pulumi-azure 6.27.0a1758868424__py3-none-any.whl → 6.27.0a1759511969__py3-none-any.whl

pulumi_azure/machinelearning/_inputs.py

@@ -1071,7 +1071,11 @@ if not MYPY:
     class WorkspaceManagedNetworkArgsDict(TypedDict):
         isolation_mode: NotRequired[pulumi.Input[_builtins.str]]
         """
-        The isolation mode of the Machine Learning Workspace. Possible values are `Disabled`, `AllowOnlyApprovedOutbound`, and `AllowInternetOutbound`
+        The isolation mode of the Machine Learning Workspace. Possible values are `Disabled`, `AllowOnlyApprovedOutbound`, and `AllowInternetOutbound`.
+        """
+        provision_on_creation_enabled: NotRequired[pulumi.Input[_builtins.bool]]
+        """
+        Set to trigger the provisioning of the managed VNet with the default options when creating a Machine Learning Workspace with the managed VNet enabled. Defaults to `false`. Changing this forces a new resource to be created.
         """
 elif False:
     WorkspaceManagedNetworkArgsDict: TypeAlias = Mapping[str, Any]
@@ -1079,18 +1083,22 @@ elif False:
 @pulumi.input_type
 class WorkspaceManagedNetworkArgs:
     def __init__(__self__, *,
-                 isolation_mode: Optional[pulumi.Input[_builtins.str]] = None):
+                 isolation_mode: Optional[pulumi.Input[_builtins.str]] = None,
+                 provision_on_creation_enabled: Optional[pulumi.Input[_builtins.bool]] = None):
         """
-        :param pulumi.Input[_builtins.str] isolation_mode: The isolation mode of the Machine Learning Workspace. Possible values are `Disabled`, `AllowOnlyApprovedOutbound`, and `AllowInternetOutbound`
+        :param pulumi.Input[_builtins.str] isolation_mode: The isolation mode of the Machine Learning Workspace. Possible values are `Disabled`, `AllowOnlyApprovedOutbound`, and `AllowInternetOutbound`.
+        :param pulumi.Input[_builtins.bool] provision_on_creation_enabled: Set to trigger the provisioning of the managed VNet with the default options when creating a Machine Learning Workspace with the managed VNet enabled. Defaults to `false`. Changing this forces a new resource to be created.
         """
         if isolation_mode is not None:
             pulumi.set(__self__, "isolation_mode", isolation_mode)
+        if provision_on_creation_enabled is not None:
+            pulumi.set(__self__, "provision_on_creation_enabled", provision_on_creation_enabled)
 
     @_builtins.property
     @pulumi.getter(name="isolationMode")
     def isolation_mode(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        The isolation mode of the Machine Learning Workspace. Possible values are `Disabled`, `AllowOnlyApprovedOutbound`, and `AllowInternetOutbound`
+        The isolation mode of the Machine Learning Workspace. Possible values are `Disabled`, `AllowOnlyApprovedOutbound`, and `AllowInternetOutbound`.
         """
         return pulumi.get(self, "isolation_mode")
 
@@ -1098,6 +1106,18 @@ class WorkspaceManagedNetworkArgs:
     def isolation_mode(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "isolation_mode", value)
 
+    @_builtins.property
+    @pulumi.getter(name="provisionOnCreationEnabled")
+    def provision_on_creation_enabled(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        Set to trigger the provisioning of the managed VNet with the default options when creating a Machine Learning Workspace with the managed VNet enabled. Defaults to `false`. Changing this forces a new resource to be created.
+        """
+        return pulumi.get(self, "provision_on_creation_enabled")
+
+    @provision_on_creation_enabled.setter
+    def provision_on_creation_enabled(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "provision_on_creation_enabled", value)
+
 
 if not MYPY:
     class WorkspaceServerlessComputeArgsDict(TypedDict):

pulumi_azure/machinelearning/compute_instance.py

@@ -43,9 +43,13 @@ class ComputeInstanceArgs:
         :param pulumi.Input['ComputeInstanceIdentityArgs'] identity: An `identity` block as defined below. Changing this forces a new Machine Learning Compute Instance to be created.
         :param pulumi.Input[_builtins.bool] local_auth_enabled: Whether local authentication methods is enabled. Defaults to `true`. Changing this forces a new Machine Learning Compute Instance to be created.
         :param pulumi.Input[_builtins.str] name: The name which should be used for this Machine Learning Compute Instance. Changing this forces a new Machine Learning Compute Instance to be created.
-        :param pulumi.Input[_builtins.bool] node_public_ip_enabled: Whether the compute instance will have a public ip. To set this to false a `subnet_resource_id` needs to be set. Defaults to `true`. Changing this forces a new Machine Learning Compute Cluster to be created.
+        :param pulumi.Input[_builtins.bool] node_public_ip_enabled: Whether the compute instance will have a public ip. Defaults to `true`. Changing this forces a new Machine Learning Compute Cluster to be created.
+               
+               > **Note:** The property `subnet_resource_id` becomes required if `node_public_ip_enabled` is set to `false`, and the instance's workspace is not using a managed network (i.e. the workspace's outbound isolation mode is `Disabled`).
         :param pulumi.Input['ComputeInstanceSshArgs'] ssh: A `ssh` block as defined below. Specifies policy and settings for SSH access. Changing this forces a new Machine Learning Compute Instance to be created.
         :param pulumi.Input[_builtins.str] subnet_resource_id: Virtual network subnet resource ID the compute nodes belong to. Changing this forces a new Machine Learning Compute Instance to be created.
+               
+               > **Note:** The property `subnet_resource_id` can be set only if the instance's workspace is not using Azure-managed networking.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags: A mapping of tags which should be assigned to the Machine Learning Compute Instance. Changing this forces a new Machine Learning Compute Instance to be created.
         """
         pulumi.set(__self__, "machine_learning_workspace_id", machine_learning_workspace_id)
@@ -171,7 +175,9 @@ class ComputeInstanceArgs:
     @pulumi.getter(name="nodePublicIpEnabled")
     def node_public_ip_enabled(self) -> Optional[pulumi.Input[_builtins.bool]]:
         """
-        Whether the compute instance will have a public ip. To set this to false a `subnet_resource_id` needs to be set. Defaults to `true`. Changing this forces a new Machine Learning Compute Cluster to be created.
+        Whether the compute instance will have a public ip. Defaults to `true`. Changing this forces a new Machine Learning Compute Cluster to be created.
+
+        > **Note:** The property `subnet_resource_id` becomes required if `node_public_ip_enabled` is set to `false`, and the instance's workspace is not using a managed network (i.e. the workspace's outbound isolation mode is `Disabled`).
         """
         return pulumi.get(self, "node_public_ip_enabled")
 
