pulumi-azure-native 2.86.0a1738343576__py3-none-any.whl → 2.87.0__py3-none-any.whl

pulumi_azure_native/sovereign/v20250227preview/_inputs.py

@@ -0,0 +1,1208 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from ... import _utilities
+from ._enums import *
+
+__all__ = [
+    'CustomNamingConventionArgs',
+    'CustomNamingConventionArgsDict',
+    'DecommissionedManagementGroupPropertiesArgs',
+    'DecommissionedManagementGroupPropertiesArgsDict',
+    'LandingZoneAccountResourcePropertiesArgs',
+    'LandingZoneAccountResourcePropertiesArgsDict',
+    'LandingZoneConfigurationResourcePropertiesArgs',
+    'LandingZoneConfigurationResourcePropertiesArgsDict',
+    'LandingZoneManagementGroupPropertiesArgs',
+    'LandingZoneManagementGroupPropertiesArgsDict',
+    'LandingZoneRegistrationResourcePropertiesArgs',
+    'LandingZoneRegistrationResourcePropertiesArgsDict',
+    'ManagedIdentityPropertiesArgs',
+    'ManagedIdentityPropertiesArgsDict',
+    'ManagedServiceIdentityArgs',
+    'ManagedServiceIdentityArgsDict',
+    'ManagementGroupPropertiesArgs',
+    'ManagementGroupPropertiesArgsDict',
+    'PlatformManagementGroupPropertiesArgs',
+    'PlatformManagementGroupPropertiesArgsDict',
+    'PolicyInitiativeAssignmentPropertiesArgs',
+    'PolicyInitiativeAssignmentPropertiesArgsDict',
+    'SandboxManagementGroupPropertiesArgs',
+    'SandboxManagementGroupPropertiesArgsDict',
+    'TagsArgs',
+    'TagsArgsDict',
+]
+
+MYPY = False
+
+if not MYPY:
+    class CustomNamingConventionArgsDict(TypedDict):
+        """
+        The details for the custom resource override.
+        """
+        formula: pulumi.Input[str]
+        """
+        The custom formula for the resource type.
+        """
+        resource_type: pulumi.Input[Union[str, 'ResourceType']]
+        """
+        The type of the resource.
+        """
+elif False:
+    CustomNamingConventionArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class CustomNamingConventionArgs:
+    def __init__(__self__, *,
+                 formula: pulumi.Input[str],
+                 resource_type: pulumi.Input[Union[str, 'ResourceType']]):
+        """
+        The details for the custom resource override.
+        :param pulumi.Input[str] formula: The custom formula for the resource type.
+        :param pulumi.Input[Union[str, 'ResourceType']] resource_type: The type of the resource.
+        """
+        pulumi.set(__self__, "formula", formula)
+        pulumi.set(__self__, "resource_type", resource_type)
+
+    @property
+    @pulumi.getter
+    def formula(self) -> pulumi.Input[str]:
+        """
+        The custom formula for the resource type.
+        """
+        return pulumi.get(self, "formula")
+
+    @formula.setter
+    def formula(self, value: pulumi.Input[str]):
+        pulumi.set(self, "formula", value)
+
+    @property
+    @pulumi.getter(name="resourceType")
+    def resource_type(self) -> pulumi.Input[Union[str, 'ResourceType']]:
+        """
+        The type of the resource.
+        """
+        return pulumi.get(self, "resource_type")
+
+    @resource_type.setter
+    def resource_type(self, value: pulumi.Input[Union[str, 'ResourceType']]):
+        pulumi.set(self, "resource_type", value)
+
+
+if not MYPY:
+    class DecommissionedManagementGroupPropertiesArgsDict(TypedDict):
+        """
+        Decommissioned management group properties.
+        """
+        create: pulumi.Input[bool]
+        """
+        When set to false, this management group will not be created. The default value is false.
+        """
+        policy_initiatives_assignment_properties: pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgsDict']]]
+        """
+        Array of initiative assignments to be applied to the management group.
+        """
+elif False:
+    DecommissionedManagementGroupPropertiesArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class DecommissionedManagementGroupPropertiesArgs:
+    def __init__(__self__, *,
+                 create: pulumi.Input[bool],
+                 policy_initiatives_assignment_properties: pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgs']]]):
+        """
+        Decommissioned management group properties.
+        :param pulumi.Input[bool] create: When set to false, this management group will not be created. The default value is false.
+        :param pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgs']]] policy_initiatives_assignment_properties: Array of initiative assignments to be applied to the management group.
+        """
+        pulumi.set(__self__, "create", create)
+        pulumi.set(__self__, "policy_initiatives_assignment_properties", policy_initiatives_assignment_properties)
+
+    @property
+    @pulumi.getter
+    def create(self) -> pulumi.Input[bool]:
+        """
+        When set to false, this management group will not be created. The default value is false.
+        """
+        return pulumi.get(self, "create")
+
+    @create.setter
+    def create(self, value: pulumi.Input[bool]):
+        pulumi.set(self, "create", value)
+
+    @property
+    @pulumi.getter(name="policyInitiativesAssignmentProperties")
+    def policy_initiatives_assignment_properties(self) -> pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgs']]]:
+        """
+        Array of initiative assignments to be applied to the management group.
+        """
+        return pulumi.get(self, "policy_initiatives_assignment_properties")
+
+    @policy_initiatives_assignment_properties.setter
+    def policy_initiatives_assignment_properties(self, value: pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgs']]]):
+        pulumi.set(self, "policy_initiatives_assignment_properties", value)
+
+
+if not MYPY:
+    class LandingZoneAccountResourcePropertiesArgsDict(TypedDict):
+        """
+        The properties of landing zone account resource type.
+        """
+        storage_account: pulumi.Input[str]
+        """
+        The storage account that will host the generated slz code.
+        """
+elif False:
+    LandingZoneAccountResourcePropertiesArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class LandingZoneAccountResourcePropertiesArgs:
+    def __init__(__self__, *,
+                 storage_account: pulumi.Input[str]):
+        """
+        The properties of landing zone account resource type.
+        :param pulumi.Input[str] storage_account: The storage account that will host the generated slz code.
+        """
+        pulumi.set(__self__, "storage_account", storage_account)
+
+    @property
+    @pulumi.getter(name="storageAccount")
+    def storage_account(self) -> pulumi.Input[str]:
+        """
+        The storage account that will host the generated slz code.
