pulumi-azure 6.28.0__py3-none-any.whl → 6.28.0a1759516578__py3-none-any.whl

pulumi_azure/cognitive/account.py

@@ -39,14 +39,16 @@ class AccountArgs:
                  metrics_advisor_website_name: Optional[pulumi.Input[_builtins.str]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
                  network_acls: Optional[pulumi.Input['AccountNetworkAclsArgs']] = None,
+                 network_injection: Optional[pulumi.Input['AccountNetworkInjectionArgs']] = None,
                  outbound_network_access_restricted: Optional[pulumi.Input[_builtins.bool]] = None,
+                 project_management_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  public_network_access_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  qna_runtime_endpoint: Optional[pulumi.Input[_builtins.str]] = None,
                  storages: Optional[pulumi.Input[Sequence[pulumi.Input['AccountStorageArgs']]]] = None,
                  tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None):
         """
         The set of arguments for constructing a Account resource.
-        :param pulumi.Input[_builtins.str] kind: Specifies the type of Cognitive Service Account that should be created. Possible values are `Academic`, `AnomalyDetector`, `Bing.Autosuggest`, `Bing.Autosuggest.v7`, `Bing.CustomSearch`, `Bing.Search`, `Bing.Search.v7`, `Bing.Speech`, `Bing.SpellCheck`, `Bing.SpellCheck.v7`, `CognitiveServices`, `ComputerVision`, `ContentModerator`, `ContentSafety`, `CustomSpeech`, `CustomVision.Prediction`, `CustomVision.Training`, `Emotion`, `Face`, `FormRecognizer`, `ImmersiveReader`, `LUIS`, `LUIS.Authoring`, `MetricsAdvisor`, `OpenAI`, `Personalizer`, `QnAMaker`, `Recommendations`, `SpeakerRecognition`, `Speech`, `SpeechServices`, `SpeechTranslation`, `TextAnalytics`, `TextTranslation` and `WebLM`. Changing this forces a new resource to be created.
+        :param pulumi.Input[_builtins.str] kind: Specifies the type of Cognitive Service Account that should be created. Possible values are `Academic`, `AIServices`, `AnomalyDetector`, `Bing.Autosuggest`, `Bing.Autosuggest.v7`, `Bing.CustomSearch`, `Bing.Search`, `Bing.Search.v7`, `Bing.Speech`, `Bing.SpellCheck`, `Bing.SpellCheck.v7`, `CognitiveServices`, `ComputerVision`, `ContentModerator`, `ContentSafety`, `CustomSpeech`, `CustomVision.Prediction`, `CustomVision.Training`, `Emotion`, `Face`, `FormRecognizer`, `ImmersiveReader`, `LUIS`, `LUIS.Authoring`, `MetricsAdvisor`, `OpenAI`, `Personalizer`, `QnAMaker`, `Recommendations`, `SpeakerRecognition`, `Speech`, `SpeechServices`, `SpeechTranslation`, `TextAnalytics`, `TextTranslation` and `WebLM`. Changing this forces a new resource to be created.
                
                > **Note:** New Bing Search resources cannot be created as their APIs are moving from Cognitive Services Platform to new surface area under Microsoft.com. Starting from October 30, 2020, existing instances of Bing Search APIs provisioned via Cognitive Services will be continuously supported for next 3 years or till the end of respective Enterprise Agreement, whichever happens first.
                
@@ -59,9 +61,11 @@ class AccountArgs:
         :param pulumi.Input[_builtins.str] custom_question_answering_search_service_key: If `kind` is `TextAnalytics` this specifies the key of the Search service.
                
                > **Note:** `custom_question_answering_search_service_id` and `custom_question_answering_search_service_key` are used for [Custom Question Answering, the renamed version of QnA Maker](https://docs.microsoft.com/azure/cognitive-services/qnamaker/custom-question-answering), while `qna_runtime_endpoint` is used for [the old version of QnA Maker](https://docs.microsoft.com/azure/cognitive-services/qnamaker/overview/overview)
-        :param pulumi.Input[_builtins.str] custom_subdomain_name: The subdomain name used for token-based authentication. This property is required when `network_acls` is specified. This property is also required when using the OpenAI service with libraries which assume the Azure OpenAI endpoint is a subdomain on `https://openai.azure.com/`, eg. `https://<custom_subdomain_name>.openai.azure.com/`.  Changing this forces a new resource to be created.
+        :param pulumi.Input[_builtins.str] custom_subdomain_name: The subdomain name used for Entra ID token-based authentication. This attribute is required when `network_acls` is specified. This attribute is also required when using the OpenAI service with libraries which assume the Azure OpenAI endpoint is a subdomain on `https://openai.azure.com/`, eg. `https://<custom_subdomain_name>.openai.azure.com/`. This can be specified during creation or added later, but once set changing this forces a new resource to be created.
+               
+               > **Note:** If you do not specify a `custom_subdomain_name` then you will not be able to attach a Private Endpoint to the resource. Moreover, functionality that requires Entra ID authentication, including Agent service, will not be accessible.
         :param pulumi.Input['AccountCustomerManagedKeyArgs'] customer_managed_key: A `customer_managed_key` block as documented below.
-        :param pulumi.Input[_builtins.bool] dynamic_throttling_enabled: Whether to enable the dynamic throttling for this Cognitive Service Account.
+        :param pulumi.Input[_builtins.bool] dynamic_throttling_enabled: Whether to enable the dynamic throttling for this Cognitive Service Account. This attribute cannot be set when the `kind` is `OpenAI` or `AIServices`.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] fqdns: List of FQDNs allowed for the Cognitive Account.
         :param pulumi.Input['AccountIdentityArgs'] identity: An `identity` block as defined below.
         :param pulumi.Input[_builtins.bool] local_auth_enabled: Whether local authentication methods is enabled for the Cognitive Account. Defaults to `true`.
@@ -74,7 +78,9 @@ class AccountArgs:
                > **Note:** This URL is mandatory if the `kind` is set to `QnAMaker`.
         :param pulumi.Input[_builtins.str] name: Specifies the name of the Cognitive Service Account. Changing this forces a new resource to be created.
         :param pulumi.Input['AccountNetworkAclsArgs'] network_acls: A `network_acls` block as defined below. When this property is specified, `custom_subdomain_name` is also required to be set.
+        :param pulumi.Input['AccountNetworkInjectionArgs'] network_injection: A `network_injection` block as defined below. Only applicable if the `kind` is set to `AIServices`.
         :param pulumi.Input[_builtins.bool] outbound_network_access_restricted: Whether outbound network access is restricted for the Cognitive Account. Defaults to `false`.
+        :param pulumi.Input[_builtins.bool] project_management_enabled: Whether project management is enabled when the `kind` is set to `AIServices`. Once enabled, `project_management_enabled` cannot be disabled. Changing this forces a new resource to be created. Defaults to `false`.
         :param pulumi.Input[_builtins.bool] public_network_access_enabled: Whether public network access is allowed for the Cognitive Account. Defaults to `true`.
         :param pulumi.Input[_builtins.str] qna_runtime_endpoint: A URL to link a QnAMaker cognitive account to a QnA runtime.
         :param pulumi.Input[Sequence[pulumi.Input['AccountStorageArgs']]] storages: A `storage` block as defined below.
@@ -113,8 +119,12 @@ class AccountArgs:
             pulumi.set(__self__, "name", name)
         if network_acls is not None:
             pulumi.set(__self__, "network_acls", network_acls)
+        if network_injection is not None:
+            pulumi.set(__self__, "network_injection", network_injection)
         if outbound_network_access_restricted is not None:
             pulumi.set(__self__, "outbound_network_access_restricted", outbound_network_access_restricted)
+        if project_management_enabled is not None:
+            pulumi.set(__self__, "project_management_enabled", project_management_enabled)
         if public_network_access_enabled is not None:
             pulumi.set(__self__, "public_network_access_enabled", public_network_access_enabled)
         if qna_runtime_endpoint is not None:
@@ -128,7 +138,7 @@ class AccountArgs:
     @pulumi.getter
     def kind(self) -> pulumi.Input[_builtins.str]:
         """
-        Specifies the type of Cognitive Service Account that should be created. Possible values are `Academic`, `AnomalyDetector`, `Bing.Autosuggest`, `Bing.Autosuggest.v7`, `Bing.CustomSearch`, `Bing.Search`, `Bing.Search.v7`, `Bing.Speech`, `Bing.SpellCheck`, `Bing.SpellCheck.v7`, `CognitiveServices`, `ComputerVision`, `ContentModerator`, `ContentSafety`, `CustomSpeech`, `CustomVision.Prediction`, `CustomVision.Training`, `Emotion`, `Face`, `FormRecognizer`, `ImmersiveReader`, `LUIS`, `LUIS.Authoring`, `MetricsAdvisor`, `OpenAI`, `Personalizer`, `QnAMaker`, `Recommendations`, `SpeakerRecognition`, `Speech`, `SpeechServices`, `SpeechTranslation`, `TextAnalytics`, `TextTranslation` and `WebLM`. Changing this forces a new resource to be created.
+        Specifies the type of Cognitive Service Account that should be created. Possible values are `Academic`, `AIServices`, `AnomalyDetector`, `Bing.Autosuggest`, `Bing.Autosuggest.v7`, `Bing.CustomSearch`, `Bing.Search`, `Bing.Search.v7`, `Bing.Speech`, `Bing.SpellCheck`, `Bing.SpellCheck.v7`, `CognitiveServices`, `ComputerVision`, `ContentModerator`, `ContentSafety`, `CustomSpeech`, `CustomVision.Prediction`, `CustomVision.Training`, `Emotion`, `Face`, `FormRecognizer`, `ImmersiveReader`, `LUIS`, `LUIS.Authoring`, `MetricsAdvisor`, `OpenAI`, `Personalizer`, `QnAMaker`, `Recommendations`, `SpeakerRecognition`, `Speech`, `SpeechServices`, `SpeechTranslation`, `TextAnalytics`, `TextTranslation` and `WebLM`. Changing this forces a new resource to be created.
 
