementConfigurationArgs']]:
+        """
+        This configuration will specify rules on how nodes in the pool will be physically allocated.
+        """
+        return pulumi.get(self, "node_placement_configuration")
+
+    @node_placement_configuration.setter
+    def node_placement_configuration(self, value: Optional[pulumi.Input['NodePlacementConfigurationArgs']]):
+        pulumi.set(self, "node_placement_configuration", value)
+
+    @property
+    @pulumi.getter(name="osDisk")
+    def os_disk(self) -> Optional[pulumi.Input['OSDiskArgs']]:
+        """
+        Contains configuration for ephemeral OSDisk settings.
+        """
+        return pulumi.get(self, "os_disk")
+
+    @os_disk.setter
+    def os_disk(self, value: Optional[pulumi.Input['OSDiskArgs']]):
+        pulumi.set(self, "os_disk", value)
+
+    @property
+    @pulumi.getter(name="securityProfile")
+    def security_profile(self) -> Optional[pulumi.Input['SecurityProfileArgs']]:
+        """
+        Specifies the security profile settings for the virtual machine or virtual machine scale set.
+        """
+        return pulumi.get(self, "security_profile")
+
+    @security_profile.setter
+    def security_profile(self, value: Optional[pulumi.Input['SecurityProfileArgs']]):
+        pulumi.set(self, "security_profile", value)
+
+    @property
+    @pulumi.getter(name="serviceArtifactReference")
+    def service_artifact_reference(self) -> Optional[pulumi.Input['ServiceArtifactReferenceArgs']]:
+        """
+        The service artifact reference id in the form of /subscriptions/{subscriptionId}/resourceGroups/{resourceGroup}/providers/Microsoft.Compute/galleries/{galleryName}/serviceArtifacts/{serviceArtifactName}/vmArtifactsProfiles/{vmArtifactsProfilesName}
+        """
+        return pulumi.get(self, "service_artifact_reference")
+
+    @service_artifact_reference.setter
+    def service_artifact_reference(self, value: Optional[pulumi.Input['ServiceArtifactReferenceArgs']]):
+        pulumi.set(self, "service_artifact_reference", value)
+
+    @property
+    @pulumi.getter(name="windowsConfiguration")
+    def windows_configuration(self) -> Optional[pulumi.Input['WindowsConfigurationArgs']]:
+        """
+        This property must not be specified if the imageReference specifies a Linux OS image.
+        """
+        return pulumi.get(self, "windows_configuration")
+
+    @windows_configuration.setter
+    def windows_configuration(self, value: Optional[pulumi.Input['WindowsConfigurationArgs']]):
+        pulumi.set(self, "windows_configuration", value)
+
+
+if not MYPY:
+    class WindowsConfigurationArgsDict(TypedDict):
+        enable_automatic_updates: NotRequired[pulumi.Input[bool]]
+        """
+        If omitted, the default value is true.
+        """
+elif False:
+    WindowsConfigurationArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class WindowsConfigurationArgs:
+    def __init__(__self__, *,
+                 enable_automatic_updates: Optional[pulumi.Input[bool]] = None):
+        """
+        :param pulumi.Input[bool] enable_automatic_updates: If omitted, the default value is true.
+        """
+        if enable_automatic_updates is not None:
+            pulumi.set(__self__, "enable_automatic_updates", enable_automatic_updates)
+
+    @property
+    @pulumi.getter(name="enableAutomaticUpdates")
+    def enable_automatic_updates(self) -> Optional[pulumi.Input[bool]]:
+        """
+        If omitted, the default value is true.
+        """
+        return pulumi.get(self, "enable_automatic_updates")
+
+    @enable_automatic_updates.setter
+    def enable_automatic_updates(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "enable_automatic_updates", value)
+
+
+if not MYPY:
+    class WindowsUserConfigurationArgsDict(TypedDict):
+        login_mode: NotRequired[pulumi.Input['LoginMode']]
+        """
+        Specifies login mode for the user. The default value is Interactive.
+        """
+elif False:
+    WindowsUserConfigurationArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class WindowsUserConfigurationArgs:
+    def __init__(__self__, *,
+                 login_mode: Optional[pulumi.Input['LoginMode']] = None):
+        """
+        :param pulumi.Input['LoginMode'] login_mode: Specifies login mode for the user. The default value is Interactive.
+        """
+        if login_mode is not None:
+            pulumi.set(__self__, "login_mode", login_mode)
+
+    @property
+    @pulumi.getter(name="loginMode")
+    def login_mode(self) -> Optional[pulumi.Input['LoginMode']]:
+        """
+        Specifies login mode for the user. The default value is Interactive.
+        """
+        return pulumi.get(self, "login_mode")
+
+    @login_mode.setter
+    def login_mode(self, value: Optional[pulumi.Input['LoginMode']]):
+        pulumi.set(self, "login_mode", value)
+
+