+        """
+        return pulumi.get(self, "storage_account")
+
+    @storage_account.setter
+    def storage_account(self, value: pulumi.Input[str]):
+        pulumi.set(self, "storage_account", value)
+
+
+if not MYPY:
+    class LandingZoneConfigurationResourcePropertiesArgsDict(TypedDict):
+        """
+        The properties of landing zone configuration resource type.
+        """
+        azure_bastion_creation_option: pulumi.Input[Union[str, 'ResourceCreationOptions']]
+        """
+        To deploy the bastion service, choose Yes, otherwise No. Choose UseExisting for existing bastion service.
+        """
+        ddos_protection_creation_option: pulumi.Input[Union[str, 'ResourceCreationOptions']]
+        """
+        To deploy ddos, choose Yes, otherwise No. Select Existing to provide an existing ddos protection plan.
+        """
+        firewall_creation_option: pulumi.Input[Union[str, 'FirewallCreationOptions']]
+        """
+        To deploy firewall, choose the Standard/Premium based on the desired SKU. Choose None for no firewall and UseExisting for a pre existing one.
+        """
+        gateway_subnet_cidr_block: pulumi.Input[str]
+        """
+        Gateway subnet. IPv4 CIDR block.
+        """
+        hub_network_cidr_block: pulumi.Input[str]
+        """
+        The address space for the VNET. IPv4 CIDR block.
+        """
+        log_analytics_workspace_creation_option: pulumi.Input[Union[str, 'ResourceCreationOptions']]
+        """
+        To deploy log analytics workspace, choose Yes, otherwise No. Select UseExisting to provide an existing log analytics workspace.
+        """
+        log_retention_in_days: pulumi.Input[float]
+        """
+        Set how long logs are retained for, in days. Minimum length is 30 and maximum is 730
+        """
+        managed_identity: pulumi.Input['ManagedIdentityPropertiesArgsDict']
+        """
+        The managed identity to be tied to this landing zone configuration
+        """
+        azure_bastion_subnet_cidr_block: NotRequired[pulumi.Input[str]]
+        """
+        Azure bastion subnet. IP v4 CIDR block.
+        """
+        custom_naming_convention: NotRequired[pulumi.Input[Sequence[pulumi.Input['CustomNamingConventionArgsDict']]]]
+        """
+        The customized naming convention for one or more resource types in this landing zone configuration
+        """
+        decommissioned_mg_metadata: NotRequired[pulumi.Input['DecommissionedManagementGroupPropertiesArgsDict']]
+        """
+        This will be applied to the decommissioned management group.
+        """
+        existing_azure_bastion_id: NotRequired[pulumi.Input[str]]
+        """
+        The resource id of azure bastion.
+        """
+        existing_ddos_protection_id: NotRequired[pulumi.Input[str]]
+        """
+        The resource id of the ddos protection plan.
+        """
+        existing_log_analytics_workspace_id: NotRequired[pulumi.Input[str]]
+        """
+        The resource id of the log analytics workspace that was created to centralize log ingestion.
+        """
+        firewall_subnet_cidr_block: NotRequired[pulumi.Input[str]]
+        """
+        Azure firewall subnet. IPv4 CIDR block.
+        """
+        landing_zones_mg_children: NotRequired[pulumi.Input[Sequence[pulumi.Input['LandingZoneManagementGroupPropertiesArgsDict']]]]
+        """
+        Landing zone children management group properties
+        """
+        landing_zones_mg_metadata: NotRequired[pulumi.Input['ManagementGroupPropertiesArgsDict']]
+        """
+        This will be applied to the landing zone management groups.
+        """
+        naming_convention_formula: NotRequired[pulumi.Input[str]]
+        """
+        The naming convention that's used by default for all resource types for this landing zone configuration
+        """
+        platform_connectivity_mg_metadata: NotRequired[pulumi.Input['ManagementGroupPropertiesArgsDict']]
+        """
+        This will be applied to the connectivity management group under platform.
+        """
+        platform_identity_mg_metadata: NotRequired[pulumi.Input['ManagementGroupPropertiesArgsDict']]
+        """
+        This will be applied to the identity management group under platform.
+        """
+        platform_management_mg_metadata: NotRequired[pulumi.Input['ManagementGroupPropertiesArgsDict']]
+        """
+        This will be applied to the management management group under platform.
+        """
+        platform_mg_children: NotRequired[pulumi.Input[Sequence[pulumi.Input['PlatformManagementGroupPropertiesArgsDict']]]]
+        """
+        Platform children management group properties.
+        """
+        platform_mg_metadata: NotRequired[pulumi.Input['ManagementGroupPropertiesArgsDict']]
+        """
+        This will be applied to the platform management group.
+        """
+        sandbox_mg_metadata: NotRequired[pulumi.Input['SandboxManagementGroupPropertiesArgsDict']]
+        """
+        This will be applied to the sandbox management group.
+        """
+        tags: NotRequired[pulumi.Input[Sequence[pulumi.Input['TagsArgsDict']]]]
+        """
+        Array of tag objects in format of {'name':'a tag name', 'value':'a tag value'}.
+        """
+        top_level_mg_metadata: NotRequired[pulumi.Input['ManagementGroupPropertiesArgsDict']]
+        """
+        This will be applied to the root of the landing zone deployment.