         > **Note:** New Bing Search resources cannot be created as their APIs are moving from Cognitive Services Platform to new surface area under Microsoft.com. Starting from October 30, 2020, existing instances of Bing Search APIs provisioned via Cognitive Services will be continuously supported for next 3 years or till the end of respective Enterprise Agreement, whichever happens first.
 
@@ -196,7 +206,9 @@ class AccountArgs:
     @pulumi.getter(name="customSubdomainName")
     def custom_subdomain_name(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        The subdomain name used for token-based authentication. This property is required when `network_acls` is specified. This property is also required when using the OpenAI service with libraries which assume the Azure OpenAI endpoint is a subdomain on `https://openai.azure.com/`, eg. `https://<custom_subdomain_name>.openai.azure.com/`.  Changing this forces a new resource to be created.
+        The subdomain name used for Entra ID token-based authentication. This attribute is required when `network_acls` is specified. This attribute is also required when using the OpenAI service with libraries which assume the Azure OpenAI endpoint is a subdomain on `https://openai.azure.com/`, eg. `https://<custom_subdomain_name>.openai.azure.com/`. This can be specified during creation or added later, but once set changing this forces a new resource to be created.
+
+        > **Note:** If you do not specify a `custom_subdomain_name` then you will not be able to attach a Private Endpoint to the resource. Moreover, functionality that requires Entra ID authentication, including Agent service, will not be accessible.
         """
         return pulumi.get(self, "custom_subdomain_name")
 
@@ -220,7 +232,7 @@ class AccountArgs:
     @pulumi.getter(name="dynamicThrottlingEnabled")
     def dynamic_throttling_enabled(self) -> Optional[pulumi.Input[_builtins.bool]]:
         """
-        Whether to enable the dynamic throttling for this Cognitive Service Account.
+        Whether to enable the dynamic throttling for this Cognitive Service Account. This attribute cannot be set when the `kind` is `OpenAI` or `AIServices`.
         """
         return pulumi.get(self, "dynamic_throttling_enabled")
 
@@ -350,6 +362,18 @@ class AccountArgs:
     def network_acls(self, value: Optional[pulumi.Input['AccountNetworkAclsArgs']]):
         pulumi.set(self, "network_acls", value)
 
+    @_builtins.property
+    @pulumi.getter(name="networkInjection")
+    def network_injection(self) -> Optional[pulumi.Input['AccountNetworkInjectionArgs']]:
+        """
+        A `network_injection` block as defined below. Only applicable if the `kind` is set to `AIServices`.
+        """
+        return pulumi.get(self, "network_injection")
+
+    @network_injection.setter
+    def network_injection(self, value: Optional[pulumi.Input['AccountNetworkInjectionArgs']]):
+        pulumi.set(self, "network_injection", value)
+
     @_builtins.property
     @pulumi.getter(name="outboundNetworkAccessRestricted")
     def outbound_network_access_restricted(self) -> Optional[pulumi.Input[_builtins.bool]]:
@@ -362,6 +386,18 @@ class AccountArgs:
     def outbound_network_access_restricted(self, value: Optional[pulumi.Input[_builtins.bool]]):
         pulumi.set(self, "outbound_network_access_restricted", value)
 
+    @_builtins.property
+    @pulumi.getter(name="projectManagementEnabled")
+    def project_management_enabled(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        Whether project management is enabled when the `kind` is set to `AIServices`. Once enabled, `project_management_enabled` cannot be disabled. Changing this forces a new resource to be created. Defaults to `false`.
+        """
+        return pulumi.get(self, "project_management_enabled")
+
+    @project_management_enabled.setter
+    def project_management_enabled(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "project_management_enabled", value)
+
     @_builtins.property
     @pulumi.getter(name="publicNetworkAccessEnabled")
     def public_network_access_enabled(self) -> Optional[pulumi.Input[_builtins.bool]]:
@@ -431,8 +467,10 @@ class _AccountState:
                  metrics_advisor_website_name: Optional[pulumi.Input[_builtins.str]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
                  network_acls: Optional[pulumi.Input['AccountNetworkAclsArgs']] = None,
+                 network_injection: Optional[pulumi.Input['AccountNetworkInjectionArgs']] = None,
                  outbound_network_access_restricted: Optional[pulumi.Input[_builtins.bool]] = None,
                  primary_access_key: Optional[pulumi.Input[_builtins.str]] = None,
+                 project_management_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  public_network_access_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  qna_runtime_endpoint: Optional[pulumi.Input[_builtins.str]] = None,
                  resource_group_name: Optional[pulumi.Input[_builtins.str]] = None,
@@ -446,13 +484,15 @@ class _AccountState:
         :param pulumi.Input[_builtins.str] custom_question_answering_search_service_key: If `kind` is `TextAnalytics` this specifies the key of the Search service.
                
