pulumi-azure 6.27.0a1758695020__py3-none-any.whl → 6.27.0a1759511969__py3-none-any.whl

pulumi_azure/monitoring/_inputs.py

@@ -1494,15 +1494,17 @@ if not MYPY:
         """
         recommendation_category: NotRequired[pulumi.Input[_builtins.str]]
         """
-        The recommendation category of the event. Possible values are `Cost`, `Reliability`, `OperationalExcellence`, `HighAvailability` and `Performance`. It is only allowed when `category` is `Recommendation`.
+        The recommendation category of the event. Possible values are `Cost`, `Reliability`, `OperationalExcellence`, `HighAvailability`, `Performance` and `Security`.
         """
         recommendation_impact: NotRequired[pulumi.Input[_builtins.str]]
         """
-        The recommendation impact of the event. Possible values are `High`, `Medium` and `Low`. It is only allowed when `category` is `Recommendation`.
+        The recommendation impact of the event. Possible values are `High`, `Medium` and `Low`.
+
+        > **Note:** The `recommendation_type`, `recommendation_category`, and `recommendation_impact` fields can only be defined if the `category` field has been set to `Recommendation`.
         """
         recommendation_type: NotRequired[pulumi.Input[_builtins.str]]
         """
-        The recommendation type of the event. It is only allowed when `category` is `Recommendation`.
+        The recommendation type of the event.
         """
         resource_group: NotRequired[pulumi.Input[_builtins.str]]
         """
@@ -1608,9 +1610,11 @@ class ActivityLogAlertCriteriaArgs:
                
                > **Note:** `level` and `levels` are mutually exclusive.
         :param pulumi.Input[_builtins.str] operation_name: The Resource Manager Role-Based Access Control operation name. Supported operation should be of the form: `<resourceProvider>/<resourceType>/<operation>`.
-        :param pulumi.Input[_builtins.str] recommendation_category: The recommendation category of the event. Possible values are `Cost`, `Reliability`, `OperationalExcellence`, `HighAvailability` and `Performance`. It is only allowed when `category` is `Recommendation`.
-        :param pulumi.Input[_builtins.str] recommendation_impact: The recommendation impact of the event. Possible values are `High`, `Medium` and `Low`. It is only allowed when `category` is `Recommendation`.
-        :param pulumi.Input[_builtins.str] recommendation_type: The recommendation type of the event. It is only allowed when `category` is `Recommendation`.
+        :param pulumi.Input[_builtins.str] recommendation_category: The recommendation category of the event. Possible values are `Cost`, `Reliability`, `OperationalExcellence`, `HighAvailability`, `Performance` and `Security`.
+        :param pulumi.Input[_builtins.str] recommendation_impact: The recommendation impact of the event. Possible values are `High`, `Medium` and `Low`.
+               
+               > **Note:** The `recommendation_type`, `recommendation_category`, and `recommendation_impact` fields can only be defined if the `category` field has been set to `Recommendation`.
+        :param pulumi.Input[_builtins.str] recommendation_type: The recommendation type of the event.
         :param pulumi.Input[_builtins.str] resource_group: The name of resource group monitored by the activity log alert.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] resource_groups: A list of names of resource groups monitored by the activity log alert.
                
@@ -1748,7 +1752,7 @@ class ActivityLogAlertCriteriaArgs:
     @pulumi.getter(name="recommendationCategory")
     def recommendation_category(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        The recommendation category of the event. Possible values are `Cost`, `Reliability`, `OperationalExcellence`, `HighAvailability` and `Performance`. It is only allowed when `category` is `Recommendation`.
+        The recommendation category of the event. Possible values are `Cost`, `Reliability`, `OperationalExcellence`, `HighAvailability`, `Performance` and `Security`.
         """
         return pulumi.get(self, "recommendation_category")
 
@@ -1760,7 +1764,9 @@ class ActivityLogAlertCriteriaArgs:
     @pulumi.getter(name="recommendationImpact")
     def recommendation_impact(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        The recommendation impact of the event. Possible values are `High`, `Medium` and `Low`. It is only allowed when `category` is `Recommendation`.
+        The recommendation impact of the event. Possible values are `High`, `Medium` and `Low`.
+
+        > **Note:** The `recommendation_type`, `recommendation_category`, and `recommendation_impact` fields can only be defined if the `category` field has been set to `Recommendation`.
         """
         return pulumi.get(self, "recommendation_impact")
 