+        """
+elif False:
+    LandingZoneConfigurationResourcePropertiesArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class LandingZoneConfigurationResourcePropertiesArgs:
+    def __init__(__self__, *,
+                 azure_bastion_creation_option: pulumi.Input[Union[str, 'ResourceCreationOptions']],
+                 ddos_protection_creation_option: pulumi.Input[Union[str, 'ResourceCreationOptions']],
+                 firewall_creation_option: pulumi.Input[Union[str, 'FirewallCreationOptions']],
+                 gateway_subnet_cidr_block: pulumi.Input[str],
+                 hub_network_cidr_block: pulumi.Input[str],
+                 log_analytics_workspace_creation_option: pulumi.Input[Union[str, 'ResourceCreationOptions']],
+                 log_retention_in_days: pulumi.Input[float],
+                 managed_identity: pulumi.Input['ManagedIdentityPropertiesArgs'],
+                 azure_bastion_subnet_cidr_block: Optional[pulumi.Input[str]] = None,
+                 custom_naming_convention: Optional[pulumi.Input[Sequence[pulumi.Input['CustomNamingConventionArgs']]]] = None,
+                 decommissioned_mg_metadata: Optional[pulumi.Input['DecommissionedManagementGroupPropertiesArgs']] = None,
+                 existing_azure_bastion_id: Optional[pulumi.Input[str]] = None,
+                 existing_ddos_protection_id: Optional[pulumi.Input[str]] = None,
+                 existing_log_analytics_workspace_id: Optional[pulumi.Input[str]] = None,
+                 firewall_subnet_cidr_block: Optional[pulumi.Input[str]] = None,
+                 landing_zones_mg_children: Optional[pulumi.Input[Sequence[pulumi.Input['LandingZoneManagementGroupPropertiesArgs']]]] = None,
+                 landing_zones_mg_metadata: Optional[pulumi.Input['ManagementGroupPropertiesArgs']] = None,
+                 naming_convention_formula: Optional[pulumi.Input[str]] = None,
+                 platform_connectivity_mg_metadata: Optional[pulumi.Input['ManagementGroupPropertiesArgs']] = None,
+                 platform_identity_mg_metadata: Optional[pulumi.Input['ManagementGroupPropertiesArgs']] = None,
+                 platform_management_mg_metadata: Optional[pulumi.Input['ManagementGroupPropertiesArgs']] = None,
+                 platform_mg_children: Optional[pulumi.Input[Sequence[pulumi.Input['PlatformManagementGroupPropertiesArgs']]]] = None,
+                 platform_mg_metadata: Optional[pulumi.Input['ManagementGroupPropertiesArgs']] = None,
+                 sandbox_mg_metadata: Optional[pulumi.Input['SandboxManagementGroupPropertiesArgs']] = None,
+                 tags: Optional[pulumi.Input[Sequence[pulumi.Input['TagsArgs']]]] = None,
+                 top_level_mg_metadata: Optional[pulumi.Input['ManagementGroupPropertiesArgs']] = None):
+        """
+        The properties of landing zone configuration resource type.
+        :param pulumi.Input[Union[str, 'ResourceCreationOptions']] azure_bastion_creation_option: To deploy the bastion service, choose Yes, otherwise No. Choose UseExisting for existing bastion service.
+        :param pulumi.Input[Union[str, 'ResourceCreationOptions']] ddos_protection_creation_option: To deploy ddos, choose Yes, otherwise No. Select Existing to provide an existing ddos protection plan.
+        :param pulumi.Input[Union[str, 'FirewallCreationOptions']] firewall_creation_option: To deploy firewall, choose the Standard/Premium based on the desired SKU. Choose None for no firewall and UseExisting for a pre existing one.
+        :param pulumi.Input[str] gateway_subnet_cidr_block: Gateway subnet. IPv4 CIDR block.
+        :param pulumi.Input[str] hub_network_cidr_block: The address space for the VNET. IPv4 CIDR block.
+        :param pulumi.Input[Union[str, 'ResourceCreationOptions']] log_analytics_workspace_creation_option: To deploy log analytics workspace, choose Yes, otherwise No. Select UseExisting to provide an existing log analytics workspace.
+        :param pulumi.Input[float] log_retention_in_days: Set how long logs are retained for, in days. Minimum length is 30 and maximum is 730
+        :param pulumi.Input['ManagedIdentityPropertiesArgs'] managed_identity: The managed identity to be tied to this landing zone configuration
+        :param pulumi.Input[str] azure_bastion_subnet_cidr_block: Azure bastion subnet. IP v4 CIDR block.
+        :param pulumi.Input[Sequence[pulumi.Input['CustomNamingConventionArgs']]] custom_naming_convention: The customized naming convention for one or more resource types in this landing zone configuration
+        :param pulumi.Input['DecommissionedManagementGroupPropertiesArgs'] decommissioned_mg_metadata: This will be applied to the decommissioned management group.
+        :param pulumi.Input[str] existing_azure_bastion_id: The resource id of azure bastion.
+        :param pulumi.Input[str] existing_ddos_protection_id: The resource id of the ddos protection plan.
+        :param pulumi.Input[str] existing_log_analytics_workspace_id: The resource id of the log analytics workspace that was created to centralize log ingestion.
+        :param pulumi.Input[str] firewall_subnet_cidr_block: Azure firewall subnet. IPv4 CIDR block.
+        :param pulumi.Input[Sequence[pulumi.Input['LandingZoneManagementGroupPropertiesArgs']]] landing_zones_mg_children: Landing zone children management group properties
+        :param pulumi.Input['ManagementGroupPropertiesArgs'] landing_zones_mg_metadata: This will be applied to the landing zone management groups.
+        :param pulumi.Input[str] naming_convention_formula: The naming convention that's used by default for all resource types for this landing zone configuration
+        :param pulumi.Input['ManagementGroupPropertiesArgs'] platform_connectivity_mg_metadata: This will be applied to the connectivity management group under platform.
+        :param pulumi.Input['ManagementGroupPropertiesArgs'] platform_identity_mg_metadata: This will be applied to the identity management group under platform.
+        :param pulumi.Input['ManagementGroupPropertiesArgs'] platform_management_mg_metadata: This will be applied to the management management group under platform.
+        :param pulumi.Input[Sequence[pulumi.Input['PlatformManagementGroupPropertiesArgs']]] platform_mg_children: Platform children management group properties.
+        :param pulumi.Input['ManagementGroupPropertiesArgs'] platform_mg_metadata: This will be applied to the platform management group.
+        :param pulumi.Input['SandboxManagementGroupPropertiesArgs'] sandbox_mg_metadata: This will be applied to the sandbox management group.
+        :param pulumi.Input[Sequence[pulumi.Input['TagsArgs']]] tags: Array of tag objects in format of {'name':'a tag name', 'value':'a tag value'}.
+        :param pulumi.Input['ManagementGroupPropertiesArgs'] top_level_mg_metadata: This will be applied to the root of the landing zone deployment.