                > **Note:** `custom_question_answering_search_service_id` and `custom_question_answering_search_service_key` are used for [Custom Question Answering, the renamed version of QnA Maker](https://docs.microsoft.com/azure/cognitive-services/qnamaker/custom-question-answering), while `qna_runtime_endpoint` is used for [the old version of QnA Maker](https://docs.microsoft.com/azure/cognitive-services/qnamaker/overview/overview)
-        :param pulumi.Input[_builtins.str] custom_subdomain_name: The subdomain name used for token-based authentication. This property is required when `network_acls` is specified. This property is also required when using the OpenAI service with libraries which assume the Azure OpenAI endpoint is a subdomain on `https://openai.azure.com/`, eg. `https://<custom_subdomain_name>.openai.azure.com/`.  Changing this forces a new resource to be created.
+        :param pulumi.Input[_builtins.str] custom_subdomain_name: The subdomain name used for Entra ID token-based authentication. This attribute is required when `network_acls` is specified. This attribute is also required when using the OpenAI service with libraries which assume the Azure OpenAI endpoint is a subdomain on `https://openai.azure.com/`, eg. `https://<custom_subdomain_name>.openai.azure.com/`. This can be specified during creation or added later, but once set changing this forces a new resource to be created.
+               
+               > **Note:** If you do not specify a `custom_subdomain_name` then you will not be able to attach a Private Endpoint to the resource. Moreover, functionality that requires Entra ID authentication, including Agent service, will not be accessible.
         :param pulumi.Input['AccountCustomerManagedKeyArgs'] customer_managed_key: A `customer_managed_key` block as documented below.
-        :param pulumi.Input[_builtins.bool] dynamic_throttling_enabled: Whether to enable the dynamic throttling for this Cognitive Service Account.
+        :param pulumi.Input[_builtins.bool] dynamic_throttling_enabled: Whether to enable the dynamic throttling for this Cognitive Service Account. This attribute cannot be set when the `kind` is `OpenAI` or `AIServices`.
         :param pulumi.Input[_builtins.str] endpoint: The endpoint used to connect to the Cognitive Service Account.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] fqdns: List of FQDNs allowed for the Cognitive Account.
         :param pulumi.Input['AccountIdentityArgs'] identity: An `identity` block as defined below.
-        :param pulumi.Input[_builtins.str] kind: Specifies the type of Cognitive Service Account that should be created. Possible values are `Academic`, `AnomalyDetector`, `Bing.Autosuggest`, `Bing.Autosuggest.v7`, `Bing.CustomSearch`, `Bing.Search`, `Bing.Search.v7`, `Bing.Speech`, `Bing.SpellCheck`, `Bing.SpellCheck.v7`, `CognitiveServices`, `ComputerVision`, `ContentModerator`, `ContentSafety`, `CustomSpeech`, `CustomVision.Prediction`, `CustomVision.Training`, `Emotion`, `Face`, `FormRecognizer`, `ImmersiveReader`, `LUIS`, `LUIS.Authoring`, `MetricsAdvisor`, `OpenAI`, `Personalizer`, `QnAMaker`, `Recommendations`, `SpeakerRecognition`, `Speech`, `SpeechServices`, `SpeechTranslation`, `TextAnalytics`, `TextTranslation` and `WebLM`. Changing this forces a new resource to be created.
+        :param pulumi.Input[_builtins.str] kind: Specifies the type of Cognitive Service Account that should be created. Possible values are `Academic`, `AIServices`, `AnomalyDetector`, `Bing.Autosuggest`, `Bing.Autosuggest.v7`, `Bing.CustomSearch`, `Bing.Search`, `Bing.Search.v7`, `Bing.Speech`, `Bing.SpellCheck`, `Bing.SpellCheck.v7`, `CognitiveServices`, `ComputerVision`, `ContentModerator`, `ContentSafety`, `CustomSpeech`, `CustomVision.Prediction`, `CustomVision.Training`, `Emotion`, `Face`, `FormRecognizer`, `ImmersiveReader`, `LUIS`, `LUIS.Authoring`, `MetricsAdvisor`, `OpenAI`, `Personalizer`, `QnAMaker`, `Recommendations`, `SpeakerRecognition`, `Speech`, `SpeechServices`, `SpeechTranslation`, `TextAnalytics`, `TextTranslation` and `WebLM`. Changing this forces a new resource to be created.
                
                > **Note:** New Bing Search resources cannot be created as their APIs are moving from Cognitive Services Platform to new surface area under Microsoft.com. Starting from October 30, 2020, existing instances of Bing Search APIs provisioned via Cognitive Services will be continuously supported for next 3 years or till the end of respective Enterprise Agreement, whichever happens first.
                
@@ -467,8 +507,10 @@ class _AccountState:
                > **Note:** This URL is mandatory if the `kind` is set to `QnAMaker`.
         :param pulumi.Input[_builtins.str] name: Specifies the name of the Cognitive Service Account. Changing this forces a new resource to be created.
         :param pulumi.Input['AccountNetworkAclsArgs'] network_acls: A `network_acls` block as defined below. When this property is specified, `custom_subdomain_name` is also required to be set.
+        :param pulumi.Input['AccountNetworkInjectionArgs'] network_injection: A `network_injection` block as defined below. Only applicable if the `kind` is set to `AIServices`.
         :param pulumi.Input[_builtins.bool] outbound_network_access_restricted: Whether outbound network access is restricted for the Cognitive Account. Defaults to `false`.
         :param pulumi.Input[_builtins.str] primary_access_key: A primary access key which can be used to connect to the Cognitive Service Account.
+        :param pulumi.Input[_builtins.bool] project_management_enabled: Whether project management is enabled when the `kind` is set to `AIServices`. Once enabled, `project_management_enabled` cannot be disabled. Changing this forces a new resource to be created. Defaults to `false`.
         :param pulumi.Input[_builtins.bool] public_network_access_enabled: Whether public network access is allowed for the Cognitive Account. Defaults to `true`.
         :param pulumi.Input[_builtins.str] qna_runtime_endpoint: A URL to link a QnAMaker cognitive account to a QnA runtime.
         :param pulumi.Input[_builtins.str] resource_group_name: The name of the resource group in which the Cognitive Service Account is created. Changing this forces a new resource to be created.
@@ -513,10 +555,14 @@ class _AccountState:
             pulumi.set(__self__, "name", name)
         if network_acls is not None:
             pulumi.set(__self__, "network_acls", network_acls)
+        if network_injection is not None:
+            pulumi.set(__self__, "network_injection", network_injection)
         if outbound_network_access_restricted is not None:
             pulumi.set(__self__, "outbound_network_access_restricted", outbound_network_access_restricted)
         if primary_access_key is not None:
             pulumi.set(__self__, "primary_access_key", primary_access_key)
+        if project_management_enabled is not None:
+            pulumi.set(__self__, "project_management_enabled", project_management_enabled)
         if public_network_access_enabled is not None:
             pulumi.set(__self__, "public_network_access_enabled", public_network_access_enabled)
         if qna_runtime_endpoint is not None:
@@ -562,7 +608,9 @@ class _AccountState:
     @pulumi.getter(name="customSubdomainName")
     def custom_subdomain_name(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        The subdomain name used for token-based authentication. This property is required when `network_acls` is specified. This property is also required when using the OpenAI service with libraries which assume the Azure OpenAI endpoint is a subdomain on `https://openai.azure.com/`, eg. `https://<custom_subdomain_name>.openai.azure.com/`.  Changing this forces a new resource to be created.
+        The subdomain name used for Entra ID token-based authentication. This attribute is required when `network_acls` is specified. This attribute is also required when using the OpenAI service with libraries which assume the Azure OpenAI endpoint is a subdomain on `https://openai.azure.com/`, eg. `https://<custom_subdomain_name>.openai.azure.com/`. This can be specified during creation or added later, but once set changing this forces a new resource to be created.
+
+        > **Note:** If you do not specify a `custom_subdomain_name` then you will not be able to attach a Private Endpoint to the resource. Moreover, functionality that requires Entra ID authentication, including Agent service, will not be accessible.
         """
         return pulumi.get(self, "custom_subdomain_name")
 