@@ -196,6 +202,8 @@ class ComputeInstanceArgs:
     def subnet_resource_id(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
         Virtual network subnet resource ID the compute nodes belong to. Changing this forces a new Machine Learning Compute Instance to be created.
+
+        > **Note:** The property `subnet_resource_id` can be set only if the instance's workspace is not using Azure-managed networking.
         """
         return pulumi.get(self, "subnet_resource_id")
 
@@ -240,9 +248,13 @@ class _ComputeInstanceState:
         :param pulumi.Input[_builtins.bool] local_auth_enabled: Whether local authentication methods is enabled. Defaults to `true`. Changing this forces a new Machine Learning Compute Instance to be created.
         :param pulumi.Input[_builtins.str] machine_learning_workspace_id: The ID of the Machine Learning Workspace. Changing this forces a new Machine Learning Compute Instance to be created.
         :param pulumi.Input[_builtins.str] name: The name which should be used for this Machine Learning Compute Instance. Changing this forces a new Machine Learning Compute Instance to be created.
-        :param pulumi.Input[_builtins.bool] node_public_ip_enabled: Whether the compute instance will have a public ip. To set this to false a `subnet_resource_id` needs to be set. Defaults to `true`. Changing this forces a new Machine Learning Compute Cluster to be created.
+        :param pulumi.Input[_builtins.bool] node_public_ip_enabled: Whether the compute instance will have a public ip. Defaults to `true`. Changing this forces a new Machine Learning Compute Cluster to be created.
+               
+               > **Note:** The property `subnet_resource_id` becomes required if `node_public_ip_enabled` is set to `false`, and the instance's workspace is not using a managed network (i.e. the workspace's outbound isolation mode is `Disabled`).
         :param pulumi.Input['ComputeInstanceSshArgs'] ssh: A `ssh` block as defined below. Specifies policy and settings for SSH access. Changing this forces a new Machine Learning Compute Instance to be created.
         :param pulumi.Input[_builtins.str] subnet_resource_id: Virtual network subnet resource ID the compute nodes belong to. Changing this forces a new Machine Learning Compute Instance to be created.
+               
+               > **Note:** The property `subnet_resource_id` can be set only if the instance's workspace is not using Azure-managed networking.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags: A mapping of tags which should be assigned to the Machine Learning Compute Instance. Changing this forces a new Machine Learning Compute Instance to be created.
         :param pulumi.Input[_builtins.str] virtual_machine_size: The Virtual Machine Size. Changing this forces a new Machine Learning Compute Instance to be created.
         """
@@ -359,7 +371,9 @@ class _ComputeInstanceState:
     @pulumi.getter(name="nodePublicIpEnabled")
     def node_public_ip_enabled(self) -> Optional[pulumi.Input[_builtins.bool]]:
         """
-        Whether the compute instance will have a public ip. To set this to false a `subnet_resource_id` needs to be set. Defaults to `true`. Changing this forces a new Machine Learning Compute Cluster to be created.
+        Whether the compute instance will have a public ip. Defaults to `true`. Changing this forces a new Machine Learning Compute Cluster to be created.
+
+        > **Note:** The property `subnet_resource_id` becomes required if `node_public_ip_enabled` is set to `false`, and the instance's workspace is not using a managed network (i.e. the workspace's outbound isolation mode is `Disabled`).
         """
         return pulumi.get(self, "node_public_ip_enabled")
 
@@ -384,6 +398,8 @@ class _ComputeInstanceState:
     def subnet_resource_id(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
         Virtual network subnet resource ID the compute nodes belong to. Changing this forces a new Machine Learning Compute Instance to be created.
+
+        > **Note:** The property `subnet_resource_id` can be set only if the instance's workspace is not using Azure-managed networking.
         """
         return pulumi.get(self, "subnet_resource_id")
 