+        """
+        pulumi.set(__self__, "azure_bastion_creation_option", azure_bastion_creation_option)
+        pulumi.set(__self__, "ddos_protection_creation_option", ddos_protection_creation_option)
+        pulumi.set(__self__, "firewall_creation_option", firewall_creation_option)
+        pulumi.set(__self__, "gateway_subnet_cidr_block", gateway_subnet_cidr_block)
+        pulumi.set(__self__, "hub_network_cidr_block", hub_network_cidr_block)
+        pulumi.set(__self__, "log_analytics_workspace_creation_option", log_analytics_workspace_creation_option)
+        pulumi.set(__self__, "log_retention_in_days", log_retention_in_days)
+        pulumi.set(__self__, "managed_identity", managed_identity)
+        if azure_bastion_subnet_cidr_block is not None:
+            pulumi.set(__self__, "azure_bastion_subnet_cidr_block", azure_bastion_subnet_cidr_block)
+        if custom_naming_convention is not None:
+            pulumi.set(__self__, "custom_naming_convention", custom_naming_convention)
+        if decommissioned_mg_metadata is not None:
+            pulumi.set(__self__, "decommissioned_mg_metadata", decommissioned_mg_metadata)
+        if existing_azure_bastion_id is not None:
+            pulumi.set(__self__, "existing_azure_bastion_id", existing_azure_bastion_id)
+        if existing_ddos_protection_id is not None:
+            pulumi.set(__self__, "existing_ddos_protection_id", existing_ddos_protection_id)
+        if existing_log_analytics_workspace_id is not None:
+            pulumi.set(__self__, "existing_log_analytics_workspace_id", existing_log_analytics_workspace_id)
+        if firewall_subnet_cidr_block is not None:
+            pulumi.set(__self__, "firewall_subnet_cidr_block", firewall_subnet_cidr_block)
+        if landing_zones_mg_children is not None:
+            pulumi.set(__self__, "landing_zones_mg_children", landing_zones_mg_children)
+        if landing_zones_mg_metadata is not None:
+            pulumi.set(__self__, "landing_zones_mg_metadata", landing_zones_mg_metadata)
+        if naming_convention_formula is not None:
+            pulumi.set(__self__, "naming_convention_formula", naming_convention_formula)
+        if platform_connectivity_mg_metadata is not None:
+            pulumi.set(__self__, "platform_connectivity_mg_metadata", platform_connectivity_mg_metadata)
+        if platform_identity_mg_metadata is not None:
+            pulumi.set(__self__, "platform_identity_mg_metadata", platform_identity_mg_metadata)
+        if platform_management_mg_metadata is not None:
+            pulumi.set(__self__, "platform_management_mg_metadata", platform_management_mg_metadata)
+        if platform_mg_children is not None:
+            pulumi.set(__self__, "platform_mg_children", platform_mg_children)
+        if platform_mg_metadata is not None:
+            pulumi.set(__self__, "platform_mg_metadata", platform_mg_metadata)
+        if sandbox_mg_metadata is not None:
+            pulumi.set(__self__, "sandbox_mg_metadata", sandbox_mg_metadata)
+        if tags is not None:
+            pulumi.set(__self__, "tags", tags)
+        if top_level_mg_metadata is not None:
+            pulumi.set(__self__, "top_level_mg_metadata", top_level_mg_metadata)
+
+    @property
+    @pulumi.getter(name="azureBastionCreationOption")
+    def azure_bastion_creation_option(self) -> pulumi.Input[Union[str, 'ResourceCreationOptions']]:
+        """
+        To deploy the bastion service, choose Yes, otherwise No. Choose UseExisting for existing bastion service.
+        """
+        return pulumi.get(self, "azure_bastion_creation_option")
+
+    @azure_bastion_creation_option.setter
+    def azure_bastion_creation_option(self, value: pulumi.Input[Union[str, 'ResourceCreationOptions']]):
+        pulumi.set(self, "azure_bastion_creation_option", value)
+
+    @property
+    @pulumi.getter(name="ddosProtectionCreationOption")
+    def ddos_protection_creation_option(self) -> pulumi.Input[Union[str, 'ResourceCreationOptions']]:
+        """
+        To deploy ddos, choose Yes, otherwise No. Select Existing to provide an existing ddos protection plan.
+        """
+        return pulumi.get(self, "ddos_protection_creation_option")
+
+    @ddos_protection_creation_option.setter
+    def ddos_protection_creation_option(self, value: pulumi.Input[Union[str, 'ResourceCreationOptions']]):
+        pulumi.set(self, "ddos_protection_creation_option", value)
+
+    @property
+    @pulumi.getter(name="firewallCreationOption")
+    def firewall_creation_option(self) -> pulumi.Input[Union[str, 'FirewallCreationOptions']]:
+        """
+        To deploy firewall, choose the Standard/Premium based on the desired SKU. Choose None for no firewall and UseExisting for a pre existing one.
+        """
+        return pulumi.get(self, "firewall_creation_option")
+
+    @firewall_creation_option.setter
+    def firewall_creation_option(self, value: pulumi.Input[Union[str, 'FirewallCreationOptions']]):
+        pulumi.set(self, "firewall_creation_option", value)
+
+    @property
+    @pulumi.getter(name="gatewaySubnetCidrBlock")
+    def gateway_subnet_cidr_block(self) -> pulumi.Input[str]:
+        """
+        Gateway subnet. IPv4 CIDR block.
+        """
+        return pulumi.get(self, "gateway_subnet_cidr_block")
+
+    @gateway_subnet_cidr_block.setter
+    def gateway_subnet_cidr_block(self, value: pulumi.Input[str]):
+        pulumi.set(self, "gateway_subnet_cidr_block", value)
+
+    @property
+    @pulumi.getter(name="hubNetworkCidrBlock")
+    def hub_network_cidr_block(self) -> pulumi.Input[str]:
+        """
+        The address space for the VNET. IPv4 CIDR block.
+        """
+        return pulumi.get(self, "hub_network_cidr_block")
+
+    @hub_network_cidr_block.setter
+    def hub_network_cidr_block(self, value: pulumi.Input[str]):
+        pulumi.set(self, "hub_network_cidr_block", value)
+
+    @property
+    @pulumi.getter(name="logAnalyticsWorkspaceCreationOption")
+    def log_analytics_workspace_creation_option(self) -> pulumi.Input[Union[str, 'ResourceCreationOptions']]:
+        """
+        To deploy log analytics workspace, choose Yes, otherwise No. Select UseExisting to provide an existing log analytics workspace.
+        """
+        return pulumi.get(self, "log_analytics_workspace_creation_option")
+
+    @log_analytics_workspace_creation_option.setter
+    def log_analytics_workspace_creation_option(self, value: pulumi.Input[Union[str, 'ResourceCreationOptions']]):
+        pulumi.set(self, "log_analytics_workspace_creation_option", value)
+
+    @property
+    @pulumi.getter(name="logRetentionInDays")
+    def log_retention_in_days(self) -> pulumi.Input[float]:
+        """
+        Set how long logs are retained for, in days. Minimum length is 30 and maximum is 730
+        """
+        return pulumi.get(self, "log_retention_in_days")
+
+    @log_retention_in_days.setter
+    def log_retention_in_days(self, value: pulumi.Input[float]):
+        pulumi.set(self, "log_retention_in_days", value)
+
+    @property
+    @pulumi.getter(name="managedIdentity")
+    def managed_identity(self) -> pulumi.Input['ManagedIdentityPropertiesArgs']:
+        """
+        The managed identity to be tied to this landing zone configuration
+        """
+        return pulumi.get(self, "managed_identity")
+
+    @managed_identity.setter
+    def managed_identity(self, value: pulumi.Input['ManagedIdentityPropertiesArgs']):
+        pulumi.set(self, "managed_identity", value)
+
+    @property
+    @pulumi.getter(name="azureBastionSubnetCidrBlock")
+    def azure_bastion_subnet_cidr_block(self) -> Optional[pulumi.Input[str]]:
+        """
+        Azure bastion subnet. IP v4 CIDR block.