@@ -1772,7 +1778,7 @@ class ActivityLogAlertCriteriaArgs:
     @pulumi.getter(name="recommendationType")
     def recommendation_type(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        The recommendation type of the event. It is only allowed when `category` is `Recommendation`.
+        The recommendation type of the event.
         """
         return pulumi.get(self, "recommendation_type")
 

pulumi_azure/monitoring/activity_log_alert.py

@@ -38,7 +38,7 @@ class ActivityLogAlertArgs:
         :param pulumi.Input[Sequence[pulumi.Input['ActivityLogAlertActionArgs']]] actions: One or more `action` blocks as defined below.
         :param pulumi.Input[_builtins.str] description: The description of this activity log alert.
         :param pulumi.Input[_builtins.bool] enabled: Should this Activity Log Alert be enabled? Defaults to `true`.
-        :param pulumi.Input[_builtins.str] location: The Azure Region where the activity log alert rule should exist. Changing this forces a new resource to be created.
+        :param pulumi.Input[_builtins.str] location: The Azure Region where the activity log alert rule should exist. Possible values are `global`, `westeurope`, `northeurope`, and `eastus2euap`. Changing this forces a new resource to be created.
         :param pulumi.Input[_builtins.str] name: The name of the activity log alert. Changing this forces a new resource to be created.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags: A mapping of tags to assign to the resource.
         """
@@ -134,7 +134,7 @@ class ActivityLogAlertArgs:
     @pulumi.getter
     def location(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        The Azure Region where the activity log alert rule should exist. Changing this forces a new resource to be created.
+        The Azure Region where the activity log alert rule should exist. Possible values are `global`, `westeurope`, `northeurope`, and `eastus2euap`. Changing this forces a new resource to be created.
         """
         return pulumi.get(self, "location")
 
@@ -185,7 +185,7 @@ class _ActivityLogAlertState:
         :param pulumi.Input['ActivityLogAlertCriteriaArgs'] criteria: A `criteria` block as defined below.
         :param pulumi.Input[_builtins.str] description: The description of this activity log alert.
         :param pulumi.Input[_builtins.bool] enabled: Should this Activity Log Alert be enabled? Defaults to `true`.
-        :param pulumi.Input[_builtins.str] location: The Azure Region where the activity log alert rule should exist. Changing this forces a new resource to be created.
+        :param pulumi.Input[_builtins.str] location: The Azure Region where the activity log alert rule should exist. Possible values are `global`, `westeurope`, `northeurope`, and `eastus2euap`. Changing this forces a new resource to be created.
         :param pulumi.Input[_builtins.str] name: The name of the activity log alert. Changing this forces a new resource to be created.
         :param pulumi.Input[_builtins.str] resource_group_name: The name of the resource group in which to create the activity log alert instance. Changing this forces a new resource to be created.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] scopes: The Scope at which the Activity Log should be applied. A list of strings which could be a resource group , or a subscription, or a resource ID (such as a Storage Account).
@@ -262,7 +262,7 @@ class _ActivityLogAlertState:
     @pulumi.getter
     def location(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        The Azure Region where the activity log alert rule should exist. Changing this forces a new resource to be created.
+        The Azure Region where the activity log alert rule should exist. Possible values are `global`, `westeurope`, `northeurope`, and `eastus2euap`. Changing this forces a new resource to be created.
         """
         return pulumi.get(self, "location")
 
@@ -401,7 +401,7 @@ class ActivityLogAlert(pulumi.CustomResource):
         :param pulumi.Input[Union['ActivityLogAlertCriteriaArgs', 'ActivityLogAlertCriteriaArgsDict']] criteria: A `criteria` block as defined below.
         :param pulumi.Input[_builtins.str] description: The description of this activity log alert.
         :param pulumi.Input[_builtins.bool] enabled: Should this Activity Log Alert be enabled? Defaults to `true`.
-        :param pulumi.Input[_builtins.str] location: The Azure Region where the activity log alert rule should exist. Changing this forces a new resource to be created.
+        :param pulumi.Input[_builtins.str] location: The Azure Region where the activity log alert rule should exist. Possible values are `global`, `westeurope`, `northeurope`, and `eastus2euap`. Changing this forces a new resource to be created.
         :param pulumi.Input[_builtins.str] name: The name of the activity log alert. Changing this forces a new resource to be created.
         :param pulumi.Input[_builtins.str] resource_group_name: The name of the resource group in which to create the activity log alert instance. Changing this forces a new resource to be created.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] scopes: The Scope at which the Activity Log should be applied. A list of strings which could be a resource group , or a subscription, or a resource ID (such as a Storage Account).
@@ -551,7 +551,7 @@ class ActivityLogAlert(pulumi.CustomResource):
         :param pulumi.Input[Union['ActivityLogAlertCriteriaArgs', 'ActivityLogAlertCriteriaArgsDict']] criteria: A `criteria` block as defined below.
         :param pulumi.Input[_builtins.str] description: The description of this activity log alert.
         :param pulumi.Input[_builtins.bool] enabled: Should this Activity Log Alert be enabled? Defaults to `true`.
-        :param pulumi.Input[_builtins.str] location: The Azure Region where the activity log alert rule should exist. Changing this forces a new resource to be created.
+        :param pulumi.Input[_builtins.str] location: The Azure Region where the activity log alert rule should exist. Possible values are `global`, `westeurope`, `northeurope`, and `eastus2euap`. Changing this forces a new resource to be created.
         :param pulumi.Input[_builtins.str] name: The name of the activity log alert. Changing this forces a new resource to be created.
         :param pulumi.Input[_builtins.str] resource_group_name: The name of the resource group in which to create the activity log alert instance. Changing this forces a new resource to be created.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] scopes: The Scope at which the Activity Log should be applied. A list of strings which could be a resource group , or a subscription, or a resource ID (such as a Storage Account).
@@ -608,7 +608,7 @@ class ActivityLogAlert(pulumi.CustomResource):
     @pulumi.getter
     def location(self) -> pulumi.Output[_builtins.str]:
         """
-        The Azure Region where the activity log alert rule should exist. Changing this forces a new resource to be created.
+        The Azure Region where the activity log alert rule should exist. Possible values are `global`, `westeurope`, `northeurope`, and `eastus2euap`. Changing this forces a new resource to be created.
         """
         return pulumi.get(self, "location")
 