@@ -532,9 +548,13 @@ class ComputeInstance(pulumi.CustomResource):
         :param pulumi.Input[_builtins.bool] local_auth_enabled: Whether local authentication methods is enabled. Defaults to `true`. Changing this forces a new Machine Learning Compute Instance to be created.
         :param pulumi.Input[_builtins.str] machine_learning_workspace_id: The ID of the Machine Learning Workspace. Changing this forces a new Machine Learning Compute Instance to be created.
         :param pulumi.Input[_builtins.str] name: The name which should be used for this Machine Learning Compute Instance. Changing this forces a new Machine Learning Compute Instance to be created.
-        :param pulumi.Input[_builtins.bool] node_public_ip_enabled: Whether the compute instance will have a public ip. To set this to false a `subnet_resource_id` needs to be set. Defaults to `true`. Changing this forces a new Machine Learning Compute Cluster to be created.
+        :param pulumi.Input[_builtins.bool] node_public_ip_enabled: Whether the compute instance will have a public ip. Defaults to `true`. Changing this forces a new Machine Learning Compute Cluster to be created.
+               
+               > **Note:** The property `subnet_resource_id` becomes required if `node_public_ip_enabled` is set to `false`, and the instance's workspace is not using a managed network (i.e. the workspace's outbound isolation mode is `Disabled`).
         :param pulumi.Input[Union['ComputeInstanceSshArgs', 'ComputeInstanceSshArgsDict']] ssh: A `ssh` block as defined below. Specifies policy and settings for SSH access. Changing this forces a new Machine Learning Compute Instance to be created.
         :param pulumi.Input[_builtins.str] subnet_resource_id: Virtual network subnet resource ID the compute nodes belong to. Changing this forces a new Machine Learning Compute Instance to be created.
+               
+               > **Note:** The property `subnet_resource_id` can be set only if the instance's workspace is not using Azure-managed networking.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags: A mapping of tags which should be assigned to the Machine Learning Compute Instance. Changing this forces a new Machine Learning Compute Instance to be created.
         :param pulumi.Input[_builtins.str] virtual_machine_size: The Virtual Machine Size. Changing this forces a new Machine Learning Compute Instance to be created.
         """
@@ -720,9 +740,13 @@ class ComputeInstance(pulumi.CustomResource):
         :param pulumi.Input[_builtins.bool] local_auth_enabled: Whether local authentication methods is enabled. Defaults to `true`. Changing this forces a new Machine Learning Compute Instance to be created.
         :param pulumi.Input[_builtins.str] machine_learning_workspace_id: The ID of the Machine Learning Workspace. Changing this forces a new Machine Learning Compute Instance to be created.
         :param pulumi.Input[_builtins.str] name: The name which should be used for this Machine Learning Compute Instance. Changing this forces a new Machine Learning Compute Instance to be created.
-        :param pulumi.Input[_builtins.bool] node_public_ip_enabled: Whether the compute instance will have a public ip. To set this to false a `subnet_resource_id` needs to be set. Defaults to `true`. Changing this forces a new Machine Learning Compute Cluster to be created.
+        :param pulumi.Input[_builtins.bool] node_public_ip_enabled: Whether the compute instance will have a public ip. Defaults to `true`. Changing this forces a new Machine Learning Compute Cluster to be created.
+               
+               > **Note:** The property `subnet_resource_id` becomes required if `node_public_ip_enabled` is set to `false`, and the instance's workspace is not using a managed network (i.e. the workspace's outbound isolation mode is `Disabled`).
         :param pulumi.Input[Union['ComputeInstanceSshArgs', 'ComputeInstanceSshArgsDict']] ssh: A `ssh` block as defined below. Specifies policy and settings for SSH access. Changing this forces a new Machine Learning Compute Instance to be created.
         :param pulumi.Input[_builtins.str] subnet_resource_id: Virtual network subnet resource ID the compute nodes belong to. Changing this forces a new Machine Learning Compute Instance to be created.
+               
+               > **Note:** The property `subnet_resource_id` can be set only if the instance's workspace is not using Azure-managed networking.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags: A mapping of tags which should be assigned to the Machine Learning Compute Instance. Changing this forces a new Machine Learning Compute Instance to be created.
         :param pulumi.Input[_builtins.str] virtual_machine_size: The Virtual Machine Size. Changing this forces a new Machine Learning Compute Instance to be created.
         """
@@ -804,7 +828,9 @@ class ComputeInstance(pulumi.CustomResource):
     @pulumi.getter(name="nodePublicIpEnabled")
     def node_public_ip_enabled(self) -> pulumi.Output[Optional[_builtins.bool]]:
         """
-        Whether the compute instance will have a public ip. To set this to false a `subnet_resource_id` needs to be set. Defaults to `true`. Changing this forces a new Machine Learning Compute Cluster to be created.
+        Whether the compute instance will have a public ip. Defaults to `true`. Changing this forces a new Machine Learning Compute Cluster to be created.
+
+        > **Note:** The property `subnet_resource_id` becomes required if `node_public_ip_enabled` is set to `false`, and the instance's workspace is not using a managed network (i.e. the workspace's outbound isolation mode is `Disabled`).
         """
         return pulumi.get(self, "node_public_ip_enabled")
 
@@ -821,6 +847,8 @@ class ComputeInstance(pulumi.CustomResource):
     def subnet_resource_id(self) -> pulumi.Output[Optional[_builtins.str]]:
         """
         Virtual network subnet resource ID the compute nodes belong to. Changing this forces a new Machine Learning Compute Instance to be created.
+
+        > **Note:** The property `subnet_resource_id` can be set only if the instance's workspace is not using Azure-managed networking.
         """
         return pulumi.get(self, "subnet_resource_id")
 

pulumi_azure/machinelearning/datastore_blobstorage.py

@@ -399,7 +399,7 @@ class DatastoreBlobstorage(pulumi.CustomResource):
         example_datastore_blobstorage = azure.machinelearning.DatastoreBlobstorage("example",
             name="example-datastore",
             workspace_id=example_workspace.id,
-            storage_container_id=example_container.resource_manager_id,
+            storage_container_id=example_container.id,
             account_key=example_account.primary_access_key)
         ```
 
@@ -489,7 +489,7 @@ class DatastoreBlobstorage(pulumi.CustomResource):
         example_datastore_blobstorage = azure.machinelearning.DatastoreBlobstorage("example",
             name="example-datastore",
             workspace_id=example_workspace.id,
-            storage_container_id=example_container.resource_manager_id,
+            storage_container_id=example_container.id,
             account_key=example_account.primary_access_key)
         ```
 

pulumi_azure/machinelearning/datastore_datalake_gen2.py

@@ -430,7 +430,7 @@ class DatastoreDatalakeGen2(pulumi.CustomResource):
         example_datastore_datalake_gen2 = azure.machinelearning.DatastoreDatalakeGen2("example",
             name="example-datastore",
             workspace_id=example_workspace.id,
-            storage_container_id=example_container.resource_manager_id)
+            storage_container_id=example_container.id)
         ```
 