+        """
+        return pulumi.get(self, "azure_bastion_subnet_cidr_block")
+
+    @azure_bastion_subnet_cidr_block.setter
+    def azure_bastion_subnet_cidr_block(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "azure_bastion_subnet_cidr_block", value)
+
+    @property
+    @pulumi.getter(name="customNamingConvention")
+    def custom_naming_convention(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['CustomNamingConventionArgs']]]]:
+        """
+        The customized naming convention for one or more resource types in this landing zone configuration
+        """
+        return pulumi.get(self, "custom_naming_convention")
+
+    @custom_naming_convention.setter
+    def custom_naming_convention(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['CustomNamingConventionArgs']]]]):
+        pulumi.set(self, "custom_naming_convention", value)
+
+    @property
+    @pulumi.getter(name="decommissionedMgMetadata")
+    def decommissioned_mg_metadata(self) -> Optional[pulumi.Input['DecommissionedManagementGroupPropertiesArgs']]:
+        """
+        This will be applied to the decommissioned management group.
+        """
+        return pulumi.get(self, "decommissioned_mg_metadata")
+
+    @decommissioned_mg_metadata.setter
+    def decommissioned_mg_metadata(self, value: Optional[pulumi.Input['DecommissionedManagementGroupPropertiesArgs']]):
+        pulumi.set(self, "decommissioned_mg_metadata", value)
+
+    @property
+    @pulumi.getter(name="existingAzureBastionId")
+    def existing_azure_bastion_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        The resource id of azure bastion.
+        """
+        return pulumi.get(self, "existing_azure_bastion_id")
+
+    @existing_azure_bastion_id.setter
+    def existing_azure_bastion_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "existing_azure_bastion_id", value)
+
+    @property
+    @pulumi.getter(name="existingDdosProtectionId")
+    def existing_ddos_protection_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        The resource id of the ddos protection plan.
+        """
+        return pulumi.get(self, "existing_ddos_protection_id")
+
+    @existing_ddos_protection_id.setter
+    def existing_ddos_protection_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "existing_ddos_protection_id", value)
+
+    @property
+    @pulumi.getter(name="existingLogAnalyticsWorkspaceId")
+    def existing_log_analytics_workspace_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        The resource id of the log analytics workspace that was created to centralize log ingestion.
+        """
+        return pulumi.get(self, "existing_log_analytics_workspace_id")
+
+    @existing_log_analytics_workspace_id.setter
+    def existing_log_analytics_workspace_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "existing_log_analytics_workspace_id", value)
+
+    @property
+    @pulumi.getter(name="firewallSubnetCidrBlock")
+    def firewall_subnet_cidr_block(self) -> Optional[pulumi.Input[str]]:
+        """
+        Azure firewall subnet. IPv4 CIDR block.
+        """
+        return pulumi.get(self, "firewall_subnet_cidr_block")
+
+    @firewall_subnet_cidr_block.setter
+    def firewall_subnet_cidr_block(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "firewall_subnet_cidr_block", value)
+
+    @property
+    @pulumi.getter(name="landingZonesMgChildren")
+    def landing_zones_mg_children(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['LandingZoneManagementGroupPropertiesArgs']]]]:
+        """
+        Landing zone children management group properties
+        """
+        return pulumi.get(self, "landing_zones_mg_children")
+
+    @landing_zones_mg_children.setter
+    def landing_zones_mg_children(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['LandingZoneManagementGroupPropertiesArgs']]]]):
+        pulumi.set(self, "landing_zones_mg_children", value)
+
+    @property
+    @pulumi.getter(name="landingZonesMgMetadata")
+    def landing_zones_mg_metadata(self) -> Optional[pulumi.Input['ManagementGroupPropertiesArgs']]:
+        """
+        This will be applied to the landing zone management groups.
+        """
+        return pulumi.get(self, "landing_zones_mg_metadata")
+
+    @landing_zones_mg_metadata.setter
+    def landing_zones_mg_metadata(self, value: Optional[pulumi.Input['ManagementGroupPropertiesArgs']]):
+        pulumi.set(self, "landing_zones_mg_metadata", value)
+
+    @property
+    @pulumi.getter(name="namingConventionFormula")
+    def naming_convention_formula(self) -> Optional[pulumi.Input[str]]:
+        """
+        The naming convention that's used by default for all resource types for this landing zone configuration
+        """
+        return pulumi.get(self, "naming_convention_formula")
+
+    @naming_convention_formula.setter
+    def naming_convention_formula(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "naming_convention_formula", value)
+
+    @property
+    @pulumi.getter(name="platformConnectivityMgMetadata")
+    def platform_connectivity_mg_metadata(self) -> Optional[pulumi.Input['ManagementGroupPropertiesArgs']]:
+        """
+        This will be applied to the connectivity management group under platform.
+        """
+        return pulumi.get(self, "platform_connectivity_mg_metadata")
+
+    @platform_connectivity_mg_metadata.setter
+    def platform_connectivity_mg_metadata(self, value: Optional[pulumi.Input['ManagementGroupPropertiesArgs']]):
+        pulumi.set(self, "platform_connectivity_mg_metadata", value)
+
+    @property
+    @pulumi.getter(name="platformIdentityMgMetadata")
+    def platform_identity_mg_metadata(self) -> Optional[pulumi.Input['ManagementGroupPropertiesArgs']]:
+        """
+        This will be applied to the identity management group under platform.
+        """
+        return pulumi.get(self, "platform_identity_mg_metadata")
+
+    @platform_identity_mg_metadata.setter
+    def platform_identity_mg_metadata(self, value: Optional[pulumi.Input['ManagementGroupPropertiesArgs']]):
+        pulumi.set(self, "platform_identity_mg_metadata", value)
+
+    @property
+    @pulumi.getter(name="platformManagementMgMetadata")
+    def platform_management_mg_metadata(self) -> Optional[pulumi.Input['ManagementGroupPropertiesArgs']]:
+        """
+        This will be applied to the management management group under platform.