@@ -586,7 +634,7 @@ class _AccountState:
     @pulumi.getter(name="dynamicThrottlingEnabled")
     def dynamic_throttling_enabled(self) -> Optional[pulumi.Input[_builtins.bool]]:
         """
-        Whether to enable the dynamic throttling for this Cognitive Service Account.
+        Whether to enable the dynamic throttling for this Cognitive Service Account. This attribute cannot be set when the `kind` is `OpenAI` or `AIServices`.
         """
         return pulumi.get(self, "dynamic_throttling_enabled")
 
@@ -634,7 +682,7 @@ class _AccountState:
     @pulumi.getter
     def kind(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        Specifies the type of Cognitive Service Account that should be created. Possible values are `Academic`, `AnomalyDetector`, `Bing.Autosuggest`, `Bing.Autosuggest.v7`, `Bing.CustomSearch`, `Bing.Search`, `Bing.Search.v7`, `Bing.Speech`, `Bing.SpellCheck`, `Bing.SpellCheck.v7`, `CognitiveServices`, `ComputerVision`, `ContentModerator`, `ContentSafety`, `CustomSpeech`, `CustomVision.Prediction`, `CustomVision.Training`, `Emotion`, `Face`, `FormRecognizer`, `ImmersiveReader`, `LUIS`, `LUIS.Authoring`, `MetricsAdvisor`, `OpenAI`, `Personalizer`, `QnAMaker`, `Recommendations`, `SpeakerRecognition`, `Speech`, `SpeechServices`, `SpeechTranslation`, `TextAnalytics`, `TextTranslation` and `WebLM`. Changing this forces a new resource to be created.
+        Specifies the type of Cognitive Service Account that should be created. Possible values are `Academic`, `AIServices`, `AnomalyDetector`, `Bing.Autosuggest`, `Bing.Autosuggest.v7`, `Bing.CustomSearch`, `Bing.Search`, `Bing.Search.v7`, `Bing.Speech`, `Bing.SpellCheck`, `Bing.SpellCheck.v7`, `CognitiveServices`, `ComputerVision`, `ContentModerator`, `ContentSafety`, `CustomSpeech`, `CustomVision.Prediction`, `CustomVision.Training`, `Emotion`, `Face`, `FormRecognizer`, `ImmersiveReader`, `LUIS`, `LUIS.Authoring`, `MetricsAdvisor`, `OpenAI`, `Personalizer`, `QnAMaker`, `Recommendations`, `SpeakerRecognition`, `Speech`, `SpeechServices`, `SpeechTranslation`, `TextAnalytics`, `TextTranslation` and `WebLM`. Changing this forces a new resource to be created.
 
         > **Note:** New Bing Search resources cannot be created as their APIs are moving from Cognitive Services Platform to new surface area under Microsoft.com. Starting from October 30, 2020, existing instances of Bing Search APIs provisioned via Cognitive Services will be continuously supported for next 3 years or till the end of respective Enterprise Agreement, whichever happens first.
 
@@ -744,6 +792,18 @@ class _AccountState:
     def network_acls(self, value: Optional[pulumi.Input['AccountNetworkAclsArgs']]):
         pulumi.set(self, "network_acls", value)
 
+    @_builtins.property
+    @pulumi.getter(name="networkInjection")
+    def network_injection(self) -> Optional[pulumi.Input['AccountNetworkInjectionArgs']]:
+        """
+        A `network_injection` block as defined below. Only applicable if the `kind` is set to `AIServices`.
+        """
+        return pulumi.get(self, "network_injection")
+
+    @network_injection.setter
+    def network_injection(self, value: Optional[pulumi.Input['AccountNetworkInjectionArgs']]):
+        pulumi.set(self, "network_injection", value)
+
     @_builtins.property
     @pulumi.getter(name="outboundNetworkAccessRestricted")
     def outbound_network_access_restricted(self) -> Optional[pulumi.Input[_builtins.bool]]:
@@ -768,6 +828,18 @@ class _AccountState:
     def primary_access_key(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "primary_access_key", value)
 
+    @_builtins.property
+    @pulumi.getter(name="projectManagementEnabled")
+    def project_management_enabled(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        Whether project management is enabled when the `kind` is set to `AIServices`. Once enabled, `project_management_enabled` cannot be disabled. Changing this forces a new resource to be created. Defaults to `false`.
+        """
+        return pulumi.get(self, "project_management_enabled")
+
+    @project_management_enabled.setter
+    def project_management_enabled(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "project_management_enabled", value)
+
     @_builtins.property
     @pulumi.getter(name="publicNetworkAccessEnabled")
     def public_network_access_enabled(self) -> Optional[pulumi.Input[_builtins.bool]]:
@@ -877,7 +949,9 @@ class Account(pulumi.CustomResource):
                  metrics_advisor_website_name: Optional[pulumi.Input[_builtins.str]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
                  network_acls: Optional[pulumi.Input[Union['AccountNetworkAclsArgs', 'AccountNetworkAclsArgsDict']]] = None,
+                 network_injection: Optional[pulumi.Input[Union['AccountNetworkInjectionArgs', 'AccountNetworkInjectionArgsDict']]] = None,
                  outbound_network_access_restricted: Optional[pulumi.Input[_builtins.bool]] = None,
+                 project_management_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  public_network_access_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  qna_runtime_endpoint: Optional[pulumi.Input[_builtins.str]] = None,
                  resource_group_name: Optional[pulumi.Input[_builtins.str]] = None,
@@ -888,7 +962,9 @@ class Account(pulumi.CustomResource):
         """
         Manages a Cognitive Services Account.
 
-        > **Note:** Version v2.65.0 of the Azure Provider and later will attempt to Purge the Cognitive Account during deletion. This feature can be disabled using the `features` block within the `provider` block, see the provider documentation on the features block for more information.
+        > **Note:** The Cognitive Services Account manages the resource type for various Azure AI resource implementations, including Azure AI Foundry, Azure OpenAI, Azure Speech, Azure Vision and others. Each service shares the same control plane but exposes a different subset of developer APIs. Azure AI Foundry (kind = `AIServices`) provides the superset of capabilities. For more information, please see [Azure AI Foundry architecture](https://learn.microsoft.com/en-us/azure/ai-foundry/concepts/architecture).
+
+        > **Note:** The Azure Provider will attempt to Purge the Cognitive Services Account during deletion. This feature can be disabled using the `features` block within the `provider` block, see the provider documentation on the features block for more information.
 