         ## API Providers
@@ -514,7 +514,7 @@ class DatastoreDatalakeGen2(pulumi.CustomResource):
         example_datastore_datalake_gen2 = azure.machinelearning.DatastoreDatalakeGen2("example",
             name="example-datastore",
             workspace_id=example_workspace.id,
-            storage_container_id=example_container.resource_manager_id)
+            storage_container_id=example_container.id)
         ```
 
         ## API Providers

pulumi_azure/machinelearning/inference_cluster.py

@@ -431,7 +431,7 @@ class InferenceCluster(pulumi.CustomResource):
         <!-- This section is generated, changes will be overwritten -->
         This resource uses the following Azure API Providers:
 
-        * `Microsoft.ContainerService` - 2025-02-01
+        * `Microsoft.ContainerService` - 2025-05-01
 
         * `Microsoft.MachineLearningServices` - 2025-06-01
 
@@ -550,7 +550,7 @@ class InferenceCluster(pulumi.CustomResource):
         <!-- This section is generated, changes will be overwritten -->
         This resource uses the following Azure API Providers:
 
-        * `Microsoft.ContainerService` - 2025-02-01
+        * `Microsoft.ContainerService` - 2025-05-01
 
         * `Microsoft.MachineLearningServices` - 2025-06-01
 

pulumi_azure/machinelearning/outputs.py

@@ -891,6 +891,8 @@ class WorkspaceManagedNetwork(dict):
         suggest = None
         if key == "isolationMode":
             suggest = "isolation_mode"
+        elif key == "provisionOnCreationEnabled":
+            suggest = "provision_on_creation_enabled"
 
         if suggest:
             pulumi.log.warn(f"Key '{key}' not found in WorkspaceManagedNetwork. Access the value via the '{suggest}' property getter instead.")
@@ -904,21 +906,33 @@ class WorkspaceManagedNetwork(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 isolation_mode: Optional[_builtins.str] = None):
+                 isolation_mode: Optional[_builtins.str] = None,
+                 provision_on_creation_enabled: Optional[_builtins.bool] = None):
         """
-        :param _builtins.str isolation_mode: The isolation mode of the Machine Learning Workspace. Possible values are `Disabled`, `AllowOnlyApprovedOutbound`, and `AllowInternetOutbound`
+        :param _builtins.str isolation_mode: The isolation mode of the Machine Learning Workspace. Possible values are `Disabled`, `AllowOnlyApprovedOutbound`, and `AllowInternetOutbound`.
+        :param _builtins.bool provision_on_creation_enabled: Set to trigger the provisioning of the managed VNet with the default options when creating a Machine Learning Workspace with the managed VNet enabled. Defaults to `false`. Changing this forces a new resource to be created.
         """
         if isolation_mode is not None:
             pulumi.set(__self__, "isolation_mode", isolation_mode)
+        if provision_on_creation_enabled is not None:
+            pulumi.set(__self__, "provision_on_creation_enabled", provision_on_creation_enabled)
 
     @_builtins.property
     @pulumi.getter(name="isolationMode")
     def isolation_mode(self) -> Optional[_builtins.str]:
         """
-        The isolation mode of the Machine Learning Workspace. Possible values are `Disabled`, `AllowOnlyApprovedOutbound`, and `AllowInternetOutbound`
+        The isolation mode of the Machine Learning Workspace. Possible values are `Disabled`, `AllowOnlyApprovedOutbound`, and `AllowInternetOutbound`.
         """
         return pulumi.get(self, "isolation_mode")
 
+    @_builtins.property
+    @pulumi.getter(name="provisionOnCreationEnabled")
+    def provision_on_creation_enabled(self) -> Optional[_builtins.bool]:
+        """
+        Set to trigger the provisioning of the managed VNet with the default options when creating a Machine Learning Workspace with the managed VNet enabled. Defaults to `false`. Changing this forces a new resource to be created.
+        """
+        return pulumi.get(self, "provision_on_creation_enabled")
+
 
 @pulumi.output_type
 class WorkspaceServerlessCompute(dict):

pulumi_azure/machinelearning/workspace.py

@@ -40,6 +40,7 @@ class WorkspaceArgs:
                  primary_user_assigned_identity: Optional[pulumi.Input[_builtins.str]] = None,
                  public_network_access_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  serverless_compute: Optional[pulumi.Input['WorkspaceServerlessComputeArgs']] = None,
+                 service_side_encryption_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  sku_name: Optional[pulumi.Input[_builtins.str]] = None,
                  tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
                  v1_legacy_mode_enabled: Optional[pulumi.Input[_builtins.bool]] = None):
@@ -70,6 +71,9 @@ class WorkspaceArgs:
                