+        """
+        return pulumi.get(self, "platform_management_mg_metadata")
+
+    @platform_management_mg_metadata.setter
+    def platform_management_mg_metadata(self, value: Optional[pulumi.Input['ManagementGroupPropertiesArgs']]):
+        pulumi.set(self, "platform_management_mg_metadata", value)
+
+    @property
+    @pulumi.getter(name="platformMgChildren")
+    def platform_mg_children(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['PlatformManagementGroupPropertiesArgs']]]]:
+        """
+        Platform children management group properties.
+        """
+        return pulumi.get(self, "platform_mg_children")
+
+    @platform_mg_children.setter
+    def platform_mg_children(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['PlatformManagementGroupPropertiesArgs']]]]):
+        pulumi.set(self, "platform_mg_children", value)
+
+    @property
+    @pulumi.getter(name="platformMgMetadata")
+    def platform_mg_metadata(self) -> Optional[pulumi.Input['ManagementGroupPropertiesArgs']]:
+        """
+        This will be applied to the platform management group.
+        """
+        return pulumi.get(self, "platform_mg_metadata")
+
+    @platform_mg_metadata.setter
+    def platform_mg_metadata(self, value: Optional[pulumi.Input['ManagementGroupPropertiesArgs']]):
+        pulumi.set(self, "platform_mg_metadata", value)
+
+    @property
+    @pulumi.getter(name="sandboxMgMetadata")
+    def sandbox_mg_metadata(self) -> Optional[pulumi.Input['SandboxManagementGroupPropertiesArgs']]:
+        """
+        This will be applied to the sandbox management group.
+        """
+        return pulumi.get(self, "sandbox_mg_metadata")
+
+    @sandbox_mg_metadata.setter
+    def sandbox_mg_metadata(self, value: Optional[pulumi.Input['SandboxManagementGroupPropertiesArgs']]):
+        pulumi.set(self, "sandbox_mg_metadata", value)
+
+    @property
+    @pulumi.getter
+    def tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['TagsArgs']]]]:
+        """
+        Array of tag objects in format of {'name':'a tag name', 'value':'a tag value'}.
+        """
+        return pulumi.get(self, "tags")
+
+    @tags.setter
+    def tags(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['TagsArgs']]]]):
+        pulumi.set(self, "tags", value)
+
+    @property
+    @pulumi.getter(name="topLevelMgMetadata")
+    def top_level_mg_metadata(self) -> Optional[pulumi.Input['ManagementGroupPropertiesArgs']]:
+        """
+        This will be applied to the root of the landing zone deployment.
+        """
+        return pulumi.get(self, "top_level_mg_metadata")
+
+    @top_level_mg_metadata.setter
+    def top_level_mg_metadata(self, value: Optional[pulumi.Input['ManagementGroupPropertiesArgs']]):
+        pulumi.set(self, "top_level_mg_metadata", value)
+
+
+if not MYPY:
+    class LandingZoneManagementGroupPropertiesArgsDict(TypedDict):
+        """
+        Landing zone management group properties.
+        """
+        name: pulumi.Input[str]
+        """
+        Management group name.
+        """
+        policy_initiatives_assignment_properties: pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgsDict']]]
+        """
+        Array of initiative assignments to be applied to the management group.
+        """
+elif False:
+    LandingZoneManagementGroupPropertiesArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class LandingZoneManagementGroupPropertiesArgs:
+    def __init__(__self__, *,
+                 name: pulumi.Input[str],
+                 policy_initiatives_assignment_properties: pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgs']]]):
+        """
+        Landing zone management group properties.
+        :param pulumi.Input[str] name: Management group name.
+        :param pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgs']]] policy_initiatives_assignment_properties: Array of initiative assignments to be applied to the management group.
+        """
+        pulumi.set(__self__, "name", name)
+        pulumi.set(__self__, "policy_initiatives_assignment_properties", policy_initiatives_assignment_properties)
+
+    @property
+    @pulumi.getter
+    def name(self) -> pulumi.Input[str]:
+        """
+        Management group name.
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "name", value)
+
+    @property
+    @pulumi.getter(name="policyInitiativesAssignmentProperties")
+    def policy_initiatives_assignment_properties(self) -> pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgs']]]:
+        """
+        Array of initiative assignments to be applied to the management group.
+        """
+        return pulumi.get(self, "policy_initiatives_assignment_properties")
+
+    @policy_initiatives_assignment_properties.setter
+    def policy_initiatives_assignment_properties(self, value: pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgs']]]):
+        pulumi.set(self, "policy_initiatives_assignment_properties", value)
+
+
+if not MYPY:
+    class LandingZoneRegistrationResourcePropertiesArgsDict(TypedDict):
+        """
+        The properties of landing zone registration resource type.
+        """
+        existing_landing_zone_configuration_id: pulumi.Input[str]
+        """
+        The resource id of the associated landing zone configuration.
+        """
+        existing_top_level_mg_id: pulumi.Input[str]
+        """
+        The resource id of the top level management group
+        """
+        managed_identity: pulumi.Input['ManagedIdentityPropertiesArgsDict']
+        """
+        The managed identity to be tied to this landing zone registration
+        """
+elif False:
+    LandingZoneRegistrationResourcePropertiesArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class LandingZoneRegistrationResourcePropertiesArgs:
+    def __init__(__self__, *,
+                 existing_landing_zone_configuration_id: pulumi.Input[str],
+                 existing_top_level_mg_id: pulumi.Input[str],
+                 managed_identity: pulumi.Input['ManagedIdentityPropertiesArgs']):
+        """
+        The properties of landing zone registration resource type.
+        :param pulumi.Input[str] existing_landing_zone_configuration_id: The resource id of the associated landing zone configuration.
+        :param pulumi.Input[str] existing_top_level_mg_id: The resource id of the top level management group
+        :param pulumi.Input['ManagedIdentityPropertiesArgs'] managed_identity: The managed identity to be tied to this landing zone registration
+        """
+        pulumi.set(__self__, "existing_landing_zone_configuration_id", existing_landing_zone_configuration_id)
+        pulumi.set(__self__, "existing_top_level_mg_id", existing_top_level_mg_id)
+        pulumi.set(__self__, "managed_identity", managed_identity)
+
+    @property
+    @pulumi.getter(name="existingLandingZoneConfigurationId")
+    def existing_landing_zone_configuration_id(self) -> pulumi.Input[str]:
+        """
+        The resource id of the associated landing zone configuration.