         ## Example Usage
 
@@ -917,6 +993,8 @@ class Account(pulumi.CustomResource):
 
         * `Microsoft.CognitiveServices` - 2025-06-01
 
+        * `Microsoft.Network` - 2024-05-01
+
         ## Import
 
         Cognitive Service Accounts can be imported using the `resource id`, e.g.
@@ -931,12 +1009,14 @@ class Account(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] custom_question_answering_search_service_key: If `kind` is `TextAnalytics` this specifies the key of the Search service.
                
                > **Note:** `custom_question_answering_search_service_id` and `custom_question_answering_search_service_key` are used for [Custom Question Answering, the renamed version of QnA Maker](https://docs.microsoft.com/azure/cognitive-services/qnamaker/custom-question-answering), while `qna_runtime_endpoint` is used for [the old version of QnA Maker](https://docs.microsoft.com/azure/cognitive-services/qnamaker/overview/overview)
-        :param pulumi.Input[_builtins.str] custom_subdomain_name: The subdomain name used for token-based authentication. This property is required when `network_acls` is specified. This property is also required when using the OpenAI service with libraries which assume the Azure OpenAI endpoint is a subdomain on `https://openai.azure.com/`, eg. `https://<custom_subdomain_name>.openai.azure.com/`.  Changing this forces a new resource to be created.
+        :param pulumi.Input[_builtins.str] custom_subdomain_name: The subdomain name used for Entra ID token-based authentication. This attribute is required when `network_acls` is specified. This attribute is also required when using the OpenAI service with libraries which assume the Azure OpenAI endpoint is a subdomain on `https://openai.azure.com/`, eg. `https://<custom_subdomain_name>.openai.azure.com/`. This can be specified during creation or added later, but once set changing this forces a new resource to be created.
+               
+               > **Note:** If you do not specify a `custom_subdomain_name` then you will not be able to attach a Private Endpoint to the resource. Moreover, functionality that requires Entra ID authentication, including Agent service, will not be accessible.
         :param pulumi.Input[Union['AccountCustomerManagedKeyArgs', 'AccountCustomerManagedKeyArgsDict']] customer_managed_key: A `customer_managed_key` block as documented below.
-        :param pulumi.Input[_builtins.bool] dynamic_throttling_enabled: Whether to enable the dynamic throttling for this Cognitive Service Account.
+        :param pulumi.Input[_builtins.bool] dynamic_throttling_enabled: Whether to enable the dynamic throttling for this Cognitive Service Account. This attribute cannot be set when the `kind` is `OpenAI` or `AIServices`.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] fqdns: List of FQDNs allowed for the Cognitive Account.
         :param pulumi.Input[Union['AccountIdentityArgs', 'AccountIdentityArgsDict']] identity: An `identity` block as defined below.
-        :param pulumi.Input[_builtins.str] kind: Specifies the type of Cognitive Service Account that should be created. Possible values are `Academic`, `AnomalyDetector`, `Bing.Autosuggest`, `Bing.Autosuggest.v7`, `Bing.CustomSearch`, `Bing.Search`, `Bing.Search.v7`, `Bing.Speech`, `Bing.SpellCheck`, `Bing.SpellCheck.v7`, `CognitiveServices`, `ComputerVision`, `ContentModerator`, `ContentSafety`, `CustomSpeech`, `CustomVision.Prediction`, `CustomVision.Training`, `Emotion`, `Face`, `FormRecognizer`, `ImmersiveReader`, `LUIS`, `LUIS.Authoring`, `MetricsAdvisor`, `OpenAI`, `Personalizer`, `QnAMaker`, `Recommendations`, `SpeakerRecognition`, `Speech`, `SpeechServices`, `SpeechTranslation`, `TextAnalytics`, `TextTranslation` and `WebLM`. Changing this forces a new resource to be created.
+        :param pulumi.Input[_builtins.str] kind: Specifies the type of Cognitive Service Account that should be created. Possible values are `Academic`, `AIServices`, `AnomalyDetector`, `Bing.Autosuggest`, `Bing.Autosuggest.v7`, `Bing.CustomSearch`, `Bing.Search`, `Bing.Search.v7`, `Bing.Speech`, `Bing.SpellCheck`, `Bing.SpellCheck.v7`, `CognitiveServices`, `ComputerVision`, `ContentModerator`, `ContentSafety`, `CustomSpeech`, `CustomVision.Prediction`, `CustomVision.Training`, `Emotion`, `Face`, `FormRecognizer`, `ImmersiveReader`, `LUIS`, `LUIS.Authoring`, `MetricsAdvisor`, `OpenAI`, `Personalizer`, `QnAMaker`, `Recommendations`, `SpeakerRecognition`, `Speech`, `SpeechServices`, `SpeechTranslation`, `TextAnalytics`, `TextTranslation` and `WebLM`. Changing this forces a new resource to be created.
                
                > **Note:** New Bing Search resources cannot be created as their APIs are moving from Cognitive Services Platform to new surface area under Microsoft.com. Starting from October 30, 2020, existing instances of Bing Search APIs provisioned via Cognitive Services will be continuously supported for next 3 years or till the end of respective Enterprise Agreement, whichever happens first.
                
@@ -951,7 +1031,9 @@ class Account(pulumi.CustomResource):
                > **Note:** This URL is mandatory if the `kind` is set to `QnAMaker`.
         :param pulumi.Input[_builtins.str] name: Specifies the name of the Cognitive Service Account. Changing this forces a new resource to be created.
         :param pulumi.Input[Union['AccountNetworkAclsArgs', 'AccountNetworkAclsArgsDict']] network_acls: A `network_acls` block as defined below. When this property is specified, `custom_subdomain_name` is also required to be set.
+        :param pulumi.Input[Union['AccountNetworkInjectionArgs', 'AccountNetworkInjectionArgsDict']] network_injection: A `network_injection` block as defined below. Only applicable if the `kind` is set to `AIServices`.
         :param pulumi.Input[_builtins.bool] outbound_network_access_restricted: Whether outbound network access is restricted for the Cognitive Account. Defaults to `false`.
+        :param pulumi.Input[_builtins.bool] project_management_enabled: Whether project management is enabled when the `kind` is set to `AIServices`. Once enabled, `project_management_enabled` cannot be disabled. Changing this forces a new resource to be created. Defaults to `false`.
         :param pulumi.Input[_builtins.bool] public_network_access_enabled: Whether public network access is allowed for the Cognitive Account. Defaults to `true`.
         :param pulumi.Input[_builtins.str] qna_runtime_endpoint: A URL to link a QnAMaker cognitive account to a QnA runtime.
         :param pulumi.Input[_builtins.str] resource_group_name: The name of the resource group in which the Cognitive Service Account is created. Changing this forces a new resource to be created.
@@ -970,7 +1052,9 @@ class Account(pulumi.CustomResource):
         """
         Manages a Cognitive Services Account.
 