pulumi_azure/monitoring/outputs.py

@@ -1258,9 +1258,11 @@ class ActivityLogAlertCriteria(dict):
                
                > **Note:** `level` and `levels` are mutually exclusive.
         :param _builtins.str operation_name: The Resource Manager Role-Based Access Control operation name. Supported operation should be of the form: `<resourceProvider>/<resourceType>/<operation>`.
-        :param _builtins.str recommendation_category: The recommendation category of the event. Possible values are `Cost`, `Reliability`, `OperationalExcellence`, `HighAvailability` and `Performance`. It is only allowed when `category` is `Recommendation`.
-        :param _builtins.str recommendation_impact: The recommendation impact of the event. Possible values are `High`, `Medium` and `Low`. It is only allowed when `category` is `Recommendation`.
-        :param _builtins.str recommendation_type: The recommendation type of the event. It is only allowed when `category` is `Recommendation`.
+        :param _builtins.str recommendation_category: The recommendation category of the event. Possible values are `Cost`, `Reliability`, `OperationalExcellence`, `HighAvailability`, `Performance` and `Security`.
+        :param _builtins.str recommendation_impact: The recommendation impact of the event. Possible values are `High`, `Medium` and `Low`.
+               
+               > **Note:** The `recommendation_type`, `recommendation_category`, and `recommendation_impact` fields can only be defined if the `category` field has been set to `Recommendation`.
+        :param _builtins.str recommendation_type: The recommendation type of the event.
         :param _builtins.str resource_group: The name of resource group monitored by the activity log alert.
         :param Sequence[_builtins.str] resource_groups: A list of names of resource groups monitored by the activity log alert.
                
@@ -1378,7 +1380,7 @@ class ActivityLogAlertCriteria(dict):
     @pulumi.getter(name="recommendationCategory")
     def recommendation_category(self) -> Optional[_builtins.str]:
         """
-        The recommendation category of the event. Possible values are `Cost`, `Reliability`, `OperationalExcellence`, `HighAvailability` and `Performance`. It is only allowed when `category` is `Recommendation`.
+        The recommendation category of the event. Possible values are `Cost`, `Reliability`, `OperationalExcellence`, `HighAvailability`, `Performance` and `Security`.
         """
         return pulumi.get(self, "recommendation_category")
 
@@ -1386,7 +1388,9 @@ class ActivityLogAlertCriteria(dict):
     @pulumi.getter(name="recommendationImpact")
     def recommendation_impact(self) -> Optional[_builtins.str]:
         """
-        The recommendation impact of the event. Possible values are `High`, `Medium` and `Low`. It is only allowed when `category` is `Recommendation`.
+        The recommendation impact of the event. Possible values are `High`, `Medium` and `Low`.
+
+        > **Note:** The `recommendation_type`, `recommendation_category`, and `recommendation_impact` fields can only be defined if the `category` field has been set to `Recommendation`.
         """
         return pulumi.get(self, "recommendation_impact")
 