+        """
+        return pulumi.get(self, "existing_landing_zone_configuration_id")
+
+    @existing_landing_zone_configuration_id.setter
+    def existing_landing_zone_configuration_id(self, value: pulumi.Input[str]):
+        pulumi.set(self, "existing_landing_zone_configuration_id", value)
+
+    @property
+    @pulumi.getter(name="existingTopLevelMgId")
+    def existing_top_level_mg_id(self) -> pulumi.Input[str]:
+        """
+        The resource id of the top level management group
+        """
+        return pulumi.get(self, "existing_top_level_mg_id")
+
+    @existing_top_level_mg_id.setter
+    def existing_top_level_mg_id(self, value: pulumi.Input[str]):
+        pulumi.set(self, "existing_top_level_mg_id", value)
+
+    @property
+    @pulumi.getter(name="managedIdentity")
+    def managed_identity(self) -> pulumi.Input['ManagedIdentityPropertiesArgs']:
+        """
+        The managed identity to be tied to this landing zone registration
+        """
+        return pulumi.get(self, "managed_identity")
+
+    @managed_identity.setter
+    def managed_identity(self, value: pulumi.Input['ManagedIdentityPropertiesArgs']):
+        pulumi.set(self, "managed_identity", value)
+
+
+if not MYPY:
+    class ManagedIdentityPropertiesArgsDict(TypedDict):
+        """
+        The properties of managed identity.
+        """
+        type: pulumi.Input[Union[str, 'ManagedIdentityResourceType']]
+        """
+        The type of managed identity.
+        """
+        user_assigned_identity_resource_id: NotRequired[pulumi.Input[str]]
+        """
+        The resource id of the managed identity.
+        """
+elif False:
+    ManagedIdentityPropertiesArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ManagedIdentityPropertiesArgs:
+    def __init__(__self__, *,
+                 type: pulumi.Input[Union[str, 'ManagedIdentityResourceType']],
+                 user_assigned_identity_resource_id: Optional[pulumi.Input[str]] = None):
+        """
+        The properties of managed identity.
+        :param pulumi.Input[Union[str, 'ManagedIdentityResourceType']] type: The type of managed identity.
+        :param pulumi.Input[str] user_assigned_identity_resource_id: The resource id of the managed identity.
+        """
+        pulumi.set(__self__, "type", type)
+        if user_assigned_identity_resource_id is not None:
+            pulumi.set(__self__, "user_assigned_identity_resource_id", user_assigned_identity_resource_id)
+
+    @property
+    @pulumi.getter
+    def type(self) -> pulumi.Input[Union[str, 'ManagedIdentityResourceType']]:
+        """
+        The type of managed identity.
+        """
+        return pulumi.get(self, "type")
+
+    @type.setter
+    def type(self, value: pulumi.Input[Union[str, 'ManagedIdentityResourceType']]):
+        pulumi.set(self, "type", value)
+
+    @property
+    @pulumi.getter(name="userAssignedIdentityResourceId")
+    def user_assigned_identity_resource_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        The resource id of the managed identity.
+        """
+        return pulumi.get(self, "user_assigned_identity_resource_id")
+
+    @user_assigned_identity_resource_id.setter
+    def user_assigned_identity_resource_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "user_assigned_identity_resource_id", value)
+
+
+if not MYPY:
+    class ManagedServiceIdentityArgsDict(TypedDict):
+        """
+        Managed service identity (system assigned and/or user assigned identities)
+        """
+        type: pulumi.Input[Union[str, 'ManagedServiceIdentityType']]
+        """
+        Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
+        """
+        user_assigned_identities: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.
+        """
+elif False:
+    ManagedServiceIdentityArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ManagedServiceIdentityArgs:
+    def __init__(__self__, *,
+                 type: pulumi.Input[Union[str, 'ManagedServiceIdentityType']],
+                 user_assigned_identities: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
+        """
+        Managed service identity (system assigned and/or user assigned identities)
+        :param pulumi.Input[Union[str, 'ManagedServiceIdentityType']] type: Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] user_assigned_identities: The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.
+        """
+        pulumi.set(__self__, "type", type)
+        if user_assigned_identities is not None:
+            pulumi.set(__self__, "user_assigned_identities", user_assigned_identities)
+
+    @property
+    @pulumi.getter
+    def type(self) -> pulumi.Input[Union[str, 'ManagedServiceIdentityType']]:
+        """
+        Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).
+        """
+        return pulumi.get(self, "type")
+
+    @type.setter
+    def type(self, value: pulumi.Input[Union[str, 'ManagedServiceIdentityType']]):
+        pulumi.set(self, "type", value)
+
+    @property
+    @pulumi.getter(name="userAssignedIdentities")
+    def user_assigned_identities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests.
+        """
+        return pulumi.get(self, "user_assigned_identities")
+
+    @user_assigned_identities.setter
+    def user_assigned_identities(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "user_assigned_identities", value)
+
+
+if not MYPY:
+    class ManagementGroupPropertiesArgsDict(TypedDict):
+        """
+        Details of the policy and initiatives associated with the management group.
+        """
+        policy_initiatives_assignment_properties: pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgsDict']]]
+        """
+        Array of initiative assignments to be applied to the management group.
+        """
+elif False:
+    ManagementGroupPropertiesArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ManagementGroupPropertiesArgs:
+    def __init__(__self__, *,
+                 policy_initiatives_assignment_properties: pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgs']]]):
+        """
+        Details of the policy and initiatives associated with the management group.
+        :param pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgs']]] policy_initiatives_assignment_properties: Array of initiative assignments to be applied to the management group.
+        """
+        pulumi.set(__self__, "policy_initiatives_assignment_properties", policy_initiatives_assignment_properties)
+
+    @property
+    @pulumi.getter(name="policyInitiativesAssignmentProperties")
+    def policy_initiatives_assignment_properties(self) -> pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgs']]]:
+        """
+        Array of initiative assignments to be applied to the management group.
+        """
+        return pulumi.get(self, "policy_initiatives_assignment_properties")
+
+    @policy_initiatives_assignment_properties.setter
+    def policy_initiatives_assignment_properties(self, value: pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgs']]]):
+        pulumi.set(self, "policy_initiatives_assignment_properties", value)
+
+
+if not MYPY:
+    class PlatformManagementGroupPropertiesArgsDict(TypedDict):
+        """
+        Platform management group properties.
+        """
+        name: pulumi.Input[str]
+        """
+        Management group name.
+        """
+        policy_initiatives_assignment_properties: pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgsDict']]]
+        """
+        Array of initiative assignments to be applied to the management group.