                > **Note:** `public_access_behind_virtual_network_enabled` is deprecated and will be removed in favour of the property `public_network_access_enabled`.
         :param pulumi.Input['WorkspaceServerlessComputeArgs'] serverless_compute: A `serverless_compute` block as defined below.
+        :param pulumi.Input[_builtins.bool] service_side_encryption_enabled: Whether to enable service-side encryption with customer-managed keys (CMK). Default to `false`. Changing this forces a new resource to be created.
+               
+               !> **Note:** Setting `service_side_encryption_enabled` requires the `encryption` block to be set. When you use service-side encryption, Azure charges will continue to accrue during the soft delete retention period.
         :param pulumi.Input[_builtins.str] sku_name: SKU/edition of the Machine Learning Workspace, possible values are `Free`, `Basic`, `Standard` and `Premium`. Defaults to `Basic`.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] tags: A mapping of tags to assign to the resource.
         :param pulumi.Input[_builtins.bool] v1_legacy_mode_enabled: Enable V1 API features, enabling `v1_legacy_mode` may prevent you from using features provided by the v2 API. Defaults to `false`.
@@ -107,6 +111,8 @@ class WorkspaceArgs:
             pulumi.set(__self__, "public_network_access_enabled", public_network_access_enabled)
         if serverless_compute is not None:
             pulumi.set(__self__, "serverless_compute", serverless_compute)
+        if service_side_encryption_enabled is not None:
+            pulumi.set(__self__, "service_side_encryption_enabled", service_side_encryption_enabled)
         if sku_name is not None:
             pulumi.set(__self__, "sku_name", sku_name)
         if tags is not None:
@@ -348,6 +354,20 @@ class WorkspaceArgs:
     def serverless_compute(self, value: Optional[pulumi.Input['WorkspaceServerlessComputeArgs']]):
         pulumi.set(self, "serverless_compute", value)
 
+    @_builtins.property
+    @pulumi.getter(name="serviceSideEncryptionEnabled")
+    def service_side_encryption_enabled(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        Whether to enable service-side encryption with customer-managed keys (CMK). Default to `false`. Changing this forces a new resource to be created.
+
+        !> **Note:** Setting `service_side_encryption_enabled` requires the `encryption` block to be set. When you use service-side encryption, Azure charges will continue to accrue during the soft delete retention period.
+        """
+        return pulumi.get(self, "service_side_encryption_enabled")
+
+    @service_side_encryption_enabled.setter
+    def service_side_encryption_enabled(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "service_side_encryption_enabled", value)
+
     @_builtins.property
     @pulumi.getter(name="skuName")
     def sku_name(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -407,6 +427,7 @@ class _WorkspaceState:
                  public_network_access_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  resource_group_name: Optional[pulumi.Input[_builtins.str]] = None,
                  serverless_compute: Optional[pulumi.Input['WorkspaceServerlessComputeArgs']] = None,
+                 service_side_encryption_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  sku_name: Optional[pulumi.Input[_builtins.str]] = None,
                  storage_account_id: Optional[pulumi.Input[_builtins.str]] = None,
                  tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
@@ -437,6 +458,9 @@ class _WorkspaceState:
                > **Note:** `public_access_behind_virtual_network_enabled` is deprecated and will be removed in favour of the property `public_network_access_enabled`.
         :param pulumi.Input[_builtins.str] resource_group_name: Specifies the name of the Resource Group in which the Machine Learning Workspace should exist. Changing this forces a new resource to be created.
         :param pulumi.Input['WorkspaceServerlessComputeArgs'] serverless_compute: A `serverless_compute` block as defined below.
+        :param pulumi.Input[_builtins.bool] service_side_encryption_enabled: Whether to enable service-side encryption with customer-managed keys (CMK). Default to `false`. Changing this forces a new resource to be created.
+               
+               !> **Note:** Setting `service_side_encryption_enabled` requires the `encryption` block to be set. When you use service-side encryption, Azure charges will continue to accrue during the soft delete retention period.
         :param pulumi.Input[_builtins.str] sku_name: SKU/edition of the Machine Learning Workspace, possible values are `Free`, `Basic`, `Standard` and `Premium`. Defaults to `Basic`.
         :param pulumi.Input[_builtins.str] storage_account_id: The ID of the Storage Account associated with this Machine Learning Workspace. Changing this forces a new resource to be created.
                
@@ -483,6 +507,8 @@ class _WorkspaceState:
             pulumi.set(__self__, "resource_group_name", resource_group_name)
         if serverless_compute is not None:
             pulumi.set(__self__, "serverless_compute", serverless_compute)
+        if service_side_encryption_enabled is not None:
+            pulumi.set(__self__, "service_side_encryption_enabled", service_side_encryption_enabled)
         if sku_name is not None:
             pulumi.set(__self__, "sku_name", sku_name)
         if storage_account_id is not None:
@@ -726,6 +752,20 @@ class _WorkspaceState:
     def serverless_compute(self, value: Optional[pulumi.Input['WorkspaceServerlessComputeArgs']]):
         pulumi.set(self, "serverless_compute", value)
 
+    @_builtins.property
+    @pulumi.getter(name="serviceSideEncryptionEnabled")
+    def service_side_encryption_enabled(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        Whether to enable service-side encryption with customer-managed keys (CMK). Default to `false`. Changing this forces a new resource to be created.
+
+        !> **Note:** Setting `service_side_encryption_enabled` requires the `encryption` block to be set. When you use service-side encryption, Azure charges will continue to accrue during the soft delete retention period.
+        """
+        return pulumi.get(self, "service_side_encryption_enabled")
+
+    @service_side_encryption_enabled.setter
+    def service_side_encryption_enabled(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "service_side_encryption_enabled", value)
+
     @_builtins.property
     @pulumi.getter(name="skuName")
     def sku_name(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -813,6 +853,7 @@ class Workspace(pulumi.CustomResource):
                  public_network_access_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  resource_group_name: Optional[pulumi.Input[_builtins.str]] = None,
                  serverless_compute: Optional[pulumi.Input[Union['WorkspaceServerlessComputeArgs', 'WorkspaceServerlessComputeArgsDict']]] = None,
+                 service_side_encryption_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  sku_name: Optional[pulumi.Input[_builtins.str]] = None,
                  storage_account_id: Optional[pulumi.Input[_builtins.str]] = None,
                  tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
@@ -1112,6 +1153,9 @@ class Workspace(pulumi.CustomResource):
                > **Note:** `public_access_behind_virtual_network_enabled` is deprecated and will be removed in favour of the property `public_network_access_enabled`.
         :param pulumi.Input[_builtins.str] resource_group_name: Specifies the name of the Resource Group in which the Machine Learning Workspace should exist. Changing this forces a new resource to be created.
         :param pulumi.Input[Union['WorkspaceServerlessComputeArgs', 'WorkspaceServerlessComputeArgsDict']] serverless_compute: A `serverless_compute` block as defined below.
+        :param pulumi.Input[_builtins.bool] service_side_encryption_enabled: Whether to enable service-side encryption with customer-managed keys (CMK). Default to `false`. Changing this forces a new resource to be created.
+               
+               !> **Note:** Setting `service_side_encryption_enabled` requires the `encryption` block to be set. When you use service-side encryption, Azure charges will continue to accrue during the soft delete retention period.
         :param pulumi.Input[_builtins.str] sku_name: SKU/edition of the Machine Learning Workspace, possible values are `Free`, `Basic`, `Standard` and `Premium`. Defaults to `Basic`.
         :param pulumi.Input[_builtins.str] storage_account_id: The ID of the Storage Account associated with this Machine Learning Workspace. Changing this forces a new resource to be created.
                