@@ -1394,7 +1398,7 @@ class ActivityLogAlertCriteria(dict):
     @pulumi.getter(name="recommendationType")
     def recommendation_type(self) -> Optional[_builtins.str]:
         """
-        The recommendation type of the event. It is only allowed when `category` is `Recommendation`.
+        The recommendation type of the event.
         """
         return pulumi.get(self, "recommendation_type")
 

pulumi_azure/mssql/job_step.py

@@ -53,7 +53,7 @@ class JobStepArgs:
         :param pulumi.Input[_builtins.str] name: The name which should be used for this Elastic Job Step. Changing this forces a new Elastic Job Step to be created.
         :param pulumi.Input['JobStepOutputTargetArgs'] output_target: An `output_target` block as defined below.
         :param pulumi.Input[_builtins.int] retry_attempts: The number of retry attempts. Defaults to `10`.
-        :param pulumi.Input[_builtins.float] retry_interval_backoff_multiplier: The multiplier for time between retries. Defaults to `2`.
+        :param pulumi.Input[_builtins.float] retry_interval_backoff_multiplier: The multiplier for time between retries. Defaults to `2.0`.
         :param pulumi.Input[_builtins.int] timeout_seconds: The execution timeout in seconds for this Elastic Job Step. Defaults to `43200`.
         """
         pulumi.set(__self__, "job_id", job_id)
@@ -209,7 +209,7 @@ class JobStepArgs:
     @pulumi.getter(name="retryIntervalBackoffMultiplier")
     def retry_interval_backoff_multiplier(self) -> Optional[pulumi.Input[_builtins.float]]:
         """
-        The multiplier for time between retries. Defaults to `2`.
+        The multiplier for time between retries. Defaults to `2.0`.
         """
         return pulumi.get(self, "retry_interval_backoff_multiplier")
 
@@ -262,7 +262,7 @@ class _JobStepState:
         :param pulumi.Input[_builtins.str] name: The name which should be used for this Elastic Job Step. Changing this forces a new Elastic Job Step to be created.
         :param pulumi.Input['JobStepOutputTargetArgs'] output_target: An `output_target` block as defined below.
         :param pulumi.Input[_builtins.int] retry_attempts: The number of retry attempts. Defaults to `10`.
-        :param pulumi.Input[_builtins.float] retry_interval_backoff_multiplier: The multiplier for time between retries. Defaults to `2`.
+        :param pulumi.Input[_builtins.float] retry_interval_backoff_multiplier: The multiplier for time between retries. Defaults to `2.0`.
         :param pulumi.Input[_builtins.str] sql_script: The T-SQL script to be executed by this Elastic Job Step.
                
                > **Note:** While Azure places no restrictions on the script provided here, it is recommended to ensure the script is idempotent.
@@ -411,7 +411,7 @@ class _JobStepState:
     @pulumi.getter(name="retryIntervalBackoffMultiplier")
     def retry_interval_backoff_multiplier(self) -> Optional[pulumi.Input[_builtins.float]]:
         """
-        The multiplier for time between retries. Defaults to `2`.
+        The multiplier for time between retries. Defaults to `2.0`.
         """
         return pulumi.get(self, "retry_interval_backoff_multiplier")
 
@@ -496,8 +496,8 @@ class JobStep(pulumi.CustomResource):
         example_job_credential = azure.mssql.JobCredential("example",
             name="example-job-credential",
             job_agent_id=example_job_agent.id,
-            username="testusername",
-            password="testpassword")
+            username="exampleusername",
+            password="examplepassword")
         example_job_target_group = azure.mssql.JobTargetGroup("example",
             name="example-target-group",
             job_agent_id=example_job_agent.id,
@@ -556,7 +556,7 @@ class JobStep(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] name: The name which should be used for this Elastic Job Step. Changing this forces a new Elastic Job Step to be created.
         :param pulumi.Input[Union['JobStepOutputTargetArgs', 'JobStepOutputTargetArgsDict']] output_target: An `output_target` block as defined below.
         :param pulumi.Input[_builtins.int] retry_attempts: The number of retry attempts. Defaults to `10`.
-        :param pulumi.Input[_builtins.float] retry_interval_backoff_multiplier: The multiplier for time between retries. Defaults to `2`.
+        :param pulumi.Input[_builtins.float] retry_interval_backoff_multiplier: The multiplier for time between retries. Defaults to `2.0`.
         :param pulumi.Input[_builtins.str] sql_script: The T-SQL script to be executed by this Elastic Job Step.
                