-        > **Note:** Version v2.65.0 of the Azure Provider and later will attempt to Purge the Cognitive Account during deletion. This feature can be disabled using the `features` block within the `provider` block, see the provider documentation on the features block for more information.
+        > **Note:** The Cognitive Services Account manages the resource type for various Azure AI resource implementations, including Azure AI Foundry, Azure OpenAI, Azure Speech, Azure Vision and others. Each service shares the same control plane but exposes a different subset of developer APIs. Azure AI Foundry (kind = `AIServices`) provides the superset of capabilities. For more information, please see [Azure AI Foundry architecture](https://learn.microsoft.com/en-us/azure/ai-foundry/concepts/architecture).
+
+        > **Note:** The Azure Provider will attempt to Purge the Cognitive Services Account during deletion. This feature can be disabled using the `features` block within the `provider` block, see the provider documentation on the features block for more information.
 
         ## Example Usage
 
@@ -999,6 +1083,8 @@ class Account(pulumi.CustomResource):
 
         * `Microsoft.CognitiveServices` - 2025-06-01
 
+        * `Microsoft.Network` - 2024-05-01
+
         ## Import
 
         Cognitive Service Accounts can be imported using the `resource id`, e.g.
@@ -1038,7 +1124,9 @@ class Account(pulumi.CustomResource):
                  metrics_advisor_website_name: Optional[pulumi.Input[_builtins.str]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
                  network_acls: Optional[pulumi.Input[Union['AccountNetworkAclsArgs', 'AccountNetworkAclsArgsDict']]] = None,
+                 network_injection: Optional[pulumi.Input[Union['AccountNetworkInjectionArgs', 'AccountNetworkInjectionArgsDict']]] = None,
                  outbound_network_access_restricted: Optional[pulumi.Input[_builtins.bool]] = None,
+                 project_management_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  public_network_access_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  qna_runtime_endpoint: Optional[pulumi.Input[_builtins.str]] = None,
                  resource_group_name: Optional[pulumi.Input[_builtins.str]] = None,
@@ -1072,7 +1160,9 @@ class Account(pulumi.CustomResource):
             __props__.__dict__["metrics_advisor_website_name"] = metrics_advisor_website_name
             __props__.__dict__["name"] = name
             __props__.__dict__["network_acls"] = network_acls
+            __props__.__dict__["network_injection"] = network_injection
             __props__.__dict__["outbound_network_access_restricted"] = outbound_network_access_restricted
+            __props__.__dict__["project_management_enabled"] = project_management_enabled
             __props__.__dict__["public_network_access_enabled"] = public_network_access_enabled
             __props__.__dict__["qna_runtime_endpoint"] = qna_runtime_endpoint
             if resource_group_name is None and not opts.urn:
@@ -1115,8 +1205,10 @@ class Account(pulumi.CustomResource):
             metrics_advisor_website_name: Optional[pulumi.Input[_builtins.str]] = None,
             name: Optional[pulumi.Input[_builtins.str]] = None,
             network_acls: Optional[pulumi.Input[Union['AccountNetworkAclsArgs', 'AccountNetworkAclsArgsDict']]] = None,
+            network_injection: Optional[pulumi.Input[Union['AccountNetworkInjectionArgs', 'AccountNetworkInjectionArgsDict']]] = None,
             outbound_network_access_restricted: Optional[pulumi.Input[_builtins.bool]] = None,
             primary_access_key: Optional[pulumi.Input[_builtins.str]] = None,
+            project_management_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
             public_network_access_enabled: Optional[pulumi.Input[_builtins.bool]] = None,
             qna_runtime_endpoint: Optional[pulumi.Input[_builtins.str]] = None,
             resource_group_name: Optional[pulumi.Input[_builtins.str]] = None,
@@ -1135,13 +1227,15 @@ class Account(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] custom_question_answering_search_service_key: If `kind` is `TextAnalytics` this specifies the key of the Search service.
                
                > **Note:** `custom_question_answering_search_service_id` and `custom_question_answering_search_service_key` are used for [Custom Question Answering, the renamed version of QnA Maker](https://docs.microsoft.com/azure/cognitive-services/qnamaker/custom-question-answering), while `qna_runtime_endpoint` is used for [the old version of QnA Maker](https://docs.microsoft.com/azure/cognitive-services/qnamaker/overview/overview)
-        :param pulumi.Input[_builtins.str] custom_subdomain_name: The subdomain name used for token-based authentication. This property is required when `network_acls` is specified. This property is also required when using the OpenAI service with libraries which assume the Azure OpenAI endpoint is a subdomain on `https://openai.azure.com/`, eg. `https://<custom_subdomain_name>.openai.azure.com/`.  Changing this forces a new resource to be created.
+        :param pulumi.Input[_builtins.str] custom_subdomain_name: The subdomain name used for Entra ID token-based authentication. This attribute is required when `network_acls` is specified. This attribute is also required when using the OpenAI service with libraries which assume the Azure OpenAI endpoint is a subdomain on `https://openai.azure.com/`, eg. `https://<custom_subdomain_name>.openai.azure.com/`. This can be specified during creation or added later, but once set changing this forces a new resource to be created.
+               
+               > **Note:** If you do not specify a `custom_subdomain_name` then you will not be able to attach a Private Endpoint to the resource. Moreover, functionality that requires Entra ID authentication, including Agent service, will not be accessible.
         :param pulumi.Input[Union['AccountCustomerManagedKeyArgs', 'AccountCustomerManagedKeyArgsDict']] customer_managed_key: A `customer_managed_key` block as documented below.
-        :param pulumi.Input[_builtins.bool] dynamic_throttling_enabled: Whether to enable the dynamic throttling for this Cognitive Service Account.
+        :param pulumi.Input[_builtins.bool] dynamic_throttling_enabled: Whether to enable the dynamic throttling for this Cognitive Service Account. This attribute cannot be set when the `kind` is `OpenAI` or `AIServices`.
         :param pulumi.Input[_builtins.str] endpoint: The endpoint used to connect to the Cognitive Service Account.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] fqdns: List of FQDNs allowed for the Cognitive Account.
         :param pulumi.Input[Union['AccountIdentityArgs', 'AccountIdentityArgsDict']] identity: An `identity` block as defined below.
-        :param pulumi.Input[_builtins.str] kind: Specifies the type of Cognitive Service Account that should be created. Possible values are `Academic`, `AnomalyDetector`, `Bing.Autosuggest`, `Bing.Autosuggest.v7`, `Bing.CustomSearch`, `Bing.Search`, `Bing.Search.v7`, `Bing.Speech`, `Bing.SpellCheck`, `Bing.SpellCheck.v7`, `CognitiveServices`, `ComputerVision`, `ContentModerator`, `ContentSafety`, `CustomSpeech`, `CustomVision.Prediction`, `CustomVision.Training`, `Emotion`, `Face`, `FormRecognizer`, `ImmersiveReader`, `LUIS`, `LUIS.Authoring`, `MetricsAdvisor`, `OpenAI`, `Personalizer`, `QnAMaker`, `Recommendations`, `SpeakerRecognition`, `Speech`, `SpeechServices`, `SpeechTranslation`, `TextAnalytics`, `TextTranslation` and `WebLM`. Changing this forces a new resource to be created.
+        :param pulumi.Input[_builtins.str] kind: Specifies the type of Cognitive Service Account that should be created. Possible values are `Academic`, `AIServices`, `AnomalyDetector`, `Bing.Autosuggest`, `Bing.Autosuggest.v7`, `Bing.CustomSearch`, `Bing.Search`, `Bing.Search.v7`, `Bing.Speech`, `Bing.SpellCheck`, `Bing.SpellCheck.v7`, `CognitiveServices`, `ComputerVision`, `ContentModerator`, `ContentSafety`, `CustomSpeech`, `CustomVision.Prediction`, `CustomVision.Training`, `Emotion`, `Face`, `FormRecognizer`, `ImmersiveReader`, `LUIS`, `LUIS.Authoring`, `MetricsAdvisor`, `OpenAI`, `Personalizer`, `QnAMaker`, `Recommendations`, `SpeakerRecognition`, `Speech`, `SpeechServices`, `SpeechTranslation`, `TextAnalytics`, `TextTranslation` and `WebLM`. Changing this forces a new resource to be created.
                