@@ -1428,6 +1472,7 @@ class Workspace(pulumi.CustomResource):
                  public_network_access_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  resource_group_name: Optional[pulumi.Input[_builtins.str]] = None,
                  serverless_compute: Optional[pulumi.Input[Union['WorkspaceServerlessComputeArgs', 'WorkspaceServerlessComputeArgsDict']]] = None,
+                 service_side_encryption_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  sku_name: Optional[pulumi.Input[_builtins.str]] = None,
                  storage_account_id: Optional[pulumi.Input[_builtins.str]] = None,
                  tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
@@ -1467,6 +1512,7 @@ class Workspace(pulumi.CustomResource):
                 raise TypeError("Missing required property 'resource_group_name'")
             __props__.__dict__["resource_group_name"] = resource_group_name
             __props__.__dict__["serverless_compute"] = serverless_compute
+            __props__.__dict__["service_side_encryption_enabled"] = service_side_encryption_enabled
             __props__.__dict__["sku_name"] = sku_name
             if storage_account_id is None and not opts.urn:
                 raise TypeError("Missing required property 'storage_account_id'")
@@ -1504,6 +1550,7 @@ class Workspace(pulumi.CustomResource):
             public_network_access_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
             resource_group_name: Optional[pulumi.Input[_builtins.str]] = None,
             serverless_compute: Optional[pulumi.Input[Union['WorkspaceServerlessComputeArgs', 'WorkspaceServerlessComputeArgsDict']]] = None,
+            service_side_encryption_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
             sku_name: Optional[pulumi.Input[_builtins.str]] = None,
             storage_account_id: Optional[pulumi.Input[_builtins.str]] = None,
             tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
@@ -1539,6 +1586,9 @@ class Workspace(pulumi.CustomResource):
                > **Note:** `public_access_behind_virtual_network_enabled` is deprecated and will be removed in favour of the property `public_network_access_enabled`.
         :param pulumi.Input[_builtins.str] resource_group_name: Specifies the name of the Resource Group in which the Machine Learning Workspace should exist. Changing this forces a new resource to be created.
         :param pulumi.Input[Union['WorkspaceServerlessComputeArgs', 'WorkspaceServerlessComputeArgsDict']] serverless_compute: A `serverless_compute` block as defined below.
+        :param pulumi.Input[_builtins.bool] service_side_encryption_enabled: Whether to enable service-side encryption with customer-managed keys (CMK). Default to `false`. Changing this forces a new resource to be created.
+               
+               !> **Note:** Setting `service_side_encryption_enabled` requires the `encryption` block to be set. When you use service-side encryption, Azure charges will continue to accrue during the soft delete retention period.
         :param pulumi.Input[_builtins.str] sku_name: SKU/edition of the Machine Learning Workspace, possible values are `Free`, `Basic`, `Standard` and `Premium`. Defaults to `Basic`.
         :param pulumi.Input[_builtins.str] storage_account_id: The ID of the Storage Account associated with this Machine Learning Workspace. Changing this forces a new resource to be created.
                
@@ -1570,6 +1620,7 @@ class Workspace(pulumi.CustomResource):
         __props__.__dict__["public_network_access_enabled"] = public_network_access_enabled
         __props__.__dict__["resource_group_name"] = resource_group_name
         __props__.__dict__["serverless_compute"] = serverless_compute
+        __props__.__dict__["service_side_encryption_enabled"] = service_side_encryption_enabled
         __props__.__dict__["sku_name"] = sku_name
         __props__.__dict__["storage_account_id"] = storage_account_id
         __props__.__dict__["tags"] = tags
@@ -1733,6 +1784,16 @@ class Workspace(pulumi.CustomResource):
         """
         return pulumi.get(self, "serverless_compute")
 
+    @_builtins.property
+    @pulumi.getter(name="serviceSideEncryptionEnabled")
+    def service_side_encryption_enabled(self) -> pulumi.Output[Optional[_builtins.bool]]:
+        """
+        Whether to enable service-side encryption with customer-managed keys (CMK). Default to `false`. Changing this forces a new resource to be created.
+
+        !> **Note:** Setting `service_side_encryption_enabled` requires the `encryption` block to be set. When you use service-side encryption, Azure charges will continue to accrue during the soft delete retention period.
+        """
+        return pulumi.get(self, "service_side_encryption_enabled")
+
     @_builtins.property
     @pulumi.getter(name="skuName")
     def sku_name(self) -> pulumi.Output[Optional[_builtins.str]]:

pulumi_azure/management/_inputs.py

@@ -238,9 +238,6 @@ if not MYPY:
     class GroupPolicyAssignmentOverrideSelectorArgsDict(TypedDict):
         ins: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
         kind: NotRequired[pulumi.Input[_builtins.str]]
-        """
-        Specifies which characteristic will narrow down the set of evaluated resources. Possible values are `resourceLocation`, `resourceType` and `resourceWithoutLocation`.
-        """
         not_ins: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
 elif False:
     GroupPolicyAssignmentOverrideSelectorArgsDict: TypeAlias = Mapping[str, Any]
@@ -251,9 +248,6 @@ class GroupPolicyAssignmentOverrideSelectorArgs:
                  ins: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
                  kind: Optional[pulumi.Input[_builtins.str]] = None,
                  not_ins: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
-        """
-        :param pulumi.Input[_builtins.str] kind: Specifies which characteristic will narrow down the set of evaluated resources. Possible values are `resourceLocation`, `resourceType` and `resourceWithoutLocation`.
-        """
         if ins is not None:
             pulumi.set(__self__, "ins", ins)
         if kind is not None:
@@ -273,9 +267,6 @@ class GroupPolicyAssignmentOverrideSelectorArgs:
     @_builtins.property
     @pulumi.getter
     def kind(self) -> Optional[pulumi.Input[_builtins.str]]:
-        """
-        Specifies which characteristic will narrow down the set of evaluated resources. Possible values are `resourceLocation`, `resourceType` and `resourceWithoutLocation`.
-        """
         return pulumi.get(self, "kind")
 
     @kind.setter
@@ -346,9 +337,6 @@ class GroupPolicyAssignmentResourceSelectorArgs:
 if not MYPY:
     class GroupPolicyAssignmentResourceSelectorSelectorArgsDict(TypedDict):
         kind: pulumi.Input[_builtins.str]
-        """
-        Specifies which characteristic will narrow down the set of evaluated resources. Possible values are `resourceLocation`, `resourceType` and `resourceWithoutLocation`.
-        """
         ins: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
         not_ins: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
 elif False:
@@ -360,9 +348,6 @@ class GroupPolicyAssignmentResourceSelectorSelectorArgs:
                  kind: pulumi.Input[_builtins.str],
                  ins: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
                  not_ins: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
-        """
-        :param pulumi.Input[_builtins.str] kind: Specifies which characteristic will narrow down the set of evaluated resources. Possible values are `resourceLocation`, `resourceType` and `resourceWithoutLocation`.
-        """
         pulumi.set(__self__, "kind", kind)
         if ins is not None:
             pulumi.set(__self__, "ins", ins)
@@ -372,9 +357,6 @@ class GroupPolicyAssignmentResourceSelectorSelectorArgs:
     @_builtins.property
     @pulumi.getter
     def kind(self) -> pulumi.Input[_builtins.str]:
-        """
-        Specifies which characteristic will narrow down the set of evaluated resources. Possible values are `resourceLocation`, `resourceType` and `resourceWithoutLocation`.
-        """
         return pulumi.get(self, "kind")
 
     @kind.setter

pulumi_azure/management/group_policy_assignment.py

@@ -50,7 +50,7 @@ class GroupPolicyAssignmentArgs:
         :param pulumi.Input[_builtins.str] name: The name which should be used for this Policy Assignment. Cannot exceed 24 characters in length. Changing this forces a new Policy Assignment to be created.
         :param pulumi.Input[Sequence[pulumi.Input['GroupPolicyAssignmentNonComplianceMessageArgs']]] non_compliance_messages: One or more `non_compliance_message` blocks as defined below.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] not_scopes: Specifies a list of Resource Scopes (for example a Subscription, or a Resource Group) within this Management Group which are excluded from this Policy.
-        :param pulumi.Input[Sequence[pulumi.Input['GroupPolicyAssignmentOverrideArgs']]] overrides: One or more `overrides` blocks as defined below. More detail about `overrides` and `resource_selectors` see [policy assignment structure](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/assignment-structure#resource-selectors-preview)
+        :param pulumi.Input[Sequence[pulumi.Input['GroupPolicyAssignmentOverrideArgs']]] overrides: One or more `overrides` blocks as defined below. More detail about `overrides` and `resource_selectors` see [policy assignment structure](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/assignment-structure)
         :param pulumi.Input[_builtins.str] parameters: A JSON mapping of any Parameters for this Policy.
         :param pulumi.Input[Sequence[pulumi.Input['GroupPolicyAssignmentResourceSelectorArgs']]] resource_selectors: One or more `resource_selectors` blocks as defined below to filter polices by resource properties.
         """
@@ -219,7 +219,7 @@ class GroupPolicyAssignmentArgs:
     @pulumi.getter
     def overrides(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['GroupPolicyAssignmentOverrideArgs']]]]:
         """
-        One or more `overrides` blocks as defined below. More detail about `overrides` and `resource_selectors` see [policy assignment structure](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/assignment-structure#resource-selectors-preview)
+        One or more `overrides` blocks as defined below. More detail about `overrides` and `resource_selectors` see [policy assignment structure](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/assignment-structure)
         """
         return pulumi.get(self, "overrides")
 