                > **Note:** While Azure places no restrictions on the script provided here, it is recommended to ensure the script is idempotent.
@@ -599,8 +599,8 @@ class JobStep(pulumi.CustomResource):
         example_job_credential = azure.mssql.JobCredential("example",
             name="example-job-credential",
             job_agent_id=example_job_agent.id,
-            username="testusername",
-            password="testpassword")
+            username="exampleusername",
+            password="examplepassword")
         example_job_target_group = azure.mssql.JobTargetGroup("example",
             name="example-target-group",
             job_agent_id=example_job_agent.id,
@@ -742,7 +742,7 @@ class JobStep(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] name: The name which should be used for this Elastic Job Step. Changing this forces a new Elastic Job Step to be created.
         :param pulumi.Input[Union['JobStepOutputTargetArgs', 'JobStepOutputTargetArgsDict']] output_target: An `output_target` block as defined below.
         :param pulumi.Input[_builtins.int] retry_attempts: The number of retry attempts. Defaults to `10`.
-        :param pulumi.Input[_builtins.float] retry_interval_backoff_multiplier: The multiplier for time between retries. Defaults to `2`.
+        :param pulumi.Input[_builtins.float] retry_interval_backoff_multiplier: The multiplier for time between retries. Defaults to `2.0`.
         :param pulumi.Input[_builtins.str] sql_script: The T-SQL script to be executed by this Elastic Job Step.
                
                > **Note:** While Azure places no restrictions on the script provided here, it is recommended to ensure the script is idempotent.
@@ -848,7 +848,7 @@ class JobStep(pulumi.CustomResource):
     @pulumi.getter(name="retryIntervalBackoffMultiplier")
     def retry_interval_backoff_multiplier(self) -> pulumi.Output[Optional[_builtins.float]]:
         """
-        The multiplier for time between retries. Defaults to `2`.
+        The multiplier for time between retries. Defaults to `2.0`.
         """
         return pulumi.get(self, "retry_interval_backoff_multiplier")
 

pulumi_azure/mysql/_inputs.py

@@ -45,6 +45,10 @@ if not MYPY:
         """
         The ID of the Key Vault Key.
         """
+        managed_hsm_key_id: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        The ID of the Managed HSM Key.
+        """
         primary_user_assigned_identity_id: NotRequired[pulumi.Input[_builtins.str]]
         """
         Specifies the primary user managed identity id for a Customer Managed Key. Should be added with `identity_ids`.
@@ -58,6 +62,7 @@ class FlexibleServerCustomerManagedKeyArgs:
                  geo_backup_key_vault_key_id: Optional[pulumi.Input[_builtins.str]] = None,
                  geo_backup_user_assigned_identity_id: Optional[pulumi.Input[_builtins.str]] = None,
                  key_vault_key_id: Optional[pulumi.Input[_builtins.str]] = None,
+                 managed_hsm_key_id: Optional[pulumi.Input[_builtins.str]] = None,
                  primary_user_assigned_identity_id: Optional[pulumi.Input[_builtins.str]] = None):
         """
         :param pulumi.Input[_builtins.str] geo_backup_key_vault_key_id: The ID of the geo backup Key Vault Key. It can't cross region and need Customer Managed Key in same region as geo backup.
@@ -65,6 +70,7 @@ class FlexibleServerCustomerManagedKeyArgs:
                
                > **Note:** `primary_user_assigned_identity_id` or `geo_backup_user_assigned_identity_id` is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         :param pulumi.Input[_builtins.str] key_vault_key_id: The ID of the Key Vault Key.
+        :param pulumi.Input[_builtins.str] managed_hsm_key_id: The ID of the Managed HSM Key.
         :param pulumi.Input[_builtins.str] primary_user_assigned_identity_id: Specifies the primary user managed identity id for a Customer Managed Key. Should be added with `identity_ids`.
         """
         if geo_backup_key_vault_key_id is not None:
@@ -73,6 +79,8 @@ class FlexibleServerCustomerManagedKeyArgs:
             pulumi.set(__self__, "geo_backup_user_assigned_identity_id", geo_backup_user_assigned_identity_id)
         if key_vault_key_id is not None:
             pulumi.set(__self__, "key_vault_key_id", key_vault_key_id)
+        if managed_hsm_key_id is not None:
+            pulumi.set(__self__, "managed_hsm_key_id", managed_hsm_key_id)
         if primary_user_assigned_identity_id is not None:
             pulumi.set(__self__, "primary_user_assigned_identity_id", primary_user_assigned_identity_id)
 
@@ -114,6 +122,18 @@ class FlexibleServerCustomerManagedKeyArgs:
     def key_vault_key_id(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "key_vault_key_id", value)
 