                > **Note:** New Bing Search resources cannot be created as their APIs are moving from Cognitive Services Platform to new surface area under Microsoft.com. Starting from October 30, 2020, existing instances of Bing Search APIs provisioned via Cognitive Services will be continuously supported for next 3 years or till the end of respective Enterprise Agreement, whichever happens first.
                
@@ -1156,8 +1250,10 @@ class Account(pulumi.CustomResource):
                > **Note:** This URL is mandatory if the `kind` is set to `QnAMaker`.
         :param pulumi.Input[_builtins.str] name: Specifies the name of the Cognitive Service Account. Changing this forces a new resource to be created.
         :param pulumi.Input[Union['AccountNetworkAclsArgs', 'AccountNetworkAclsArgsDict']] network_acls: A `network_acls` block as defined below. When this property is specified, `custom_subdomain_name` is also required to be set.
+        :param pulumi.Input[Union['AccountNetworkInjectionArgs', 'AccountNetworkInjectionArgsDict']] network_injection: A `network_injection` block as defined below. Only applicable if the `kind` is set to `AIServices`.
         :param pulumi.Input[_builtins.bool] outbound_network_access_restricted: Whether outbound network access is restricted for the Cognitive Account. Defaults to `false`.
         :param pulumi.Input[_builtins.str] primary_access_key: A primary access key which can be used to connect to the Cognitive Service Account.
+        :param pulumi.Input[_builtins.bool] project_management_enabled: Whether project management is enabled when the `kind` is set to `AIServices`. Once enabled, `project_management_enabled` cannot be disabled. Changing this forces a new resource to be created. Defaults to `false`.
         :param pulumi.Input[_builtins.bool] public_network_access_enabled: Whether public network access is allowed for the Cognitive Account. Defaults to `true`.
         :param pulumi.Input[_builtins.str] qna_runtime_endpoint: A URL to link a QnAMaker cognitive account to a QnA runtime.
         :param pulumi.Input[_builtins.str] resource_group_name: The name of the resource group in which the Cognitive Service Account is created. Changing this forces a new resource to be created.
@@ -1189,8 +1285,10 @@ class Account(pulumi.CustomResource):
         __props__.__dict__["metrics_advisor_website_name"] = metrics_advisor_website_name
         __props__.__dict__["name"] = name
         __props__.__dict__["network_acls"] = network_acls
+        __props__.__dict__["network_injection"] = network_injection
         __props__.__dict__["outbound_network_access_restricted"] = outbound_network_access_restricted
         __props__.__dict__["primary_access_key"] = primary_access_key
+        __props__.__dict__["project_management_enabled"] = project_management_enabled
         __props__.__dict__["public_network_access_enabled"] = public_network_access_enabled
         __props__.__dict__["qna_runtime_endpoint"] = qna_runtime_endpoint
         __props__.__dict__["resource_group_name"] = resource_group_name
@@ -1222,7 +1320,9 @@ class Account(pulumi.CustomResource):
     @pulumi.getter(name="customSubdomainName")
     def custom_subdomain_name(self) -> pulumi.Output[Optional[_builtins.str]]:
         """
-        The subdomain name used for token-based authentication. This property is required when `network_acls` is specified. This property is also required when using the OpenAI service with libraries which assume the Azure OpenAI endpoint is a subdomain on `https://openai.azure.com/`, eg. `https://<custom_subdomain_name>.openai.azure.com/`.  Changing this forces a new resource to be created.
+        The subdomain name used for Entra ID token-based authentication. This attribute is required when `network_acls` is specified. This attribute is also required when using the OpenAI service with libraries which assume the Azure OpenAI endpoint is a subdomain on `https://openai.azure.com/`, eg. `https://<custom_subdomain_name>.openai.azure.com/`. This can be specified during creation or added later, but once set changing this forces a new resource to be created.
+
+        > **Note:** If you do not specify a `custom_subdomain_name` then you will not be able to attach a Private Endpoint to the resource. Moreover, functionality that requires Entra ID authentication, including Agent service, will not be accessible.
         """
         return pulumi.get(self, "custom_subdomain_name")
 
@@ -1238,7 +1338,7 @@ class Account(pulumi.CustomResource):
     @pulumi.getter(name="dynamicThrottlingEnabled")
     def dynamic_throttling_enabled(self) -> pulumi.Output[Optional[_builtins.bool]]:
         """
-        Whether to enable the dynamic throttling for this Cognitive Service Account.
+        Whether to enable the dynamic throttling for this Cognitive Service Account. This attribute cannot be set when the `kind` is `OpenAI` or `AIServices`.
         """
         return pulumi.get(self, "dynamic_throttling_enabled")
 
@@ -1270,7 +1370,7 @@ class Account(pulumi.CustomResource):
     @pulumi.getter
     def kind(self) -> pulumi.Output[_builtins.str]:
         """
-        Specifies the type of Cognitive Service Account that should be created. Possible values are `Academic`, `AnomalyDetector`, `Bing.Autosuggest`, `Bing.Autosuggest.v7`, `Bing.CustomSearch`, `Bing.Search`, `Bing.Search.v7`, `Bing.Speech`, `Bing.SpellCheck`, `Bing.SpellCheck.v7`, `CognitiveServices`, `ComputerVision`, `ContentModerator`, `ContentSafety`, `CustomSpeech`, `CustomVision.Prediction`, `CustomVision.Training`, `Emotion`, `Face`, `FormRecognizer`, `ImmersiveReader`, `LUIS`, `LUIS.Authoring`, `MetricsAdvisor`, `OpenAI`, `Personalizer`, `QnAMaker`, `Recommendations`, `SpeakerRecognition`, `Speech`, `SpeechServices`, `SpeechTranslation`, `TextAnalytics`, `TextTranslation` and `WebLM`. Changing this forces a new resource to be created.
+        Specifies the type of Cognitive Service Account that should be created. Possible values are `Academic`, `AIServices`, `AnomalyDetector`, `Bing.Autosuggest`, `Bing.Autosuggest.v7`, `Bing.CustomSearch`, `Bing.Search`, `Bing.Search.v7`, `Bing.Speech`, `Bing.SpellCheck`, `Bing.SpellCheck.v7`, `CognitiveServices`, `ComputerVision`, `ContentModerator`, `ContentSafety`, `CustomSpeech`, `CustomVision.Prediction`, `CustomVision.Training`, `Emotion`, `Face`, `FormRecognizer`, `ImmersiveReader`, `LUIS`, `LUIS.Authoring`, `MetricsAdvisor`, `OpenAI`, `Personalizer`, `QnAMaker`, `Recommendations`, `SpeakerRecognition`, `Speech`, `SpeechServices`, `SpeechTranslation`, `TextAnalytics`, `TextTranslation` and `WebLM`. Changing this forces a new resource to be created.
 