@@ -283,7 +283,7 @@ class _GroupPolicyAssignmentState:
         :param pulumi.Input[_builtins.str] name: The name which should be used for this Policy Assignment. Cannot exceed 24 characters in length. Changing this forces a new Policy Assignment to be created.
         :param pulumi.Input[Sequence[pulumi.Input['GroupPolicyAssignmentNonComplianceMessageArgs']]] non_compliance_messages: One or more `non_compliance_message` blocks as defined below.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] not_scopes: Specifies a list of Resource Scopes (for example a Subscription, or a Resource Group) within this Management Group which are excluded from this Policy.
-        :param pulumi.Input[Sequence[pulumi.Input['GroupPolicyAssignmentOverrideArgs']]] overrides: One or more `overrides` blocks as defined below. More detail about `overrides` and `resource_selectors` see [policy assignment structure](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/assignment-structure#resource-selectors-preview)
+        :param pulumi.Input[Sequence[pulumi.Input['GroupPolicyAssignmentOverrideArgs']]] overrides: One or more `overrides` blocks as defined below. More detail about `overrides` and `resource_selectors` see [policy assignment structure](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/assignment-structure)
         :param pulumi.Input[_builtins.str] parameters: A JSON mapping of any Parameters for this Policy.
         :param pulumi.Input[_builtins.str] policy_definition_id: The ID of the Policy Definition or Policy Definition Set. Changing this forces a new Policy Assignment to be created.
         :param pulumi.Input[Sequence[pulumi.Input['GroupPolicyAssignmentResourceSelectorArgs']]] resource_selectors: One or more `resource_selectors` blocks as defined below to filter polices by resource properties.
@@ -443,7 +443,7 @@ class _GroupPolicyAssignmentState:
     @pulumi.getter
     def overrides(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['GroupPolicyAssignmentOverrideArgs']]]]:
         """
-        One or more `overrides` blocks as defined below. More detail about `overrides` and `resource_selectors` see [policy assignment structure](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/assignment-structure#resource-selectors-preview)
+        One or more `overrides` blocks as defined below. More detail about `overrides` and `resource_selectors` see [policy assignment structure](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/assignment-structure)
         """
         return pulumi.get(self, "overrides")
 
@@ -572,7 +572,7 @@ class GroupPolicyAssignment(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] name: The name which should be used for this Policy Assignment. Cannot exceed 24 characters in length. Changing this forces a new Policy Assignment to be created.
         :param pulumi.Input[Sequence[pulumi.Input[Union['GroupPolicyAssignmentNonComplianceMessageArgs', 'GroupPolicyAssignmentNonComplianceMessageArgsDict']]]] non_compliance_messages: One or more `non_compliance_message` blocks as defined below.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] not_scopes: Specifies a list of Resource Scopes (for example a Subscription, or a Resource Group) within this Management Group which are excluded from this Policy.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['GroupPolicyAssignmentOverrideArgs', 'GroupPolicyAssignmentOverrideArgsDict']]]] overrides: One or more `overrides` blocks as defined below. More detail about `overrides` and `resource_selectors` see [policy assignment structure](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/assignment-structure#resource-selectors-preview)
+        :param pulumi.Input[Sequence[pulumi.Input[Union['GroupPolicyAssignmentOverrideArgs', 'GroupPolicyAssignmentOverrideArgsDict']]]] overrides: One or more `overrides` blocks as defined below. More detail about `overrides` and `resource_selectors` see [policy assignment structure](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/assignment-structure)
         :param pulumi.Input[_builtins.str] parameters: A JSON mapping of any Parameters for this Policy.
         :param pulumi.Input[_builtins.str] policy_definition_id: The ID of the Policy Definition or Policy Definition Set. Changing this forces a new Policy Assignment to be created.
         :param pulumi.Input[Sequence[pulumi.Input[Union['GroupPolicyAssignmentResourceSelectorArgs', 'GroupPolicyAssignmentResourceSelectorArgsDict']]]] resource_selectors: One or more `resource_selectors` blocks as defined below to filter polices by resource properties.
@@ -731,7 +731,7 @@ class GroupPolicyAssignment(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] name: The name which should be used for this Policy Assignment. Cannot exceed 24 characters in length. Changing this forces a new Policy Assignment to be created.
         :param pulumi.Input[Sequence[pulumi.Input[Union['GroupPolicyAssignmentNonComplianceMessageArgs', 'GroupPolicyAssignmentNonComplianceMessageArgsDict']]]] non_compliance_messages: One or more `non_compliance_message` blocks as defined below.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] not_scopes: Specifies a list of Resource Scopes (for example a Subscription, or a Resource Group) within this Management Group which are excluded from this Policy.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['GroupPolicyAssignmentOverrideArgs', 'GroupPolicyAssignmentOverrideArgsDict']]]] overrides: One or more `overrides` blocks as defined below. More detail about `overrides` and `resource_selectors` see [policy assignment structure](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/assignment-structure#resource-selectors-preview)
+        :param pulumi.Input[Sequence[pulumi.Input[Union['GroupPolicyAssignmentOverrideArgs', 'GroupPolicyAssignmentOverrideArgsDict']]]] overrides: One or more `overrides` blocks as defined below. More detail about `overrides` and `resource_selectors` see [policy assignment structure](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/assignment-structure)
         :param pulumi.Input[_builtins.str] parameters: A JSON mapping of any Parameters for this Policy.
         :param pulumi.Input[_builtins.str] policy_definition_id: The ID of the Policy Definition or Policy Definition Set. Changing this forces a new Policy Assignment to be created.
         :param pulumi.Input[Sequence[pulumi.Input[Union['GroupPolicyAssignmentResourceSelectorArgs', 'GroupPolicyAssignmentResourceSelectorArgsDict']]]] resource_selectors: One or more `resource_selectors` blocks as defined below to filter polices by resource properties.
@@ -842,7 +842,7 @@ class GroupPolicyAssignment(pulumi.CustomResource):
     @pulumi.getter
     def overrides(self) -> pulumi.Output[Optional[Sequence['outputs.GroupPolicyAssignmentOverride']]]:
         """
-        One or more `overrides` blocks as defined below. More detail about `overrides` and `resource_selectors` see [policy assignment structure](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/assignment-structure#resource-selectors-preview)
+        One or more `overrides` blocks as defined below. More detail about `overrides` and `resource_selectors` see [policy assignment structure](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/assignment-structure)
         """
         return pulumi.get(self, "overrides")