+    @_builtins.property
+    @pulumi.getter(name="managedHsmKeyId")
+    def managed_hsm_key_id(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The ID of the Managed HSM Key.
+        """
+        return pulumi.get(self, "managed_hsm_key_id")
+
+    @managed_hsm_key_id.setter
+    def managed_hsm_key_id(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "managed_hsm_key_id", value)
+
     @_builtins.property
     @pulumi.getter(name="primaryUserAssignedIdentityId")
     def primary_user_assigned_identity_id(self) -> Optional[pulumi.Input[_builtins.str]]:

pulumi_azure/mysql/outputs.py

@@ -36,6 +36,8 @@ class FlexibleServerCustomerManagedKey(dict):
             suggest = "geo_backup_user_assigned_identity_id"
         elif key == "keyVaultKeyId":
             suggest = "key_vault_key_id"
+        elif key == "managedHsmKeyId":
+            suggest = "managed_hsm_key_id"
         elif key == "primaryUserAssignedIdentityId":
             suggest = "primary_user_assigned_identity_id"
 
@@ -54,6 +56,7 @@ class FlexibleServerCustomerManagedKey(dict):
                  geo_backup_key_vault_key_id: Optional[_builtins.str] = None,
                  geo_backup_user_assigned_identity_id: Optional[_builtins.str] = None,
                  key_vault_key_id: Optional[_builtins.str] = None,
+                 managed_hsm_key_id: Optional[_builtins.str] = None,
                  primary_user_assigned_identity_id: Optional[_builtins.str] = None):
         """
         :param _builtins.str geo_backup_key_vault_key_id: The ID of the geo backup Key Vault Key. It can't cross region and need Customer Managed Key in same region as geo backup.
@@ -61,6 +64,7 @@ class FlexibleServerCustomerManagedKey(dict):
                
                > **Note:** `primary_user_assigned_identity_id` or `geo_backup_user_assigned_identity_id` is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         :param _builtins.str key_vault_key_id: The ID of the Key Vault Key.
+        :param _builtins.str managed_hsm_key_id: The ID of the Managed HSM Key.
         :param _builtins.str primary_user_assigned_identity_id: Specifies the primary user managed identity id for a Customer Managed Key. Should be added with `identity_ids`.
         """
         if geo_backup_key_vault_key_id is not None:
@@ -69,6 +73,8 @@ class FlexibleServerCustomerManagedKey(dict):
             pulumi.set(__self__, "geo_backup_user_assigned_identity_id", geo_backup_user_assigned_identity_id)
         if key_vault_key_id is not None:
             pulumi.set(__self__, "key_vault_key_id", key_vault_key_id)
+        if managed_hsm_key_id is not None:
+            pulumi.set(__self__, "managed_hsm_key_id", managed_hsm_key_id)
         if primary_user_assigned_identity_id is not None:
             pulumi.set(__self__, "primary_user_assigned_identity_id", primary_user_assigned_identity_id)
 
@@ -98,6 +104,14 @@ class FlexibleServerCustomerManagedKey(dict):
         """
         return pulumi.get(self, "key_vault_key_id")
 
+    @_builtins.property
+    @pulumi.getter(name="managedHsmKeyId")
+    def managed_hsm_key_id(self) -> Optional[_builtins.str]:
+        """
+        The ID of the Managed HSM Key.
+        """
+        return pulumi.get(self, "managed_hsm_key_id")
+
     @_builtins.property
     @pulumi.getter(name="primaryUserAssignedIdentityId")
     def primary_user_assigned_identity_id(self) -> Optional[_builtins.str]:

pulumi_azure/netapp/_inputs.py

@@ -1296,7 +1296,9 @@ if not MYPY:
         """
         protocols: pulumi.Input[_builtins.str]
         """
-        The target volume protocol expressed as a list. Changing this forces a new Application Volume Group to be created and data will be lost. Supported values for Application Volume Group include `NFSv3` or `NFSv4.1`.
+        The target volume protocol expressed as a list. Protocol conversion between `NFSv3` and `NFSv4.1` and vice-versa is supported without recreating the volume group, however export policy rules must be updated accordingly to avoid configuration drift (e.g., when converting from `NFSv3` to `NFSv4.1`, set `nfsv3_enabled = false` and `nfsv41_enabled = true` in export policy rules). Supported values include `NFSv3` or `NFSv4.1`.
+
+        > **Note:** When converting protocols between NFSv3 and NFSv4.1, ensure that export policy rules are updated accordingly to avoid configuration drift. Update the `nfsv3_enabled` and `nfsv41_enabled` flags to match the new protocol.
         """
         security_style: pulumi.Input[_builtins.str]
         """
@@ -1401,7 +1403,9 @@ class VolumeGroupOracleVolumeArgs:
         :param pulumi.Input[_builtins.str] capacity_pool_id: The ID of the Capacity Pool. Changing this forces a new Application Volume Group to be created and data will be lost.
         :param pulumi.Input[Sequence[pulumi.Input['VolumeGroupOracleVolumeExportPolicyRuleArgs']]] export_policy_rules: One or more `export_policy_rule` blocks as defined below.
         :param pulumi.Input[_builtins.str] name: The name which should be used for this volume. Changing this forces a new Application Volume Group to be created and data will be lost.
-        :param pulumi.Input[_builtins.str] protocols: The target volume protocol expressed as a list. Changing this forces a new Application Volume Group to be created and data will be lost. Supported values for Application Volume Group include `NFSv3` or `NFSv4.1`.
+        :param pulumi.Input[_builtins.str] protocols: The target volume protocol expressed as a list. Protocol conversion between `NFSv3` and `NFSv4.1` and vice-versa is supported without recreating the volume group, however export policy rules must be updated accordingly to avoid configuration drift (e.g., when converting from `NFSv3` to `NFSv4.1`, set `nfsv3_enabled = false` and `nfsv41_enabled = true` in export policy rules). Supported values include `NFSv3` or `NFSv4.1`.
+               
+               > **Note:** When converting protocols between NFSv3 and NFSv4.1, ensure that export policy rules are updated accordingly to avoid configuration drift. Update the `nfsv3_enabled` and `nfsv41_enabled` flags to match the new protocol.
         :param pulumi.Input[_builtins.str] security_style: Volume security style. Possible values are `ntfs` and `unix`. Changing this forces a new Application Volume Group to be created and data will be lost.
         :param pulumi.Input[_builtins.str] service_level: Volume security style. Possible values are `Premium`, `Standard` and `Ultra`. Changing this forces a new Application Volume Group to be created and data will be lost.
         :param pulumi.Input[_builtins.bool] snapshot_directory_visible: Specifies whether the .snapshot (NFS clients) path of a volume is visible. Changing this forces a new Application Volume Group to be created and data will be lost.
@@ -1495,7 +1499,9 @@ class VolumeGroupOracleVolumeArgs:
     @pulumi.getter
     def protocols(self) -> pulumi.Input[_builtins.str]:
         """
-        The target volume protocol expressed as a list. Changing this forces a new Application Volume Group to be created and data will be lost. Supported values for Application Volume Group include `NFSv3` or `NFSv4.1`.
+        The target volume protocol expressed as a list. Protocol conversion between `NFSv3` and `NFSv4.1` and vice-versa is supported without recreating the volume group, however export policy rules must be updated accordingly to avoid configuration drift (e.g., when converting from `NFSv3` to `NFSv4.1`, set `nfsv3_enabled = false` and `nfsv41_enabled = true` in export policy rules). Supported values include `NFSv3` or `NFSv4.1`.
+
+        > **Note:** When converting protocols between NFSv3 and NFSv4.1, ensure that export policy rules are updated accordingly to avoid configuration drift. Update the `nfsv3_enabled` and `nfsv41_enabled` flags to match the new protocol.
         """
         return pulumi.get(self, "protocols")
 