         > **Note:** New Bing Search resources cannot be created as their APIs are moving from Cognitive Services Platform to new surface area under Microsoft.com. Starting from October 30, 2020, existing instances of Bing Search APIs provisioned via Cognitive Services will be continuously supported for next 3 years or till the end of respective Enterprise Agreement, whichever happens first.
 
@@ -1344,6 +1444,14 @@ class Account(pulumi.CustomResource):
         """
         return pulumi.get(self, "network_acls")
 
+    @_builtins.property
+    @pulumi.getter(name="networkInjection")
+    def network_injection(self) -> pulumi.Output[Optional['outputs.AccountNetworkInjection']]:
+        """
+        A `network_injection` block as defined below. Only applicable if the `kind` is set to `AIServices`.
+        """
+        return pulumi.get(self, "network_injection")
+
     @_builtins.property
     @pulumi.getter(name="outboundNetworkAccessRestricted")
     def outbound_network_access_restricted(self) -> pulumi.Output[Optional[_builtins.bool]]:
@@ -1360,6 +1468,14 @@ class Account(pulumi.CustomResource):
         """
         return pulumi.get(self, "primary_access_key")
 
+    @_builtins.property
+    @pulumi.getter(name="projectManagementEnabled")
+    def project_management_enabled(self) -> pulumi.Output[Optional[_builtins.bool]]:
+        """
+        Whether project management is enabled when the `kind` is set to `AIServices`. Once enabled, `project_management_enabled` cannot be disabled. Changing this forces a new resource to be created. Defaults to `false`.
+        """
+        return pulumi.get(self, "project_management_enabled")
+
     @_builtins.property
     @pulumi.getter(name="publicNetworkAccessEnabled")
     def public_network_access_enabled(self) -> pulumi.Output[Optional[_builtins.bool]]:

pulumi_azure/cognitive/outputs.py

@@ -25,6 +25,7 @@ __all__ = [
     'AccountIdentity',
     'AccountNetworkAcls',
     'AccountNetworkAclsVirtualNetworkRule',
+    'AccountNetworkInjection',
     'AccountRaiPolicyContentFilter',
     'AccountStorage',
     'DeploymentModel',
@@ -377,6 +378,8 @@ class AccountCustomerManagedKey(dict):
         """
         :param _builtins.str key_vault_key_id: The ID of the Key Vault Key which should be used to Encrypt the data in this Cognitive Account.
         :param _builtins.str identity_client_id: The Client ID of the User Assigned Identity that has access to the key. This property only needs to be specified when there're multiple identities attached to the Cognitive Account.
+               
+               > **Note:** When `project_management_enabled` is set to `true`, removing this block forces a new resource to be created.
         """
         pulumi.set(__self__, "key_vault_key_id", key_vault_key_id)
         if identity_client_id is not None:
@@ -395,6 +398,8 @@ class AccountCustomerManagedKey(dict):
     def identity_client_id(self) -> Optional[_builtins.str]:
         """
         The Client ID of the User Assigned Identity that has access to the key. This property only needs to be specified when there're multiple identities attached to the Cognitive Account.
+
+        > **Note:** When `project_management_enabled` is set to `true`, removing this block forces a new resource to be created.
         """
         return pulumi.get(self, "identity_client_id")
 
@@ -510,7 +515,7 @@ class AccountNetworkAcls(dict):
         :param _builtins.str default_action: The Default Action to use when no rules match from `ip_rules` / `virtual_network_rules`. Possible values are `Allow` and `Deny`.
         :param _builtins.str bypass: Whether to allow trusted Azure Services to access the service. Possible values are `None` and `AzureServices`.
                
-               > **Note:** `bypass` can only be set when `kind` is set to `OpenAI`
+               > **Note:** `bypass` can only be set when `kind` is set to `OpenAI` or `AIServices`.
         :param Sequence[_builtins.str] ip_rules: One or more IP Addresses, or CIDR Blocks which should be able to access the Cognitive Account.
         :param Sequence['AccountNetworkAclsVirtualNetworkRuleArgs'] virtual_network_rules: A `virtual_network_rules` block as defined below.
         """
@@ -536,7 +541,7 @@ class AccountNetworkAcls(dict):
         """
         Whether to allow trusted Azure Services to access the service. Possible values are `None` and `AzureServices`.
 
-        > **Note:** `bypass` can only be set when `kind` is set to `OpenAI`
+        > **Note:** `bypass` can only be set when `kind` is set to `OpenAI` or `AIServices`.
         """
         return pulumi.get(self, "bypass")
 
@@ -583,7 +588,7 @@ class AccountNetworkAclsVirtualNetworkRule(dict):
                  ignore_missing_vnet_service_endpoint: Optional[_builtins.bool] = None):
         """
         :param _builtins.str subnet_id: The ID of the subnet which should be able to access this Cognitive Account.
-        :param _builtins.bool ignore_missing_vnet_service_endpoint: Whether ignore missing vnet service endpoint or not. Default to `false`.
+        :param _builtins.bool ignore_missing_vnet_service_endpoint: Whether ignore missing vnet service endpoint or not. Defaults to `false`.
         """
         pulumi.set(__self__, "subnet_id", subnet_id)
         if ignore_missing_vnet_service_endpoint is not None:
@@ -601,11 +606,61 @@ class AccountNetworkAclsVirtualNetworkRule(dict):
     @pulumi.getter(name="ignoreMissingVnetServiceEndpoint")
     def ignore_missing_vnet_service_endpoint(self) -> Optional[_builtins.bool]:
         """
-        Whether ignore missing vnet service endpoint or not. Default to `false`.
+        Whether ignore missing vnet service endpoint or not. Defaults to `false`.
         """
         return pulumi.get(self, "ignore_missing_vnet_service_endpoint")
 
 
+@pulumi.output_type
+class AccountNetworkInjection(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "subnetId":
+            suggest = "subnet_id"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in AccountNetworkInjection. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        AccountNetworkInjection.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        AccountNetworkInjection.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 scenario: _builtins.str,
+                 subnet_id: _builtins.str):
+        """
+        :param _builtins.str scenario: Specifies what features network injection applies to. The only possible value is `agent`.
+        :param _builtins.str subnet_id: The ID of the subnet which the Agent Client is injected into.
+               
+               > **Note:** The agent subnet must use an address space in the 172.* or 192.* ranges.
+        """
+        pulumi.set(__self__, "scenario", scenario)
+        pulumi.set(__self__, "subnet_id", subnet_id)
+
+    @_builtins.property
+    @pulumi.getter
+    def scenario(self) -> _builtins.str:
+        """
+        Specifies what features network injection applies to. The only possible value is `agent`.
+        """
+        return pulumi.get(self, "scenario")
+
+    @_builtins.property
+    @pulumi.getter(name="subnetId")
+    def subnet_id(self) -> _builtins.str:
+        """
+        The ID of the subnet which the Agent Client is injected into.
+
+        > **Note:** The agent subnet must use an address space in the 172.* or 192.* ranges.
+        """
+        return pulumi.get(self, "subnet_id")
+
+
 @pulumi.output_type
 class AccountRaiPolicyContentFilter(dict):
     @staticmethod