+        """
+elif False:
+    PlatformManagementGroupPropertiesArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class PlatformManagementGroupPropertiesArgs:
+    def __init__(__self__, *,
+                 name: pulumi.Input[str],
+                 policy_initiatives_assignment_properties: pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgs']]]):
+        """
+        Platform management group properties.
+        :param pulumi.Input[str] name: Management group name.
+        :param pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgs']]] policy_initiatives_assignment_properties: Array of initiative assignments to be applied to the management group.
+        """
+        pulumi.set(__self__, "name", name)
+        pulumi.set(__self__, "policy_initiatives_assignment_properties", policy_initiatives_assignment_properties)
+
+    @property
+    @pulumi.getter
+    def name(self) -> pulumi.Input[str]:
+        """
+        Management group name.
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "name", value)
+
+    @property
+    @pulumi.getter(name="policyInitiativesAssignmentProperties")
+    def policy_initiatives_assignment_properties(self) -> pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgs']]]:
+        """
+        Array of initiative assignments to be applied to the management group.
+        """
+        return pulumi.get(self, "policy_initiatives_assignment_properties")
+
+    @policy_initiatives_assignment_properties.setter
+    def policy_initiatives_assignment_properties(self, value: pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgs']]]):
+        pulumi.set(self, "policy_initiatives_assignment_properties", value)
+
+
+if not MYPY:
+    class PolicyInitiativeAssignmentPropertiesArgsDict(TypedDict):
+        """
+        Details of policy assignments
+        """
+        assignment_parameters: Any
+        """
+        The parameters for the assignment of policy initiatives.
+        """
+        policy_initiative_id: pulumi.Input[str]
+        """
+        The fully qualified id of the policy initiative.
+        """
+elif False:
+    PolicyInitiativeAssignmentPropertiesArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class PolicyInitiativeAssignmentPropertiesArgs:
+    def __init__(__self__, *,
+                 assignment_parameters: Any,
+                 policy_initiative_id: pulumi.Input[str]):
+        """
+        Details of policy assignments
+        :param Any assignment_parameters: The parameters for the assignment of policy initiatives.
+        :param pulumi.Input[str] policy_initiative_id: The fully qualified id of the policy initiative.
+        """
+        pulumi.set(__self__, "assignment_parameters", assignment_parameters)
+        pulumi.set(__self__, "policy_initiative_id", policy_initiative_id)
+
+    @property
+    @pulumi.getter(name="assignmentParameters")
+    def assignment_parameters(self) -> Any:
+        """
+        The parameters for the assignment of policy initiatives.
+        """
+        return pulumi.get(self, "assignment_parameters")
+
+    @assignment_parameters.setter
+    def assignment_parameters(self, value: Any):
+        pulumi.set(self, "assignment_parameters", value)
+
+    @property
+    @pulumi.getter(name="policyInitiativeId")
+    def policy_initiative_id(self) -> pulumi.Input[str]:
+        """
+        The fully qualified id of the policy initiative.
+        """
+        return pulumi.get(self, "policy_initiative_id")
+
+    @policy_initiative_id.setter
+    def policy_initiative_id(self, value: pulumi.Input[str]):
+        pulumi.set(self, "policy_initiative_id", value)
+
+
+if not MYPY:
+    class SandboxManagementGroupPropertiesArgsDict(TypedDict):
+        """
+        Sandbox management group properties.
+        """
+        create: pulumi.Input[bool]
+        """
+        When set to false this management group will not be created. The default value is false.
+        """
+        policy_initiatives_assignment_properties: pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgsDict']]]
+        """
+        Array of initiative assignments to be applied to the management group.
+        """
+elif False:
+    SandboxManagementGroupPropertiesArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class SandboxManagementGroupPropertiesArgs:
+    def __init__(__self__, *,
+                 create: pulumi.Input[bool],
+                 policy_initiatives_assignment_properties: pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgs']]]):
+        """
+        Sandbox management group properties.
+        :param pulumi.Input[bool] create: When set to false this management group will not be created. The default value is false.
+        :param pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgs']]] policy_initiatives_assignment_properties: Array of initiative assignments to be applied to the management group.
+        """
+        pulumi.set(__self__, "create", create)
+        pulumi.set(__self__, "policy_initiatives_assignment_properties", policy_initiatives_assignment_properties)
+
+    @property
+    @pulumi.getter
+    def create(self) -> pulumi.Input[bool]:
+        """
+        When set to false this management group will not be created. The default value is false.
+        """
+        return pulumi.get(self, "create")
+
+    @create.setter
+    def create(self, value: pulumi.Input[bool]):
+        pulumi.set(self, "create", value)
+
+    @property
+    @pulumi.getter(name="policyInitiativesAssignmentProperties")
+    def policy_initiatives_assignment_properties(self) -> pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgs']]]:
+        """
+        Array of initiative assignments to be applied to the management group.
+        """
+        return pulumi.get(self, "policy_initiatives_assignment_properties")
+
+    @policy_initiatives_assignment_properties.setter
+    def policy_initiatives_assignment_properties(self, value: pulumi.Input[Sequence[pulumi.Input['PolicyInitiativeAssignmentPropertiesArgs']]]):
+        pulumi.set(self, "policy_initiatives_assignment_properties", value)
+
+
+if not MYPY:
+    class TagsArgsDict(TypedDict):
+        """
+        The details associated with tags.
+        """
+        name: pulumi.Input[str]
+        """
+        A tag name.
+        """
+        value: NotRequired[pulumi.Input[str]]
+        """
+        A tag value.
+        """
+elif False:
+    TagsArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class TagsArgs:
+    def __init__(__self__, *,
+                 name: pulumi.Input[str],
+                 value: Optional[pulumi.Input[str]] = None):
+        """
+        The details associated with tags.
+        :param pulumi.Input[str] name: A tag name.
+        :param pulumi.Input[str] value: A tag value.
+        """
+        pulumi.set(__self__, "name", name)
+        if value is not None:
+            pulumi.set(__self__, "value", value)
+
+    @property
+    @pulumi.getter
+    def name(self) -> pulumi.Input[str]:
+        """
+        A tag name.
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: pulumi.Input[str]):
+        pulumi.set(self, "name", value)
+
+    @property
+    @pulumi.getter
+    def value(self) -> Optional[pulumi.Input[str]]:
+        """
+        A tag value.
+        """
+        return pulumi.get(self, "value")
+
+    @value.setter
+    def value(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "value", value)
+
+