@@ -2003,7 +2009,9 @@ if not MYPY:
         """
         protocols: pulumi.Input[_builtins.str]
         """
-        The target volume protocol expressed as a list. Changing this forces a new Application Volume Group to be created and data will be lost. Supported values for Application Volume Group include `NFSv3` or `NFSv4.1`, multi-protocol is not supported and there are certain rules on which protocol is supporteed per volume spec, please check [Configure application volume groups for the SAP HANA REST API](https://learn.microsoft.com/en-us/azure/azure-netapp-files/configure-application-volume-group-sap-hana-api) document for details.
+        The target volume protocol expressed as a list. Protocol conversion between `NFSv3` and `NFSv4.1` and vice-versa is supported without recreating the volume group, however export policy rules must be updated accordingly to avoid configuration drift (e.g., when converting from `NFSv3` to `NFSv4.1`, set `nfsv3_enabled = false` and `nfsv41_enabled = true` in export policy rules). Supported values include `NFSv3` or `NFSv4.1`, multi-protocol is not supported. Please check [Configure application volume groups for the SAP HANA REST API](https://learn.microsoft.com/en-us/azure/azure-netapp-files/configure-application-volume-group-sap-hana-api) document for details.
+
+        > **Note:** NFSv3 protocol is only supported for backup volumes (`data-backup`, `log-backup`) in SAP HANA volume groups. Critical volumes (`data`, `log`, `shared`) must use NFSv4.1. When converting protocols on backup volumes, ensure export policy rules are updated accordingly to avoid configuration drift.
         """
         security_style: pulumi.Input[_builtins.str]
         """
@@ -2086,7 +2094,9 @@ class VolumeGroupSapHanaVolumeArgs:
         :param pulumi.Input[_builtins.str] capacity_pool_id: The ID of the Capacity Pool. Changing this forces a new Application Volume Group to be created and data will be lost.
         :param pulumi.Input[Sequence[pulumi.Input['VolumeGroupSapHanaVolumeExportPolicyRuleArgs']]] export_policy_rules: One or more `export_policy_rule` blocks as defined below.
         :param pulumi.Input[_builtins.str] name: The name which should be used for this volume. Changing this forces a new Application Volume Group to be created and data will be lost.
-        :param pulumi.Input[_builtins.str] protocols: The target volume protocol expressed as a list. Changing this forces a new Application Volume Group to be created and data will be lost. Supported values for Application Volume Group include `NFSv3` or `NFSv4.1`, multi-protocol is not supported and there are certain rules on which protocol is supporteed per volume spec, please check [Configure application volume groups for the SAP HANA REST API](https://learn.microsoft.com/en-us/azure/azure-netapp-files/configure-application-volume-group-sap-hana-api) document for details.
+        :param pulumi.Input[_builtins.str] protocols: The target volume protocol expressed as a list. Protocol conversion between `NFSv3` and `NFSv4.1` and vice-versa is supported without recreating the volume group, however export policy rules must be updated accordingly to avoid configuration drift (e.g., when converting from `NFSv3` to `NFSv4.1`, set `nfsv3_enabled = false` and `nfsv41_enabled = true` in export policy rules). Supported values include `NFSv3` or `NFSv4.1`, multi-protocol is not supported. Please check [Configure application volume groups for the SAP HANA REST API](https://learn.microsoft.com/en-us/azure/azure-netapp-files/configure-application-volume-group-sap-hana-api) document for details.
+               
+               > **Note:** NFSv3 protocol is only supported for backup volumes (`data-backup`, `log-backup`) in SAP HANA volume groups. Critical volumes (`data`, `log`, `shared`) must use NFSv4.1. When converting protocols on backup volumes, ensure export policy rules are updated accordingly to avoid configuration drift.
         :param pulumi.Input[_builtins.str] security_style: Volume security style. Possible values are `ntfs` and `unix`. Changing this forces a new Application Volume Group to be created and data will be lost.
         :param pulumi.Input[_builtins.str] service_level: Volume security style. Possible values are `Premium`, `Standard` and `Ultra`. Changing this forces a new Application Volume Group to be created and data will be lost.
         :param pulumi.Input[_builtins.bool] snapshot_directory_visible: Specifies whether the .snapshot (NFS clients) path of a volume is visible. Changing this forces a new Application Volume Group to be created and data will be lost.
@@ -2166,7 +2176,9 @@ class VolumeGroupSapHanaVolumeArgs:
     @pulumi.getter
     def protocols(self) -> pulumi.Input[_builtins.str]:
         """
-        The target volume protocol expressed as a list. Changing this forces a new Application Volume Group to be created and data will be lost. Supported values for Application Volume Group include `NFSv3` or `NFSv4.1`, multi-protocol is not supported and there are certain rules on which protocol is supporteed per volume spec, please check [Configure application volume groups for the SAP HANA REST API](https://learn.microsoft.com/en-us/azure/azure-netapp-files/configure-application-volume-group-sap-hana-api) document for details.
+        The target volume protocol expressed as a list. Protocol conversion between `NFSv3` and `NFSv4.1` and vice-versa is supported without recreating the volume group, however export policy rules must be updated accordingly to avoid configuration drift (e.g., when converting from `NFSv3` to `NFSv4.1`, set `nfsv3_enabled = false` and `nfsv41_enabled = true` in export policy rules). Supported values include `NFSv3` or `NFSv4.1`, multi-protocol is not supported. Please check [Configure application volume groups for the SAP HANA REST API](https://learn.microsoft.com/en-us/azure/azure-netapp-files/configure-application-volume-group-sap-hana-api) document for details.
+
+        > **Note:** NFSv3 protocol is only supported for backup volumes (`data-backup`, `log-backup`) in SAP HANA volume groups. Critical volumes (`data`, `log`, `shared`) must use NFSv4.1. When converting protocols on backup volumes, ensure export policy rules are updated accordingly to avoid configuration drift.
         """
         return pulumi.get(self, "protocols")
 

pulumi_azure/netapp/account.py

@@ -280,7 +280,7 @@ class Account(pulumi.CustomResource):
         <!-- This section is generated, changes will be overwritten -->
         This resource uses the following Azure API Providers:
 
-        * `Microsoft.NetApp` - 2025-01-01
+        * `Microsoft.NetApp` - 2025-06-01
 
         ## Import
 
@@ -347,7 +347,7 @@ class Account(pulumi.CustomResource):
         <!-- This section is generated, changes will be overwritten -->
         This resource uses the following Azure API Providers:
 
-        * `Microsoft.NetApp` - 2025-01-01
+        * `Microsoft.NetApp` - 2025-06-01
 
         ## Import